Personal data (hereinafter referred to as “data”) is processed by us only as necessary and for the purpose of providing a functional and user-friendly online presence, including its content and the services offered there.
According to Article 4 No. 1 of Regulation (EU) 2016/679, i.e., the General Data Protection Regulation (hereinafter referred to as “GDPR”), “processing” refers to any operation or set of operations performed on personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination, or otherwise making available, alignment or combination, restriction, erasure, or destruction.
The following privacy policy informs you about the type, scope, purpose, duration, and legal basis of the processing of personal data, insofar as we determine the purposes and means of processing alone or jointly with others. We also inform you below about third-party components we use to optimize and improve the usability of our website, insofar as third parties process data under their own responsibility.
Our privacy policy is structured as follows:
- Information about us as the data controller
- Rights of users and data subjects
- Information on data processing
1. Information about us as the data controller
The responsible provider of this website under data protection law is:
Cyberzone.at
webhead GmbH
Kriemhildplatz 8/15
1150 Vienna
Austria
Email: datenschutz@cyberzone.at
Data Protection Officer: Ahmad Abarghoui
2. Rights of Users and Data Subjects
With regard to the data processing described below, users and data subjects have the right:
- To obtain confirmation as to whether personal data concerning them is being processed, information about the processed data, further details about data processing, and copies of the data (see also Art. 15 GDPR).
- To request the rectification or completion of incorrect or incomplete data (see also Art. 16 GDPR).
- To request the immediate deletion of data concerning them (see also Art. 17 GDPR) or, alternatively, if further processing is necessary under Art. 17(3) GDPR, to request a restriction of processing as per Art. 18 GDPR.
- To receive the data concerning them and provided by them and to transmit this data to other providers/controllers (see also Art. 20 GDPR).
- To lodge a complaint with a supervisory authority if they believe that data concerning them is processed in violation of data protection regulations (see also Art. 77 GDPR).
Additionally, the provider is obligated to notify all recipients to whom data was disclosed of any correction or deletion of data or restriction of processing pursuant to Articles 16, 17(1), and 18 GDPR. This obligation does not apply if such notification is impossible or involves disproportionate effort. Users also have the right to information about these recipients.
Users and data subjects also have the right under Art. 21 GDPR to object to the future processing of data concerning them, provided the data is processed under Art. 6(1)(f) GDPR. In particular, an objection to data processing for direct advertising purposes is permissible.
3. Information on Data Processing
The data processed when using our website will be deleted or blocked as soon as the purpose of storage ceases to apply, provided the deletion does not conflict with statutory retention requirements and unless otherwise stated for specific processing procedures.
Cookies
a) Session Cookies
We use cookies on our website. Cookies are small text files or other storage technologies stored on your device by your browser. These cookies process certain information about you, such as your browser or location data or your IP address.
This processing makes our website more user-friendly, effective, and secure by enabling, for example, the display of our website in different languages or the functionality of a shopping cart.
The legal basis for this processing is Art. 6(1)(b) GDPR, if the cookies are used for contract initiation or contract fulfillment.
If the processing is not for contract-related purposes, our legitimate interest lies in improving the functionality of our website, based on Art. 6(1)(f) GDPR.
These session cookies are deleted when you close your browser.
b) Third-Party Cookies
Cookies from partner companies we collaborate with for advertising, analytics, or website functionality may also be used. For details, including the purposes and legal basis for such third-party cookies, please refer to the following information.
c) Disabling Cookies
You can prevent or restrict the installation of cookies through your browser settings. Already stored cookies can also be deleted at any time. The steps depend on your specific browser. For Flash cookies, browser settings may not suffice, and you may need to adjust your Flash player settings.
If you disable cookies, some website features may not function fully.
Cookie Manager
We use a cookie manager to obtain consent for non-essential cookies. Upon visiting the website, a cookie with your consent preferences is stored on your device to avoid repeated consent requests during future visits.
