Stainscare
ENDE
Stainscare

Privacy Policy

Pursuant to Art. 13/14 GDPR, we inform you here about the processing of personal data on stainscare.com.

This English page is a courtesy translation. The German version is legally authoritative; in case of any discrepancy, the German text applies.

1. Controller

[Firmenname], [Adresse], [PLZ Ort], Österreich — Email: info@stainscare.com

No Data Protection Officer has been appointed, as the requirements of Art. 37 GDPR (e.g. large-scale processing of special categories of data or systematic monitoring) do not apply. [If a Data Protection Officer has nonetheless been appointed, add their name and contact details here.]

2. Data Processed & Purposes

  • Account & Order: Name, email, address, order data — for contract fulfillment (Art. 6(1)(b) GDPR).
  • Payment processing: Order data is transmitted to Stripe Payments Europe, Ltd. for payment processing (Art. 6(1)(b) GDPR). Card data is processed exclusively by Stripe and never stored by us. As part of Stripe's corporate structure this may involve data transfer to the USA; Stripe uses the European Commission's Standard Contractual Clauses (SCCs) as a safeguard.
  • Contact form: Name, email, message — to process your inquiry (Art. 6(1)(f) GDPR, legitimate interest in communication).
  • Abuse prevention: The contact form uses local form security, a hidden honeypot and IP-based request limits. The legal basis is our legitimate interest in secure operation (Art. 6(1)(f) GDPR). Google reCAPTCHA is not loaded.
  • Optional advertising measurement and personalised ads: Google Ads is activated only after your choice in the banner (§ 165(3) TKG 2021, Art. 6(1)(a) GDPR). Personalisation is a separate choice. Withdraw at any time using “Cookie settings”.

3. Recipients / Processors

Recipients include Stripe Payments Europe, Ltd. for payments, our hosting/server provider, our email/SMTP provider and, with consent, Google Ireland Limited for Google Ads. Details about Google Ads follow below.

4. Retention Period

Order data is retained in accordance with statutory retention obligations (including § 132 BAO, 7 years). Account content is retained until the account is deleted. Contact inquiries are deleted once no longer needed.

5. Obligation to Provide Data

Providing your data when creating an account and placing an order is necessary to form and fulfil the contract; without this data we cannot process your order. Providing information via the contact form is voluntary. There is no statutory obligation to provide data, but failure to provide contractually required data means the contract cannot be formed or fulfilled.

6. Your Rights

You have the right to access, rectification, erasure, restriction of processing, data portability, and objection. You may revoke any consent given at any time with effect for the future. No automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place. You also have the right to lodge a complaint with the Austrian Data Protection Authority (DSB), Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at.

7. Cookies

Details on the cookie categories we use can be found in our Cookie Policy.

Placeholders in square brackets must be replaced with the actual company details before launch.

Google Ads: advertising measurement and optional personalisation

The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. With consent, online identifiers, IP addresses, browser/device information, visited pages and ad click information are processed to assess our advertising. Additional consent permits personalised advertising and remarketing. Usage data may be linked with a Google account and data from other websites. This integration does not send form entries or email addresses, and enhanced conversions are not enabled. Administrative pages do not load advertising tags. The legal bases are § 165(3) TKG 2021 and Art. 6(1)(a) GDPR. Shopping remains available without consent.

Google LLC may process data in the USA. Google describes the EU-US Data Privacy Framework for certified recipients and, where applicable, standard contractual clauses as transfer mechanisms. The following links explain processing, retention criteria and transfer mechanisms. Retention of data by Google is separate from individual cookie lifetimes.

Privacy (Google) · Cookie details (Google) · Google Data Transfer Frameworks