Privacy Policy
Unless otherwise stated below, the provision of your personal data is neither required by law or contract nor necessary for the conclusion of a contract. You are not obliged to provide the data. Failure to provide the data will have no consequences. This only applies insofar as no other information is provided in the following processing operations. “Personal data” is any information relating to an identified or identifiable natural person.
Processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR from our overriding legitimate interest in ensuring the smooth operation of our website and improving our offer.
Your data may be transferred to third countries outside the European Union for which the EU Commission has issued an adequacy decision.
Contact
Responsible party
Please contact us if you have any questions. The responsible party for data processing is: Stefan Fischer, Dorfstrasse 63 b/2, 6241 Radfeld Austria, 0043 660 6413 331, info@stucco-naturale.com
Initiative contact by the customer via email
If you contact us via email, we will only collect your personal data (name, email address, message text) to the extent that you provide it to us. The data processing serves to process and respond to your contact request. If the contact serves to carry out pre-contractual measures (e.g., advice on purchase interest, preparation of an offer) or relates to a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR.
If the contact is made for other reasons, this data processing is carried out on the basis of Art. 6 (1) lit. f GDPR on the basis of our overriding legitimate interest in processing and responding to your request. In this case, you have the right to object to the processing of personal data concerning you at any time on grounds relating to your particular situation. This right is based on Art. 6 para. 1 lit. f GDPR.
We will only use your email address to process your request. Your data will then be deleted in accordance with the statutory retention periods, unless you have consented to further processing and use.
Collection and processing when using the contact form
When you use the contact form, we collect your personal data (name, email address, message text) only to the extent that you provide it. The data processing serves the purpose of establishing contact.
If the purpose of establishing contact is to carry out pre-contractual measures (e.g. advice on purchase interest, preparation of an offer) or relates to a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR. If the contact is made for other reasons, this data processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR from our overriding legitimate interest in processing and responding to your request. In this case, you have the right to object to the processing of personal data concerning you at any time for reasons arising from your particular situation.
We only use your email address to process your request. Your data will then be deleted in accordance with the statutory retention periods, unless you have consented to further processing and use.
Collection and processing when sending images by email
You have the option of sending us images by email in connection with the order of a personalized product.
When you send us your images, we may collect your personal data (images of identifiable persons) only to the extent that you provide it. The data processing serves the purpose of creating personalized products. The image you send us will serve as a template for the product and will be used for this purpose (e.g., T-shirt printing). The processing is carried out on the basis of Art. 6 (1) lit. b GDPR and is necessary for the fulfillment of a contract with you. Your data will not be passed on. We will only use the image you send us within the scope of providing our services. Your data will then be deleted in accordance with the statutory retention periods, unless you have consented to further processing and use.
WhatsApp Business
If you contact us via WhatsApp for business purposes, we use the WhatsApp Business version of WhatsApp Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; “WhatsApp”). If you are located outside the European Economic Area, this service is provided by WhatsApp Inc. (1601 Willow Road, Menlo Park, CA 94025, USA).
The data processing is used to process and respond to your contact request. For this purpose, we collect and process your mobile phone number stored with WhatsApp, your name (if provided), and other data to the extent you have provided it. We use a mobile device for this service, whose address book contains only data from users who have contacted us via WhatsApp. Personal data will not be passed on to WhatsApp without your prior consent.
Your data will be transferred by WhatsApp to servers of Meta Platforms Inc. in the USA. An adequacy decision by the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF), is in place for the USA. Meta Platforms Inc. is certified under the TADPF and is therefore committed to complying with European data protection principles. If the purpose of the contact is to carry out pre-contractual measures (e.g., advice on purchase interest, preparation of an offer) or relates to a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR.
If the contact is made for other reasons, this data processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR on the basis of our overriding legitimate interest in providing a quick and easy way to contact us and in responding to your enquiry. In this case, you have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you based on Art. 6 para. 1 lit. f GDPR.
We only use your personal data to process your request. Your data will then be deleted in accordance with the statutory retention periods, unless you have consented to further processing and use.
For more information on the terms of use and data protection when using WhatsApp, please visit https://www.whatsapp.com/legal/#terms-of-service and https://www.whatsapp.com/legal/#privacy-policy.
