{"id":122,"date":"2026-06-17T07:47:30","date_gmt":"2026-06-17T07:47:30","guid":{"rendered":"https:\/\/sunpept.com\/datenschutz\/"},"modified":"2026-11-06T13:06:13","modified_gmt":"2026-11-06T12:06:13","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/sunpept.com\/en\/datenschutz\/","title":{"rendered":"Privacy policy"},"content":{"rendered":"<p><em>Version: August 2026<\/em><\/p>\n<h2>1. Controller<\/h2>\n<p>The controller within the meaning of the General Data Protection Regulation (GDPR) is:<\/p>\n<p><strong>Mokapoko s.r.o.<\/strong><br \/>\nSanderova 1616\/16<br \/>\n170 00 Praha 7 \u2013 Hole\u0161ovice<br \/>\nCzech Republic<br \/>\nI\u010cO 19938365<br \/>\nAuthorized representative: Managing Director Helvija Balode<br \/>\nEmail: <a href=\"mailto:support@sunpept.com\">support@sunpept.com<\/a> \u00b7 Phone: <a href=\"tel:+420777173380\">+420 777 173 380<\/a><\/p>\n<p>We have not appointed a data protection officer because we are not legally required to do so. For data protection inquiries, you can reach us at the email address above.<\/p>\n<h2>2. General information on data processing<\/h2>\n<p>We process personal data only if this is necessary to provide the website, its content, and services, or insofar as there is a legal basis under Art. 6 GDPR.<\/p>\n<p>The legal bases are in particular:<\/p>\n<ul>\n<li>Art. 6(1)(a) GDPR \u2014 consent (e.g., for marketing cookies)<\/li>\n<li>Art. 6(1)(b) GDPR \u2014 performance of a contract (e.g., order processing)<\/li>\n<li>Art. 6(1)(c) GDPR \u2014 legal obligation (e.g., retention obligations)<\/li>\n<li>Art. 6(1)(f) GDPR \u2014 legitimate interest (e.g., secure provision of the website)<\/li>\n<\/ul>\n<h2>3. Hosting &#038; server logs<\/h2>\n<p>Unsere Website und unsere E-Mail-Postf\u00e4cher werden bei der <strong>1984 ehf.<\/strong> (1984 Hosting), Reykjav\u00edk, Island, gehostet. Island ist Mitglied des Europ\u00e4ischen Wirtschaftsraums (EWR); die DSGVO gilt dort unmittelbar. Beim Aufruf werden technisch bedingt folgende Daten in Server-Logs erfasst:<\/p>\n<ul>\n<li>IP address (truncated \/ short-term)<\/li>\n<li>Date and time of access<\/li>\n<li>Requested URL, HTTP status code, amount of data transferred<\/li>\n<li>Referrer URL<\/li>\n<li>User agent (browser, operating system)<\/li>\n<\/ul>\n<p>Legal basis: Art. 6(1)(f) GDPR (provision, security, and stability). Deletion: after 14 days, unless security-relevant incidents require longer retention.<\/p>\n<p>Mit 1984 ehf. besteht ein Auftragsverarbeitungsvertrag nach Art. 28 DSGVO.<\/p>\n<h2>4. Cookies &amp; consent management (Complianz)<\/h2>\n<p>We use cookies and similar technologies. Technically necessary cookies (e.g., cart, session, consent storage) are set without consent on the basis of Art. 6(1)(f) GDPR. All other cookies \u2013 in particular for statistics and marketing \u2013 are set only after your active consent (Art. 6(1)(a) GDPR).<\/p>\n<p>For consent management, we use the plugin <strong>Complianz<\/strong> (Complianz B.V., NL). Complianz stores your consent decision in a local cookie in your browser and \u2013 for documentation purposes \u2013 in anonymized form in our database. You can revoke or change your selection at any time via the \u201cCookie settings&#8220; link in the footer.<\/p>\n<h2>5. Contacting us<\/h2>\n<p>If you contact us by email (<a href=\"mailto:support@sunpept.com\">support@sunpept.com<\/a>) or via the contact page, we process your information (name, email, message content) to handle your inquiry. Legal basis: Art. 6(1)(b) GDPR for contract-related inquiries, otherwise Art. 6(1)(f) GDPR. Storage until the matter is finally resolved, at most for the duration of statutory retention periods.