Privacy Policy

The data controller is:

Max Semler
Spiegelgasse 11
1010 Vienna
Austria
office@maxsemler.at

We are pleased that you are interested in our online shop. Protecting your privacy is very important to us. Below we provide detailed information about how we handle your data.

1. Access Data and Hosting

You can visit our websites without providing any personal data. Each time a website is accessed, the web server automatically saves a so-called server log file, which includes, for example, the name of the requested file, your IP address, the date and time of the request, the amount of data transferred, and the requesting provider (access data) and documents the access. These access data are only evaluated to ensure the smooth operation of the website and to improve our offerings. This serves the protection of our legitimate interests in a correct display of our offerings in accordance with Art. 6(1) Sentence 1 lit. f GDPR. All access data will be deleted at the latest seven days after the end of your visit to the page.

Hosting
The services for hosting and displaying the website are partially provided by our service providers as part of processing on our behalf. Unless otherwise explained in this privacy policy, all access data and all data collected in the forms provided on this website are processed on their servers. If you have any questions about our service providers and the basis of our collaboration with them, please contact us using the contact details described in this privacy policy.

2. Data Processing for Contract Execution, Contacting Us, and Opening a Customer Account

We collect personal data when you provide them to us voluntarily during your order or when you contact us (e.g., via contact form or email). Mandatory fields are marked as such, as we need the data for contract execution or to process your contact request, and without providing this data, you cannot send the order or contact us. The data collected is visible in the respective input forms. We use the data you provide for contract execution and processing your inquiries in accordance with Art. 6(1) Sentence 1 lit. b GDPR.
If you consent to the opening of a customer account in accordance with Art. 6(1) Sentence 1 lit. a GDPR, we use your data for the purpose of creating the customer account. Further information about the processing of your data, especially concerning the transfer to our service providers for order, payment, and shipping processing, can be found in the subsequent sections of this privacy policy. After the full execution of the contract or deletion of your customer account, your data will be restricted for further processing and deleted after the expiration of the tax and commercial retention periods according to Art. 6(1) Sentence 1 lit. c GDPR, unless you have expressly consented to further use of your data according to Art. 6(1) Sentence 1 lit. a GDPR or we reserve further data use that is legally permissible and about which we inform you in this policy. Deletion of your customer account is possible at any time and can be done by sending a message to the contact option described in this privacy policy or through a corresponding function in the customer account.

3. Data Processing for Shipping

For the fulfillment of the contract according to Art. 6(1) Sentence 1 lit. b GDPR, we will transfer your data to the shipping service provider responsible for delivery, as far as necessary to deliver the goods you have ordered.

4. Data Processing for Payment Processing

In the processing of payments in our online shop, we work with these partners: technical service providers, payment service providers.

4.1 Data Processing for Transaction Processing

Depending on the selected payment method, we transfer the necessary data for processing the payment transaction to our technical service providers, who act as processors for us, or to the selected payment service provider, as far as necessary for processing the payment. This serves the fulfillment of the contract according to Art. 6(1) Sentence 1 lit. b GDPR. Some payment service providers collect the data necessary for processing the payment themselves, for example, on their own website or through a technical integration in the order process. In this case, the privacy policy of the respective payment service provider applies. For questions regarding our partners for payment processing and the basis of our collaboration with them, please contact us using the contact details described in this privacy policy.

Our payment service providers are located in the USA. For this country, no adequacy decision by the European Commission exists. Our cooperation with them is based on these guarantees: Standard Contractual Clauses of the European Commission.

4.2 Data Processing for Fraud Prevention and Optimization of Payment Processes

If necessary, we provide our service providers with additional data, which they use, together with the data necessary for processing the payment, as processors for us for fraud prevention and optimization of our payment processes (e.g., invoicing, handling disputed payments, supporting accounting). This serves, in accordance with Art. 6(1) Sentence 1 lit. f GDPR, the protection of our legitimate interests in securing against fraud and efficient payment management.

5. Cookies and Other Technologies

General Information
In order to make your visit to our website more attractive and enable the use of certain functions, we use various technologies, including so-called cookies. Cookies are small text files that are automatically stored on your device. Some of the cookies we use are deleted after the end of the browser session (so-called session cookies). Other cookies remain on your device and allow us to recognize your browser on your next visit (persistent cookies).
We use such technologies that are essential for using certain functions of our website (e.g., shopping cart function). These technologies collect and process your IP address, visit time, device and browser information, and information about your use of our website (e.g., information about the content of the shopping cart). This serves, in the context of an interest balancing, the protection of our legitimate interests in the optimized display of our offerings in accordance with Art. 6(1) Sentence 1 lit. f GDPR.

We also use technologies to fulfill the legal obligations we are subject to (e.g., to be able to prove consent to the processing of your personal data) as well as for web analysis and online marketing. Further information about these technologies and the legal basis for data processing can be found in the following sections of this privacy policy.

You can find the cookie settings for your browser under the following links: Microsoft Edge™ / Safari™ / Chrome™ / Firefox™ / Opera™
If you have consented to the use of technologies according to Art. 6(1) Sentence 1 lit. a GDPR, you can withdraw your consent at any time by sending a message to the contact option described in this privacy policy.

6. Use of Cookies and Other Technologies for Web Analysis and Advertising Purposes

If you have given your consent in accordance with Art. 6(1) Sentence 1 lit. a GDPR, we use the following cookies and other technologies from third parties on our website. After the purpose has ended and the use of the respective technology by us has ceased, the data collected in this context will be deleted. You can withdraw your consent at any time with effect for the future. Further information about your options to withdraw consent can be found in the section "Cookies and Other Technologies". Further information, including the basis of our collaboration with the individual providers, can be found with each technology. For questions about the providers and the basis of our collaboration with them, please contact us using the contact details described in this privacy policy.

6.1 Use of Google Services

We use the following technologies from Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). The information automatically collected by the Google technologies about your use of our website is usually transmitted to a server of Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA, and stored there. For the USA, no adequacy decision by the European Commission exists. Our cooperation is based on Standard Contractual Clauses of the European Commission. If your IP address is collected through the Google technologies, it will be shortened before being stored on Google's servers by activating IP anonymization. Only in exceptional cases will the full IP address be transmitted to a Google server and shortened there. If nothing is stated otherwise for the individual technology, the data processing is carried out based on an agreement between joint controllers in accordance with Art. 26 GDPR. Further information about the data processing by Google can be found in Google's privacy policy.

Google Analytics
For website analysis, data (IP address, visit time, device and browser information, as well as information about your use of our website) is automatically collected and stored through Google Analytics, from which pseudonymous usage profiles are created. Cookies may be used for this purpose. Your IP address is generally not merged with other Google data. The data processing is carried out based on an agreement about data processing between Google.

Google Fonts
To ensure uniform display of content on our website, data (IP address, visit time, device and browser information) is collected through the script code "Google Fonts", transmitted to Google, and then processed by Google. We have no control over this subsequent data processing.

6.2 Use of Facebook Services

Use of Facebook Pixel
We use the Facebook Pixel as part of the following technologies of Facebook Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland ("Facebook"). With the Facebook Pixel, data (IP address, visit time, device and browser information, and information about your use of our website based on predefined events, such as visiting a website or signing up for a newsletter) is automatically collected and stored, from which pseudonymous usage profiles are created. For this purpose, when visiting our website, the Facebook Pixel automatically sets a cookie, which allows the recognition of your browser on other websites via a unique ID. This enables Facebook to display personalized ads to you on their platform and across other websites based on your visit to our website. The data processing is done based on an agreement between joint controllers according to Art. 26 GDPR.
For more information about data processing by Facebook, please refer to Facebook’s Privacy Policy.

7. Your Rights

You have the right to:

• Request confirmation as to whether we are processing personal data relating to you, and if so, request access to the personal data and further information about the processing (Art. 15 GDPR).

• Request the correction of incorrect or incomplete data (Art. 16 GDPR).

• Request the deletion of your data, under the conditions set out in Art. 17 GDPR.

• Request the restriction of processing, under the conditions set out in Art. 18 GDPR.

• Receive the personal data concerning you, which you have provided to us, in a structured, commonly used, and machine-readable format, and transmit those data to another controller (Art. 20 GDPR).

• Object to the processing of your data, under the conditions set out in Art. 21 GDPR.

If you have given your consent to the processing of your personal data, you can withdraw this consent at any time with effect for the future.

To exercise your rights, please contact us using the contact details provided in this Privacy Policy.

8. Right to Lodge a Complaint with a Supervisory Authority

You have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data is in violation of the GDPR. The competent supervisory authority is the Austrian Data Protection Authority (Datenschutzbehörde), Wickenburggasse 8, 1080 Vienna, Austria.

9. Data Security

We use appropriate technical and organizational security measures to protect your personal data from unauthorized access, misuse, or loss. However, we cannot guarantee absolute security, as the transmission of data over the internet is always subject to some risk.

10. Changes to this Privacy Policy

We reserve the right to modify this Privacy Policy at any time in accordance with the applicable data protection laws. Any changes will be posted on this page, and where appropriate, notified to you via email.

​