Privacy policy

We are very pleased about your interest in our webshop and our services. Data protection is of particular importance to us.

The processing of personal data is always carried out in accordance with the General Data Protection Regulation (GDPR) and in accordance with the Austrian Data Protection Act 2018 (GDPR 2018). By means of this data protection declaration, we would like to inform you about the nature, scope and purpose of the personal data collected, used and processed by us. In addition, we inform you about your rights by means of this data protection declaration.

We, STILAMI GmbH, protect your personal data by means of appropriate technical and organizational measures, which are based on common industry practices.

By using the services offered, you consent to the use of your personal data for the agreed purpose. This constitutes the legal basis for the use of your data according to the General Data Protection Regulation (GDPR, Article 6, paragraph 1, point a).

This privacy policy applies to the use of our website and the services we offer. This includes the use of the STILAMI app necessary for the product.

  1. Who is responsible for your personal data?

We, STILAMI GmbH, are responsible for your personal data in accordance with the provisions of the GDPR and the GDPR 2018.

STILAMI GmbH

Bachstrasse 57

5023 Salzburg

Austria

Tel.: +4369911076876

E-mail:

  1. What personal data are processed?

2.1 We collect your personal data that you voluntarily provide to us – in particular as part of a request for an offer, a contact request, or as part of other contractual arrangements. The personal data provided and transmitted by you are in particular contact data (such as name, address, date of birth, etc.), communication data (such as e-mail addresses, telephone numbers, etc.), payment data (payment information and history), credit and order information.

2.2 We work with processors who process certain data on our behalf. This is done exclusively in accordance with the GDPR and the GDPR 2018. Through careful selection and regular monitoring, we ensure that our processors take all organizational and technical measures necessary to protect your data.

  1. Where is your data stored?

3.1 The data we collect from you is stored within the European Economic Area (EEA), but may be transferred to and processed in a country outside the EEA. Any such transfer of your personal data takes place in compliance with applicable laws. For transfers to countries outside the EEA, we use Standard Contractual Clauses and the Privacy Shield, unless an adequacy decision has been made by the European Commission. The following are our storage methods:

3.2 Cookies

3.2.1 We use cookies. Cookies are small text files that are stored on your device when you visit the site. These cannot transmit viruses or malware to your computer, but they contain information that allows the user to be identified.

3.2.2 With regard to functionality, a distinction must be made between technically necessary cookies, functionality cookies, performance cookies and tracking cookies. Cookies also differ in terms of storage duration and affiliation.

3.2.3 Technically necessary cookies
Technically necessary cookies are necessary for the operation of our website and services as well as their functions. These are usually set in response to an action you have taken. This includes, but is not limited to, registration, login or settings such as language or cookie preferences. It is possible to disable these cookies in the browser. In this case, the error-free functioning of our website and our services can no longer be guaranteed.

3.2.4. Functional cookies
Functionality cookies are used to store information that influences the behaviour or appearance of our website, such as your language preferences or the geographical region from which you access the website. They support the smooth use of our website by saving your user preferences and data during login so that you do not have to re-enter them. The information collected by functional cookies relates exclusively to our website and does not collect any data about your surfing behaviour. The information contained in these cookies is usually anonymised. If you agree to the use of these cookies, they will be stored on your device as described in the Cookie Consent Tool and our Cookie Description.

3.2.5. Performance cookies
Performance cookies help us understand anonymous user behaviour on our website by collecting and analysing information about interactions. These include: (i) sub-pages visited (duration and frequency); (ii) the order of the pages visited, (iii) search terms that led to the use of the website, (iv) mouse movements (scrolling and clicking); and (v) the country and region of access. These cookies allow us to recognise your interests and adapt the website content and features to your individual needs. They do not contain any personal information such as your IP address and cannot be used to identify individual users. If you agree to the placement of these cookies, performance cookies will be stored on your device as described in the Cookie Consent Tool and our Cookie Description.

3.2.6. Tracking cookies
Tracking cookies: These cookies enable the tracking of visitors to websites in order to display relevant and appealing advertising and thereby create added value for the website operator and the advertiser. This is done by analysing user behaviour and displaying personalized advertising based on the identified interests, including information about previously visited websites. If you agree to the placement of these cookies, tracking cookies will be stored on your device as described in the Cookie Consent Tool and our Cookie Description.

3.2.7. Duration of storage
With regard to the storage duration, cookies can be distinguished into session cookies and persistent cookies. Session cookies are automatically deleted as soon as you close the current browser session. Persistent cookies remain stored on your device until a predetermined expiration date is reached or until they are manually deleted.

