Privacy Policy

1. Introduction

We at NASPEX – Natural Spirit Experience (www.naspex.info) take your privacy seriously. This Privacy Policy informs you about how we collect, use, and protect your personal data in accordance with the General Data Protection Regulation (GDPR/DSGVO) and relevant national laws.

2. Data Controller
Franz Bauer
Johann Roithner Straße 79
4050 Traun
Austria
Email: organic@naspex.info

3. What personal data we collect
We collect and process the following data:

Contact information: name, email address, phone number (via forms or email)

Order data: shipping address, billing address, product details

Payment information: processed securely via third-party providers (Stripe, PayPal)

Newsletter data: email address and consent preferences

Technical data: IP address, browser type, device, cookies (via Wix)

Social media data: if you interact with us on platforms like Instagram or LinkedIn

4. Why we process your data
We use your data to:

Process and fulfill orders

Respond to contact requests

Send newsletters and product updates (only with consent)

Analyze website usage and improve functionality

Meet our legal and contractual obligations

5. Legal basis
We process your data based on:

Art. 6 (1)(b) GDPR – contract fulfillment (e.g. orders)

Art. 6 (1)(a) GDPR – your consent (e.g. newsletter)

Art. 6 (1)(f) GDPR – legitimate interest (e.g. site analytics)

Art. 6 (1)(c) GDPR – legal obligations (e.g. tax regulations)

6. Cookies & Tracking
Our website uses cookies to personalize content and analyze traffic. You can manage your preferences via the cookie banner on first visit.

We use:

Essential cookies (for functionality)

Analytics cookies (via Wix)

Marketing cookies (optional; e.g. social media pixels)

7. Use of third-party providers
We may share data with trusted services only as needed to fulfill our services:

Provider   Purpose   Location
Wix.com Ltd.   Website hosting   Israel/EU/USA (data center based)
Stripe / PayPal   Secure payment processing   USA
Google Fonts / Google Analytics   Fonts, analytics (optional)   USA
Meta Platforms / Instagram   Embedded social media content   USA

All providers follow GDPR or equivalent privacy frameworks (e.g. Standard Contractual Clauses).