— VAELIVA

Privacy Policy

SCROLL

Last updated: 10. September 2026

VAELIVA respects your privacy and is committed to protecting personal data. This policy describes the Website’s current technical setup, including first-party analytics, Pinterest publishing and campaign measurement, and affiliate links to Lampenwelt Austria, Lampenwelt Germany and Lampenwelt Switzerland through Awin.

1. Data Controller

The controller responsible for the processing of personal data through this Website is:

VAELIVA
Christian Merta
Blumengasse 15
8580 Köflach
Austria
Email: mail@vaeliva.com

2. Scope of this Privacy Policy

This Privacy Policy explains how VAELIVA processes personal data when you visit vaeliva.com (the “Website”), arrive through a Pinterest campaign link, use a Shop the Look link, contact us, or interact with the technical services used to operate the Website.

VAELIVA does not currently offer public user accounts, paid memberships or purchases on the Website. Purchases of featured products take place on the independent websites of our affiliate partners.

3. Technical Data and Server Logs

When the Website is accessed, technical information may be processed automatically to deliver and secure the requested page. This may include the IP address, browser type and version, operating system, device information, requested URL, date and time of access, referring website, response status, and technical error or diagnostic information.

The processing is necessary for the secure and reliable operation of the Website. The legal basis is Article 6(1)(f) GDPR. Our legitimate interests are the provision, security, stability and troubleshooting of the Website. Server logs are retained only for as long as required for these purposes or to establish, exercise or defend legal claims, and are then deleted or anonymised unless a longer period is required by law.

4. Hosting and Technical Service Providers

4.1 World4You

The Website and its WordPress database are hosted by World4You Internet Services GmbH, Austria. World4You may process technical connection and server-log data on our behalf in order to provide and secure the Website. The legal basis for VAELIVA’s processing is Article 6(1)(f) GDPR.

4.2 Supabase

VAELIVA uses services provided by Supabase, Inc. for the protected VAELIVA Control Center, database functions, automated publishing workflows and storage or delivery of certain images and content assets. When a public image is loaded from Supabase storage, the visitor’s browser connects to the relevant Supabase delivery infrastructure. Technical data such as the IP address, user agent, requested asset, date and time, and delivery or error information may therefore be processed.

The protected Control Center also stores operational data relating to approved content, publishing schedules, Pinterest connections and publication results. These systems are not public and are accessible only to authorised VAELIVA administrators. Where Supabase processes personal data on our behalf, it acts as a service provider or processor under the applicable contractual arrangements.

The VAELIVA Supabase project is hosted in the West EU (Ireland) region. This means that the project’s primary regional infrastructure is located within the European Union. Supabase or its subprocessors may nevertheless process or access limited data from other locations where this is necessary to provide, secure, maintain or support the service.

The legal basis is Article 6(1)(f) GDPR. Our legitimate interests are secure content management, reliable delivery of Website assets and controlled publication of approved content. Where a transfer to a third country requires an appropriate safeguard, VAELIVA relies on the mechanism applicable to the relevant service and contractual setup, such as an adequacy decision or the European Commission’s Standard Contractual Clauses. Further information about Supabase’s processing, subprocessors and transfer arrangements is available at https://supabase.com/privacy.

5. First Party Website Analytics

Independent Analytics

VAELIVA uses the WordPress plugin Independent Analytics to understand how the Website is used and which content and campaigns generate visits. The analytics data is created and stored in the VAELIVA WordPress database and is not transmitted to Independent Analytics as an external analytics provider.

Depending on the page view, the following information may be recorded: page viewed, time of the view, session and visit information, referrer, approximate geographic region, device and browser information, entrances, exits, visit duration, and campaign parameters contained in the requested URL.

For campaign measurement the Website can record the standard parameters utm_source, utm_medium, utm_campaign, utm_term and utm_content and, if present, gclid. For Pinterest links VAELIVA currently uses utm_source=pinterest, utm_medium=organic_social, utm_campaign=shop_the_look and a Pin-specific value in utm_content. The additional vaeliva_house parameter identifies the destination house in the URL and may also appear in technical request logs.

Independent Analytics uses the visitor’s IP address transiently to determine an approximate location and combines the IP address, user agent and a rotating salt in a one-way hash to create a pseudonymous visitor identifier. The raw IP address is not stored in the analytics database by the plugin. Independent Analytics does not use analytics cookies on the public Website.

