Data protection - VIBIOTA CBD
page-template-default,page,page-id-2505,bridge-core-2.5.7,ajax_fade,page_not_loaded,qode-page-loading-effect-enabled,,qode-title-hidden,qode_grid_1200,footer_responsive_adv,qode-child-theme-ver-1.0.0,qode-theme-ver-24.2,qode-theme-bridge,disabled_footer_bottom,qode_header_in_grid,wpb-js-composer js-comp-ver-6.4.2,vc_responsive

(As of November 13, 2020)


Vibiota GmbH

Landstrasser Hauptstrasse 1b

1030 Vienna


Tel .: +43 664 544 55 88


The protection of your personal data is very important to us. We therefore process your data exclusively on the basis of the statutory provisions (GDPR, TKG 2003). In this data protection information, we inform you about the most important aspects of data processing on our website. You can find the current version of the GDPR at

It should be easy to read and understand for the public as well as for our customers and business partners. To ensure this, we would like to explain the most important terms.

We use the following terms in our data protection declaration:

a) personal data

Personal data is all information that relates to an identified or identifiable natural person (“data subject”). A natural person is regarded as identifiable who, directly or indirectly, in particular by means of assignment to an identifier such as a name, to an identification number, to location data, to an online identifier or to one or more special features that express the physical, physiological, genetic, psychological, economic, cultural or social identity of this natural person can be identified.

b) data subject

Affected person is any identified or identifiable natural person whose personal data is processed by the “responsible person”.

c) processing

Processing is any process carried out with or without the help of automated processes or any such series of processes in connection with personal data such as the collection, recording, organization, ordering, storage, adaptation or change, reading, querying, use, Disclosure through transmission, dissemination or any other form of provision, comparison or linking, restriction, deletion or destruction.

d) restriction of processing

Restriction of processing is the marking of stored personal data with the aim of restricting their future processing.

e) Profiling

Profiling is any type of automated processing of personal data that consists of using this personal data to evaluate certain personal aspects that relate to a natural person, in particular aspects relating to work performance, economic situation, health, personal To analyze or predict the preferences, interests, reliability, behavior, whereabouts or relocation of this natural person.

f) pseudonymization

Pseudonymization is the processing of personal data in a way in which the personal data can no longer be assigned to a specific data subject without the use of additional information, provided that this additional information is stored separately and is subject to technical and organizational measures that guarantee that the personal data cannot be assigned to an identified or identifiable natural person.

g) controller or controller

The person responsible or the person responsible for the processing is the natural or legal person, public authority, agency or other body that alone or jointly with others decides on the purposes and means of processing personal data. If the purposes and means of this processing are specified by Union law or the law of the member states, the person responsible or the specific criteria for his appointment can be provided for in accordance with Union law or the law of the member states.

h) Processors

Processor is a natural or legal person, authority, institution or other body that processes personal data on behalf of the person responsible.

i) recipient

The recipient is a natural or legal person, authority, institution or other body to which personal data is disclosed, regardless of whether it is a third party or not. Authorities that may receive personal data as part of a specific investigation under Union law or the law of the member states are not considered recipients.

j) third party

A third party is a natural or legal person, public authority, agency or body other than the data subject, the person responsible, the processor and the persons who are authorized to process the personal data under the direct responsibility of the person responsible or the processor.

k) Consent

Consent is any voluntary, informed and unambiguous declaration of intent given by the person concerned for the specific case in the form of a declaration or other unequivocal affirmative action with which the person concerned indicates that they consent to the processing of their personal data is.

Data storage

To be able to shop with us, you need a customer account. This customer account contains personal data such as name, address or email address. The data is stored in our database for later processing when you log in.

In addition, data that we receive from your browser during the visit is automatically saved in our log files (browser is, for example, Internet Explorer, Firefox, Safari etc.). This means that the IP address is known and a cookie is placed on your computer. This cookie guarantees that the order can be processed properly and, above all, it is possible to save your interests so that the next time we visit, we can offer you the products that are of particular interest to you without you having to repeat your interest.

After canceling the shopping process, the data stored by us will be deleted. In the event of a contract being concluded, all data from the contractual relationship will be stored until the expiry of the tax retention period (7 years). The data name, address, purchased goods and date of purchase are also stored until the product liability expires (10 years). The data processing takes place on the basis of the legal provisions of § 96 Abs 3 TKG as well as Art 6 Abs 1 lit a (consent) and / or lit b (necessary to fulfill the contract) of the GDPR.

The storage of the IP address and the time of registration is necessary to ensure the security of our information technology systems. This is also our legitimate interest, which is why processing according to Art. 6 Para. 1 letter f GDPR is permissible. A transfer to a third country or to an international organization is not intended. You are not obliged to provide this personal data, but you cannot place an order in our online shop without providing it. The personal data are deleted or protected by technical and organizational measures (e.g. pseudonymisation, encryption) as soon as the purpose of the processing no longer applies. This also takes place when a prescribed storage period expires, unless there is a need for further storage of the personal data for the conclusion or fulfillment of a contract. Unless we are legally obliged to store it for longer or to pass it on to third parties (in particular law enforcement authorities), the decision as to which personal data we collect, how long it is stored and to what extent you may have to disclose it depends on this which functions of the website you use in individual cases.


