Privacy Policy

Controller Responsible for Data Processing

Repack much e.U.
Kreuttalstraße 4
2123 Unterolberndorf
Austria

Phone: +43 (0) 1 734 66 66
Mobile: +43 699 107 52 528
Fax: +43 (0) 1 734 66 00-15
Email: office@repackmuch.at

Managing Director: Walter Wittmann

1. General Information on Data Processing

We take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with legal data protection regulations and this privacy policy.

Using our website is generally possible without providing personal data. Personal data is only collected when required to provide specific functions (e.g. contact forms, orders, cookie consent).

2. Hosting and Server Log Files

Our website is hosted by HostProfis ISP Telekom GmbH, Rennweg 9, 9587 Riegersdorf, Austria. A data processing agreement in accordance with Art. 28 GDPR is in place.
More information: https://www.hostprofis.com/web/data-protection

Each time you visit our website, the hosting provider automatically collects information in so-called server log files. This includes:

IP address (anonymized)
Date and time of access
Accessed pages/files
Referrer URL
Browser type and version
Operating system

This data is processed to safeguard our legitimate interest in the technical stability and security of our website (Art. 6 para. 1 lit. f GDPR).

Storage duration:

Web access and system log files: 31 days
Authentication log files: 90 days

3. Cookies & Consent Management (Borlabs Cookie)

We use Borlabs Cookie (Borlabs GmbH, Hamburger Str. 11, 22083 Hamburg) to manage cookie consents. When you first visit our website, a banner will appear allowing you to accept or reject specific cookies. Your selection is saved in a cookie.

Legal basis: Art. 6 para. 1 lit. a GDPR
More information: https://de.borlabs.io/datenschutz/

4. Services and Plugins Used

4.1 WooCommerce

WooCommerce is an open-source e-commerce platform by Automattic Inc., 60 29th Street #343, San Francisco, CA 94110, USA, used to operate our online shop.

Personal data such as name, address, email, phone number, payment details, and IP address are processed to complete your order.

Legal basis: Art. 6 para. 1 lit. b GDPR (contract fulfillment)
Privacy: https://automattic.com/privacy/

4.2 WooCommerce PayPal Payments

This plugin integrates PayPal (PayPal Europe S.\u00e0 r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg) into our shop. It enables payments via PayPal, direct debit, credit card, or invoice.

Personal data such as payment amount, account details, name, address, IP address, and other payment data are transmitted to PayPal.

Legal basis: Art. 6 para. 1 lit. b GDPR
Privacy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full

4.3 German Market

German Market by MarketPress GmbH, Venloer Str. 528, 50825 Cologne, adapts our shop to Austrian/European legal requirements. It does not process data itself but supplements WooCommerce with legal content, tax calculations, and invoice generation.

Legal basis: Art. 6 para. 1 lit. c GDPR
Privacy: https://marketpress.de/datenschutz/

4.4 Stripe

We use Stripe (Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Dublin, Ireland) for online payment processing. Stripe processes credit card numbers, bank details, IP addresses, browser data, and possibly location data.

Legal basis: Art. 6 para. 1 lit. b GDPR
Privacy: https://stripe.com/at/privacy

4.5 Google Fonts

This site uses Google Web Fonts for consistent font display. Your browser loads the required fonts into your cache upon visiting a page.

Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Data processed: IP address, browser data
Legal basis: Art. 6 para. 1 lit. a GDPR
Privacy: https://policies.google.com/privacy

4.6 Google Maps

We use Google Maps via API to display locations and directions. Your IP address is transmitted to Google when viewing a map.

Legal basis: Art. 6 para. 1 lit. a GDPR
Privacy: https://policies.google.com/privacy

4.7 Cloudflare Turnstile

We use Cloudflare Turnstile to protect our website against automated attacks and spam. Cloudflare analyzes certain technical information from your device (e.g., browser data, IP address) without setting cookies or tracking user behavior.

Provider: Cloudflare Inc., 101 Townsend St, San Francisco, CA 94107, USA
Legal basis: Art. 6 (1) lit. f GDPR (legitimate interest)
Privacy Policy: https://www.cloudflare.com/de-de/privacypolicy/

4.8 WordPress & WordPress Foundation

Our website is based on WordPress, developed by the WordPress Foundation, 660 4th Street, San Francisco, CA 94107, USA. Technical data such as IP address and browser information may be processed.

Privacy: https://wordpress.org/about/privacy/

4.9 Smash Balloon (Facebook Feed)

We use Smash Balloon (Smash Balloon LLC, 5200 Willson Road, Edina, MN 55424, USA) to display Facebook content. This may connect to Meta and process data like IP address and usage info.

Legal basis: Art. 6 para. 1 lit. a GDPR
Privacy: https://smashballoon.com/gdpr-and-our-plugins/

4.10 Wordfence

We use Wordfence (Defiant Inc., 800 5th Ave Ste 4100, Seattle, WA 98104, USA) for website security. It processes IP addresses and logs security-related events.

Legal basis: Art. 6 para. 1 lit. f GDPR
Privacy: https://www.wordfence.com/privacy-policy/

4.11 Polylang

Polylang (WP SYNTEX, 28 rue Jean Sebastien Bach, 38090 Villefontaine, France) stores the user’s selected language preference in a cookie.

Legal basis: Art. 6 para. 1 lit. f GDPR
Privacy: https://polylang.pro/privacy-policy/

4.12 BootstrapCDN

We use BootstrapCDN (jsDelivr, Prospect One, Królewska 65A/1, 30-081 Kraków, Poland) to quickly deliver web content. Your IP address may be transmitted to EU or US servers.

Legal basis: Art. 6 para. 1 lit. a GDPR
Privacy: https://www.jsdelivr.com/privacy-policy-jsdelivr-net

4.13 Contact Form (Contact Form 7)

We use Contact Form 7 to enable user-friendly contact via our website. Data entered is sent to us via our own server and not processed by third parties.

Data processed: Name, email address, message, optionally phone number
Data is used solely to handle your request.

Legal basis: Art. 6 para. 1 lit. b GDPR

5. Contacting Us

When you contact us (e.g. by email or phone), we store your information to process your request and for follow-up questions.