Peptide Obermeier

Privacy policy

This policy explains how personal data is processed on the Peptide Obermeier B2B website. Updated: September 8, 2026. Version: 2026-09-08.5.

1. Controller and contact

For privacy questions and to exercise your rights, contact us at info@km-solutionsllc.com or call +49 156 79015966.

2. Website access and hosting

When you visit the website, information processed includes your IP address, the requested address, the time of access and technical browser and connection information. This data is necessary to deliver the website, identify errors and defend against attacks. The legal basis is Article 6(1)(f) GDPR; our legitimate interest is the secure and reliable operation of our website.

The website uses OpenAI’s ChatGPT Sites hosting service. The technical infrastructure uses Cloudflare Workers and a D1 database. OpenAI and its technical service providers process the data required to deliver, store and secure the website on our behalf. Hostinger handles domain administration and DNS. Domain administration alone does not send the contents of your inquiry form to Hostinger.

Under the ChatGPT Sites Terms, the provider is OpenAI OpCo, LLC, or OpenAI Ireland Ltd. for customers in the EEA or Switzerland. Section 3.2 incorporates the Data Processing Addendum into the hosting relationship. Technical logs are processed for service delivery, troubleshooting and security; retention depends on the technical purpose and necessary legal retention requirements. We do not run additional personal visitor analytics.

3. Your business inquiry

When you use the inquiry form, we process your name or company name, email address, selected topic, any selected product types and your message. Providing a phone number is optional. Please include only information we need to handle your inquiry.

We use this data to handle your inquiry, contact you as requested and prepare for a possible business relationship. For inquiries aimed at entering into a contract with you, the legal basis is Article 6(1)(b) GDPR. If you act on behalf of a company or ask another business-related question, processing is based on Article 6(1)(f) GDPR; our legitimate interest is responding to business inquiries and communicating with contact persons.

The information is stored in a database that is not publicly accessible. Only people responsible for handling inquiries or technical operations may access it. Your inquiry is not published or automatically forwarded to Telegram. Submitting the form does not sign you up for marketing or a newsletter.

The required checkbox confirms that you have read the privacy policy and wish to be contacted about your inquiry. We store the policy version, its language and the server-recorded confirmation time. This provides evidence of the information supplied and your contact request, based on Article 6(1)(f) GDPR. The checkbox does not replace separate consent for other purposes.

You are not legally obliged to submit an inquiry. Without the required information, we cannot process the form. You can alternatively contact us by email or phone; the contact details and communication contents you provide are likewise processed to handle your request.

4. Protection against misuse and duplicate inquiries

We limit the number of new inquiries to protect the form. A pseudonymous check value is calculated from your IP address and a time window using a secret key. The IP address is not stored in plain text in the inquiry or rate-limiting tables. Rate-limiting values expire within two hours and are cleaned up during subsequent form access.

We also store a protected inquiry identifier and a content check value so that retrying a submission does not create duplicate inquiries. The legal basis is Article 6(1)(f) GDPR; our legitimate interest is a secure, reliable inquiry process protected against spam.

5. Digital FAQ assistant

The website chat automatically answers questions using information provided on this website. It is not a live conversation with a person. Your chat messages are processed only in your browser’s memory, are not sent to a server or external AI service and are deleted when you reload the page.

This processing enables the help feature you choose to use. The legal basis is Article 6(1)(f) GDPR; our legitimate interest is answering questions about our offering directly on the website. Use the inquiry form for a personal request.

6. Customer reviews and the reviews website

The landing page displays previously published customer reviews with the chosen display name, star rating, date and a text excerpt. The overall rating is calculated from published reviews. Content is loaded on the server; no external reviews widget is embedded in your browser.

The display provides information about customer experiences. The legal basis is Article 6(1)(f) GDPR; our legitimate interest is showing feedback that has already been shared publicly about our offering. “Our reviews” takes you to the separate reviews website at bewertungen.peptide-obermeier.com. Submitting reviews and photos there is subject to the notices provided on that website. The form on this B2B website is not a review form.

