Privacy Policy

Protecting your privacy and your data is very important to us and is always taken into account in all business transactions.

As a rule, you can use our website without providing any personal data. However, different provisions may apply to individual services, which we will point out to you separately below.

The purpose of processing your personal data (hereinafter referred to as “data”) is to provide information about socks and other accessories and to offer products related to this subject. In this privacy policy, we inform you, among other things, about

• the name and contact details of the data controller
• all purposes for which your data are processed
• the legal bases on which the processing activities are based, including any legitimate interest we may have
• all recipients of your data
• any transfer of your data to a third country and the legal basis for it
• the storage period of your data or the criteria used to determine that period
• the categories of your data that are processed
• the origin of your data
• the rights of data subjects

Alexander Bolter, Egatha 21, A-6842 Koblach, Email: a.bolter@bolter-socken.at.

No data protection officer has been appointed, as this is not legally required.

You have the following rights with regard to the personal data concerning you:

• Right of access
• Right to rectification or erasure
• Right to restriction of processing
• Right to object to processing
• Right to data portability
• Right to withdraw your consent

You also have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data by us.

You can contact us at any time regarding this and any further questions about personal data.

Right of access

You have the right to obtain from us, at any time and free of charge, information about the personal data stored concerning you and a copy of this information, including

• the purposes of the processing
• the categories of personal data being processed
• the recipients or categories of recipients to whom the personal data have been or will be disclosed, particularly recipients in third countries or international organizations
• if possible, the planned period for which the personal data will be stored or, if this is not possible, the criteria used to determine that period
• the existence of a right to rectification or erasure of the personal data concerning you or to restriction of processing by us, or of a right to object to this processing
• the existence of a right to lodge a complaint with a supervisory authority
• if the personal data are not collected from the data subject: all available information about the source of the data
• the existence of automated decision-making, including profiling, pursuant to Article 22(1) and (4) GDPR and - at least in these cases - meaningful information about the logic involved, as well as the significance and envisaged consequences of such processing for the data subject.

You also have the right to be informed whether personal data have been transferred to a third country or an international organization. If this is the case, you also have the right to obtain information about the appropriate safeguards relating to the transfer.

Right to rectification

You have the right to request the rectification without undue delay of inaccurate personal data concerning you.

You also have the right, taking into account the purposes of the processing, to request the completion of incomplete personal data, including by means of providing a supplementary statement.

Right to erasure

You have the right to request that we erase the relevant personal data without undue delay, provided that one of the following reasons applies and insofar as the processing is not necessary:

• The personal data were collected or otherwise processed for purposes for which they are no longer necessary.
• You withdraw your consent, on which the processing was based pursuant to Article 6(1)(a) GDPR or Article 9(2)(a) GDPR, and there is no other legal basis for the processing.
• You object to the processing pursuant to Article 21(1) GDPR, and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Article 21(2) GDPR.
• The personal data have been unlawfully processed.
• The erasure of the personal data is necessary for compliance with a legal obligation under Union or Member State law to which the controller is subject.
• The personal data were collected in relation to information society services offered pursuant to Article 8(1) GDPR.

Right to erasure

Where the personal data have been made public by us and our company, as the controller, is obliged pursuant to Article 17(1) GDPR to erase the personal data, we shall take reasonable measures, including technical measures, taking into account available technology and the cost of implementation, to inform other controllers processing the published personal data that you have requested those other controllers to erase any links to, or copies or replications of, the personal data, insofar as the processing is not necessary.

Right to restriction of processing

You have the right to request that we restrict processing if one of the following conditions applies:

• You contest the accuracy of the personal data, for a period enabling us to verify the accuracy of the personal data.
• The processing is unlawful, you oppose the erasure of the personal data and instead request the restriction of the use of the personal data.
• We no longer need the personal data for the purposes of processing, but you require it for the establishment, exercise or defense of legal claims.
• You have objected to the processing pursuant to Article 21(1) GDPR, and it has not yet been determined whether our legitimate grounds override yours.

Right to data portability

You have the right to receive your personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format.

You also have the right to transmit this data to another controller without hindrance from us, provided that the processing is based on consent pursuant to Article 6(1)(a) GDPR or Article 9(2)(a) GDPR, or on a contract pursuant to Article 6(1)(b) GDPR, and the processing is carried out by automated means, unless the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us.

Furthermore, when exercising your right to data portability, you have the right to have the personal data transmitted directly from us to another controller, where technically feasible and provided that this does not adversely affect the rights and freedoms of others.

Right to object

You have the right to object, on grounds relating to your particular situation, at any time to the processing of your personal data carried out on the basis of Art. 6(1)(e) or (f) GDPR. This also applies to profiling based on these provisions.

In the event of an objection, we will no longer process the personal data, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

If we process personal data for direct marketing purposes, you have the right to object at any time to the processing of your personal data for the purposes of such marketing. This also applies to profiling insofar as it is related to such direct marketing.

If you object to our processing of your personal data for direct marketing purposes, we will no longer process your personal data for these purposes.

In addition, you have the right to object, on grounds relating to your particular situation, to the processing of personal data concerning you that is carried out by us for scientific or historical research purposes or statistical purposes pursuant to Art. 89(1) GDPR, unless such processing is necessary for the performance of a task carried out in the public interest.

Automated individual decision-making, including Profiling

You have the right not to be subject to a decision based solely on automated processing - including profiling - which produces legal effects concerning you or similarly significantly affects you, unless the decision (1) is necessary for entering into or performing a contract between you and us, or (2) is authorised by Union or Member State law to which we are subject and that law contains suitable measures to safeguard your rights and freedoms and your legitimate interests, or (3) is based on your explicit consent.

Right to withdraw consent under data protection law

You have the right to withdraw your consent to the processing of personal data at any time. However, withdrawing your consent does not affect the lawfulness of data processing carried out before the withdrawal.

Our website and our services are not intended for use by minors, and we do not want to collect data from minors. If a parent or guardian of a minor believes that their child may have provided us with personal data, please write to us using the contact details provided below, and we will delete this personal data subject to applicable law and this Policy.

We use appropriate technical and organizational measures and security precautions (TOMs) designed to prevent unauthorized access, unlawful processing, and unauthorized or accidental loss of your data.

This includes, for example, encrypting your communication with us via this website based on the Secure Socket Layer (SSL) encryption protocol.

You can check the quality of our encryption here: https://www.ssllAbs.com/ssltest

It is important to us to point out that data transmission over the internet may have security vulnerabilities, as complete protection against access by unauthorized third parties is not possible.

The server hosting this website is located in Ireland and is operated by Shopify International Ltd, 2nd Floor, 1-2 Victoria Buildings, Haddington Road, Dublin 4, Dublin, Ireland, with which we have concluded a data processing agreement. For more information, please see:

https://www.shopify.com/legal/dpa

https://help.shopify.com/de/manual/privacy-and-security

Each time you access our website, our automated system collects a range of general data and information.

This general data and information is stored in the log files of our server by Shopify International Ltd in Ireland.

The following may be collected 

• the browser types and versions used
• the operating system used by the accessing system
• the website from which an accessing system reaches our website (so-called referrer)
• the subpages accessed on our website via an accessing system
• the date and time of access to the website
• an Internet Protocol address (IP address)
• the internet service provider of the accessing system
• other similar data and information used to prevent threats in the event of attacks on our information technology systems.

When using this general data and information, we do not draw any conclusions about you.

This information is required to 

• to deliver the content of our website correctly
• to optimize the content of our website and the advertising for it
• to ensure the permanent functionality of our information technology systems and the technology of our website
• to provide law enforcement authorities, in the event of a cyberattack, with the information necessary for prosecution.

We evaluate this anonymously collected data and information statistically on the one hand and also for the purpose of enhancing data protection and data security in our company, ultimately ensuring an optimal level of protection for you. In any event, we may process this data on the basis of our legitimate interest under Art. 6(1)(f) GDPR.

The logs are stored separately from all personal data you provide and are also deleted after a maximum of 90 days.

Information about the use of cookies and an explanation of your corresponding choices and rights can be found in our cookie banner.

At present, you can place an order with us in our online shop, send us an email, or contact us by telephone or in person. Please note that unencrypted emails sent over the internet are not sufficiently protected against unauthorized access by third parties.

