Our Privacy Policy was last updated on April 5, 2026.
This Privacy Policy informs you about how we process personal data when you visit our website and online shop at thermoshop.at, order products, contact us, or use our other services.
We process personal data exclusively based on applicable data protection regulations, particularly the General Data Protection Regulation (GDPR), the Austrian Data Protection Act, and other applicable legal provisions.
Controller
The controller for data processing on this website is:
Klung BT.
c/o Sánc utca 1/1, II. em. 23. ajtó
7624 Pécs
Hungary
Email: info@thermoshop.at
Website: thermoshop.at
Definitions
For the purposes of this Privacy Policy, the following terms apply:
“Personal data” means any information relating to an identified or identifiable natural person, such as name, address, email address, phone number, IP address, or order data.
“Processing” refers to any operation relating to personal data, such as collection, storage, use, transmission, or deletion.
“Website” refers to our website and online shop at thermoshop.at.
“We,” “us,” or “our” refers to Thermoshop or the controller named above.
“You” refers to visitors to our website, customers, and other individuals who contact us.
Collection and Processing of Personal Data
We process personal data that you actively provide to us, as well as data that is technically required or automatically processed when you visit our website.
Data you provide to us
When you place an order, create a customer account, contact us, or subscribe to our newsletter, the following data, in particular, may be processed:
- First and last name
- Billing and shipping address
- Email address
- Phone number
- Order and payment information
- Communication content, such as messages via contact forms or emails
- Information that you voluntarily provide to us
Automatically collected data
When you visit our website, technical data may be automatically processed, including:
- IP address
- Date and time of access
- Browser type and browser version
- Operating system
- Pages visited
- Referrer URL
- Device information
- Technical log and security data
This data is processed to technically provide the website, ensure security, analyze errors, and ensure the stability of our online shop.
Purposes of Data Processing
We process personal data specifically for the following purposes:
- Provision and operation of our online shop
- Processing and fulfillment of orders
- Contract execution and customer service
- Payment processing
- Shipping and delivery of products
- Processing of inquiries
- Provision of a customer account, if offered
- Sending of newsletters, if you have subscribed to them
- Analysis and improvement of our website, if consent is required for this, only after your approval
- Fulfillment of legal obligations, particularly tax and commercial law retention obligations
- Protection against misuse, fraud, and unauthorized access
Legal Bases for Processing
The processing of personal data is based on the following legal bases, depending on the purpose:
- Art. 6 para. 1 lit. b GDPR – for the fulfillment of a contract or for the implementation of pre-contractual measures, particularly for orders and inquiries.
- Art. 6 para. 1 lit. c GDPR – for the fulfillment of legal obligations, such as tax and commercial law retention obligations.
- Art. 6 para. 1 lit. f GDPR – based on legitimate interests, such as for the technical provision, security, and improvement of our website.
- Art. 6 para. 1 lit. a GDPR – based on your consent, for example, for newsletter subscriptions, analytical or marketing cookies.
Online Shop and Hosting via Shopify
Our online shop is operated via Shopify. Shopify provides us with the technical platform through which we present products, receive orders, and manage our online shop.
When using our online shop, personal data may be processed by Shopify, particularly technical data, order data, contact data, payment information, and usage data, insofar as this is necessary for the operation and processing of the online shop.
Further information on data processing by Shopify can be found in Shopify's privacy policy:
https://www.shopify.com/legal/privacy
Orders and Contract Fulfillment
When you place an order in our online shop, we process the data you provide to process your order, process payment, deliver the goods, communicate with you, and fulfill legal obligations.
Processing takes place on the basis of Art. 6 para. 1 lit. b GDPR, insofar as it is necessary for the performance of the contract. If there are legal retention obligations, processing also takes place on the basis of Art. 6 para. 1 lit. c GDPR.
Payment Processing
For payment processing, depending on the selected payment method, personal data may be transmitted to payment service providers. This may include, in particular, name, billing address, order data, payment data, and transaction information.
We use the following payment service providers:
- Shopify Payments
Processing takes place for the performance of the contract according to Art. 6 para. 1 lit. b GDPR and for the fulfillment of legal obligations according to Art. 6 para. 1 lit. c GDPR.
Shipping and Delivery
To deliver your order, we forward the necessary data to shipping and logistics service providers. This includes, in particular, name, delivery address, email address, phone number, order information, and, if applicable, other information necessary for delivery.
We use the following shipping service providers:
- GLS
Processing takes place on the basis of Art. 6 para. 1 lit. b GDPR for the fulfillment of the purchase agreement.
Contacting Us
If you contact us by email, contact form, or other means, we process the data you provide to process your request and communicate with you.
Depending on the content of the request, processing takes place on the basis of Art. 6 para. 1 lit. b GDPR, if the request is related to a contract or pre-contractual measures, or on the basis of Art. 6 para. 1 lit. f GDPR due to our legitimate interest in processing requests.
Customer Account
If a customer account is offered on our website and you create such an account, we process the data required for this to provide you with access to your account, manage your orders, and provide other account functions.
Processing takes place on the basis of Art. 6 para. 1 lit. b GDPR.
Newsletter and Email Marketing
If you subscribe to our newsletter, we process your email address and any other voluntarily provided data to send you information about products, offers, and news.
The newsletter is sent only if you have consented to it. The legal basis is Art. 6 para. 1 lit. a GDPR.
