Privacy Policy

Last updated: October 2026

This policy informs you about which personal data we process when you visit livaglow.de, when you place an order and when you communicate with us, for what purpose, on what legal basis, for how long, and which rights you have (Art. 13 GDPR).

1. Controller

Controller within the meaning of the General Data Protection Regulation (GDPR, German: DSGVO):
Yusuf Senel
Log-System Development
Von-Hünefeld-Str. 8
40764 Langenfeld (Rheinland), Germany
Email: mail@livaglow.de
Phone: +49 (0) 2173 1618220

No data protection officer has been appointed, as the statutory requirements for this are not met. Please contact the above address directly with any data protection questions.

2. General information

Encryption. All connections to this website are encrypted via TLS (HTTPS). You enter payment data exclusively on the pages of our payment service provider; no card or account data is stored on our servers.

No automated decision-making. We do not make any decisions based solely on automated processing, including profiling (Art. 22 GDPR). The bot protection in the ordering process (section 5) only distinguishes between humans and programs and does not assess you as a person.

Obligation to provide data. For an order we need your name, delivery address and email address; without this information we cannot perform the contract. All other information (gift message, newsletter, review request) is voluntary.

No sale of data. We only pass your data on to the recipients named in this policy and only insofar as this is necessary for the respective purpose. Your data is not used for other purposes or sold to third parties.

3. Hosting (netcup)

This website is operated on servers of netcup GmbH, Daimlerstraße 25, 76185 Karlsruhe, Germany (“netcup”). When the website is accessed, the server automatically processes technical access data (IP address, date and time, page accessed, amount of data transferred, referrer, browser identifier) insofar as this is necessary for delivering the website, error analysis and security. The legal basis is our legitimate interest in secure and stable operation (Art. 6(1)(f) GDPR). Server log files are deleted after 14 days at the latest. Our database (orders, designs, newsletter subscriptions) is also located on these servers in Germany. A data processing agreement pursuant to Art. 28 GDPR has been concluded with netcup. Further information: https://www.netcup.de/kontakt/datenschutzerklaerung.php

4. Content delivery network and security (Cloudflare)

We use services of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA, or Cloudflare Germany GmbH, Rosental 7, 80331 Munich, Germany (“Cloudflare”) as a content delivery network, to encrypt the connection and to protect against attacks and automated mass access. For technical reasons, all data traffic of this website is routed via Cloudflare’s servers; in the process, Cloudflare processes connection data such as your IP address and technical characteristics of the browser and may set a technically necessary security cookie (“__cf_bm”). The legal basis is our legitimate interest in providing the website securely and with good performance (Art. 6(1)(f) GDPR).

Cloudflare may process data in the USA. Cloudflare, Inc. is certified under the EU-US Data Privacy Framework (adequacy decision of the EU Commission, Art. 45 GDPR); in addition, standard contractual clauses pursuant to Art. 46(2)(c) GDPR and a data processing agreement are in place. Further information: https://www.cloudflare.com/privacypolicy/

5. Bot protection in the ordering process (Skriza Shield)

To prevent automated abusive orders, the verification procedure “Skriza Shield” is integrated into order completion and the admin login. Skriza is the controller’s own project (section 1) and not a third-party company; to that extent, no data is transferred to third parties. The procedure gives your browser a computational task (“proof of work”) and processes technically necessary connection data (IP address, which is only stored in hashed form, and browser characteristics) in order to distinguish humans from programs. No user profiles are created and no cookies are set for advertising purposes. The servers are located in the European Union; Cloudflare is connected upstream as the network (section 4). The legal basis is our legitimate interest in preventing abusive orders (Art. 6(1)(f) GDPR). Skriza’s privacy information: https://skriza.com/privacy

6. Web analytics: Google Analytics 4 (via Cloudflare Zaraz)

To measure reach and to improve our offering, we use Google Analytics 4, a web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). It is integrated via the tag management service Cloudflare Zaraz, which only loads the scripts after you have given your consent.

Google Analytics uses cookies or comparable technologies (including “_ga”, “_ga_*”, lifetime up to 2 years) to evaluate your use of the website statistically (pages viewed, time spent, approximate location based on the shortened IP address, completed orders with order value, without name or address). In Google Analytics 4, IP addresses are shortened and not stored permanently; the retention of user data at Google is set to 14 months. In the process, data may be transferred to Google LLC in the USA; Google LLC is certified under the EU-US Data Privacy Framework, and standard contractual clauses of the EU Commission are in place in addition.

Google Analytics is loaded only with your consent (Art. 6(1)(a) GDPR, § 25 Abs. 1 TDDDG – German Telecommunications Digital Services Data Protection Act). Without consent, no analysis takes place. You can withdraw your consent at any time with effect for the future via “Cookie settings” in the footer. Further information: https://policies.google.com/privacy

7. Order processing, designs and order status

To process your order, we process the data you provide (first and last name, delivery address, email address, optionally a gift message) as well as your order data, including the designs you have created (uploaded images, texts, emojis, print template). The legal basis is Art. 6(1)(b) GDPR (performance of a contract). Please only upload images to which you hold the necessary rights and which do not show any persons who have not consented to this.

Storage of designs. A design is saved as soon as you add it to the cart. We automatically delete designs that are not ordered after 30 days. We keep ordered designs for production, reprints in the event of complaints and warranty claims and delete them no later than 12 months after the order.

Order and invoice data (name, address, order items, amounts, invoice) are retained after completion of the order in accordance with the retention obligations under commercial and tax law, currently ten years (§ 147 AO – German Fiscal Code, § 257 HGB – German Commercial Code; Art. 6(1)(c) GDPR).

Design links. Every saved design has a non-guessable address (/design/…) through which the preview and layout can be accessed – this allows you to share a design or continue editing it later. For this purpose, we additionally store uploaded photos in their original resolution with the design; they are subject to the same deletion periods. Anyone who knows the link can see the design. We exclude search engines.

Saving your cart by email. On request, we send you a link that restores your cart. For this purpose, we store your email address, the items in the cart and the time, IP address and browser of the request as proof. If you have not ordered 24 hours later, we send exactly one reminder; both are part of the service you requested (Art. 6(1)(b) GDPR), and there is no further advertising contact. We delete saved carts after 30 days.

Partner programme. If you order with a partner’s discount code or via a partner’s link (blog, social media account), the partner only sees aggregated figures in their partner portal: number of orders, number of mugs, value of goods, calendar day of the order and their commission. Your order number, name, address and email address are neither displayed nor transmitted to the partner. The legal basis is our legitimate interest in settling accounts with the partner (Art. 6(1)(f) GDPR). From partners themselves we store their name, email address, address, whether they are a private individual or a business, their VAT status including VAT ID or tax number (businesses only), the confirmation of tax residence in Germany, the selected language, the commission agreement, the payout method provided by the partner (IBAN or PayPal address), the time and version of consent to the partner terms, recorded payouts and a session (cookie “lg-affiliate”, 30 days) for performing the partner agreement (Art. 6(1)(b) GDPR); login takes place via a single-use link sent by email, and no password is stored. Billing documents (credit notes) are retained in accordance with the periods under tax law (§ 147 AO).

ChatGPT plugin and AI assistants. Our interface for AI assistants (MCP server at livaglow.de/api/mcp) can be used by ChatGPT and other assistants to retrieve prices, delivery times and answers from our FAQ and guides and to generate a mug draft from your description. In doing so, we only receive the details of the draft (texts, font, colours, graphic identifiers) and the language of the interface; we do not store this information, and the draft is contained exclusively in the generated link. Photos, names or contact details are not transmitted via this interface. What you write in ChatGPT is processed by OpenAI (OpenAI Ireland Ltd., Dublin) in accordance with its own privacy policy; we have no influence on this. The preview images of the card in ChatGPT are loaded from our server; this generates the usual server log data (see “Hosting”). The legal basis is the initiation of a contract at your request (Art. 6(1)(b) GDPR).

