Privacy policy

Last updated: February 3, 2026

The online shop "Fifty Five" and this website are operated by The Fifty Five – The Health Company GmbH (hereinafter "we" or "us"). Fifty Five® is a registered trademark of The Fifty Five – The Health Company GmbH.

This Privacy Policy explains how we collect, process, and use personal data when you visit our website, use our services, purchase products, or otherwise communicate with us.

If there is any conflict between this Privacy Policy and other contractual provisions, this Privacy Policy shall prevail with regard to the processing of personal data.

Controller within the meaning of the GDPR

The Fifty Five – The Health Company GmbH
Randstraße 1
22525 Hamburg
Germany

Email: support@55.life

Definitions

With regard to the terms used in this Privacy Policy (e.g. "personal data", "processing", "controller"), we refer to the definitions set out in Article 4 of the GDPR.

Hosting and provision of the website

Our website is operated via the e-commerce platform Shopify Inc. and/or Shopify International Ltd.
When you access our website, the following data is processed automatically (server log files):

  • IP address
  • Date and time of access
  • Requested URL / file
  • Referrer URL
  • Browser type and version
  • Operating system used

This processing is technically necessary to ensure the stability and security of the website.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the secure and reliable provision of the website)

Customer account and order processing

Customer account

When you create a customer account, we process in particular:

  • Name
  • Email address
  • Password (encrypted)
  • Billing and shipping addresses
  • Order history

Purpose: Provision of your customer account, simplification of future orders, management of your data.

Legal basis: Art. 6(1)(b) GDPR (performance of a contract)

Orders in the online shop

For processing your orders, we process:

  • Name
  • Billing and shipping address
  • Email address
  • Ordered products, prices, cart details
  • Payment information (depending on the selected payment service provider, see below)

Purpose: Order fulfillment, shipping, invoicing, customer service.

Legal basis: Art. 6(1)(b) GDPR (performance of a contract)

Fulfillment and shipping service provider (Hive)

We use an external fulfillment service provider (Hive) for the storage, picking, packing, and shipping of our orders.

In particular, the following personal data is transferred to the fulfillment service provider:

  • Name
  • Billing and shipping address
  • Email address
  • Ordered products, prices, cart details
  • Order number

Purpose: The processing is carried out exclusively for the purpose of fulfilling the contract and shipping your order.

Legal basis: Art. 6(1)(b) GDPR (performance of a contract)

Hive processes the data on our behalf on the basis of a data processing agreement in accordance with Art. 28 GDPR.

Payment service providers

To process payments, we use various payment service providers. Depending on the selected payment method, we transmit the following data to the respective provider, among others:

  • Name
  • Billing address
  • Email address
  • Purchase amount, currency
  • Transaction data (e.g. order number)

Further processing of data is carried out under the responsibility of the respective payment service provider. Please refer to their privacy notices.

Payment methods and providers used:

  • Credit card (Mastercard, Visa, American Express)
    – processed via Shopify's payment service (e.g. Shopify Payments / Stripe)
  • Shop Pay (Shopify)
  • PayPal
  • Apple Pay
  • Google Pay

Legal basis:

  • Art. 6(1)(b) GDPR (performance of a contract)
  • Art. 6(1)(f) GDPR (legitimate interest in secure payment processing)

Contacting us

When you contact us (e.g. by email or contact form), we process:

  • Name (if provided)
  • Email address
  • Content of your message
  • Any additional information you voluntarily provide

Purpose: Handling your request and communicating with you.

Legal basis:

  • Art. 6(1)(b) GDPR, insofar as the request relates to a contract
  • Art. 6(1)(f) GDPR (legitimate interest in responding to inquiries)

Consent and cookie management

We use a consent management tool (Consentmo) on our website to obtain, document, and manage your consent for cookies and similar technologies.

The following information is processed, among others:

  • Consent status (granted / denied)
  • Time of consent or refusal
  • Device and browser information (anonymized)
  • Possibly anonymized IP address

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a legally compliant and verifiable consent management process)

You can change or withdraw your consent at any time via the Cookie preferences link on our website.

Cookies and similar technologies

We use cookies and similar technologies to:

  • technically provide the website,
  • analyze its use,
  • optimize marketing and advertising measures.

Technically necessary cookies

These cookies are required for the operation of the website (e.g. shopping cart, login). Without them, the website cannot function properly.

Legal basis:

  • Art. 6(1)(b) GDPR (performance of a contract, e.g. cart and order functions)
  • Art. 6(1)(f) GDPR (legitimate interest in a functional and secure website)

Non-essential cookies (analytics, marketing, statistics)

These cookies are only set after you have given your consent via the consent tool.

Legal basis: Art. 6(1)(a) GDPR (consent)

You can adjust or withdraw your cookie settings at any time.

