Privacy Policy

Last updated: October 2026

1. General information

The protection of your personal data is important to us. In this Privacy Policy, we explain which personal data is processed when you use Lux4life.eu, for what purposes such processing takes place, the legal basis for the processing and the rights available to you.

Personal data means any information relating to an identified or identifiable natural person.

Unless otherwise stated below, providing personal data is generally neither legally nor contractually required. However, where data is necessary for the performance of a contract or for compliance with legal obligations, failure to provide such data may mean that certain functions cannot be used or that a contract cannot be concluded or performed.

2. Controller

The controller responsible for data processing within the meaning of the General Data Protection Regulation (GDPR) is:

PROINTEGRUM GROUP Sp. z o.o.
ul. Marcelego Siedlanowskiego 4 / 11
37-450 Stalowa Wola
Poland

Telephone: +48 535 833 008
E-mail: info@lux4life.eu
NIP / VAT ID: PL8652566298
REGON: 367361908
KRS: 0000680101

Lux4life.eu is a brand of PROINTEGRUM GROUP Sp. z o.o.

3. Hosting and server log files

Our website is hosted by:

ALL-INKL.COM – Neue Medien Münnich
Hauptstraße 68
02742 Friedersdorf
Germany

The hosting provider supplies, in particular, webspace, database servers, technical infrastructure, backups and other services required for operating the website.

According to the hosting provider, the servers used for hosting are located in Germany.

Where the hosting provider processes personal data on our behalf, such processing is carried out under a data processing agreement pursuant to Article 28 GDPR.

Whenever you access our website, your browser automatically transmits technical information to our servers or to our hosting or IT service provider. This information is stored in server log files.

This may include, in particular:

IP address,
date and time of access,
page or file accessed,
amount of data transferred,
referrer URL,
browser type and browser version,
operating system,
requesting provider,
HTTP status code.

The processing is based on Article 6(1)(f) GDPR and our legitimate interest in ensuring the secure, stable and technically error-free operation of our website as well as detecting and preventing misuse and attacks.

4. Contact

Contact by e-mail

If you contact us by e-mail, we process the data you provide to us, in particular your name, e-mail address and the content of your message.

If the contact relates to pre-contractual measures, for example an enquiry regarding a product, or concerns an existing contract, the processing is carried out on the basis of Article 6(1)(b) GDPR.

In other cases, the processing is based on Article 6(1)(f) GDPR and our legitimate interest in processing and responding to your enquiry.

The data will be deleted once it is no longer required for the relevant purpose and provided that no statutory retention obligations prevent deletion.

Contact form

When you use a contact form, we process the data you enter, in particular your name, e-mail address and message text.

Depending on the content of your enquiry, processing is carried out on the basis of Article 6(1)(b) GDPR or Article 6(1)(f) GDPR.

5. Electronic withdrawal function

If you have concluded a contract via Lux4life.eu, we provide an electronic function through which you can submit a declaration of withdrawal.

When using this function, the following data may be processed in particular:

name,
e-mail address,
information identifying the order or contract,
content of the withdrawal declaration,
date and time of submission.

The processing is carried out for the purpose of handling your withdrawal declaration and complying with our legal obligations on the basis of Article 6(1)(b) and Article 6(1)(c) GDPR.

The technical solution used for the withdrawal function forms part of our shop infrastructure. Where no external service provider is used for this function, no separate transfer to a third party takes place solely as a result of using the withdrawal function.

6. Customer account

If you create a customer account, we process the personal data you provide during registration.

This may include, in particular:

name,
e-mail address,
billing and delivery address,
telephone number, where provided,
login credentials for the customer account,
order history.

The processing is carried out for the purpose of providing and managing your customer account and simplifying future orders.

The processing is based on Article 6(1)(b) GDPR insofar as the customer account is used for preparing or performing contracts. Where individual voluntary functions are based on consent, processing is carried out on the basis of Article 6(1)(a) GDPR.

You may request deletion of your customer account at any time. Statutory retention obligations remain unaffected.

7. Orders and contract processing

When you place an order, we process personal data insofar as this is necessary for the conclusion and performance of the contract.

This may include, in particular:

name and contact details,
billing address,
delivery address,
e-mail address,
telephone number, where required,
ordered items,
order number,
order and payment status,
shipping information,
payment information, where required.

The processing is carried out on the basis of Article 6(1)(b) GDPR.

