Privacy Policy

1. General Information

Protecting your personal data is very important to us. We therefore process your data exclusively based on legal regulations (GDPR, TKG 2003). This privacy policy explains how we collect, use, and protect your personal information when you use our website and services.

2. Data Controller

3. Collection and Processing of Personal Data

We collect, process, and use your personal data only with your consent or if another legal basis exists. This occurs particularly in the following cases:

• Contacting us via email or phone
• Use of our website (cookies, analytics)
• Newsletter subscription
• Business inquiries and partnership requests

Types of Data We Collect:

• Contact Information: Name, email address, phone number, company name
• Technical Data: IP address, browser type, device information, page views
• Communication Data: Messages sent through our contact forms or email
• Analytics Data: Website usage patterns, time spent on pages, click behavior

4. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Consent (Art. 6(1)(a) GDPR): For newsletter subscriptions and optional communications
• Legitimate Interest (Art. 6(1)(f) GDPR): For website analytics and business communications
• Contract Performance (Art. 6(1)(b) GDPR): For processing business inquiries and partnerships
• Legal Obligation (Art. 6(1)(c) GDPR): For compliance with Austrian and EU legal requirements

5. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

• Right to Access: You can request information about your personal data we process
• Right to Rectification: You can request correction of inaccurate or incomplete data
• Right to Erasure: You can request deletion of your personal data under certain conditions
• Right to Restriction: You can request limitation of processing under certain circumstances
• Right to Data Portability: You can request your data in a structured, machine-readable format
• Right to Object: You can object to processing based on legitimate interest or direct marketing
• Right to Withdraw Consent: You can withdraw consent at any time for future processing

To exercise these rights, please contact us at office@affinitybrands.at

6. Data Security

We implement appropriate technical and organizational security measures to protect your personal data against:

• Unauthorized access, use, or disclosure
• Accidental loss, destruction, or damage
• Alteration or unauthorized processing

Our security measures include encryption, secure data transmission, access controls, and regular security assessments.

7. Data Retention

We retain your personal data only as long as necessary for the purposes for which it was collected or as required by law:

• Contact inquiries: 3 years after last contact
• Newsletter subscriptions: Until unsubscribed
• Business communications: 7 years (Austrian commercial law requirements)
• Website analytics: 26 months maximum

8. Third-Party Services

Our website uses the following third-party services that may process your data:

• Google Analytics: For website analytics (IP anonymization enabled)
• Content Delivery Networks: For faster loading of website resources
• Email Services: For processing contact form submissions and newsletters

These services have their own privacy policies and may transfer data outside the EU. We ensure appropriate safeguards are in place.

9. Cookies and Tracking

Our website uses cookies and similar technologies to:

• Ensure proper website functionality
• Remember your language preferences
• Analyze website usage and performance
• Improve user experience

You can manage cookie preferences through your browser settings. However, disabling certain cookies may affect website functionality.

10. Privacy Contact

For questions about this privacy policy or your personal data, please contact:

11. Supervisory Authority

You have the right to lodge a complaint with the competent data protection supervisory authority:

12. Policy Updates

We may update this privacy policy from time to time to reflect changes in our practices or applicable laws. We will notify you of significant changes by posting the updated policy on our website with a new effective date.