Designing with AI. In the designer you can describe the mug you want in your own words (“Design with AI”). We then send your description, the language of the page and – if you have already started designing – the texts, fonts, colours and graphic identifiers of your current design to the AI language model of an external provider, which creates a draft from it. We do not send photos, your IP address or any contact or order details. The provider we use may change; the one currently active is named in the notice right next to the input field. The possible providers are:

Alibaba Cloud (“Qwen” models, “QwenCloud” service): Alibaba (Netherlands) B.V., Herengracht 448, 1017 CA Amsterdam, the Netherlands. Requests go to data centres in Singapore; the model may run anywhere in the world, including the People’s Republic of China. Under the contract, Alibaba does not use the information to train its models; Alibaba does not publish a fixed storage period for this service.
OpenAI (the models ChatGPT is also based on): OpenAI Ireland Ltd., 1st Floor, The Liffey Trust Centre, 117–126 Sheriff Street Upper, Dublin 1, D01 YC43, Ireland. Processing also takes place in the USA. According to OpenAI, data from its API is not used for training by default, and inputs and outputs are deleted after 30 days at the latest unless retention is required by law.

The providers process the information as our processors. There is no adequacy decision of the European Commission for Singapore or China. Transfers to these countries and to the USA are based on the European Commission’s standard contractual clauses (Art. 46(2)(c) GDPR), which form part of our data processing agreements with the providers; you can obtain a copy on request. Even with these clauses, access to the information by authorities in these countries cannot be ruled out. Please therefore do not enter sensitive information (such as health data) in the description.

We do not store your description or the draft ourselves; the draft only appears in your designer. To limit abuse and costs, we count requests per IP address in memory for 24 hours (Art. 6(1)(f) GDPR). Using this feature is voluntary; you can always design without AI. The legal basis for AI design is taking steps at your request prior to entering into a contract (Art. 6(1)(b) GDPR).

Order confirmation. After payment you receive an email with the order number, the amount, the invoice as a PDF and the essential contract information (terms and conditions, withdrawal policy). Sending it is required by law (§ 312f BGB, German Civil Code) and is not advertising.

Complaints and safety reports. If you report a defect or a safety problem to us (e.g. breakage, crack), we store your report with reference to the order, a description and, where applicable, photos in order to process it and – as the General Product Safety Regulation (EU) 2023/988 requires of manufacturers – to document it in a complaints register (Art. 6(1)(b) and (c) GDPR). We retain these documents for ten years after the product was placed on the market.

Order status. Under “Track order” you can retrieve the status of your order. To do so, you enter your order number and email address; both must belong to the same order. On the order confirmation page we display your email address only partially masked.

8. Payment processing (Stripe)

Payment is processed by Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland (“Stripe”). After clicking “Place order and pay”, you are redirected to a payment page hosted by Stripe. There, Stripe collects your payment data (e.g. card number, wallet data for Apple Pay/Google Pay) itself; we do not receive complete card data. We transmit to Stripe your email address, the amount, the order items with a preview image of your design and an order identifier. The legal basis is Art. 6(1)(b) GDPR.

If you choose PayPal, Stripe redirects you to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. PayPal processes your login and payment data as an independent controller in accordance with its privacy policy (https://www.paypal.com/de/legalhub/privacy-full); we only receive from PayPal the confirmation of payment as well as the name and email address of the PayPal account in order to assign the order.

If you choose Klarna, Stripe redirects you to Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden. Klarna processes your details (e.g. name, address, email address, order amount) as an independent controller in accordance with its privacy policy (https://www.klarna.com/de/datenschutz/), for example to check the selected payment method; we only receive the confirmation of payment from Klarna. The legal basis is Art. 6(1)(b) GDPR.

If you choose Amazon Pay, Stripe redirects you to Amazon Payments Europe S.C.A., 38 avenue J.F. Kennedy, L-1855 Luxembourg. Amazon Payments processes your login and payment data as an independent controller in accordance with its privacy policy (https://pay.amazon.de/help/201212490); we only receive the confirmation of payment. The legal basis is Art. 6(1)(b) GDPR.

If you choose Revolut Pay, Stripe redirects you to Revolut Bank UAB, Konstitucijos ave. 21B, 08130 Vilnius, Lithuania. Revolut processes your login and payment data as an independent controller in accordance with its privacy policy (https://www.revolut.com/de-DE/legal/privacy/); we only receive the confirmation of payment. The legal basis is Art. 6(1)(b) GDPR.

Stripe processes payment data partly under its own responsibility, in particular for fraud prevention, to fulfil obligations under anti-money laundering law and to improve its services. In the process, data may be transferred to Stripe, Inc. in the USA; Stripe is certified under the EU-US Data Privacy Framework, and standard contractual clauses are in place in addition. Further information: https://stripe.com/de/privacy

9. Shipping and shipment tracking (Sendcloud, UPS, DHL)

Parcel services. Which parcel service delivers your order depends on the shipping method you select in the cart. For delivery, we transmit your name and delivery address to the respective parcel service (Art. 6(1)(b) GDPR):

for “UPS to your address” and “UPS to a pickup point” to United Parcel Service Deutschland S.à r.l. & Co. OHG, Neuss (“UPS”),
for “DHL to your address” to DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn (“DHL”).

For personal delivery in Langenfeld, we bring the mug round ourselves; in that case your address is not passed on to any parcel service or to Sendcloud.

If, exceptionally, we send a parcel with postage we have paid ourselves, for example for a replacement delivery, another parcel service may also be used for this (e.g. DPD Deutschland GmbH, Aschaffenburg); it receives the same information. The parcel services process the data as independent controllers.

Sendcloud shipping platform. We create the shipping labels via the shipping platform of Sendcloud B.V., Eindhoven, Netherlands (“Sendcloud”). For this purpose, Sendcloud receives your name, your delivery address, the order number, the parcel weight and the parcel contents (number of mugs and value of goods) and passes the information for the label on to the parcel service. Sendcloud acts as our processor (Art. 28 GDPR).

Email address. For delivery to your address, we do not pass your email address on either to Sendcloud or to the parcel service. Only if you choose “UPS to a pickup point” do we additionally transmit your email address to UPS via Sendcloud: UPS uses it to notify you as soon as the parcel is ready for collection; without this notification, collection would not be possible (Art. 6(1)(b) GDPR). We do not collect a telephone number.

Pickup point search. If you choose a pickup point, we search for suitable pickup points via Sendcloud based on the postcode and town you entered in the order form. The request is made by our server; Sendcloud receives neither your IP address nor your name. We store the selected pickup point with your order (Art. 6(1)(b) GDPR).

Shipment tracking. In order to inform you about shipping and delivery and to display the status in our shop, we regularly query the status of your shipment using the tracking number – for shipments whose label was created via Sendcloud, from Sendcloud; for DHL shipments with postage paid by us directly, from DHL (Art. 6(1)(b) GDPR). If you follow the link to the parcel service in the shipping email or in the shipment tracking, the parcel service’s privacy notices apply there.

Privacy notices: UPS at www.ups.com (section “Datenschutz”/privacy), DHL at https://www.dhl.de/datenschutz, Sendcloud at www.sendcloud.de (section “Datenschutz”/privacy).

10. Sending and receiving email (Google Workspace)

To send and receive our emails, we use Google Workspace (Gmail) of Google Cloud EMEA Limited, 70 Sir John Rogerson’s Quay, Dublin 2, D02 R296, Ireland (“Google”). This applies to all emails we send you (order confirmation with the invoice attached, shipping and delivery notifications and, where applicable, review request and newsletter) as well as emails you send to mail@livaglow.de. In doing so, Google processes the email addresses, the content of the messages and the usual technical delivery data as our processor.

The legal basis is Art. 6(1)(b) GDPR for order and contract communication, Art. 6(1)(a) GDPR for newsletters and review requests and Art. 6(1)(f) GDPR (interest in reliable, spam-protected email operation) for the choice of service provider. A data processing agreement (Cloud Data Processing Addendum, Art. 28 GDPR) has been concluded with Google. Google may also process data on servers outside the EU, in particular in the USA; Google LLC is certified under the EU-US Data Privacy Framework, and the standard contractual clauses of the EU Commission apply in addition. Further information: https://cloud.google.com/terms/cloud-privacy-notice and https://policies.google.com/privacy

If you contact us by email, we store your enquiry in order to answer it (Art. 6(1)(b) or (f) GDPR) and delete it as soon as the matter has been dealt with and no retention obligations prevent this; correspondence relating to an order is retained together with the order data. The same applies to the enquiry form for companies on our occasion pages: name, email address, company, quantity, desired date and message are sent to us by email and are not stored in our database (Art. 6(1)(b) GDPR, initiation of a contract).

