Datenschutzerklärung

1. Data Controller

The controller responsible for the processing of personal data on this website is:

Vulini GmbH
Fronhoferstrasse 32 a
6912 Hörbranz, Austria

Email: info@vulini.at
Tel.: +43 664 465 7638
Tel.: +39 344 539 3797

2. What Personal Data Do We Process?

We process personal data that you voluntarily provide to us when using our online shop. This includes, in particular:

First and last name
Billing and delivery address
Email address
Telephone number
Order, delivery and payment information
Information you provide to us when contacting us
Technical usage data (e.g. IP address, browser type, operating system and time of access)

We process personal data exclusively in accordance with applicable data protection laws, in particular the General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (DSG).

3. Purposes of Data Processing

We use your personal data for the following purposes:

Processing, handling and fulfilment of your orders
Delivery of ordered products
Processing of payments and issuing invoices
Customer service and handling enquiries
Technical provision, operation and security of our website
Continuous improvement of our online shop and our services
Compliance with legal requirements (e.g. statutory commercial and tax retention obligations)
Fraud prevention and protection of our systems
Sending newsletters and promotional information (only with your prior and explicit consent)

4. Legal Bases for Processing

The processing of personal data is based on the following legal grounds:

Art. 6(1)(b) GDPR: Processing is necessary for the performance of a contract or for taking steps at the request of the data subject prior to entering into a contract.
Art. 6(1)(c) GDPR: Processing is necessary for compliance with legal obligations to which we are subject (e.g. statutory tax retention obligations).
Art. 6(1)(f) GDPR: Processing is necessary for the purposes of our legitimate interests, such as IT security, prevention of misuse and ensuring the stable operation of our online shop.
Art. 6(1)(a) GDPR: Processing is based on your explicit consent (e.g. for certain marketing, tracking or newsletter services).

You may withdraw your consent at any time with effect for the future.

5. Disclosure to Service Providers

Where necessary for the fulfilment of contracts or the operation of our website, we may disclose personal data to carefully selected service providers and partners, including:

Hosting and IT infrastructure providers
Payment service providers for processing transactions
Shipping and logistics partners for the delivery of goods
Providers of analytics, marketing or newsletter tools (where consent has been given)
Tax advisors and legal advisors where required by law

Any disclosure is strictly purpose-related and takes place in accordance with applicable legal requirements, including data processing agreements pursuant to Art. 28 GDPR where applicable.

6. Cookies and Similar Technologies

Our website uses cookies and similar technologies:

Technically necessary cookies: These ensure essential functions of the online shop, such as the shopping cart and session management. The legal basis is Art. 6(1)(f) GDPR and, where applicable, § 165(3) TKG 2021.
Optional cookies (analytics & marketing): These are only activated if you actively provide your consent via our cookie banner (Art. 6(1)(a) GDPR).

You can adjust or withdraw your cookie preferences at any time via the link to the cookie settings in the footer of our website.

7. Data Retention

We retain personal data only for as long as required for the relevant purpose or for as long as statutory retention periods apply:

Contract, invoicing and accounting data: Stored in accordance with statutory retention periods, which in Austria are generally 7 years pursuant to § 132 BAO and § 212 UGB.
Data processed on the basis of consent: Processed until your consent is withdrawn.
Server log files: Retained for security purposes for a maximum period of 7 to 30 days and subsequently deleted or anonymised.

8. Data Security

We implement appropriate technical and organisational security measures in accordance with Art. 32 GDPR to protect your personal data against loss, destruction, unauthorised access or manipulation.

Data transmissions during the ordering process are encrypted using SSL/TLS technology (HTTPS).

9. Transfers to Third Countries

If personal data is transferred to countries outside the European Economic Area (EEA), we ensure that the requirements of Articles 44 et seq. GDPR are complied with, for example through an adequacy decision by the European Commission or the use of EU Standard Contractual Clauses.

10. Your Rights

Under the GDPR, you have the following rights:

Right of access to your personal data (Art. 15 GDPR)
Right to rectification of inaccurate personal data (Art. 16 GDPR)
Right to erasure of personal data that is no longer required (Art. 17 GDPR)
Right to restriction of processing (Art. 18 GDPR)
Right to data portability in a commonly used format (Art. 20 GDPR)
Right to object to processing based on legitimate interests (Art. 21 GDPR)
Right to withdraw consent at any time with effect for the future (Art. 7(3) GDPR)

You also have the right to lodge a complaint with the competent supervisory authority:

Austrian Data Protection Authority (Datenschutzbehörde)

Barichgasse 40–42
1030 Vienna
Austria

Email: dsb@dsb.gv.at
Web: https://www.dsb.gv.at

11. Minors

Our online shop is not specifically directed at persons under the age of 18. Minors should only submit personal data with the express consent of their legal guardians.

12. Changes to this Privacy Policy

We reserve the right to amend this Privacy Policy if legal requirements or our internal processes change.

Last updated: September 2026

13. Contact

If you have any questions regarding the processing of your personal data or wish to exercise your data subject rights, please contact us: