Visit website

Privacy policy

Privacy Policy


Rapunzel Naturkost GmbH


We appreciate your interest in our web platforms www.rapunzel.de, www.bionella.info, www.jedes-essen-zaehlt.de, www.one-world-award.com, www.one-world-award.de, www.genfrei-gehen.de, www.rapunzel.com.tr, and www.ticket.rapunzelwelt.de (hereinafter collectively referred to as the "Website"). We respect your privacy. Therefore, we collect and process your personal data solely in accordance with the relevant legal provisions. This privacy policy explains what types of personal data we collect when you use the Website and how we process it.


1. Controller and Data Protection Officer


1.1 The controller within the meaning of the EU General Data Protection Regulation (Art. 4 No. 7 GDPR) is Rapunzel Naturkost GmbH, Rapunzelstraße 1, 87764 Legau, Telephone +49 (0)8330 / 529-0, Email: info@rapunzel.de (hereinafter referred to as “Rapunzel,” “we,” “our,” “us,” etc.).


1.2 You can contact Rapunzel's Data Protection Officer at Rapunzel Naturkost GmbH, Attn: Data Protection Officer, Rapunzelstraße 1, 87764 Legau, Telephone +49 (0)8330 529-1208, Email: datenschutzbeauftragter@rapunzel.de.


2. Personal Data

Personal data includes all information that can be attributed to you individually, either directly or indirectly, such as your name, address, telephone number, fax number, and email address. Non-personal data includes general information that cannot be used to determine your identity, such as the number of website users.


3. Collection and Processing of Personal Data


3.1 Web Server Logs (including IP addresses)

When you visit our Website, our web server automatically collects your IP address, the date and time of your visit, the subsites you access, the website you visited previously, the browser you use (e.g., Mozilla Firefox or Google Chrome), the operating system you use (e.g., Windows 10), and the domain name and address of your internet provider (e.g., Deutsche Telekom). If cookies are used on the Website, the web server also stores this information.

We process this information to:

  • (i) Provide you with the best possible and meaningful user experience during your visit and use of our Website and services, and
  • (ii) Optimize the Website, its layout, and content, as well as our services.

The legal basis for this processing is our legitimate interest (Art. 6(1)(f) GDPR), which consists of providing the Website and our services in a manner that meets your expectations and needs while fulfilling our commercial interests.

Additionally, we may process and use the information collected by the web server in cases of system misuse, in collaboration with your internet provider and/or local authorities, to identify the source of such misuse. The legal basis for this processing is also our legitimate interest (Art. 6(1)(f) GDPR), which is to protect the integrity of the Website, our systems, and our users.


3.2 Services on Our Website

We also collect personal data from you only when you voluntarily provide it to use one of our offered services (e.g., submitting a contact form, subscribing to our newsletter, participating in contests, or submitting complaints via the provided form). We process this data for the purposes described below.


a. Contact Form

We collect your email address when you send us an inquiry via the contact form. If you optionally provide your title, name, address, country, phone number, or subject line and/or write us a message, we collect this data as well.

We process this data to handle and respond to your inquiry submitted through the contact form. The legal basis for this is the performance of pre-contractual measures at your request (Art. 6(1)(b) GDPR).


b. Newsletter

With your consent, we collect your email address when you register for our newsletter. If you optionally provide additional details such as your title, name, or address, we collect that data as well.

We process this data to send you our newsletter. To obtain your consent, we use the double-opt-in method: after registering, you receive an email with a confirmation link. Only after clicking this link is your email address activated for the newsletter.

We use the Emarsys newsletter service for administration, sending, and evaluation. Details are provided in Sections 4 and 6.3 below.

You can withdraw your consent to receive the newsletter at any time, effective for the future, without affecting the lawfulness of processing based on consent before withdrawal, by clicking the unsubscribe link in the newsletter's footer.

The legal basis for this is your consent (Art. 6(1)(a) GDPR and § 7(2)(3) UWG).


c. Complaints and Grievances

You can submit complaints or grievances about our products via the provided form. In doing so, we collect your name, address, email address, phone number, product details (size and expiration date). If you optionally provide additional details (e.g., title, country, or batch number) and/or write a message, we also collect this data.

We process this data to handle and respond to your complaint or grievance submitted through the form. The legal basis for this is the performance of our contractual obligations (Art. 6(1)(b) GDPR).


d. Contests

For contests, we collect your name, address, and email address. Depending on the specific contest, additional personal data may be required. Further details are provided in the terms and conditions of the respective contest.

We process this data to conduct and manage the contest. The legal basis for this is the performance of our contractual obligations (Art. 6(1)(b) GDPR), as specified in the contest terms.


3.3 Data Transmission

We take appropriate measures to secure your personal data. For security and confidentiality, this Website uses SSL/TLS encryption for data transmission. You can identify an encrypted connection by the "https://" in the browser’s address bar and the lock icon in the browser’s toolbar.


4. Sharing of Personal Data


4.1 We do not share your personal data with third parties unless this is necessary to fulfill your request, permissible under applicable laws, or you have given us your consent.


4.2 We are further entitled to outsource the processing and use of personal data, in whole or in part, to external service providers acting as data processors (Art. 4 No. 8 GDPR) in accordance with data protection regulations. If these service providers are based outside the European Union or the European Economic Area (EEA), we will implement appropriate security measures as required by legal and regulatory standards to ensure the protection of your personal data.

The following external service providers process data on our behalf:


  • ascana Medienagentur

Development, maintenance, and support of the website’s CMS

Recipient country: Germany


  • IT-Informatik GmbH

Hosting services

Recipient country: Germany


  • Emarsys Interactive Services GmbH

Newsletter administration, dispatch, and evaluation

Recipient country: Germany


  • Google Analytics – Google LLC

Web analytics to optimize the platform by tracking activities, analyzing data based on user profiles, and generating corresponding reports

Recipient country: USA (certified under the EU-US Privacy Shield)