Data protection regulations of spottle GmbH

Spottle GmbH is a limited liability company based in Salzburg, registered in the commercial register of the Salzburg Commercial Court under FN 527653 k ("spottle GmbH") and operates an online shop on the website (the "Website") . The following data protection regulations apply to all customers who place orders via the spottle GmbH online shop (the "customers").

1. General

These data protection regulations explain the type, scope and purpose of the collection and use of customer data by spottle GmbH.
spottle GmbH will only use details, information and data provided by the customer in accordance with the Austrian and European data protection regulations, these data protection regulations and the customer's consent.

2. Responsible and contact

The person responsible within the meaning of Art 4 Z 7 DSGVO is:

spottle GmbH
FN 527653 k
Halleiner Landesstrasse 53 / 1
5061 Elsbethen

If you have any questions about the collection, processing or use of your personal data, information, correction, blocking or deletion of data and revocation of consent given or objection to a specific use of data, please contact us directly using the contact details in our imprint .

3. Collection of data and purpose of data use

3.1. orders
When ordering goods via the online shop, spottle GmbH collects personal data (name, address, e-mail address, telephone number and billing and payment information).

In addition, at the time your order is sent, your IP address and the date and time of transmission are also saved.

3.2. Newsletter
If you register for our free newsletter on our website, you agree that we will inform you regularly by e-mail about current offers, products and promotions. We need your e-mail address to register.

In addition, your IP address and the date and time of transmission will also be saved at the time your registration is sent.

After submitting the registration form, you will receive an e-mail from us asking for confirmation. Your registration will not take effect until you have clicked on the link in this e-mail.

4. Use and Legal Basis for Data Use

4.1. Based on your consent
- Visit our website
Your consent is the legal basis for storing the above data when visiting the spottle GmbH website. In addition to the aforementioned data, cookies are stored on your device when you visit the website. The details related to the use of

- Cookies are described under Section 7
- Social media plugins under Section 8; and
- Google Analytics under point 10
described in detail.

We use your data as well as the data from the cookies and web tracking tools so that you can use all the functions of our website to their full extent and to design and optimize our website to meet your needs.

- Newsletter
Your consent is the legal basis for the processing of your data for the purpose of sending newsletters.

You have the right to revoke this consent at any time without affecting the legal basis for the processing carried out on the basis of the consent up to the revocation. A revocation of your consent also applies to declarations of consent that were given to us before the GDPR came into force, i.e. before May 25, 2018. Please note that the revocation
only works for the future.

The revocation can be made informally by email to You can also use the unsubscribe link in any email from us that
newsletter contains, use.

4.2. To fulfill contractual or pre-contractual obligations
We process your data to fulfill contractual or pre-contractual obligations:

- Orders
The personal data in connection with orders via our homepage are used for the purpose of fulfilling the contract.

4.3. Based on a legitimate interest
- Email advertising

If you have made a purchase in our online shop, we use the e-mail address you provided in connection with the purchase for service information such as happiness surveys and for advertising our own similar offers by e-mail.

In addition, you will receive information about products from our range that may be of interest to you based on your previous purchases in our online shop. You will receive these recommendations for products regardless of whether you have subscribed to our newsletter. The transmission of this advertising is based on our legitimate interest in staying in touch with our customers.

If you no longer want this, please inform us of your objection in text form to the following e-mail address: . We will stop sending you e-mail advertising immediately after receiving your objection.

- Settlement of legal disputes, assertion, exercise and defense of legal claims (e.g. in connection with rights and obligations under the GDPR).

4.4. Due to legal requirements
spottle GmbH processes personal data in order to be able to comply with legal obligations based on tax law as well as reporting and information obligations to authorities:

- Compliance with legal requirements

Legal requirements are, for example, tax and commercial law storage obligations, existing obligations to carry out monitoring measures to prevent white-collar crime or money laundering.

5. Data Transfer

A transfer of personal customer data to third parties is excluded, unless this is absolutely necessary for the execution of the contract or legal obligations require transfer.

Within spottle GmbH, only those departments that need your data to fulfill their tasks within spottle GmbH, to safeguard legitimate interests or to fulfill contractual and legal obligations will have access to your data.

We also transfer your personal data to the following persons for the following purposes:

- Public bodies

As an exception, spottle GmbH transmits personal data to courts, supervisory authorities, tax authorities and other public bodies due to legal regulations (e.g. in cases of danger prevention or criminal prosecution).

- External service providers (so-called processors)

spottle GmbH works with external service providers in the area of ​​data processing (e.g. in the area of ​​information technology (IT)) in order to be able to use their special expertise. These so-called contract processors only act on the instructions of spottle GmbH and are contractually obliged to comply with the applicable data protection requirements towards spottle GmbH.

6. Transfer to third countries

Data will only be transferred to countries outside the EU or the EEA (so-called third countries) if this is necessary for the execution of your orders, is required by law (e.g. tax reporting obligations) or you have given us your consent (e.g. social media plugins).

