1. Purposes of processing, legal basis, and source

   1. Website deployment

      1. Every time you visit our website, our system automatically stores the following information about your visit in server logs:

1. The type and version of the web browser you are using,

2. The type and operating system of the device you are using,

3. Pages viewed and files requested,

4. The website you came from (referrer),

5. Your IP address,

6. Date and time of access.

2. The processing of server log data is necessary for technical reasons to establish and maintain the connection while using the website. The legal basis for the processing is our legitimate interest in providing our website (Art. 6(1)(f) GDPR). The processing is strictly necessary for the use of our website. Server logs are automatically deleted after seven (7) days.

2. Contact Form

   1. If you contact us via the form on our website at https://www.galaxialife.de/contact , we will store the required information requested in the contact form—namely your name, email address, and subject—as well as the content of your message as provided in the message field. We process this data to handle your inquiry and any follow-up questions, as well as to prevent misuse of the contact form.

   2. We process this data based on our legitimate interests (Art. 6(1)(f) of the GDPR) in handling your inquiry and ensuring the security of our IT systems. The personal data you provide will be stored for as long as necessary to respond to your inquiry and will be deleted no later than one month thereafter. You are not required to provide this personal data; however, without it, you will not be able to contact us via the contact form for inquiries.

2. Social media plugins

   1. Social Media Plugins with Sharrif

      1. On our website, we use plugins from LinkedIn and Instagram, which are only loaded if you have previously enabled the feature by giving your consent. Through these plugins, we offer you the opportunity to interact with social networks. To ensure data protection on our website, we use all plugins exclusively in conjunction with the so-called “Shariff” solution. This application prevents the plugins integrated into our website from transmitting personal data (e.g., your IP address) to the respective provider the first time you visit the website. Only when you activate the respective plugin by clicking the corresponding button is a direct connection established to the provider’s server (consent). As soon as you activate the plugin, the respective provider receives the information that you have visited our website with your IP address. 

      2. Activating the respective plugin constitutes consent within the meaning of Article 6(1)(a) of the GDPR. You may revoke this consent at any time with future effect. 

   2. Our social media presence 

      1. We have a presence on various social media platforms. We maintain our presence on the following platforms:

1. LinkedIn, LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland, URL of our company website, Information on data protection;

2. Instagram, Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, URL of our company website, Information on data protection.

2. We rely on the technical platforms and services provided by these providers for these information services. Please note that you use our social media profiles and their features at your own risk. This applies in particular to the use of interactive features (e.g., commenting, sharing, rating). When you visit our social media profiles, the providers of the social media platforms collect, among other things, your IP address and other information stored on your device in the form of cookies. This information is used to provide us, as the account operators, with statistical data regarding interaction with us.

3. The data processed about you in this context is processed by the platforms and may be transferred to countries outside the European Union, in particular the United States. The information collected is stored on the providers’ servers, including those outside Europe. In such cases, the provider has submitted to the EU-U.S. Privacy Framework. If the provider is not certified, we have agreed to so-called standard data protection clauses, the purpose of which is to ensure an adequate level of data protection in the third country. We are not aware of how the social media platforms use the data from your visit to our account and interaction with our posts for their own purposes, how long this data is stored, or whether data is shared with third parties. Data processing may differ depending on whether you are registered and logged in to the social network or are visiting the site as an unregistered and/or unlogged-in user. When you access a post or the account, the IP address assigned to your device is transmitted to the social media platform provider. If you are currently logged in as a user, a cookie on your device can track your activity on the network. Through buttons embedded in websites, the platforms can track your visits to these websites and associate them with your respective profile. Based on this data, content or advertising can be tailored to you. If you wish to avoid this, you should log out or disable the “stay logged in” feature, delete the cookies stored on your device, and restart your browser.

4. As the provider of this information service, we also process only those data related to your use of our service that you provide to us and that require interaction. For example, if you ask a question that we can only answer via email, we will store your information in accordance with the general principles of our data processing, which are described in this Privacy Policy. The legal basis for processing your data on the social media platform is Article 6(1)(f) of the GDPR.

5. To exercise your data subject rights, you may contact either us or the social media platform provider. If one party is not responsible for responding or needs to obtain the information from the other party, we or the provider will forward your request to the relevant partner. For questions regarding profiling or the processing of your data when using the website, please contact the social media platform operator directly. If you have questions regarding the processing of your interactions with us on our site, please contact us using the contact information provided above.

6. The providers describe what information the social media platform receives and how it is used in their privacy policies (see the link in the table above). There you will also find information on how to contact them and how to adjust your ad settings. For more information on social networks and how to protect your data, please visit www.youngdata.de.

3. Web Analytics with Google Analytics

   1. When you visit our website, the Google Analytics service is loaded for the purpose of analyzing website usage statistics. This service is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). By using the “anonymizeIp()” extension, we ensure that Google Analytics only transmits a truncated version of your IP address to Google.

   2. When you visit the website and load the service, Google is notified that our website has been accessed via your IP address. Google Analytics uses cookies that are stored on your device, unless you have disabled cookies in your browser, and that enable an analysis of your use of our website. The information generated by the cookie regarding your use of the website is transmitted to Google’s servers in the United States and stored there.

   3. We base our use of Google Analytics on our legitimate interests (Art. 6(1)(f) of the GDPR), which consist of designing and optimizing our website to meet user needs. In addition, in accordance with the requirements of the German data protection authorities regarding the use of Google Analytics, we have entered into a data processing agreement with Google. Data is transferred to the United States in accordance with the EU-U.S. Data Privacy Framework.

   4. We collect your IP address to enable its truncation and subsequent transmission to Google. You are not required to provide this personal data; you may use our website without providing it. You can prevent the collection of this personal data by adjusting your browser settings or by installing the browser add-on available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

   5. For more information about Google Analytics, visit http://www.google.com/intl/de_ALL/analytics. Google’s privacy policy can be found at https://www.google.com/policies/privacy/.

4. Additional features of the website

5. Cookies

   1. We use cookies, log files, pixel tags, web beacons, scripts, eTags, and similar technologies to collect and store information that we automatically gather about your device and your use of the website. For more information about cookies and how you can control them, please see the information below.

6. What is a cookie?

1. Cookies are text files that contain small amounts of information and are downloaded to your browser or device when you visit a specific website. Cookies are then sent back to the original website or to another website that recognizes the cookie each time you visit it again. Cookies are widely used to make websites functional or more efficient and to provide us with information.

2. Cookies serve many different purposes; for example, they allow you to navigate efficiently between pages, save your login and preferences, and generally improve the user experience. Cookies can tell us, for example, whether you have visited or used the website before or whether you are a new visitor or user. Cookies can help us ensure the security of our data and website and detect fraud and hacking attempts on our products and website. Cookies can, for example, store ticket information that the server can use to verify that you were the one who logged in. The encrypted information in the ticket can also be used to prevent various types of attacks, cross-site information theft, and access using a disguised identity. 

3. There are two main categories of cookies:

1. First-party cookies that are sent directly from us to your device.

2. Third-party cookies set by a third party on our behalf.

Cookies may remain on your browser or device for varying lengths of time. Some cookies are “session cookies,” meaning they exist only as long as your browser or application is open. These are automatically deleted as soon as you close your browser or application. Other cookies are “persistent cookies,” meaning they remain on your device after your browser or application has been closed. They can be used by the website to recognize your device when you visit and use the website again.

1. How do we use cookies?

We use cookies to:

1. Verify your login credentials to ensure the security of your account;

2. to understand the total number of website visitors and the types of devices they use; 

3. Providing services for you.

4. What types of cookies do we use?

The types of cookies used by us and our partners in connection with the website can be divided into the following categories: “essential cookies,” “functional cookies,” and “analytics and measurement cookies.” The table below provides further information about each category, as well as the purposes of the cookies set by us and third parties.

Analytics and tracking cookies

5. How to manage or delete cookies

1. You have the right to choose whether or not to accept cookies, and we have explained below how you can exercise that right.

2. When you use our website for the first time, you will see a notice informing you about how we use cookies, why we use them, and how you can change which cookies you accept. You can opt out of non-essential cookies here and opt out of specific non-essential cookies, such as “analytics and measurement cookies,” here. Please note that we cannot guarantee that you will be able to use our service to its fullest extent if you do not accept our cookies.

3. Recipients of the data

   1. External service providers

1. We engage external service providers, who act as our data processors, to perform certain services on our behalf, such as email marketing, hosting, website, IT, or other service providers. In the course of providing these services, these external service providers may have access to or process your personal data.

2. External service providers we engage are required, under the data processing agreements we have entered into with them, to implement appropriate technical and organizational security measures to protect the personal data being processed and to process such data only in accordance with our instructions.

2. Additional recipients

1. We may also disclose your personal data to law enforcement and other government agencies, legal counsel, and other external advisors in accordance with applicable data protection laws.

2. The legal basis for this processing is compliance with legal obligations (Art. 6(1)(c) of the GDPR) to which we are subject, or our legitimate interests (Art. 6(1)(f) of the GDPR), such as the exercise or defense of legal claims.

4. Data transfers to third countries

   1. We may transfer your personal data to recipients in third countries outside the European Union (EU) or the European Economic Area (EEA) that do not ensure an adequate level of data protection, such as the United States. Some recipients in the U.S. may be certified under the EU-U.S. Data Privacy Framework (DPF) and thus ensure an adequate level of data protection under EU data protection law. For example, data transfers to Google are made on the basis of the EU-U.S. Data Privacy Framework.