<\/p>\n<h2>6. Customer account &amp; order processing (WooCommerce)<\/h2>\n<p>To process your order, we process the following data (WooCommerce, Automattic Inc.): first and last name, company name if applicable, billing and shipping address, email address, phone number, order contents, order history, IP address at order completion, time of RUO confirmation, payment data (see Section 8).<\/p>\n<p>Legal basis: Art. 6(1)(b) GDPR (performance of contract) and Art. 6(1)(c) GDPR (retention obligations under tax and commercial law).<\/p>\n<p>Retention period: at least 10 years in accordance with Czech and German commercial and tax law (retention of invoices, \u00a7 147 AO \/ \u00a7 257 HGB \/ cf. \u00a7 35 Czech Accounting Act).<\/p>\n<h2>7. RUO confirmation at checkout<\/h2>\n<p>As proof of the exclusively research-related purpose of the order, we store your confirmation checkbox together with a timestamp and IP address at the time of ordering. Legal basis: Art. 6(1)(c) GDPR (compliance with the HWG\/AMG demarcation) and Art. 6(1)(f) GDPR (legitimate interest in preventing misuse). Stored together with the order.<\/p>\n<h2>8. Payment processing<\/h2>\n<p>Currently, we offer only <strong>prepayment by bank transfer<\/strong> . Payment is made via your own bank to our business account at \u010cesk\u00e1 spo\u0159itelna, a.s. (Prague). In doing so, we process your name, the amount, the payment reference (order number), and the account details transmitted to us with the incoming payment. No data is passed on to other payment service providers. Legal basis: Art. 6(1)(b) and (c) GDPR.<\/p>\n<h2>9. Shipping service provider (Packeta \/ Z\u00e1silkovna)<\/h2>\n<p>To deliver your order, we pass on your name, delivery address, email address, and phone number to <strong>Z\u00e1silkovna s.r.o.<\/strong> (Packeta), Lihovarsk\u00e1 1060\/12, 190 00 Praha 9, Czech Republic. Purpose: delivery including tracking notifications. Legal basis: Art. 6(1)(b) GDPR. <a href=\"https:\/\/www.zasilkovna.cz\/gdpr\" target=\"_blank\" rel=\"noopener\">Packeta privacy policy<\/a>.<\/p>\n<h2>10. Sending emails<\/h2>\n<p>We send order confirmations, invoices, and other service emails via the email server of our provider <strong>ALL-INKL.COM \u2013 Neue Medien M\u00fcnnich<\/strong>, Hauptstra\u00dfe 68, 02742 Friedersdorf, Germany. Your email address, your name, and the content of the respective message are processed. Legal basis: Art. 6(1)(b) GDPR.<\/p>\n<h2>11. Review invitations (Trustpilot)<\/h2>\n<p>After completing your order, you may receive an email from <strong>Trustpilot A\/S<\/strong>, Pilestr\u00e6de 58, 5th floor, 1112 Copenhagen K, Denmark, inviting you to review your purchase. For this purpose, we transmit your name, email address, and order number to Trustpilot. The legal basis is our legitimate interest in customer feedback and in displaying independent reviews (Art. 6(1)(f) GDPR). You can object to this use at any time \u2013 informally by email to <a href=\"mailto:support@sunpept.com\">support@sunpept.com<\/a> or via the unsubscribe link in the invitation \u2013 without incurring any costs other than the transmission costs at the basic rates. <a href=\"https:\/\/legal.trustpilot.com\/for-reviewers\/end-user-privacy-terms\" target=\"_blank\" rel=\"noopener\">Trustpilot privacy policy<\/a>.<\/p>\n<h2>12. Translation (TranslatePress)<\/h2>\n<p>For multilingual support, we use the plugin <strong>TranslatePress<\/strong> (Cozmoslabs, Romania). It sets technically necessary cookies for language selection. No personal data is passed on to third parties. Legal basis: Art. 6(1)(f) GDPR.<\/p>\n<h2>13. Server cache (Redis)<\/h2>\n<p>Wir setzen einen Server-seitigen Object-Cache (Redis, lokal auf unserem eigenen Hosting-Server betrieben) ein, um die Ladezeit der Seite zu beschleunigen. Es werden keine personenbezogenen Daten in verwertbarer Form persistiert; der Cache l\u00e4uft ausschlie\u00dflich auf dem Hosting-Server. Rechtsgrundlage: Art. 6 Abs. 1 lit. f DSGVO.