Politique de confidentialité
Last updated: June 2026
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
1. Data Controller
The entity responsible for data processing on this website is:
Lea Ganzenmüller
Hermann-Roemer-Str. 10
74321 Bietigheim-Bissingen
Germany
Email: hello@dancingmicrobes.com
If you have any questions about the collection, processing or use of your personal data, or if you wish to request information, correction, restriction or deletion of your data, please contact us at the address above.
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
2. General Information
We take the protection of your personal data very seriously and treat it confidentially and in accordance with applicable data protection laws as well as this Privacy Policy. The legal basis is the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).
Personal data is any information that can be used to identify you personally. This Privacy Policy explains what data we collect and how we use it.
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
3. Hosting and Technical Operation
Shopify
This website is hosted by Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland (hereinafter: Shopify). Shopify acts as a data processor pursuant to Art. 28 GDPR. We have entered into a data processing agreement with Shopify.
Shopify processes your data on servers within the European Union and, in some cases, in the USA. For data transfers to the USA, Shopify relies on the EU Standard Contractual Clauses (Art. 46 para. 2 lit. c GDPR) and the EU-US Data Privacy Framework.
With every page visit, the web server automatically records a server log file containing the following data: name of the requested file, your IP address, date and time of the request, data volume transferred, and the requesting provider. This data is used solely to ensure smooth operation of the website and to improve our services (legal basis: Art. 6 para. 1 sentence 1 lit. f GDPR – legitimate interests). Log files are deleted no later than 7 days after your visit.
For more information on Shopify's data protection practices: https://www.shopify.com/legal/privacy
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
4. Data Collection for Order Processing
We collect personal data when you voluntarily provide it to us as part of your order or when contacting us (e.g. via contact form or email). This data includes in particular: name, address, email address, phone number and payment data.
Mandatory fields are marked as such, as we require this data to process your order. Without providing it, placing an order is not possible.
We use your data in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR for order processing and handling your enquiries, including:
• Processing and shipping your order
• Communication regarding your order
• Processing payments
• Handling complaints and returns
Once the contract has been fully processed, your data will be restricted from further processing and deleted after the statutory retention periods (generally 6 or 10 years under tax and commercial law).
Customer Account
If you choose to create a customer account, data processing is carried out for the purpose of contract performance pursuant to Art. 6 para. 1 sentence 1 lit. b GDPR (management of the customer relationship) and, for additional functions, on the basis of your consent pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR. You can delete your customer account at any time – either by contacting us at hello@dancingmicrobes.com or via the function within your account.
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
5. Sharing of Data with Third Parties
Your personal data will only be shared with third parties where this is necessary for the performance of the contract (Art. 6 para. 1 sentence 1 lit. b GDPR) or where you have given your express consent.
We share data with:
• Shipping service providers (e.g. DHL, DPD): name, address and, where applicable, email address for delivery purposes
• Payment service providers: depending on the payment method you select (e.g. PayPal, Klarna, Stripe), the required payment data will be shared. The respective privacy policies of the payment providers apply.
• Shopify Inc. as platform provider (data processor, see Section 3)
• Printify, Inc., 195 Plymouth St, Brooklyn, NY 11201, USA: for orders of print-on-demand products (e.g. mugs, tea towels), your name and delivery address are passed to Printify for production and fulfilment. Printify processes data in the USA on the basis of the EU-US Data Privacy Framework and EU Standard Contractual Clauses. For more information: https://printify.com/privacy-policy/
All third-party providers are contractually obligated to comply with GDPR. No data is shared with third parties for advertising purposes without your consent.
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
6. Cookies and Consent Management
Our website uses cookies. Cookies are small text files that are automatically stored on your device. We distinguish between:
• Technically necessary cookies: These are required for the operation of the online shop (e.g. shopping cart function, session management). Legal basis: Art. 6 para. 1 sentence 1 lit. f GDPR (legitimate interests). No consent is required for these cookies.