3.2.8. Affiliation
Cookies can be distinguished according to their affiliation. A distinction is made between first-party and third-party cookies. First-party cookies are used by us and placed directly from our website. Browsers generally do not provide them across domains, which is why the user is only recognized by the page from which the cookie originates. Third-party cookies are not placed by the website operator itself, but by third parties when you visit a particular website, in particular for advertising purposes (e.g. to track surfing behaviour). They allow, for example, the evaluation of different page views and their frequency.

3.2.9. What is the purpose of cookies?
Technically necessary cookies fulfil the essential functions of the website and services. Thus, for example, the saving of the shopping cart while switching to other pages can be secured. In addition, we use cookies to personalize content and ads, offer social media functions and analyse traffic on our website. We also share information about your interaction with our website with our social media, advertising and analytics partners.

Furthermore, cookies ensure the improvement of the quality of the website and services. Cookies store information about how our website and services are used. This information allows us to tailor our services and services to our customers’ preferences in order to provide a better experience. Our respective partners may combine this information with other records either provided by you or collected in the course of using their services. Cookies that are stored on your device as a result of your visit to our website may be set either directly by us or by third parties who provide services to us (third party cookies). The actual content of a particular cookie is always determined by the website that created it.

Cookies contain the following information:

Name of the cookie

Name of the server from which the cookie originates

ID number of the cookie

End date on which the cookie is automatically deleted

The settings options for the most common browsers can be found under the following links:

Internet Explorer™: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies

Edge™: https://support.microsoft.com/de-de/help/4468242/microsoft-edge-browsing-data-and-privacy

Safari™: https://support.apple.com/guide/safari/manage-cookies-and-website-data-sfri11471/mac

Chrome™: https://support.google.com/chrome/answer/95647?hl=de-DE&hlrm=de

Firefox™ https://support.mozilla.org/de/kb/verbesserter-schutz-vor-verfolgung-firefox-desktop?redirectlocale=de&redirectslug=cookies-und-website-daten-in-firefox-loeschen

Opera™: https://help.opera.com/de/latest/web-preferences/#cookies

3.3 Local Storage

3.3.1 If you give us your explicit prior consent pursuant to § 96 para. 3 TKG in conjunction with Art. 6 para. 1 lit. a GDPR, we use the storage capacity of your browser software to improve the usability of our website, its usability and our service in general (e.g. to save your language settings). For this purpose, we use the so-called local storage to store certain data on your terminal device, whereby your browser software maintains a separate local storage for each domain.

3.3.2 Apart from you, only we have access to the data processed by us in this context. Under no circumstances will third parties/websites be able to access/read such data, and we will not combine data in your Local Storage with other data in your Local Storage or with data from different sources. The data stored in the local storage is not used for advertising purposes. Unlike “cookies”, this method is safer and faster because the data is not automatically transmitted to the respective server with each HTTP request, but is stored by your browser software. In addition, a larger amount of data (at least 5 megabytes) can be stored.

3.3.3. Because Local Storage requires JavaScript, disabling JavaScript may prevent websites from accessing it and storing data in this way. You can find JavaScript settings for the most common browsers at https://kb.iu.edu/d/bcyv#edge. Please note, however, that disabling JavaScript may result in significant user-friendliness limitations. Certain features on websites may no longer be fully usable, and controls may no longer function or may only function in a limited manner. JavaScript generally does not pose a security risk, but may be implemented incorrectly on some websites with questionable activity.

3.3.4. If you choose to deny us your consent to use Local Storage, revoke your prior consent (see point 5 lit. e) or disable JavaScript, our website will not be fully functional and will result in a restriction in the provision of our services.

  1. Why do we use your personal data and what is the legal basis for the processing?

4.1 We use your personal data for the following purposes:

  1. Provision of services
    Our website enables quick electronic contact as well as direct communication with us. If you contact us by e-mail or via a contact form, the personal data you provide will be automatically stored. Such personal data provided voluntarily are stored for the purpose of processing or contacting the data subject. We also use the personal data you provide to process your online purchases and to contact you in this regard (sending notifications about delivery status or notifications of problems with the delivery of your items).
  1. Direct advertising
    We use your personal data to send you promotional offers, invitations to participate in surveys, events, etc. by e-mail, SMS, telephone and post. We will send you relevant information, product recommendations, reminders of items in your shopping cart and personalized offers.
  1. Bookkeeping and accounting

  1. Fulfilment of legal obligations
    We use your personal data to comply with legal obligations and to implement court judgments and official decisions. We may also use the information collected to investigate or resolve claims or disputes relating to your use of our Services or for other purposes permitted by applicable law.