Customer account and Orders

If you wish to place an order in our online shop, it is necessary for the conclusion of the contract that you provide the personal data listed below, which we require to process your order. To prevent unauthorized third-party access to your personal data, particularly financial data, the ordering process is encrypted using SSL technology.

Newsletter

With your consent, you can subscribe to our newsletter, through which we inform you about our current, interesting offers. This means that we will contact you directly by personalized email and inform you when, based on the data you have provided, we assume that information about our products, services, and events, as well as those of our partner companies, is especially relevant and interesting to you.

You can generally receive our company's newsletter only if (1) you have a valid email address and (2) you have registered to receive the newsletter.

A confirmation email is sent to the email address you initially provided for newsletter distribution using the double opt-in procedure, in which we ask you to confirm that you wish to receive the newsletter.

This confirmation email is used to verify whether you, as the owner of the email address, have authorized receipt of the newsletter.

The purpose of this procedure is to verify your registration and, if necessary, clarify any potential misuse of your personal data.

Shopify

As part of your registration, you were already informed in the privacy policy provided by Shopify under

https://www.shopify.com/legal/dpa

informed about the processing of your personal data. The data processing is carried out at your request and is necessary pursuant to Art. 6 para. 1 sentence 1 lit. b GDPR for the purposes stated there, for the proper processing of your order and for the mutual fulfillment of obligations under the purchase contract. You have already been informed that eBay transmits your personal data to us for the purpose of fulfilling the contract.

We do not process any further personal data about you beyond that transmitted by Shopify. The purposes for which we use this data are set out below in this privacy policy.

We process the following data categories, which were not collected by us but may have been collected from you as the data subject by Shopify:

• Contact details
• Order contents
• Bank details

The information required pursuant to Art. 14 GDPR is provided when the data is first used, but no later than within 1 month of collection; the reference to the privacy information is included in the email signature, so that you, as the data subject, receive the information when you first contact us.

If you contact us, for example merely to obtain information from us, we process your data for this purpose. If you contact us, for example to conclude a contract, we process your data for this purpose.

Order, including customer support

If you provide your order data on our website, by telephone, or via email, we and the recipients named below will process the data you provide, including your personal data, as part of our business relationship with you, for the purpose of processing the (pre-)contract, to process and manage your order, and to provide customer support.

If you wish to place an order in our online shop, it is necessary for the conclusion of the contract that you provide your personal data, which we require to process your order. We process the data you provide only to process your order.

This data is required to fulfill the contract or to carry out pre-contractual measures. Without this data, we cannot conclude the contract with you.

Customer account

You can voluntarily create a customer account in our online shop, allowing us to save your data for future purchases. When creating an account using the corresponding icon, the data you provide will be stored and can be deleted at any time.

Newsletter

We inform our customers and business partners at regular intervals about the company's offers by means of a newsletter.

The data collected as part of your newsletter registration is used exclusively to send our newsletter.

Newsletter subscribers may also be informed by email if this is necessary to operate the newsletter service or for related registration, for example in the event of changes to the newsletter offering or changes to the technical conditions.

Marketing (general)

To initiate business relationships and intensify business relationships with existing and potential customers.

If you contact us, for example merely to obtain information from us, we may process your data on the basis of your consent pursuant to Art 6 para 1 lit a GDPR or Art 6 para 1 lit f GDPR. If you contact us, for example to conclude a contract, we may process your data on the basis of Art 6 para 1 lit b GDPR and, where applicable, store it on the basis of Art 6 para 1 lit c GDPR.

Customer account, order

We and the recipients listed below process your data, including the personal data you provide, on the legal basis of Art 6 para 1 sentence 1 lit b, in order to identify you as a customer, properly perform the contract in question, and correspond with you. The data processing is carried out at your request and is necessary for the proper processing of the contract for the purposes stated. Data that is not required for contract performance and that you voluntarily provide is processed by us on the legal basis of your consent pursuant to Art 6 para 1 lit a GDPR. You have the right to withdraw your consent at any time. For more information, see your rights above.

Newsletter

The legal basis is your consent pursuant to Art 6 para 1 lit a GDPR. You have the right to withdraw your consent at any time. For more information, see your rights above.

