Privacy Policy & Security

1) Introduction and Contact Details of the Data Controller

1.1 We are pleased that you are visiting our website and thank you for your interest. In the following, we inform you about the handling of your personal data when using our website. Personal data is all data with which you can be personally identified.

1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is clickpuls eCommerce GmbH, Leonard-Bernstein-Straße 10, 1220 Vienna, Austria, Tel.: +43 670 6512518, Email: [email protected]. The controller responsible for the processing of personal data is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

2) Data Collection When Visiting Our Website

2.1 When using our website purely for informational purposes, i.e. if you do not register or otherwise transmit information to us, we only collect data that your browser transmits to the page server (so-called "server log files"). When you visit our website, we collect the following data that is technically necessary for us to display the website to you:

Our visited website
Date and time of access
Amount of data sent in bytes
Source/reference from which you reached the page
Browser used
Operating system used
IP address used (if applicable: in anonymized form)

Processing is carried out in accordance with Art. 6 Para. 1 lit. f GDPR based on our legitimate interest in improving the stability and functionality of our website. The data is not passed on or used in any other way. However, we reserve the right to retrospectively check the server log files if concrete indications of illegal use become known.

2.2 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries to the controller). You can recognize an encrypted connection by the character string "https://" and the lock symbol in your browser line.

3) Cookies

To make visiting our website attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your end device. Some of the cookies we use are deleted after the browser session ends, i.e. after you close your browser (so-called session cookies). Other cookies remain on your end device and enable us or our partner companies (third-party cookies) to recognize your browser on your next visit (persistent cookies). If cookies are set, they collect and process certain user information such as browser and location data as well as IP address values to an individual extent. Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie.

Insofar as personal data is also processed by individual cookies set by us, the processing is carried out in accordance with Art. 6 Para. 1 lit. b GDPR either for the execution of the contract, in accordance with Art. 6 Para. 1 lit. a GDPR in the case of consent given, or in accordance with Art. 6 Para. 1 lit. f GDPR to protect our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the page visit.

Please note that you can set your browser so that you are informed about the setting of cookies and can individually decide on their acceptance or exclude the acceptance of cookies for certain cases or in general. Each browser differs in the way it manages cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. You can find these for the respective browsers under the following links:

Internet Explorer: https://support.microsoft.com/en-us/help/17442/windows-internet-explorer-delete-manage-cookies
Firefox: https://support.mozilla.org/en-US/kb/cookies-information-websites-store-on-your-computer
Chrome: https://support.google.com/chrome/answer/95647
Safari: https://support.apple.com/guide/safari/manage-cookies-sfri11471/mac
Opera: https://help.opera.com/en/latest/web-preferences/#cookies

Please note that if you do not accept cookies, the functionality of our website may be restricted.

4) Contact

When contacting us (e.g. via contact form or email), personal data is collected. Which data is collected in the case of a contact form can be seen from the respective contact form. This data is stored and used exclusively for the purpose of responding to your request or for establishing contact and the associated technical administration. The legal basis for processing the data is our legitimate interest in responding to your request in accordance with Art. 6 Para. 1 lit. f GDPR. If your contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6 Para. 1 lit. b GDPR. Your data will be deleted after final processing of your inquiry; this is the case if it can be inferred from the circumstances that the matter in question has been finally clarified, provided that there are no statutory retention requirements to the contrary.

5) Data Processing for Contract Handling

5.1 To the extent necessary for processing the contract, we pass on your data collected in connection with your order to the transport company commissioned with the delivery and/or to the financial service providers commissioned with payment processing. This includes the data required for handling your delivery/payment request. The legal basis for this data processing is Art. 6 Para. 1 lit. b GDPR, as this data processing is necessary for contract fulfillment.

5.2 In the context of data processing for contract handling, the following data processing operations may take place:

Processing of your address data for delivery
Processing of your payment data for payment processing
Processing of your contact data for communication regarding your order

5.3 Your personal data collected by us will be deleted after complete contract processing or termination of the business relationship, insofar as you have not expressly consented to further use of your data or we reserve the right to a data use that goes beyond this, which is permitted by law and about which we inform you accordingly below.

6) Use of Customer Data for Direct Advertising

6.1 If you subscribe to our email newsletter, we will regularly send you information about our offers. The only mandatory information for sending the newsletter is your email address. The provision of further data marked separately is voluntary and is used to address you personally. We use the so-called double opt-in procedure for sending the newsletter. This means that we will only send you an email newsletter after you have expressly confirmed that you agree to receive newsletters. We will then send you a confirmation email asking you to confirm that you wish to receive future newsletters by clicking on a corresponding link.

