🇬🇧 EN

Scope

This Privacy Policy applies to www.vintagewien.at and its subpages. It does not apply to websites controlled by third parties.

Controller & Contact

Company: VintageWien
Address: Elisenstraße 1, A-1010 Vienna, Austria

Legal Bases

We process personal data under the EU General Data Protection Regulation (GDPR), the Austrian Data Protection Act (DSG) and the Austrian Telecommunications Act TKG 2021 (§165).

1) Data processed when you visit our website (server logs)

When you access our site, our servers automatically store: browser type/version, operating system, referrer URL, IP address, date/time of request.

Purpose/Legal basis: website operation, security and fraud prevention (Art. 6(1)(f) GDPR).

Retention: typically up to 30 days (longer only in case of incidents).

2) Data you provide (contact / orders)

If you contact us or place an order, we process identification and contact details and the content of your enquiry/order.

Purpose/Legal basis: contract performance or pre-contractual steps (Art. 6(1)(b) GDPR).

Retention: for the duration of processing and according to statutory retention obligations (e.g., commercial/tax law).

3) Cookies & consent management

We use essential cookies (necessary for the site) and, if you consent, optional cookies (e.g., comfort, statistics, marketing).

Legal basis: consent for non-essential cookies (Art. 6(1)(a) GDPR; TKG 2021 §165).

You can grant/deny consent via the cookie banner and change it anytime via the "Cookie Settings" link in the footer. Essential cookies work without consent.

4) Google Maps

We use Google Maps for address entry assistance and/or map display. Google LLC may receive usage data (including IP address).

Legal basis: your consent (Art. 6(1)(a) GDPR; TKG 2021 §165).

Transfers to third countries: Data may be processed in the USA. Google participates in the EU-US Data Privacy Framework (DPF); Standard Contractual Clauses may also apply. Details: Google Privacy Policy.

5) Recipients & processors

We may share data with service providers (hosting/IT, shipping/payment where applicable) under Art. 28 GDPR and with authorities where legally required. We only engage providers offering adequate safeguards.

6) Retention

We store personal data only as long as necessary for the purposes stated or due to legal obligations (e.g., tax retention periods). Afterwards, data are deleted or anonymised.

7) Security

We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss or misuse.

8) Your rights

You have the right to access, rectification, erasure, restriction, data portability, objection (Art. 21 GDPR), and to withdraw consent at any time with future effect. We respond within one month.

9) Complaint

You may lodge a complaint with the Austrian Data Protection Authority:

Austrian Data Protection Authority: Österreichische Datenschutzbehörde, Barichgasse 40-42, 1030 Vienna, +43 1 52 152-0, dsb@dsb.gv.at.

Data Protection Officer: Not appointed (not legally required for our current processing).

Changes: We may update this Policy; the current version is published here.

Effective date: 10 August 2025