PRIVACY POLICY

Froyé vom Licht e.U.

Owner: Edip Göral

The protection of your personal data is of great importance to us. We process your data exclusively on the basis of applicable legal provisions, in particular the General Data Protection Regulation (GDPR), the Austrian Data Protection Act (DSG), and the Telecommunications Act 2021 (TKG 2021).

1. Data Controller

The controller within the meaning of the GDPR is:

Edip Göral
Froyé vom Licht e.U.
Handelskai 98/1
1200 Vienna
Austria

Email: info@froye.at
Phone: +43 664 5074080
Website: https://www.froye.at

2. Data We Process

We process in particular the following personal data:

Order and contact data:

Name, billing address, delivery address, email address, telephone number, order number, and order-related information.

Payment data:

Payment data is generally processed by the respective payment service providers. We do not receive full credit card details.

Technical data:

IP address, browser type, operating system, referrer URL, date and time of access, device information, and server log data.

Communication data:

Content of inquiries sent via email, contact form, or other communication channels.

Newsletter data:

Email address, time of registration, IP address at registration, double opt-in confirmation, and optionally name and interests if voluntarily provided.

3. Purposes of Processing and Legal Bases

We process personal data for the following purposes:

Contract performance pursuant to Art. 6 (1) (b) GDPR:

Processing orders, delivering goods, payment processing, customer communication, and handling returns or complaints.

Legal obligations pursuant to Art. 6 (1) (c) GDPR:

Compliance with tax, commercial, and accounting retention obligations, in particular under § 132 BAO.

Consent pursuant to Art. 6 (1) (a) GDPR:

Newsletter distribution, analytics cookies, marketing cookies, tracking technologies, and similar services where consent is required.

Legitimate interest pursuant to Art. 6 (1) (f) GDPR:

Website security, fraud prevention, technical stability, improvement of our services, handling general inquiries, and asserting legal claims.

4. Shopify

Our website and online shop are operated via Shopify.

Personal data may be processed by Shopify International Ltd., Shopify Inc., and other affiliated companies. Processing may take place within the European Union, Canada, and the United States.

Shopify processes data for purposes including shop system provision, hosting, shopping cart functionality, checkout, order processing, security features, and technical infrastructure.

For data transfers to third countries, Shopify uses appropriate safeguards, including Standard Contractual Clauses and/or recognized data protection frameworks.

Further information can be found in Shopify’s privacy policy:

https://www.shopify.com/legal/privacy

5. Server Log Files

When visiting our website, technical information is automatically processed, so-called server log files. This includes in particular IP address, browser type, operating system, referrer URL, date and time of access.

Processing is carried out to ensure the technical functionality, stability, and security of the website on the basis of our legitimate interest pursuant to Art. 6 (1) (f) GDPR.

6. Payment Service Providers

For payment processing, we use external payment service providers. Processing is carried out for the performance of the contract pursuant to Art. 6 (1) (b) GDPR.

Depending on the selected payment method, data may be transmitted to the following providers:

Klarna Bank AB:

When using Klarna payment methods, personal data such as name, address, email address, telephone number, payment information, and order data may be transmitted to Klarna. Klarna may process data for payment handling and, where applicable, identity and credit checks.

Shopify Payments / Stripe:

Where Shopify Payments or Stripe are used, payment data is processed by the respective provider. We do not receive full credit card details.

PayPal:

If PayPal is offered as a payment method, payment data is processed by PayPal.

Apple Pay / Google Pay:

If these methods are offered, payment processing is carried out by the respective providers.

The respective providers’ privacy policies also apply.

Note:

If any of the above payment methods are not offered, the respective section must be removed before publication.

7. Shipping Providers

To deliver orders, we transmit the necessary data, in particular name, delivery address, and optionally telephone number or email address, to shipping providers.

Possible shipping providers include in particular:

Austrian Post AG
DHL

The transfer is carried out for contract fulfillment pursuant to Art. 6 (1) (b) GDPR.

8. Shipping to Germany and Packaging Act

If we deliver goods to Germany, data may be transmitted to licensing, registration, or disposal partners as required to comply with obligations under the German Packaging Act.

This section only applies if deliveries to Germany are actually offered.

9. Cookies and Consent Management

Our website uses cookies and similar technologies.

Technically necessary cookies are required for the operation and functionality of the online shop, including shopping cart, checkout, login, security, and core shop features.

Analytics and marketing cookies are only set if you have given explicit consent via our consent tool.

You may withdraw or adjust your consent at any time via the cookie settings in the footer of our website.

Further information can be found in our Cookie Policy.

10. Google Analytics

Our website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics helps us understand how visitors use our website. Information such as page views, time spent, device type, approximate location, browser information, and interactions may be processed.

Processing is based solely on your consent pursuant to Art. 6 (1) (a) GDPR.

Data may be transferred to Google LLC in the United States. Google uses appropriate safeguards for such transfers.

Where possible, we use privacy-friendly settings, including IP anonymization.

You may withdraw your consent at any time via the cookie settings.

11. Meta Pixel

If you have consented, we use the Meta Pixel provided by Meta Platforms Ireland Ltd., Merrion Road, Dublin 4, D04 X2K5, Ireland.

The Meta Pixel is used to measure the effectiveness of advertising campaigns and may be used to display relevant ads on Meta platforms, including Facebook and Instagram.

Data such as website visits, interactions, orders, device information, and IP addresses may be processed.

Processing is based solely on your consent pursuant to Art. 6 (1) (a) GDPR.

Data may be transferred to Meta Platforms Inc. in the United States. Meta uses appropriate safeguards for such transfers.

You may withdraw your consent at any time via the cookie settings.

Note: If Meta Pixel is not used, this section must be removed before publication.

12. Newsletter

If you subscribe to our newsletter, we process your email address and optionally your name and other voluntarily provided information to send you updates about products, offers, news, and promotions.

Registration is carried out using a double opt-in process.

Processing is based on your consent pursuant to Art. 6 (1) (a) GDPR and § 174 TKG 2021.

You may withdraw your consent at any time via the unsubscribe link or by contacting us.

For newsletter distribution, we use:

Shopify

Personal data may be transmitted to this provider. Additional terms apply.

13. Contact

If you contact us by email, contact form, or otherwise, we process the data you provide to handle your request and any follow-up questions.

Processing depends on the context and is based on Art. 6 (1) (b) or Art. 6 (1) (f) GDPR.

14. Customer Account

If you create a customer account, we process your data to manage your account, display orders, and facilitate future purchases.

Processing is based on contract performance pursuant to Art. 6 (1) (b) GDPR.

You may request deletion of your account at any time, provided no legal retention obligations apply.

15. AI-Generated Content

For visual design purposes, AI-generated images or illustrations may be used in our online shop.

We do not input personal customer data into AI systems to generate content unless there is a separate legal basis or explicit consent.

AI-generated content is used solely for decorative, design, or atmospheric purposes.

16. Data Retention

We store personal data only as long as necessary for the respective purposes or as required by law.

Tax-relevant data:

7 years pursuant to § 132 BAO.

Order and contract data:

For the duration of statutory retention and warranty periods.

Customer accounts:

Until deletion by the customer, unless legal retention obligations apply.

Contact inquiries:

Up to 6 months after final processing, unless longer storage is required for legal claims.

Newsletter data:

Until withdrawal of consent or unsubscription.

Cookie consent data:

For the duration specified in the consent tool.

17. Data Security

We implement appropriate technical and organizational measures to protect personal data against loss, manipulation, unauthorized access, and misuse.

18. Your Rights

Under the GDPR, you have the following rights:

Right of access
Right to rectification
Right to erasure
Right to restriction of processing
Right to data portability
Right to withdraw consent
Right to object to processing

You also have the right to lodge a complaint with the Austrian Data Protection Authority:

Austrian Data Protection Authority
Barichgasse 40–42
1030 Vienna
Austria

Website: https://www.dsb.gv.at