1. Legal Basis
1.1. The EU General Data Protection Regulation, the Data Protection Act 2000, and the Data Protection Adaptation Act 2018 serve to protect the right to privacy of personal data. We process your data exclusively on the basis of statutory provisions (GDPR, DSG 2018, TKG 2003).
2. General Information
2.1. The data controller and data protection officer is Sebastian Reindl, Managing Director; Edt 4, 5205 Schleedorf, Austria; Email: office@stoffn.at – Tel.: +43 66475093604
2.2. It is our particular concern to protect and securely store all personal data you entrust to us. In this document you will learn more about how we use and process your personal data.
3. Purpose Limitation, Legal Basis, Storage Period, and Data Recipients
3.1. We require the collected personal data to process your orders. If you do not wish to provide data, you can also pick up our products directly at our premises in Schleedorf without placing a prior order in the webshop and without disclosing your personal data, and pay in cash. For payment by credit card, bank transfer, instant transfer, cash on delivery, and delivery against open invoice, as well as for delivery of your order to the desired delivery address, we require your name, address, delivery address, an email address, and phone number. For instant transfers and bank transfers, your name and account number will appear on our bank statements, which we must archive together with our other accounting records in accordance with statutory retention obligations and pass on to our tax advisor. Furthermore, for delivery of your order to you, it is necessary to pass on the aforementioned address data to our shipping service provider and to indicate it on the package. If you are purchasing as a business with a VAT identification number at tax-exempt net prices, we must also pass on your data and VAT number to the tax authorities. The data is collected, stored, processed, and used for these purposes.
3.2. The legal bases for processing your personal data are, on one hand, contract performance (if you wish to shop online or have goods delivered to your home, or require an invoice issued in your name), legitimate interests, fulfillment of our legal and contractual obligations, and on the other hand, your consent (e.g., contact form, newsletter, cookies). Failure to provide data may have various consequences. An anonymous purchase — without disclosing your data — is of course possible if you collect the goods yourself at our premises and pay in cash.
3.4. We process your personal data (name, address, delivery address, email address, phone number, and account details), to the extent necessary, for the duration of the entire business relationship (from initiation, processing through to termination of a contract) and beyond in accordance with statutory retention and documentation obligations arising, among others, from the Austrian Commercial Code (UGB) and the Federal Fiscal Code (BAO), as well as until the conclusion of any legal dispute and ongoing warranty and guarantee periods.
3.5. In the context of operating our websites, we engage shipping and payment service providers, tax advisors, software service providers, and agencies who may gain access to your personal data in the course of their activities, provided they require the data to fulfill their respective services. They have committed to compliance with applicable data protection regulations. Data processing agreements have been concluded in accordance with Art. 28 GDPR. Further information about the processors we engage can be requested at office@stoffn.at.
3.6. The address data required for the delivery of your order (name, address, phone number, email address) will also be passed on to Österreichische Post Aktiengesellschaft (Rochusplatz 1, 1030 Vienna, Email: kundenservice@post.at, Tel.: +43 577 670) or the shipping service provider Hermes Logistik GmbH & Co KG (Concorde Business Park 1, D 1/7, AT – 2320 Schwechat, Tel.: +43 (0) 50 4376-37, Email: info@hlg.at).
4. Contact Form
4.1. Your information, including personal data from our contact form, is transmitted to us via our own mail server for the purpose of processing your inquiry, further processed, and stored with us. This data will not be collected or shared without your consent. Without this data, we are unable to process your inquiries.
4.2. Data processing is carried out on the basis of the statutory provisions of § 96 Para. 3 TKG and Art. 6 Para. 1 lit. a (consent) GDPR.
5. Newsletter
5.1. You can subscribe to our newsletter on the website using a double opt-in procedure. After registering, you will receive an email asking you to confirm your subscription. Without providing this data, delivery of our newsletter is not possible. You can unsubscribe from the newsletter by clicking the unsubscribe link at the bottom of each newsletter.
5.2. For sending our newsletter, we engage data processors. They have committed to compliance with applicable data protection regulations. A data processing agreement has been concluded in accordance with Art. 28 GDPR. Further information about the processors we engage can be requested at office@stoffn.at.
