Privacy Policy

1. Data Controller

The controller responsible for the processing of personal data on this website and in connection with the sale of products is:

E-Mail: makidudel@gmail.com
Phone: +43 677 62342440

2. General Information

The protection of your personal data is important to me. In this privacy policy, I inform you about which personal data is processed in connection with the website tongue-out.team and the ordering of products.

Personal data is any information that can be used to identify a person directly or indirectly, such as a name, email address, shipping address, or IP address.

We generally process personal data only to the extent necessary to provide the website, process orders, communicate with customers, comply with legal obligations, or based on another legal basis under the GDPR, with the exception of services operated by Shopify, such as the checkout area.

3. Accessing the Website

When visiting our website, technically required information may be processed that is necessary for the provision and security of the website. This may include in particular:

• IP address
• Date and time of access
• Pages or files accessed
• Browser type and browser version
• Operating system
• Technical information about the terminal device used
• Information on the volume of data transferred

This processing serves in particular the technical provision, stability, and security of the website.

The technical infrastructure of the website uses services provided by Cloudflare. Technical access data, including IP addresses, may be processed in the course of providing and securing the website. Cloudflare itself describes the processing of IP addresses and other technical data in its log files.

4. No Own Analytics or Ad Tracking

No proprietary analytics or advertising tracking services, such as Google Analytics, Meta Pixel, or comparable tracking systems, are used on our own website. We therefore do not perform any visitor analysis based on such tracking services.

5. Cookies and Similar Technologies

No non-essential cookies for analytics or advertising purposes are used on the website itself. Technical storage or access technologies may be required for technically necessary functions.

When using the shopping cart and especially when switching to checkout, services provided by Shopify and the respective payment service providers used will be integrated. These services use their own cookies and similar technologies for analytics and marketing purposes.

Processing within the functions provided by Shopify is additionally subject to Shopify's privacy and cookie policy. Shopify provides merchants with its own privacy and cookie consent settings and points out that the Shopify cookie banner can also affect the storefront, shopping cart, and checkout.

6. Shopping Cart and Order Processing via Shopify

We use Shopify functions to display the shopping cart and process orders. In doing so, personal data required for executing an order is processed. This may include in particular:

• First and last name
• Email address
• Billing address
• Shipping address
• Phone number, if provided
• Ordered products
• Order number
• Time of order
• Payment and transaction information
• Technical information, insofar as necessary for processing and security

Shopify may process personal customer data as a data processor in the context of providing these functions. Shopify lists, among other things, name, email address, billing and shipping data, transaction data, as well as device and IP data as possible categories of customer data.

The processing is carried out in particular for the performance of the purchase contract and to provide the shopping cart and checkout.

7. Payment Processing

Depending on the selected payment method, payment data is transmitted to the respective payment service provider used.

When using PayPal, payment processing is handled by PayPal. PayPal may process its own personal data, cookies, and comparable technologies for payment processing, security, and other proprietary purposes.

Processing by PayPal is additionally governed by PayPal's privacy policy and cookie settings.

We generally receive only the information from payment service providers that is required for the processing and assignment of the payment or order.

8. Shipping

For the delivery of ordered goods, the data required for shipping is sent to me so that shipping can be carried out. This applies in particular to:

• First and last name
• Shipping address
• Where applicable, email address or phone number, provided this is required for delivery

The transmission takes place for the performance of the purchase contract.

9. Contacting Us

If you contact us by email, we process the personal data you transmit, in particular your email address, your name if provided, and the content of your message.

The processing takes place to process and answer your inquiry and, if applicable, to take steps prior to entering into a contract or to perform a contract.

10. Legal Bases

The processing of personal data is carried out, where applicable, on the basis of the following legal grounds:

• Art. 6(1)(b) GDPR – Processing necessary for the performance of a contract or in order to take steps prior to entering into a contract;
• Art. 6(1)(c) GDPR – Processing necessary for compliance with a legal obligation;
• Art. 6(1)(f) GDPR – Processing based on legitimate interests, in particular for the technical provision and security of the website;
• Art. 6(1)(a) GDPR – Processing based on consent, insofar as such consent was required and obtained.

For storing or accessing information on terminal devices, the relevant provisions of Austrian telecommunications law apply additionally.

11. Recipients of Personal Data

Personal data may be transmitted to or processed by the following categories of recipients, insofar as necessary for the respective purposes:

• Shopify or service providers affiliated with Shopify
• Payment service providers, in particular PayPal, if selected by you
• Shipping service providers
• Technical service providers for hosting, DNS, CDN, and security
• Tax advisors or other service providers subject to a professional duty of confidentiality, where necessary
• Authorities and other public bodies, provided there is a legal obligation

The respective service providers receive only those data required to perform the respective service.

12. Shopify and International Data Processing

Shopify processes personal data depending on the service used both as a data processor and, for certain proprietary services, as an independent data controller. For merchants in Europe, Shopify International Limited, based in Ireland, is generally the relevant contracting entity, unless agreed otherwise.

Shopify also states that personal data may be processed by affiliated companies and sub-processors. For international data transfers, Shopify uses the legally designated data transfer mechanisms.

13. Cloudflare

Services from Cloudflare may be used for technical infrastructure, DNS, content delivery, and security functions. Cloudflare may process, among other things, IP addresses, technical device information, and information about requested URLs within the framework of its technical services.

14. Domain Management

The domain tongue-out.team is managed via Domaintechnik. Domaintechnik is operated by Ledl.net GmbH & Co. KG, Lederergasse 6, 5204 Straßwalchen, Austria. Technical and personal data required for this purpose may be processed in the context of domain management.

15. GitHub

The source code of the website is managed via GitHub. However, the public website is not operated by visitors accessing GitHub directly. The mere storage of the source code in a GitHub repository does not mean that personal data is automatically transmitted to GitHub with every website visit.

16. Storage Period

Personal data is stored only for as long as necessary for the respective purpose. In addition, statutory retention and documentation obligations may exist. In such cases, the relevant data will be stored for the period prescribed by law. Data that is no longer required for further processing and for which there is no legal retention obligation will be deleted.

17. Your Rights

Under statutory conditions, you have in particular the following rights:

• Right of access
• Right to rectification
• Right to erasure ("right to be forgotten")
• Right to restriction of processing
• Right to data portability
• Right to object
• Right to withdraw consent granted

The Austrian Data Protection Authority confirms these data subject rights and points out that corresponding requests must generally be answered within one month.

To exercise your rights, you can contact us at any time at the following email address:

makidudel@gmail.com

18. Right to Lodge a Complaint

If you believe that the processing of your personal data violates data protection law, you have the right to lodge a complaint with the competent data protection supervisory authority. In Austria, this is:

19. Data Security

We implement appropriate technical and organizational measures to protect personal data against loss, misuse, unauthorized access, alteration, or disclosure. However, complete security for data transmission over the internet cannot be guaranteed.

20. Changes to this Privacy Policy

This privacy policy may be updated if the website, the services used, or legal requirements change. The version published at the time of your visit shall apply.