4.2 The processing of your personal data takes place on the basis of your express consent and/or on the basis of the existing contractual relationship and/or on the basis of legal requirements.

4.3 The provision of your personal data for the purposes set out in point 4.1. is necessary for the provision of our services. Failure to provide or delete your personal data results, among other things, in the termination of the contractual relationship and no further services can be provided.

  1. Who has access to your data?

5.1 We will transfer your personal data to the data referred to in point 4.1. The purposes mentioned include, but are not limited to, companies to verify your address, communication agencies to send order confirmations, warehousing and distribution providers in connection with the delivery of your order, payment service providers for your payment, collection companies, advertising agencies and technical service providers for physical and digital direct advertising, website agencies and IT companies, public or government agencies, legal representatives, tax consultants, insurance companies and internal business departments that process the data on our behalf. Please note that many of these recipients have an independent right or obligation to process your personal data.

5.2 Your data will not be passed on or sold to third parties for advertising purposes. The transfer of data to third parties serves only to provide the information referred to in point 4.1. the specified uses.

5.3 In addition, external processors employed by us will receive your data if they need it to provide their respective services (the ability to access personal data alone is sufficient). All processors are contractually obliged to treat your data confidentially and to process it only in the context of the provision of services. These include:

Website evaluation/analysis

Amazon Internet Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855, Luxembourg.

Pinata Technologies, Inc., 3555 Farnam St. #905, Omaha, NE 68131, USA.

InterPlanetary File System (IFPS), decentralized peer-to-peer network in open source operation with the core team of Protocol Labs.

5.4 Please note that some of the recipients listed above are located outside the EEA region or process your (personal) data outside the EEA region. In such cases, in the absence of an adequacy decision by the European Commission, we legitimize the transfer to third countries on the basis of standard contractual clauses or other appropriate guarantees within the meaning of Article 46 of the GDPR, which we have agreed with the respective provider accordingly.

  1. How long is your personal data stored?

6.1 The criterion for the duration of the storage of personal data is the respective statutory retention period. After the expiry of the period, the corresponding data will be routinely deleted, insofar as they are no longer necessary for the performance of the contract, for the initiation of the contract or for the assertion or defence of any claims. Your data that you provide to us through customer service (telephone calls, e-mail logs, correspondence) will be stored for 12 months.

6.2 We process and store personal data of the data subject only for the period necessary to achieve the purpose of storage or if this has been provided for by the European legislator or another legislator in laws or regulations to which the controller is subject. If the purpose of storage no longer applies or if a storage period prescribed by the European legislator or another competent legislator expires, the personal data will be blocked or deleted routinely and in accordance with legal requirements.

  1. What rights do you have?

7.1 Right to information:
You have the legal right to request information about your personal data stored by us at any time and to receive a copy of this information. Furthermore, you have the right to request confirmation as to whether personal data concerning you are being processed.

7.2 Right to authorisation:

If your data is incorrect or incomplete, we will correct it on request.

7.3 Right to portability:

If we process your personal data automatically with your consent or pursuant to an agreement to do so, you have the right to request a copy of your data in a structured, commonly used and machine-readable format that is sent to you or another party. This only applies to the personal data that you have provided to us.

7.4 Right to restriction

You have the right to request that we restrict the processing of your personal data in certain circumstances, in particular if you object to processing based on our legitimate interest, if you tell us that your personal data is incorrect, if you object to the erasure of personal data and instead request the restriction of the use of your personal data, and if we no longer need the personal data but it is necessary for you to defend your legal claims.

7.5 Right to erasure:

You have the right to have personal data processed by us erased – insofar as this is legally permissible. In particular, the following cases shall be excluded:

  1. You have placed an order that has not yet been dispatched or only partially dispatched.
  2. You have outstanding payments with us.
  3. You have misused our services in the past five years or there is a suspicion of such misuse.
  4. you have assigned your liabilities to a third party within the last three years.
  5. If you have made purchases, we will retain your personal information related to your transaction in accordance with accounting policies.

You can also withdraw your consent to the use of your data and object to the processing at any time. The processing of your personal data remains lawful until the time of your revocation.

7.6 We will notify you immediately of any breach of personal data protection, insofar as the breach is likely to result in a high risk to your rights and freedoms.

7.7 If you believe that we are not processing your personal data correctly, you may contact us. You also have the right to lodge a complaint with a supervisory authority.

7.8 Contact persons
If you have any questions about the storage or use of your personal data, please contact:

If we are unable to help you, please contact the relevant data protection authority. For Austria this is:

Data protection authority

Barichgasse 40-42

1030 Vienna

E-mail: