Privacy Policy

1. Privacy at a Glance

General Notes

The following notes provide a simple overview of what happens to your personal data when you visit this website. Personal data is any data by which you can be personally identified. For detailed information on data protection, please refer to the privacy policy below.

Data Collection on this Website

Data processing on this website is carried out by the website operator. The operator's contact details can be found in the legal notice (Impressum) of this website.

Your data is collected, on the one hand, when you provide it to us. This may include data you enter in the inquiry form, transmit to us as part of an order (such as your recipe) or data stored as labelling data in NUTRITUS. Other data is collected automatically or with your consent by our IT systems when you visit the website (mainly technical data such as browser, operating system or time of the page view).

2. Controller

CONIUNCTA GmbH
Breslauer Strasse 350
90471 Nuremberg
Germany

Phone: +49 911 47715370
Email: nutritus@coniuncta.com

The controller is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data.

3. Hosting and Content Delivery

This website and the associated application backend are hosted by Cloudflare, Inc. (Cloudflare Pages, D1, R2, Workers). The servers are located in European data centres. Details on the handling of user data can be found in Cloudflare's privacy policy.

Use is based on Art. 6(1)(f) GDPR. We have a legitimate interest in a reliable and secure presentation of our website and application.

4. General Notes and Mandatory Information

Data Protection

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.

Retention Period

Unless a more specific retention period is stated within this privacy policy, your personal data remains with us until the purpose for the data processing no longer applies. For labelling documents and associated recipe data, the documentation and traceability obligations under food law (in particular Regulation (EC) No 178/2002) additionally apply.

Withdrawal of Your Consent to Data Processing

Many data processing operations are only possible with your express consent. You can withdraw consent you have already given at any time. The lawfulness of the data processing carried out until the withdrawal remains unaffected by the withdrawal.

Right to Lodge a Complaint with the Competent Supervisory Authority

In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority. The right to lodge a complaint exists without prejudice to other administrative or judicial remedies.

Right to Data Portability

You have the right to have data that we process automatically on the basis of your consent or in fulfilment of a contract handed over to you or to a third party in a common, machine-readable format.

Access, Erasure and Rectification

Within the scope of the applicable statutory provisions, you have the right at any time to free information about your stored personal data, its origin and recipients and the purpose of the data processing and, where applicable, a right to rectification or erasure of this data.

5. Data Collection on this Website

Inquiry Form

When you send us a quote request via the inquiry form, we process the details you enter (name, company, email address, optionally phone number, product details, message) as well as technical data (IP address, browser identifier, time) for the purpose of preparing a quote and preventing misuse. Processing is based on Art. 6(1)(b) GDPR (pre-contractual measures) and Art. 6(1)(f) GDPR (protection against abusive use).

You may optionally attach a recipe file to your inquiry. It is stored encrypted on Cloudflare servers in the European Union, treated strictly confidentially and used exclusively for preparing the quote and any subsequent order processing. If no order is placed, we delete uploaded recipe files and your IP address no later than 90 days after processing is completed; we delete the remaining inquiry data as soon as the purpose of the processing no longer applies and no statutory retention obligations prevent deletion.

Bot Protection with Cloudflare Turnstile

To protect the inquiry form and the login against automated access, we use Cloudflare Turnstile, a service of Cloudflare, Inc. Turnstile processes technical connection data (including IP address and browser characteristics) to distinguish between humans and bots; no advertising profiles are created. Processing is based on Art. 6(1)(f) GDPR (protection against spam and misuse).

User Accounts (Existing Accounts and Team)

Self-registration is no longer possible. The login serves the NUTRITUS team and existing accounts. For user accounts, we process name, email address and tenant assignment on the basis of Art. 6(1)(b) GDPR. Authentication uses server-side sessions; passwords are stored only as a secure hash.

Server Log Files

The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are: browser type and version, operating system used, referrer URL, host name of the accessing computer, time of the server request and IP address.

This data is not merged with other data sources. This data is collected on the basis of Art. 6(1)(f) GDPR.

Cookies

This website uses technically necessary cookies for authentication and session management. In addition, we only set cookies for statistics (Google Analytics) and marketing (Google Ads) if you have explicitly consented to them in the cookie banner. Until you consent, all statistics and marketing services are set to "denied" in accordance with Google Consent Mode v2.