Providing the data necessary for contract processing is required. Without such data, an order may not be concluded or fulfilled.

8. PrestaShop

We use PrestaShop software to operate our online shop.

PrestaShop is used, in particular, for the technical management of products, customer accounts, shopping carts, orders, shipping information and other shop functions.

The use of the shop software does not automatically result in personal data being transmitted to PrestaShop or other external companies.

Data is only transmitted to external providers where external services, modules or interfaces are used and such transmission is necessary for their operation.

Processing within our shop is carried out in particular on the basis of Article 6(1)(b) GDPR for contract performance and Article 6(1)(f) GDPR on the basis of our legitimate interest in operating a secure and functional online shop.

9. Disclosure of data for order processing and dropshipping

For the purpose of fulfilling your order, personal data may be disclosed to third parties where this is necessary for contract performance.

This may include, in particular:

shipping and transport companies,
manufacturers and suppliers,
dropshipping partners,
fulfilment service providers,
payment service providers,
IT and hosting service providers,
where applicable, tax and accounting service providers.

Data transmission is generally limited to the personal data required for the respective purpose.

Since individual orders may be shipped directly to you by manufacturers, suppliers or dropshipping partners, your name, delivery address, contact details, order number and information about the ordered products may in particular be transmitted to the respective partner.

Processing and transmission are carried out on the basis of Article 6(1)(b) GDPR insofar as this is necessary for the performance of the contract concluded with you.

10. Shipping providers and shipment tracking

The personal data required for delivery is transmitted to the respective shipping or transport company commissioned to deliver your order.

This includes, in particular, your name, delivery address and, where necessary, further information required for delivery.

Where your e-mail address or telephone number is transmitted to a shipping company for delivery notifications, appointment coordination or shipment tracking, this is carried out either for contract performance or, where legally required, on the basis of your consent pursuant to Article 6(1)(a) GDPR.

11. Payment processing with PayPal

We offer payment processing through PayPal in our online shop.

The provider is:

PayPal (Europe) S.à r.l. et Cie, S.C.A.
22–24 Boulevard Royal
L-2449 Luxembourg

If you select PayPal or a payment method provided through PayPal, the personal data required to process the payment will be transmitted to PayPal.

This may include, in particular:

first and last name,
billing and, where applicable, delivery address,
e-mail address,
telephone number, where required,
order number,
payment amount and currency,
information about the goods ordered,
transaction and payment information,
IP address and technical device information, insofar as collected by PayPal.

The transmission of data required for payment processing is carried out on the basis of Article 6(1)(b) GDPR, as it is necessary to perform the contract concluded with you and the payment method selected by you.

PayPal also processes personal data under its own responsibility for data protection purposes. This may include, in particular, payment processing, identity and security checks, fraud prevention, risk assessment and compliance with legal obligations.

Depending on the selected payment method, PayPal may also carry out risk or creditworthiness checks. Such processing is generally carried out under PayPal's own responsibility.

PayPal may transmit personal data within the PayPal group and to external service providers, credit institutions, payment networks, authorities and other recipients insofar as this is necessary for providing its services or complying with legal obligations.

This may also involve processing personal data outside the European Economic Area. According to PayPal, the applicable data protection mechanisms for international transfers are used for this purpose.

Further information about the processing of your personal data can be found in PayPal's privacy information.

12. Cookies and similar technologies

Our website uses cookies and similar technologies.

Cookies are small files or pieces of information that may be stored on or read from your device.

Some cookies are technically necessary in order to provide essential functions of the online shop.

These may include, in particular:

shopping cart functions,
login and customer account,
language selection,
session management,
security functions,
storage of your privacy and cookie preferences.

Cookies and similar technologies that are not technically necessary are only used where the required consent has been obtained.

13. Consent management

We use a consent management solution on our website to manage your privacy and cookie settings.

This records which categories or services you have accepted or rejected.

Depending on the technical implementation, the following information may be processed in particular:

consent status,
date and time of the decision,
technical information for assigning the consent decision,
where applicable, a pseudonymous identifier.

The processing serves to obtain, store and demonstrate your consent decisions and to comply with data protection obligations.

The processing is carried out on the basis of Article 6(1)(c) GDPR and additionally Article 6(1)(f) GDPR on the basis of our legitimate interest in transparent and technically reliable consent management.

You can change or withdraw consent that you have given at any time with effect for the future via the cookie or privacy settings on our website.

