Privacy Policy

1) Introduction and Contact Details of the Controller

1.1 We are pleased that you are visiting our website and thank you for your interest. In the following, we inform you about the handling of your personal data when using our website. Personal data is any data with which you can be personally identified.

1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Michaela Cornehl, Litara Healing, Gonzagagasse 13/3, 1010 Vienna, Austria, Tel.: +4313940051, E-Mail: willkommen@litara.com. The controller for the processing of personal data is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.

2) Data collection when visiting our website

2.1 When using our website for purely informational purposes, i.e. when you do not register or otherwise transmit information to us, we only collect data that your browser transmits to the page server (so-called "server log files"). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:

- Our visited website

- Date and time at the moment of access

- Amount of data sent in bytes

- Source/reference from which you came to the page

- Browser used

- Operating system used

- IP address used (if applicable, in anonymised form)

The processing is carried out in accordance with Art. 6 (1) lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data is not passed on or used in any other way. However, we reserve the right to subsequently check the server log files should any concrete indications point to unlawful use.

2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or enquiries to the controller), this website uses SSL or TLS encryption. You can recognise an encrypted connection by the string "https://" and the lock symbol in your browser line.

3) Hosting & Content Delivery Network

For the hosting of our website and the display of the page contents, we use a provider whose services are provided exclusively on servers within the European Union, either by the provider itself or by selected sub-processors.

All data collected on our website is processed on these servers.

We have concluded a data processing agreement with the provider that ensures the protection of our website visitors' data and prohibits unauthorised disclosure to third parties.

4) Cookies

To make visiting our website attractive and to enable the use of certain functions, we use cookies, i.e. small text files that are stored on your end device. Some of these cookies are automatically deleted again after the browser is closed (so-called "session cookies"), while others remain on your end device for longer and enable the storage of page settings (so-called "persistent cookies"). In the latter case, you can refer to the cookie settings overview of your web browser for the storage period.

If personal data is also processed by individual cookies used by us, the processing is carried out in accordance with Art. 6 (1) lit. b GDPR either for the performance of the contract, in accordance with Art. 6 (1) lit. a GDPR in the case of given consent, or in accordance with Art. 6 (1) lit. f GDPR to safeguard our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the page visit.

You can set your browser so that you are informed about the setting of cookies and decide individually about their acceptance, or exclude the acceptance of cookies for certain cases or in general.

Please note that the functionality of our website may be limited if cookies are not accepted.

5) Contact

5.1 WhatsApp Business

You have the option of contacting us via the WhatsApp messaging service of WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. We use the so-called "Business version" of WhatsApp for this purpose.

If you contact us via WhatsApp regarding a specific transaction (for example, a placed order), we store and use the mobile phone number you use with WhatsApp and – if provided – your first and last name in accordance with Art. 6 (1) lit. b GDPR for processing and answering your enquiry. On the basis of the same legal basis, we may ask you via WhatsApp to provide further data (order number, customer number, address or e-mail address) in order to be able to assign your enquiry to a specific case.

If you use our WhatsApp contact for general enquiries (e.g. about the range of services, availabilities or our online presence), we store and use the mobile phone number you use with WhatsApp and – if provided – your first and last name in accordance with Art. 6 (1) lit. f GDPR on the basis of our legitimate interest in the efficient and timely provision of the requested information.

Your data is only used to answer your enquiry via WhatsApp. It is not passed on to third parties.

Please note that WhatsApp Business has access to the address book of the mobile end device used by us for this purpose and automatically transmits phone numbers stored in the address book to a server of the parent company Meta Platforms Inc. in the USA. For the operation of our WhatsApp Business account, we use a mobile end device whose address book exclusively contains the WhatsApp contact details of users who have also contacted us via WhatsApp.

This ensures that any person whose WhatsApp contact details are stored in our address book has already consented, when first using the app on their device by accepting the WhatsApp terms of use, to the transmission of their WhatsApp phone number from the address books of their chat contacts in accordance with Art. 6 (1) lit. a GDPR. The transmission of data of users who do not use WhatsApp and/or have not contacted us via WhatsApp is thus excluded.

For the purpose and scope of data collection and the further processing and use of the data by WhatsApp, as well as your rights and setting options for protecting your privacy, please refer to the WhatsApp privacy notices: https://www.whatsapp.com/legal/?eea=1#privacy-policy

We have concluded a data processing agreement with the provider that protects our website visitors' data and prohibits its disclosure to third parties.

