Purposes of Processing, Legal Basis, and Source

1. Provision of the Website

1. Each time our website is accessed, our system automatically stores the following information about your visit in so-called server logs:

   (a) Type and version of the web browser you use,

   (b) Type and operating system of the device you use,

   (c) Pages accessed and files requested,

   (d) The website from which you arrived (referrer),

   (e) Your IP address,

   (f) Date and time of access.

2. The processing of server log data is technically necessary to establish and maintain the connection during your use of the website. The legal basis for processing is our legitimate interest in providing our website (Art. 6(1)(f) GDPR). Processing is essential for the use of our website. Server logs are automatically deleted after seven (7) days.

1. Contact Form

1. If you send us inquiries via the contact form provided on our website at https://www.galaxialife.de, the mandatory information requested in the contact form (name, email address, subject) as well as the content you provide in the message field will be stored by us. We process this data to handle your inquiry and any follow-up questions, as well as to prevent misuse of the contact form.

2. We base this data processing on our legitimate interests (Art. 6(1)(f) GDPR) to process your request and ensure the security of our IT systems. The personal data you provide will be stored as long as necessary to answer your inquiry and will be deleted at the latest after one month. You are not obliged to provide this personal data, but without it, you cannot contact us via the contact form.

Social Media Plugins

1. Social Media Plugins with Shariff

1. Our website uses plugins from LinkedIn and Instagram, which are only loaded if you have previously activated the function by giving your consent. Through these plugins, we offer you the opportunity to interact with social networks. To ensure data protection on our website, we use all plugins only in conjunction with the so-called "Shariff" solution. This application prevents the plugins integrated on our website from transmitting personal data (e.g., your IP address) to the respective provider upon first loading the website. Only when you activate the respective plugin by clicking the corresponding button is a direct connection to the provider's server established (consent). As soon as you activate the plugin, the respective provider receives the information that you have visited our website with your IP address.

2. Activating the respective plugin constitutes consent within the meaning of Art. 6(1)(a) GDPR. You can revoke this consent at any time with effect for the future.

2. Our Presence on Social Networks

1. We maintain various presences on so-called social media platforms. We operate these presences with the following providers:

• LinkedIn, LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland, URL of our company profile, Link to privacy information;

• Instagram, Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, URL of our company profile, Link to privacy information.

1. For these information services, we use the technical platform and services of the providers. Please note that you use our presences on social media platforms and their functions at your own responsibility. This applies in particular to the use of interactive functions (e.g., commenting, sharing, rating). When visiting our presences, the providers of the social media platforms collect, among other things, your IP address and other information stored in cookies on your device. This information is used to provide us, as account operators, with statistical information about interactions with us.

2. The data processed about you in this context is processed by the platforms and may be transferred to countries outside the European Union, in particular the USA. The information collected is stored on the providers' servers, including outside Europe. In such cases, the provider has submitted to the EU-U.S. Privacy Framework. If the provider is not certified, we have agreed on so-called standard contractual clauses, the purpose of which is to ensure an adequate level of data protection in the third country. We do not know how the social media platforms use the data from your visit to our accounts and interaction with our posts for their own purposes, how long this data is stored, or whether data is passed on to third parties. Data processing may differ depending on whether you are registered and logged in to the social network or visit the page as a non-registered and/or non-logged-in user. When accessing a post or the account, the IP address assigned to your device is transmitted to the provider of the social media platform. If you are currently logged in as a user, a cookie on your device can be used to track your activity on the network. By means of buttons embedded in websites, the platforms can record your visits to these websites and assign them to your respective profile. Based on this data, content or advertising can be tailored to you. If you wish to avoid this, you should log out or deactivate the "stay logged in" function, delete the cookies present on your device, and restart your browser.

3. As the provider of the information service, we only process data from your use of our service that you provide to us and that requires interaction. For example, if you ask a question that we can only answer by email, we will store your information in accordance with the general principles of our data processing described in this privacy policy. The legal basis for processing your data on the social media platform is Art. 6(1)(f) GDPR.

