Data protection information

Data protection is very important to us. Our website cantherefore be used without providing personal data. We do not process anypersonal data when you visit the website, unless this is absolutely necessaryto carry out the data transfer. We also do not use web analytics. The use ofthe contact form is voluntary and serves exclusively to initiate a businessrelationship. In particular, we do not pass on personal data that we havereceived from you in this or any other way to third parties and delete it immediately,unless we are legally obliged to retain it.

Below we provide you with an overview of the mandatoryinformation in accordance with Art. 13 GDPR:

1. Name and address of the controller

The controller responsible for processing your personal datais

Active Nutrition International GmbH

Stefan Geisenberger, Craig Rosenthal

Zielstattstraße 38

81379 München

Deutschland

Telefon: +49 (0) 89 50 200 71

E-Mail: info@ani-eu.com

Website: https://active-nutrition-international.com

2. Processing when accessing the website

When you visit our website, the browser used on your deviceautomatically sends information to our website server. We only process your IPaddress and the information transmitted by your browser (browser type used,operating system used, visitor origin, sub-pages clicked on, date and time ofaccess, etc.) to deliver the pages you have requested. We delete our server logfiles after 6 months at the latest. The legal basis for data processing is Art.6 para. 1 sentence 1 lit. b GDPR.

3. Processing when using our B2B Shop

When using the B2B shop, the following personal data isprocessed:

• Login name
• your password
• Date of last order
• Surname
• First name
• e-mail address
• Language
• Customer assignment (customer number)
• Various settings used in the frontend
• Contact type
• Meta data (last login, etc.)

The information is collected from ANI's ERP system.

In addition to the personal data mentioned, furtherinformation is collected, for example about orders placed (article, quantity,customer, customer, discounts, order total), the order status or paymentinformation. Depending on the type of contact, other company-related data isalso stored that is linked to the above-mentioned personal data.

The legal basis for the processing is Art. 6 para. 1 lit. bGDPR. The purpose of processing is the fulfilment of contracts concluded viathe B2B shop. The personal data will be deleted as soon as the processingpurpose no longer applies and there are no retention periods to the contrary.

4. Contact form

You also have the option of contacting us via our shopsystem. We process your name, your e-mail address and your request. The legalbasis for the processing is Art. 6 para. 1 lit. b GDPR. The purpose ofprocessing is the fulfilment of contracts concluded via the B2B shop andpre-contractual correspondence. The personal data will be deleted as soon asthe processing purpose no longer applies and there are no retention periods tothe contrary.

5. Transmission of data

As a matter of principle, your personal data will not betransferred to third parties. Exceptions can arise if:

1. you havegiven your express consent in accordance with Art. 6 Para. 1 S. 1 lit. a GDPR,
2. thedisclosure is necessary for the assertion, exercise or defence of legal claimspursuant to Art. 6 para. 1 p. 1 lit. f GDPR and there is no reason to assumethat you have an overriding interest worthy of protection in the non-disclosureof your data,
3. in theevent that there is a legal obligation for the disclosure in accordance withArt. 6 para. 1 p. 1 lit. c GDPR,
4. this islegally permissible and necessary for the processing of contractualrelationships with you according to Art. 6 para. 1 p. 1 lit. b GDPR or
5. thisis carried out by a service provider acting on our behalf and on our exclusiveinstructions, whom we have carefully selected (Art. 28 (1) GDPR) and with whomwe have concluded a corresponding contract on commissioned processing (Art. 28(3) GDPR), which obliges our contractor, among other things, to implementappropriate security measures and grants us comprehensive control powers.

5. Transmission of data

As a matter of principle, your personal data will not betransferred to third parties. Exceptions can arise if:

6. Data subject rights and right of appeal

As a data subject of a processing of personal data, you havethe right,

1. to requestinformation about your personal data processed by us in accordance with Art. 15of the GDPR. In particular, you can request information about the processingpurposes, the category of personal data, the categories of recipients to whomyour data have been or will be disclosed, the planned storage period, theexistence of a right to rectification, erasure, restriction of processing orobjection, the existence of a right of complaint, the origin of your data if ithas not been collected by us, as well as the existence of automateddecision-making including profiling and, if applicable, meaningful informationabout its details;
2. inaccordance with Art. 16 of the GDPR, to request the correction of incorrect orincomplete personal data stored by us without delay;
3. inaccordance with Article 17 of the GDPR, to request the erasure of your personaldata stored by us, unless the processing is necessary for the exercise of theright to freedom of expression and information, for compliance with a legalobligation, for reasons of public interest, or for the establishment, exerciseor defence of legal claims;
4. pursuantto Art. 18 GDPR, to request the restriction of the processing of your personaldata, insofar as the accuracy of the data is disputed by you, the processing isunlawful, but you object to its erasure and we no longer require the data, butyou need it for the assertion, exercise or defence of legal claims or you haveobjected to the processing pursuant to Art. 21 GDPR;
5. pursuantto Art. 20 GDPR, to receive your personal data that you have provided to us ina structured, common and machine-readable format or to request that it betransferred to another controller; and
6. complainto a supervisory authority in accordance with Article 77 of the GDPR. As arule, you can contact the supervisory authority of your usual place ofresidence or workplace or our registered office. The supervisory authorityresponsible for our place of business is The State Commissioner for DataProtection of Lower Saxony, Denis Lehmkemper, Prinzenstraße 5, 30159 Hannover.

In order to assert your rights as a data subject, simplysend an e-mail to DataCompliance@ani-eu.com.

7. Right to revocation of processing based on consent

If your personal data is processed on the basis of consentpursuant to Art. 6 (1) p. 1 lit. a GDPR, you have the right to revoke yourconsent at any time without giving reasons. This has the consequence that wemay no longer continue the data processing based on this consent for thefuture. However, the revocation of your consent does not affect the lawfulnessof the processing carried out on the basis of the consent until the revocation.

If you wish to exercise your right of revocation, simplysend an e-mail to DataCompliance@ani-eu.com.

8. Right of objection

If your personal data is processed on the basis oflegitimate interests pursuant to Article 6 (1) sentence 1 lit. f of the GDPR,you have the right to object to the processing of your personal data pursuantto Article 21 of the GDPR, provided that there are grounds for doing so whicharise from your particular situation. If your objection is directed againstdirect advertising, you have a general right of objection; a statement ofreasons is not required for these cases.

If you wish to exercise your right of objection, simply sendan e-mail to DataCompliance@ani-eu.com.

9. Data security

We use the widespread SSL procedure (Secure Socket Layer) inconnection with the highest level of encryption supported by your browser whenvisiting the website. As a rule, this is 256-bit encryption. If your browserdoes not support 256-bit encryption, we use 128-bit v3 technology instead.Whether an individual page of our

website is encrypted can be seen by the closed display ofthe key or lock symbol in the lower status bar of your browser.

We also use appropriate technical and organisationalsecurity measures to protect your data against accidental or intentionalmanipulation, partial or complete loss, destruction or against unauthorisedaccess by third parties. We continually adapt our security measures in linewith technological developments.

10. Up-to-dateness and amendment of this data protectiondeclaration

This data protection declaration is valid as of April 2024.Due to the further development of our website and offers or due to changedlegal or official requirements, it may become necessary to change this dataprotection declaration. You can access and print out the current dataprotection declaration at any time by clicking on this link.