Privacy Statement and Affected Information acc. Art. 13, 14 EU-GDPR
for the website


The HNC Healthy Nutrition Company GmbH (hereinafter: „HNC“ or „we“) is committed to the protection of your personal data. The processing of your personal data by HNC therefore takes place exclusively within the regulations of the European General Data Protection Regulation (GDPR). On this page we inform you according to Art. 13, 14 GDPR about the processing of your personal data..

Controller for the data processing is the

HNC Healthy Nutrition Company GmbH
Senefelderstr. 44
51469 Bergisch Gladbach
Phone: +49 (0) 22 02/105 - 0
Fax: +49 (0) 22 02/105 - 150


Our data protection officer is

Dr. Jan-Peter Ohrtmann
PricewaterhouseCoopers Legal AG law firm
Moscow street 19
40227 Dusseldorf
Telephone +492119812572


When visiting this website and using the various offers, we process your personal data as described in detail below.

Table of contents

  1. Cookies
  2. Server log files
  3. Google Analytics
  4. Google Maps
  5. Contact form
  6. Transfer of datato recipients
  7. Rights of data subjects


1. Cookies

We use so-called cookies on the websites hosted at (including their subpages). These are small text files which are transferred via your web browser from our web server to your computer and stored there on the permanent memory (hard drive, fixed memory, etc.). The information stored in cookies (e.g. IP address, date and time of the request, web browser used and operating system) is read by us. Below you will find further information on individual cookies used by us.

a) Necessarycookies

Some of these cookies process personal data insofar as this is necessary for the provision of certain functions of the web pages, e.g. when entering data, in order to enable you to navigate on the web pages without having to repeat your entries on each subpage (hereinafter referred to as "necessary cookies"). In this respect, the processing of your personal data takes place on the basis of Art. 6 para. 1 s. 1 lit. b) GDPR, whereby this data is only stored for the duration of your current browser session. You have neither a legal nor a contractual obligation to provide the data collected by necessary, but you cannot use our websites without processing this data.

In the following you will find more detailed information on the necessary cookies used:

Vendor   Storage periodPurpose(s)Privacy policy of the vendor
Google   Up to 30 daysDifferentiation between

b) Functional cookies

In addition, we use cookies to improve the usability of our websites through certain additional functions, e.g. to store language settings, user sessions and data input when switching between different sub-pages ("functional cookies"). In this respect, the processing of your personal data is based on Art. 6 para. 1 s. 1 lit. f) GDPR, as we have a legitimate interest in making it easier for visitors to use our websites. Appropriate technical and organisational measures have been installed to ensure the security of processing while using these cookies. Data in necessary cookies are automatically deleted at the end of your current browser session. Functional cookies can be saved up to 24 hours after the end of the session.

We currently make use of the following functional cookies:

Vendor   Storage periodPurpose(s)Privacy policy of the vendor
Google  Maps30 daysConvenient use of the interactive road

c) Marketing cookies

Finally, we use cookies (including those of third parties) to collect, combine and otherwise process information about your use of our website and services in order to continuously display advertisements and other content on our website and elsewhere (e.g. on other websites or apps) tailored to your personal interests and preferences ("marketing cookies"). These cookies are also used to compile advertisements and other content relevant to you and to measure the efficiency of such content. For this purpose, we evaluate, among other things, which ads were displayed to you, how often they were shown, when and where they were shown and whether orhow you reacted to such content (e.g. by clicking on an ad or purchasing an advertised product).

We currently make use of the following marketing cookies:

Vendor   Storage periodPurpose(s)Privacy policy of the vendor
Google  Analytics30 daysCreate statistics about website

2. Server log files
In addition, each time you visit our website, your browser automatically transmits your IP address, identification (manufacturer, version, operating system) and language settings of your web browser, the time of your visit and visited sub-pages of our website, your referrer URL (i.e. the URL of the page from which you are visiting us), as well as the volume of data generated during your visit to our website (hereinafter "access data"). We process your access data in order to guarantee system security (e.g. to defend against hacker attacks) and to compile usage statistics. These processes are carried out on the basis of our legitimate overriding interest (Art. 6 para. 1 s. 1 lit. f) GDPR). You have neither a legal nor a contractual obligation to provide your access data, nor is this necessary for the conclusion of a contract. However, you must provide us with your access data so that you can access our website and use the offers and services provided on it.

3. Google Analytics

a) Data categories subject to processing, recipients, processing purposes

This website uses Google Analytics, a web analytics service provided by Google Inc. ("Google"). As our processor, Google will process the data collected using Google Analytics in order to analyze your use of the websites, compile reports on respective activities and provide us with further services associated with the use of our website. The statistics obtained in this way enable us to improve our content and make it more interesting for you as a user. Google Analytics uses cookies for this purpose, whereby the information generated by these cookies about your use of this website is generally transferred to a Google server in the USA and stored there.
In general, no personal data is processed when using Google Analytics. Your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases  the full IP address is transmitted to a Google server in the USA and shortened there (for these cases Google has submitted to the EU-US Privacy Shield, available at; we point out that on our web pages Google Analytics was extended by the Plug-In "AnonymizeIP", in order to guarantee an anonymized collection of your IP address also in these exceptional cases, so that your data are not referable to your person.
The IP address transmitted by your browser as part of Google Analytics is not combined with other data from Google.

b) Legal basis, retention period

The legal basis for the use of Google Analytics is Art. 6 para. 1 lit. f) GDPR. Sessions end regularly after 30 minutes of inactivity and campaigns end after six months; campaign data can be stored for a maximum of two years.

c) Right to object

If Google Analytics processes your data in personal form, you can object to this at any time - in this case this processing will be stopped immediately.
In particular, you can send your informal objection to our data protection officer:, Krüger GmbH & Co. KG, Rechtsabteilung, Senefelderstraße 44, 51469 Bergisch Gladbach.

You can also exercise your right of objection in particular by preventing the storage of cookies used by Google Analytics by configuring your browser software accordingly (further information on this can be found here); however, we would like to point out that in this case you may not be able to use all the functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address) and from processing this data by downloading and installing the browser plug-in available at the following link:
Please note that you are leaving our website by doing so.

d) Information of Google

Google Dublin, Google Ireland Ltd.
Gordon House, Barrow Street, Dublin 4, Ireland
Fax: +353 (1) 436 1001


4. Google Maps

On this website we use the services of Google Maps. This enables us to display interactive maps directly on the website and enables you to use the map function conveniently.
By visiting the website, Google receives the information that you have accessed the corresponding subpage of our website. This occurs regardless of whether Google provides a user account that you are logged in to or whether there is no user account.
When you're logged in to Google, your information will be directly associated with your account. If you do not want your profile to be associated with Google, you must log out before activating the button. Google stores your data as user profiles and uses them for the purposes of advertising, market research and/or the design of its website in line with requirements. Such evaluation is carried out in particular (even for users who are not logged in) in order to provide demand-oriented advertising and to inform other users of the social network about your activities on our website. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 s. 1 lit. f) GDPR.
You have the right to object to the creation of these user profiles, for which you have to address to Google.
Further information on the purpose and scope of data collection and processing by the plug-in provider can be found in the provider's privacy policy. There you will also find further information on your rights in this regard and be able to set options to protect your privacy: Google also processes your personal data in the United States and has submitted to the EU-US Privacy Shield,


5. Contact form
You have the option of contacting us directly via a contact form provided on our website. In this case, you must provide your name, e-mail address and a subject for your request. We also offer you the opportunity to contact us directly via e-mail. If you click on the "E-Mail" button on our website, your e-mail program will open and you can send us a message to our pre-entered e-mail address. If you contact us via e-mail or web form, we will also collect your IP address and the time at which you send us your message. We use the information you send us via contact form or e-mail exclusively to process your request. The legal basis for this processing is Art. 6 para. 1 s. 1 lit. b) GDPR. We process your IP address and the time of your request in order to identify and defend against automated access and hacker attacks. The legal basis for this processing is Art. 6 para. 1 s. 1 lit. f) GDPR. In principle, we delete this data at the end of one week after your request has been answered or otherwise dealt with; in individual cases, however, we keep this data for longer if we are legally entitled or obliged to do so (e.g. by virtue of commercial or tax retention periods).

6. Transfer of data to recipients
Your personal data will not be transferred to third parties without your consent unless we are legally obliged to disclose this data (e.g. to provide information to law enforcement authorities and courts; information to public bodies that receive data on the basis of statutory regulations, e.g. social insurance institutions, financial authorities, etc.) or unless we involve third parties obliged to maintain professional secrecy in order to enforce our claims.

7. Rights of data subjects
In the following we would like to inform you about the further rights to which you are entitled as a data subject according to Art. 15-21 and Art. 77 para. 1 GDPR. In order to assert these rights, you can contact our data protection officer by e-mail in particular.

a) Right of access:

Pursuant to Art. 15 GPDR, you have the right to obtain information on data processing and a copy of the data processed. Within this context you also have the right to receive a copy of your personal data processed by us in accordance with Art. 15 para. 3-4 GDPR.

b) Right to rectification:

In accordance with Art. 16 GDPR, you have the right to demand that we correct or complete your personal data.

c) Right to erasure:

In accordance with Art. 17 para. 1 GDPR you have the right to demand that we erase your personal data. If we have published your personal data, you also have the right, in accordance with Art. 17 para. 2 GDPR, to request that we inform other controllers of your request to delete all links to and/or copies or replications of your personal data.

d) Right to restriction of processing:

In accordance with Art. 18 para 1-3 GDPR, you have the right to demand that we restrict the processing of your personal data.

e) Right to data portability:

Pursuant to Art. 20 GDPR, you have the right to receive the personal data about yourself that you have provided to us in a structured, commonly used and machine-readable format and to request the transfer of this data to another controller.

f) Right to withdraw consent:

If you have given us your consent to process your personal data, you can withdraw this consent at any time, in its entirety or with regard to individual processing purposes, in each case without giving reasons.
Please note that a lawful processing of your personal data, which has taken place until the time of your revocation, will not be retroactively unlawful by this.
You may withdraw your consent in particular by send a respective e-mail to
In the event of withdrawal of your consent given for a specific service, you can no longer use the corresponding service; beyond that, you will not suffer any disadvantages.

If you wish to withdraw your consent only for certain processing and usage purposes, we would like to ask you to indicate this by naming the corresponding purpose when you withdraw your consent (e.g. as "withdrawal of consent with regard to the contact form" if you wish to withdraw your consent only with regard to the processing of your data for this purpose). If you do not specify your revocation in more detail or if you expressly declare it to be comprehensive, we will assume that you will revoke your consent to all collections, processes and uses explained in this privacy policy.

g) Right to object:

Pursuant to Art. 21 GDPR, you have the right to object to the processing of your personal data by us insofar as this is carried out for the purpose of direct advertising and/or on the basis of a "legitimate interest" within the meaning of Art. 6 para. 1 s. 1 lit. f) GDPR.

h) Lodging a complaint with a supervisory authority:

According to Art. 77 para. 1 GDPR, you have the right to lodge a complaint with a supervisory authority against the processing of your personal data by us if you are of the opinion that the processing of your personal data violates data protection regulations.

The competent supervisory authority for the federal state of North Rhine-Westphalia (Nordrhein-Westfalen) is the:

Landesbeauftragte für Datenschutz und Informationsfreiheit
Postfach 20 04 44
40102 Düsseldorf
Deutschland (Germany)

Tel.: 0211/38424-0
Fax: 0211/38424-10

Additionally, you have the option of asserting other legal remedies to which you are entitled (e.g. with courts or authorities).

Privacy policy (Website), HNC Healthy Nutrition Company GmbH, Status: February 2019