1. Controller
Feinewolle – Stoffe, Wolle & Kurzwaren (Inhaberin: Vorname Nachname), Hauptstraße 55, 4040 Linz-Urfahr, Austria, email: info@feinewolle.com, phone: +43 676 529 44 56.
2. General
We process personal data under the General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (DSG), only to the extent necessary to provide our online shop, to process orders or on the basis of your consent. The legal bases are in particular Art. 6 (1) (a) (consent), (b) (contract), (c) (legal obligation) and (f) GDPR (legitimate interest).
3. Hosting and server log files
Our website is hosted by Vercel Inc.; the servers are located in Frankfurt am Main. When you visit it, technically necessary data (IP address, date and time, page requested, browser) is processed in server log files to ensure security and stability (Art. 6 (1) (f) GDPR). A data processing agreement is in place.
4. Cookies
We only use technically necessary cookies: cart (feinewolle_cart), wishlist (feinewolle_wishlist), sign-in (feinewolle.session-token), language (NEXT_LOCALE) and your cookie choice (feinewolle_consent). Legal basis: § 165 (3) Telecommunications Act 2021 (TKG 2021). External content (maps) is only loaded with your consent. You can change your choice at any time via “Cookie settings” in the footer.
5. Orders and customer account
To process your order we process your name, address, email address, phone number if provided, and order and payment data (Art. 6 (1) (b) GDPR). We pass name and address to the shipping company (Österreichische Post AG). If you create an account, we store your data until the account is deleted. The statutory seven-year retention period for accounting records (§ 132 BAO) remains unaffected.
6. Payment processing via Stripe
Payments are processed by Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Dublin, Ireland. Depending on the payment method, data is also transmitted to PayPal, Klarna, Apple, Google or your bank (eps transfer). Legal basis: Art. 6 (1) (b) GDPR. More information: stripe.com/privacy.
7. Newsletter
We use the double opt-in procedure. We store your email address and the time of sign-up and confirmation (Art. 6 (1) (a) GDPR). You can unsubscribe at any time.
8. Contact form, email and WhatsApp
If you contact us, we process your details to handle your request and delete them as soon as they are no longer required. If you message us on WhatsApp, WhatsApp Ireland Limited also processes your message and phone number under its own privacy policy.
9. Maps (OpenStreetMap)
On the “Our store” page you can load an OpenStreetMap map after giving your consent. Your IP address is transmitted to the OpenStreetMap Foundation.
10. Your rights
You have the right of access, rectification, erasure, restriction, data portability and objection (Art. 15–21 GDPR). You can withdraw consent at any time with effect for the future, and you have the right to lodge a complaint with the Austrian Data Protection Authority, Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at.
11. Data security
All data is transmitted encrypted (TLS). Passwords are only stored as a secure hash.