Data protection
Last updated: June 2026
Thank you for your interest in our online shop. The protection of your personal data is very important to us. Below, we inform you in detail about the handling of your data in accordance with the General Data Protection Regulation (GDPR).
1. Controller
The controller for data processing on this website in the sense of the GDPR is:
Secrets of Life by Servola Systems GmbH
Managing Director: Ruth Soliman
Adolf-Diesterweg-Straße 31, 67071 Ludwigshafen am Rhein, Germany
Phone: +49 176-56030114
E-mail: hallo@secretsoflife.eu
2. General information on data processing
We process personal data only to the extent necessary to provide a functional website as well as our content and services. The legal bases are in particular Art. 6 para. 1 lit. a GDPR (consent), lit. b (performance of contract), lit. c (legal obligation) and lit. f (legitimate interest).
3. Hosting (Shopify)
Our online shop is operated on the platform of the provider Shopify International Limited (Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland). Shopify processes order data, customer data, and payment and contact data on our behalf. Data may be transferred to third countries (e.g., Canada, USA), which is secured by appropriate safeguards such as EU standard contractual clauses. The legal basis is Art. 6 para. 1 lit. b and lit. f GDPR.
4. Server Log Files
When you access our website, information is automatically stored in so-called server log files that your browser transmits. This includes in particular browser type and version, operating system used, referrer URL, hostname of the accessing computer, and time of the server request. This data is used to ensure trouble-free operation and security. The legal basis is Art. 6 para. 1 lit. f GDPR.
5. Cookies
Our website uses cookies. Technically necessary cookies are set on the basis of Art. 6 para. 1 lit. f GDPR. We only use cookies that are not technically necessary (e.g., for statistics or marketing) with your consent in accordance with Art. 6 para. 1 lit. a GDPR and § 25 TTDSG. You can revoke your consent at any time with effect for the future.
6. Order Processing
When you place an order, we collect the necessary data (in particular name, address, email address, payment data). Processing is carried out for the performance of the purchase contract in accordance with Art. 6 para. 1 lit. b GDPR. To fulfill commercial and tax law retention obligations, we process certain data on the basis of Art. 6 para. 1 lit. c GDPR.
7. Payment Service Providers
For payment processing, we work with payment service providers, in particular Shopify Payments and Klarna Bank AB. The payment data entered during the payment process (e.g., account number, credit card number) is processed by the respective payment service provider. The data protection provisions of the respective provider also apply. The legal basis is Art. 6 para. 1 lit. b GDPR.
8. Shipping
To deliver the goods, we pass on your address data to the contracted shipping company, insofar as this is necessary for delivery. The legal basis is Art. 6 para. 1 lit. b GDPR.
9. Newsletter
If you subscribe to our newsletter, we use the necessary data on the basis of your consent in accordance with Art. 6 para. 1 lit. a GDPR. The registration is done via a double opt-in procedure. You can revoke your consent at any time, for example via the unsubscribe link in every newsletter email.
10. Contacting Us
If you contact us by email or via a contact form, your information will be stored for processing the request and for possible follow-up questions. The legal basis is Art. 6 para. 1 lit. b or lit. f GDPR.
11. Your Rights
You have the right to information (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR), and a right to object (Art. 21 GDPR). You can revoke any given consent at any time with future effect.
You also have the right to lodge a complaint with a data protection supervisory authority. For example, the State Commissioner for Data Protection and Freedom of Information Rhineland-Palatinate is responsible.
12. Storage Duration
We store personal data only as long as this is necessary for the respective purposes or as required by legal retention periods (in particular commercial and tax law periods). After the purpose ceases to apply, the data will be deleted or blocked.
13. Topicality
This privacy policy is currently valid. Due to the further development of our website or due to changed legal requirements, it may become necessary to adapt this privacy policy.