The Google cookies (_ga, _ga_*, _gcl_*) apply to the entire domain coniuncta.com. Our other services on this domain, such as REGULARUS, ANALYSUS and our shop at coniuncta.com, can also read and use them; their own privacy notices apply there. If you withdraw your consent here, we delete these cookies for coniuncta.com.

You can adjust your cookie settings at any time by clicking Cookie settings in the footer.

5a. Google Analytics 4

This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses cookies and similar technologies to analyse the use of the website and to create reports on website activity.

Integration takes place via Google Tag Manager. Before your consent, no personal data is transferred to Google in accordance with Google Consent Mode v2 (`analytics_storage = denied`). Only after your express consent in the cookie banner are statistics cookies set and data transmitted to Google. IP anonymisation is active by default.

Processing is based on your consent under Art. 6(1)(a) GDPR and Section 25(1) of the German TTDSG. You can withdraw your consent at any time via the "Cookie settings" link.

Details on data processing by Google can be found at policies.google.com/privacy.

5b. Google Ads and Conversion Tracking

We use Google Ads, an online advertising programme of Google Ireland Limited, to draw attention to our services. In this context, Google's conversion tracking is used: if you reach us via a Google ad and, for example, send an inquiry via the inquiry form, a cookie is set that tells Google which ad led to the action.

Before your consent, no marketing cookies are set in accordance with Google Consent Mode v2 (`ad_storage`, `ad_user_data`, `ad_personalization = denied`). Advertising tracking is only activated after your express consent in the cookie banner. Processing is based on your consent under Art. 6(1)(a) GDPR.

5c. Google Tag Manager

This website uses Google Tag Manager from Google Ireland Limited. The Tag Manager is a technical container that centrally controls the integration of further services (Google Analytics, Google Ads). We only load it with your consent to statistics or marketing; your IP address is then transmitted to Google. The Tag Manager itself does not set cookies. We use Google's consent mode in its basic form: without your consent, the site sends no data to Google.

6. Your Data Stored in NUTRITUS

As part of processing your order, the following data is processed and stored:

• User and tenant data (name, email address, role, tenant assignment)
• Data of the food business operator under Art. 8 of EU 1169/2011 (business name, address)
• Recipe and ingredient data (product name, composition, ingredient master data, supplier details)
• Nutrition and allergen data (nutrition values per 100 g, Annex II allergens including traces)
• Labelling data (ingredient list, nutrition declaration, QUID, mandatory particulars, label documents)
• Audit log (who performed which action and when)
• Uploaded files (recipes, supplier datasheets) and finalised label PDFs

This data is processed exclusively to fulfil your order (Art. 6(1)(b) GDPR): the NUTRITUS team uses it to prepare your labelling documents under Regulation (EU) No 1169/2011, and a qualified reviewer carries out the release. Access is restricted to the persons working on your order and is recorded in the audit log. Storage takes place on Cloudflare servers in the European Union. Data is not disclosed to third parties unless this is necessary for the performance of the contract or you have expressly consented.

Labelling documents and associated recipe data are retained for as long as required for the order and the documentation obligations under food law (in particular Regulation (EC) No 178/2002).

7. Payment Processing via Stripe

Where online payment is agreed for orders, we use the payment service provider Stripe Payments Europe Ltd., Dublin, Ireland. During a payment process, you are redirected to a page hosted by Stripe. The payment data you enter there (credit card, account details, billing address) is processed exclusively by Stripe; we only receive the status of the payment and a Stripe customer ID for assignment.

Processing is based on Art. 6(1)(b) GDPR for the performance of the contract. Details on data processing by Stripe can be found at stripe.com/privacy.

8. Email Delivery via Resend

We send transactional emails (e.g. notifications of received inquiries, review requests, release confirmations) via Resend, Inc. (USA, EU region). Only the recipient address, sender address, subject, content and, where applicable, label PDF attachments are transmitted. Processing is based on Art. 6(1)(b) GDPR for the performance of the contract.

9. AI-Assisted Datasheet Extraction (Anthropic)

In the AI-assisted extraction of ingredient data, the contents of supplier datasheets (ingredient names, nutrition values, allergen information) are transmitted to Anthropic PBC (USA) in order to extract structured ingredient data. No personal data is transferred in this process. Processing is based on Art. 6(1)(f) GDPR (legitimate interest in efficient ingredient data management).

10. Changes to this Privacy Policy

We reserve the right to adapt this privacy policy so that it always complies with current legal requirements or to implement changes to our services in the privacy policy. The new privacy policy then applies to your next visit.

Version: July 2026