Privacy policy

This Privacy Policy applies to all contractual partners of the website operator of "www.mira-kreativshop.at"(Mira KreativShop e.U.), as well as to all users and visitors of the website. The contractual partners, users, and visitors hereby confirm that they agree to the processing of their data.

In the following Privacy Policy, we inform you about the most important aspects of data processing within our website. We collect and process personal data exclusively based on legal provisions (General Data Protection Regulation, Telecommunications Act 2003).

 The website operator decides as the controller within the meaning of the General Data Protection Regulation (GDPR) on the purpose and means of data processing and is responsible for ensuring that data processing is carried out in accordance with legal regulations.

Personal Data: When you visit the website, we automatically collect certain information about your device, including information about your web browser, IP address, time zone, and some of the cookies installed on your device. As you browse the website, we also collect information about the individual web pages or products you view, the websites or search terms that referred you to the website, and information about how you interact with the website. We refer to this automatically collected information as "Device Information".

 We collect Device Information using the following technologies:

• "Cookies" are data files that are placed on a device or computer and often include an anonymous unique identifier. For more information about cookies and how to disable cookies, visit http://www.allaboutcookies.org.
• - "Log files" track actions occurring on the website and collect data including your IP address, browser type, Internet service provider, referring/exit pages, and date/time stamps.
• - "Web beacons & tags" and "pixels" are electronic files used to record information about how you browse the website.

Additionally, when you make a purchase or attempt to make a purchase through the website, we collect certain information from you, including your name (first name, last name), company name (if applicable), address (street, postal code, city, country), contact details (email, phone number), VAT number, bank details (IBAN, SWIFT/BIC, bank code, bank account number), website, order details, customer service inquiries, product interests, communication within the purchase contract, emails.

Processing and Use of Data: We generally use the Order Information we collect to fulfil any orders placed through the website (including processing your payment information, arranging for shipping, and providing you with invoices and/or order confirmations).

 Additionally, we use this Order Information to:

- Communicate with you;

- Screen our orders for potential risk or fraud; and

- Provide you with information or advertising relating to our products or services, in line with the preferences you have shared with us.

We use the Device Information that we collect to help us screen for potential risk and fraud (in particular, your IP address), and more generally to improve and optimise our website (for example, by generating analytics about how our customers browse and interact with the website, and to assess the success of our marketing and advertising campaigns).

Data Storage and Data Security: When you submit an inquiry via our contact form or contact us by email or phone, we store the information you provide, including your contact details, to process your inquiry and for any follow-up questions. The data you provide in the contact form will remain in our system until you request us to delete it, withdraw your consent to store it, or the purpose for storing the data no longer applies (e.g., after your inquiry has been fully processed). Legal retention periods remain unaffected.

The data you provide is necessary for the fulfilment of the contract and for carrying out pre-contractual measures. Without this data, we cannot conclude the contract. The collected data will not be transferred to third parties, except for the transfer of payment data to the processing bank institutions/payment service providers for the purpose of debiting the purchase price, to the shipping company commissioned by us to deliver the goods, and to our tax advisor to fulfil our tax obligations.

If you cancel the purchase process, the data stored with us will be deleted. If a contract is concluded, all data from the contractual relationship will be stored until the expiration of the tax retention period (7 years). The transmitted name, address, purchased goods, and purchase date will also be stored until the expiration of product liability (10 years). Data processing is based on the legal provisions of § 96 para. 3 TKG and Art. 6 para. 1 lit. a (consent) and/or lit. b (necessary for contract fulfilment) of the GDPR.

We protect your personal data through appropriate organizational and technical measures. These measures are specifically designed to protect your data from unauthorised or unlawful access, as well as from accidental processing, loss, use, and alteration.

 Despite our continuous efforts to maintain a reasonably high standard of care, we cannot guarantee that the information you transmit to us over the internet cannot be viewed or used by others. We would like to point out that we cannot assume any liability for the disclosure of information due to errors in data transmission not caused by us or unauthorized access by third parties (e.g., hacker attacks on email accounts or telephones). This disclaimer applies to consumers only in cases of slight negligence.

 This website is hosted by an external service provider (host: Shopify). The personal data collected on this website is stored on the host's servers. This may include IP addresses, contact inquiries, meta and communication data, contract data, contact details, names, website accesses, and other data generated via a website. The use of the host is for the purpose of fulfilling the contract with our potential and existing customers (Art. 6 para. 1 lit. b GDPR) and in the interest of a secure, fast, and efficient provision of our online offer by a professional provider (Art. 6 para. 1 lit. f GDPR). Our host will only process your data to the extent necessary to fulfill its performance obligations and follow our instructions regarding this data. For more information on how Shopify uses your personal data, please visit: https://www.shopify.com/legal/privacy.

 We also use Google Analytics to understand how our customers use the website. For more information on how Google uses your personal data, please visit: https://policies.google.com/privacy.

You can disable Google Analytics here: https://tools.google.com/dlpage/gaoptout.

 Data Sharing: The operator undertakes not to share, sell, transfer, or disclose your personal data in any way other than as set out in this Privacy Policy, unless there is a legal obligation or you have expressly consented.

 The sharing of your personal data may occur for the following reasons:

 Sharing with Third Parties: The operator may disclose personal data to law enforcement authorities if there is a suspicion of illegal activities related to the use of the website and a corresponding court order or official directive is in place.

- Disclosure to other third parties is possible if they can credibly demonstrate a legitimate interest in identifying a user and a specific unlawful circumstance and the information is essential for legal prosecution.

 Processors: The operator commissions service providers (within the meaning of the GDPR as processors), particularly for advertising measures, analysis of user behaviour, and integration of third-party services. Contracts are concluded with these service providers in accordance with Article 28 GDPR.

 Transfer to Non-EU/Non-EEA Countries: The operator transfers personal data to recipients outside the EU or EEA only if an adequacy decision by the EU Commission is in place or EU standard contractual clauses have been agreed upon and the transfer is legally permissible. Otherwise, a transfer will only take place with your consent.

 Google Fonts: Our website uses fonts from Google Fonts. The service provider of this function is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. When you visit this website, your browser loads fonts and stores them in the cache. Since you, as a visitor to the website, receive data from the service provider, Google may set or analyze cookies on your computer. The use of Google Fonts serves to optimise our service and ensure a uniform presentation of content. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. For more information on Google Fonts and how Google handles user data, please refer to the relevant privacy policies.

Server Log Files: This website and the associated provider automatically collect information in the form of so-called "server log files" during website use. This includes:

- IP address or hostname

- The browser used

- Duration of stay on the website as well as date and time

- Pages accessed on the website

- Language settings and operating system

- "Leaving page" (which URL the user left the website from)

- ISP (Internet Service Provider)

 This collected information is not processed in a personally identifiable manner or linked to personal data. The website operator reserves the right to evaluate or review this data in the event of becoming aware of illegal activities.

Newsletter: You have the option to subscribe to our newsletter via our website. For this, we need your email address and your declaration that you agree to receive the newsletter. After subscribing to our newsletter, you will receive a confirmation email with a link to confirm your subscription. You can cancel the subscription at any time. Please send the cancellation to our email address: mirakreativshop@gmail.com. Your data related to the newsletter dispatch will be deleted immediately upon cancellation. The legality of the data processing carried out until the revocation, which took place based on the consent, remains unaffected.

Your Rights:As a data subject, you have the right to: access, delete, correct, transfer, withdraw consent, and object to the processing of your data, as well as restrict processing. If you believe that your data protection rights have been violated during the processing of your data, you have the right to lodge a complaint with us (mirakreativshop@gmail.com) or with the data protection authority.

 You can reach us at the following contact details:

- Website Operator: Mira KreativShop e.U.

- Phone Number: 0650 3669401

- Email: mirakreativshop@gmail.com

Vienna, 8.11.2024