Privacy Policy

We are serious about protecting your personal data. We therefore process your data exclusively on the basis of the legal provisions (GDPR; TKG [Austrian Telecommunications Act] 2003). This Privacy Policy contains information about the most important aspects of how data is processed in connection with our website.

Contacting us

If you contact us by e-mail, the data that you provide will be stored by us for six months for the purpose of processing your inquiry and handling any follow-up questions. We will not share this data without your consent.

Data storage

Our online shop is powered by the Shopify platform operated by Shopify Inc., 150 Elgin Street, Suite 800, Ottawa, ON K2P 1L4, Canada. Further information about Shopify’s data protection measures can be found here.

Please note that, for the purpose of simplifying the shopping process and enabling orders to be subsequently processed by the online shop operator (Shopify), the IP address of the requesting computer, as well as the name, address and credit card number of the purchaser, are stored in cookies.

In addition, the following data is stored by us for the purpose of contract processing: name, address, order. The data that you provide is required for fulfilling the contract (e.g., billing) and for performing pre-contractual actions. Without this data, we cannot conclude the contract with you. Credit card details or other payment-related data is processed exclusively by Shopify. No data is passed on to third parties, except to transport/shipping companies authorized by us to deliver the goods, as well as to our accountants for the purpose of meeting our tax obligations.

If the purchasing process is canceled, the data stored by us will be deleted. In the event of a contract being concluded, all data from the contractual relationship will be stored until expiry of the applicable retention period under tax law (seven years).
However, the following data is stored until expiry of the product liability period (10 years): name, address, purchased goods, date of purchase. Data is processed on the basis of the legal provisions of Art. 96 para. 3 TKG and Art. 6(1)(a) (consent) and/or (b) (performance of contract) GDPR.

Cookies

Our website uses so-called “cookies”. Cookies are small text files that are stored on your computer or device by your browser. They are not harmful.
We use cookies to make our website more user-friendly. Some cookies will remain on your device until you delete them. They allow us to recognize your browser on your next visit.
If you don’t want this, you can configure your browser to let you know when cookies are about to be placed, so that you can decide in each instance whether to accept them.

Deactivating cookies can restrict the functionality of our website.

Web analysis

Our website uses Google Analytics, a web analytics service provided by Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). Google Analytics uses cookies, i.e., text files that are stored on your computer or device and allow the use of the website by your users to be analyzed. The information that the cookie generates in this way is transmitted to and stored on a Google server in the USA.

We have concluded a corresponding data processing agreement with the provider.

The relationship with the web analytics provider is based on an adequacy decision of the European Commission (Privacy Shield).
Data is processed on the basis of the legal provisions of Art. 96 para. 3 TKG and Art. 6(1)(a) (consent) and/or (f) (legitimate interest) GDPR.
Our legitimate interest in the sense of GDPR is the improvement of our product range and our website. Because the privacy of our users is important to us, user data is pseudonymized.

Your IP address is therefore only recorded by Google in truncated form at our request, which ensures anonymization, only enables general localization, and does not allow you to be identified.

You can prevent the storage of cookies by adjusting your browser settings accordingly. However, please be aware that you may not be able to enjoy all the functions of this website if you do so.

As an alternative to the browser add-on, or in browsers for mobile devices, please click this link to prevent Google Analytics from collecting information within this website in future (the opt-out only works in this browser and only for this domain). This action will store an opt-out cookie on your device. If you delete your cookies in this browser, you will have to re-click this link.
The user data is stored for a period of 14 months.

Newsletter

On our website, you have the option of subscribing to a free newsletter. The newsletter is sent out using “MailChimp”, a newsletter mailing platform operated by the US provider Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA.

We have concluded a corresponding data processing agreement with the provider. When you subscribe to the newsletter, the following data from the entry form is transmitted: e-mail address, first name, last name. In addition, the following data is collected when you subscribe: IP address of the requesting computer, date and time of registration.

