The protection of your personal data is of particular concern to us. We process your personal data exclusively on the basis of the legal provisions of the GDPR and the Austrian Data Protection Act (DSG).
Controller responsible for data processing
Mitraco GmbH
Heiligenstädter Straße 51
A-1190 Vienna
AUABestellungen@mitraco.com
Server Log Files
When visiting our website, information is automatically collected and stored by the web server:
- IP address
- Date and time of access
- Pages accessed
- Browser type and operating system
- Referrer URL
This data cannot be assigned to specific individuals and is used exclusively for technical monitoring, security, and optimization of the webshop.
Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest)
Collection and Processing of Personal Data
Personal data is only processed if you voluntarily provide it to us, particularly in the context of:
- placing an order in the webshop
- creating a customer account
- subscribing to the newsletter
- contacting us by email
The following data is processed in particular:
- Name, address
- Email address
- Order and payment methods
- IP address (technically required)
Purpose of Data Processing & Legal Bases
Your data is processed for the following purposes:
- Contract fulfillment & order processing
(Art. 6 para. 1 lit. b GDPR)
- Fulfillment of legal obligations
(Art. 6 para. 1 lit. c GDPR)
- Newsletter & advertising (only with consent)
(Art. 6 para. 1 lit. a GDPR)
- Operation & security of the webshop
(Art. 6 para. 1 lit. f GDPR)
Disclosure of Personal Data
Your data is only disclosed if this is necessary for contract processing, e.g. to:
- Shipping and logistics companies
- Payment service providers and banks
- Hosting and IT service providers (Webworks)
These service providers act as data processors and are contractually obliged to comply with the GDPR.
Storage Period
We store personal data only for as long as necessary to fulfill the respective purpose of processing or as long as statutory retention obligations exist (in particular retention periods under commercial and tax law of 6 or 10 years). After expiry of the respective periods, the data will be deleted unless it is still required for contract fulfillment or contract initiation.
Cookies
Our webshop uses cookies.
a) Technically Necessary Cookies
These cookies are required for the operation of the webshop (e.g. shopping cart, login) and cannot be deactivated.
Newsletter
If you subscribe to our newsletter:
- registration is carried out using the double opt-in procedure
- your email address is used exclusively for our own advertising purposes
- you can unsubscribe at any time
Withdrawal of consent is effective for the future.
Your Rights
You have the right at any time to:
- Access (Art. 15 GDPR)
- Rectification (Art. 16 GDPR)
- Erasure (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Withdrawal of consent given (Art. 7 GDPR)
- Lodge a complaint with the Austrian Data Protection Authority,
Barichgasse 40–42, 1030 Vienna
(Tel. +43 1 52 152-0, Email: dsb@dsb.gv.at)
Data Security
Your data is transmitted in encrypted form using SSL.
We protect our systems against unauthorized access through technical and organizational measures.
Changes
We reserve the right to amend this privacy policy if necessary.