Privacy policy

1. Controller

The controller responsible for data processing on this website is:

LifeVac GmbH, Adlerstrasse 34, 90403 Nürnberg, Germany

Email: customerservices@lifevaceurope.eu, Telephone: +44 (0)1271 316044

2. General information and legal bases

We process personal data in accordance with the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG). The legal bases for processing are in particular Art. 6 (1) (b) GDPR (performance of a contract), Art. 6 (1) (c) GDPR (legal obligation), Art. 6 (1) (f) GDPR (legitimate interest) and Art. 6 (1) (a) GDPR (consent).

3. Hosting and Shopify

Our store operates on the Shopify platform. The provider is Shopify International Limited, Victoria Buildings, 1–2 Haddington Road, Dublin 4, D04 XN32, Ireland, and Shopify Inc., Canada. Shopify processes data arising from the use of the store on our behalf, including order and usage data. Data may be transferred to third countries; such transfers are based on appropriate safeguards (EU Standard Contractual Clauses). The legal basis is Art. 6 (1) (b) and (f) GDPR.

4. Access data and server log files

When you visit our website, information transmitted by your browser is recorded automatically (e.g. IP address, date and time of access, pages visited, browser type). This processing serves the technical provision and security of the website (Art. 6 (1) (f) GDPR).

5. Cookies and consent

We use cookies and comparable technologies. Technically necessary cookies are used on the basis of Art. 6 (1) (f) GDPR and § 25 (2) TDDDG. For all non-essential cookies and services (in particular analytics and marketing) we obtain your consent via the cookie banner of the Shopify platform (Art. 6 (1) (a) GDPR, § 25 (1) TDDDG). You may withdraw your consent at any time with effect for the future.

6. Order processing

To process your order we process the data you provide (in particular contact, delivery and payment data) on the basis of Art. 6 (1) (b) GDPR. Data is only passed on where this is necessary for the performance of the contract, for example to shipping service providers and payment service providers.

7. Payment service providers

For payments, the necessary data is transmitted to the payment service provider selected in each case. We use:

Shopify Payments, operated by Shopify International Limited, Victoria Buildings, 1–2 Haddington Road, Dublin 4, D04 XN32, Ireland. Payment, card and transaction data as well as fraud prevention data are processed in particular. The legal basis is Art. 6 (1) (b) GDPR. Data may be transferred to third countries; such transfers are based on EU Standard Contractual Clauses.

8. Shipping

To deliver your order we pass your address and contact data to the shipping service provider engaged by us. We use DPD Deutschland GmbH, Wailandtstraße 1, 63741 Aschaffenburg, Germany, connected via the Shopify application “My DPD eCommerce”. The legal basis is Art. 6 (1) (b) GDPR. Where you consent to a dispatch notification by email, your email address is processed on the basis of Art. 6 (1) (a) GDPR.

9. Newsletter and marketing

If you subscribe to our newsletter, we process your email address on the basis of your consent (Art. 6 (1) (a) GDPR). Registration takes place using the double opt-in procedure. You may unsubscribe at any time via the unsubscribe link.

For sending and analysing our newsletters we use Klaviyo. The provider is Klaviyo, Inc., 125 Summer Street, Boston, MA 02110, USA. Your email address and usage data relating to opening and click behaviour are processed. Transfers to the USA are based on appropriate safeguards (EU Standard Contractual Clauses or the EU-US Data Privacy Framework).

10. Analytics and reach measurement

Where you have given your consent, we use services for reach measurement and for measuring the success of our advertising. For this purpose we transmit event data (in particular page views, cart and purchase events and pseudonymised identifiers) via the Popsixle application to Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland (Meta Pixel and Conversions API). The legal basis is exclusively your consent pursuant to Art. 6 (1) (a) GDPR and § 25 (1) TDDDG. Transfers to the USA may occur and are based on appropriate safeguards. You may withdraw your consent at any time with effect for the future.

11. Returns processing

For processing returns and exchanges we use the Redo application. The provider is Redo Tech, Inc., 14761 Future Way, Suite 400, Draper, UT 84020, USA. Your name, contact and address data and the order and item data relating to the order are processed in particular. The legal basis is Art. 6 (1) (b) GDPR. Data may be transferred to the USA; such transfers are based on appropriate safeguards.

12. Contact form

To provide our contact forms we use the application “K: Contact Form Builder” from the provider Kaktus, Chișinău, Republic of Moldova. The data you enter in the form is processed, in particular your name, email address and message content as well as any files you upload, together with technically necessary connection data. The legal basis is Art. 6 (1) (b) GDPR where your enquiry relates to the conclusion or performance of a contract, and otherwise Art. 6 (1) (f) GDPR.

13. Affiliate and referral programme

For the administration of our affiliate and referral programme we use the BixGrow application. Order and transaction data are processed in particular, together with an identifier set in the browser for the attribution of referred orders. Attribution via cookies and comparable technologies takes place exclusively on the basis of your consent pursuant to Art. 6 (1) (a) GDPR and § 25 (1) TDDDG. The subsequent settlement of referred orders takes place on the basis of Art. 6 (1) (f) GDPR.

14. Electronic withdrawal function (withdrawal button)

When you use our online withdrawal function, we process the data required to identify the contract and to process the withdrawal (in particular name, order number and email address for the confirmation of receipt) as well as technically necessary log data to evidence receipt. The legal basis is Art. 6 (1) (c) GDPR in conjunction with § 356a BGB and Art. 6 (1) (b) GDPR. The principle of data minimisation applies.

15. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR) and objection to processing (Art. 21 GDPR). You may withdraw consent you have given at any time with effect for the future.

16. Right to lodge a complaint with a supervisory authority

Without prejudice to any other remedies, you have the right to lodge a complaint with a data protection supervisory authority, in particular in the Member State of your residence.

17. Storage period

We store personal data only for as long as is necessary for the respective purposes or as required by statutory retention periods (e.g. commercial and tax law obligations).

18. Currency of this policy

We will adapt this policy if the data processing or the legal position changes.

Version: September 2026