In the following privacy policy, we inform you about the key aspects of data processing in connection with our website. We collect and process personal data only on the basis of statutory provisions (General Data Protection Regulation, Telecommunications Act 2003).

When you access or visit our website, your IP address and the start and end times of the session are recorded. This is a technical necessity and therefore constitutes a legitimate interest within the meaning of Art. 6(1)(f) GDPR (to ensure technical operation).

The party responsible for data processing on this website is:
STM Vertriebs GmbH, represented by Managing Director Jan Harbrecht
Innsbrucker Bundesstraße 126, 5020 Salzburg, Austria
E-mail: info@stm-vertriebs-gmbh.at, Telephone: +43 662 251500333

Contacting us

If you contact us via the contact form on our website or by e-mail, the data you transmit to us will be stored for six months for the purpose of processing your inquiry and handling any subsequent questions. Your transmitted data will not be passed on to third parties without your consent.

Data storage

To facilitate the purchasing process and for subsequent contract fulfillment, the webshop operator stores the connection holder's IP address (via cookies), as well as the e-mail address, name, company name (optional), telephone number (optional), and address.
The following data is also stored by us for the purpose of contract fulfillment:
E-mail address, name, company name (optional), telephone number (optional), and address.

The data provided by you is required for the fulfillment of the contract and the implementation of pre-contractual measures. It is not possible to conclude a contract without this data. The collected data is not transmitted to third parties, with the exception of the transmission of payment data (credit card details) to the processing banking institutions or payment service providers for the purpose of debiting the purchase price; to the shipping company (carrier) commissioned by us to deliver the goods; and to our tax advisor for the fulfillment of our tax obligations.

If you cancel the purchasing process, the data stored by us will be deleted. If a contract is concluded, all data resulting from the contractual relationship will be stored until the expiration of the statutory retention period for tax purposes (7 years). Furthermore, the transmitted name, address, purchased goods, and date of purchase will be stored until the expiration of the product liability period (10 years). Data processing is carried out based on the statutory provisions of Section 96 Para. 3 of the Telecommunications Act (TKG) and Article 6 Para. 1 lit. a (consent) and/or lit. b (necessary for the performance of a contract) of the GDPR.

Cookies

Our website uses so-called cookies. These are small text files that are stored on your device via your browser. They do not cause any damage. We use cookies to make our services user-friendly. Some cookies remain stored on your device until you delete them. They enable us to recognize your browser upon your next visit. If you do not wish this to happen, you can configure your browser to inform you about the setting of cookies and allow them only on a case-by-case basis. Disabling cookies may limit the functionality of our website. To obtain and document your consent for the use of cookies and third-party content requiring consent, we use the Wix consent tool. Your selection is saved and can be revoked at any time. Our website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics uses cookies to collect information about website usage. The data collected (e.g., IP address, usage behavior) is transmitted to Google servers within the EU or, where applicable, the USA, and processed there.
We have configured Google Analytics to anonymize IP addresses (“IP anonymization”).
The legal basis for the use of Google Analytics is your explicit consent (Art. 6 para. 1 lit. a GDPR). You may withdraw your consent at any time via the consent tool.
Further information can be found at: https://policies.google.com/privacy

Third-party providers and external services

​

Our website is hosted on servers provided by Wix.com Ltd., 40 Namal Tel Aviv St., Tel Aviv 6350671, Israel. For hosting and content delivery, Wix utilizes infrastructure from providers such as Google Cloud (Google LLC, USA).
Consequently, data processing also takes place outside the European Union, particularly in the USA and Israel. Wix is ​​certified under the EU-U.S. Data Privacy Framework (DPF) and thus ensures an adequate level of data protection. A data processing agreement pursuant to Art. 28 GDPR has been concluded with Wix.
Further information on data protection at Wix: https://de.wix.com/about/privacy

Our website uses a Content Delivery Network (CDN) provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, to deliver content—such as scripts, stylesheets, or media files—more quickly and reliably. In this process, your IP address is transmitted to Google.
The legal basis for this use is Art. 6(1)(f) GDPR. Our legitimate interest lies in the fast and secure provision of our website.
Data processing may occur outside the EU, particularly in the USA. Google is certified under the EU-U.S. Data Privacy Framework. A data processing agreement has been concluded (to the extent covered by Wix).
Further information can be found at: https://cloud.google.com/cdn/docs/overview

​

For technical monitoring and error analysis, we use the tool "Sentry," provided by Functional Software Inc., 132 Hawthorne Street, San Francisco, CA 94107, USA.
In the event of an error, technical data—such as IP address, browser and device type, and usage behavior—may be collected and processed to improve the stability and reliability of our website.
The legal basis for this processing is Art. 6(1)(f) GDPR (legitimate interest in secure and stable operation).
Sentry is integrated via our hosting provider; a data processing agreement has been concluded. Data processing in third countries (e.g., the USA) may occur. Sentry provides appropriate safeguards in accordance with Art. 46 GDPR. Further information: https://sentry.io/privacy/

Our website uses features of the web mapping service "Google Maps." The service provider for this feature is:
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Tel: +353 1 543 1000
Using Google Maps requires the storage and processing of your IP address. Google generally transfers this data to a server in the USA and stores it there. Processing is carried out by the service provider (named above); the operator of this website has no influence over the data transfer.
Data processing is based on the statutory provisions of Section 96(3) of the Telecommunications Act (TKG) and Art. 6(1)(f) (legitimate interest) of the GDPR. The use of Google Maps improves the discoverability of the locations presented on our website.

​

Further information about how the service provider “Google” handles user data can be found in the data protection declaration:
https://policies.google.com/privacy?hl=de .
Google also processes the data in the USA, but has refused to do so
Subject to EU-US Privacy Shield.
https://www.privacyshield.gov/EU-US-Framework
​
Payment service provider PayPal

If you select the payment method “PayPal”, payment is processed via the payment service provider PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg.
Personal data (name, address, email address, payment information) is transmitted to PayPal for the purpose of payment processing.
The legal basis for the processing is Article 6 Paragraph 1 Letter b GDPR (fulfillment of the contract). Further information on data protection at PayPal can be found at: https://www.paypal.com/de/webapps/mpp/ua/privacy-full

Your rights as a data subject

​

As a data subject, you generally have the right to: 
Right to information (Art. 15 GDPR) 
Right to rectification (Article 16 GDPR) 
Right to deletion (Article 17 GDPR) 
Right to restriction of processing (Article 18 GDPR) 
Right to data portability (Art. 20 GDPR) 
Right to object (Art. 21 GDPR) 
Right to revoke consent given (Art. 7 Para. 3 GDPR)

If you suspect that data protection law violations have occurred in the course of processing your data, you have the opportunity to complain to us (info@stm-vertriebs-gmbh.at) or the data protection authority.
You can reach us using the following contact details:
Website operator: STM Vertriebs GmbH
Telephone number: +43 662251500333
Email: info@stm-vertriebs-gmbh.at
​
We use technical and organizational security measures to protect your data from unauthorized access, loss or manipulation.
​
Source: Datenschutzgenerator Österreich DSGVO