This Privacy Policy applies to www.vintagewien.at and its subpages. It does not apply to websites controlled by third parties.
We process personal data under the EU General Data Protection Regulation (GDPR), the Austrian Data Protection Act (DSG) and the Austrian Telecommunications Act TKG 2021 (§165).
When you access our site, our servers automatically store: browser type/version, operating system, referrer URL, IP address, date/time of request.
Purpose/Legal basis: website operation, security and fraud prevention (Art. 6(1)(f) GDPR).
Retention: typically up to 30 days (longer only in case of incidents).
If you contact us or place an order, we process identification and contact details and the content of your enquiry/order.
Purpose/Legal basis: contract performance or pre-contractual steps (Art. 6(1)(b) GDPR).
Retention: for the duration of processing and according to statutory retention obligations (e.g., commercial/tax law).
We use essential cookies (necessary for the site) and, if you consent, optional cookies (e.g., comfort, statistics, marketing).
Legal basis: consent for non-essential cookies (Art. 6(1)(a) GDPR; TKG 2021 §165).
You can grant/deny consent via the cookie banner and change it anytime via the "Cookie Settings" link in the footer. Essential cookies work without consent.
We use Google Maps for address entry assistance and/or map display. Google LLC may receive usage data (including IP address).
Legal basis: your consent (Art. 6(1)(a) GDPR; TKG 2021 §165).
Transfers to third countries: Data may be processed in the USA. Google participates in the EU-US Data Privacy Framework (DPF); Standard Contractual Clauses may also apply. Details: Google Privacy Policy.
We may share data with service providers (hosting/IT, shipping/payment where applicable) under Art. 28 GDPR and with authorities where legally required. We only engage providers offering adequate safeguards.
We store personal data only as long as necessary for the purposes stated or due to legal obligations (e.g., tax retention periods). Afterwards, data are deleted or anonymised.
We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss or misuse.
You have the right to access, rectification, erasure, restriction, data portability, objection (Art. 21 GDPR), and to withdraw consent at any time with future effect. We respond within one month.
You may lodge a complaint with the Austrian Data Protection Authority:
Data Protection Officer: Not appointed (not legally required for our current processing).
Changes: We may update this Policy; the current version is published here.
Effective date: 10 August 2025