Privacy Policy

Privacy Policy

Data Protection Responsibility:
Anne-Catherine Hammerer
Abraham-A-Sancta-Clara-Str. 18A
1140, Vienna
Austria
E-mail: support@grnd-clothing.com

Contact: For any questions regarding the collection, processing, or use of your personal data, or for requests for information, correction, restriction, or deletion of data, as well as for revoking granted consent or objections to specific uses of data, please directly contact the data protection officer listed above.

Your Rights: You have the right to access, correct, restrict, revoke, object to data processing, and request deletion and portability of the data stored with us.

Legal Basis: Your data is processed based on the GDPR (Art. 6 (1)(a) consent and/or (b) necessary for contract fulfillment, and Art. 6 (1)(c) GDPR), as well as § 165 (3) of the Telecommunications Act 2021.

Data Storage: You can visit our website without providing personal information. The web server automatically logs a server log file for each visit, which includes the name of the requested file, your IP address, date and time of access, data volume transferred, and the requesting provider. These access data are used solely to ensure the smooth operation of the site and to improve our services, based on our legitimate interest as per Art. 6 (1)(f) GDPR. All access data are deleted no later than 30 days after the visit.

Shop System: We use Shopify Inc. ("Shopify") as our shop platform. When placing an order, you agree to the storage and processing of your personal data by Shopify. Your data is transferred and processed at Shopify’s data center in the United States to manage your orders, authenticate you, process payments, and enhance Shopify’s services. More information on Shopify’s privacy policy can be found at Shopify Privacy Policy. Shopify uses Google Maps services for geographical map representation. Google’s privacy policy can be viewed here.

For any inquiries regarding our service providers and the basis of our cooperation, please contact the data protection officer listed above.

Customer Account: If you create a customer account and give your consent per Art. 6 (1)(a) GDPR, we will use your data to manage your account. We store your data for future orders on our website. You can delete your account at any time by contacting the data protection officer or using the relevant function in your account. Upon deletion, your data will be erased unless you have expressly consented to further use in accordance with Art. 6 (1)(a) GDPR. We reserve the right to use data as permitted by law, about which we inform you in this declaration.

Data Processing for Customer Communication and Contract Execution: Data is processed for customer communication, contract execution, handling warranty claims, and legal obligations based on Art. 6 (1)(b) GDPR. This includes data voluntarily provided by you when contacting us or placing orders. Required fields are marked, and these are necessary for contract fulfillment, such as shipping goods. After completing the contract, your data will be deleted unless we are required to retain it for legal reasons (e.g., tax laws).

In case of a contract conclusion, data related to the contract will be stored for seven years in compliance with tax laws. Furthermore, information like your name, address, purchased goods, and purchase date will be retained for 10 years due to product liability laws. Data processing is based on legal provisions from § 165 (3) Telecommunications Act 2021 and Art. 6 (1)(a) GDPR.

Data Processing for Shipping: To fulfill the contract, we forward your data to the shipping service provider as necessary to deliver the ordered goods, per Art. 6 (1)(b) GDPR.

Data Processing for Payment: For details on how your data is shared with service providers for order, payment, and shipping processing, refer to the following sections of this privacy policy. Once the contract is completed, your data will be restricted for further processing and deleted after the tax and commercial retention periods, as per Art. 6 (1)(c) GDPR, unless you have explicitly agreed to further use per Art. 6 (1)(a) GDPR.

We cooperate with the following service providers for payment processing: technical service providers, credit institutions, and payment providers.

Transaction Data Processing: Depending on the selected payment method, we may share data necessary for processing the payment with technical service providers, credit institutions, or the chosen payment provider. This is for contract fulfillment, per Art. 6 (1)(b) GDPR. Payment providers may collect data themselves. The privacy policy of the relevant payment provider applies.

For inquiries about our payment partners, please contact the data protection officer.

Identity and Credit Check for PayPal and Klarna: If you select "purchase on account" via Klarna or PayPal, we will transmit your data to Klarna or PayPal to process the payment and perform identity and credit checks, per Art. 6 (1)(b) GDPR. Please note that payment on account through Klarna or PayPal is only available if the credit check is successful. Details are provided in the privacy policies of Klarna and PayPal, available at Klarna Privacy Policy and PayPal Privacy Policy.

No further data is shared with third parties beyond the mentioned service providers.

Social Media: Social Buttons for TikTok, YouTube, Instagram (Meta):
Our website includes social media buttons, embedded as HTML links. Clicking a button opens the relevant social network in a new browser window. There, you can interact with their content, like pressing the like or share button.

Our Online Presence on TikTok, YouTube, and Instagram (Meta):
With your consent per Art. 6 (1)(a) GDPR, when you visit our social media profiles, data may be collected and pseudonymous usage profiles created for marketing purposes. Cookies are typically used for this purpose. For details on data processing by social media operators, refer to their privacy policies:

Cookies and Other Technologies: We use cookies and other technologies on our website for optimization. Cookies are data files stored on your device. Some cookies are session-based and are deleted when you close your browser, while persistent cookies remain on your device.

For non-essential cookies, consent is required for storage or access to your device’s data, per Art. 6 (1)(a) GDPR.

You can adjust your browser settings for cookies (e.g., in Microsoft Edge, Safari, Chrome, Firefox, Opera).

You may revoke your consent for non-essential cookies at any time by contacting the data protection officer.

Web Analytics and Online Marketing: With your consent per Art. 6 (1)(a) GDPR, we use Shopify and Google Analytics to analyze website usage and improve our offerings. Data collected through these tools may be stored on servers in Europe or the U.S. For details, see the respective providers' privacy policies:

Google Services: We use Google services for web analysis. Google collects and processes data from your device, including your IP address. Data is anonymized within the EU (IP masking). The legal basis for this processing is your consent per Art. 6 (1)(a) GDPR.

Further details are available in Google’s Privacy Policy.