6.2 By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6 Para. 1 lit. a GDPR. When you register for the newsletter, we store your IP address entered by the Internet Service Provider (ISP) as well as the date and time of registration in order to be able to trace any possible misuse of your email address at a later time. The data collected by us when registering for the newsletter is used exclusively for advertising purposes by way of the newsletter. You can unsubscribe from the newsletter at any time via the link provided for this purpose in the newsletter or by sending a corresponding message to the controller named at the beginning. After unsubscribing, your email address will be immediately deleted from our newsletter distribution list, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this declaration.

6.3 Our email newsletters are sent via the technical service provider Klaviyo, Inc., 125 Summer Street, Boston, MA 02111, USA, to whom we pass on the data you provided when registering for the newsletter. This transfer is made in accordance with Art. 6 Para. 1 lit. f GDPR and serves our legitimate interest in using an effective and secure newsletter system. The data you enter for the purpose of subscribing to the newsletter (e.g. email address) is stored on Klaviyo's servers in the USA.

7) Data Processing for Order Handling

7.1 To process your order, we work with the following service provider(s), who support us in whole or in part in the execution of concluded contracts. Certain personal data is transferred to these service providers in accordance with the following information.

7.2 For fulfilling contracts with you, we use the shipping company Austrian Post AG, Rochusplatz 1, 1030 Vienna, Austria. For the purpose of delivering your order, we transmit your email address to the shipping company. This serves to coordinate a delivery date with you or to give you delivery notifications. The transfer is made in accordance with Art. 6 Para. 1 lit. b GDPR and exclusively for the purpose of delivery of goods.

7.3 For processing payments with PayPal, credit card or purchase on account, we use the payment service provider PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. For the purpose of payment processing, we pass on your payment data to the payment service provider.

7.4 For payment processing, we may also use the payment service provider Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden. Klarna offers various payment methods such as purchase on account, installment purchase, and direct debit. The legal basis for the transfer of data is Art. 6 Para. 1 lit. b GDPR (contract processing) and Art. 6 Para. 1 lit. f GDPR (legitimate interest in efficient payment processing). More information about data processing by Klarna can be found at: https://www.klarna.com/at/datenschutz/

8) Use of Social Media: Videos

We use social media plugins from YouTube on our website. This enables us to show you interesting videos directly on our website. YouTube is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). When you visit a page on our website that contains such a plugin, your browser establishes a direct connection to the YouTube servers. The content of the plugin is transmitted by YouTube directly to your browser, which integrates it into the website. Through this integration, YouTube receives information that your browser has accessed the corresponding page of our website, even if you do not have a YouTube account or are not currently logged in to YouTube. This information (including your IP address) is transmitted by your browser directly to a Google server in the USA and stored there.

If you are logged into YouTube, YouTube can directly assign the visit to our website to your YouTube account. If you interact with the plugins, for example by clicking on a video, this information is also transmitted directly to a Google server and stored there. The information is also published on your YouTube account and displayed to your contacts there.

The data processing described above is carried out in accordance with Art. 6 Para. 1 lit. f GDPR based on Google's and our legitimate interest in displaying videos to improve the user experience on our website. For more information about the purpose and scope of data collection and processing by YouTube, please refer to the privacy policy. There you will also find further information about your rights and setting options to protect your privacy: https://policies.google.com/privacy

9) Web Analysis Services

9.1 This website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. However, due to the activation of IP anonymization on this website, your IP address will be truncated by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area beforehand.

Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

9.2 You may refuse the use of cookies by selecting the appropriate settings on your browser. However, please note that if you do this, you may not be able to use the full functionality of this website. You can also prevent the collection of the data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available under the following link: https://tools.google.com/dlpage/gaoptout

10) Retargeting/Remarketing/Referral Advertising

10.1 This website uses the remarketing function of Google Ads. This function is used to present visitors to our website with interest-based advertisements within the Google advertising network. A so-called "cookie" is stored in the browser of the website visitor, which makes it possible to recognize the visitor when they visit websites that belong to the Google advertising network. On these sites, the visitor can be shown advertisements that relate to content that the visitor has previously accessed on websites that use Google's remarketing function.

According to its own information, Google does not collect any personal data during this process. However, if you do not wish to use Google's remarketing function, you can generally deactivate it by making the appropriate settings at https://www.google.com/settings/ads. Alternatively, you can deactivate the use of cookies for interest-based advertising via the advertising network initiative by following the instructions at https://optout.networkadvertising.org/.

10.2 This website uses the visitor action pixel from Facebook, Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook"). This allows user behavior to be tracked after they have been redirected to the provider's website by clicking on a Facebook ad. This enables the effectiveness of Facebook ads to be evaluated for statistical and market research purposes. The data collected in this way is anonymous to us, i.e. we do not see the personal data of individual users. However, this data is stored and processed by Facebook, about which we inform you according to our state of knowledge.

