Free shipping from €99 to Germany & Austria - order throughout Europe - home delivery or delivery to DPD parcel shops
Free shipping from €99 to Germany & Austria - order throughout Europe - home delivery or delivery to DPD parcel shops
As at 14 August 2026
Data controller for the processing of personal data on the website https://fulvicherb.de and in the associated online shop is:
MD Vital Kft.
H-6600 Szentes, 16/1 Tóth József Street
Hungary
Company registration number: 06-09-029155
EU VAT registration number: HU27188251
e-mail: info@fulvicherb.de
Hereinafter, MD Vital Kft. is referred to as „we“, „us“ or „the data controller“.
This privacy policy explains what personal data we process when you visit our website, use our online shop, place an order, set up a customer account, contact us, use the cancellation function, or subscribe to our newsletter.
Personal data is any information relating to an identified or identifiable natural person. This includes, in particular, name, address, email address, telephone number, order details, payment status, IP address and technical usage data.
We process personal data only where there is a legal basis for doing so. Depending on the purpose, the processing is based, in particular, on:
If processing is based on your consent, you may withdraw that consent at any time with effect for the future. This does not affect the lawfulness of the processing carried out up to the point of withdrawal.
When you visit our website, information that is technically necessary is transmitted from your device’s browser to our web server. This may include, in particular, the following data:
This data is processed for the purposes of providing the website from a technical perspective, ensuring system security, detecting errors and preventing unauthorised access.
The legal basis is Article 6(1)(f) of the GDPR. Our legitimate interest lies in the secure and trouble-free operation of the website and the online shop.
Technical log data is deleted or anonymised as soon as it is no longer required for the purposes stated, provided that its continued storage is not necessary for the investigation of a security incident or to fulfil legal obligations.
We use external IT service providers for the hosting and technical support of the website. These providers process technical data and, where applicable, any other personal data stored on the website only to the extent necessary and in accordance with the relevant contractual agreements.
These service providers include, in particular:
Sybell Informatika Korlátolt Felelősségű Társaság
1158 Budapest, 7/B Késmárk utca, 2nd floor, 206
Hungary
Email: hello@sybell.hu
Depending on the specific processing activity, the legal basis is Article 6(1)(b) or (f) of the GDPR.
When you place an order in our online shop, we process the data required for the order and the fulfilment of the contract. This may include, in particular:
Your personal data is processed for the purposes of accepting and processing your order, processing payments, delivering the goods, issuing invoices, handling returns and fulfilling statutory warranty and consumer rights.
The legal basis is Article 6(1)(b) of the GDPR. Where data must be retained in accordance with commercial, tax or accounting legislation, the processing is also based on Article 6(1)(c) of the GDPR.
Without the order details marked as required, we will be unable to process the order, or will only be able to process it in part. Providing optional information is not a prerequisite for the conclusion of the contract.
When you create a customer account, we process your registration, contact, address and order details so that you can manage your details, view previous orders and place future orders more easily.
The legal basis is Article 6(1)(b) of the GDPR.
You can delete your customer account at any time by going to info@fulvicherb.de require. Invoices, orders and accounting data that must be retained by law will not be deleted along with the customer account, but will be blocked for the duration of the statutory retention period and subsequently deleted.
In order to process payments, we transmit the necessary data to the payment service provider you have selected. This may include your name, billing address, email address, order number, amount, currency and other transaction-related information.
Full card or account details are always processed directly by the relevant payment service provider. MD Vital Kft. does not have access to your full card details and does not store them in its own shop system.
For card payments and certain online payments, payment processing is handled by Stripe Payments Europe, Ltd. or another Stripe entity responsible for the relevant transaction.
Further information can be found in the Stripe’s Privacy Policy.
When paying via PayPal, the data required for payment processing is transmitted to PayPal. The responsible payment service provider is usually PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg.
Further information can be found in the PayPal Privacy Policy.
In the case of a bank transfer, payment and account details are processed by the banks involved. Our banking service providers may include, in particular, K&H Bank Zrt. and Revolut Bank UAB.
The legal basis for payment processing is Article 6(1)(b) of the GDPR. Where payment data is stored to fulfil statutory retention or record-keeping obligations, Article 6(1)(c) of the GDPR also applies.