As part of the processing mentioned above, data may be transmitted to servers of Meta Platforms Inc. in the USA.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European data protection level on the basis of an adequacy decision of the European Commission.

5.2 When contacting us (e.g. via contact form or e-mail), personal data is collected. Which data is collected when using a contact form is shown by the respective contact form. This data is stored and used exclusively for the purpose of answering your enquiry or for establishing contact and the associated technical administration.

The legal basis for processing this data is our legitimate interest in answering your enquiry in accordance with Art. 6 (1) lit. f GDPR. If your contact aims at concluding a contract, the additional legal basis for the processing is Art. 6 (1) lit. b GDPR. Your data will be deleted after final processing of your enquiry. This is the case if it can be deduced from the circumstances that the matter in question has been finally clarified and provided that there are no statutory retention obligations to the contrary.

6) Web Analytics Services

6.1 Google Analytics 4

This website uses Google Analytics 4, a web analytics service of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which enables an analysis of your use of our website.

By default, when visiting the website, Google Analytics 4 sets cookies that are stored as small text snippets on your end device and collect certain information. The scope of this information also includes your IP address, which, however, is shortened by Google by the last digits in order to exclude direct personal reference.

The information is transmitted to Google's servers and processed there. This may also include transmissions to Google LLC based in the USA.

Google uses the collected information on our behalf to evaluate your use of the website, to compile reports on website activities for us, and to provide other services related to website use and internet use. The IP address transmitted by your browser as part of Google Analytics and shortened is not merged with other Google data. The data collected within the scope of using Google Analytics 4 is stored for a period of two months and then deleted.

All processing described above, in particular the setting of cookies on the end device used, is only carried out if you have given us your express consent in accordance with Art. 6 (1) lit. a GDPR.

Without your consent, the use of Google Analytics 4 will not take place during your page visit. You can revoke your given consent at any time with effect for the future. To exercise your right of revocation, please deactivate this service via the "cookie consent tool" provided on the website.

We have concluded a data processing agreement with Google that ensures the protection of our website visitors' data and prohibits unauthorised disclosure to third parties.

Further legal information on Google Analytics 4 can be found at https://business.safety.google/intl/de/privacy/, https://policies.google.com/privacy?hl=de&gl=de and at https://policies.google.com/technologies/partner-sites

Demographic Characteristics

Google Analytics 4 uses the special function "demographic characteristics" and can use it to create statistics that make statements about the age, gender and interests of page visitors. This is done by analysing advertising and information from third-party providers. This makes it possible to identify target groups for marketing activities. However, the collected data cannot be assigned to a specific person and will be deleted after a storage period of two months.

Google Signals

As an extension to Google Analytics 4, Google Signals can be used on this website to create cross-device reports. If you have activated personalised ads and have linked your devices to your Google account, Google may, subject to your consent for the use of Google Analytics in accordance with Art. 6 (1) lit. a GDPR, analyse your usage behaviour across devices and create database models, including for cross-device conversions. We do not receive any personal data from Google, only statistics. If you would like to stop the cross-device analysis, you can deactivate the "Personalised advertising" function in your Google account settings. To do so, follow the instructions on this page: https://support.google.com/My-Ad-Center-Help/answer/12155764?hl=de

For more information about Google Signals, please visit the following link: https://support.google.com/analytics/answer/7532985?hl=de

UserIDs

As an extension to Google Analytics 4, the "UserIDs" function may be used on this website. If you have consented to the use of Google Analytics 4 in accordance with Art. 6 (1) lit. a GDPR, set up an account on this website and log in to this account on different devices, your activities, including conversions, can be analysed across devices.

6.2 Google Tag Manager

This website uses the "Google Tag Manager", a service of the following provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: "Google").

The Google Tag Manager provides a technical basis for bundling various web applications, including tracking and analysis services, and being able to calibrate, control and link them to conditions via a uniform user interface. The Google Tag Manager itself does not store any information on user end devices and does not read any out. Nor does the service carry out any independent data analyses. However, when the page is called up, the Google Tag Manager transmits your IP address to Google and may store it there. Transmission to servers of Google LLC in the USA is also possible.

