1. Data Protection at a Glance
General Information
Protecting your personal data is important to us. In this Privacy Policy, we inform you about which personal data we process when you visit our website moohgmbh.com, the purposes for which this is done, and your rights under the General Data Protection Regulation (GDPR).
Personal data means any information relating to an identified or identifiable natural person.
This website is used exclusively to provide information about the products and services offered by MOOH GmbH, in particular oral microbiome analysis and oral probiotics.
No oral microbiome analyses are commissioned or carried out via this website, and no analysis results are processed. Products are purchased and oral microbiome analyses are commissioned and carried out via separate websites or platforms. The respective privacy information of the companies responsible for these websites or platforms applies to the data processing carried out there.
2. Controller
The controller responsible for the processing of personal data on this website is:
MOOH GmbH
Marktplatz 18
69469 Weinheim
Germany
Phone: +49 6201 8732406
E-mail: hello@moohgmbh.com
3. Hosting
Our website is hosted by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany.
STRATO processes personal data arising in connection with the operation and use of our website on our behalf. This may include, in particular, technical access data and IP addresses.
The processing serves to ensure the secure, stable and reliable provision of our website and to detect and prevent attacks and misuse.
The legal basis for the processing is Art. 6(1)(f) GDPR. Our legitimate interest lies in providing a secure and fully functional website and protecting our IT infrastructure.
We have concluded a data processing agreement with STRATO pursuant to Art. 28 GDPR.
4. Server Log Files
When you access our website, technical access data is collected by the web server and stored in so-called server log files.
This may include, in particular:
- IP address of the accessing device
- Date and time of access
- Page accessed or file requested
- Referrer URL
- Browser type and browser version
- Operating system used
- Other technical information required for the provision and security of the website
The processing of this data serves in particular to ensure the technical provision, stability and security of our website and to detect and prevent attacks and misuse.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in providing a secure and reliable website and protecting against technical disruptions, attacks and misuse.
STRATO states that visitor IP addresses are stored in log files for a maximum of seven days for the purpose of detecting and preventing attacks. In the web hosting log files provided by STRATO, the hostname or IP address of the client is anonymised for data protection reasons.
The data is deleted after the storage period required for the purposes stated above has expired or is anonymised in accordance with the technical configuration of STRATO.
5. Cookies
Our website uses exclusively technically necessary cookies. We do not use cookies for analytics, tracking or marketing purposes.
Cookies are small text files that are stored on your device or that may access information already stored on your device.
Technically Necessary Cookies
The cookies we use are required for the technical functionality and security of the website.
The storage of information on your device or access to information already stored on your device is based on Section 25(2) of the German Telecommunications and Telemedia Data Protection Act (TDDDG), insofar as the statutory requirements are met.
Where personal data is processed through the use of cookies, the legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in ensuring the secure and technically functional provision of our website.
Session Cookie sessionid
The sessionid cookie is used to maintain a technical session during your visit to the website.
It contains a technical session identifier and is not used to analyse your browsing behaviour or to track you for advertising purposes.
The cookie is deleted when the session ends or when you close your browser.
Security Cookie csrftoken
The csrftoken cookie is used to protect the website against so-called Cross-Site Request Forgery (CSRF) attacks.
It serves exclusively for technical security purposes and prevents unauthorised requests from being carried out in your name.
The cookie does not contain any analytics or marketing information.
No Analytics or Marketing Services
No analytics, tracking or marketing services are used on this website.
In particular, we do not use services such as Google Analytics, Meta Pixel or comparable tracking technologies.
6. Contact Form
Our website provides the option of contacting us via a contact form.
When you use the contact form, we process the personal data you enter. This includes, in particular:
- Name, if provided by you
- E-mail address
- Telephone number, if provided by you
- Content of your message
- Other information you voluntarily provide to us
We use this data exclusively to process your enquiry, contact you and answer any follow-up questions.
The contact form is submitted via an encrypted connection (HTTPS). The message is transmitted by e-mail to the responsible contact address of MOOH GmbH via the technical infrastructure operated by us at STRATO.