The legal basis is Article 6(1)(f) GDPR. Our legitimate interests are measuring Website performance, understanding which editorial content is useful, preventing misleading traffic statistics and improving the Website. Analytics information is retained only while it is useful for these purposes and is deleted or anonymised when it is no longer required.

Further information about the plugin’s privacy design is available at https://independentwp.com/knowledgebase/common-questions/what-makes-it-gdpr-compliant/.

Google Analytics

VAELIVA does not currently load Google Analytics on the public Website. If Google Analytics or another optional third-party analytics service is introduced in the future, the relevant privacy information and cookie settings will be updated before activation and, where legally required, the service will not be activated until valid consent has been obtained.

6. Cookies and Consent Management

VAELIVA uses CookieYes, a service provided by CookieYes Limited, 3 Warren Yard, Warren Park, Wolverton Mill, Milton Keynes, MK12 5NW, United Kingdom, to display the cookie banner, store consent choices and provide access to cookie settings.

CookieYes may process the consent status, consent identifier, date and time of the choice, Website domain, browser or device information and technical connection data required to record and respect the choice. The storage of the consent choice is necessary to comply with legal obligations and to demonstrate consent. The legal bases are Article 6(1)(c) GDPR and, where applicable, Article 6(1)(f) GDPR. Further information is available at https://www.cookieyes.com/privacy-policy/.

Strictly necessary technologies are used without consent where permitted by law. Optional analytics or marketing technologies are activated only after the required consent. You can change or withdraw your choice at any time through the cookie settings available on the Website.

For a technology-by-technology overview of the cookies and similar technologies currently used on the Website, including their purpose and typical duration, please see the VAELIVA Cookie Policy.

7. Pinterest Integration and Pinterest Campaign Measurement

7.1 VAELIVA Pinterest account connection

VAELIVA operates an internal publishing integration for its own authorised Pinterest business account. Public Website visitors are not asked to connect their Pinterest accounts to VAELIVA. The integration uses Pinterest OAuth 2.0 and does not collect Pinterest passwords, login credentials or session cookies.

After the VAELIVA account owner authorises the connection, VAELIVA may process the Pinterest account or user identifier, authorised scopes, accessible board identifiers and board names, selected destination board, access token, refresh token, token expiry information, connection status and technical authentication records. Tokens are stored only in protected server-side systems and are never intentionally exposed on the public Website.

For approved publication jobs VAELIVA processes the content selected by the account owner, including image URL or media reference, Pin title, Pin description, destination URL, board identifier, scheduled time, publication status, Pinterest Pin identifier, attempt count and technical error information. Each Pin must be individually reviewed or approved in the VAELIVA workflow before it can be placed in the publishing plan.

The purposes are to connect the authorised VAELIVA account, allow board selection, publish individually approved Pins, refresh expiring tokens, prevent duplicate publications, document publication results and resolve errors. The legal basis is Article 6(1)(f) GDPR. Our legitimate interests are managing VAELIVA’s own Pinterest presence securely and publishing approved editorial content efficiently.

Connection and token data is retained while the Pinterest connection remains active and is required for the authorised publishing function. It is deleted or rendered unusable when the connection is revoked, when it is no longer required, or when deletion is requested, subject to any overriding legal retention duty. Publication records are retained only for as long as necessary to document and troubleshoot the publishing workflow.

7.2 Public Pins and links to VAELIVA

Content published to Pinterest may include VAELIVA images, titles, descriptions, board information and destination links. With Standard API access, this content may become publicly visible on Pinterest. Trial or Sandbox content may be visible only to the authorised creator, depending on Pinterest’s access tier and product rules.

Pinterest destination links may contain campaign parameters so that VAELIVA can determine which Pin, house and design world generated a visit. A typical link contains utm_source=pinterest, utm_medium=organic_social, utm_campaign=shop_the_look, a Pin-specific tracking key in utm_content, and vaeliva_house with the relevant house identifier. These values identify content and campaigns, not the visitor by name.

7.3 What VAELIVA does not do with Pinterest data

VAELIVA does not request or store Pinterest passwords or session cookies.
VAELIVA does not connect or read the Pinterest accounts of public Website visitors.
VAELIVA does not import contacts, messages or private Pinterest communications.
VAELIVA does not use Pinterest API data to build advertising audiences or to target Website visitors away from Pinterest.
VAELIVA does not sell Pinterest API data or disclose it to unrelated advertising providers.
VAELIVA does not use information obtained from the Pinterest API to train, fine-tune or develop artificial-intelligence or machine-learning models.
VAELIVA does not scrape Pinterest and does not attempt to circumvent Pinterest rate limits or access restrictions.