11) Online Marketing

11.1 We use Google Ads. This is an online advertising service from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google") that allows us to display advertisements in the Google advertising network (e.g. in search results, in videos, on websites, etc.) so that they are displayed to users who have a presumed interest in the advertisements.

11.2 For this purpose, a cookie is stored in your browser when you access our website via a Google ad. This cookie captures various data such as the ads you have clicked on, whether you have made a purchase, or what device you are using. With the help of this data, Google can assign a conversion to a specific ad click or other interactions on our website. If you are registered with a Google service, Google can associate your visit with your account. Even if you are not registered with Google or have not logged in, the provider may find out and store your IP address.

11.3 We also use the Facebook Pixel. This is a code that is embedded in our website. It enables us to show people who have visited our website personalized, interest-based Facebook ads when they visit the social network Facebook or other websites that also use this procedure. With the help of the Facebook Pixel, we can ensure that our Facebook ads match the potential interest of users and are not annoying. Furthermore, the Facebook Pixel enables us to track the effectiveness of Facebook ads for statistical and market research purposes by recording whether users have been redirected to our website after clicking on a Facebook ad (conversion tracking).

12) Tools and Miscellaneous

12.1 This website uses the web font service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google") to display fonts uniformly. When you access a page, your browser loads the required web fonts into your browser cache to display texts and fonts correctly. For this purpose, the browser you use must connect to Google's servers. This gives Google knowledge that our website has been accessed via your IP address. The use of Google Web Fonts is in the interest of a uniform and attractive presentation of our online offers. This represents a legitimate interest within the meaning of Art. 6 Para. 1 lit. f GDPR.

12.2 To protect this website and the connected systems against spam, fraud and unauthorized access, we may use the service "hCaptcha" from Intuition Machines, Inc., 2211 Selig Drive, Los Angeles, CA 90026, USA. hCaptcha is used to check whether data entry on this website (e.g. in a contact form) is made by a human or by an automated program. For this purpose, hCaptcha analyzes the behavior of the website visitor based on various characteristics.

13) Rights of the Data Subject

13.1 The applicable data protection law grants you comprehensive rights of data subjects (rights of access and intervention) vis-à-vis the controller with regard to the processing of your personal data, about which we inform you below:

Right of access: You have the right to request confirmation as to whether personal data concerning you is being processed and, if so, to obtain access to this personal data and the information specified in Art. 15 GDPR.
Right to rectification: You have the right to request the rectification of inaccurate personal data concerning you and, taking into account the purposes of the processing, the completion of incomplete personal data in accordance with Art. 16 GDPR.
Right to erasure: You have the right to request the erasure of personal data concerning you without undue delay in accordance with Art. 17 GDPR, provided that one of the reasons stated in Art. 17 GDPR applies.
Right to restriction of processing: You have the right to request the restriction of processing in accordance with Art. 18 GDPR if one of the conditions stated therein applies.
Right to data portability: You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format in accordance with Art. 20 GDPR, and to transmit this data to another controller.
Right to object: You have the right to object at any time to the processing of personal data concerning you which is carried out on the basis of Art. 6 Para. 1 lit. e or f GDPR for reasons arising from your particular situation.
Right to withdraw consent: You have the right to withdraw your consent at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
Right to lodge a complaint: You have the right to lodge a complaint with a supervisory authority in accordance with Art. 77 GDPR if you consider that the processing of personal data concerning you infringes the GDPR.

13.2 If you wish to assert any of the aforementioned rights against us, please contact our data protection representative. They will verify your request and process it accordingly.

14) Duration of Storage of Personal Data

The duration of the storage of personal data is determined on the basis of the respective legal basis, the purpose of processing and – if relevant – additionally on the basis of the respective statutory retention period (e.g. commercial and tax retention periods). When processing personal data on the basis of express consent in accordance with Art. 6 Para. 1 lit. a GDPR, this data is stored until the data subject withdraws their consent. If there are statutory retention periods for data that is processed within the framework of legal or similar obligations on the basis of Art. 6 Para. 1 lit. b GDPR, this data is routinely deleted after expiry of the retention periods, provided that it is no longer required for contract fulfillment or contract initiation and/or there is no longer a legitimate interest on our part in further storage.

When processing personal data on the basis of Art. 6 Para. 1 lit. f GDPR, this data is stored until the data subject exercises their right of objection in accordance with Art. 21 Para. 1 GDPR, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or the processing serves the establishment, exercise or defense of legal claims. When processing personal data for the purpose of direct advertising on the basis of Art. 6 Para. 1 lit. f GDPR, this data is stored until the data subject exercises their right of objection in accordance with Art. 21 Para. 2 GDPR.

Unless otherwise stated in the other information in this declaration about specific processing situations, stored personal data is deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.