Privacy Policy

(Status: September 2025)

1. Controller and General Information

The following information is provided in fulfillment of the statutory obligations under Art. 13 et seq. of the General Data Protection Regulation (GDPR), §§ 32 et seq. of the German Federal Data Protection Act (BDSG), and the German Telecommunications Telemedia Data Protection Act (TTDSG).

Controller within the meaning of the GDPR is:
Ryll Media – Lucid Life Labs
Lucas Ryll
Hölderlinstr. 8/1
71717 Beilstein
Germany

Phone: +49 1590 1241504
E-mail: lucas@lucid-life-labs.com

The controller is the natural person who alone or jointly with others determines the purposes and means of the processing of personal data (Art. 4 No. 7 GDPR).

2. Definitions

This privacy policy is based on the definitions set out in Art. 4 GDPR. “Personal data” means any information relating to an identified or identifiable natural person. “Processing” means any operation or set of operations performed on personal data, whether or not by automated means (e.g., collection, recording, organization, storage, retrieval, consultation, use, disclosure, erasure).

3. Purposes and Legal Bases of Data Processing

The processing of personal data is always carried out in compliance with statutory provisions. In detail:

Performance of contractual obligations (Art. 6 (1) lit. b GDPR), e.g., for workshop registrations, use of our app, or the ordering of digital content.
Based on your consent (Art. 6 (1) lit. a GDPR), e.g., for newsletter subscriptions, optional analytics tools, or marketing cookies.
Compliance with legal obligations (Art. 6 (1) lit. c GDPR), e.g., regarding statutory retention obligations under tax law.
Based on legitimate interests (Art. 6 (1) lit. f GDPR), e.g., ensuring IT security, optimizing our services, and asserting legal claims.

4. Hosting

Our website is hosted on the servers of Wix.com Ltd., 40 Namal Tel Aviv St., Tel Aviv 6350671, Israel. WIX provides a website platform. In this context, personal data such as IP addresses, device information, or log files may be processed on servers worldwide, including the USA.

We have concluded a data processing agreement (Art. 28 GDPR) with WIX.
Data transfers to third countries are based on Standard Contractual Clauses (Art. 46 GDPR) and the EU-US Data Privacy Framework.
Further information: https://de.wix.com/about/privacy.

5. Collection and Storage of Personal Data

a) When visiting the website

Each time our website is accessed, the system automatically collects information transmitted by your browser (“server log files”):

IP address of the requesting computer
Date and time of access
Time zone difference to Greenwich Mean Time (GMT)
Content of the request (specific page)
Access status/HTTP status code
Amount of data transmitted
Referrer URL
Browser type, version, language
Operating system and its interface

Purpose of processing: Ensuring a smooth connection setup and system security.
Legal basis: Art. 6 (1) lit. f GDPR (legitimate interest).

b) Contacting us (form, e-mail, telephone)

If you contact us, the data you provide (e.g., name, e-mail address, telephone number, concern) will be stored.
Legal basis: Art. 6 (1) lit. b GDPR (contract or pre-contractual measures) or Art. 6 (1) lit. f GDPR (legitimate interest).

c) Newsletter

We use the double opt-in procedure for sending our newsletter. A valid e-mail address is required; further details are voluntary.

You may withdraw your consent at any time.
Legal basis: Art. 6 (1) lit. a GDPR.

d) Orders and payments

For orders of paid services, your payment data will be processed by payment service providers (e.g., Stripe, PayPal).

Legal basis: Art. 6 (1) lit. b GDPR.
For further details, please refer to the respective providers’ privacy policies.

6. Cookies and Tracking

Our website uses cookies and similar technologies.

Technically necessary cookies are required for the operation of the site.
Analytics and marketing cookies are only used with your consent (Art. 6 (1) lit. a GDPR, § 25 TTDSG).

You may withdraw your consent at any time via the cookie banner or your browser settings.

7. Social Media and Third-Party Services

Third-party plugins or content may be embedded on our website:

Meta (Facebook & Instagram): joint controllership pursuant to Art. 26 GDPR. Details: https://www.facebook.com/legal/controller_addendum.
Google Maps & reCAPTCHA (Google Ireland Ltd.): data transfer to the USA, legal basis Art. 6 (1) lit. f GDPR.
Other services are only loaded with your prior consent.

8. Recipients of Data

Personal data will only be disclosed:

to processors engaged by us (e.g., hosting, payment services),
where there is a legal obligation,
where you have expressly consented,
or where it is necessary for the performance of a contract.

9. Storage Period

Personal data will only be stored for as long as necessary for the respective purposes. Beyond this, storage will only take place where statutory retention obligations exist (e.g., commercial or tax law retention periods).

10. Your Rights as a Data Subject

Pursuant to the GDPR, you have the following rights:

Right of access (Art. 15 GDPR)
Right to rectification (Art. 16 GDPR)
Right to erasure (Art. 17 GDPR)
Right to restriction of processing (Art. 18 GDPR)
Right to data portability (Art. 20 GDPR)
Right to withdraw consent (Art. 7 (3) GDPR)
Right to object (Art. 21 GDPR) to processing based on Art. 6 (1) lit. e or f GDPR
Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

11. Data Security

We implement appropriate technical and organizational measures pursuant to Art. 32 GDPR to protect your data against loss, destruction, or unauthorized access.

12. Amendments to this Privacy Policy

We reserve the right to amend this privacy policy to ensure that it always complies with current legal requirements or to reflect changes to our services. The updated policy will then apply to any subsequent visit.