In the event of any discrepancy, the German version shall prevail.
- Controller
MINEOMAT GmbH, Seeblick 1, 7082 Donnerskirchen, Austria (FN 680555t, VAT ID ATU83395568). Phone: +43 670 186 7775, email: info@mineomat.com - Hosting
Our website is hosted by Hostinger (Hostinger International Ltd.) in a data centre within the EU. On our behalf, the provider processes server log data (IP address, time of access, pages accessed) in order to provide the website securely. Legal basis: legitimate interest (Art. 6(1)(f) GDPR). A data processing agreement is in place. - Order processing (WooCommerce)
To process your order, we process master and contract data (name, address, email, order and payment data and, for businesses, the VAT ID). Legal basis: performance of a contract (Art. 6(1)(b) GDPR) and compliance with obligations under tax and commercial law (point (c)). - VAT ID check (B2B)
For orders from businesses in other EU countries, we verify the VAT ID provided using the European Commission’s confirmation procedure (VIES) to ensure correct tax treatment (VAT-exempt intra-Community supply / reverse charge). Legal basis: legal obligation (Art. 6(1)(c) GDPR). - Payment processing
Depending on the payment method selected, we pass on the data required for payment to the respective payment service provider. Legal basis: performance of a contract (Art. 6(1)(b) GDPR). The payment service providers currently used are Mollie B.V., Keizersgracht 126, 1015 CW Amsterdam, Netherlands (card payment, Apple Pay, EPS and Klarna) and PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg. For payments via Klarna, Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden, processes the data as an independent controller and may carry out a credit check. With payment in advance, the bank transfer is made directly to our business account – no payment service provider is involved. - Shipping
For delivery, we pass on your shipping data (name, delivery address and, where applicable, email/phone for parcel tracking) to the shipping service provider we have commissioned; for deliveries to third countries/special territories, we additionally pass on the data required for customs clearance. Legal basis: performance of a contract (Art. 6(1)(b) GDPR). Our shipping service provider is GLS (GLS Austria or GLS Germany, depending on the country of delivery). - Email delivery (Resend)
To send transactional emails (e.g. order and shipping confirmations) and for the technical delivery of our newsletter, we use the Resend service (Resend, Inc.). Your email address and the content of the email are processed for this purpose. A data processing agreement is in place; any transfer of data to the USA is safeguarded by the EU Standard Contractual Clauses. Legal basis: performance of a contract (point (b)) or legitimate interest in reliable delivery (point (f)). - Newsletter (double opt-in)
If you subscribe to our newsletter, we process your email address on the basis of your consent (Art. 6(1)(a) GDPR). Subscription uses the double opt-in procedure: after subscribing, you receive a confirmation email and are only added to the mailing list once you have confirmed. The mailing list is managed via MailPoet within our own shop system. You can unsubscribe at any time using the unsubscribe link at the end of every newsletter email; withdrawing your consent does not affect the lawfulness of processing carried out before the withdrawal. - Audience measurement (Google Analytics 4)
We use Google Analytics 4, a service of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland), to analyse how the shop is used – this includes page views, basket actions and orders (order number, order value, products). We only set analytics cookies (_ga, _ga_K83CSKDQCN, stored for up to 2 years) if you consent to the “Statistics” category. The service is integrated via Google Consent Mode v2: without consent, no analytics or advertising cookies are set. The Google script is still loaded, however, and on page views and events (including when you place an order) it sends data to Google without a cookie identifier – such as the address of the page visited, the time, browser details and your consent status; for technical reasons, your IP address is transmitted in the process. IP addresses are processed in truncated form. Google Analytics deletes event-level data after 2 months and user-level data after 14 months. Legal basis: consent (Art. 6(1)(a) GDPR; for cookies, § 165 Abs. 3 TKG 2021 – Austrian Telecommunications Act – and, for visitors from Germany, § 25 Abs. 1 TDDDG – German Telecommunications Digital Services Data Protection Act). Data may be transferred to Google LLC in the USA; Google LLC is certified under the EU-US Data Privacy Framework, and the EU Standard Contractual Clauses apply in addition. You can withdraw your consent at any time via “Cookie settings” in the footer. - Conversion measurement (Google Ads)
We run ads in Google Search. If you arrive at the shop via one of these ads, the page address contains a click identifier from Google (GCLID). Google Analytics records it together with the data described above. Only if you also consent to the “Marketing” category in the cookie banner is an order (time, order value, currency) attributed to the ad click and passed on to our Google Ads account. In Google Ads, we can see how many orders can be traced back to which ad – not who placed them. We pass your choice on to Google via Google Consent Mode v2. We do not build audiences for personalised advertising (remarketing). The recipient is Google Ireland Limited; Google also processes this data as a controller in its own right and may link it to your Google account if you are signed in to it (information: business.safety.google/privacy). Data may be transferred to Google LLC in the USA (EU-US Data Privacy Framework, supplemented by Standard Contractual Clauses). Legal basis: your consent (Art. 6(1)(a) GDPR; § 165 Abs. 3 TKG 2021, for visitors from Germany § 25 Abs. 1 TDDDG). You can withdraw your consent at any time, with future effect, via “Cookie settings” in the footer. - Review invitations (Trustpilot)
After an order has been completed, we transmit your email address and the order reference to Trustpilot A/S (Copenhagen, Denmark) so that Trustpilot can send you an invitation, on our behalf, to review your purchase. Legal basis: legitimate interest (Art. 6(1)(f) GDPR). You can object to the use of your email address for review invitations at any time – informally to info@mineomat.com or via the unsubscribe link in the invitation. Details: Trustpilot privacy policy (legal.trustpilot.com). - Cookies / consent management
We use technically necessary cookies (e.g. for your basket, logging in, payment processing and your cookie choice) and – only with your consent – cookies for statistics (Google Analytics 4: _ga, _ga_K83CSKDQCN, up to 2 years) and marketing (attributing orders to our ads on Google; in addition, our shop system uses its own “sbjs_…” cookies to remember, for the duration of your visit, which source you came from, and records this on your order). We store your choice in cookies (cmplz_… for 12 months, wp_consent_… for 30 days). The legal basis for non-essential cookies is your consent (§ 165 Abs. 3 TKG 2021, for visitors from Germany § 25 Abs. 1 TDDDG; Art. 6(1)(a) GDPR). You can change or withdraw your choice at any time via “Cookie settings” in the footer. - Storage period
We retain tax-relevant records for 7 years (§ 132 BAO – Austrian Federal Fiscal Code). Otherwise, we delete personal data as soon as the purpose of processing no longer applies and no statutory retention obligations prevent deletion. - Customer community (WhatsApp)
After your purchase, we optionally invite you to our customer community on WhatsApp (operator: Meta Platforms Ireland Ltd.). Joining is voluntary via an invitation link – we do not transmit any data to WhatsApp; WhatsApp’s privacy policy applies only once you join. You can leave the community at any time. - Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability and objection. You can withdraw any consent you have given at any time. You also have the right to lodge a complaint with the Austrian Data Protection Authority (www.dsb.gv.at).