4. To exercise your data subject rights, you can contact either us or the provider of the social media platform. If one party is not responsible for responding or needs to obtain information from the other party, we or the provider will forward your request to the respective partner. For questions about profiling or the processing of your data when using the website, please contact the operator of the social media platform directly. For questions about the processing of your interaction with us on our page, please write to the contact details provided above.

5. The information the social media platform receives and how it is used is described by the providers in their privacy policies (see link in the table above). There you will also find information about contact options and settings for advertisements. Further information about social networks and how you can protect your data can also be found at www.youngdata.de.

6. Web Analytics with Google Analytics

1. When you visit our website, the Google Analytics service is loaded for the statistical evaluation of the use of our website. This service is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). By using the "anonymizeIp()" extension, we ensure that Google Analytics only transmits a truncated version of your IP address to Google.

2. By accessing the website and loading the service, Google becomes aware that our website has been accessed via your IP address. Google Analytics uses cookies that are stored on your device, unless you have prohibited the use of cookies in your browser, and which enable an analysis of your use of our website. The information generated by the cookie about your use of the website is transferred to and stored on Google servers in the USA.

3. We base the use of Google Analytics on our legitimate interests (Art. 6(1)(f) GDPR), which consist in the needs-based design and optimization of our website. In addition, we have concluded a data processing agreement with Google in accordance with the requirements of the German data protection authorities when using Google Analytics. Data transfer to the USA is carried out under the EU-U.S. Data Privacy Framework.

4. We collect your IP address to enable truncation and subsequent transmission to Google. You are not obliged to provide this personal data; use of our website is possible without providing it. You can prevent the provision of this personal data by adjusting your browser settings or by installing the browser add-on available at:  https://tools.google.com/dlpage/gaoptout?hl=de.

5. Further information about Google Analytics can be found at http://www.google.com/intl/de_ALL/analytics. Google's privacy policy can be found at https://www.google.com/policies/privacy/.

Other Functions of the Website

1. Cookies

We use cookies, log files, pixel tags, web beacons, scripts, eTags, and similar technologies to collect and store information that we automatically gather about your device and use of the website. Further information about cookies and how you can control them can be found below.

What is a cookie?

1. Cookies are text files that contain small amounts of information and are downloaded to your browser or device when you visit a particular web address. Cookies are then sent back to the original web address or to another web address that recognizes the cookie on each subsequent visit. Cookies are widely used to make the website work or work more efficiently and to provide us with information.

2. Cookies perform many different tasks, such as enabling efficient navigation between pages, storing your login and preferences, and generally improving user-friendliness. Cookies can tell us, for example, whether you have visited or used the website before or whether you are a new visitor or user. Cookies can help us ensure the security of our data and website and detect fraud and hacking attempts on our products and website. For example, cookies can store ticket information that the server can use to verify that the login was performed by you. The encrypted information in the ticket can also be used to prevent various types of attacks, cross-site information theft, and access with disguised identity.

3. There are two main categories of cookies:

   • First-party cookies, which are sent directly by us to your device.

   • Third-party cookies, which are set by a third party on our behalf.

4. Cookies can remain on your browser or device for different periods. Some cookies are "session cookies," i.e., they only exist as long as your browser or application is open. These are automatically deleted when you close your browser or application. Other cookies are "persistent cookies," i.e., they remain after your browser or application is closed. They can be used by the website to recognize your device when you visit and use the website again.

1. How do we use cookies?

We use cookies to:

1. Verify login information to ensure the security of your account;

2. Understand the total number of visitors to the website and the types of devices used;

3. Provide services to you.

1. What types of cookies do we use?

The types of cookies used by us and our partners in connection with the website can be classified into the following categories: "essential cookies," "functional cookies," and "analytics and measurement cookies”. The following table provides more information on each category and the purposes of the cookies set by us and third parties.