This processing is only carried out if you have given us your express consent for it in accordance with Art. 6 (1) lit. a GDPR. Without giving this consent, the use of Google Tag Manager will not take place during your page visit. You can revoke your given consent at any time with effect for the future. To exercise your revocation, please deactivate this service in the "cookie consent tool" provided on the website.

We have concluded a data processing agreement with the provider that ensures the protection of our website visitors' data and prohibits unauthorised disclosure to third parties.

Further legal information on Google Tag Manager can be found at https://business.safety.google/intl/de/privacy/ and https://policies.google.com/privacy?hl=de&gl=de

7) Retargeting / Remarketing and Conversion Tracking

7.1 Google Ads Remarketing

This website uses retargeting technology of the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

For this purpose, Google sets a cookie in the browser of your end device, which automatically enables interest-based advertising by means of a pseudonymous cookie ID and on the basis of the pages you have visited. Any further data processing only takes place if you have agreed to Google linking your internet and app browser history with your Google account and using information from your Google account to personalise ads that you view on the web. If you are logged into Google during your visit to our website in this case, Google uses your data together with Google Analytics data to create and define target group lists for cross-device remarketing. To this end, your personal data is temporarily linked by Google with Google Analytics data in order to form target groups. As part of the use of Google Ads Remarketing, personal data may also be transmitted to the servers of Google LLC in the USA.

All processing described above, in particular the setting of cookies for reading information on the end device used, is only carried out if you have given us your express consent in accordance with Art. 6 (1) lit. a GDPR. Without this consent being given, retargeting technology will not be used during your page visit.

You can revoke your given consent at any time with effect for the future. To exercise your revocation, please deactivate this service in the "cookie consent tool" provided on the website.

For details on the processing initiated by Google and on Google's handling of website data, please see: https://policies.google.com/technologies/partner-sites

For further information on Google's privacy policy, please see: https://business.safety.google/intl/de/privacy/ and https://www.google.de/policies/privacy/

7.2 Google Ads Conversion Tracking

This website uses the online advertising programme "Google Ads" and, as part of Google Ads, the conversion tracking of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). We use the offer of Google Ads to draw attention to our attractive offers on external websites with the help of advertising materials (so-called Google AdWords). In relation to the data of the advertising campaigns, we can determine how successful the individual advertising measures are. We thereby pursue the goal of showing you advertising that is of interest to you, of making our website more interesting for you, and of achieving a fair calculation of the advertising costs incurred.

The cookie for conversion tracking is set when a user clicks on an ad placed by Google. Cookies are small text files that are stored on your end device. These cookies usually expire after 30 days and are not used for personal identification. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognise that the user has clicked on the ad and was forwarded to this page. Each Google Ads customer receives a different cookie. Cookies can therefore not be tracked across the websites of Google Ads customers. The information obtained with the help of the conversion cookie is used to create conversion statistics for Google Ads customers who have opted for conversion tracking. The customers learn the total number of users who clicked on their ad and were forwarded to a page tagged with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users. As part of the use of Google Ads, personal data may also be transmitted to the servers of Google LLC in the USA.

For details on the processing initiated by Google Ads Conversion Tracking and on Google's handling of website data, please see: https://policies.google.com/technologies/partner-sites

All processing described above, in particular the setting of cookies for reading information on the end device used, is only carried out if you have given us your express consent in accordance with Art. 6 (1) lit. a GDPR. You can revoke your given consent at any time with effect for the future by deactivating this service in the "cookie consent tool" provided on the website.

You can also permanently object to the setting of cookies by Google Ads Conversion Tracking by downloading and installing the Google browser plug-in available at the following link:

https://support.google.com/My-Ad-Center-Help/answer/12155656?hl=de

Please note that certain functions of this website may not be usable or only to a limited extent if you have deactivated the use of cookies.

Google's privacy policy can be viewed here: https://business.safety.google/intl/de/privacy/ and https://www.google.de/policies/privacy/

8) Site Functionalities

8.1 YouTube

This website uses plugins to display and play videos of the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

Data may also be transmitted to: Google LLC, USA

If you call up a page of our website that contains such a plugin, your browser establishes a direct connection to the provider's servers no later than the time of video playback in order to load the content. In the process, certain information, including your IP address, is transmitted to the provider.

If the playback of embedded videos is started via the plugin, the provider also uses cookies to collect information about user behaviour, create playback statistics and prevent abusive behaviour.