For the purposes of issuing and managing invoices, as well as to fulfil our tax and accounting obligations, we process, in particular, your name, billing address, order details, invoice amount, payment status and, where applicable, tax identification details.
For electronic invoicing, we use the following in particular:
KBOSS.hu Kft. – szamlazz.hu
1031 Budapest, 7/C Záhony Street
Hungary
Email: info@szamlazz.hu
In the context of accounting and tax consultancy, data may also be transferred to appointed accountants, tax advisers or other professional advisers. These include, in particular, Jazz-tax Kft. and Türeiné Nagy-Pál Ildikó e. V.
The legal basis is Article 6(1)(c) of the GDPR. Where the processing serves to establish, exercise or defend legal claims, Article 6(1)(f) of the GDPR also applies.
In order to prepare, pack, dispatch and deliver your order, we pass on the necessary data to our logistics and delivery partners. This includes, in particular:
The service providers used may include, in particular:
The choice of delivery provider depends, in particular, on the country of delivery, the chosen delivery method and the availability of the relevant service.
The legal basis is Article 6(1)(b) of the GDPR.
If you contact us by email, via the contact form or by any other means, we will process the data you provide, in particular your name, email address, the content of your message, order number and, where applicable, any attached files.
Data is processed in order to deal with your enquiry. If the enquiry relates to an order or a potential contract, the legal basis is Article 6(1)(b) of the GDPR. For general enquiries, the processing is based on Article 6(1)(f) of the GDPR. Our legitimate interest lies in responding to customer enquiries and ensuring proper business communication.
Please do not send us any special categories of personal data, in particular detailed health information, unless this is strictly necessary for the processing of your enquiry.
If you use the function „Cancel contract“ When you use this service, we process the data you enter there. This may include, in particular:
The purpose of this processing is to receive, document and process the withdrawal, and to send an acknowledgement of receipt without delay.
The legal basis is Article 6(1)(b) and (c) of the GDPR. The data is stored together with the relevant order and contract documents in accordance with statutory retention and record-keeping obligations.
When you subscribe to our newsletter, we process, in particular, your email address and, where applicable, your name, your language, the date of subscription and information regarding proof of your consent.
Data processing is carried out on the basis of your consent in accordance with Article 6(1)(a) of the GDPR.
You may withdraw your consent at any time with future effect. To do so, you can use the unsubscribe link at the bottom of every marketing email or send a message to info@fulvicherb.de send.
Once you have unsubscribed, you will no longer receive any further newsletters. Contract-related communications, in particular information regarding orders, payments, dispatch, cancellation or security, may still be sent to you insofar as this is necessary for the fulfilment of the contract or to comply with legal obligations.
We may add the email address to a block list, insofar as this is necessary to ensure that no further marketing emails are sent following the withdrawal of consent. The legal basis for this is Article 6(1)(f) of the GDPR.
Our website uses cookies and similar technologies. Cookies are small files or pieces of information that can be stored on, or read from, your device.
Technically necessary cookies are used to ensure that the website and online shop function properly. In particular, they may be required for the shopping basket, the ordering process, language settings, currency selection, login, security and the storage of your privacy settings.
The processing is based on Article 6(1)(b) or (f) of the GDPR. Where storage or retrieval is technically essential, consent is not required.
Cookies and similar technologies that are not technically necessary – such as those used for statistics, audience measurement, personalised content or advertising – are generally only used once you have given your consent via the consent banner.
The legal basis is Article 6(1)(a) of the GDPR.
You can change your preferences at any time by clicking the „Consent Management“ button at the bottom of the website, or withdraw any consent you have given.
Details of the cookies used, their providers, purposes and retention periods can be found in our Cookie Policy and in consent management.
Once you have given your consent, we may use services to measure reach, analyse website usage, measure the effectiveness of adverts and display relevant adverts. These may include, in particular, services provided by Google and Meta.
Depending on the consent you have given, Google Analytics, Google Ads or associated measurement and marketing technologies may be used. In particular, this may involve the processing of IP addresses, device and browser information, pages visited, interactions, order or conversion information, and cookie identifiers.
The provider for users in the European Economic Area is usually:
Google Ireland Limited
Gordon House, Barrow Street
Dublin 4, Ireland
Further information can be found in the Google’s Privacy Policy.
