Privacy Policy

1. Introduction

This Privacy Policy explains how MaximZockt Studio Handels GmbH ("we", "our", "us") collects, uses, processes, and protects your personal data when you visit our website or use our services. This policy is compliant with the EU General Data Protection Regulation (GDPR), the Austrian Data Protection Act (Datenschutzgesetz - DSG), and the Austrian Telecommunications Act (Telekommunikationsgesetz - TKG).

2. Data We Collect

2.1 Information You Provide

When you place an order or contact us, we collect:

• Name and contact details (email address)
• Order information (products purchased, quantities, prices)
• Any additional information you choose to provide

2.2 Automatically Collected Information

When you browse our website, we may collect:

• IP address and browser information
• Device type and operating system
• Pages visited and time spent on our site
• Shopping cart contents (stored locally in your browser)
• Cookie preferences and consent status

3. Legal Basis for Processing

Under Article 6 of the GDPR, we process your personal data on the following legal bases:

• Performance of a contract (Art. 6(1)(b) GDPR): Processing necessary to fulfill your orders and provide our services.
• Legitimate interests (Art. 6(1)(f) GDPR): Website functionality, security, and fraud prevention.
• Consent (Art. 6(1)(a) GDPR): Cookie usage as specified in your cookie preferences.
• Legal obligation (Art. 6(1)(c) GDPR): Compliance with Austrian tax and commercial law requirements.

4. How We Use Your Data

We use your personal data for the following purposes:

• Processing and fulfilling your orders
• Communicating with you about your orders and inquiries
• Maintaining the functionality of our website and shopping cart
• Complying with legal and regulatory obligations (tax, accounting)
• Protecting against fraud and security threats

5. Data Storage and Retention

We retain your personal data only for as long as necessary:

• Order data: Retained for 7 years as required by Austrian tax law (Bundesabgabenordnung)
• Email correspondence: Retained for 3 years for legal protection purposes
• Cookie preferences: Stored in localStorage until you clear your browser data
• Shopping cart data: Stored locally on your device only, not on our servers

6. Your Rights Under GDPR

As a data subject, you have the following rights:

• Right of access (Art. 15 GDPR): Request information about personal data we hold about you.
• Right to rectification (Art. 16 GDPR): Request correction of inaccurate or incomplete data.
• Right to erasure ("Right to be forgotten") (Art. 17 GDPR): Request deletion of your personal data where legally permissible.
• Right to restriction of processing (Art. 18 GDPR): Request limitation on how we use your data.
• Right to data portability (Art. 20 GDPR): Receive your data in a structured, machine-readable format.
• Right to object (Art. 21 GDPR): Object to processing based on legitimate interests.
• Right to withdraw consent: Withdraw cookie consent at any time by clearing localStorage or adjusting browser settings.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. All data transmission between your browser and our servers occurs over HTTPS encrypted connections.

8. Data Sharing and Third Parties

We do not sell your personal data to third parties. We may share data with:

• Austrian Postal Service (Österreichische Post AG) — for shipping purposes only
• Austrian tax authorities — as legally required

All service providers are bound by data processing agreements compliant with GDPR Article 28.

9. Cookies and Local Storage

We use cookies and browser localStorage solely for:

• Maintaining your shopping cart contents
• Storing your cookie consent preferences
• Ensuring website functionality

We do not use tracking cookies, analytics cookies, or third-party advertising cookies. For more information, see our Cookie Policy.

10. International Data Transfers

We do not transfer your personal data outside the European Economic Area (EEA). All data is stored and processed within Austria and the EU.

11. Supervisory Authority

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Austrian Data Protection Authority (Österreichische Datenschutzbehörde):

12. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

13. Contact Us

For any questions or concerns regarding this Privacy Policy or our data practices, please contact: