Privacy Policy (GDPR)

1. Introduction

This Privacy Policy explains how SAGATOR (“SAGATOR”, “we”, “us”, “our”) collects, uses, stores, and protects your personal data when you visit our website, purchase products, or interact with us. We process personal data in accordance with the General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (DSG).

2. Data Controller

SAGATOR
Owner: Ines Mitas, Weichselgasse, 2111 Harmannsdorf, Austria
Email: office@sagator.com
Website: www.sagator-vienna.com

3. Personal Data We Collect

We may collect the following categories of personal data:

3.1 Data you provide directly

  • Name
  • Billing and shipping address
  • Email address
  • Phone number (optional)
  • Payment information (processed securely by third‑party providers)
  • Order details
  • Messages sent via contact forms or email

3.2 Automatically collected data

  • IP address
  • Browser type and version
  • Device information
  • Referrer URL
  • Pages visited
  • Date and time of access
  • Cookies and similar technologies

3.3 Data from third‑party services

If you use external payment providers (e.g., Stripe, PayPal), these services may collect additional data according to their own privacy policies.

4. Purpose of Data Processing

We process your data for the following purposes:

  • Order processing and delivery
  • Customer communication and support
  • Website functionality and security
  • Payment processing
  • Marketing, if you have given consent
  • Legal obligations, such as tax and accounting requirements
  • Fraud prevention and misuse detection

5. Legal Basis for Processing

We process personal data based on:

  • Art. 6(1)(b) GDPR – performance of a contract
  • Art. 6(1)(a) GDPR – your consent
  • Art. 6(1)(c) GDPR – legal obligations
  • Art. 6(1)(f) GDPR – legitimate interests (e.g., website security, analytics)

6. Cookies & Tracking Technologies

Our website uses cookies to ensure proper functionality, improve user experience, and analyze website traffic.

You can manage or disable cookies in your browser settings. If legally required, we will ask for your consent before setting non‑essential cookies.

7. Payment Processing

Payments are handled by secure third‑party providers. We do not store full payment details such as credit card numbers.

These providers act as independent controllers under GDPR.

8. Data Sharing

We only share personal data with:

  • Payment service providers
  • Shipping partners
  • IT and hosting providers
  • Analytics and marketing tools (only with consent)
  • Authorities, if legally required

We do not sell or trade personal data.

9. Data Storage & Retention

We store personal data only as long as necessary:

  • Order and billing data: 7 years (legal requirement in Austria)
  • Customer communication: as long as needed to process inquiries
  • Marketing data: until you withdraw consent
  • Technical logs: short‑term for security purposes

10. Your Rights Under GDPR

You have the right to:

  • Access your personal data
  • Rectify inaccurate data
  • Erase data (“right to be forgotten”)
  • Restrict processing
  • Object to processing
  • Data portability
  • Withdraw consent at any time
  • Lodge a complaint with the Austrian Data Protection Authority (DSB)

To exercise your rights, contact us at the email above.

11. Data Security

We implement technical and organizational measures to protect your data from:

  • Unauthorized access
  • Loss
  • Misuse
  • Alteration

Our website uses SSL encryption.

12. Third‑Party Tools

Depending on your setup, the website may use:

  • Google Analytics (with IP anonymization)
  • Meta Pixel
  • Shopify analytics
  • Cookie consent tools
  • Email marketing tools (e.g., Mailchimp, Klaviyo)

Each provider processes data according to its own privacy policy.

13. International Data Transfers

If third‑party providers process data outside the EU/EEA, this is done under:

  • Standard Contractual Clauses (SCCs)
  • Adequacy decisions
  • Other GDPR‑compliant safeguards

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The latest version will always be published on this website.

15. Contact

For questions about this Privacy Policy or your personal data, contact:

SAGATOR Weichselgasse, 2111 Harmannsdorf, Austria
Email: office@sagator.com