11. Review request (Trustpilot)

If you tick the “review request” box during the ordering process, we send you a one-off email about 3 days after delivery asking you to rate your experience on Trustpilot. The legal basis is your consent (Art. 6(1)(a) GDPR, § 7 Abs. 2 Nr. 2 UWG – German Act against Unfair Competition); without the tick you will not receive such an email. Consent is voluntary, not required for the order and can be withdrawn at any time, for example by a short reply to one of our emails or a message to mail@livaglow.de.

The email contains a link to the review form of Trustpilot A/S, Pilestræde 58, 5th floor, 1112 Copenhagen, Denmark. We do not transmit any data to Trustpilot; only when you follow the link and write a review there does Trustpilot process your data under its own responsibility. Trustpilot’s privacy notice: https://corporate.trustpilot.com/legal/for-reviewers/privacy-policy-end-user

13. Internal notifications (Discord)

So that we can process orders promptly, our shop sends a short automatic message to a channel accessible only to us on the messaging service Discord (Discord Netherlands B.V., Schiphol Boulevard 195, 1118 BG Schiphol, Netherlands; parent company Discord, Inc., San Francisco, USA) upon receipt of payment, shipping, delivery and cancellation. This message contains only the order number, the order value, the number of mugs and, where applicable, the tracking number, the parcel service and an agreed shipping date – for a company enquiry, only the requested quantity and the desired date – but neither your name nor your company, address or email address. The legal basis is our legitimate interest in processing orders quickly (Art. 6(1)(f) GDPR). Discord may process this data in the USA; the standard contractual clauses of the EU Commission apply to this. Further information: https://discord.com/privacy

14. Fonts

All fonts used on this website are stored locally on our server. When the page is accessed, no connection is established to servers of Google or other font providers.

15. Cookies and local storage

We use technically necessary storage on the basis of § 25 Abs. 2 Nr. 2 TDDDG or Art. 6(1)(f) GDPR. Analytics cookies (section 6) are only set with your consent (Art. 6(1)(a) GDPR, § 25 Abs. 1 TDDDG). In detail:

Cart contents (localStorage) – so that your cart is retained when you visit again
Light/dark colour scheme setting (localStorage)
Flag indicating that the discount offer on leaving the cart has already been shown (localStorage)
Partner portal session (cookie “lg-affiliate”, lifetime 30 days, only after logging in as a partner)
Flag indicating that the newsletter notice has already been shown (localStorage), so that it does not reappear on every visit
Cookie consent (localStorage “cookie-consent” / “cookie-analytics” and the consent cookie of Cloudflare Zaraz) – stores your cookie selection
Discount code from partner links (cookie “lg-promo”, lifetime 30 days) – so that a discount received via a partner link can be applied automatically at purchase
Origin of the first visit (cookie “lg-src”, lifetime 30 days) – stores the referring website (domain and path only), the landing page and campaign parameters (utm_*) as well as the time of the first visit, without IP address or other personal data. If you place an order, the value is assigned to the order so that we know through which channels orders come about (Art. 6(1)(f) GDPR); without an order, it is not evaluated
Email address for shipment tracking (sessionStorage, only until the tab is closed) – so that you do not have to enter it again after returning from the payment page
Your entries at checkout – name, address, email address and the selection fields there (sessionStorage, only until the tab is closed) – so that they are not lost if you cancel the payment at Stripe and return to checkout. The data does not leave your browser in the process; it is deleted immediately once the order has been completed
Flag indicating that a completed order has already been reported to web analytics (sessionStorage, only until the tab is closed) – prevents double counting when the confirmation page is reloaded; without analytics consent, the flag has no effect
Your mug design when switching between German and English (sessionStorage, at most 30 minutes and only until the tab is closed) – so the design is not lost when you switch the language in the designer; it is deleted as soon as the next page has loaded
Security cookies from Cloudflare (e.g. “__cf_bm”), insofar as they are technically required to protect the website
Only with consent: Google Analytics cookies (“_ga”, “_ga_*”) for statistical reach measurement (section 6)