If you are logged into a user account with the provider during your page visit, your data will be assigned directly to your account when you click on a video. If you do not want this assignment to your account, you must log out before activating the playback button.

All of the above processing, in particular the setting of cookies for reading information on the end device used, is only carried out if you have given us your express consent in accordance with Art. 6 (1) lit. a GDPR. You can revoke your given consent at any time with effect for the future by deactivating this service via the "cookie consent tool" provided on the website.

8.2 Google Reviews PRO

On our website, graphic elements of the following provider are integrated to display external customer reviews: MARKET PUSH APPS S.R.L., Str. Costesti Nr.66 E, Costesti 337327, Romania

If you call up a page of our website that contains such graphic elements, your browser establishes a direct connection to the provider's servers in order to load the elements properly. In the process, certain browser information, including your IP address, is transmitted to the provider.

If personal data is also processed in this connection, this is done in accordance with Art. 6 (1) lit. f GDPR on the basis of our legitimate interest in the optimal marketing of our offer and the appealing design of our online presence.

8.3 Google Maps

This website uses an online map service from the following provider: Google Maps (API) by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").

Google Maps is a web service for displaying interactive (geographic) maps to visualise geographic information. The use of this service shows you our location and makes it easier to find your way to us.

Already when you call up the subpages on which the Google Maps map is integrated, information about your use of our website (such as your IP address) is transmitted to Google's servers and stored there; this may also include transmission to the servers of Google LLC in the USA. This happens regardless of whether Google provides a user account through which you are logged in or whether a user account exists. If you are logged into Google, your data will be assigned directly to your account. If you do not want this assignment to your Google profile, you must log out before activating the button. Google stores your data (even for users who are not logged in) as user profiles and evaluates them.

The collection, storage and evaluation are carried out in accordance with Art. 6 (1) lit. f GDPR on the basis of Google's legitimate interest in displaying personalised advertising, market research and/or the needs-based design of Google websites. You have a right to object to the creation of these user profiles, whereby you must contact Google to exercise this right. If you do not agree with the future transmission of your data to Google as part of the use of Google Maps, it is also possible to deactivate the Google Maps web service completely by switching off the JavaScript application in your browser. Google Maps and thus also the map display on this website cannot then be used.

Where legally required, we have obtained your consent for the processing of your data described above in accordance with Art. 6 (1) lit. a GDPR. You can revoke your given consent at any time with effect for the future. To exercise your revocation, please follow the option for objection described above.

For further information on Google's privacy policy, please see: https://business.safety.google/intl/de/privacy/

8.4 Weglot

This website uses the translation service of the following provider via API integration: Weglot SAS, 7 cité Paradis, 75010 Paris, France

In order for the translation of your chosen national language to be displayed automatically, the browser you use establishes a connection to the provider's servers. The provider uses so-called "cookies", which are text files stored on your computer that enable an analysis of your use of the website. The information generated by the cookie about your use of this website (including the shortened IP address) is generally transmitted to a server of the provider and stored there.

All processing described above, in particular the setting of cookies for reading information on the end device used, is only carried out if you have given us your express consent for it in accordance with Art. 6 (1) lit. a GDPR. You can revoke your given consent at any time with effect for the future by deactivating this service in the "cookie consent tool" provided on the website.

We have concluded a data processing agreement with the provider that ensures the protection of our website visitors' data and prohibits unauthorised disclosure to third parties.

8.5 Google Customer Reviews (formerly Google Certified Shop Programme)

We work with Google as part of the "Google Customer Reviews" programme. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). This programme gives us the opportunity to obtain customer reviews from users of our website. After making a purchase on our website, you will be asked whether you would like to participate in an e-mail survey by Google.

If you give your consent in accordance with Art. 6 (1) lit. a GDPR, we will transmit your e-mail address to Google. You will receive an e-mail from Google Customer Reviews asking you to rate your purchase experience on our website. The rating you submit will then be aggregated with our other ratings and displayed in our Google Customer Reviews logo as well as in our Merchant Center dashboard. In addition, your rating will be used for Google Seller Ratings. As part of the use of Google Customer Reviews, personal data may also be transmitted to the servers of Google LLC in the USA.

You can revoke your consent at any time by sending a message to the controller responsible for data processing or to Google.

