Privacy policy
This policy covers redox-gesundheit.de and its password-protected review version at ateneto.com/redox-pruefung. Personal data includes information such as your name, email address or IP address.
Controller
李晓 (Xiao Li)
Hauptstr. 16
86514 Ustersbach
Deutschland / Germany
E-Mail: st@ateneto.com
Telefon / Phone: +49 8236 3899869
Purposes, legal bases and recipients
We process personal data to provide and secure this website and answer enquiries. Technical operation and general enquiries are based on our legitimate interests under Article 6(1)(f) GDPR. Enquiries concerning a contract or steps before entering into a contract are processed under Article 6(1)(b) GDPR. Where processing requires consent, Article 6(1)(a) GDPR applies. Access to information on your device is also subject to section 25 of the German TDDDG.
Technical access data is received by our hosting provider. Email and communication providers process data needed to handle your messages. Authorities receive data where legally required. Within our organisation, access is limited to those who need the data for their tasks.
Hosting, encryption and server logs
The review version uses DomainFactory's European hosting platform. Provider: DomainFactory GmbH, c/o WeWork, Neuturmstrasse 5, 80331 München, Germany. Hosting serves our legitimate interest in a secure and reliable website under Article 6(1)(f) GDPR. Information is available in DomainFactory's privacy policy.
The web server processes IP addresses, request dates and times, requested files and URLs, transfer volume and response status, browser and operating-system information, and the referring page. This is necessary to deliver the website, secure the system and investigate misuse. Data is not combined with other data sources. DomainFactory normally retains Apache access logs for 14 days. Longer retention may be necessary to investigate a specific security incident.
The hosted website uses HTTPS encryption. The local design preview is not the hosted service.
Server-side access statistics
DomainFactory also provides server-side statistics, which may include IP addresses, referring pages, country inferred from the IP address, and browser information. These are based on server requests and do not require browser analytics software. Their purpose is to understand usage and technical operation, under Article 6(1)(f) GDPR. According to the provider, statistics remain stored until deleted by the hosting administrator; the 14-day period for Apache logs does not apply to them. See DomainFactory's information on logs and statistics.
Cookies, fonts and external content
This website itself sets no cookies and uses no local or session storage for analytics or advertising. Images, the WeChat QR code, product documents and design assets are hosted locally. No external fonts, tracking pixels, maps or videos are embedded.
Password-protected review version
Review credentials are transmitted to the web server over HTTPS and checked to control access. Your browser may retain them for the session. This protects the unpublished draft, based on Article 6(1)(f) GDPR, and does not create a personal customer account.
Contact by email or phone
When you email us, we process your address and the information in your message. When you call, we process your phone number and information recorded to answer your enquiry. The purpose is to handle and respond to your request. Article 6(1)(b) GDPR applies to contractual enquiries; otherwise Article 6(1)(f) applies, reflecting our interest in answering enquiries.
Email communication uses the Microsoft Exchange / Microsoft 365 service supplied through DomainFactory (Microsoft Ireland Operations Limited). This processes message content, sender and recipient addresses, and delivery information. Further information: DomainFactory and Microsoft privacy statement.
We delete enquiries after final resolution when no further correspondence is required. Business correspondence or contractual documents subject to statutory retention are kept for the applicable legal period.
International processing by Microsoft
Microsoft services may involve processing outside the EU/EEA. Its linked privacy statement describes legal safeguards for international transfers, including European Commission standard contractual clauses. Information about these safeguards is available through that statement and on request using our contact details.
WeChat contact
The QR code is an image stored on our own webspace; viewing it does not connect your browser to WeChat. If you scan it in your app and contact us, we process the profile and contact data and messages you send to answer your request, using the legal bases and retention criteria described above. You can also contact us by email or phone.
The app itself is subject to the privacy terms of the provider responsible for your WeChat or Weixin account. Processing outside the EU/EEA may occur. This website does not control the app or its data processing.
Links to the ASEA shop
Shop buttons open our personal ASEA partner page. The partner identifier allows ASEA to associate the visit with our distributorship. This website uses no tracking script for that purpose. ASEA is contacted only when you open the link. Orders and payments take place on that external site, under the privacy notices and contractual terms of the provider named there. If you ask us for help with an order, we process only information needed to help.
Photos
We publish photographs that may identify people. Publication based on consent is covered by Article 6(1)(a) GDPR. Consent can be withdrawn for the future using the contact details above.
Retention and your rights
We retain personal data only for its specified purpose, subject to statutory retention duties. Access is limited during any mandatory retention period when the data is no longer needed for the original purpose.
Subject to the conditions in the GDPR, you have rights of access (Article 15), rectification (16), erasure (17), restriction (18), portability (20), objection (21), withdrawal of consent (Article 7(3)) and complaint (77). Contact st@ateneto.com to exercise your rights. Withdrawing consent does not affect the lawfulness of earlier processing.
Where processing is based on Article 6(1)(f), you may object for reasons relating to your particular situation. We will then stop unless overriding compelling legitimate grounds exist or processing is needed for legal claims. You may object to direct marketing at any time without giving reasons.
You may complain to a supervisory authority, including the authority where you live, work, or believe an infringement occurred. The authority responsible for us is the Bavarian State Office for Data Protection Supervision, Promenade 18, 91522 Ansbach, Germany.
If the conditions of Article 20 GDPR apply, you may receive data processed automatically on the basis of consent or a contract in a commonly used machine-readable format, or ask for it to be sent directly to another controller where technically feasible.
Version and source
19 October 2026. Prepared using the Melonlabs privacy policy generator, adapted to this website and translated from the German review version. We update this policy when our processing changes.