Privacy policy
Privacy Policy
This is a convenience translation. The German version shall prevail.
1. Controller
The controller responsible for data processing on this website is:
XVXII Diamond GmbH, Fasangasse 36, 2423 Deutsch Jahrndorf, Austria
E-mail: shop@best-supps.de
2. General information
We process personal data of our customers and website visitors exclusively in accordance with the applicable data protection regulations, in particular the General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (DSG).
3. Data processing in the online shop (Shopify)
Our online shop is operated on the Shopify platform (Shopify International Limited, 2nd Floor, 1-2 Victoria Buildings, Haddington Road, Dublin 4, Ireland, as part of the Shopify group). When you visit the website and place orders, the following data is processed: name, address, e-mail address, delivery address, order and payment data, IP address and technical access data (server logs).
Legal bases: Art. 6(1)(b) GDPR (performance of a contract), Art. 6(1)(c) GDPR (statutory retention obligations), Art. 6(1)(f) GDPR (legitimate interest in the technical provision and security of the shop).
Where data is transferred to third countries (in particular Canada and the USA) as part of the Shopify services, such transfers are based on adequacy decisions of the EU Commission or EU standard contractual clauses.
4. Payment service providers
We use external payment service providers to process payments, in particular PayPal (PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg) and the card payment and payment services offered at checkout (payment processing via Stripe or Shopify Payments). The data required for the payment (name, payment details, order amount) is transmitted directly to the respective payment service provider. Legal basis: Art. 6(1)(b) GDPR. The privacy notices of the respective provider apply in addition.
5. Shipping service providers
For the delivery of goods, we pass on the name and delivery address (and, where required for delivery, the e-mail address for shipping notifications) to the commissioned shipping company (in particular DHL). Legal basis: Art. 6(1)(b) GDPR.
6. E-mail communication and newsletter
We send transactional e-mails (order and shipping confirmations) via the shop system to the e-mail address provided by the customer (legal basis: Art. 6(1)(b) GDPR).
If you sign up for our newsletter, we process your e-mail address on the basis of your consent (Art. 6(1)(a) GDPR). You may withdraw your consent at any time via the unsubscribe link included in every newsletter e-mail.
7. Cookies
Our shop uses technically necessary cookies that are required for the operation of the shop (e.g. shopping cart function, login, language settings) (legal basis: Art. 6(1)(f) GDPR and Section 165(3) of the Austrian Telecommunications Act (TKG 2021)). Should cookies requiring consent or analysis/marketing services be used in the future, this will only take place after prior consent via a consent banner.
8. Storage period
We store personal data only for as long as is necessary for the purposes stated above or as required by statutory retention obligations (in particular under company and tax law: up to 7 years in Austria, up to 10 years in Germany).
9. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and the right to object to processing based on legitimate interests (Art. 21). You may withdraw any consent you have given at any time with effect for the future.
To exercise your rights, simply send an e-mail to: shop@best-supps.de
10. Right to lodge a complaint
You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Austrian Data Protection Authority (Österreichische Datenschutzbehörde), Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at. You may also contact the supervisory authority of your habitual place of residence.
Last updated: July 2026