7.Cookies _

Cookies are small files that are stored on your data carrier and that save certain settings and data for exchange with our system via your browser. There are basically 2 different types of cookies, so-called session cookies, which are deleted as soon as you close your browser, and temporary/permanent cookies, which are stored on your data medium for a longer period of time or indefinitely. This storage helps us to design our websites and our offers accordingly for you and makes it easier for you to use them, for example by storing certain entries so that you do not have to repeat them constantly.

8. Social Plugins

Our website uses social plugins (“plugins”) from various social networks. With the help of these plugins you can, for example, share content or recommend products. The plugins are deactivated by default on and therefore do not send any data.

If you activate these plugins, your browser will establish a direct connection with the servers of the respective social network as soon as you access a website on our website. The content of the plugin is transmitted directly from the social network to your browser, which integrates it into the website. Of course, the plugins can be deactivated again with one click.

By integrating the plugins, the social network receives the information that you have accessed the corresponding page of our website. If you are logged into the social network, this can assign the visit to your account. If you interact with the plugins, for example by pressing the Facebook "Like" button or by making a comment, the corresponding information is transmitted directly from your browser to the social network and stored there.

The purpose and scope of the data collection and the further processing and use of the data by social networks as well as your rights in this regard and setting options for protecting your privacy can be found in the data protection information of the respective networks or websites. The links to this can be found below.

If you do not want social networks to collect data about you via our website, you must log out of these networks before you visit our website.

Even if you are not logged in to the social networks, data can be sent to the networks from websites with active social plugins. An active plugin sets a cookie with an identifier each time the website is accessed. Since your browser sends this cookie with every connection to a network server without being asked, the network could in principle use it to create a profile of which websites the user belonging to the ID has accessed. And it would then also be possible to assign this identifier to a person again later - for example when logging on to the social network later.

We use the following plugins on our website:

For Facebook, Google+, Twitter, Instagram and Pinterest

The legal basis for using the social plugins is your consent.

If you do not want social networks to collect data about you via active plugins, you can either simply deactivate the social plugins with one click on our website or select the "Block third-party cookies" function in your browser settings. Then the browser does not send any cookies to the server for embedded content from other providers. With this setting, however, other cross-site functions may no longer work apart from the plugins.

9. Further information on the individual social plugins:

9.1. Facebook
We use plugins from the social network, which is operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook"). The link to Facebook's data protection declaration can be found here: Facebook data protection information.

Facebook users should note that Facebook's Website Custom Audiences communication tool is used on this website. For this purpose, so-called Facebook pixels are integrated on our websites, which mark you as a visitor to our website in an anonymous form, i.e. without identifying you as a person. If you are later logged into Facebook, a non-reversible and therefore non-personal checksum (profile) from your usage data will be sent to Facebook for analysis and marketing purposes. For more information about the purpose and scope of the data collection and the further processing and use of the data by Facebook, as well as your setting options to protect your privacy, please refer to Facebook's data protection guidelines, which can be found at and www.facebook .com/privacy/explanation can be found. If you wish to object to the use of Facebook Website Custom Audiences, you can do so at .

9.2. google+
We use plugins from the Google+ social network operated by Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA ("Google"). An overview of Google's plugins and their appearance can be found here:

9.3. Pinterest
We use plugins from the Pinterest social network operated by Pinterest Inc., 635 High Street, Palo Alto, CA, USA ("Pinterest"). The link to Pinterest's privacy policy can be found here: Pinterest privacy policy.

9.4. Instagram
We use plugins from the Instagram social network operated by Instagram, LLC Instagram Inc., 1601 Willow Road, Menlo Park, CA 94025, USA ("Instagram"). You can find the link to Instagram's privacy policy here: Instagram's privacy policy.

10.Google Analytics

"If you give your consent, this website uses Google Analytics, a web analysis service provided by Google Inc. ("Google"). Google Analytics uses so-called "cookies", text files that are stored on your computer and enable an analysis of your use of the website. The information generated by the cookie about your use of this website (including your IP address) is transmitted to a Google server in the USA and stored there. Google will use this information to evaluate your use of the website, to compile reports on website activity for website operators and to provide other services related to website activity and internet usage. Google may also transfer this information to third parties if required to do so by law or if third parties process this data on Google's behalf.

Under no circumstances will Google associate your IP address with other Google data. You can prevent the installation of cookies by not giving your consent when visiting the website or by setting your browser software accordingly; we would like to point out to you however that in this case you can if applicable not use all functions of this website in full. By using this website, you consent to the processing of data about you by Google in the manner and for the purposes set out above. You can object to the collection and storage of data at any time with effect for the future. We would also like to point out that this website uses Google Analytics with the extension "_anonymizeIp()" and therefore IP addresses are only processed in abbreviated form in order to rule out direct personal reference.

The legal basis for using Google Analytics is your consent. If you have configured your browser settings - despite your consent - so that your browser e.g. B. rejects the acceptance of third-party cookies or all cookies, you will not be able to use this website or you will not be able to use all the functions of this website.

