Privacy Policy

General information

Unless otherwise stated below, the provision of your personal data is neither legally nor contractually required, nor is it necessary for the conclusion of a contract. You are not obliged to provide the data. Failure to provide such data has no consequences. This only applies insofar as no other information is provided in the following processing operations.

“Personal data” means any information relating to an identified or identifiable natural person.

Controller

You may contact us at any time. The controller responsible for data processing is:

Maximilian Herzog, Schindlergasse 28, 1180 Vienna, Austria, +43 69915338880, maximilian@herzogs.at

Collection, processing and transfer of personal data in connection with orders

When placing an order, we collect and process your personal data only to the extent necessary to fulfil and process your order and to handle your enquiries. Providing the data is necessary for the conclusion of a contract. Failure to provide the data means that no contract can be concluded. Processing is carried out on the basis of Art. 6(1)(b) GDPR and is necessary for the performance of a contract with you.

Your data may be shared, for example, with shipping companies, dropshipping or fulfilment providers, payment service providers, service providers for order processing and IT service providers. In all cases, we strictly observe the legal requirements. The scope of data transmission is limited to a minimum.

Storage period

After the contract has been fully processed, the data will initially be stored for the duration of the warranty period and then, taking into account statutory retention periods under tax and commercial law in particular, deleted after these periods expire, unless you have consented to further processing and use.

Rights of the data subject

If the legal requirements are met, you have the following rights under Articles 15 to 20 GDPR: right of access, right to rectification, right to erasure, right to restriction of processing and right to data portability.

In addition, pursuant to Art. 21(1) GDPR, you have the right to object to processing based on Art. 6(1)(f) GDPR and to processing for the purposes of direct marketing.

Right to lodge a complaint with a supervisory authority

Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data is unlawful.

Right to object

If the personal data processing listed here is based on our legitimate interest pursuant to Art. 6(1)(f) GDPR, you have the right to object to this processing at any time for reasons arising from your particular situation, with effect for the future.

Once you have objected, the processing of the data concerned will cease unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or unless the processing serves the establishment, exercise or defence of legal claims.