You can revoke your consent at any time with effect for the future by using the unsubscribe link in the newsletter or by contacting us.
If an external newsletter service is used, we use the following provider:
- Shopify Email
Cookies and Similar Technologies
Our website uses cookies and similar technologies. Cookies are small text files that are stored on your device and can contain certain information.
We use cookies to ensure the technical functioning of our website, to provide the shopping cart, to store settings, to analyze the use of our website, and to support marketing measures.
Necessary Cookies
Necessary cookies are required for our website and online shop to function properly. Without these cookies, certain functions, such as the shopping cart or checkout, cannot be provided.
Processing takes place on the basis of Art. 6 para. 1 lit. f GDPR due to our legitimate interest in the secure and functional provision of our website.
Analytics and Marketing Cookies
We only use analytics and marketing cookies, if consent is required for this, after your prior consent. These cookies help us understand how our website is used and can be used to make content and advertising more relevant.
Processing takes place on the basis of your consent according to Art. 6 para. 1 lit. a GDPR. You can revoke or change your consent at any time via the cookie settings.
Cookie Settings
You can change your cookie settings at any time via the corresponding link or button on our website. You can also delete or block cookies via your browser settings.
Please note that if cookies are disabled, not all functions of our website may be fully usable.
Analytics Tools
We use Shopify Analytics to evaluate the use of our online shop and to improve our offerings. Technical data, usage data, order information, and cookie information may be processed in this context.
Insofar as consent is legally required for this, processing takes place only after your prior consent according to Art. 6 para. 1 lit. a GDPR.
Shopify Analytics is provided by Shopify. Further information on data processing by Shopify can be found in Shopify's privacy policy:
https://www.shopify.com/legal/privacy
Marketing Tools
We may use marketing tools to promote our offers and measure the effectiveness of our marketing measures. Cookies, pixels, or similar technologies may be used in this context.
Such processing takes place only on the basis of your consent according to Art. 6 para. 1 lit. a GDPR, if consent is required.
Recipients of Personal Data
We only pass on personal data if this is necessary for the stated purposes, if there is a legal obligation, if you have consented, or if there is another legal basis.
Recipients of personal data may include, in particular:
- Shopify as a technical shop platform
- Payment service providers
- Shipping and logistics service providers
- IT and hosting service providers
- Newsletter and marketing service providers, if used
- Analytics service providers, if used
- Tax advisors, legal advisors, and authorities, as legally required
Transfer to Third Countries
When using certain service providers, personal data may be transferred to countries outside the European Union or the European Economic Area.
Such a transfer will only take place if there is an appropriate legal basis, such as an adequacy decision by the European Commission, appropriate safeguards such as EU standard contractual clauses, or your explicit consent.
Storage Duration
We store personal data only for as long as this is necessary for the respective purposes or if there are legal retention obligations.
Order and invoice data are generally stored for the legally prescribed periods due to legal retention obligations.
We store data from inquiries for as long as necessary to process the inquiry, and beyond that, insofar as legal obligations or legitimate interests exist.
Data that is processed on the basis of your consent will be stored until you revoke your consent or as long as it is necessary for the respective purpose.
Security of Your Data
We take appropriate technical and organizational measures to protect personal data from loss, misuse, unauthorized access, disclosure, alteration, or destruction.
Please note that data transmission over the Internet can never be completely secure. Absolute protection cannot therefore be guaranteed.
Your Rights
You have the following rights within the framework of applicable legal provisions:
- Right to information about the personal data processed by us
- Right to rectification of inaccurate or incomplete data
- Right to erasure of personal data
- Right to restriction of processing
- Right to data portability
- Right to object to certain processing operations
- Right to revoke consent given with effect for the future
- Right to lodge a complaint with a data protection supervisory authority
To exercise your rights, you can contact us at any time:
Please note that we may need to verify your identity before processing your request.
Withdrawal of Consent
If processing is based on your consent, you can revoke this consent at any time with effect for the future. The lawfulness of the processing until the withdrawal remains unaffected.
Right to Object
If we process personal data based on legitimate interests according to Art. 6 para. 1 lit. f GDPR, you have the right to object to this processing at any time for reasons arising from your particular situation.
If personal data is processed for direct marketing purposes, you can object to this processing at any time.
Right to Lodge a Complaint with the Supervisory Authority
If you believe that the processing of your personal data violates data protection law, you have the right to lodge a complaint with a data protection supervisory authority.
For Austria, the competent data protection supervisory authority is:
Österreichische Datenschutzbehörde
Barichgasse 40-42
1030 Wien
Austria
Phone: +43 1 52 152-0
Email: dsb@dsb.gv.at
Children's Data Protection
Our online shop is not specifically aimed at children under 14 years of age. We do not knowingly collect personal data from children under 14 years of age without the consent of their legal guardians.
If you believe that a child has provided us with personal data without appropriate consent, please contact us so that we can investigate the matter and, if necessary, take appropriate measures.
Links to Other Websites
Our website may contain links to external websites. We are not responsible for the content and data protection practices of external websites.
Please read the privacy policies of the respective external websites before providing personal data there.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time if legal, technical, or business requirements change.
The current version will always be available on this page. The date of the last update can be found at the beginning of this Privacy Policy.
Contact
If you have any questions about this Privacy Policy or the processing of your personal data, you can contact us:
Website: thermoshop.at
Email: info@thermoshop.at