Datenschutzerklärung

Privacy Policy – Villotti
Last updated: November 12, 2025

1. Data Controller
   Villotti
   Kummenweg 5, 6900 Bregenz, Austria
   info.villotti@gmx.at

2. Purposes and Legal Bases of Processing
   We process personal data for the following purposes and under the corresponding legal bases (Art. 6 GDPR):
   – Contract performance (Art. 6 (1)(b)) – to handle orders, payments, shipping, and customer support.
   – Legal obligations (Art. 6 (1)(c)) – for example tax and accounting requirements.
   – Consent (Art. 6 (1)(a)) – for marketing emails, cookies, or newsletters; consent may be withdrawn at any time.
   – Legitimate interest (Art. 6 (1)(f)) – for fraud prevention, IT security, and improvement of our services.

3. Categories of Data Processed
   Contact data, account and payment details, order and communication data, device and usage information.

4. Use of Shopify
   Our shop is hosted on Shopify Inc., 151 O’Connor Street, Ottawa, Canada.
   Shopify provides the e-commerce platform and processes data on our behalf.
   Data may be transferred to Shopify’s affiliates, including in the United States, under Standard Contractual Clauses (Art. 46 GDPR).

5. Cookies and Tracking
   We use cookies and similar technologies.
   Non-essential cookies are used only with your consent via our cookie banner.
   You can change or withdraw consent at any time in your browser or cookie settings.

6. Data Retention
   We store personal data only as long as required to fulfill contractual or legal obligations or until you request deletion, unless statutory retention periods apply (for example seven years for tax records in Austria).

7. Your Rights (Art. 15–22 GDPR)
   You have the right to access, rectification, erasure, restriction, data portability, and objection.
   You may withdraw any consent at any time.
   To exercise these rights, contact us at info.villotti@gmx.at.
   If you believe your data are processed unlawfully, you may lodge a complaint with the Austrian Data Protection Authority (www.dsb.gv.at).

8. Recipients of Data
   IT and hosting providers (including Shopify), payment and shipping service providers, and tax advisors or authorities where legally required.

9. International Transfers
   Where data is transferred outside the EU/EEA, this occurs under adequacy decisions or EU Standard Contractual Clauses.

10. Data Security
    We use technical and organizational measures to protect your data against unauthorized access or loss.

11. Updates to This Policy
    We may update this policy to reflect legal or technical changes.
    The latest version is always available on our website.

Contact
Villotti
Kummenweg 5
6900 Bregenz, Austria
info.villotti@gmx.at