A. Devils e.U. (Austria Devils)
Michael Kuntner
Preglstrasse 1
A-4600 Wels
Austria
E-mail: m.kuntner@austria-devils.at
VAT ID: ATU78306879
Company Register Number: FN 583554 v
Commercial Register Court: Regional Court Wels
When placing an order, A. Devils e.U. processes the following personal data of the customer:
• Name
• Address
• Phone number
• Payment data
• Order data
In addition, the following technical data is collected when visiting the website:
• IP address
• Browser type
• Time of access
• Cookies
The collected data is used exclusively for order processing, delivery, payment processing, to improve the website, and, if applicable, for customer support.
Data is only passed on to third parties if necessary for contract fulfillment (e.g., shipping companies, payment service providers).
The data is only stored for as long as it is legally required or necessary for order processing.
The personal data of customers is processed by A. Devils e.U. exclusively for the following purposes:
• Order processing (processing, dispatch, and delivery of goods)
• Payment processing (including verification of payment data)
• Shipping of goods (transfer of relevant data to shipping service providers)
• Customer communication (e.g., email notifications regarding orders, inquiries)
• Fulfillment of legal retention obligations (e.g., accounting and tax law)
• Technical security of the website and shop (e.g., protection against misuse, data security)
A. Devils e.U. processes personal data based on the General Data Protection Regulation (GDPR):
Art. 6 para. 1 lit. b GDPR – Contract fulfillment
Data processing to fulfill the purchase contract, in particular:
• Processing of orders
• Delivery of goods
• Invoicing
Art. 6 para. 1 lit. c GDPR – legal obligations
Data processing for the fulfillment of legal obligations, in particular:
• Accounting obligations
• Retention of invoices according to UStG and BAO
• Reporting to authorities
Art. 6 para. 1 lit. f GDPR – legitimate interest
Data processing to protect legitimate interests, in particular:
• Advertising to existing customers (unless an objection has been raised)
• Fraud prevention
• IT security and system protection
A. Devils e.U. only passes on personal data to the extent necessary for contract fulfillment. This includes, in particular:
• Shipping service providers (for the delivery of goods)
• Payment providers (for processing payments)
• IT and hosting service providers (for the technical provision and security of the online shop)
No data is passed on to other or unauthorized third parties.
A. Devils e.U. uses technically necessary cookies on the website, which are required for the operation of the shop and basic functions (e.g., shopping cart, login, security features).
Optional cookies for analysis, statistics or marketing are only set with the express consent of the user.
Users can revoke their consent at any time via the cookie settings in the browser or via the website. Technically necessary cookies cannot be deactivated, as this would restrict the use of the shop.
A. Devils e.U. stores personal data only as long as it is necessary for the respective contract processing, legal obligations, or legitimate interests:
• Invoice and transaction data: 10 years, according to legal retention obligations (§ 147 AO, UStG).
• Order data: As long as necessary for the fulfillment of legal retention obligations and contract processing (usually 10 years).
• Log data (e.g., IP address, browser type, time): Deleted after 30 days at the latest, unless required for the defense or assertion of legal claims.
• If data is needed longer for statistical or analysis purposes, this is done exclusively anonymously, without personal reference.
As a data subject, you have the right to the following under the General Data Protection Regulation (GDPR):
• Right of access (Art. 15 GDPR)
Users can find out what data is being processed about them.
• Right to rectification (Art. 16 GDPR)
Users can have incorrect or incomplete data corrected.
• Right to erasure (Art. 17 GDPR)
Users can request the deletion of their data (“right to be forgotten”)
• Right to restriction of processing (Art. 18 GDPR)
Users can restrict processing under certain conditions.
• Right to data portability (Art. 20 GDPR)
Users can receive their data in a structured, common format (“portability”).
• Right to object (Art. 21 GDPR)
Users can object to the processing, especially in the case of legitimate interest or direct advertising.
Contact for exercising your rights:
A. Devils e.U. takes all necessary technical and organizational measures to protect personal data from unauthorized access, loss, manipulation, or destruction.
This includes in particular:
• SSL/HTTPS encryption for secure data transfer between user and website.
• Secure servers and regular security updates.
• Access restrictions for employees to personal data according to the principle of least privilege.
Should you believe that the processing of your personal data by A. Devils e.U. violates the GDPR, you have the right to lodge a complaint with the competent data protection authority:
Austrian Data Protection Authority
Barichgasse 40–42
A-1030 Vienna
Austria
Homepage: www.dsb.gv.at