This cookie is necessary for ensuring lawful consent from the user. You can disable the installation of cookies through your browser settings.
Customer Account / Registration
If you create a customer account via our website, the data you enter during registration (e.g., name, address, email) will be processed exclusively for pre-contractual services, contract fulfillment, or customer care (e.g., to display your order history or provide a wish list function). Your IP address and the date and time of registration are also stored. These data are not shared with third parties.
During the registration process, you will consent to this processing, referencing this privacy policy. The legal basis is Art. 6(1)(a) GDPR.
You can revoke your consent at any time under Art. 7(3) GDPR by notifying us. Your data will be deleted unless retention is required under tax or commercial law.
Newsletter
If you subscribe to our free newsletter, we will process your email address and, optionally, your name and address. We also log the IP address and the time of subscription. You will consent to receive the newsletter, and we will reference this privacy policy.
The legal basis for processing is Art. 6(1)(a) GDPR.
You can revoke your consent at any time under Art. 7(3) GDPR by notifying us or clicking the unsubscribe link in the newsletter.
Contact Requests
If you contact us via contact form or email, the data you provide will be processed to handle your inquiry. Providing this data is necessary to respond to your request.
The legal basis for processing is Art. 6(1)(b) GDPR.
Your data will be deleted once your inquiry is fully resolved unless statutory retention obligations apply.
YouTube
We maintain an online presence on YouTube to present our company and services and to communicate with customers and interested parties. YouTube is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
We note that user data may be processed outside the European Union, particularly in the USA, which may pose increased risks for users, such as limited access to their data later. Additionally, we have no access to this data—only YouTube does.
You can find YouTube’s privacy policy here:
https://policies.google.com/privacy
To promote our products and services and communicate with customers or interested parties, we maintain a company presence on the Facebook platform.
We share joint responsibility for data processing on this social media platform with Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
Facebook’s Data Protection Officer can be contacted via this form:
https://www.facebook.com/help/contact/540977946302970
Joint responsibility has been defined in an agreement regarding respective obligations under the GDPR. This agreement is available here:
https://www.facebook.com/legal/terms/page_controller_addendum
Legal Basis
The processing of personal data is based on Article 6(1)(f) GDPR, which supports our legitimate interest in analysis, communication, sales, and promotion of our products and services. Alternatively, user consent may serve as the legal basis under Article 6(1)(a) GDPR. Users can revoke their consent at any time with future effect by notifying Facebook as outlined in Article 7(3) GDPR.
When visiting our company page on Facebook, Facebook Ireland Ltd. processes user data (e.g., personal details, IP addresses). These are used for statistical insights into the use of our page and for marketing and advertising purposes, such as creating user profiles for interest-based advertising. If users are logged into their Facebook accounts, their data may be linked to their accounts.
In the event users contact us via Facebook, their personal data will be used to process their inquiry. This data will be deleted once the inquiry is resolved, provided there are no legal retention obligations, such as in contract processing.
Cookies
Facebook Ireland Ltd. may use cookies to process user data. If users disagree with this, they can adjust their browser settings to block cookies. Further information about Facebook’s data policies can be found here:
https://www.facebook.com/privacy/explanation
We maintain a company presence on Instagram to promote our products and services and communicate with customers or interested parties. Instagram is operated by Facebook Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland.
Instagram’s Data Protection Officer can be contacted here:
https://www.facebook.com/help/contact/540977946302970
Legal Basis
Processing personal data follows Article 6(1)(f) GDPR for our legitimate interests, such as analytics, communication, and business promotion. User consent under Article 6(1)(a) GDPR may also serve as the basis, and users can withdraw this consent anytime as per Article 7(3) GDPR.
User data (e.g., IP addresses, personal details) is processed when visiting our Instagram profile. These data points help provide statistical insights, advertising, and user profiling. Logged-in users may have their data linked to their Instagram accounts.
