Privacy Policy

We take the protection of your personal data very seriously. This Privacy Policy explains what data we collect when you visit nightwellhealth.com, why we collect it, and what rights you have. Processing of personal data takes place in accordance with the EU General Data Protection Regulation (GDPR / DSGVO) and applicable German law.

1. Controller

The party responsible for data processing on this website is:

Carsten Neurath
Steinbrink 1
30880 Laatzen
Germany
Email: carneu66@gmail.com

The controller is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data.

2. Hosting

This website is hosted by an external service provider (processor):

Hostinger International Ltd., 61 Lordou Vironos Street, 6023 Larnaca, Cyprus.

Hostinger processes personal data (such as access data and contact data) on our behalf and only in accordance with our instructions. We have concluded a data processing agreement (DPA) with the provider as required by Art. 28 GDPR. The use of a hosting provider is based on our legitimate interest in providing this website reliably and securely (Art. 6(1)(f) GDPR).

3. General information and mandatory disclosures

Data protection. Personal data is any information relating to an identified or identifiable natural person. We treat your personal data confidentially and in line with statutory data protection regulations and this Privacy Policy.

How we collect data. Some data is collected when you provide it to us — for example via a contact email. Other data is collected automatically or with your consent by our IT systems when you visit the website (mainly technical data such as your browser, operating system, or the time of access).

Legal bases. Where we obtain your consent, processing is based on Art. 6(1)(a) GDPR (and, for storing or reading information on your device, § 25(1) TDDDG). Where processing is necessary to perform a contract or pre-contractual steps, it is based on Art. 6(1)(b) GDPR. In other cases, processing is based on our legitimate interests under Art. 6(1)(f) GDPR. You can withdraw any consent at any time with future effect.

Storage duration. Unless a more specific retention period is stated in this policy, your data remains with us until the purpose for processing no longer applies. If you make a legitimate request for erasure or withdraw your consent, your data will be deleted unless we have other legally permissible reasons for storing it.

Data transfer to third countries. We may use services whose providers are located in third countries (e.g. the USA). Where data is transferred there, it takes place on the basis of an adequacy decision, the EU Standard Contractual Clauses, or your consent.

4. SSL/TLS encryption

For security reasons and to protect the transmission of confidential content, this site uses SSL/TLS encryption. You can recognise an encrypted connection by the “https://” in the address bar and the lock symbol in your browser. When SSL/TLS encryption is active, the data you transmit to us cannot be read by third parties.

5. Server log files

The hosting provider automatically collects and stores information in server log files, which your browser transmits automatically. This includes: browser type and version, operating system, referrer URL, host name of the accessing device, time of the server request, and IP address. This data is not merged with other data sources. It is processed on the basis of Art. 6(1)(f) GDPR, reflecting our legitimate interest in the technically error-free presentation and optimisation of our website.

6. Cookies

Our website uses cookies. Cookies are small text files that are stored on your device and cause no harm. Some cookies are technically necessary to operate the website; these are stored on the basis of Art. 6(1)(f) GDPR. Other cookies — for example those used for advertising or affiliate tracking — are only stored with your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG), which you give via our consent banner and can withdraw at any time. You can also set your browser to inform you about the use of cookies, to accept cookies only in certain cases, or to block them.

7. Enquiries by email, telephone or post

When you contact us by email, telephone, or post, your enquiry and all associated personal data (e.g. name, message) will be stored and processed by us for the purpose of handling your request. We do not pass on this data without your consent. This processing is based on Art. 6(1)(b) GDPR where your enquiry relates to the performance of a contract or pre-contractual measures. In all other cases, it is based on our legitimate interest in effectively handling the enquiries directed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR) where this has been requested. The data you send us will remain with us until you request deletion, withdraw your consent, or the purpose for storage no longer applies.

8. Google AdSense

This website uses Google AdSense, a service for integrating advertisements, provided by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google AdSense uses cookies and web beacons (invisible graphics) to deliver advertisements and to measure their performance. Through these, information such as visitor traffic, the ads displayed and how you interact with them, and your (shortened) IP address can be collected and transmitted to Google servers, including in the USA, where it is stored.

The use of Google AdSense takes place only on the basis of your consent in accordance with Art. 6(1)(a) GDPR and § 25(1) TDDDG. You can withdraw your consent at any time with future effect. For any transfer of data to the USA, Google relies on the EU Standard Contractual Clauses and/or the EU-US Data Privacy Framework.

You can deactivate personalised advertising in Google’s Ad Settings at https://adssettings.google.com. Further information can be found in Google’s advertising policy at https://policies.google.com/technologies/ads and in Google’s Privacy Policy at https://policies.google.com/privacy.

9. Affiliate / partner programmes

This website participates in affiliate partner programmes, including the network operated by AWIN AG, Eichhornstraße 3, 10785 Berlin, Germany.

Some links on this website are so-called affiliate links, which direct you to the offers of partner companies. If a purchase is made via such a link, we receive a commission from the respective partner. To attribute such referrals, the affiliate network sets cookies that store information such as the link clicked, the time of the click, and a pseudonymous identifier; a shortened IP address may also be processed in this context.

This processing takes place on the basis of your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG) and, where applicable, on our legitimate interest in properly accounting for referral commissions (Art. 6(1)(f) GDPR). You can withdraw your consent at any time with future effect. Further information can be found in AWIN’s privacy notice at https://www.awin.com/gb/legal/privacy-policy.

10. Your rights

Under the GDPR, you have the following rights regarding your personal data:

Right of access (Art. 15 GDPR) — to obtain information about the data we hold about you.
Right to rectification (Art. 16 GDPR) — to have inaccurate data corrected.
Right to erasure (Art. 17 GDPR) — to have your data deleted, where applicable.
Right to restriction of processing (Art. 18 GDPR).
Right to data portability (Art. 20 GDPR).
Right to object to processing based on legitimate interests (Art. 21 GDPR).
Right to withdraw consent at any time, with effect for the future, where processing is based on your consent.

To exercise any of these rights, please contact us using the details in section 1.

11. Right to object to promotional emails

We object to the use of contact data published as part of our legal notice (Impressum) for sending unsolicited advertising and information material. We expressly reserve the right to take legal action in the event of the unsolicited sending of advertising, for example through spam emails.

12. Right to lodge a complaint with a supervisory authority

In the event of breaches of the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or the place of the alleged breach (Art. 77 GDPR), without prejudice to any other administrative or judicial remedy.

Last updated: September 2026