11. Data Security

The data transmitted to us by our customers is protected against external interference by our central system with firewalls etc. using state-of-the-art technology.

The transmission of data between the user and spottle GmbH always takes place using SSL/TSL encryption as soon as you use an input mask

12. Duration of storage

spottle GmbH processes and stores your personal data as long as it is necessary to achieve the purpose for which it was collected. If the data are no longer required to achieve the purpose for which they were collected, they will be deleted unless their (temporary) (further) processing is required for the following purposes:

- Statutory retention periods

To comply with the (commercial and tax) statutory periods for storage or documentation from the Austrian Federal Fiscal Code (BAO) and the Austrian Commercial Code (UGB).

- Evidence

To preserve evidence within the statutory limitation periods:

According to the Austrian General Civil Code (ABGB), these limitation periods can be up to thirty years, with the regular limitation period being three years.

In addition, the following applies to storage with regard to individual processes:

- Visiting the site

Your data will always be deleted as soon as the respective session has ended. Log files are deleted after seven days. Storage beyond this is possible in exceptional cases. In this case, however, the IP addresses of the users are deleted or alienated so that it is no longer possible to assign the calling client.

- Newsletter

If you register for our newsletter as a visitor to the website, we use the so-called double opt-in procedure. This means that after you have registered, we will send you an e-mail to the e-mail address provided, in which spottle GmbH will ask you to confirm that you wish the newsletter to be sent. If you do not confirm your registration within 24 hours, your information will be blocked and automatically deleted after one month.

We rely on your consent to send a newsletter until the end of the third calendar year following your consent and will delete your data at the end of this period, unless you then renew your consent.

The additional personal data collected during the sending process (e.g. IP address) will be deleted after a period of seven days at the latest.

13. Privacy Rights

As a data subject, you have the following rights in particular under the GDPR ("data subject rights"):

- Right of providing information:

In accordance with Art. 15 GDPR, you can request information from us as to whether spottle GmbH is processing your personal data and what data this is.

- Right to data rectification:

If your information is incorrect, you can request a correction in accordance with Art. 16 GDPR. If your data is incomplete, you can request a completion. If spottle GmbH has passed on your data to third parties, these third parties will be informed of your correction - insofar as this is required by law.

- Right to erasure of personal data:

You have the right to have your data deleted by spottle GmbH if the requirements of Art. 17 GDPR are met (especially if the purposes for which your data was collected or processed no longer apply).

- Right to restriction of processing:

You have the right to restrict the processing of your data, provided that the requirements of Art. 18 GDPR are met.

- Right to data portability:

Furthermore, if you wish, we will make your data available to you for further use or transmit it to a recipient to be designated by you.

- Right to revoke consent (for more information on how to exercise this, see above, under Section 4.1):

If consent has been given to process the personal data, you have the right to revoke the consent given at any time with effect for the future, ie the revocation does not affect the legality of the processing carried out on the basis of the consent prior to the revocation. After the revocation, spottle GmbH may only further process the personal data to the extent that the processing is still necessary for spottle on the basis of legal requirements.

- Right to object to processing:

According to Art. 21 (1) GDPR, you have the right to object at any time to the processing of personal data relating to you, which is based on Art. 6 (1) sentence 1 lit. f) GDPR (data processing to protect legitimate interests). .

If you file an objection, we will no longer process your personal data for the purposes covered by the objection, unless

- we can demonstrate compelling reasons worthy of protection that outweigh the interests, rights and freedoms of the data subject, or

- the processing serves to assert, exercise or defend legal claims.

If the objection is also or only directed against data processing for direct advertising, we will no longer process your personal data for this purpose.

The objection can be made informally, for example by email to

- Right of appeal:

In addition, there is a right of appeal to the data protection authority (Art. 77 GDPR).

14. No Automated Decision Making

spottle does not use fully automated decision-making within the meaning of Art. 22 GDPR to establish and implement contractual relationships.


15. Method of payment Klarna

In cooperation with Klarna AB (publ), Sveavägen 46, S-11134 Stockholm we offer the following payment options. Payment is made to Klarna in each case:
- Invoice: The payment period is 14 days from the dispatch of the goods. The complete terms and conditions for purchase on account for deliveries to Germany can be found here and for deliveries to Austria here .

- Immediately: Your account will be debited immediately after placing the order.

- Direct debit: The debit takes place after the goods have been shipped. You will be informed of the time by email.
The use of the payment methods invoice and direct debit requires a positive credit check. In this respect, we forward your data to Klarna for the purpose of address and creditworthiness checks as part of the purchase initiation and processing of the purchase contract. Please understand that we can only offer you those payment methods that are permissible based on the results of the credit check. You can find more information and Klarna's terms of use for Germany here and for Austria here . You will receive general information about Klarna here . Your personal information will be processed in accordance with the applicable data protection regulations and in accordance with the information in Klarna's data protection regulations Germany / Austria treated.