Data Protection & Privacy Policy

1. Who is responsible for your data?

The controller responsible for processing personal data on this website is:

2. What information do we collect?

Depending on how you use our website, we may process your name, email address, telephone number, billing and delivery address, account details, order information, messages you send us, and technical information such as IP address, browser details, and security logs.

Payment information may be processed by the payment service used at checkout. We do not need your full card number to fulfil your order.

3. Why do we use your information?

We process personal data to manage accounts, process purchases, deliver products, provide customer support, meet tax and accounting obligations, and keep our website secure.

Our legal bases under Article 6 GDPR are performance of a contract (Art. 6(1)(b)), compliance with legal obligations (Art. 6(1)(c)), legitimate interests in website security and administration (Art. 6(1)(f)), and consent where required (Art. 6(1)(a)).

4. Who receives your data?

We share only the information necessary with service providers involved in operating our shop, such as website hosting providers, payment processors, delivery companies, and email service providers. We may also disclose information where required by law.

Where personal data is transferred outside the European Economic Area, we use an applicable lawful transfer mechanism and safeguards where required by GDPR.

5. Cookies and website technologies

SAFILIFE does not use cookies for advertising, analytics, or tracking purposes. We do not use third-party marketing cookies to monitor visitors. Essential technical session cookies may be used for secure account login, shopping carts, and website security.

You can control cookies through your browser settings. Blocking essential cookies may affect website functionality.

6. How long do we keep data?

We keep personal information only as long as necessary for its purpose. Order and invoice records may need to be retained for statutory accounting and tax periods, generally seven years in Austria, and longer where a specific legal requirement applies. Other information is deleted or anonymized when no longer needed, subject to applicable legal obligations.

7. Your privacy rights

Under the GDPR, subject to applicable conditions, you may request access to your data, correction, deletion, restriction of processing, data portability, or object to certain processing. Where we rely on consent, you may withdraw it at any time without affecting processing already carried out.

To exercise your rights, email [email protected]. You may also lodge a complaint with the Austrian Data Protection Authority (Datenschutzbehörde).

8. Security and changes to this policy

We use reasonable technical and organizational measures to protect personal information against unauthorized access, loss, and misuse. No internet transmission or storage system can be guaranteed completely secure.

We may update this policy when our services or legal requirements change. The current version will be published on this page.

9. Contact us

For questions about this policy or the handling of your personal data, please contact [email protected].

Important: This notice must match the services actually used by the website. Before publishing, confirm your payment provider, hosting provider, email provider, any third-party analytics or advertising tools, essential session-cookie behavior, and any international data transfers. Additional disclosures may be required.