Privacy policy

Privacy policy

As of July 2026

1. Data Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Prof. George Birkmayer NADH® GmbH Schwarzspanierstraße 15/1/7 1090 Vienna, Austria Phone: +43 1 361 69 96 Email: office@nadh-austria.at, FN 390917d, Vienna Commercial Court, VAT ID ATU67682457

(hereinafter “we,” “us,” or “NADH Austria”)

You can contact our customer service department with any questions regarding data protection at the email address listed above. Our company has not currently appointed a data protection officer as required by law.

2. General Information on Data Processing

As a general rule, we process the personal data of our users and customers only to the extent necessary to provide our website and online store, as well as our content and services. Processing generally takes place only with the user’s consent or to the extent permitted by law. The legal bases include, in particular:

  • Art. 6(1)(a) of the GDPR – Consent (e.g., cookies, newsletters)
  • Art. 6(1)(b) of the GDPR – Performance of a contract and precontractual measures (e.g., order processing)
  • Art. 6(1)(c) of the GDPR – legal obligation (e.g., retention requirements under tax and commercial law)
  • Art. 6(1)(f) of the GDPR – legitimate interest (e.g., fraud prevention, audience measurement)

Personal data will be deleted as soon as the purpose for which it was stored no longer applies, provided that there are no statutory retention requirements (in particular, § 132 BAO and § 212 UGB—up to 7 years for accounting records) that preclude such deletion.

3. Website Provision / Server Log Files

Every time you visit our website, our hosting or online store system automatically collects data and information in so-called server log files (including IP address, date and time of access, browser and operating system used, page accessed, and referrer URL). This data cannot be linked to specific individuals and is analyzed solely to ensure trouble-free operation and system security (Art. 6(1)(f) GDPR).

4. Hosting / E-commerce Platform (Shopify)

Our online store is technically operated via the Shopify platform, provided by Shopify International Limited, Dublin, Ireland, and Shopify Inc., Ottawa, Canada. Shopify processes, on our behalf, all data necessary for operating the store, displaying content, processing orders, and handling payments. This may involve the transfer of data to the United States or to third-party providers outside the EU/EEA. Shopify has committed to complying with the EU Standard Contractual Clauses (Art. 46 GDPR). For details, please refer to Shopify’s Privacy Policy: https://www.shopify.com/legal/privacy

5. Cookies

We use cookies on our website. Cookies are small text files that are stored on your device. We distinguish between:

  • Essential cookies: technically necessary for the operation of the store (e.g., shopping cart, login, security). The legal basis is Article 6(1)(f) of the GDPR (legitimate interest in error-free operation).
  • Statistics and Marketing Cookies: These are set only with your explicit consent (Art. 6(1)(a) of the GDPR) and are used for audience measurement and personalized advertising.

Consent is managed using the “beeclever GDPR Legal Cookie” consent tool . When you first visit our website, you can use the cookie banner to select which categories you wish to allow; you can change or revoke your selection at any time via the cookie settings in the website footer.

5.1 Google Analytics  

We use the web analytics service Google Analytics, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses cookies that enable us to analyze how our website is used. Google truncates IP addresses within the EU. The legal basis is your consent (Art. 6(1)(a) GDPR). For more information: https://policies.google.com/privacy

5.2 Meta/Facebook Pixel  

We use the “Meta Pixel” from Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, to measure the effectiveness of our advertisements. The legal basis for this is your consent (Art. 6(1)(a) GDPR). For more information: https://www.facebook.com/privacy/policy/

5.3 Google Ads Conversion Tracking  

We use Google Ads conversion tracking, provided by Google Ireland Limited, to measure the success of our advertising campaigns. The legal basis for this is your consent (Art. 6(1)(a) of the GDPR).

6. Order Process / Contract Fulfillment

When you place an order, we collect and process the data necessary for contract fulfillment (name, billing and shipping addresses, email address, phone number, payment information, order details). The legal basis for this is Article 6(1)(b) of the GDPR. The data is shared with the following recipients for the purposes of order processing, payment processing, and shipping, to the extent necessary for the respective service:

  • Shipping service providers for delivery, such as Austrian Post, DHL
  • Payment service providers, depending on the payment method you select, such as Apple Pay, BLIK, EPS, Google Pay, Klarna, Maestro, Mastercard, MobilePay, PayPal, and Visa. The terms and conditions and privacy policy of the selected provider apply in each case, including:
  • PayPal: PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg – https://www.paypal.com/de/webapps/mpp/ua/privacy-full
  • Klarna: Klarna Bank AB, Sweden – https://www.klarna.com/de/datenschutz/
  • Tax Consulting / Bookkeeping to Comply with Legal Record-Retention Requirements

The data will not be disclosed to third parties for any purposes other than those specified.

7. Customer Account

When you create a customer account, we store the information you provide (name, address, email, order history) to make future purchases easier for you. The legal basis for this is Article 6(1)(b) of the GDPR. You can have your customer account deleted at any time; to do so, simply send an informal request to office@nadh-austria.at.

8. Contact Us / Consultation Form

If you contact us via our contact or consultation form (“Consultation”) or by email, we will process the data you provide (name, email address, message content) to handle your inquiry. The legal basis is Article 6(1)(b) or (f) of the GDPR (pre-contractual inquiry or legitimate interest in processing).

9. Newsletter  

When you sign up for our newsletter, we use the internal Shopify Messaging app to send you regular updates about our products via your email address. Subscription is handled via a double opt-in process: You will receive a confirmation email after signing up. The legal basis for this is your consent (Art. 6(1)(a) GDPR). You can unsubscribe from the newsletter at any time by clicking the unsubscribe link in any email or by sending a message to office@nadh-austria.at.

10. Social Media

On our website, we provide links to our Instagram and Facebook profiles (Meta Platforms Ireland Limited). These are simply links; they are not embedded plugins. Simply clicking on them does not transmit any data to the respective platforms unless you actively follow the link.

11. Your Rights as a Data Subject

Under applicable law, you have the right at any time to:

  • Information About Your Stored Personal Data (Art. 15 GDPR)
  • Rectification of Inaccurate Data (Art. 16 of the GDPR)
  • Deletion of Your Data (Art. 17 of the GDPR)
  • Restriction of Processing (Art. 18 GDPR)
  • Data Portability (Art. 20 of the GDPR)
  • Objection to Processing (Art. 21 GDPR)
  • Withdrawal of Consent with Future Effect (Art. 7(3) GDPR)

To exercise these rights, please contact: office@nadh-austria.at

In addition, you have the right to file a complaint with the relevant supervisory authority:

Austrian Data Protection Authority Barichgasse 40-42, 1030 Vienna Phone: +43 1 52 152-0 Email: dsb@dsb.gv.at Website: https://www.dsb.gv.at

12. Data Security

During your visit to our website, we use the widely adopted SSL/TLS encryption protocol in conjunction with the highest encryption level supported by your browser. We also implement appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction, or unauthorized access by third parties.

13. Changes to This Privacy Policy

We reserve the right to amend this Privacy Policy to ensure that it always complies with current legal requirements or to reflect changes to our services in the Privacy Policy. The new Privacy Policy will then apply to your next visit.