Further information can be found in Instagram’s privacy policy:
https://help.instagram.com/519522125107875
Social Media Links via Graphic or Text Link
Our website features links to various social media networks. These links use graphics to prevent automatic data transmission when visiting our website. Clicking the graphic redirects users to the respective social media platform, which then collects user data such as IP addresses, visit timestamps, and visited pages. Logged-in users may have these data points linked to their accounts. Users are advised to log out of their accounts before clicking these links.
Linked platforms include:
- Facebook: Privacy Policy
- YouTube: Privacy Policy
- Instagram: Privacy Policy
Google Analytics
We use Google Analytics, a web analysis service from Google Ireland Limited, to analyze user behavior on our website. The processing is based on Article 6(1)(f) GDPR, supporting our legitimate interest in optimizing and operating our website economically.
Google Analytics anonymizes IP addresses within the EU before transferring data (e.g., IP address, visit time) to servers in the USA. Further privacy information is available here:
https://www.google.com/intl/de/policies/privacy/partners
Users can prevent tracking via the Google Analytics opt-out browser add-on:
https://tools.google.com/dlpage/gaoptout?hl=en
Jetpack – WordPress Stats
We use Jetpack with “WordPress Stats” to analyze website usage. Jetpack stores cookies in browsers and processes data like IP addresses and visit behavior. The collected data is anonymized before storage. Users can disable cookies via browser settings. Further details are in Jetpack’s privacy policy.
Google Maps
We use Google Maps on our website to display our location and create directions for reaching us. This is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, referred to hereafter as “Google.”
To enable the display of specific fonts on our website, a connection to the Google server in the USA is established when our website is accessed.
If you access the Google Maps component integrated into our website, Google will store a cookie on your device via your internet browser. This is done to process your user settings and data for displaying our location and generating directions. It is possible that Google servers located in the USA are used.
The legal basis is Article 6(1)(f) of the GDPR. Our legitimate interest lies in optimizing the functionality of our website.
Through this connection to Google, Google can determine from which website your request has been sent and to which IP address the directions should be transmitted.
If you do not agree to this processing, you have the option to prevent the installation of cookies through your browser settings. Details on this can be found above under the section “Cookies.”
The use of Google Maps and the information obtained through it is subject to Google’s Terms of Use (https://policies.google.com/terms?gl=DE&hl=de) and the Terms of Service for Google Maps (https://www.google.com/intl/de_de/help/terms_maps.html).
Additionally, Google provides further information at:
Google reCAPTCHA
We use Google reCAPTCHA on our website to verify and prevent automated interactions, such as those by bots. This service is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, referred to hereafter as “Google.”
This service allows Google to determine which website a request is sent from and the IP address of the device using the reCAPTCHA input box. Alongside your IP address, other data required for the provision of this service may be collected by Google.
The legal basis is Article 6(1)(f) of the GDPR. Our legitimate interest lies in protecting our website and preventing unwanted automated access, such as spam.
Further details about data handling by Google can be found at:
Google Fonts
We use Google Fonts on our website to display external fonts. This is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, referred to hereafter as “Google.”
To display specific fonts, a connection to the Google server in the USA is established when our website is accessed.
The legal basis is Article 6(1)(f) of the GDPR. Our legitimate interest lies in optimizing and economically operating our website.
Through this connection, Google can determine from which website your request is sent and to which IP address the font display should be transmitted.
Further details about Google’s data handling can be found at:
FontAwesome
We use external fonts from FontAwesome to display fonts and visual elements on our website. FontAwesome is a service provided by Fonticons Inc., 6 Porter Road, Apartment 3R, Cambridge, MA 02140, USA.
When our website is accessed, a connection to FontAwesome’s server in the USA is established to enable and update the display of fonts and visual elements.
The legal basis is Article 6(1)(f) of the GDPR. Our legitimate interest lies in optimizing and economically operating our website.
Through this connection, FontAwesome can determine from which website your request is sent and to which IP address the font display should be transmitted.
