Privacy policy
Last updated: October 2026
1. Who is responsible
The controller under the GDPR is:
Sundeep Reddy Manubolu, sole proprietor (trading as MANUBOLU Naturals)
Geiselhoeringer Str. 22B, 84152 Mengkofen, Germany
Email: info@manubolu.de
We do not have a data protection officer. The law does not require one for our company.
2. What this shop is
This is a shop for businesses (B2B). We do not sell to consumers. We show prices only to registered customers whose account we approved.
3. Hosting and server log files
Namecheap, Inc. hosts this website on servers in the European Union. We have a data processing agreement with the provider. When you visit a page, the server stores log data. This data includes the IP address, date and time, the page that you requested, the browser and the operating system. We need this data to show the website and to keep it secure. Legal basis: Art. 6 (1) (f) GDPR (our legitimate interest in a safe and stable website). We keep log files for 30 days.
4. Cookies
We use cookies that the shop needs to work. Examples are the cookies for the cart, the login and the security of the website. Legal basis: Art. 6 (1) (f) GDPR and Section 25 (2) TDDDG. We use other cookies only if you agree in the cookie banner. The banner stores your choice in a cookie on your device. You can change or withdraw your choice at any time with the cookie button on the website. Legal basis for the consent: Art. 6 (1) (a) GDPR and Section 25 (1) TDDDG.
5. Customer account and approval
To see prices you must register. We ask for your name, company name, address, email address, phone number (if you give it) and VAT ID. We use this data to check that you are a business and to approve your account. We also store your login data. Legal basis: Art. 6 (1) (b) GDPR (steps before a contract) and Art. 6 (1) (f) GDPR (our interest to sell to businesses only). We keep the account data until you ask us to delete the account, unless the law requires us to keep it longer.
6. Orders, invoices and payment
For an order we process your company and contact data, the delivery address, the products and the order history. You pay by bank transfer in advance. We do not store card numbers. We write the invoices with the accounting software Lexware. Legal basis: Art. 6 (1) (b) and (c) GDPR. German tax and commercial law require us to keep invoices and accounting records for 8 years and business letters for 6 years.
7. Shipping
We give the delivery address and contact data of the recipient to the carrier that delivers your goods. This is the minimum data that the carrier needs. Legal basis: Art. 6 (1) (b) GDPR.
8. Contact form and email
If you use the contact form, we ask for your name, email address and message. Company name and VAT ID are optional. The form sends your data as an email to us. We do not save the message on the website. If you write to us by email, we store your email and your contact data. We use them to answer you. Legal basis: Art. 6 (1) (b) GDPR or Art. 6 (1) (f) GDPR. We delete the data when we have answered your request and no legal duty to keep it applies. Business correspondence that we must keep by law stays for 6 years.
The shop sends its emails (for example the contact form message, the registration and approval emails and order emails) through the email service Brevo of Sendinblue SAS, Paris, France. Brevo gets the email address, the name and the content of these emails. We have a data processing agreement with Brevo. Legal basis: Art. 6 (1) (b) and (f) GDPR.
Our email address info@manubolu.de uses email forwarding from Cloudflare, Inc. and the mail service Gmail from Google. Incoming emails and contact form messages go through these services. Both providers are in the USA. See section 12.
9. Security and spam protection
We use security tools that record failed login attempts with the IP address. The contact form has a hidden field that stops spam robots. We use these tools to protect the website and the accounts. Legal basis: Art. 6 (1) (f) GDPR.
10. Links to social media
This website has links to our Instagram and LinkedIn pages. These are normal links. No data goes to these services until you click on a link. After that, the privacy policy of the service applies.
11. Fonts
The fonts are loaded from our own server. Your browser does not connect to Google or other font providers.
12. Transfer to third countries
Our website server is in the EU. Our email services (Cloudflare and Google) are companies in the USA. They process email data in the USA. The transfer is based on the EU-US Data Privacy Framework (adequacy decision of the European Commission of 10 July 2023) or on EU standard contractual clauses. We do not transfer other personal data to countries outside the EU or the EEA.
13. Your rights
You have the right to:
- get information about your stored data (Art. 15 GDPR);
- correct wrong data (Art. 16 GDPR);
- delete your data (Art. 17 GDPR);
- restrict the processing (Art. 18 GDPR);
- receive your data in a common format (Art. 20 GDPR);
- object to the processing that is based on our legitimate interest (Art. 21 GDPR);
- withdraw a consent at any time. Data that we processed before is still lawful.
To use your rights, write to info@manubolu.de.
14. Complaint to a supervisory authority
You can complain to a data protection authority. The authority for us is:
Bayerisches Landesamt fuer Datenschutzaufsicht (BayLDA)
Promenade 18, 91522 Ansbach, Germany
15. No automated decisions
We do not use automated decision-making or profiling.