16. Overview of recipients and transfers to third countries

Your data is only received by the following recipients, each limited to the stated purpose:

netcup GmbH (Germany) – hosting and database, processor
Cloudflare (USA/Germany) – network and security, processor; Data Privacy Framework and standard contractual clauses
Google Cloud EMEA Limited (Ireland) – sending and receiving email, processor; Data Privacy Framework and standard contractual clauses
Google Ireland Limited (Ireland) – web analytics, only with consent
Stripe Payments Europe, Ltd. (Ireland) – payment, partly as an independent controller; Data Privacy Framework
PayPal (Europe) S.à r.l. et Cie, S.C.A. (Luxembourg) – only for payment with PayPal, independent controller
Klarna Bank AB (publ) (Sweden) – only for payment with Klarna, independent controller
Amazon Payments Europe S.C.A. (Luxembourg) – only for payment with Amazon Pay, independent controller
Revolut Bank UAB (Lithuania) – only for payment with Revolut Pay, independent controller
Sendcloud B.V. (Netherlands) – shipping labels and shipment tracking, processor
United Parcel Service Deutschland S.à r.l. & Co. OHG (Germany) – shipping for UPS shipping methods, independent controller
DHL Paket GmbH (Germany) – shipping with DHL, independent controller
DPD Deutschland GmbH (Germany) – only exceptionally for shipments with postage paid by us, independent controller
Discord Netherlands B.V. (Netherlands/USA) – internal notifications without names; standard contractual clauses
Alibaba (Netherlands) B.V. (Netherlands; processing in Singapore and worldwide, including China) – AI design in the designer, only when used and when this provider is active, processor; standard contractual clauses
OpenAI Ireland Ltd. (Ireland; processing also in the USA) – AI design in the designer, only when used and when this provider is active, processor; standard contractual clauses
Trustpilot A/S (Denmark) – only if you yourself follow the link to leave a review

Data is only transferred to countries outside the EU or the EEA to the recipients named and only on the basis of an adequacy decision (EU-US Data Privacy Framework) or the standard contractual clauses of the EU Commission. There are further recipients only if we are legally obliged to disclose data (e.g. tax authorities, public authorities on lawful order).

17. Storage period

We delete personal data as soon as it is no longer required for the stated purposes and no statutory retention obligations prevent this. In detail:

Server log files: 14 days
Designs not ordered: 30 days; ordered designs: 12 months after the order
Carts saved by email: 30 days
AI design: we do not store the description or the draft; requests are counted per IP address in memory for 24 hours
Partner portal: login links 20 minutes, sessions 30 days; partner data until the end of the partner agreement
Order and invoice data: ten years (retention under tax and commercial law)
Unconfirmed newsletter subscriptions: 30 days; confirmed subscriptions: until withdrawal, followed by a blocking note
Consent to the review request: together with the order; the request itself is sent only once
Email correspondence: until the matter has been dealt with; if related to an order, together with the order
Complaints and safety reports (complaints register under the GPSR): ten years
Google Analytics data: 14 months (only with consent)

18. Your rights

You have the right vis-à-vis us to access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR) and data portability (Art. 20 GDPR). You can withdraw any consent you have given at any time with effect for the future (Art. 7(3) GDPR); this does not affect the lawfulness of the processing carried out until the withdrawal. An informal email to mail@livaglow.de is sufficient to exercise your rights.

Right to object (Art. 21 GDPR)

Insofar as we process your data on the basis of a legitimate interest (Art. 6(1)(f) GDPR), you have the right to object to this processing at any time on grounds relating to your particular situation. We will then no longer process the data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims. You can object to direct marketing at any time without giving reasons.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen), Kavalleriestraße 2–4, 40213 Düsseldorf, https://www.ldi.nrw.de. You can also contact the supervisory authority of your place of residence.

19. Changes to this policy

We adapt this privacy policy when our processing or the legal situation changes. The version published here applies in each case; the date at the top shows when it was last updated. We will be happy to answer questions about data protection at mail@livaglow.de. Our terms and conditions and the withdrawal policy can be found in the footer.