Privacy policy for Blood Button and its online shop

Livy Health GmbH, Kolonnenstraße 8, 10827 Berlin, Germany, email orders@bloodbutton.com.

Our hosting provider Vercel Inc. processes your IP address, the page requested, the time and your browser details in server logs, so that the website can be delivered and protected against attacks.

The legal basis is our legitimate interest in a secure website under Art. 6(1)(f) GDPR, and Vercel processes the data on our behalf under a data processing agreement.

Vercel can process data in the United States, which is covered by the EU-US Data Privacy Framework and by standard contractual clauses.

For an order we process your name, company name, VAT ID, billing and delivery address, email address, phone number and order details, because we need them to perform the contract under Art. 6(1)(b) GDPR.

Stripe Payments Europe, Ltd. in Dublin processes the payment and the checkout data, partly as an independent controller for payment and fraud prevention purposes.

We pass your name, delivery address and, where the carrier needs it for delivery notifications, your email address or phone number to DHL.

We keep invoices and order records for the periods required by German commercial and tax law, which are up to ten years.

If you email us, we process your message and contact details to answer it, under Art. 6(1)(b) or (f) GDPR, and we delete them once they are no longer needed and no retention period applies.

You have the right to access, rectification, erasure, restriction of processing, data portability and objection under Articles 15 to 21 GDPR.

You can also complain to a supervisory authority, for example the Berlin Commissioner for Data Protection and Freedom of Information, Alt-Moabit 59-61, 10555 Berlin.