For the processing of data, your consent is obtained during the sign-up process and reference is made to this Privacy Policy.
The e-mail addresses of our newsletter recipients, as well as other personal data described in this notice, are stored on MailChimp’s servers in the USA.

MailChimp uses this information to send and analyze the newsletters on our behalf. According to MailChimp, it may also use this data to optimize or improve its own services, e.g., to optimize the mailing technology and the visual appearance of the newsletters or for commercial purposes such as determining which countries the recipients are based in. However, MailChimp will not use the data of our newsletter recipients to contact them directly, nor will it share this data with third parties.

Note regarding external links: In certain cases, we may redirect the newsletter recipients to MailChimp’s webpages. For example, newsletters contain a link for retrieval via the Internet (e.g., in the event of display problems in the e-mail program). In addition, newsletter recipients can correct their details (e.g., e-mail address) retroactively. Furthermore, the privacy policy of MailChimp can only be accessed on its website.

In this connection, we make you aware that cookies are used on the MailChimp websites, meaning that personal data is processed by MailChimp, its partners and its service providers (e.g., Google Analytics). We have no influence over how this data is collected. Further information can be found in MailChimp’s privacy policy. You can also object to your data being collected for marketing purposes. More information on the options available to you can be found on the websites http://www.aboutads.info/choices/ and www.youronlinechoices.com/ (in Europe).
The legal basis for processing the data after the user has subscribed to the newsletter is Art. 6(1)(a) GDPR if the user has given their consent.
The user’s e-mail address is collected in order to deliver the newsletter.
The collection of other personal data during the registration process serves to prevent misuse of the services and the e-mail address.

The data is deleted as soon as it is no longer needed to achieve the purpose for which it was collected. The user’s e-mail address is therefore stored for as long as the subscription to the newsletter is active.
Other personal data collected during the sign-up process is usually deleted after a period of seven days.

The user can cancel their newsletter subscription at any time. A corresponding link can be found in every newsletter.

This also allows the user to revoke their consent to the storage of personal data that is collected during the sign-up process.

Newsletter analysis

The newsletters contain a “web beacon”, i.e., a pixel-sized file that is retrieved by the MailChimp server when the newsletter is opened. When the newsletter is opened, certain technical information, such as details of your browser and system, your IP address, and the time of access, are collected initially. The technical data, as well as information about the target groups, their reading behavior, their location (determined from the IP address), and the time of access, are used to technically improve the services.

Statistical data is also collected for the purpose of determining whether the newsletters have been opened, when they were opened, and which links were clicked.

For the processing of data, your consent is obtained during the sign-up process and reference is made to this Privacy Policy.

The legal basis for processing the newsletter analysis data is Art. 6(1)(f) GDPR.
The analysis helps us to identify the reading habits of users and to tailor content to them or send out different content that matches their interests (legitimate interest).
The data will be deleted as soon as it is no longer needed to achieve the purpose for which it was collected. The user’s e-mail address is therefore stored for as long as the subscription to the newsletter is active.

Other personal data collected during the sign-up process is usually deleted after a period of seven days.

The user can cancel their newsletter subscription at any time. A corresponding link can be found in every newsletter.

Unfortunately, it is not possible to separately withdraw your consent to the distribution via MailChimp and the statistical analysis.

This also allows the user to revoke their consent to the storage of personal data that is collected during the sign-up process.

Your rights

You generally have the right to be informed of the data being held about you, as well as the right to have your data rectified or erased, or to restrict the processing of it. You also have a right to data portability, a right to revoke your consent, and a right to object against the use of your data. If you believe that the processing of your data violates data protection law or that your data protection rights have been violated in any other way, you have the right to lodge a complaint with the relevant supervisory authority. In Austria, this is the data protection authority (Österreichische Datenschutzbehörde).

If you have any questions about the collection, processing, or use of your personal data or the disclosure, rectification, blocking, or deletion of data, or if you wish to revoke your consent or object to your data being used in a certain way, please contact our data protection officer directly or get in touch with us via the contact details in the Legal Disclosure.