Depending on the consent you have given, Meta technologies, in particular the Meta Pixel, may be used to measure the performance of adverts and to create target audiences. In particular, device information, IP addresses, page views, interactions, order events and cookie identifiers may be processed for this purpose.
The provider for users in the European Economic Area is usually:
Meta Platforms Ireland Limited
Merrion Road
Dublin 4, D04 X2K5, Ireland
Further information can be found in the Meta’s Privacy Policy.
Data processing by these statistics and marketing services is carried out solely on the basis of your consent in accordance with Article 6(1)(a) of the GDPR. You may withdraw your consent at any time via the consent management system.
Personal data will only be disclosed where this is necessary for the performance of a contract, to comply with legal obligations, on the basis of your consent, or to safeguard legitimate interests.
Recipients or categories of recipients may include, in particular:
Data processors are contractually obliged to process personal data only in accordance with our instructions and the applicable data protection regulations.
Some of the service providers we or our service providers use may process personal data outside the European Economic Area. This may be the case, in particular, with payment, analytics, marketing, IT or cloud service providers operating internationally.
Data will only be transferred if the conditions set out in Articles 44 to 49 of the GDPR are met. The following, in particular, may serve as an appropriate legal basis:
Where necessary, additional technical, organisational or contractual safeguards will be put in place.
We only retain personal data for as long as is necessary for the relevant processing purpose or for as long as statutory retention obligations apply.
The following criteria apply in particular:
Once the relevant retention period has expired, the data will be deleted or anonymised, provided there is no legal obligation or legitimate reason for it to be retained any longer.
In accordance with the statutory requirements, you have the following rights in particular:
Objection to direct marketing: If personal data is processed for the purposes of direct marketing, you may object to such processing at any time. Once you have objected, your data will no longer be used for direct marketing.
To exercise your rights, simply send a message to info@fulvicherb.de. You can also use the data protection form provided on this page.
We generally respond to data protection enquiries without delay and within one month at the latest. In accordance with the GDPR, this time limit may be extended by up to two further months in the case of particularly complex enquiries or a large number of requests. In such cases, we will inform you of the extension and the reasons for it within the first month.
Data protection requests are generally processed free of charge. In the case of manifestly unfounded or excessive requests, we may, in accordance with the GDPR, charge a reasonable fee or refuse to process the request.
To protect your data, we may request further information if we have reasonable grounds to doubt your identity.
You have the right to lodge a complaint with a data protection supervisory authority. The following authority is responsible, in particular, for the place where the data controller is based:
National Authority for Data Protection and Freedom of Information – NAIH
National Authority for Data Protection and Freedom of Information
1055 Budapest, Falk Miksa utca 9–11
Postal address: 1363 Budapest, PO Box 9
Hungary
e-mail: ugyfelszolgalat@naih.hu
Website: https://www.naih.hu/
You may also contact the data protection supervisory authority in your country of habitual residence, your place of work or the location of the alleged data protection breach.
We take appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure and unauthorised access.
Data transmission between your browser and our website is always encrypted using TLS. Access to personal data is restricted to those individuals and service providers who require this data to carry out their duties.
Despite appropriate security measures, it is not possible to guarantee that data transmission or storage will be entirely risk-free.
Our website may contain links to external websites or embedded content from other providers. When you visit an external website, the privacy policy of the respective provider applies.
Embedded content that is not technically necessary and which may result in personal data being transferred to third parties when accessed will, as a rule, only be activated once you have given your consent.
We do not make any decisions based solely on automated processing that have legal effects on you or significantly affect you in a comparable manner.
Where you have consented to the use of statistics or marketing technologies, usage and order events may be used to create target groups or to measure the effectiveness of advertisements. This does not result in a decision with legal or similarly significant effects within the meaning of Article 22 of the GDPR.
We may update this privacy policy if there are changes to legal requirements, our website, the service providers we use or the way in which data is processed.
The version published on this page at any given time shall apply. The date of the last update is stated at the beginning of the privacy policy.
If you have any questions regarding the processing of your personal data or wish to exercise your data protection rights, please contact us at the following address:
MD Vital Kft.
H-6600 Szentes, 16/1 Tóth József Street
Hungary
e-mail: info@fulvicherb.de
Deutsch Deutsch
English (UK)
Italiano
Français
Español
Polski
Slovenčina
Română