More information about data handling by FontAwesome can be found at:
YouTube
We use YouTube to display videos on our website. This is a service provided by YouTube LLC., 901 Cherry Ave., 94066 San Bruno, CA, USA, a subsidiary of Google Ireland Limited.
We use YouTube with the “Enhanced Privacy Mode” function, which ensures, according to YouTube, that data is transmitted to YouTube only when a video is played.
The legal basis is Article 6(1)(f) of the GDPR. Our legitimate interest lies in improving the quality of our website.
When you play a YouTube video, YouTube collects data such as your IP address, the date and time, and the website you visited. If you are logged into your YouTube account, this data may be linked to your account.
Further information can be found at:
CloudFlare
We use CloudFlare as a Content Delivery Network (CDN) to secure our website and optimize loading times. This is a service provided by Cloudflare Inc., 101 Townsend Street, San Francisco, California 94107, USA.
When you access our website, your requests are routed through CloudFlare servers, which may collect statistical data such as:
- Your IP address
- The pages you access
- The type and version of your browser
- Your operating system
- The referrer URL
- Your time spent on the site
- Frequency of site visits
The legal basis is Article 6(1)(f) of the GDPR. Our legitimate interest lies in the secure and optimized operation of our website.
More details can be found at:
jsdelivr.net CDN
To optimize loading speed, layout, and content display on different devices, we use the jsdelivr.net CDN service. This is an open-source service provided by Prospectone Sp.z.o.o., ul. Krolewska 65A, 30-081 Krakow, Poland.
This service uses JavaScript libraries loaded from third-party servers, which may collect your IP address. More details are available at:
BootstrapCDN
We use BootstrapCDN, a service by StackPath LLC, 2021 McKinney Ave. Suite 1100, Dallas, TX 75201, USA, to optimize loading speed and website display.
The service relies on JavaScript libraries, and servers may collect your IP address. More details can be found at:
jQuery CDN
We use jQuery CDN, distributed by the jQuery Foundation via StackPath CDN, to optimize loading speed and display. When loading files, your IP address may be collected. For further information, refer to:
Google AdWords with Conversion Tracking
On our website, we use the advertising component Google AdWords and the so-called Conversion Tracking. This is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to as “Google.”
We use Conversion Tracking to target our advertising efforts effectively. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest lies in the analysis, optimization, and economic operation of our website.
If you click on an ad placed by Google, the Conversion Tracking service we use stores a cookie on your device. These so-called Conversion Cookies expire after 30 days and do not serve to personally identify you.
If the cookie is still valid and you visit a specific page of our website, both we and Google can evaluate that you clicked on one of our ads placed by Google and were subsequently redirected to our website.
Google compiles a statistic for us about the visit to our website based on the information gathered. Additionally, we receive information about the number of users who clicked on our ad(s) and the pages they visited on our website. However, neither we nor third parties who also use Google AdWords can identify you through this data.
You can prevent or restrict the installation of cookies through the settings of your internet browser. You can also delete already stored cookies at any time. The necessary steps and measures depend on the specific browser you use. If you have questions, please use the help function or documentation of your browser or contact the manufacturer or support.
Furthermore, Google provides additional information on this topic, especially regarding the options for preventing data usage, at the following links:
- https://services.google.com/sitestats/en.html
- https://www.google.com/policies/technologies/ads
- http://www.google.de/policies/privacy/
Google AdSense
We use Google AdSense on our website to embed advertisements. This is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to as “Google.”
Through Google AdSense, cookies and so-called web beacons are stored on your device via your internet browser. This allows Google to analyze how you use our website. The information collected, including your IP address and the advertising formats displayed to you, is transferred to and stored by Google in the USA. Google may also share this information with partners. However, Google states that your IP address will not be combined with other data.
The legal basis is Article 6(1)(f) GDPR. Our legitimate interest lies in the analysis, optimization, and economic operation of our website.
If you do not agree with this processing, you can prevent the installation of cookies by adjusting the settings in your internet browser. Details can be found above under “Cookies.”