The legal basis for processing is Art. 6(1)(f) GDPR. Our legitimate interest is to process your enquiry and contact you at your request.
If your enquiry is aimed at entering into a contract or taking pre-contractual measures, Art. 6(1)(b) GDPR may also serve as the legal basis.
The data submitted via the contact form is stored only for as long as necessary to process your enquiry. The data is then deleted unless statutory retention obligations apply or further storage is necessary for the establishment, exercise or defence of legal claims.
7. Recipients of Personal Data
As a general rule, we only process and disclose personal data where this is necessary for the respective purposes.
In the course of operating this website, personal data may in particular be transmitted to the following categories of recipients:
- STRATO GmbH as hosting and technical service provider
- Where applicable, technical service providers for maintenance and support
Where service providers process personal data on our behalf, this is carried out on the basis of appropriate data processing agreements pursuant to Art. 28 GDPR.
As a general rule, we do not disclose your personal data to other third parties unless there is a legal obligation to do so or you have expressly consented to such disclosure.
8. External Websites and Links
Our website may contain links to external websites and platforms where products can be purchased or services can be used.
When you click on such a link, you leave our website.
As a general rule, we have no influence over data processing on external websites and platforms. The respective operator or controller of the external website or platform is responsible for the processing of personal data carried out there.
The respective privacy information of the companies responsible for these websites or platforms applies to such data processing.
We recommend that you read the privacy policy of the respective external website or platform before entering personal data there or using its services.
9. No Processing of Analysis or Health Data via This Website
This website serves exclusively to provide information about the products and services offered by MOOH GmbH.
In particular, moohgmbh.com does not:
- receive saliva samples,
- commission or perform microbiome analyses,
- provide analysis results,
- collect or analyse health data in connection with a microbiome analysis, or
- process product purchases.
The processing of personal data in connection with ordering an analysis kit, carrying out a microbiome analysis or providing analysis results takes place on the external websites or platforms designated for these purposes and is governed by the privacy information applicable there.
10. Your Rights
Subject to the statutory requirements, you have the following rights with regard to your personal data:
Right of Access
You have the right to request information as to whether we process personal data relating to you and, if so, which data this concerns.
Right to Rectification
You have the right to request the rectification of inaccurate personal data and the completion of incomplete personal data.
Right to Erasure
Subject to the statutory requirements, you have the right to request the erasure of your personal data.
Right to Restriction of Processing
Subject to the statutory requirements, you have the right to request the restriction of the processing of your personal data.
Right to Data Portability
Subject to the statutory requirements, you have the right to receive personal data that you have provided to us in a structured, commonly used and machine-readable format or to request that such data be transmitted to another controller.
Right to Object
You have the right to object, on grounds relating to your particular situation, at any time to the processing of your personal data where such processing is based on Art. 6(1)(e) or (f) GDPR.
Withdrawal of Consent
Where processing is based on your consent, you may withdraw your consent at any time with effect for the future.
The lawfulness of processing carried out before your withdrawal remains unaffected.
11. Right to Lodge a Complaint with a Supervisory Authority
You have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data.
The following data protection supervisory authority is generally responsible for MOOH GmbH:
The State Commissioner for Data Protection and Freedom of Information Baden-Württemberg (LfDI Baden-Württemberg)
Lautenschlagerstraße 20
70173 Stuttgart
Germany
P.O. Box 10 29 32
70025 Stuttgart
Germany
Further information and current contact details can be found on the website of the LfDI Baden-Württemberg.
12. Data Security
We take appropriate technical and organisational measures to protect your personal data against loss, destruction, manipulation and unauthorised access.
Data transmission on our website takes place via an encrypted HTTPS connection.
Our security measures are regularly reviewed and adapted in accordance with technological developments and legal requirements.
13. Current Version of This Privacy Policy
We reserve the right to amend this Privacy Policy if the technical, legal or organisational framework conditions of data processing change.
The current version published on this website shall apply.
Last updated: 19 August 2026