Privacy policy

This privacy policy explains how personal data is processed when you visit dr-moellenberg.com and sign up for product and newsletter updates.

1. Controller

Dr. Möllenberg GmbH
Rheinpromenade 9
40789 Monheim am Rhein
Germany
info@dr-moellenberg.com

You can send privacy enquiries to the email or postal address above. Further details are available in our Legal notice.

2. Visiting the website and hosting

When you access the website, technically necessary data is processed, particularly your IP address, the date and time of access, the page requested, the amount of data transferred, browser and device information and, where applicable, the page visited previously. This data is needed to deliver the website, maintain security and analyse errors. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is the secure and functional operation of the website. Our hosting provider processes this data on our behalf. Log data is deleted when it is no longer needed for these purposes, unless longer storage is required to investigate security incidents.

3. Contacting us

If you contact us by email or another channel, we process the information you provide and the content of your message to handle your enquiry. Depending on the circumstances, the legal basis is Art. 6(1)(b) GDPR (precontractual or contractual communication) or Art. 6(1)(f) GDPR (handling other enquiries). We delete the data when the matter is resolved and no statutory retention duties or legitimate reasons for further storage remain.

4. Cardio updates and newsletter with Brevo

On the Cardio page, you can sign up with your email address for messages about Cardio, related products and offers. Signing up is voluntary. The legal basis for sending these messages is your consent under Art. 6(1)(a) GDPR. You may withdraw your consent at any time with future effect using the unsubscribe link in each message.

We use Brevo for the signup form, contact management and sending messages. Your email address and, where applicable, technical signup and confirmation data are transferred to Brevo and processed there on our behalf. Brevo states that it processes and stores its databases on servers within the European Union. Storage for sending messages ends when you unsubscribe; evidence of consent granted or withdrawn may be retained beyond that point where needed to comply with legal obligations or defend legal claims. Further information is available from Brevo.

The embedded form loads resources from sibforms.com and assets.brevo.com. In particular, your IP address and technical browser data may be transferred to Brevo when you visit the Cardio page. The legal basis for providing the form is Art. 6(1)(f) GDPR; our legitimate interest is a usable signup option.

We use Cloudflare Turnstile to protect the signup form against automated submissions. When the form loads, content from challenges.cloudflare.com is retrieved and technical connection and device information is processed for verification. The provider is Cloudflare, Inc. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is protecting the form from misuse. Further information is available in Cloudflare's privacy policy.

5. Technically necessary browser storage

The website may use technically necessary cookies or similar storage technologies, for example for display, security and, if you use the relevant functions, the shopping cart or login. You can delete stored data in your browser and restrict storage through your browser settings. This may affect some functions. Where personal data is processed, the legal basis is Art. 6(1)(f) GDPR or Art. 6(1)(b) GDPR for functions you request.

6. Shop functions

The website and online shop are still being developed. Before orders are enabled, we will add information about the customer account, order processing, payments and shipping providers actually used.

7. Your rights

Subject to the GDPR, you have rights of access, rectification, erasure, restriction of processing, data portability and objection to processing based on legitimate interests. You may withdraw consent at any time with future effect. To exercise your rights, contact the controller named above. You may also lodge a complaint with a data protection supervisory authority. The authority responsible for the company's registered office is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia.

8. Changes

We update this privacy policy when the website, the services used or legal requirements change.

Last updated: 28 September 2026