Privacy Policy – Tuft Supplies GmbH

Last updated: 31.10.2024

This Privacy Policy explains how Tuft Supplies GmbH (“we”, “us”, “our”) processes your personal data when you visit our website www.tuftsupplies.com (“Website”), use our services, or communicate with us.

“You” or “your” refers to any individual whose personal data we process – whether as a customer, website visitor, or prospective client.

1. Controller

Tuft Supplies GmbH
Hermann-Glück-Weg 6/4/1E
1120 Vienna, Austria
Email: shop@tuftsupplies.com

2. Purposes and Legal Bases for Processing

• Contract performance (Art. 6(1)(b) GDPR): order processing, payments, shipping, returns, customer service
• Legal obligations (Art. 6(1)(c) GDPR): tax and accounting requirements
• Marketing & newsletters (Art. 6(1)(a) GDPR): with your consent
• Website analytics & improvement (Art. 6(1)(a)/(f) GDPR): cookies and tracking
• Fraud prevention & IT security (Art. 6(1)(f) GDPR)

3. Data We Process

• Basic data: name, address, contact details
• Order data: billing & shipping addresses, payment details, purchased products
• Communication data: emails, chat messages, support requests
• Usage data: IP address, browser type, website activity
• Marketing data: newsletter sign-ups, consent records, email interactions

4. Cookies & Consent Management

Our website uses cookies and similar technologies to:

• Enable core website functions (cart, checkout)
• Analyze usage (e.g., Google Analytics)
• Run marketing campaigns (e.g., Meta Pixel, Klaviyo)

Non-essential cookies are set only with your consent. We use a consent management tool that allows you to manage or withdraw your consents at any time.

5. Newsletter

We use a double opt-in process. For sending our newsletter, we use Klaviyo Inc., USA. Processing is based on your consent (Art. 6(1)(a) GDPR). You can unsubscribe at any time via the link in each newsletter or by contacting us directly.

6. Data Sharing

We only share data where necessary, e.g. with:

• Shipping providers (Post, DHL)
• Payment processors (Stripe Payments Europe Ltd., PayPal Europe S.à r.l., Klarna Bank AB)
• IT & hosting provider: Shopify Inc., 151 O’Connor Street, Ottawa, ON, Canada – acts as our data processor (Shopify Privacy Policy)
• Marketing services (Klaviyo, Google, Meta)

Some recipients are located outside the EU (e.g., in the USA). We rely on EU Standard Contractual Clauses (Art. 46 GDPR) to ensure an adequate level of protection.

7. Retention

We store personal data only as long as necessary for the purposes collected or as required by law (e.g., 7 years for Austrian tax records).

8. Your Rights

Under the GDPR, you have the right to:

• Access
• Rectification
• Erasure
• Restriction of processing
• Data portability
• Withdraw consent
• Object to direct marketing

To exercise your rights, contact us at shop@tuftsupplies.com.

9. Complaints

You may lodge a complaint with the Austrian Data Protection Authority:

Barichgasse 40–42
1030 Vienna, Austria
Email: dsb@dsb.gv.at
Web: www.dsb.gv.at

10. Changes

We may update this Privacy Policy from time to time. The latest version will always be available on our website.