Privacy Policy

This website contains affiliate links to products from Nature Heart, H2 AWAKE and Annapurna Life. If you click on such a link and buy a product, we receive a commission from the retailer.

Tracking by the partner: When you click an affiliate link, cookies are set in order to attribute the purchase to your visit. These cookies are managed by the respective partner (nature-heart.de, h2-awake.de or annapurna-life.com). We have no access to your purchase data at the partner.

Note: Using affiliate links does not result in any additional cost to you.

This website uses the TikTok Pixel, an analytics and tracking service of TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland (“TikTok”). The pixel is activated only after your express consent via our cookie banner.

9.1 Standard pixel

Purpose: reach measurement, conversion tracking, optimisation of advertisements and retargeting on TikTok.
Data processed: IP address, browser and device information, pages visited, referrer URL and a pseudonymised user ID.
Legal basis: consent (Art. 6(1)(a) GDPR / Art. 31(1) revDSG).

9.2 Advanced Matching (AAM)

With your consent to “Marketing”, we use what is known as Advanced Matching. When you submit our contact form, we transmit your email address (and, if applicable, your phone number) to TikTok in hashed form (SHA-256). Plain-text data is never transmitted.

Purpose: improved attribution of conversions to TikTok user accounts.
Mode: manual AAM, no automatic reading of form fields. Data is processed only after an explicit form submission.
Legal basis: consent (Art. 6(1)(a) GDPR / Art. 31 revDSG).

9.3 First-party cookies

With your consent, the TikTok Pixel sets cookies directly on the domain introdrink.ch (first-party context). Typical cookies:_ttp,_tt_enable_cookie. Storage period: up to 13 months. You can delete these cookies at any time via the cookie settings or your browser.

9.4 Enhanced data postback (statistics)

With your additional consent to “Statistics”, we transmit extended interaction data to TikTok: click and scroll events, time spent on page, loading times and custom events (e.g. affiliate clicks). This data is used exclusively to optimise ad delivery. Without marketing consent, no postback data is sent.

9.5 Transfer to third countries

TikTok may transfer data to countries outside the EU/EEA and Switzerland, including the USA and China. These countries do not have a level of data protection equivalent to that of the EU. TikTok uses standard contractual clauses for this purpose.

9.6 Withdrawal

You can withdraw your consent at any time with effect for the future by clicking “Cookie settings” in the footer and deactivating the relevant switches or by clicking “Essential only”.

Further information can be found in the TikTok privacy policy.

This website also uses the Meta Pixel (also known as the “Facebook Pixel”) of Meta Platforms Ireland Ltd., Merrion Road, Dublin 4, D04 X2K5, Ireland (“Meta”). Pixel ID: 615709235699514. The pixel is activated only after your express consent via our cookie banner; without consent, the status consent revoked applies and no events are transmitted to Meta.

10.1 Purposes and events

Purpose: reach measurement, conversion tracking, optimisation of advertisements and retargeting on Facebook and Instagram.
Standard events: PageView, ViewContent (on product detail pages).
Custom events: AffiliateClick, AwakeAffiliateClick andAnnapurnaAffiliateClick when clicking affiliate CTAs to nature-heart.de, h2-awake.de and annapurna-life.com. No purchase value (value) is transmitted; the actual order takes place at the partner.
Legal basis: consent (Art. 6(1)(a) GDPR / Art. 31(1) revDSG).

10.2 Data processed

IP address, browser and device information, pages visited, referrer URL and a pseudonymised user ID. For this purpose, Meta sets cookies (including _fbp) with a storage period of up to 90 days.

10.3 Advanced Matching

Automatic Advanced Matching (automatic reading of form fields) is deactivated. Manual Advanced Matching takes place, with your marketing consent, exclusively after explicit submission of the contact form and exclusively with data that is SHA-256 hashed on the client side (email and, if applicable, phone number). Plain-text data is never transmitted to Meta.

10.4 Transfer to third countries

Meta may transfer data to countries outside the EU/EEA and Switzerland, in particular to the USA. Meta uses standard contractual clauses for this purpose and is certified under the EU-US Data Privacy Framework.

10.5 Withdrawal

You can withdraw your consent at any time with effect for the future by clicking “Cookie settings” in the footer and deactivating the relevant switches or by clicking “Essential only”. You can also delete cookies that have already been set via your browser.

Further information can be found in the Meta privacy policy.

This website is hosted by Netlify, Inc., 512 2nd Street, Suite 200, San Francisco, CA 94107, USA (“Netlify”). When you access our website, technical connection data (in particular IP address, time stamp, user agent, requested URL) is processed by Netlify in server logs in order to ensure the delivery, security (e.g. DDoS protection) and availability of the website.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in stable and secure operation) and Art. 31(2)(c) revDSG respectively.
Storage period: usually a maximum of 30 days in the host's server logs.

Transfer to third countries: Netlify is based in the USA. Data is therefore transferred to the USA. Netlify is certified under the EU-U.S. Data Privacy Framework; in addition, standard contractual clauses (SCC) of the EU Commission are in place, which are intended to ensure an adequate level of data protection.

For our contact form, we use Lovable Cloud, a managed backend infrastructure for database and API functions. When the form is submitted, the following data is processed and stored in a database:

• Name
• Email address
• Phone number, if provided (optional)
• Subject and message text
• Time stamp of submission

Purpose: processing your enquiry, replying by email, follow-up on further questions and protection against spam and abuse. Data is not passed on to third parties.

Legal basis: Art. 6(1)(b) GDPR (pre-contractual and contractual measures) and Art. 6(1)(f) GDPR (legitimate interest in processing your enquiry) and Art. 31 revDSG respectively.
Storage period: until your enquiry has been fully processed; beyond that, insofar as statutory retention obligations apply or it is necessary to defend against legal claims (usually up to 3 years). You can request the deletion of your data at any time, unless statutory obligations prevent this.

Data processing agreement: A data processing agreement is in place with the provider of the backend infrastructure. Data is processed confidentially and protected by technical and organisational measures (including encrypted transmission, access control and row-level security).