5.3. Data processing is carried out on the basis of the statutory provisions of § 96 Para. 3 TKG and Art. 6 Para. 1 lit. a (consent) GDPR.
6. Online Shopping
6.1. We point out that for the purpose of simplifying the purchasing process and for subsequent contract processing, we store the IP data of the connection holder via cookies, as well as the buyer’s name, address, email address, phone number, account details, credit card number, and date of birth. The data you provide is required for contract performance or for carrying out pre-contractual measures. Without this data, we cannot conclude a contract with you. If you do not wish to provide data, you can also shop directly at our premises in Schleedorf and pay in cash.
6.2. Address data, email address, and phone number are transmitted to Österreichische Post Aktiengesellschaft or Hermes Logistik GmbH & Co KG so that the delivery person can deliver the order to your desired delivery address. Your address data, email address, phone number, and credit, debit, and ATM card data are passed on to our payment service providers — Stripe, PayPal — for the purpose of payment processing in the case of card payments. Your address data, email address, phone number, and account details are passed on to SOFORT for the purpose of payment processing in the case of instant transfers. Your aforementioned data is also passed on to our tax advisor for the purpose of fulfilling our tax obligations. They have committed to compliance with applicable data protection regulations. A data processing agreement has been concluded in accordance with Art. 28 GDPR. Further information about the processors we engage can be requested by email at office@stoffn.at.
6.3. Data processing is carried out on the basis of the statutory provisions of § 96 Para. 3 TKG and Art. 6 GDPR (in particular consent and/or necessity of contract performance).
7. Cookies, Other Tracking Tools, and Web Analytics
7.1. Cookies, other tracking technologies, and functions of the web analytics services Google Analytics and Google Ads, as well as those used by the shop itself, may be used in various ways on our internet platform. Cookies are small text items that enable recognition of the user and analysis of your use of our websites. The information generated in this way is transmitted to and stored on the provider’s server. They serve to make our online presence more user-friendly, effective, and secure overall. Cookies also serve to measure the frequency of page views and for general navigation.
7.2. By using our website, you consent to our use of cookies. You can refuse to accept cookies in your browser settings. Please refer to your browser manufacturer’s instructions for details on how to do this. If you opt out of certain technical and/or functional cookies, the functionality of our website may be limited. Some cookies remain stored on your device until you delete them.
7.3. We have concluded an appropriate data processing agreement with the provider. They have committed to compliance with applicable data protection regulations. Further information about the processors we engage can be requested at office@stoffn.at.
7.4. Your IP address is recorded but immediately pseudonymized (e.g., by deleting the last 8 bits). This means only a rough localization is possible.
7.5. Data processing is carried out on the basis of the statutory provisions of § 96 Para. 3 TKG and Art. 6 GDPR (in particular consent). As the privacy of our users is important to us, user data is pseudonymized.
8. Consent and Right of Withdrawal
8.1. If your consent is required for the processing of your data, we will only process it after your express consent.
8.2. As a general rule, we do not process data of minors and are not authorized to do so. By giving your consent, you confirm that you have reached the age of 14 or that the consent of your legal guardian has been obtained.
8.3. You may withdraw your consent at any time at the following email address: office@stoffn.at. In such a case, the data stored about you to date will be anonymized and subsequently used only for statistical purposes without personal reference. Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent prior to its withdrawal.
9. Data Security
9.1. Our Managing Director, Sebastian Reindl, implements technical and organizational security measures to protect the stored personal data against accidental or intentional manipulation, loss or destruction, and against access by unauthorized persons. Our security measures are continuously improved in line with technological developments.
10. Your Rights
10.1. You have the right at any time to obtain information from the data controller, Sebastian Reindl, Managing Director, Email: office@taovitalis.com, Tel.: +43 664 75093604, regarding the personal data concerned. To the extent that no statutory retention obligation exists, you have the right to deletion of this data and to object to its processing. You also have the right to rectification of data, restriction of processing, data portability, and the right to lodge a complaint with the Austrian Data Protection Authority (Wickenburggasse 8–10, 1080 Vienna, Email: dsb@dsb.gv.at).
10.2. To exercise your rights, please contact us at office@stoffn.at or write to:
Stoff’n Biotech – Stoff’n e.U., attn. Sebastian Reindl, Edt 4, 5205 Schleedorf, Austria