The controller responsible for data processing on this website is:
Supplies Supplies Sporthandels GmbH
Haidgasse 5 / Lokal 9–11
1020 Vienna
Austria
VAT: ATU82997107
Email: hi@supplies-supplies.store
We process personal data in accordance with the General Data Protection Regulation (GDPR) and applicable Austrian data protection laws.
Personal data means any information relating to an identified or identifiable natural person.
When you visit our website, certain information is automatically collected:
IP address
Date and time of access
Browser type and version
Operating system
Referrer URL
This data is necessary to ensure the security, stability, and proper functioning of the website.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest)
Our website is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA.
When you access our website, your data may be processed on Vercel servers. This may involve transfers to countries outside the EU/EEA.
Vercel relies on Standard Contractual Clauses pursuant to Art. 46 GDPR to ensure an adequate level of data protection.
Legal basis: Art. 6(1)(f) GDPR
We use Storyblok GmbH, Peter-Behrens-Platz 2, 4020 Linz, Austria, as a headless content management system (CMS) to manage and deliver website content.
When loading content, technical data such as IP addresses may be transmitted to Storyblok servers.
This processing is necessary to deliver website content efficiently.
Legal basis: Art. 6(1)(f) GDPR
We use Shopify Inc., 151 O’Connor Street, Ottawa, ON K2P 2L8, Canada, to operate our online store.
Product display and shop functionality are implemented via the Shopify Storefront API.
When you proceed to checkout, you are redirected to Shopify’s checkout system.
During checkout, Shopify processes personal data including:
Name
Billing and shipping address
Email address
Payment details
Order information
Shopify acts as an independent controller for payment processing and order handling.
Payments are processed via Shopify and its integrated payment providers (e.g., credit card providers, PayPal, etc.).
Further information: https://www.shopify.com/legal/privacy
Legal basis:
Art. 6(1)(b) GDPR (contract performance)
Art. 6(1)(f) GDPR (technical operation)
To fulfill orders, we process personal data such as:
Name
Address
Email address
Order details
For shipping, your data may be shared with logistics providers (e.g., postal or courier services).
If you select in-store pickup, your data will be used to prepare and hand over your order at our physical store.
Legal basis: Art. 6(1)(b) GDPR
If you subscribe to our newsletter, we process your email address to send updates about products, promotions, and news.
We use Brevo (Sendinblue GmbH / Sendinblue SAS) as our processor under Art. 28 GDPR.
Our newsletters may include tracking technologies (e.g., tracking pixels or personalized links) to measure open and click rates.
Legal basis: Art. 6(1)(a) GDPR (consent)
You may withdraw your consent at any time via the unsubscribe link included in every newsletter.
We only use technically necessary cookies required for the operation and security of the website.
These cookies do not require consent under § 165 TKG 2021 and Art. 6(1)(f) GDPR.
No tracking or marketing cookies are used.
We share personal data only where necessary for the operation of our services:
Hosting provider (Vercel)
Content management system (Storyblok)
E-commerce platform (Shopify)
Email service provider (Brevo)
Shipping providers
Data is shared only to the extent required for service provision and legal obligations.
We retain personal data only as long as necessary:
Order data: according to statutory retention obligations (e.g., tax law)
Newsletter data: until consent is withdrawn
You have the following rights under GDPR:
Right of access (Art. 15 GDPR)
Right to rectification (Art. 16 GDPR)
Right to erasure (Art. 17 GDPR)
Right to restriction of processing (Art. 18 GDPR)
Right to data portability (Art. 20 GDPR)
Right to object (Art. 21 GDPR)
You also have the right to lodge a complaint with a supervisory authority.
Competent authority in Austria:
Austrian Data Protection Authority (Datenschutzbehörde)
If processing is based on your consent, you may withdraw it at any time with effect for the future.
We implement appropriate technical and organizational measures to protect personal data against loss, misuse, and unauthorized access.
We reserve the right to update this Privacy Policy to reflect legal or technical changes.
The current version is always available on our website.