14. Google Analytics 4

Where you have given your consent, we use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

The processing serves to analyse the use of our website and improve our services.

The following information may be processed in particular:

information about pages viewed,
date and time of page access,
browser and device information,
approximate location information,
referrer information,
interactions with the website,
purchase and conversion events,
pseudonymous identifiers.

The processing is carried out exclusively with your consent on the basis of Article 6(1)(a) GDPR.

You may withdraw your consent at any time with effect for the future via our cookie settings.

15. Google Ads and conversion measurement

Where you have given your consent, we use Google Ads services provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

The processing is used in particular to measure the success of our advertising activities, attribute conversions and, where activated, display relevant advertising.

Cookies, local storage technologies, pseudonymous identifiers and conversion information may be used for this purpose.

The processing is carried out with your consent on the basis of Article 6(1)(a) GDPR.

16. Google Consent Mode

We may use Google Consent Mode to technically transmit the consent status selected by you to Google services and to control the behaviour of Google tags according to your choices.

Depending on the technical configuration and your consent status, technical signals may be transmitted to Google.

Where personal data or information that is not technically necessary is processed, this takes place only within the scope of the required consent.

17. Google Tag Manager

We may use Google Tag Manager provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, to centrally manage website tags.

Google Tag Manager is used, in particular, to technically integrate and control other analytics, marketing or functional services.

Services integrated via the Tag Manager are controlled in accordance with their respective legal basis and your consent decision.

18. Microsoft Advertising

Where you have given your consent, we may use Microsoft Advertising to measure and optimise our advertising activities.

The provider is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland, or, within the scope of the respective service, another affiliated company of the Microsoft group.

The following data may be processed in particular:

device and browser information,
IP address,
referrer information,
pseudonymous identifiers,
information about website interactions and conversions.

The processing is carried out on the basis of your consent pursuant to Article 6(1)(a) GDPR.

19. YouTube

Where YouTube videos are embedded on our website, we use services provided by Google Ireland Limited or YouTube.

Where technically possible, videos are only loaded after you have given the relevant consent.

When loading or playing a YouTube video, your IP address, device and browser information and information about your use of the video may be transmitted to Google or YouTube.

The processing is carried out on the basis of your consent pursuant to Article 6(1)(a) GDPR.

20. Transfers of data to third countries

When using certain service providers, personal data may be processed outside the European Economic Area.

Where data is transferred to countries for which the European Commission has adopted an adequacy decision, the transfer is carried out on the basis of that decision.

Where no adequacy decision exists, data is only transferred if appropriate safeguards pursuant to Articles 44 et seq. GDPR are in place or another statutory condition for the transfer is satisfied.

21. Storage period

We store personal data only for as long as is necessary for the respective processing purpose or for as long as statutory retention obligations apply.

Data relating to orders and contracts is stored in particular in accordance with the applicable tax, commercial and civil-law retention and limitation periods.

Data processed exclusively on the basis of your consent will generally no longer be processed for the relevant purpose once you withdraw your consent, unless another legal basis permits further processing.

22. Your rights

Where the statutory requirements are met, you have in particular the following rights:

right of access pursuant to Article 15 GDPR,
right to rectification pursuant to Article 16 GDPR,
right to erasure pursuant to Article 17 GDPR,
right to restriction of processing pursuant to Article 18 GDPR,
right to data portability pursuant to Article 20 GDPR,
right to object pursuant to Article 21 GDPR,
right to withdraw consent at any time with effect for the future.

The withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.

23. Right to object

Where personal data is processed on the basis of Article 6(1)(f) GDPR, you have the right, on grounds relating to your particular situation, to object at any time to such processing.

Following an objection, we will generally no longer process the personal data concerned unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing is required for the establishment, exercise or defence of legal claims.

Where personal data is processed for direct marketing purposes, you may object to such processing at any time.

24. Right to lodge a complaint with a supervisory authority

Pursuant to Article 77 GDPR, you have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data infringes data protection law.

The data protection supervisory authority responsible for us in Poland is, in particular:

President of the Personal Data Protection Office
Personal Data Protection Office
ul. Stanisława Moniuszki 1A
00-014 Warsaw
Poland

Independently of this, subject to the statutory requirements, you may also contact a data protection supervisory authority in the Member State of your habitual residence, place of work or the place of the alleged infringement.