Analytics and marketing tools

Google Analytics

We use Google Analytics, a web analytics service provided by Google, to analyze the use of our website.

Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Data may be transferred to the USA.

Google Analytics uses cookies and similar technologies that enable an analysis of your use of the website. The information generated may include:

  • Pages visited
  • Click paths
  • Truncated IP address
  • Browser and device information
  • Session duration, country of origin, language settings

We use Google Analytics with IP anonymization, meaning your IP address is shortened within the EU/EEA.

Legal basis: Art. 6(1)(a) GDPR (consent).

You can withdraw your consent at any time via the cookie settings.

Google Ads (conversion tracking)

We use Google Ads conversion tracking to measure the effectiveness of our advertising campaigns and optimize them.

Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Data may be transferred to the USA.

Processed data (among others):

  • Clicks on our ads
  • Pages visited on our website
  • Order or conversion information
  • Pseudonymized user identifiers

Legal basis: Art. 6(1)(a) GDPR (consent)

Further information can be found in Google's privacy policy.

Meta Pixel and Conversions API (Facebook / Instagram)

To analyze and optimize our advertising on Facebook and Instagram, we use the Meta Pixel and the Meta Conversions API.

Provider: Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland
Data may be transferred to the USA.

Processed data (among others):

  • Pages visited, products viewed, cart interactions
  • Purchases
  • Pseudonymized user IDs, browser and device information
  • Possibly hashed email addresses or phone numbers (for matching)

This data enables us, among other things, to run remarketing campaigns ("Custom Audiences") and optimize ads for conversions.

Legal basis: Art. 6(1)(a) GDPR (consent)

You can adjust personalized advertising in your Facebook/Instagram account settings.

TikTok Pixel

We use the TikTok Pixel to measure and optimize the performance of our TikTok advertising campaigns.

Provider: TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland
Data may be transferred to third countries (in particular the USA).

Processed data (among others):

  • Pages and products visited
  • Click and conversion data
  • Pseudonymized user identifiers, device and browser data

Legal basis: Art. 6(1)(a) GDPR (consent)

Klaviyo (email marketing)

We use Klaviyo to send newsletters and analyze open and click rates.

Provider: Klaviyo Inc., 125 Summer St, Boston, MA 02111, USA
Data may be transferred to the USA.

Processed data (among others):

  • Email address
  • Name (if provided)
  • Newsletter interactions (opens, clicks, unsubscribes)
  • Purchase and usage behavior in our shop (if linked)

Legal bases:

  • Art. 6(1)(a) GDPR (consent for newsletters)
  • Art. 6(1)(b) GDPR (performance of a contract, e.g. transactional emails)

You can withdraw your newsletter consent at any time via the unsubscribe link in each email.

International data transfers

If personal data is processed in countries outside the EU/EEA (in particular by Google, Meta, TikTok, Klaviyo), this only takes place if the requirements of Articles 44 et seq. GDPR are met.

As a rule, such transfers are based on:

  • an adequacy decision of the European Commission, or
  • the use of standard contractual clauses of the European Commission with additional safeguards.

It cannot be ruled out that authorities in these countries may access the data.

Data retention

We store personal data only for as long as necessary for the stated purposes or as required by statutory retention obligations.

  • Contract and order data: generally until the expiry of statutory retention periods (usually 6–10 years)
  • Newsletter data: until you withdraw your consent
  • Server log files: generally 7–30 days, unless security-related incidents require longer retention

Obligation to provide data

Providing certain data (e.g. name, address, payment details) is necessary for concluding a contract (placing an order). Without this data, we cannot process your order.

No automated decision-making in individual cases

We do not use exclusively automated decision-making, including profiling, within the meaning of Article 22 GDPR that produces legal effects concerning you or similarly significantly affects you.

However, marketing and analytics tools may be used to create audience profiles (e.g. interest clusters) in order to display more relevant content and offers. This is done on the basis of your consent (Art. 6(1)(a) GDPR).

Your rights

With regard to your personal data, you have in particular the right to:

  • Access (Art. 15 GDPR)
  • Rectification (Art. 16 GDPR)
  • Erasure (Art. 17 GDPR)
  • Restriction of processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)
  • Object to certain processing operations (Art. 21 GDPR), in particular those based on Art. 6(1)(f) GDPR
  • Withdraw consent at any time with effect for the future (Art. 7(3) GDPR)

You also have the right to lodge a complaint with a supervisory authority, in particular in the EU Member State of your habitual residence, place of work, or the place of the alleged infringement.

For Hamburg, the competent authority is, for example:
The Hamburg Commissioner for Data Protection and Freedom of Information.

Contact

If you have any questions about data protection or wish to exercise your rights, you can contact us at:

The Fifty Five – The Health Company GmbH
Randstraße 1
22525 Hamburg
Germany

Email: support@55.life