Privacy Policy (GDPR / DSGVO)
We are committed to protecting your personal data in accordance with the EU General Data Protection Regulation (GDPR) and, where applicable, the German Federal Data Protection Act (Bundesdatenschutzgesetz / DSGVO). This section explains how your data is processed when you use this website, in particular the sample request and B2B order forms.
Data Controller
VitalEarth
[Company legal name & registration number — to be completed]
[Registered address — to be completed]
Email: info@jevmc.com
If a Data Protection Officer (DPO) is appointed, their contact details will be listed here.
What Data We Collect
When you submit the Sample Request or B2B Order form, we collect:
- Full name
- Email address
- Phone number (optional)
- Delivery / shipping address
- Company name and job position (B2B form only)
- Product preferences, quantities, and order specifications you provide
- Any message or additional notes you choose to include
- Technical data submitted by hCaptcha to verify you are not a bot (IP address, browser signals — processed by hCaptcha, see Section 6)
We do not collect payment information through this website. We do not use cookies or scripts to track your browsing behaviour across other websites.
Legal Basis & Purpose of Processing
We process the data described above for the following purposes and legal bases (Art. 6 GDPR):
- Responding to your sample or B2B enquiry — Art. 6(1)(b) GDPR, performance of a contract or pre-contractual measures taken at your request.
- Shipping samples to the address you provide — Art. 6(1)(b) GDPR.
- Preventing spam and abuse via hCaptcha — Art. 6(1)(f) GDPR, our legitimate interest in protecting our forms and infrastructure from automated abuse.
- Maintaining records of business communications — Art. 6(1)(f) GDPR, legitimate interest in maintaining accurate business correspondence, and where applicable Art. 6(1)(c) for statutory retention obligations.
Third-Party Services
We use the following third-party services to operate this website and process form submissions:
hCaptcha
Used on our forms to distinguish human submissions from automated bots. hCaptcha may process your IP address and browser data. See the hCaptcha Privacy Policy.
Email delivery provider
Form submissions are sent via our transactional email provider to info@jevmc.com for processing your request. [Provider name — to be completed, e.g. Postmark, SES, Mailgun].
Google Fonts
Typefaces (Cormorant Garamond, DM Sans) are loaded from Google Fonts servers, which may process your IP address. [If self-hosting fonts, remove this row.]
Image hosting
Some imagery is served from Unsplash and a third-party media CDN (R2 storage), which may log standard request data (IP address, user agent) as part of normal content delivery.
Data Retention
We retain personal data submitted through our forms only for as long as necessary to fulfil the purposes described above, typically:
- Sample requests and B2B enquiries: retained for the duration of the business relationship and a reasonable period afterward for follow-up, plus any statutory retention periods applicable under German commercial and tax law (typically 6–10 years for business correspondence and invoices, per § 257 HGB / § 147 AO).
- Form submissions that do not result in a business relationship: deleted after a reasonable period, generally no longer than 24 months.
Your Rights
Under the GDPR, you have the right to:
- Access — request a copy of the personal data we hold about you (Art. 15).
- Rectification — request correction of inaccurate or incomplete data (Art. 16).
- Erasure — request deletion of your data, where applicable ("right to be forgotten") (Art. 17).
- Restriction — request that we limit processing of your data under certain conditions (Art. 18).
- Data portability — receive your data in a structured, machine-readable format (Art. 20).
- Objection — object to processing based on legitimate interests (Art. 21).
- Lodge a complaint — with your local data protection supervisory authority.
To exercise any of these rights, contact us at info@jevmc.com. We will respond within one month as required by Art. 12(3) GDPR.
General Disclaimer
The information provided on this website, including product descriptions, certifications, and health-related claims, is provided in good faith for general informational purposes only. Functional product claims (Hibiscus RTD range) are based on EFSA-authorised health claim mechanisms under EU Regulation 1924/2006 and Regulation (EU) No. 432/2012, Art. 13.1, where indicated. These claims relate to the function of nutrients (e.g. Vitamin C) and not to the diagnosis, treatment, or prevention of any disease.
Certification references (BIO / organic, EUDR-readiness, EFSA compliance) reflect the supply chain standards we apply and the certifications held by our suppliers and products at the time of publication. Certificates are available upon request for B2B partners.
While we strive to keep all information accurate and up to date, we make no warranties of any kind, express or implied, about the completeness, accuracy, reliability, or availability of the website or the information, products, or services contained on it for any purpose.
Contact
For any questions regarding this Privacy Policy, cookies, or to exercise your data protection rights, please contact us at: