Table of Contents
Below you’ll find the Data Processing Agreement – Platform, the Data Processing Agreement – Transfer and the Compensation Terms.
- Data Processing Agreement – Platform
- 1. Purpose of the agreement
- 2. Rights and obligations of the Controller
- 3. Rights and obligations of the Processor
- 4. Assistance to the Controller
- 5. Confidentiality
- 6. Security of processing
- 7. Use of sub-processors
- 8. Transfer of data to third countries or international organizations
- 9. Audit and inspection
- 10. Term and termination of the agreement
- 11. Final provisions
- Annex I
- SUPPLENTIA – Data Processing Agreement – Transfer
- 1. Purpose of the Agreement
- 2. Rights and Obligations of the Controller
- 3. Rights and Obligations of the Processor
- 4. Assistance to the Controller
- 5. Confidentiality
- 6. Security of Processing
- 7. Use of Sub-processors
- 8. Transfer of Data to Third Countries or International Organizations
- 9. Audit and Inspection
- 10. Term and Termination of the Agreement
- 11. Final Provisions
- Annex I
- SUPPLENTIA – Compensation Terms
SUPPLENTIA – DATA PROCESSING AGREEMENT – PLATFORM
The healthcare professional who agrees to this agreement (the "Controller") has created a professional user account on the platform of the private limited liability company NF Nutraceuticals (the "Processor"). This professional account allows the healthcare professional to use the Processor's platform (and related technical support) to schedule appointments with clients, share product advice regarding nutritional supplements, share their advice code with clients, place orders on behalf of clients, have clients fill in questionnaires, and have them complete face scans (the "Platform"). In connection with the use of the Platform, personal data is transferred to and processed by the Processor on behalf of the Controller. The Controller and the Processor define the terms of this processing in this agreement (the “Data Processing Agreement – Platform”) in accordance with Article 28 of Regulation (EU) 2016/679 of 27 April 2016 (the "General Data Protection Regulation" or "GDPR").
The Controller and the Processor are each hereinafter individually referred to as a “Party” and collectively as the “Parties.”
1. PURPOSE OF THE AGREEMENT
1.1. This Data Processing Agreement – Platform describes the rights and obligations of the Controller and the Processor regarding the processing of Personal Data on behalf of the Controller.
1.2. Annex I contains a description of the processing activity, including the purposes and nature of the processing, the categories of data subjects (the “Data Subjects”), the personal data processed by the Processor on behalf of the Controller (the “Personal Data”), and the duration of the processing.
1.3. This Data Processing Agreement – Platform does not release the Processor from the obligations imposed on it by the GDPR or any other legislation.
1.4. The terms of this Data Processing Agreement – Platform shall be interpreted in the spirit of the GDPR. If the latter does not offer a clear and unambiguous interpretation, the terms shall be understood in a way that best reflects the Parties’ intentions.
2. RIGHTS AND OBLIGATIONS OF THE CONTROLLER
2.1. The Controller is responsible for ensuring that the processing of Personal Data is carried out in accordance with the GDPR (see Article 24 of the GDPR), applicable mandatory EU or national data protection laws, and this Data Processing Agreement – Platform.
2.2. The Controller has the right and obligation to make decisions regarding the purposes and means of the processing of Personal Data.
2.3. To the extent that the Controller is considered a processor and not a controller under applicable data protection law for (part of) the processing carried out on the Platform, the Controller shall ensure it has the necessary authorization to use the Platform in relation to such processing. For such processing, the Processor is considered a sub-processor. The provisions of this Data Processing Agreement – Platform apply mutatis mutandis in that case.
3. RIGHTS AND OBLIGATIONS OF THE PROCESSOR
3.1. The Processor shall process the Personal Data only based on written instructions from the Controller as set out in Annex I, unless required to do otherwise under Union or Member State law to which the Processor is subject. In such a case, the Processor shall inform the Controller of that legal requirement before processing, unless that law prohibits such information on important grounds of public interest. The Controller may issue further instructions throughout the processing period, but such instructions must always be documented in writing, including electronically.
3.2. If the Processor acts beyond its mandate or determines the purposes and means of processing independently, it shall be considered a controller for that processing activity.
3.3. The Processor has the right to make a copy of the Personal Data if this is necessary for the processing purposes assigned to it by the Controller under this Agreement. The Processor may also create backups. The same rules shall apply to such copies and backups as to the original Personal Data.
3.4. The Processor undertakes to provide the Controller with all information necessary to demonstrate compliance with the GDPR.
3.5. Upon explicit request by the Controller, the Processor shall provide the Controller with a copy of the Personal Data processed under this Data Processing Agreement – Platform.
3.6. The Processor shall promptly inform the Controller if, in its opinion, any instruction from the Controller infringes the GDPR or applicable data protection laws of the Union or Member States.
4. ASSISTANCE TO THE CONTROLLER
4.1. If a Data Subject submits a request to the Processor to exercise their rights under Chapter III of the GDPR, the Processor shall notify the Controller as soon as possible. Upon request of the Controller, the Processor shall assist the Controller, through appropriate technical and organizational measures, in fulfilling its obligations to respond to such requests from Data Subjects.
4.2. Taking into account the nature of the processing and the information available to the Processor, the Processor shall assist the Controller in complying with:
- the Controller’s obligation to conduct a data protection impact assessment (DPIA);
- the Controller’s obligation to consult the supervisory authority prior to processing where a DPIA indicates that the processing would result in a high risk without mitigating measures.
5. CONFIDENTIALITY
5.1. The Processor and any person authorized to process the Personal Data shall respect the confidentiality and integrity of the Personal Data. The Processor shall grant access to Personal Data processed on behalf of the Controller only to persons under the authority of the Processor who are subject to appropriate confidentiality obligations, either contractually or legally.
5.2. The confidentiality obligation in Article 5.1 shall remain in force even after termination of this Data Processing Agreement – Platform.
6. SECURITY OF PROCESSING
6.1. Taking into account the state of the art, the costs of implementation, as well as the nature, scope, context, and purposes of the processing and the varying likelihood and severity of risks to the rights and freedoms of natural persons, the Controller and the Processor shall implement appropriate technical and organizational measures, pursuant to Article 32 of the GDPR, to ensure a level of security appropriate to the risk. The Controller shall assess the risks to individuals’ rights and freedoms inherent in the processing and shall impose measures to mitigate these risks.
6.2. The Processor shall also – independently of the Controller – assess the risks to individuals’ rights and freedoms inherent in the processing and take measures to mitigate them. For this purpose, the Controller shall provide the Processor with all information necessary to identify and assess such risks.
6.3. In the event of accidental or unlawful destruction, loss, unauthorized access to, or processing of Personal Data (a “Data Breach”), the Processor shall notify the Controller without undue delay after becoming aware of the Data Breach. The Controller shall notify the competent supervisory authority and/or the Data Subjects in accordance with Articles 33 and 34 of the GDPR.
6.4. The Processor shall provide all reasonable assistance to the Controller to enable the Controller to comply with its obligations under Articles 33 and 34 of the GDPR.
7. USE OF SUB-PROCESSORS
7.1. The Processor shall not engage another processor (“Sub-processor”) for the performance of this Data Processing Agreement – Platform without the prior general written authorization of the Controller.
7.2. The Controller hereby grants general authorization for the use of Sub-processors. The Processor shall inform the Controller in advance, within a reasonable timeframe, of any intended changes concerning the addition or replacement of Sub-processors, thereby giving the Controller the opportunity to object before the new Sub-processor(s) is engaged. A list of Sub-processors already approved by the Controller is included in Annex I.
7.3. Where the Processor engages a Sub-processor for carrying out specific processing activities on behalf of the Controller, the same data protection obligations as set out in this Data Processing Agreement – Platform shall be imposed on the Sub-processor by way of contract or another legal act, particularly providing sufficient guarantees for the implementation of appropriate technical and organizational measures so that the processing meets the requirements of this Agreement and the GDPR. The Processor shall remain fully responsible for ensuring that the Sub-processor meets the obligations to which the Processor is subject under this Agreement and the GDPR.