• Analytics and marketing cookies: These are only set after your express consent (Art. 6 para. 1 sentence 1 lit. a GDPR) and can be withdrawn at any time via our cookie banner.
You can restrict or disable the use of cookies at any time in your browser settings. Please note that disabling cookies may limit the functionality of our website.
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
7. Web Analytics – Google Analytics 4
This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: Google).
Google Analytics 4 uses cookies that enable analysis of your use of our website. The information collected is generally transferred to a Google server. For transfers to the USA, we rely on the EU-US Data Privacy Framework and EU Standard Contractual Clauses (Art. 46 para. 2 lit. c GDPR).
We use Google Analytics 4 with IP anonymisation enabled. The full IP address is not stored.
Legal basis: Art. 6 para. 1 sentence 1 lit. a GDPR (consent). Google Analytics is only activated after your express consent via the cookie banner.
You can withdraw your consent at any time with future effect by accessing the cookie settings on our website. Alternatively, you can install the browser opt-out plugin: https://tools.google.com/dlpage/gaoptout
For more information on data processing by Google: https://policies.google.com/privacy
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
8. Email Newsletter
Newsletter Subscription
If you subscribe to our newsletter, we process your email address and, if provided, your name in order to send you our newsletter regularly.
Legal basis: Art. 6 para. 1 sentence 1 lit. a GDPR (consent). Subscription is carried out using a double opt-in procedure.
You can unsubscribe at any time – either via the unsubscribe link in each email or by contacting us at hello@dancingmicrobes.com. After unsubscribing, your email address will be removed from the mailing list without delay.
Newsletter delivery: We use Klaviyo, Inc., 125 Summer St, Boston, MA 02110, USA, to send our newsletter. Klaviyo processes data in the USA on the basis of the EU-US Data Privacy Framework and EU Standard Contractual Clauses. We have entered into a data processing agreement with Klaviyo. For more information: https://www.klaviyo.com/legal/privacy-notice
Direct Email Marketing to Existing Customers
If we have received your email address in connection with a purchase and you have not objected to its use, we may occasionally send you offers for similar products by email, based on Section 7 para. 3 of the German Act Against Unfair Competition (UWG).
You can object to this use of your email address at any time by contacting us at hello@dancingmicrobes.com or via the unsubscribe link in the respective email. No costs other than transmission costs at basic rates will be incurred.
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
9. Online Consultations (Zoom, Calendly, Klaviyo)
We offer individual online consultations on gut-friendly nutrition and fermentation. We use the following third-party providers for booking and conducting these consultations:
Booking Confirmation by Email (Klaviyo)
After booking a consultation, you will receive a confirmation email containing your appointment details and the meeting link. This email is sent via Klaviyo, Inc., 125 Summer St, Boston, MA 02110, USA. Your email address and the booked appointment are transmitted to Klaviyo for this purpose.
Legal basis: Art. 6 para. 1 sentence 1 lit. b GDPR (contract performance). Sending the confirmation email is necessary to carry out the booked consultation.
The confirmation email contains a link to our Instagram profile (@dancing_microbes) at the bottom. Clicking this link is entirely voluntary. When you access the link, the privacy policy of Instagram/Meta applies (see Section 10).
Klaviyo processes data in the USA on the basis of the EU-US Data Privacy Framework and EU Standard Contractual Clauses. We have entered into a data processing agreement with Klaviyo. For more information: https://www.klaviyo.com/legal/privacy-notice
Appointment Scheduling (Calendly)
Appointments are selected and booked via Calendly, LLC, 271 17th St NW, Atlanta, GA 30363, USA. When booking an appointment, Calendly processes your name, email address and the desired appointment time.
Legal basis: Art. 6 para. 1 sentence 1 lit. b GDPR (contract performance). The use of Calendly is necessary for scheduling the appointment and thereby initiating the consultation contract.