Marketing (general)

The legal basis is our legitimate interest pursuant to Art 6 para 1 sentence 1 lit f GDPR. The legitimate interest is our interest in initiating business relationships and intensifying business relationships with existing and potential customers.

In general, we expressly ask you not to disclose any data that is likely to have little or no relevance to the purpose you intend to achieve; this applies in particular to special categories of personal (“sensitive”) data. You provide information entirely voluntarily.

Information

When you contact us merely to obtain information from us, we process the data you provide.

Customer account, Website order

Depending on what you have voluntarily provided to us, the data we process may include the following:

• Your contact details (name, address, telephone number, email address, etc.)
• Content of your order
• Special categories of personal data provided to us by you unsolicited and voluntarily

You provide information entirely voluntarily. Nevertheless, we expressly ask you not to disclose any data that is likely to be of little or no relevance to the purpose you intend; this applies in particular to special categories of personal (“sensitive”) data.

Newsletter

The personal data transmitted to us when subscribing to the newsletter is determined by the input form used for this purpose.

The only mandatory information required to send the newsletter is your email address.

Providing any additional data marked separately is voluntary and is used to address you personally.

When subscribing to the newsletter, we also store the IP address assigned by your internet service provider (ISP), the computer system you used at the time of registration, and the date and time of registration.

The collection of this data is necessary to be able to trace any (potential) misuse of your email address at a later date and therefore serves to protect our legal interests.

Marketing (general)

Depending on what you have voluntarily provided to us, the data we process may include the following:

• Your contact details (name, address, telephone number, email address, etc.)
• Content of previous orders

Your data may be disclosed in whole or in part, but always only to the extent and insofar as necessary, to the following controllers:

• Banks (payment transactions - Austria)
• Tax advisors (accounting - Austria)
• Debt collection agencies (debt collection - Austria)
• Legal representatives (legal enforcement - Austria)
• Courts (legal enforcement - Austria)
• Administrative authorities (Austria)

In addition, your data may be disclosed to the following recipients as (sub-)processors; we have concluded a data processing agreement with all of them and verified the appropriate technical and organizational measures (TOMs):

• BREAK Media Solutions GmbH (IT service provider - Austria)
• Shopify Internationional Ltd (Web hosting, webmail - Ireland)
• Klaviyo Inc. (Newsletter distribution - USA - Privacy Framework)

Your data is stored in a form that permits your identification only for as long as necessary for the purpose for which it is processed.

Information

By providing us with your data via email or contacting us by telephone or in person, you expressly consent to our processing your data, including the personal data you provide and any special categories of personal data that you may provide unsolicited and voluntarily, for the duration of handling the information request in question by us and the recipients listed above.

If you contact us solely to obtain information from us, your data will therefore either be deleted immediately, depending on the content of the communication, or deleted after an appropriate period corresponding to its content.

If you withdraw your consent, we will delete (or have deleted) all your data - including any aggregated data - from all databases.

Customer account, Orders

After the purchase process is abandoned, the data stored by us will be deleted.

You can always delete all other data, including your user account, in the customer area.

If you register on our website, we will store your data for as long as your account exists in any event.

We are required under corporate and tax law to store your address, payment, and order data for a period of 7 years. If you contact us to conclude a contract, the data will be deleted at the end of the 7th year after the last receipt has been recorded (§ 132 BAO). If a contract is concluded, all data from the contractual relationship will therefore be stored until this period expires.

Statutory/legal retention obligations or contractual obligations, e.g. towards customers arising from warranty or damages claims or towards contractual partners, constitute a further basis for continuing to store your data. (Art 6 para 1 lit c GDPR; Art 17 para 3 lit e GDPR).

The data categories name, address, purchased goods, and purchase date are stored beyond this period until the expiry of product liability (10 years).

Newsletter

We store the data you provide for the newsletter only for as long as you wish to receive the newsletter and thereafter only for as long as we need the data to assert or defend against legal claims.

You may withdraw your consent to the newsletter at any time with effect for the future by clicking the link provided in every newsletter email, or in writing by email or letter to our contact address. Withdrawing your consent does not affect the lawfulness of processing of your data carried out on the basis of your consent before its withdrawal. After consent is withdrawn, the participant's collected and stored personal data will be deleted immediately.

Marketing (general)

Marketing data is retained for up to 3 years after the last contact.