7.4. A copy of such a sub-processing agreement and any subsequent amendments shall, upon request, be made available to the Controller so that the Controller can verify compliance with Article 7.3. Commercial terms not affecting the legal data protection content of the agreement do not need to be disclosed.
7.5. If the Sub-processor fails to fulfill its data protection obligations, the Processor remains fully liable to the Controller for the performance of the Sub-processor’s obligations.
8. TRANSFER OF DATA TO THIRD COUNTRIES OR INTERNATIONAL ORGANIZATIONS
8.1. Any transfer of Personal Data to third countries or international organizations by the Processor shall always take place in compliance with Chapter V of the GDPR.
8.2. If a transfer to a third country or international organization, not instructed by the Controller, is required under Union or national law to which the Processor is subject, the Processor shall inform the Controller of that legal requirement, unless the law prohibits such disclosure on important grounds of public interest.
9. AUDIT AND INSPECTION
9.1. Once per calendar year, and whenever there are reasonable indications of a breach of this Data Processing Agreement – Platform or the GDPR (including but not limited to a Data Breach), the Controller has the right (or may appoint an auditor) to conduct, upon reasonable prior notice to the Processor, an audit or inspection of the Processor’s processing of Personal Data. The Processor shall provide all reasonable information necessary to carry out the audit/inspection by the Controller or its auditor. The audit/inspection shall be limited in scope, method, and duration to what is reasonably necessary to achieve its purpose and shall not unnecessarily disrupt the Processor’s operations.
9.2. The Processor shall allocate the reasonable resources (primarily time) necessary for the Controller to conduct the audit/inspection. The Controller shall bear all (other) costs of the audit/inspection.
10. TERM AND TERMINATION OF THE AGREEMENT
10.1. This Data Processing Agreement – Platform enters into force upon the Controller’s first use of the Platform and remains in effect until the Controller explicitly notifies the Processor of its intent to stop using the Platform.
10.2. Upon termination of this Agreement, the Processor shall cease processing. The Processor shall delete or return all Personal Data, including any existing copy or backup made in accordance with Article 3.3 of this Agreement, unless storage is legally required.
10.3. The Processor shall ensure that any Sub-processor terminates processing and deletes all Personal Data from its systems upon termination of this Agreement.
11. FINAL PROVISIONS
11.1. The terms of use of the Processor’s platform apply to this Data Processing Agreement – Platform. In case of conflict between such terms and/or any other agreement between the Parties and this Agreement, the provisions of this Agreement shall prevail.
11.2. If any (part of a) provision of this Agreement is held to be invalid, illegal, or unenforceable, this shall not affect the validity of the remaining provisions, which shall remain in full force and effect. In such a case, the Processor may replace the invalid, illegal, or unenforceable provision with a valid, legal, and enforceable one that most closely reflects the original intent of the provision.
11.3. Neither Party shall be deemed to have waived any of its rights arising under this Agreement or from a breach by the other Party, unless such waiver is expressly confirmed in writing.
11.4. The Processor reserves the right to amend this Agreement from time to time with four weeks’ prior written notice to the Controller. After this period, the amended Agreement applies to all continued use of the Platform.
11.5. In case of discrepancy or dispute regarding the interpretation of translations of this Agreement, the Dutch version shall prevail.
*
*
*
Annex I – Purposes of Processing, Nature of Processing, Categories of Data Subjects, Categories of Personal Data, Sub-processors
1. Purposes of Processing
- Sending product recommendations related to nutritional supplements by the Controller to their clients (via email sent from the Platform);
- Sharing the Controller’s advice code with their clients (via email sent from the Platform);
- Placing orders by the Controller on behalf of and for the account of their clients;
- Having their clients complete questionnaires;
- Having their clients complete face scans.
2. Nature of Processing
- Collection, recording, storage, and disclosure by transmission.
