PRIVACY POLICY

General Information

The protection of your personal data is very important to us. This Privacy Policy explains how personal data is collected, used, and protected when you visit this website, in accordance with the General Data Protection Regulation (GDPR) and applicable German data protection laws.

Controller (Data Controller):
Karolina Bednarova
KB Performance Nutrition
[Street + Number]
[Postal Code, City]
Germany
Email: hello@karolinabednarova.com

Data Collection on This Website

a) Server Log Files

When you visit this website, information is automatically collected by the hosting provider and stored in server log files. This may include:

• Browser type and version
• Operating system
• Referrer URL
• Host name of the accessing device
• Date and time of the request
• IP address

This data is processed to ensure the technical stability and security of the website. The legal basis is Art. 6(1)(f) GDPR (legitimate interest).

b) Contact via Email or Contact Form

If you contact us via email or a contact form, the data you provide (such as name, email address, and message content) will be stored for the purpose of processing your request. The legal basis for this processing is Art. 6(1)(b) GDPR (performance of a contract or pre-contractual measures) or Art. 6(1)(f) GDPR (legitimate interest).

Cookies

This website uses cookies. Cookies are small text files stored on your device.

• Essential cookies are necessary for the operation of the website.
• Optional cookies (e.g. analytics or marketing) are only used with your explicit consent.

The legal basis for essential cookies is Art. 6(1)(f) GDPR.
The legal basis for optional cookies is Art. 6(1)(a) GDPR (consent). You can withdraw your consent at any time via the cookie settings.

---

Analytics & Tracking Tools

If analytics or tracking tools (e.g. Google Analytics, Meta Pixel) are used, they are activated only after consent via the cookie banner. Data processing is based on Art. 6(1)(a) GDPR. You can withdraw your consent at any time.

Third-Party Services

This website may use third-party services such as:

• Website hosting providers
• Email newsletter services
• Embedded content (e.g. videos or social media)

Personal data is only shared with these providers to the extent necessary and in compliance with GDPR. Where data is transferred outside the EU, appropriate safeguards are applied.

Data Retention

Personal data is stored only as long as necessary to fulfill its purpose or as required by legal retention obligations.

Your Rights Under GDPR

You have the right to:

• Access your personal data (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure of your data (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Object to processing (Art. 21 GDPR)

You also have the right to lodge a complaint with a supervisory authority.

Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, or misuse.

Changes to This Privacy Policy

This Privacy Policy may be updated to reflect legal or technical changes. The current version published on this website applies.