Privacy Policy

1. Introduction

Holz&Gefühl ("we", "us", "our"), located at Unterm Berg 6, 4565 Inzersdorf, Austria, operates the online shop at holzundgefuehl.at. The protection of your personal data and your privacy is important to us. We process your data exclusively in accordance with the General Data Protection Regulation (GDPR) and applicable Austrian data protection laws.

2. What personal data we collect

We collect the following personal data when you use our shop:

Full name and contact details (email address, phone number)
Billing and shipping address
Payment information (processed securely by our payment provider – we do not store card data)
Order history and purchase details
IP address, browser type, and browsing behavior (via cookies)

3. Purpose of data processing and legal bases

We process your personal data for the following purposes:

Contract fulfillment (Art. 6 para. 1 lit. b GDPR): To process and deliver your orders, and to handle returns and complaints.
Legal obligation (Art. 6 para. 1 lit. c GDPR): To comply with tax, accounting, and legal requirements under Austrian law.
Legitimate interests (Art. 6 para. 1 lit. f GDPR): To improve our website, prevent fraud, and ensure the security of our services.
Consent (Art. 6 para. 1 lit. a GDPR): To send marketing communications, provided you have given your explicit consent.

4. Disclosure of your data

We do not sell your personal data to third parties. Data is only transferred to trusted service providers, where necessary for the operation of our shop:

Shipping service providers for the delivery of your orders
Payment providers for secure transaction processing
Shopify Inc. as the operator of our e-commerce platform
Authorities and supervisory bodies, if legally required

All third-party providers are contractually obliged to process your data securely and in full compliance with the GDPR.

5. Retention period

We store your personal data only for as long as necessary for the purposes stated in this declaration or as required by Austrian and EU law. Accounting and financial data are retained for at least 7 years in accordance with Austrian law.

6. Cookies

Our website uses cookies to enhance your browsing experience, analyze website traffic, and support marketing activities. You can manage your cookie settings at any time via the cookie banner on our website or through your browser settings.

7. Your rights under the GDPR

As a data subject within the EU/EEA, you have the following rights regarding your personal data:

Right of access – Request a copy of the personal data we hold about you
Right to rectification – Request the correction of inaccurate or incomplete data
Right to erasure – Request the deletion of your personal data ("right to be forgotten")
Right to restriction of processing – Request the restriction of the processing of your data
Right to data portability – Receive your data in a structured, commonly used, and machine-readable format
Right to object – Object to processing based on legitimate interests or for direct marketing purposes
Right to withdraw consent – Withdraw your consent at any time, without affecting the lawfulness of processing carried out before the withdrawal

To exercise any of these rights, please contact us at holzundgefuehl@proton.me. We will respond to your request within 30 days.

8. Changes to this Privacy Policy

We reserve the right to update this Privacy Policy occasionally to reflect changes in our practices or legal requirements. The most current version will always be available on our website, with the date of the last update at the top of this page.