Customer account Orders
Customer account
When you open a customer account, we collect your personal data to the extent specified there. The data processing serves the purpose of improving your shopping experience and simplifying order processing. The processing is carried out on the basis of Art. 6 para. 1 lit. a GDPR with your consent. You can revoke your consent at any time by notifying us, without affecting the lawfulness of the processing carried out on the basis of the consent until revocation. Your customer account will then be deleted. Collection, processing and disclosure of personal data when placing orders Collection, processing and disclosure of personal data when placing orders
Your data may be transferred to third countries outside the European Union for which the EU Commission has issued an adequacy decision.
Reviews Advertising
Data collection when writing a comment or review
When you comment on or review an article or post, we collect your personal data (name, email address, comment text) only to the extent that you provide it. The processing serves the purpose of enabling comments/reviews and displaying comments/reviews.
By submitting your comment/review, you consent to the processing of the data you have provided. The processing is carried out on the basis of Art. 6 para. 1 lit. a GDPR with your consent. You can revoke your consent at any time by notifying us, without affecting the lawfulness of the processing carried out on the basis of your consent until revocation. Your personal data will then be deleted. When publishing your comment/review, only the name you provided will be published.
When your comment/review is published, only the name you provided will be published.
In addition, when you submit your comment/review, your IP address will be stored for the purpose of preventing misuse of the comment or review function and ensuring the security of our information technology systems. By submitting your comment/review, you consent to the processing of the data you have provided. Processing is carried out on the basis of Art. 6 (1) lit. a GDPR with your consent. You can revoke your consent at any time by notifying us, without affecting the lawfulness of the processing carried out on the basis of your consent until revocation. Your IP address will then be deleted.
Use of your email address for sending newsletters
We use your email address to send you information and offers via newsletter, provided you have expressly consented to this. The data processing is used exclusively for advertising purposes. For this purpose, we process your email address and, if applicable, other data that you have voluntarily provided when registering for our newsletter. Processing is carried out on the basis of Art. 6 para. 1 lit. a GDPR with your consent. You can revoke your consent at any time without affecting the lawfulness of the processing carried out on the basis of your consent until revocation.
You can unsubscribe from the newsletter at any time by using the corresponding link in the newsletter or by notifying us. Your email address will then be removed from the distribution list. Despite removal from the distribution list, we may continue to store your email address in a so-called blacklist to prevent you from receiving newsletter emails from us in the future. This storage is based on Art. 6 para. 1 lit. f GDPR and our and your legitimate interest in preventing the reuse of your email address for sending our newsletter. You have the right to object to the processing of personal data concerning you at any time for reasons arising from your particular situation.
Use of your email address for sending direct advertising
We use your email address, which we have received in connection with the sale of a product or service, for the electronic transmission of advertising for our own products or services similar to those you have already purchased from us, unless you have objected to this use. The provision of your email address is necessary for the conclusion of the contract. Failure to provide this information will result in the contract not being concluded. Processing is carried out on the basis of Art. 6 (1) lit. f GDPR on the basis of our overriding legitimate interest in direct marketing. You can object to this use of your email address at any time by notifying us. The contact details for exercising your right to object can be found in the legal notice. You can also use the link provided for this purpose in the advertising email. No costs other than the transmission costs according to the basic rates will be incurred for this.
Use of Mailchimp
We use the service of Rocket Science Group LLC (675 Ponce de Leon Ave NE, Suite 5000 Atlanta, GA 30308, USA; “Mailchimp”) for order processing. We pass on the information you provide during the newsletter registration (email address, first and last name, if applicable) to Mailchimp. The data processing serves the purpose of sending the newsletter and its statistical evaluation.
In order to evaluate newsletter campaigns, the newsletters sent contain a 1×1 pixel graphic (tracking pixel) or a tracking link. This allows us to determine whether you have opened the newsletter and whether you have clicked on any integrated links. In this context, we collect your personal data such as your IP address, browser type, and device, as well as the time and date. This data can be used to create usage profiles under a pseudonym. The data collected is not used to identify you personally. The data collected is used solely for statistical analysis to improve newsletter campaigns.
Your data is usually transferred to Mailchimp servers in the USA and stored there. An adequacy decision by the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF), is in place for the USA. Mailchimp is not certified under the TADPF. The data transfer is based, among other things, on standard contractual clauses as suitable guarantees for the protection of personal data, which can be viewed at: https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_de.
Your personal data is processed on the basis of Art. 6 (1) lit. f GDPR on the basis of our overriding legitimate interest in a targeted, effective, and user-friendly newsletter system. You have the right to object to the processing of your personal data at any time for reasons arising from your particular situation.