Pinterest Europe Ltd., Waterloo Exchange, 3rd Floor, Waterloo Road, Dublin 4, Ireland, and Pinterest, Inc., United States, process information under their own responsibility when Pinterest is used. Information may be processed outside the EEA. Pinterest describes its controllers, legal bases, safeguards and user rights at https://policy.pinterest.com/en/privacy-policy.

8. Affiliate Links and Awin

8.1 How the affiliate links work

VAELIVA participates as a publisher in the Awin affiliate network and currently promotes products from Lampenwelt Austria, Lampenwelt Germany and Lampenwelt Switzerland. Shop the Look links are advertising or affiliate links and are identified as such, for example by an “Affiliate link”, “Sponsored” or “Werbung” label where the link is presented. If you click such a link and later complete a qualifying transaction, VAELIVA may receive a commission. The price charged to you is not increased by VAELIVA’s commission.

On the current Website implementation, VAELIVA does not load an Awin tracking script or set an Awin cookie merely because a Shop the Look page is viewed. The transfer to Awin begins when you deliberately click an affiliate link. The link first opens an Awin tracking domain, such as awin1.com, and then redirects you to the relevant Lampenwelt shop.

8.2 References transmitted in a Shop the Look link

The affiliate URL contains the Awin product identifier, VAELIVA’s publisher identifier, the relevant Lampenwelt advertiser or programme identifier, and the campaign label shop_the_look. VAELIVA also uses four reporting references so that the performance of editorial content can be measured without transmitting a customer name:

clickref: the Pin-specific utm_content tracking key when the visit originated from a Pinterest campaign; otherwise a house reference is used as a fallback.
clickref2: the VAELIVA house identifier.
clickref3: the room identifier, for example living_room, kitchen, bedroom, bathroom or exterior_house.
clickref4: the Awin product identifier of the selected lamp.

This structure allows VAELIVA to evaluate which Pin or campaign, house, design world, room and product generated an affiliate referral or attributed transaction. The identifiers describe content and products. VAELIVA does not intentionally place a visitor’s name, email address, postal address or payment information in these reference fields.

8.3 Processing by Awin

When an affiliate link is clicked, Awin may process technical and pseudonymous information such as the referral references, publisher and advertiser identifiers, click or view, country, date and time, IP address or network information, browser and device attributes, cookies or similar identifiers. According to Awin, its tracking technologies can include tracking-domain cookies, advertiser journey tags and device fingerprinting.

If a purchase or another qualifying action takes place at Lampenwelt, the Lampenwelt shop may transmit limited transaction information to Awin so that the referral can be validated and a commission can be allocated. Depending on the programme and report, this may include a pseudonymous transaction reference, date and time, advertiser, order value, product type, sales channel, voucher information, validation or cancellation status and commission amount.

VAELIVA may receive campaign and transaction reporting from Awin that is necessary to verify referrals and commissions. VAELIVA does not receive the customer’s Lampenwelt password or payment-card details. Under the normal affiliate reporting process, VAELIVA does not require the customer’s name, email address, billing address or delivery address and does not attempt to identify the person behind a pseudonymous Awin reference.

VAELIVA’s legal basis for using affiliate links and evaluating the resulting campaign and commission reports is Article 6(1)(f) GDPR. Our legitimate interests are financing editorial content through transparent affiliate partnerships, measuring the performance of individual recommendations and verifying commission statements. Where access to or storage of information on a device requires consent, the relevant provider is responsible for obtaining that consent in its environment.

Awin AG, Otto-Ostrowski-Straße 1A, 10249 Berlin, Germany, determines its own processing and retention periods for the Awin network. Information about Awin’s processing, retention, recipients, international transfers and privacy rights is available at https://www.awin.com/de/datenschutzerklarung.

9. Lampenwelt Austria, Lampenwelt Germany and Lampenwelt Switzerland

VAELIVA currently uses separate Awin affiliate partnerships for Lampenwelt Austria and Lampenwelt Switzerland. The shop selected by the link depends on the applicable product programme and destination market.

After the redirect to Lampenwelt, the relevant Lampenwelt entity is independently responsible for the shop visit, customer account, cart, order, payment, delivery, customer service and the shop’s own analytics or marketing technologies. Lampenwelt may use Awin technology to record and validate purchases referred by publishers.