Google also provides further information, particularly about preventing data usage, at:
Google Remarketing or “Similar Audiences” Component of Google
We use the Remarketing or “Similar Audiences” feature on our website. This is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to as “Google.”
We use this feature to display interest-based, personalized ads on third-party websites that also participate in Google’s advertising network.
The legal basis is Article 6(1)(f) GDPR. Our legitimate interest lies in the analysis, optimization, and economic operation of our website.
For this advertising service to function, Google stores a cookie with a numerical sequence on your device via your internet browser during your visit to our website. This cookie records, in anonymized form, both your visit and use of our website. No personal data is shared. If you later visit a third-party website that also uses the Google advertising network, ads related to our website or offers may be displayed.
To permanently disable this function, Google offers a browser plugin at:
You can also disable cookies from certain providers via:
Through cross-device marketing, Google may track your usage behavior across multiple devices, so you may still see interest-based, personalized ads even when switching devices. However, this requires you to have consented to linking your browsing history with your existing Google account.
For further information on Google Remarketing, Google provides additional details at:
MailChimp – Newsletter
We offer you the opportunity to sign up for our free newsletters via our website.
For newsletter distribution, we use MailChimp, a service of The Rocket Science Group, LLC, 512 Means Street, Suite 404, Atlanta, GA 30318, USA, hereinafter referred to as “The Rocket Science Group.”
Further privacy information is available from The Rocket Science Group at:
When you sign up for our newsletter, the data requested during the registration process, such as your email address and optionally your name and address, is processed by The Rocket Science Group. Additionally, your IP address, registration date, and time are stored. Your consent to receive the newsletter is obtained as part of the registration process, with the specific content of the newsletter described and this privacy policy referenced.
The newsletter sent via The Rocket Science Group also contains a so-called tracking pixel (also known as a web beacon). With this tracking pixel, we can analyze whether and when you read our newsletter and whether you followed any links included in the newsletter. The data processed during this process, including technical details like your system data and IP address, is stored to help optimize our newsletter service and tailor it to the readers’ preferences.
The legal basis for sending the newsletter and the analysis is Article 6(1)(a) GDPR.
You can revoke your consent to receive newsletters at any time, in accordance with Article 7(3) GDPR, with future effect. To do so, you simply need to notify us of your revocation or click the unsubscribe link included in each newsletter.
Klarna “CHECK-OUT”
For processing payments for orders placed via our online store, we use the payment service provided by Klarna Bank AB, Sveavägen 46, 111 34 Stockholm, Sweden, hereinafter referred to as “Klarna.”
To this end, we have integrated Klarna’s checkout system into the final order page of our online store.
The legal basis is contract fulfillment under Article 6(1)(b) GDPR. We also have a legitimate interest in offering effective and secure payment options, so another legal basis arises under Article 6(1)(f) GDPR.
When you use Klarna, your browser loads the checkout page from Klarna’s server. This transmits information such as your operating system, browser type and version, the page from which the checkout was requested, the date and time of the request, and your IP address to Klarna, even if you do not interact with the checkout page.
Once you complete the order on our online store, the data you entered in the checkout form is processed by Klarna to complete the payment.
For payment options like “PayPal” and “Prepayment,” the data processing is limited to sharing the payment information with us or PayPal without further consent.
For payment options like “Invoice,” “Installment Purchase,” “Credit Card,” “Direct Debit,” or “Immediate Transfer,” Klarna processes personal data for payment processing and identity and credit checks, including contact details such as name, address, date of birth, gender, email address, phone number, mobile number, IP address, and more.
If you choose the “Invoice” or “Installment Purchase” payment method, Klarna will collect and use personal data and payment history information to decide whether to approve the requested payment method. Probability scores for future payment behavior (so-called scoring) are also used, based on scientifically recognized mathematical-statistical methods.
Klarna provides further information on data processing and applicable data protection regulations at:
No products in the cart. 