   2. To the extent that we transfer your personal data to other third countries that do not provide an adequate level of data protection under EU data protection law, we rely on appropriate safeguards for such transfers, such as the EU Standard Contractual Clauses adopted by the European Commission. You may request a copy of the relevant safeguards by contacting us using the contact details provided in Section 7.

5. Retention period for your data, criteria for the retention period

   1. We will retain your personal data for as long as is necessary for the purposes of the data processing described in section 1 above. Once we no longer process your personal data for these purposes, we will delete it from our systems and records or fully anonymize it so that you can no longer be identified.

   2. We will not delete or fully anonymize your data as long as we are required to retain it to comply with legal or regulatory obligations. This applies in particular to statutory retention requirements under the German Commercial Code (HGB) or the German Fiscal Code (AO), which stipulate retention periods of 6 to 10 years, or if we need the data to preserve evidence in connection with legal disputes within the statute of limitations, which is generally three years but may extend up to 30 years in individual cases.

6. Your rights as a data subject and how to exercise them

   1. If you have given your consent to the processing of your personal data, you may withdraw that consent at any time with future effect. Such a withdrawal does not affect the lawfulness of the processing that took place prior to the withdrawal of consent. If you withdraw your consent, we will no longer process your personal data unless another (legal) basis for processing applies. However, if consent is withdrawn and no other legal basis for processing exists, we must erase the personal data without delay (Art. 17(2)(b) GDPR).

   2. Under applicable data protection law, as a data subject, you have the right of access (Art. 15 GDPR), the right to rectification (Art. 16 GDPR), the right to erasure (Art. 17 GDPR), the right to restriction of processing (Art. 18 GDPR), and the right to data portability (Art. 20 GDPR). The right of access and the right to erasure may be restricted under certain circumstances (see Sections 34, 35 BDSG). In addition, you have the right to lodge a complaint with a data protection authority (Art. 77 GDPR). Further information on these rights can be found below in the appendix titled “Your Rights.”

   3. Under certain circumstances, you also have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data that is carried out on the basis of our legitimate interests (Art. 6(1)(f) GDPR); this also applies to profiling based on this legal basis (Art. 21(1) GDPR). Furthermore, if your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for these purposes, including profiling, insofar as it is related to such direct marketing (Art. 21(2) GDPR). If you object, we will no longer process your personal data for these purposes.

   4. To exercise your rights, please contact us using the contact information provided in Section 7.

7. Contact

If you have any questions about this Privacy Policy or the processing of your personal data, please contact us at:

Galaxia Life, LLC

Business address: c/o Vogelsanger Straße 348, 50827 Cologne

Phone: [●]

Email: info@galaxialife.de

Website: www.galaxialife.de

The contact information for our Data Protection Officer is as follows: [∙]

8. Changes to this Privacy Policy

   1. This Privacy Policy may need to be updated from time to time—for example, due to new features or technologies on our website. In such cases, we will amend or supplement this Privacy Policy.

   2. We will post the changes at, for example, www.galaxialife.de/privacy-policyand/or notify you accordingly.

APPENDIX – YOUR RIGHTS

1. Right to access information

   1. You may have the right to request confirmation from us as to whether we process personal data about you and, if so, the right to access that personal data.

   2. The right of access includes, among other things, the purposes of processing, the categories of personal data we process, and the recipients or categories of recipients to whom we disclose the personal data.

   3. You may also have the right to receive a copy of the personal data being processed. However, this right is not absolute, as the rights of others may limit your right to receive a copy. 

   4. The right of access is restricted in accordance with § 34 of the Federal Data Protection Act (BDSG), e.g., if the data

1. are stored solely because they may not be deleted due to statutory or statutory retention requirements, or

2. are used exclusively for data backup or data protection monitoring purposes, and providing the information would require a disproportionate effort, and processing for other purposes is prevented by appropriate technical and organizational measures.

2. Right to rectification

   1. You may have the right to request the correction of inaccurate personal data concerning you.

   2. Taking into account the purposes of the processing, you have the right to request that incomplete personal data be completed, including by means of a supplementary statement. 

3. Right to erasure (“right to be forgotten”)

   1. Under certain circumstances, you have the right to request that we delete your personal data, and we are required to do so.

   2. Pursuant to Section 35 of the Federal Data Protection Act (BDSG), the right to erasure does not apply, for example, if, in the case of non-automated data processing, erasure is not possible or would require a disproportionate amount of effort due to the specific nature of the storage, and the data subject’s interest in erasure is considered to be minimal. In this case, the erasure is replaced by a restriction on processing. The aforementioned exception does not apply if the personal data has been processed unlawfully.

