Privacy policy
1. Controller
Die Tüftlerei e.U.
Owner: Adrian Gahbauer
Aichbergsiedlung 4
4775 Taufkirchen an der Pram
Austria
📞 +43 650 5533864
📧 info@die-tueftlerei.eu
2. General information
The protection of your personal data is important to us. We process your data exclusively on the basis of the General Data Protection Regulation (GDPR) and the applicable Austrian data protection laws.
Personal data is any data that can be used to identify you personally (e.g. name, address, email address or IP address).
3. Access data (server log files)
When you visit our website, Shopify automatically processes the following data:
- IP address
- Date and time of access
- Page visited
- Browser and operating system
- Referrer URL
This data is technically necessary to provide the website, ensure its stability and detect misuse or attacks.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest).
4. Hosting via Shopify
Our online shop is operated via Shopify (Shopify International Limited, Ireland).
Shopify processes personal data to provide the shop, process orders, handle billing and ensure system security.
Data may also be transferred to servers outside the EU (e.g. Canada or the USA). Shopify ensures data protection through recognised safeguards (standard contractual clauses and international data protection agreements).
Legal basis:
Art. 6(1)(b) GDPR (contract)
Art. 6(1)(f) GDPR (operation of the shop)
5. Orders & customer accounts
When you place an order with us or create a customer account, we process in particular:
- Name
- Billing and delivery address
- Email address
- Payment method
- Order data
This data is used to process your order and delivery and to meet statutory accounting obligations.
Legal basis: Art. 6(1)(b) GDPR.
6. Payment processing
We offer the following payment methods:
- Credit card (Visa, Mastercard, American Express)
- Apple Pay
- Google Pay
- PayPal
- Shop Pay
- EPS bank transfer
- Bancontact
- iDEAL
Payments are processed via Shopify Payments (Stripe) and PayPal.
Payment data is transmitted directly to the respective payment service provider. We do not receive complete credit card or bank details.
Payment service providers:
- Stripe Payments Europe Ltd. (for credit card, Apple Pay, Google Pay, EPS, Bancontact, iDEAL, Shop Pay)
- PayPal (Europe) S.à r.l. et Cie, Luxembourg
Legal basis: Art. 6(1)(b) GDPR (performance of contract).
7. Shipping with DPD
To deliver your order, we pass on your name, delivery address and – if provided – your email address or phone number to DPD Austria.
This data is used exclusively for delivery and shipping notifications.
Legal basis:
Art. 6(1)(b) GDPR (contract)
Art. 6(1)(a) GDPR (consent for notifications)
8. Protection by hCaptcha
Our website is protected by hCaptcha (Intuition Machines, Inc., USA).
hCaptcha is used to detect and prevent automated access (bots).
The following data, among others, may be processed:
- IP address
- Mouse and touch movements
- Browser and device information
- Time spent on the page
This data is transmitted to hCaptcha and evaluated there.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in protecting the website).
9. Google Analytics (GA4)
We use Google Analytics 4 to evaluate the use of our website statistically.
Google Analytics is only activated if you have given your consent in the cookie banner.
The following data, among others, may be processed:
- Shortened IP address
- Page views
- Time spent on the page
- Device information
Provider: Google Ireland Limited, Ireland.
Legal basis: Art. 6(1)(a) GDPR.
You can withdraw your consent at any time via the cookie banner.
10. Google & YouTube / Google Merchant Center
We use the Google & YouTube app to display products in Google Merchant Center and to run advertising via Google Ads.
Information about purchases and website visits may be processed – only after your cookie consent.
Provider: Google Ireland Limited.
Legal basis: Art. 6(1)(a) GDPR.
11. Judge.me (reviews)
We use Judge.me to display customer reviews and to send review requests by email after orders.
Name, email address and order data are transmitted to Judge.me for this purpose.
Legal basis:
Art. 6(1)(a) GDPR (consent) or
Art. 6(1)(f) GDPR (legitimate interest in customer feedback).
12. Instagram feed
Content from Instagram (Meta Platforms) is embedded on our website to display posts.
When this content is loaded, Meta may collect your IP address and device information.
This content is only loaded after cookie consent.
Legal basis: Art. 6(1)(a) GDPR.
13. Cookies & consent
We use a Shopify cookie consent tool.
Non-essential cookies (analytics, marketing, social media) are only set if you actively consent.
You can change or withdraw your choice at any time.
14. Your rights
You have the right at any time to:
- Access
- Rectification
- Erasure
- Restriction of processing
- Data portability
- Withdrawal of consent given
- Objection to certain processing
You can lodge complaints with the Austrian Data Protection Authority (Datenschutzbehörde).
15. Storage period
We only store personal data for as long as is necessary to perform the contract or meet statutory obligations (e.g. tax and accounting regulations).