Calendly processes data in the USA on the basis of the EU-US Data Privacy Framework and EU Standard Contractual Clauses. We have entered into a data processing agreement with Calendly. For more information: https://calendly.com/privacy
Video Consultation (Zoom)
The consultation itself is conducted via video conference using Zoom Video Communications, Inc., 55 Almaden Blvd, San Jose, CA 95113, USA. When joining a Zoom meeting, the following data is processed: name (or display name), email address, IP address, device data, and audio and video data during the session.
Legal basis: Art. 6 para. 1 sentence 1 lit. b GDPR (contract performance). The use of Zoom is necessary to conduct the booked online consultation.
Zoom processes data in the USA on the basis of the EU-US Data Privacy Framework and EU Standard Contractual Clauses. We have entered into a data processing agreement with Zoom. Please also refer to Zoom's privacy policy: https://explore.zoom.us/en/privacy/
Please note: Consultations are not recorded as a matter of principle. Should a recording be desired in an individual case, this will only take place with the express prior consent of all participants.
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
10. Social Media
We maintain a presence on Instagram (Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland). When you visit our profile, data may be collected for market research and advertising purposes.
For data transfers to the USA by Meta, we rely on the EU-US Data Privacy Framework. We have entered into a joint controllership agreement with Meta pursuant to Art. 26 GDPR (Page Insights).
For more information on data processing by Meta/Instagram: https://privacycenter.instagram.com/policy/
To object to personalised advertising on Instagram: https://www.instagram.com/accounts/privacy_and_security/
Please note: We do not maintain an active Facebook presence or Twitter/X account. References to Facebook, Twitter and Pinterest contained in earlier versions of this policy are therefore no longer relevant.
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
11. Your Rights as a Data Subject
You have the following rights with regard to your personal data:
• Right of access (Art. 15 GDPR): You may request information about the personal data we process about you.
• Right to rectification (Art. 16 GDPR): You may request the correction of inaccurate or the completion of incomplete data.
• Right to erasure (Art. 17 GDPR): You may request the deletion of your data, provided no statutory retention obligation applies.
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR): You may request a copy of your personal data in a structured, commonly used and machine-readable format.
• Right to object (Art. 21 GDPR): You may object at any time to the processing of your data on the basis of legitimate interests.
• Right to withdraw consent (Art. 7 para. 3 GDPR): Where processing is based on your consent, you may withdraw that consent at any time with future effect.
• Right to lodge a complaint with a supervisory authority (Art. 77 GDPR): You may contact the supervisory authority responsible for us: State Commissioner for Data Protection and Freedom of Information Baden-Württemberg (Landesbeauftragter für Datenschutz und Informationsfreiheit Baden-Württemberg), Königstraße 10a, 70173 Stuttgart, Germany. https://www.baden-wuerttemberg.datenschutz.de
To exercise your rights, please contact us at: hello@dancingmicrobes.com
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
12. Data Security
We implement technical and organisational measures to protect your data against manipulation, loss, destruction or unauthorised access. Our security measures are continuously updated in line with technological developments.
Data transmission between your browser and our server is encrypted using the HTTPS protocol (SSL/TLS certificate).
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
13. Retention Periods
We store personal data only for as long as necessary for the respective purpose or as required by statutory retention obligations:
• Consultation data (Zoom, Calendly): Up to 3 years after the consultation is completed
• Order data: 10 years (statutory retention requirement under German tax law)
• Contact enquiries: 3 years after the matter is concluded
• Newsletter subscribers: Until unsubscription, followed by immediate deletion
• Log files: No longer than 7 days
• Cookies: In accordance with the retention periods shown in the cookie settings
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
14. Minors
Our online shop is not intended for use by children or young people under the age of 16. We do not knowingly collect personal data from individuals under the age of 16. Should we become aware of any such data, it will be deleted without delay.
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
15. Updates to this Privacy Policy
This Privacy Policy is currently valid and was last updated in June 2026. We may update this policy from time to time to reflect changes in our practices or for other operational, legal or regulatory reasons. The current version is always available at https://dancingmicrobes.com/policies/privacy-policy