Further information and MailChimp’s privacy policy can be found at: https://mailchimp.com/de/legal/data-processing-addendum/ and https://www.intuit.com/privacy/statement/.
Shipping service providers
Transfer of your email address to shipping companies for information about the shipping status
We will pass on your email address to the transport company for the purpose of contract fulfillment, provided that you have expressly consented to this during the ordering process. The purpose of this transfer is to inform you about the shipping status by email. The processing is carried out on the basis of Art. 6 para. 1 lit. a GDPR with your consent. You can revoke your consent at any time by notifying us or the transport company without affecting the lawfulness of the processing carried out on the basis of your consent until revocation.
Payment service providers Credit check
Use of PayPal Check-Out
We use the PayPal Check-Out payment service provided by PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; “PayPal”). The data processing serves the purpose of enabling us to offer you payment via the payment service. When you select and use payment via PayPal, credit card via PayPal, direct debit via PayPal, or “Pay Later” via PayPal, the data required for payment processing is transmitted to PayPal in order to fulfill the contract with you using the selected payment method. This processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR. Cookies may be stored for this purpose, which enable your browser to be recognized. The resulting data processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR on the basis of our overriding legitimate interest in offering customer-oriented payment methods. You have the right to object to the processing of your personal data at any time for reasons arising from your particular situation.
Credit card via PayPal, direct debit via PayPal & “Pay later” via PayPal
For individual payment methods such as credit card via PayPal, direct debit via PayPal or “Pay later” via PayPal, PayPal reserves the right to obtain a credit check based on mathematical-statistical methods using credit agencies. For this purpose, PayPal transmits the personal data required for a credit check to a credit agency and uses the information received about the statistical probability of a payment default to make a balanced decision on the establishment, execution, or termination of the contractual relationship. The credit check may contain probability values (score values) that are calculated on the basis of scientifically recognized mathematical-statistical methods and which include address data in their calculation. Your interests worthy of protection will be taken into account in accordance with the statutory provisions. The data processing serves the purpose of credit assessment for the initiation of a contract. The processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR from our overriding legitimate interest in protection against payment default if PayPal makes advance payments.
You have the right to object to the processing of your personal data based on Art. 6 para. 1 lit. f GDPR at any time for reasons arising from your particular situation by notifying PayPal. The provision of data is necessary for the conclusion of the contract with the payment method you have chosen. Failure to provide this data will result in the contract not being concluded with the payment method you have chosen.
Third-party providers
When paying via a third-party payment method, the data required for payment processing is transmitted to PayPal. This processing is carried out on the basis of Art. 6 (1) lit. b GDPR. In order to carry out this payment method, the data may then be passed on by PayPal to the respective provider. This processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR. Local third-party providers may include, for example:
- Apple Pay (Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland)
- Google Pay (Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland)
Purchase on account via PayPal
When paying by purchase on account, the data required for payment processing is first transmitted to PayPal. To execute this payment method, the data is then transmitted by PayPal to Ratepay GmbH (Franklinstraße 28-29, 10587 Berlin; “Ratepay”) in order to fulfill the contract with you using the selected payment method. This processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR. Ratepay may carry out a credit check based on mathematical-statistical methods (probability or score values) using credit agencies in accordance with the procedure described above. The data processing serves the purpose of credit assessment for the initiation of a contract. The processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR from our overriding legitimate interest in protection against payment default if Ratepay makes advance payments. Further information on data protection and which credit agencies Ratpay uses can be found at https://www.ratepay.com/legal-payment-dataprivacy/ and https://www.ratepay.com/legal-payment-creditagencies/.
For more information on data processing when using PayPal, please refer to the relevant privacy policy at https://www.paypal.com/de/webapps/mpp/ua/privacy-full.
Use of Amazon Payments
We use the Amazon Payments payment service provided by Amazon Payments Europe s.c.a. (38 avenue John F. Kennedy, L-1855 Luxembourg; “Amazon Payments”) on our website.
The purpose of data processing is to enable us to offer you payment via the Amazon Payments payment service.
In order to integrate this payment service, Amazon Payments must collect, store, and analyze data (e.g., IP address, device type, operating system, browser type, location of your device) when you visit the website. Cookies may also be used for this purpose. Cookies enable your browser to be recognized. The processing of your personal data is based on Art. 6 para. 1 lit. f GDPR from our overriding legitimate interest in offering customer-oriented payment methods. You have the right, for reasons arising from your particular situation, to object to this processing of personal data concerning you at any time. By selecting and using “Amazon Payments,” the data required for payment processing will be transmitted to Amazon Payments in order to fulfill the contract with you using the selected payment method. This processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR.
For more information on data processing when using the Amazon Payments payment service, please refer to the relevant privacy policy at: https://pay.amazon.com/de/help/201212490
We use the payment service of Klarna Bank AB (publ) (Sveavägen 46, 111 34 Stockholm, Sweden; “Klarna”) on our website. When you select and use payment via Klarna, the data required for payment processing is transmitted to Klarna in order to fulfill the contract with you using the selected payment method. This processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR. Cookies may be stored for this purpose, which enable your browser to be recognized. The resulting data processing is based on Art. 6 para. 1 lit. f GDPR from our overriding legitimate interest in offering customer-oriented payment methods. You have the right to object to the processing of your personal data at any time for reasons arising from your particular situation.
All Stripe transactions are subject to the Stripe Privacy Policy. This can be found at https://stripe.com/de/privacy
Cookies
Our website uses cookies. Cookies are small text files that are stored in the Internet browser or by the Internet browser on the user’s computer system. When a user accesses a website, a cookie may be stored on the user’s operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is accessed again.
Microsoft Edge: https://support.microsoft.com/de-de/microsoft-edge/cookies-in-microsoft-edge-lB6schen-63947406-40ac-c3b8-57b9-2a946a29ae09
Analysis Advertising tracking Affiliate
Use of Google Analytics 4
We use the web analytics service Google Analytics provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”).
The data processing serves the purpose of analyzing this website and its visitors, as well as for marketing and advertising purposes. To do this, Google will use the information obtained on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activity, and to provide other services related to website activity and internet usage to the website operator.
The following information may be collected, among other things: IP address, date and time of page view, click path, information about the browser and device you are using, pages visited, referrer URL (website from which you accessed our website), location data, purchase activities. Your data may be linked by Google to other data, such as your search history, your personal accounts, your usage data from other devices, and any other data Google has about you.
Google uses technologies such as cookies, web storage in the browser, and tracking pixels that enable an analysis of your use of the website. The use of cookies or comparable technologies is based on your consent in accordance with Section 25 (1) sentence 1 TDDDG in conjunction with Art. 6 (1) lit. a GDPR.
The processing of your personal data is carried out with your consent on the basis of Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time without affecting the lawfulness of the processing carried out on the basis of your consent until revocation.
The information generated about your use of this website is usually transferred to a Google server in the USA and stored there. The EU Commission has issued an adequacy decision for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself under the TADPF and is therefore committed to complying with European data protection principles. Both Google and US government authorities have access to your data.
For more information about terms of use and privacy, please visit https://policies.google.com/technologies/partner-sites and https://policies.google.com/privacy?hl=de&gl=en.
We use the online advertising program “Google Ads” on our website and, within this framework, conversion tracking (visit action evaluation). Google Conversion Tracking is an analysis service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; Google).
When you click on an ad placed by Google, a cookie for conversion tracking is placed on your computer. These cookies have a limited validity, do not contain any personal data and are therefore not used for personal identification. If you visit certain pages on our website and the cookie has not yet expired, Google and we can recognize that you clicked on the ad and were redirected to this page. Each Google Ads customer receives a different cookie. This means that cookies cannot be tracked across the websites of Ads customers.
The information collected using the conversion cookie is used to compile conversion statistics. This tells us the total number of users who clicked on one of our ads and were redirected to a page with a conversion tracking tag. However, we do not receive any information that can be used to personally identify users.
Your data may be transferred to Google LLC servers in the US. The US has an adequacy decision from the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself under the TADPF and is therefore committed to complying with European data protection principles. The use of cookies or similar technologies is based on your consent in accordance with Section 25 (1) sentence 1 TDDDG in conjunction with Art. 6 (1) lit. a GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time without affecting the lawfulness of the processing carried out on the basis of your consent until revocation.
Further information and Google’s privacy policy can be found at: https://www.google.de/policies/privacy/
The application is used to analyze visitor behavior and interests. Google uses cookies to analyze website usage, which forms the basis for creating interest-based advertisements. Cookies are used to record visits to the website and anonymized data about website usage. No personal data of website visitors is stored. If you subsequently visit another website in the Google Display Network, you will be shown advertisements that are likely to take into account previously viewed product and information areas. Your data may be transferred to Google LLC servers in the USA. The EU Commission has issued an adequacy decision for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself under the TADPF and is therefore committed to complying with European data protection principles. Cookies or similar technologies are used with your consent on the basis of Section 25 (1) sentence 1 TDDDG in conjunction with Art. 6 (1) lit. a GDPR. Your personal data is processed with your consent on the basis of Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time without affecting the lawfulness of the processing carried out on the basis of your consent until revocation.
Further information on Google Remarketing and the associated privacy policy can be found at: https://www.google.com/privacy/ads/
We use the “AmazonPartnerNet” partner program of Amazon EU S.a.r.l. (5 Rue Plaetis, L-2338 Luxembourg; “Amazon”).
We have placed advertisements on our website as links to offers on various Amazon websites. Amazon uses cookies. The cookies serve the purpose of correct billing within the affiliate program. The cookies enable Amazon to determine that you have clicked on an ad link and to track the origin of the order generated via the advertising link.
Your data may be transferred to the USA. The EU Commission has issued an adequacy decision for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Amazon has certified itself under the TADPF and is therefore committed to complying with European data protection principles.
The use of cookies or similar technologies is based on your consent in accordance with Section 25 (1) sentence 1 TDDDG in conjunction with Art. 6 (1) lit. a GDPR. The processing of your personal data is based on your consent in accordance with Art. 6 (1) lit. a GDPR. You can revoke your consent at any time without affecting the lawfulness of the processing carried out on the basis of your consent until revocation. The privacy policy with detailed information on the use of data by Amazon can be found at https://www.amazon.de/gp/help/customer/display.html/ref=footer_privacy?ie=UTF8&nodeId=3312401.
Plug-ins and other items
We use Google Tag Manager from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”) on our website.
This application is used to manage JavaScript tags and HTML tags, which are used in particular to implement tracking and analysis tools. The data processing serves the purpose of designing our website in line with requirements and optimizing it.
Google Tag Manager itself does not store cookies, nor does it process any personal data. However, it enables the triggering of further tags that may collect and process personal data.
Further information on terms of use and data protection can be found here.
Use of Google Fonts
We use Google Fonts from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”) on our website.
The data processing serves the purpose of ensuring that fonts are displayed uniformly on our website. To load the fonts, a connection to Google servers is established when the page is accessed. Cookies may be used for this purpose. Among other things, your IP address and information about the browser you are using are processed and transmitted to Google. This data is not linked to your Google account.
Your data may be transferred to the USA. The EU Commission has issued an adequacy decision for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself under the TADPF and is therefore committed to complying with European data protection principles.
The use of cookies or similar technologies is based on your consent in accordance with Section 25 (1) sentence 1 TDDDG in conjunction with Art. 6 (1) lit. a GDPR. The processing of your personal data is based on your consent in accordance with Art. 6 (1) lit. a GDPR. You can withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of your consent until withdrawal.
Further information on data processing and data protection can be found at https://www.google.de/intl/de/policies/ and at https://developers.google.com/fonts/faq.
Rights of data subjects and storage period
Duration of storage
After complete contract processing, the data will initially be stored for the duration of the warranty period, then in accordance with statutory retention periods, in particular those under tax and commercial law, and then deleted after expiry of the period, unless you have consented to further processing and use.
Rights of the data subject
If the legal requirements are met, you have the following rights under Articles 15 to 20 of the GDPR: Right to information, right to rectification, right to erasure, right to restriction of processing, right to data portability.
In addition, pursuant to Art. 21 (1) GDPR, you have the right to object to processing based on Art. 6 (1) f GDPR and to processing for direct marketing purposes.
Right to lodge a complaint with the supervisory authority
In accordance with Art. 77 GDPR, you have the right to lodge a complaint with the supervisory authority if you believe that the processing of your personal data is not lawful.
Right to object
If the personal data processing listed here is based on our legitimate interest pursuant to Art. 6 (1) lit. f GDPR, you have the right, for reasons arising from your particular situation, to object to this processing at any time with effect for the future. Once you have objected, the processing of the data concerned will be stopped unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or if the processing serves to assert, exercise, or defend legal claims.
If personal data is processed for direct marketing purposes, you can object to this processing at any time by notifying us. Once you have objected, we will stop processing the data concerned for direct marketing purposes.
Last update: October 22, 2024
Do you have any questions?
Do not hesitate to contact us!
Phone +43 660 641 33 31
E-mail: info@stucco-naturale.com