4. Right to restriction of processing

   1. Under certain circumstances, you have the right to request that we restrict the processing of your personal data.

   2. In this case, the relevant data is flagged and processed by us only for specific purposes. 

5. Right to data portability

Under certain conditions, you have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used, and machine-readable format, and you have the right to transmit this data to another controller without hindrance from us.

As of January 2026

1. Terms of Use and Disclaimer

Terms of Use

As of: January 2026

This website at www.galaxialife.de(“Website”) is operated by Galaxia Life GmbH, a company incorporated under German law with its registered office in Cologne, entered in the Commercial Register of the Cologne Local Court under HRB 124404, business address: c/o Vogelsanger Straße 348, 50827 Cologne, telephone: [●], email: info@galaxialife.de ("Galaxia Life," "we," "us," "our").

1. General Information 

Please read these Terms of Use carefully. If you do not agree to these terms, please do not access this website or any of its pages.

2. The website 

   1. We assume no responsibility and make no warranty that our website, its content, or the features contained on the website will be available at all times or will function without interruption or error, or that any defects in this website will be corrected. 

   2. We may suspend, discontinue, or restrict access to our website, in whole or in part, for business or operational reasons. We will make every effort to notify you in a timely manner of any suspension or discontinuation.

   3. We may transfer our rights and obligations under these terms and conditions to another organization. In such a case, we will always notify you in writing (electronic form is sufficient) and ensure that the transfer does not affect your rights under the contract.

3. Use of the Website 

   1. We are the owners or licensees of all intellectual property rights in our website and the materials published on it. These works are protected by copyright laws and treaties worldwide. All such rights are reserved.

   2. You may not sell, distribute, publish, broadcast, circulate, or otherwise commercially exploit any information related to the website without our express written consent. Downloading or reproducing the website does not grant you any rights to the software or other materials. Without our prior consent, you may not reproduce, transmit (by electronic means or otherwise), modify, display, redistribute, license, link to, or otherwise use the website, in whole or in part, for any public or commercial purpose.

   3. Nothing on this website shall be construed as granting any license or right to use any image, trademark, service mark, or logo, all of which are the property of Galaxia Life. Galaxia Life reserves all rights with respect to its proprietary information or materials on this website and will enforce these rights to the fullest extent permitted by applicable copyright and trademark laws.

   4. You will not take any actions, omissions, or other steps that result in or could result in the following: 

      1. damage, delay, interrupt, or impair the use or functionality of the website;

      2. result in illegal, offensive, defamatory, or libelous material being uploaded to, posted on, or associated with the website;

      3. infringe the rights of third parties, including copyrights, trademark rights, data protection rights, confidentiality rights, or other third-party rights;

      4. perform, facilitate, authorize, or permit text or data mining or web scraping in relation to our website or the services provided through our website; or

      5. Cause inconvenience to employees, agents, software and other suppliers, or other third parties (including, but not limited to, the creation or distribution of software viruses, chain letters, unsolicited messages, and “spam”).

   5. The content on our website is provided for general informational purposes only. It should not be construed as advice on which you should rely. Before taking or refraining from any action based on the content on our website, you must seek professional or expert advice.

   6. This website is not intended for individuals in any jurisdiction where (due to such individual’s nationality or place of residence, the content of the website, or for any other reason) the publication or availability of this website is prohibited. Individuals subject to such a prohibition may not access the website.

   7. Although we make reasonable efforts to keep the information on our website up to date, we make no express or implied representations, warranties, or guarantees that the content on our website is accurate, complete, or current.

   8. If you have any questions about the content on our website, please contact info@galaxialife.de. For complaints, please refer to our complaint policy.

4. Third-party content 

   1. If our website contains links to other websites and third-party resources, these links are provided for your information only. Such links should not be construed as an endorsement by us of these linked websites or the information you may find there.

   2. We have no control over the content of these websites or resources.

5. Liability, Responsibility

Liability applies only in cases of willful misconduct, gross negligence, or a breach of material contractual obligations (cardinal obligations).

6. Privacy Policy

For detailed information on data protection, please see our Privacy Policy.

7. Security

   1. We assume no responsibility for, and make no warranty that, our website is secure or free from errors or viruses.

   2. You are responsible for configuring your information technology, computer programs, and platform for accessing our website. You should use your own antivirus software.

   3. You must not misuse our website by knowingly introducing viruses, Trojan horses, worms, logic bombs, or any other material that is malicious or technologically harmful. You must not attempt to gain unauthorized access to our website, the server on which our website is stored, or any servers, computers, or databases connected to our website. You must not attack our website via a denial-of-service attack or a distributed denial-of-service attack. If you engage in any of these actions, it may constitute a criminal offense, which we will report to the relevant law enforcement authorities, and your right to use our website will cease immediately.