1. Data Protection at a Glance
General Information
The following information provides a simple overview of what happens to your personal data when you visit our website. Personal data refers to all data with which you can be personally identified. Detailed information on data protection can be found in the privacy policy listed below this text.
Data Collection on Our Website
Who is responsible for data collection on this website? Data processing on this website is carried out by the website operator. You can find their contact details in the "Information on the Responsible Body" section of this privacy policy.
How do we collect your data? Your data is collected, on the one hand, by you providing it to us. This may include, for example, data that you enter in a contact form or provide when placing an order in the shop.
Other data is collected automatically or with your consent by our IT systems when you visit the website. This primarily includes technical data (e.g., internet browser, operating system, or time of page view). This data is collected automatically as soon as you enter this website.
What do we use your data for? Some of the data is collected to ensure the website is provided without errors. Other data is used to process your orders and payments in the online shop.
What rights do you have regarding your data? You have the right at any time to receive free information about the origin, recipient, and purpose of your stored personal data. You also have the right to request the rectification or erasure of this data. If you have given consent to data processing, you can revoke this consent at any time for the future. Furthermore, you have the right, under certain circumstances, to request the restriction of the processing of your personal data or to lodge a complaint with the competent supervisory authority.
2. General Information and Mandatory Disclosures
Information on the Responsible Body
The responsible body for data processing on this website is:
Mehmet Dogur e.U. Schubertstraße 46/1
7210 Mattersburg
Austria
Storage Duration
Unless a more specific storage period has been mentioned within this privacy policy, your personal data will remain with us until the purpose for data processing ceases (e.g., after an order has been fully completed). If you assert a legitimate request for erasure or revoke consent for data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data (e.g., tax or corporate law retention periods of 7 years under Austrian law); in the latter case, deletion will occur after these reasons cease to apply.
Legal Basis for Data Processing on This Website
If you have consented to data processing (e.g., via the cookie banner), we process your personal data based on Art. 6 para. 1 lit. a GDPR.
If processing is necessary for the performance of a contract with you (e.g., processing the purchase contract, shipping) or for the implementation of pre-contractual measures, we process your data based on Art. 6 para. 1 lit. b GDPR.
Data processing may also be carried out based on our legitimate interest according to Art. 6 para. 1 lit. f GDPR (e.g., to ensure IT security or to prevent fraud during the payment process).
Revocation of Your Consent to Data Processing
Many data processing operations are only possible with your express consent. You can revoke any consent you have already given at any time. The legality of the data processing carried out before the revocation remains unaffected by the revocation.
Right to Lodge a Complaint with the Competent Supervisory Authority
In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, their place of work, or the place of the alleged infringement. In Austria, this is the Austrian Data Protection Authority (DSB).
3. Use of the Shopify E-Commerce Platform
We use the Shopify store system from Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland (hereinafter "Shopify") for our online shop.
All data that you enter on our website LP-Peptide.at as part of an order or during a visit is processed on Shopify's servers. This includes:
-
Your contact details (name, address, email, phone number)
-
Your payment and order data
-
Your IP address and device data
The transfer and processing of your data by Shopify is absolutely necessary to process the purchase contract with you, check payments, and prepare shipping. The legal basis for this is Art. 6 para. 1 lit. b GDPR (performance of contract).
Shopify stores and processes data in the European area, but also transfers data to third countries such as Canada and the USA as part of its global infrastructure (e.g., for fraud attempt analysis). To guarantee an adequate level of data protection, Shopify relies on the Standard Contractual Clauses of the European Commission.
Further information on Shopify's data protection can be found at:
https://www.shopify.com/legal/privacy
4. Data Collection on Our Website (LP-Peptide.at)
Server Log Files
When you visit our website, the provider (Shopify) automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:
-
Browser type and browser version
-
Operating system used
-
Referrer URL (the previously visited page)
-
Hostname of the accessing computer
-
Time of the server request
-
IP address
This data is required to display the website correctly and to ward off attacks. Processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR (legitimate interest in secure and stable website operation).
Shopify Cookies
Our website uses cookies. These are small text files that Shopify stores on your device. Shopify uses functional cookies that are absolutely necessary for the shop to function (e.g., so that the shopping cart saves products while you continue browsing, or so that you remain logged into your customer account). These necessary cookies are set on the basis of Art. 6 para. 1 lit. b GDPR (performance of contract).
If you consent via our cookie banner, analytics or marketing cookies will also be set. This processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR (consent) and can be revoked by you at any time.
A detailed overview of the cookies used by Shopify can be found here:
https://www.shopify.com/legal/cookies
5. Payment Processing and Shipping
We work with specialized service providers to process your orders.
Shipping Service Providers
We pass on your address data (name, street, postcode, city) to the transport company commissioned by us (e.g., Österreichische Post, DHL, DPD, etc.) so that the goods can be delivered to you. The legal basis is Art. 6 para. 1 lit. b GDPR (performance of contract).
Payment Service Providers
Depending on the payment method you choose in the checkout process, your payment data will be forwarded to the corresponding payment service provider. If you use Shopify's integrated payment methods (Shopify Payments), the processing is carried out via the partner Stripe or Klarna. The data transfer serves exclusively for payment processing and is carried out on the basis of Art. 6 para. 1 lit. b GDPR.
6. Your Rights as a Data Subject
As a data subject, you have the following rights under the GDPR:
-
Right to Information (Art. 15 GDPR): You can request information about your personal data processed by us.
-
Right to Rectification (Art. 16 GDPR): You can request the correction of inaccurate data.
-
Right to Erasure (Art. 17 GDPR): You can request the erasure of your data (provided there are no legal retention periods to the contrary).
-
Right to Restriction of Processing (Art. 18 GDPR): You can request the restriction of data processing.
-
Right to Data Portability (Art. 20 GDPR): You have the right to receive your data in a machine-readable format.
-
Right to Object (Art. 21 GDPR): You can object to data processing that is based on a "legitimate interest."