For further information on Google's data protection provisions, please see: https://business.safety.google/intl/de/privacy/

9) Tools and Other

Cookie Consent Tool

This website uses a so-called "cookie consent tool" to obtain effective user consent for cookies and cookie-based applications requiring consent. The "cookie consent tool" is shown to users when the page is called up in the form of an interactive user interface, on which consent for certain cookies and/or cookie-based applications can be given by ticking boxes. By using the tool, all cookies/services requiring consent are only loaded if the respective user gives the corresponding consent by ticking the box. This ensures that such cookies are only set on the respective end device of the user in the event of consent being given.

The tool sets technically necessary cookies to store your cookie preferences. As a rule, no personal user data is processed in this connection.

If, in individual cases, personal data (such as the IP address) is processed for the purpose of storing, allocating or logging cookie settings, this is done in accordance with Art. 6 (1) lit. f GDPR on the basis of our legitimate interest in legally compliant, user-specific and user-friendly consent management for cookies and thus in a legally compliant design of our online presence.

A further legal basis for the processing is Art. 6 (1) lit. c GDPR. As a controller, we are subject to the legal obligation to make the use of technically unnecessary cookies dependent on the respective user consent.

Where necessary, we have concluded a data processing agreement with the provider that ensures the protection of our website visitors' data and prohibits unauthorised disclosure to third parties.

Further information about the operator and the setting options of the cookie consent tool can be found directly in the corresponding user interface on our website.

10) Rights of the Data Subject

10.1 The applicable data protection law grants you the following data subject rights (rights to information and intervention) vis-à-vis the controller with regard to the processing of your personal data, whereby reference is made to the legal basis cited for the respective conditions of exercise:

- Right of access pursuant to Art. 15 GDPR;

- Right to rectification pursuant to Art. 16 GDPR;

- Right to erasure pursuant to Art. 17 GDPR;

- Right to restriction of processing pursuant to Art. 18 GDPR;

- Right to information pursuant to Art. 19 GDPR;

- Right to data portability pursuant to Art. 20 GDPR;

- Right to revoke consent given pursuant to Art. 7 (3) GDPR;

- Right to lodge a complaint pursuant to Art. 77 GDPR.

10.2 RIGHT TO OBJECT

IF, AS PART OF A BALANCING OF INTERESTS, WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST, YOU HAVE THE RIGHT AT ANY TIME, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, TO OBJECT TO THIS PROCESSING WITH EFFECT FOR THE FUTURE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE THE PROCESSING OF THE DATA CONCERNED. HOWEVER, FURTHER PROCESSING REMAINS RESERVED IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FUNDAMENTAL FREEDOMS, OR IF THE PROCESSING SERVES THE ASSERTION, EXERCISE OR DEFENCE OF LEGAL CLAIMS.

IF YOUR PERSONAL DATA IS PROCESSED BY US FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH ADVERTISING. YOU CAN EXERCISE THE OBJECTION AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE THE PROCESSING OF THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

11) Duration of Storage of Personal Data

The duration of the storage of personal data is measured on the basis of the respective legal basis, the purpose of processing and – if applicable – additionally on the basis of the respective statutory retention period (e.g. retention periods under commercial and tax law).

When personal data is processed on the basis of express consent in accordance with Art. 6 (1) lit. a GDPR, the data concerned is stored until you revoke your consent.

If statutory retention periods exist for data processed in the context of legal or quasi-legal obligations on the basis of Art. 6 (1) lit. b GDPR, this data is routinely deleted after expiry of the retention periods, provided that it is no longer required for the performance of the contract or for the initiation of the contract and/or there is no longer any legitimate interest on our part in continuing to store it.

When personal data is processed on the basis of Art. 6 (1) lit. f GDPR, this data is stored until you exercise your right to object pursuant to Art. 21 (1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or unless the processing serves the assertion, exercise or defence of legal claims.

When personal data is processed for the purpose of direct marketing on the basis of Art. 6 (1) lit. f GDPR, this data is stored until you exercise your right to object pursuant to Art. 21 (2) GDPR.

Unless otherwise stated in the other information of this declaration on specific processing situations, stored personal data will otherwise be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.

Copyright notice: This privacy policy was created by the specialist lawyers of the IT-Recht Kanzlei and is protected by copyright (https://www.it-recht-kanzlei.de)

As of: 12 March 2026, 08:44:41