<\/p>\n<h2>14. Your rights as a data subject<\/h2>\n<p>Under the GDPR, you have the following rights:<\/p>\n<ul>\n<li>Right of access (Art. 15 GDPR)<\/li>\n<li>Right to rectification (Art. 16 GDPR)<\/li>\n<li>Right to erasure (Art. 17 GDPR)<\/li>\n<li>Right to restriction of processing (Art. 18 GDPR)<\/li>\n<li>Right to data portability (Art. 20 GDPR)<\/li>\n<li>Right to object (Art. 21 GDPR)<\/li>\n<li>Withdrawal of consent given, with effect for the future (Art. 7(3) GDPR)<\/li>\n<\/ul>\n<p>To exercise your rights, simply send an informal message to <a href=\"mailto:support@sunpept.com\">support@sunpept.com<\/a>.<\/p>\n<h2>15. Right to lodge a complaint with a supervisory authority<\/h2>\n<p>You have the right to lodge a complaint with a data protection supervisory authority about our processing of your personal data (Art. 77 GDPR). The authority responsible for us is:<\/p>\n<p><strong>\u00da\u0159ad pro ochranu osobn\u00edch \u00fadaj\u016f (\u00daOO\u00da)<\/strong><br \/>\nPplk. Sochora 27, 170 00 Praha 7, Czech Republic<br \/>\n<a href=\"https:\/\/www.uoou.cz\" target=\"_blank\" rel=\"noopener\">www.uoou.cz<\/a><\/p>\n<p>Consumers from Germany may alternatively contact the state data protection authority of their place of residence or the <strong>Federal Commissioner for Data Protection and Freedom of Information (BfDI)<\/strong> .<\/p>\n<h2>16. Data transfers to third countries<\/h2>\n<p>Your data is currently not transferred to countries outside the EEA. Should this become necessary in the future (e.g., due to new services), it will only take place with your consent or on the basis of appropriate safeguards. In such cases, we rely on the EU-U.S. Data Privacy Framework (for certified providers) and\/or standard contractual clauses pursuant to Art. 46(2)(c) GDPR. A level of protection fully equivalent to that in the EU cannot be guaranteed in all third countries.<\/p>\n<h2>17. Data security<\/h2>\n<p>The website is SSL\/TLS-encrypted throughout (HTTPS). As payment is made exclusively by bank transfer, no payment data such as card or account login details are collected or stored on our website.<\/p>\n<h2>18. Changes to this privacy policy<\/h2>\n<p>We reserve the right to amend this privacy policy so that it always complies with current legal requirements or to reflect changes to our services. The new privacy policy will then apply to your next visit.<\/p>\n<p><em>This privacy policy was carefully prepared based on the tools currently active in the shop.<\/em><\/p>","protected":false},"excerpt":{"rendered":"<p>Fassung: August 2026 1. Verantwortlicher Verantwortlicher im Sinne der Datenschutz-Grundverordnung (DSGVO) ist: Mokapoko s.r.o. Sanderova 1616\/16 170 00 Praha 7 \u2013 Hole\u0161ovice Tschechische Republik I\u010cO 19938365 Vertretungsberechtigt: Gesch\u00e4ftsf\u00fchrerin Helvija Balode E-Mail: support@sunpept.com \u00b7 Telefon: +420 777 173 380 Wir haben keinen Datenschutzbeauftragten benannt, weil wir gesetzlich hierzu nicht verpflichtet sind. F\u00fcr datenschutzrechtliche Anfragen erreichen Sie [&hellip;]<\/p>\n","protected":false},"author":0,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-122","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/sunpept.com\/en\/wp-json\/wp\/v2\/pages\/122","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/sunpept.com\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/sunpept.com\/en\/wp-json\/wp\/v2\/types\/page"}],"replies":[{"embeddable":true,"href":"https:\/\/sunpept.com\/en\/wp-json\/wp\/v2\/comments?post=122"}],"version-history":[{"count":0,"href":"https:\/\/sunpept.com\/en\/wp-json\/wp\/v2\/pages\/122\/revisions"}],"wp:attachment":[{"href":"https:\/\/sunpept.com\/en\/wp-json\/wp\/v2\/media?parent=122"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}