We, at VYPER GmbH (“we” or “VYPER GmbH”), are committed to respecting the right to data protection and the right to privacy of our consumers and website users (“you”). In line with this commitment, we wish to provide you with this information notice, in which we explain the way we collect and handle your personal data in the context of shopping or browsing on our Fulfil Nutrition Website for the European Union (this “Website”).

1. Who are we and how to contact us?

The VYPER GmbH is established at Mühlenstraße 8a, Berlin, 14167, Berlin, Germany. When collecting and processing your personal data in the context of shopping or browsing our Website, VYPER GmbH acts as a data controller. If you have any questions on the processing of your personal data in the context of shopping or browsing our Website, do not hesitate to contact the Data Protection Officer (DPO) of VYPER GmbH by sending an email at privacy@vyper.global

2. What personal data do we collect, for what purpose and on what legal basis?

We only collect personal data that are necessary for the purchase, marketing or advertising of FULFIL Nutrition products and services, including handling your purchase orders, managing our Website, answering your enquiries and sending marketing communications. In particular, we will collect the following types of data directly from you:

• Account Data: first name, last name, title, birthday, email address, telephone number, delivery address, billing address or any other information you provide within your personal preferences through your profile or answering questions via survey, contest or other campaigns.
• Marketing communication data: email address, name, surname and preferences about products (only if you register as a customer or actively subscribe to our marketing communications).
• Purchase data: payments to and from you, and details on products ordered.
• Technical and Website Usage data: internet protocol (IP) address, login (if applicable), a device used to access the site, the operating system of the device, connection information like browser type, location of the device if you choose to share it, time zone settings, purchase and order history, information about how you arrived on our site, and information about how you use the Website, depending on your cookie preferences. For more information, please refer to our Cookie Policy.
• Customer Care data: information provided to customer care upon leveraging our contact options, including name, contact number, date/time, product information, enquiry, comment or report on the product and contact history.

The specific purposes and corresponding legal basis for the processing of these distinct categories of personal data are summarised in the table below:

Providing some of these personal data may be mandatory, in the sense that failure to provide them will prevent you from interacting with us, benefitting from our services, or purchasing our products. For example, when purchasing FULFIL Nutrition products via our Website, providing your name and address will be mandatory because these data are necessary for us to be able to fulfil your purchase order. Mandatory data will always be indicated as such in the relevant form or notice.

3. How long do we keep your personal data?

VYPER GmbH will keep your personal data as long as necessary for achieving all the above-mentioned purposes before anonymizing or deleting them, in accordance with the following retention periods:

• Account data: your account data will be kept as long as you have an active account with us. If you do not use your account for a consecutive period of 5 years, we will inform you about our intention to delete your account. If you do not object within a month, your account information will be deleted. You may of course create a new account at any time.
• Purchase data: 5 years from the time of purchase.
• Technical and Website Usage data: please refer to our Cookie Policy.
• Customer care data: please refer to our Customer Care Privacy Notice.
• Marketing communication data: we will keep these data as long as you remain opted-in. You may unsubscribe at any time by clicking on the “Unsubscribe” button at the bottom of our marketing communications or by sending an email to our Privacy Coordinator.

Upon expiration of these retention periods, the personal data will be deleted or anonymized, except if it is still necessary for us to keep them to comply with a legal obligation or to protect or defend our interests, for example in the event of a claim. In these cases, VYPER GmbH will store your personal data for a longer period, until the claim is fully handled or resolved.

4. With whom do we share your personal data?

To achieve the above-mentioned purposes, VYPER GmbH will share specific personal data (only those relevant and necessary) with the following categories of Recipients:

• Internal Recipients (within VYPER GmbH):
• Brand marketing team to better understand our customers;
• Customer and Shopper Understanding department to determine product demand moments and consumption occasions;
• Direct-to-Consumer team to establish cyclical messaging campaigns.

• External Recipients:
• Our webstore service provider, i.e., Shopify, which will process Account data when necessary for running the online store of this Website.
• Our logistics and delivery providers, i.e., DHL, which will process your address information, package contents and dimensions, when necessary for shipment and delivery of your orders.
• Our website analytics service provider, i.e., Google Analytics, will process Technical and Website Usage data for website analytics and advertising purposes (only when you have consented to it).
• Our marketing agencies, which will process Marketing communication data to help us to refine our brand messaging and brand equity campaigns (only if you are opted-in).

You may further inquire about the identity of the Recipients of your personal data by contacting the relevant VYPER GmbH DPO or Privacy Coordinator (see above, “Who are we and how to contact us”).

5. Do we transfer your personal data to another country?

Generally, your personal data will only be processed in the European Economic Area (EEA), in particular Ireland. However, some of the above-mentioned recipients may be in other countries, such as the US or UK. VYPER GmbH will only transfer your personal data to these other countries in accordance with the applicable privacy and data protection law. You may request a copy of the applicable transfer tools (if any) by contacting us (see above, “Who are we and how to contact us?”).

6. What are your data protection rights?

You have several rights in relation to the processing of your personal data:

• The right to obtain additional information or clarifications on the processing of your personal data, and to obtain a copy of your personal data;
• The right to obtain the correction of your personal data if they are inaccurate or incomplete;
• The right to object to the processing of your personal data on grounds relating to your particular situation whenever the processing is based on our legitimate interests;
• The right to obtain restriction of processing from us (i.e., temporary suspension of the processing) while we assess the validity of another request relating to your personal data;
• The right to data portability (i.e., the right to receive your personal data in a commonly used and machine-readable format and transmit them to another controller);
• The right to request the erasure of your personal data (‘right to be forgotten); and
• The right to withdraw your consent whenever consent is the legal basis for the processing.

You may exercise these rights at any time by contacting the local Privacy Coordinator of VYPER GmbH at privacy@vyper.global Please note that these rights are not absolute and may be subject to specific conditions. If you contact us to exercise one of these rights, we will analyse your request and get back to you as soon as possible.