VAELIVA does not operate the Lampenwelt shops and does not control their checkout or customer-account processing. Before making a purchase, please review the privacy information and cookie choices displayed by the relevant shop:

Lampenwelt Austria: https://www.lampenwelt.at/datenschutz
Lampenwelt Switzerland: https://www.lampenwelt.ch/datenschutz

10. Contacting Us

If you contact us by email, we process the information you provide, including your email address, the contents of your message and any related correspondence, in order to respond to your enquiry.

Providing this information is voluntary. However, without an email address and sufficient information about your enquiry, VAELIVA may be unable to process or respond to it.

Depending on the subject of the enquiry, the legal basis is Article 6(1)(b) GDPR for contractual or pre-contractual communication, Article 6(1)(c) GDPR for a legal obligation, or Article 6(1)(f) GDPR for our legitimate interest in responding to enquiries and documenting business communication. Correspondence is retained only for as long as needed for the enquiry and any applicable legal retention or limitation periods.

11. External Links and Social Profiles

The Website contains links to third-party websites and social-media profiles, including Pinterest, Instagram, TikTok, Awin and Lampenwelt. A connection to the third party is generally established when you click the link. The third party’s own privacy policy applies after you leave the Website. VAELIVA is not responsible for the content or independent processing carried out by those third parties.

12. International Data Transfers

VAELIVA is established in Austria, but some service providers or their subprocessors may process or access data outside the European Economic Area. Where the GDPR requires an appropriate safeguard for such a transfer, VAELIVA relies on the mechanism applicable to the provider and contractual setup, such as an adequacy decision, the European Commission’s Standard Contractual Clauses or another legally recognised transfer mechanism. Supplementary measures are applied where required and available in the relevant service configuration.

Pinterest, Awin, Supabase, CookieYes and the relevant Lampenwelt shop provide further information about their locations, recipients, subprocessors and transfer safeguards in their own privacy documentation.

13. Data Retention

VAELIVA retains personal data only for as long as it is necessary for the purpose for which it was collected, to comply with legal obligations, or to establish, exercise or defend legal claims. Different categories therefore have different retention criteria:

Server and security logs are retained for the period required for operation, security and incident investigation.
First-party analytics data is retained while required for Website and campaign analysis and is then deleted or anonymised.
Pinterest connection data is retained while the authorised connection is active and required.
Pinterest publication records are retained while required to document, monitor and troubleshoot publishing activity.
Affiliate campaign and commission records are retained while required for reporting, reconciliation, accounting, fraud prevention and legal claims.
Business and accounting records may be retained for the periods required by Austrian tax and commercial law.

Separate retention periods determined by Pinterest, Awin, Lampenwelt, CookieYes or another independent controller are described in their respective privacy policies.

14. Your Data Protection Rights

If the GDPR applies, and subject to its conditions and limitations, you may have the right to request access to your personal data, correction of inaccurate data, deletion, restriction of processing and information about recipients. You may also object to processing based on Article 6(1)(f) GDPR and withdraw consent at any time where processing is based on Article 6(1)(a) GDPR. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

The right to data portability under Article 20 GDPR applies only where the processing is based on consent or on a contract with you, the data was provided by you and the processing is carried out by automated means. It will therefore not apply to every processing activity described in this Privacy Policy.

To exercise rights concerning processing by VAELIVA, contact mail@vaeliva.com. To exercise rights concerning processing for which Pinterest, Awin or Lampenwelt acts as an independent controller, you may also contact that provider directly using the details in its privacy policy.

15. Right to Lodge a Complaint

You have the right to lodge a complaint with a competent data protection supervisory authority. In Austria, the competent authority is the Austrian Data Protection Authority, Barichgasse 40–42, 1030 Vienna, Austria, https://www.dsb.gv.at/. You may also contact the supervisory authority of your habitual residence, place of work or the place of the alleged infringement.

16. Automated Decisions

VAELIVA does not use the personal data described in this Privacy Policy to make decisions about Website visitors that are based solely on automated processing and produce legal or similarly significant effects. Editorial content may be created with artificial-intelligence tools, but Pinterest API data and affiliate customer data are not used by VAELIVA to train artificial-intelligence models.

17. Changes to this Privacy Policy

We may update this Privacy Policy when the Website, tracking configuration, affiliate programmes, Pinterest integration, service providers or legal requirements change. The current version will be published on this page with its effective date.