Privacy Policy

Status: August 2026

1. Controller

NEL GLOBAL COMMERCE LIMITED
Flat 5, 4/F, Won Hing Building
74–78 Stanley Street
Central
Hong Kong

Company Registration No.: 80469761
Business Registration Certificate No.: 80469761-000-05-26-1

Email: support@hanna-health.de


2. General Information on Data Processing

We process personal data exclusively in accordance with applicable data protection laws, in particular the General Data Protection Regulation (GDPR), insofar as it applies to our data processing.

The provision of personal data is neither legally nor contractually required but may be necessary for the conclusion or fulfillment of a contract.

Personal data means any information relating to an identified or identifiable natural person.


3. Data Security (SSL/TLS)

Our website uses SSL/TLS encryption to protect the transmission of confidential content. You can recognize an encrypted connection by "https://" and the lock symbol in the address bar of your browser.


4. Server Log Files

The following data is automatically processed when you visit our website:

  • accessed pages and files

  • date and time of access

  • IP address

  • browser type and browser version

  • operating system

  • referrer URL

  • amount of data transferred

  • requesting internet service provider

Purposes:

  • operational security

  • error analysis

  • abuse prevention

  • technical optimization

Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest)


5. Hosting & Platform (Shopify)

Our online shop is operated via the Shopify platform.

Shopify provides the technical infrastructure of our online shop, including hosting, shopping cart, checkout, order management, and security features.

As part of using our online shop, personal data may be transmitted to Shopify and processed there.

Shopify may process data particularly in Canada, the USA, and other countries where Shopify or contracted service providers operate.

If personal data is processed outside the European Union or the European Economic Area and no adequacy decision exists, data transfer is based on appropriate safeguards, especially the EU Standard Contractual Clauses (SCC), if necessary.

Further information can be found in Shopify's privacy policy.


6. Contact

If you contact us by email or via a contact form, we process your name, email address, and the content of your message exclusively to handle your inquiry.

Legal bases:

  • Art. 6 para. 1 lit. b GDPR

  • Art. 6 para. 1 lit. f GDPR

The data will be deleted as soon as it is no longer necessary for the respective purpose and no legal retention obligations exist.


7. Orders & Contract Execution

To carry out your order, we process in particular:

  • name

  • delivery address

  • billing address

  • email address

  • phone number (if provided)

  • order information

  • payment information

Recipients may include in particular:

  • shipping service providers

  • fulfillment service providers

  • payment service providers

  • IT service providers

  • suppliers or dropshipping partners, insofar as necessary for contract fulfillment.

Legal basis: Art. 6 para. 1 lit. b GDPR.


8. Payment Providers

We use various payment service providers for payment processing.

Depending on the chosen payment method, the necessary data will be transmitted to the respective payment service provider.

This includes in particular:

  • Airwallex

  • PayPal

  • Klarna (if available)

  • credit card providers

  • banks

  • card organizations

  • other payment methods offered at checkout

Processing is carried out exclusively for payment execution, fraud prevention, and handling refunds or disputes.

Legal basis: Art. 6 para. 1 lit. b GDPR.


9. Newsletter

If you subscribe to our newsletter, we use your email address exclusively to send our newsletter.

Subscription is done via the double opt-in procedure.

You can revoke your consent at any time with effect for the future.

Legal basis: Art. 6 para. 1 lit. a GDPR.


10. Tracking & Marketing Tools

Provided you have consented, we use analytics and marketing services, in particular:

  • Google Ads

  • Google Analytics (if used)

  • Meta Pixel

  • Pinterest Tag

  • Snap Pixel

  • Klaviyo

  • other marketing and analytics tools used in our online shop.

These services are used exclusively after your consent via our cookie consent tool.

Legal basis: Art. 6 para. 1 lit. a GDPR.


11. Cookies & Consent Management

We use cookies and similar technologies.

This includes in particular:

  • technically necessary cookies

  • functional cookies

  • analytics cookies

  • marketing cookies

Non-technically necessary cookies are only set after your explicit consent.

You can revoke or change your consent at any time via our cookie consent tool.


12. Storage Duration

We store personal data only as long as necessary for the respective purposes or as required by legal retention obligations.

After the respective periods expire, personal data will be deleted or anonymized.


13. Rights of Data Subjects

Insofar as the GDPR applies, you have the following rights in particular:

  • right of access

  • right to rectification

  • right to erasure

  • right to restriction of processing

  • right to data portability

  • right to object

  • right to withdraw consent


14. Right to Object

You have the right to object at any time to the processing of personal data based on Art. 6 para. 1 lit. f GDPR.

If personal data is processed for direct marketing, you can object to the processing at any time.


15. Right to Complain

Insofar as the GDPR applies, you have the right to lodge a complaint with a competent data protection supervisory authority.


16. Data Transfers to Third Countries

As we are a company based in Hong Kong and cooperate with international service providers, personal data may be processed outside the European Union or the European Economic Area.

This particularly concerns:

  • Hong Kong

  • Canada

  • USA

  • other countries where our service providers operate.

If necessary, the transfer is based on appropriate safeguards, especially the EU Standard Contractual Clauses (SCC) or comparable protection mechanisms.


17. Changes to this Privacy Policy

We reserve the right to change this privacy policy if required due to changes in the legal situation, technical developments, or changes in our services.

The current version published on our website applies at all times.


© 2026 NEL GLOBAL COMMERCE LIMITED