Our website uses so-called cookies. These are small text files that are stored on your device with the help of the browser. They do no harm. We use cookies to make our offer user-friendly. Some cookies remain stored on your device until you delete them. They enable us to recognize your browser the next time you visit. If you do not want this, you can set up your browser so that it informs you about the setting of cookies and you only allow this in individual cases. Deactivating cookies may restrict the functionality of our website.


You have the option of subscribing to our newsletter via our website. For this we need your e-mail address and your declaration that you agree to receive the newsletter. As soon as you have registered for the newsletter, we will send you a confirmation email with a link to confirm your registration. You can cancel your subscription to the newsletter at any time. Please send your cancellation to the following email address: We will then immediately delete your data in connection with the sending of the newsletter. This revocation does not affect the legality of the processing carried out on the basis of the consent until the revocation.

Use of the e-mail address for sending newsletters

If you subscribe to our newsletter, we will use your e-mail address for the purpose of sending the newsletter, provided that you have expressly consented to it being sent by entering your e-mail address. You can unsubscribe from the newsletter at any time using the corresponding link in the newsletter, by sending us a message (you can find the contact details for this in our legal notice) or by changing the settings in your user account in the online shop; the contact details for this can be found in our legal notice. We will then immediately delete your email address.

Collection and processing when using the online shop

When using the form for shop orders, we collect personal data (individual details about personal or factual circumstances of a specific or identifiable natural person) to the extent provided by you and required for the implementation. We only use your email address to process your request. Your data is saved in your online shop account and will be deleted if you wish.

Google Analytics

This website uses Google Analytics, a web analysis service from Google Inc. (“Google”). Google Analytics uses so-called “cookies”, text files that are stored on your computer and that enable your use of the website to be analyzed. The information generated by the cookie about your use of this website (including your IP address) is transmitted to and stored by Google on servers in the United States.

Google will use this information to evaluate your use of the website, to compile reports on website activity for the website operator and to provide other services relating to website activity and internet usage. Google may also transfer this information to third parties if this is required by law or if third parties process this data on behalf of Google. Under no circumstances will Google associate your IP address with other Google data.

You can prevent the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent.

You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by clicking on the following link (http: // download and install the available browser plug-in.

For more information on terms of use and data protection, see or We would like to point out that on this website, Google Analytics has been expanded to include the code “gat._anonymizeIp ();” in order to ensure anonymous collection of IP addresses (so-called IP masking).

Google Maps

This website uses Google Maps to display a site plan. Google Maps is operated by Google Inc. (“Google”) operated. By using this website, you consent to the collection, processing and use of the automatically collected data and the data you have entered by Google, one of its representatives or third-party providers. The terms of use for Google Maps can be found under Terms of Use for Google Maps.

Facebook pixel

So-called “Facebook pixels” of the social network Facebook, which is operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA, or if you are based in the EU, Facebook Ireland Ltd., are used within our online offer. 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland (“Facebook”). With the help of the Facebook pixel, Facebook is able to determine the visitors of our offer as a target group for the presentation of advertisements, so-called “Facebook ads”. Accordingly, we use the Facebook pixel to only display the Facebook ads placed by us to Facebook users who have also shown an interest in our website. That means, with the help of the Facebook pixel, we want to ensure that our Facebook ads correspond to the potential interest of the users and are not annoying. With the help of the Facebook pixel, we can also understand the effectiveness of Facebook ads for statistical and market research purposes by seeing whether users have been redirected to our website after clicking on a Facebook ad.

The Facebook pixel is directly integrated by Facebook when you visit our website and can save a so-called cookie, ie a small file, on your device. If you then log in to Facebook or visit Facebook while logged in, the visit to our offer will be noted in your profile. The data collected about you is anonymous to us, so it does not provide us with any conclusions about the identity of the user. However, the data is stored and processed by Facebook so that a connection to the respective user profile is possible. The processing of the data by Facebook takes place within the framework of Facebook’s data usage guidelines. Accordingly, you can find more information about how the remarketing pixel works and how Facebook ads are displayed in general in Facebook’s data usage policy:

You can object to the collection by the Facebook pixel and the use of your data to display Facebook ads. To do this, you can call up the page set up by Facebook and follow the instructions there on the settings for usage-based advertising: or the objection via the US-American page http: // www. or the EU page explain. The settings are platform-independent, ie they are adopted for all devices such as desktop computers or mobile devices.

Use of the website for information purposes

If you call up our website and use it purely for information purposes, i.e. without using additional functions such as the order form, contact form or social media plugins, we will automatically collect personal data. This involves the following information: IP address of your device as well as the date and time of access to the website, name of the requested file, transferred data volume and requesting provider. This information is transmitted by your browser, unless you have configured it in such a way that the transmission of the information is suppressed. The processing of this personal data takes place for the purpose of the functionality and optimization of the website, as well as to guarantee the security of our information technology systems. This is also our legitimate interest, which is why processing according to Art. 6 Para. 1 letter f GDPR is permissible. The personal data are stored for a maximum of four weeks. We do not combine this personal data with other data sources. A transfer to a third country or to an international organization is not intended.

Your rights

You have the right to information, correction, deletion, restriction, data portability, revocation and objection with regard to your data stored by us. If you believe that the processing of your data violates data protection law or that your data protection claims have been violated in any other way, you can contact us at Report.

Contact details:

Vibiota GmbH

Landstrasser Hauptstrasse 1b

1030 Vienna


Tel .: +43 664 544 55 88