7. Cookies, local storage and external links

The custom-developed features of this landing page do not use analytics or advertising cookies, marketing pixels or persistent browser storage. Intro, notice and chat settings remain in memory only for the current page visit. Fonts and images are delivered together with the website.

Where technically necessary access to your device is used to provide a feature you expressly request, Section 25(2)(2) TDDDG applies. We do not use non-essential analytics or advertising technologies; the inquiry checkbox is not cookie consent.

External links open their destination only when you click them. The privacy policy of the respective destination applies there.

8. Recipients and processing outside the EU

In addition to the responsible people in our company, technical service providers and, where legally required, authorities or advisers subject to professional confidentiality may receive data. We do not sell your inquiry data. Sharing your specific inquiry with production partners is not an automatic part of this form and will be discussed separately with you if needed.

The controller is based in the USA. Hosting may also involve processing outside the EU or EEA. We therefore do not promise storage exclusively in Germany or the EU.

For data subject to EEA or Swiss data protection law, Section 4.1 of the OpenAI Data Processing Addendum provides for processing by OpenAI Ireland Limited. Under that agreement, onward transfers to affiliates or service providers outside those regions rely on standard contractual clauses or a European Commission adequacy decision. Contact us using the privacy contact above for further information about the relevant safeguards.

9. Data retention

Inquiry data and related records are needed only for as long as required to handle and follow up on your request. Once it is concluded, we must assess whether to delete the data or whether it is still needed for a resulting contractual relationship, statutory retention obligations or the establishment, exercise or defense of legal claims. The relevant criteria are the nature, purpose and progress of the inquiry and any applicable retention and limitation periods.

Legally required retention is based on Article 6(1)(c) GDPR; necessary processing for legal claims is based on Article 6(1)(f) GDPR. The website chat is not stored permanently. Short-lived rate-limiting values follow the process described in section 4.

10. Your rights

Subject to the applicable legal conditions, you have the following rights:

• Access to your personal data (Article 15 GDPR) and rectification of inaccurate or incomplete data (Article 16 GDPR).
• Erasure (Article 17 GDPR) and restriction of processing (Article 18 GDPR).
• Data portability for data covered by Article 20 GDPR.
• Objection, on grounds relating to your particular situation, to processing based on legitimate interests (Article 21 GDPR).
• Withdrawal of separately given consent with effect for the future (Article 7(3) GDPR). The lawfulness of processing before withdrawal is unaffected.
• A complaint to a data protection supervisory authority, particularly in your place of habitual residence, place of work or the place of the alleged infringement (Article 77 GDPR).

To exercise your rights, send a message to info@km-solutionsllc.com. This website does not carry out automated decision-making, including profiling, with legal or similarly significant effects under Article 22 GDPR.

11. Newsletter via Hostinger Reach

Our newsletter covers product launches, company news and B2B offers from Peptide Obermeier. Signing up is optional and independent of a business inquiry or purchase. The signup button opens a form provided by Hostinger Reach in a new tab. No Hostinger tracking script is loaded on this landing page for this purpose.

In the signup form, you enter your email address and give consent using an initially unchecked required checkbox. You then receive a confirmation email (double opt-in). Your address is enabled for newsletters only after you confirm using the link in that email. Newsletter delivery is based on your consent under Article 6(1)(a) GDPR.

We use Hostinger Reach to manage email addresses, signup source, selected form language, consent and confirmation status, unsubscribes and technical sending and delivery data. When you open the external form, Hostinger also processes connection data required for delivery and abuse prevention, including IP address and browser information. Technical security measures are based on Article 6(1)(f) GDPR.

Hostinger processes newsletter data on our behalf as a technical service provider. Further information is available in the Hostinger privacy policy and Data Processing Addendum. Processing by service providers outside the EEA is possible; the addendum describes the applicable transfer safeguards.

You can withdraw consent at any time using the unsubscribe link in a newsletter or our contact details above. Your address will then no longer be used for newsletters. Necessary consent records and an unsubscribe marker may be retained to defend legal claims and prevent further messages under Article 6(1)(f) GDPR for as long as required for these purposes. You are not obliged to subscribe.