Privacy Policy

Last updated: October 19, 2026

This policy explains what personal data is processed when you visit lungelock.com and what rights you have. We keep it simple: this site has no user accounts, no contact forms, no newsletter and no analytics or advertising scripts, and it does not set its own cookies.

Who is responsible

The controller under the EU General Data Protection Regulation (GDPR) is Heinz Schlecht, Austria. Contact: [email protected].

Hosting (Cloudflare)

This site is hosted on Cloudflare Pages and delivered through Cloudflare's network (Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA). When you open a page, your browser sends technical data that Cloudflare processes to deliver the site and protect it from abuse, for example your IP address, the date and time of the request, the page requested, your browser and operating system. This data is processed in short-lived technical and security logs. We do not combine it with other data.

Legal basis: Art. 6(1)(f) GDPR (our legitimate interest in a secure, working website). Cloudflare may process data outside the EU, including in the USA. Cloudflare is certified under the EU-U.S. Data Privacy Framework and also uses the EU Standard Contractual Clauses. More: Cloudflare Privacy Policy.

Analytics: we do not use Cloudflare Web Analytics or any other analytics service. If that changes, we will update this policy first.

Amazon Associates and affiliate links

LungeLock is a participant in the Amazon Services LLC Associates Program, an affiliate advertising program designed to provide a means for sites to earn advertising fees by advertising and linking to Amazon.com.

Product links on this site are affiliate links to Amazon.com. Nothing is sent to Amazon while you are on our pages. Only when you click such a link do you leave our site, and Amazon then receives the information that you came from lungelock.com (through a tracking code in the link). Third parties, including Amazon, may place and read cookies on your browser, or use web beacons or similar technologies, to collect information as a result of ads and links on this site, for example to attribute a purchase to us. We do not receive your name, address or what else you buy; we only see aggregated reports such as numbers of clicks and orders.

Legal basis for the link and tracking code: Art. 6(1)(f) GDPR (our legitimate interest in financing the site through commissions). Any cookies set on amazon.com are Amazon's responsibility; see the Amazon.com Privacy Notice and Amazon's cookie settings.

Instagram link

We link to our Instagram profile. It is a plain link: no Instagram scripts or embeds load on this site. Once you open Instagram, Meta's privacy policy applies.

Email

If you email us, we use your address and message only to reply and keep the conversation as long as needed for that purpose, unless the law requires us to keep it longer. Legal basis: Art. 6(1)(b) or (f) GDPR. Emails to our address are received by Cloudflare Email Routing and forwarded to our private mailbox, so Cloudflare and our email provider process them on our behalf.

Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you (Art. 15),
• have it corrected (Art. 16) or erased (Art. 17),
• restrict its processing (Art. 18),
• data portability (Art. 20),
• object to processing based on legitimate interests (Art. 21),
• withdraw any consent you gave, with effect for the future.

To use these rights, email [email protected]. You also have the right to lodge a complaint with a supervisory authority. In Austria this is the Datenschutzbehörde (Austrian Data Protection Authority), Barichgasse 40–42, 1030 Vienna, dsb.gv.at. You can also contact the authority in your own EU country.

Changes

We update this policy when the site changes, for example if we add new partners or tools. The date at the top shows the latest version.