Privacy Policy

This Privacy Policy describes how Detoxlifeix ("we", "us", or "our") collects, uses, and protects your personal information when you visit our website detoxlifeix.world and use our services. We are committed to protecting your privacy and ensuring that your personal data is handled in compliance with the General Data Protection Regulation (EU) 2016/679 ("GDPR"), the Austrian Data Protection Act (Datenschutzgesetz, DSG 2018), and other applicable Austrian and European data protection laws.

1. Data Controller

The data controller responsible for the processing of your personal data is:

Detoxlifeix
Moserhofstraße 5
8700 Leoben
Austria
Email: correspondence@detoxlifeix.world

2. Personal Data We Collect

We collect and process the following categories of personal data:

2.1 Information You Provide

• Full name
• Email address
• Phone number (if provided)
• Messages and communications you send to us
• Order information and transaction data

2.2 Information Collected Automatically

• IP address
• Browser type and version
• Device information
• Pages visited and time spent on our website
• Referring website
• Cookie data (see our Cookie Policy)

3. Purposes and Legal Basis for Processing

We process your personal data for the following purposes:

3.1 Contract Performance (Art. 6(1)(b) GDPR)

• Processing and fulfilling your orders
• Providing customer support
• Managing your account
• Handling payments and refunds

3.2 Legitimate Interests (Art. 6(1)(f) GDPR)

• Improving our website and services
• Analyzing website usage patterns
• Fraud prevention and security
• Business administration and record keeping

3.3 Consent (Art. 6(1)(a) GDPR)

• Marketing communications (where you have opted in)
• Non-essential cookies and analytics

3.4 Legal Obligations (Art. 6(1)(c) GDPR)

• Tax and accounting requirements
• Legal compliance and regulatory obligations

4. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:

• Order data: 7 years (legal retention requirements in Austria)
• Marketing data: Until you withdraw consent or unsubscribe
• Website analytics: 26 months
• Customer inquiries: 3 years after last contact

5. Data Sharing and Recipients

We may share your personal data with the following categories of recipients:

• Payment processors: To process your payments securely
• Shipping partners: To deliver your orders
• IT service providers: For website hosting and maintenance
• Legal authorities: When required by law

We do not sell your personal data to third parties. Where we engage processors, we do so under Article 28 GDPR (written agreements specifying subject matter, duration, nature and purpose of processing, type of data, obligations, and rights). All our service providers are contractually bound to process your data only on our instructions and in compliance with GDPR and, where applicable, the DSG 2018.

6. International Data Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). When such transfers occur, we ensure adequate protection through:

• EU Standard Contractual Clauses (SCCs) approved by the European Commission
• Adequacy decisions by the European Commission (including, where applicable, the EU–US Data Privacy Framework for certified US organizations)
• Binding Corporate Rules or other mechanisms recognized under Chapter V GDPR

You may request further information about safeguards for specific transfers by contacting us using the details in Section 1.

7. Your Rights

Under GDPR, you have the following rights regarding your personal data:

• Right of access (Art. 15): Request a copy of your personal data
• Right to rectification (Art. 16): Correct inaccurate or incomplete data
• Right to erasure (Art. 17): Request deletion of your data ("right to be forgotten")
• Right to restriction (Art. 18): Limit how we process your data
• Right to data portability (Art. 20): Receive your data in a structured format
• Right to object (Art. 21): Object to processing based on legitimate interests
• Right to withdraw consent: Withdraw consent at any time where processing is based on consent
• Right to lodge a complaint (Art. 77): Lodge a complaint with a supervisory authority, in particular in the EU member state of your habitual residence, place of work, or place of the alleged infringement

To exercise any of these rights, please contact us at correspondence@detoxlifeix.world. We will respond to your request without undue delay and in any event within one month of receipt (this period may be extended by two further months where necessary, in complex cases, in line with Article 12(3) GDPR). If we intend to refuse a request, we will inform you of the reasons and of your right to lodge a complaint with a supervisory authority and to seek a judicial remedy.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• SSL/TLS encryption for data transmission
• Secure storage systems with access controls
• Regular security assessments and updates
• Employee training on data protection

9. Children's Privacy

Our website and services are not directed at children. We do not knowingly collect personal data from anyone under 16 years of age without verifiable parental consent where such consent is required. If you believe we have collected data from a minor inappropriately, please contact us immediately.

10. Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects concerning you or similarly significantly affects you.

11. Right to Lodge a Complaint

If you believe that our processing of your personal data violates data protection laws, you have the right to lodge a complaint with a supervisory authority under Article 77 GDPR. In Austria, the competent authority is:

Österreichische Datenschutzbehörde (DSB)
Barichgasse 40-42
1030 Vienna
Austria
Website: https://www.dsb.gv.at/

A list of EU supervisory authorities is published by the European Data Protection Board.

12. Electronic Communications and Similar Processing

Where we process data in connection with electronic communications services accessible to the public (for example, storing or accessing information on your device via cookies or similar technologies that are not strictly necessary), we do so in line with applicable EU and Austrian rules, including the Telekommunikationsgesetz 2021 (TKG 2021) and the ePrivacy framework, and only after obtaining your consent where consent is required. Non-essential cookies and similar tools are described in our Cookie Policy.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes by posting the updated policy on our website with a new effective date.