3. Categories of Data Subjects
- Clients of the Controller.
4. Categories of Personal Data
- Client data (name, email address);
- Any other information about the client as included in the product recommendations and questionnaires of the Controller.
5. Duration of Processing
- For the duration of the Controller’s use of the professional account;
- If the client does not purchase a product within 6 months of the product recommendation, the Processor shall anonymize the recommendation on the Platform;
- Purchase and personal data are retained for 3 calendar years in the Controller’s professional account on the Platform.
6. Sub-processors
- Take the Lead N.V.
SUPPLENTIA – DATA PROCESSING AGREEMENT – TRANSFER
The healthcare professional who agrees to this agreement (the “Controller”) has instructed the private limited liability company NF Nutraceuticals (the “Processor”) to transfer the profile and purchase data of the Controller’s clients who have made a purchase on the Processor’s platform using the Controller’s advice code (“linked clients”) (the “Transfer”). This processing by the Processor is carried out solely on behalf of the Controller. The Controller and the Processor establish the terms of this processing in this agreement (the “Data Processing Agreement – Transfer”) in accordance with Article 28 of the General Data Protection Regulation 2016/679 of 27 April 2016 (the “GDPR”).
The Controller and the Processor are hereinafter also each referred to individually as a “Party” and collectively as the “Parties.”
1. PURPOSE OF THE AGREEMENT
1.1. This Data Processing Agreement – Transfer sets out the rights and obligations of the Controller and the Processor in connection with the processing of Personal Data on behalf of the Controller.
1.2. Annex I contains a description of the processing activity, including the purposes and nature of the processing, the categories of data subjects (the “Data Subjects”) and the personal data processed by the Processor on behalf of the Controller (the “Personal Data”), and the duration of the processing.
1.3. The Data Processing Agreement – Transfer does not release the Processor from the obligations to which it is subject under the GDPR or other applicable legislation.
1.4. The terms of the Data Processing Agreement – Transfer shall be interpreted in accordance with the intent and spirit of the GDPR. Where the GDPR does not provide a clear and unambiguous interpretation, the terms shall be construed to reflect the intentions of the Parties as closely as possible.
2. RIGHTS AND OBLIGATIONS OF THE CONTROLLER
2.1. The Controller is responsible for ensuring that the processing of Personal Data is carried out in accordance with the GDPR (see Article 24 of the GDPR), applicable mandatory EU or national data protection laws, and this Data Processing Agreement – Transfer.
2.2. The Controller has the right and obligation to determine the purposes and means of the processing of Personal Data.
2.3. Without prejudice to the generality of the foregoing, the Controller warrants the lawfulness of the processing of the Personal Data. In particular, but not limited to, the Controller warrants that it has obtained the valid consent of the clients for the Transfer. The Controller expressly agrees to fully indemnify the Processor for any damages the Processor may suffer as a result of non-compliance with this article.
2.4. To the extent that the Controller is considered a processor, rather than a controller, under applicable data protection law for (part of) the Transfer, the Controller shall ensure that it has obtained the necessary permission to proceed with the Transfer. For such processing, the Processor will be considered a sub-processor. The provisions of this Data Processing Agreement – Transfer shall then apply mutatis mutandis.
3. RIGHTS AND OBLIGATIONS OF THE PROCESSOR
3.1. The Processor shall process the Personal Data only on the basis of written instructions from the Controller as specified in Annex I, unless the Processor is subject to a binding legal obligation under applicable European or national law requiring a different processing activity. In such case, the Processor shall inform the Controller of that legal obligation before proceeding with the processing, unless that law prohibits such notification on important public interest grounds. The Controller may provide additional instructions during the entire processing period, provided such instructions are recorded in writing, including electronically.
3.2. If the Processor exceeds its mandate or determines the purpose and means of the processing itself, it shall be regarded as the controller for that processing activity.
3.3. The Processor is entitled to make copies of the Personal Data if necessary for the processing purposes assigned to it by the Controller under this Data Processing Agreement – Transfer. The Processor may also create backups. The same rules apply to such copies and backups as to the original Personal Data.
3.4. The Processor undertakes to provide the Controller with all information necessary to demonstrate that the processing is carried out in accordance with the GDPR.
3.5. Upon express request of the Controller, the Processor shall provide the Controller with a copy of the Personal Data processed under this Data Processing Agreement – Transfer.
3.6. The Processor shall promptly inform the Controller if, in its opinion, the Controller's instructions violate the GDPR or applicable data protection provisions of the Union or the Member State.
4. ASSISTANCE TO THE CONTROLLER
4.1. If a Data Subject submits a request to exercise their rights under Chapter III of the GDPR to the Processor, the Processor shall inform the Controller of this as soon as possible. At the Controller’s request, the Processor shall assist the Controller, through appropriate technical and organizational measures, in fulfilling the Controller’s obligation to respond to such requests from Data Subjects.
4.2. Taking into account the nature of the processing and the information available to the Processor, the Processor shall assist the Controller in complying with:
- the obligation to conduct a data protection impact assessment regarding the intended processing activity;
- the obligation to consult the competent supervisory authority when the data protection impact assessment reveals that the processing would result in a high risk in the absence of measures taken by the Controller to mitigate the risk.
5. CONFIDENTIALITY
5.1. The Processor and any other person authorized to process the Personal Data shall respect the confidentiality and integrity of the Personal Data. The Processor shall only grant access to Personal Data processed on behalf of the Controller to individuals under the Processor’s authority who are bound by confidentiality obligations, either by contract or under applicable legal obligations.
5.2. The confidentiality obligation in Article 5.1 remains in effect after termination of this Data Processing Agreement – Transfer.
6. SECURITY OF PROCESSING
6.1. Taking into account the state of the art, the cost of implementation, as well as the nature, scope, context and purposes of the processing, and the varying likelihood and severity of the risks to the rights and freedoms of natural persons, the Controller and the Processor shall, pursuant to Article 32 of the GDPR, implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk. The Controller shall assess the risks inherent in the processing and impose measures to mitigate those risks.
6.2. The Processor shall also — independently of the Controller — assess the risks to the rights and freedoms of natural persons inherent in the processing and take measures to mitigate those risks. To this end, the Controller shall provide the Processor with all information necessary to identify and assess such risks.
6.3. In the event of accidental or unlawful destruction, loss, unauthorized access to or processing of the Personal Data (“Data Breach”), the Processor shall notify the Controller without undue delay after becoming aware of the Data Breach. The Controller shall notify the competent supervisory authority and/or the Data Subjects in accordance with Articles 33 and 34 of the GDPR.
6.4. The Processor shall provide all reasonable assistance to the Controller to enable the Controller to comply with its obligations under Articles 33 and 34 of the GDPR.
7. USE OF SUB-PROCESSORS
7.1. The Processor shall not engage another processor (a “Sub-processor”) for the performance of this Data Processing Agreement – Transfer without the prior general written authorization of the Controller.
7.2. The Controller grants the Processor general authorization to engage Sub-processors. The Processor shall notify the Controller in writing, within a reasonable timeframe, of any intended changes concerning the addition or replacement of Sub-processors, thereby allowing the Controller the opportunity to object before the relevant Sub-processor is engaged. The list of Sub-processors already recognized by the Controller is included in Annex I.
7.3. When the Processor engages a Sub-processor to carry out specific processing activities on behalf of the Controller, the same data protection obligations as set out in this Data Processing Agreement – Transfer shall be imposed on that Sub-processor by contract or another legal act, in particular providing sufficient guarantees for implementing appropriate technical and organizational measures, so that the processing meets the requirements of this Data Processing Agreement – Transfer and the GDPR. The Processor remains responsible for ensuring that the Sub-processor meets at least the same obligations that apply to the Processor under this agreement and the GDPR.
7.4. A copy of such a sub-processing agreement and any subsequent amendments shall be made available to the Controller upon request so the Controller can verify the Processor’s compliance with Article 7.3. Business-related provisions that do not affect the legal data protection content of the agreement do not need to be disclosed to the Controller.
7.5. If the Sub-processor fails to fulfill its data protection obligations, the Processor shall remain fully liable to the Controller for the performance of the Sub-processor’s obligations.
8. TRANSFER OF DATA TO THIRD COUNTRIES OR INTERNATIONAL ORGANIZATIONS
8.1. Any transfer of Personal Data by the Processor to third countries or international organizations shall be carried out in compliance with Chapter V of the GDPR.
8.2. If such a transfer, not instructed by the Controller, is required by EU or national law to which the Processor is subject, the Processor shall inform the Controller of that legal requirement, unless the law prohibits such disclosure on important grounds of public interest.
9. AUDIT AND INSPECTION
9.1. Once per calendar year, or whenever there are reasonable indications of a breach of this Data Processing Agreement – Transfer or the GDPR—such as, but not limited to, a Data Breach—the Controller has the right (to appoint an auditor) to conduct an audit or inspection of the processing of Personal Data by the Processor, provided that reasonable prior notice is given. The Processor shall make all reasonable information available that is necessary for the Controller or the appointed auditor to conduct the audit/inspection. The scope, manner, and duration of the audit/inspection shall be limited to what is reasonably necessary to achieve its purpose and shall not unnecessarily disrupt the Processor’s activities.
9.2. The Processor shall allocate the reasonable resources (primarily time) required for the Controller to carry out the audit/inspection. All other costs related to the audit/inspection shall be borne by the Controller.
10. TERM AND TERMINATION OF THE AGREEMENT
10.1. This Data Processing Agreement – Transfer enters into force as soon as the Controller instructs the Processor to carry out the Transfer (i) via email or letter, or (ii) by checking the relevant “Yes” box on the Processor’s platform, and remains in effect until the Controller explicitly informs the Processor of their desire to terminate the Transfer.
10.2. Upon termination of this Data Processing Agreement – Transfer, the Processor shall cease processing. The Processor shall delete or return all Personal Data in its possession, including any copies or backups created in accordance with Article 3.3 of this agreement, unless legal obligations require the storage of the Personal Data.
10.3. The Processor shall ensure that any Sub-processor also ceases processing upon termination and deletes all Personal Data from its systems.
11. FINAL PROVISIONS
11.1. The general terms of use of the Processor’s platform apply to this Data Processing Agreement – Transfer. In case of conflict between those terms (or any other agreement between the Parties) and this agreement, the provisions of this Data Processing Agreement – Transfer shall prevail.
11.2. If any (part of a) provision of this agreement is found to be invalid, unlawful, or unenforceable, this shall not affect the other provisions, which shall remain fully effective. In such a case, the Processor has the right to replace the invalid, unlawful, or unenforceable provision with a valid, lawful, and enforceable one that most closely reflects the original intent.
11.3. Neither Party shall be deemed to have waived any rights under this agreement or arising from a breach by the other Party unless such waiver is expressly confirmed in writing.
11.4. The Processor reserves the right to amend this Data Processing Agreement – Transfer from time to time, subject to four weeks’ prior notice to the Controller. After this period, the updated agreement shall apply to any future Transfers.
11.5. In the event of discrepancies or disputes regarding the interpretation of translations of this agreement, the Dutch version shall prevail.
*
*
*
Annex I – Purposes of Processing, Nature of Processing, Categories of Data Subjects, Categories of Personal Data, Sub-processors
1. Purposes of Processing
- Providing the Controller with access to purchase data of their linked clients.
2. Nature of Processing
- Collecting, recording, storing, and providing Personal Data through transmission.
3. Categories of Data Subjects
- Linked clients of the Controller who have used the Controller’s advice code.
4. Categories of Personal Data
- Client data (name, email address, profile) of linked clients;
- Purchase data.
5. Duration of Processing
- For the duration of the Controller’s use of the professional account.
- The purchase and personal data are retained for a period of 3 calendar years for the healthcare professional.
6. Sub-processors
- Take the Lead N.V.
SUPPLENTIA – COMPENSATION TERMS
These terms are concluded between the professional client (the “Professional”) and NF Nutraceuticals B.V., a private limited liability company validly incorporated and existing under Dutch law, with its registered office at Smederijstraat 2, 4814 DB Breda, the Netherlands, registered with the Chamber of Commerce in Maastricht under number 14111608.
Acceptance of these compensation terms by the Professional entitles the Professional to receive a compensation for promoting Supplentia products to their linked clients (hereinafter the “compensation”), under the conditions set out in these compensation terms.
For the purposes of these compensation terms, “linked client(s)” refers to: after the Professional accepts the “Data Processing Agreement – Processor” (available via the Professional’s user account on Supplentia Pro), any client for whom the Professional has confirmed valid consent has been given for sharing their personal data, thereby linking the client to the Professional’s user account. This allows the Professional to consult purchase data, retrieve product recommendations under their name, and view the compensation accumulated from these linked clients.
1. Compensation rate and calculation
Unless expressly agreed otherwise, the compensation rate is 20% of the total value of all orders (as defined below) placed by clients who are linked to the Professional and who used the Professional’s recommendation code. The total order value is calculated based on the recommended retail price excluding VAT, minus any discounts granted to the client for that order.
Unless expressly agreed otherwise, the Professional may freely choose how to divide this percentage between the discount for the client and the Professional’s compensation.
Supplentia reserves the right to limit the compensation percentage for certain brands. The compensation percentages applicable to each brand are listed under the “Conditions” section in your Supplentia Pro account.
Supplentia reserves the right to change the compensation percentage for all or some brands at any time. These changes will be communicated by updating the “Conditions” section in your Supplentia Pro account. Any changes will apply only to future orders, and not retroactively.
Supplentia reserves the right to limit the Professional’s right to compensation within a specific timeframe.
2. Viewing accrued compensation
In the “Reports” section of the Supplentia Pro account, the Professional can view the total amount of compensation accrued, as well as detailed breakdowns per order placed by their linked clients.
The Professional acknowledges that from the first use of Supplentia, all information regarding compensation will be accessible only via the Supplentia website.
3. Redeeming compensation balance and loyalty discount
To redeem accrued compensation amounts, the Professional may at any time:
- Place product orders via the Supplentia webshop, paying the invoice amount (after discount) using the available compensation balance. If the invoice amount exceeds the available balance, the compensation will be applied, and the remaining amount must still be paid separately; or
- Request a payout via the Supplentia website. In this case, the accrued compensation (excl. VAT) will be paid to the Professional based on an invoice prepared by the Professional and addressed to NF Nutraceuticals BV, or via reverse billing initiated by NF Nutraceuticals BV. This option is only available if the accrued compensation is at least EUR 100 (excl. VAT).
4. Expiry period
The Professional must redeem accrued compensation (either via payout or product order) no later than during the calendar year following the year in which the order was placed. Compensation amounts accrued during a calendar year that are not redeemed by 31 December of the following year will automatically expire on 1 January of the next year.
The Professional agrees that all compensation accrued prior to accepting these compensation terms will automatically expire at the start of the next calendar year.
5. Misuse
Professional codes and accrued compensation are strictly personal and linked to the relevant Professional. The Professional agrees not to misuse the compensation system (e.g., by sharing their account with a third party to allow them to benefit from the accrued compensation, or by sharing their professional codes with another Professional who then uses them with their own clients). Any improper use by the Professional grants Supplentia the right to terminate the collaboration immediately, without prior notice and without any compensation, without prejudice to any other rights Supplentia may have (including the right to claim damages).
6. Additional provisions
The Supplentia Terms of Use, the Data Processing Agreement – Platform and, where applicable, the Data Processing Agreement – Processor, available via the Professional’s user account, as well as the General Terms and Conditions of Sale for the website www.supplentia.com (www.supplentia.com/xxxxxxxxx), all apply in full to these Compensation Terms.