Artacarpa e.U. (hereinafter "Artacarpa") attaches great importance to the protection of your personal data and undertakes to treat it in strict accordance with the applicable data protection regulations.

With the following detailed explanations, Artacarpa provides comprehensive information about the type, scope and purpose of the collection and use of personal data on the website artacarpa.com. This privacy policy is designed to inform you transparently about data processing and to explain your rights in more detail in order to meet the requirements of Art. 13 GDPR.

1. Responsible party and contact

The responsible party for the processing of your personal data is:

Artacarpa e.U.
Thal-Aue 11b
A - 9911 Assling
E-Mail: info@artacarpa.com
Phone: +43 (0) 670 188 2800
Owner: Christian Girstmair

For all concerns regarding data protection, you can contact Artacarpa at any time using the contact details above.

2. Scope of this privacy policy

This privacy policy sets out how the artacarpa.com website handles the data of all those who use, visit or even accidentally land on it. It applies in particular to:

• Individuals who accidentally access the website, for example, due to a typing error in the URL or clicking on an incorrect link.
• Communication partners who contact Artacarpa via forms, e-mail, telephone or other means of communication, regardless of the purpose of their request.
• Customers and prospective customers who wish to order products via the website, request information or use services.
• Persons who examine the website as part of experiments, whether for loading time analysis or for display on devices such as internet-enabled refrigerators.
• Registered users who create a customer account in order to fully use the services and functions of Artacarpa.

3. Data collection and processing in detail

3.1 Customer management and order processing

As part of the registration on artacarpa.com, the creation of a customer account and the execution of orders, Artacarpa collects and processes personal data in order to ensure the initiation and fulfillment of the contract.

3.1.1 Processed data categories of order processing for processing management

• Personal master data: First and last name, (optional company name and UID number)
• Contact details: Postal address, e-mail address, (optional telephone number)
• Payment details: Bank details, billing address
• Order data: Ordered products, delivery address
• Communication data: Correspondence, inquiries, complaints

3.1.2 Payment processing

Artacarpa offers various payment methods to ensure flexible and secure payment processing. As part of the payment process, personal data is transferred to specialized payment service providers.

Advance payment / bank transfer: If you select this payment method, Artacarpa processes the necessary payment data to process the transaction. The data is used exclusively for the purpose of payment processing.

Stripe: When using the payment service provider Stripe, your payment data is transmitted to Stripe, Inc. Stripe handles all payment methods except advance payment or bank transfer and guarantees a high security standard through state-of-the-art encryption technologies.

Stripe Payments Europe, Limited
1 Grand Canal Street Lower
Grand Canal Dock
Dublin, D02 H210
Ireland
Stripe's privacy policy

3.1.3 Warranty and guarantee processing

Artacarpa processes the relevant personal data for the processing of warranty, guarantee or compensation claims. This includes the documentation of defects, communication with customers and the coordination of replacement deliveries or refunds.

3.2 Newsletter and advertising measures

Artacarpa offers a newsletter service to regularly inform customers about news, exclusive offers and new products. Registration for the newsletter takes place via a so-called double opt-in procedure to ensure that the registration is actually requested by the owner of the e-mail address.

3.2.1 Processed data categories of the newsletter for processing management

• E-mail address: For sending the newsletter
• Registration and confirmation time: For documentation of consent

3.2.2 Withdrawal of consent

Consent to receive the newsletter can be revoked at any time without giving reasons with effect for the future. A corresponding unsubscribe link is available in every newsletter for this purpose. Alternatively, the revocation can also be made by sending an informal message to Artacarpa.

3.3 Processing of inquiries and support

When contacting Artacarpa, whether via the contact form, by e-mail, telephone or other means, the personal data transmitted will be processed for the purpose of processing the request. This serves for efficient communication and the answering of questions, suggestions or complaints. This also applies if you use the withdrawal button provided on our website. In this case, the data you enter will be processed for the purpose of handling your withdrawal.

3.3.1 Processed data categories for inquiries and support for processing management

• Personal master data: First and last name, (optional company name and UID number)
• Contact details: E-mail address (optional telephone number & postal address)
• Content data: Content of the request, attachments
• Communication history: History of correspondence
• Communication data: Correspondence, inquiries, complaints

3.4 Web analysis and marketing

Artacarpa uses tools to analyze the usage behavior on artacarpa.com in order to optimize the online offer and provide personalized advertising. Cookies and similar technologies are used for this purpose (see point 6). The analysis is carried out on a pseudonymous basis, without any direct conclusions about your person being possible.

4. Legal bases of data processing

The processing of personal data by Artacarpa takes place on the basis of the following legal bases, which are in accordance with the provisions of the GDPR.

• Contract fulfillment (Art. 6 para. 1 lit. b GDPR): The processing is necessary to fulfill a contract or to carry out pre-contractual measures that take place at your request.
• Consent (Art. 6 para. 1 lit. a GDPR): The processing takes place with your express consent, for example when registering for the newsletter.
• Legal obligation (Art. 6 para. 1 lit. c GDPR): The processing is necessary to fulfill a legal obligation to which Artacarpa is subject, for example within the framework of tax and commercial law retention obligations.
• Legitimate interest (Art. 6 para. 1 lit. f GDPR): The processing takes place to safeguard the legitimate interests of Artacarpa or a third party, unless your interests or fundamental rights outweigh them.

5. Disclosure of personal data to third parties

Artacarpa only passes on personal data to third parties to the extent necessary and in strict compliance with data protection regulations.

5.1 External service providers and processors

To fulfill your order, Artacarpa uses external service providers who act as processors, as well as manufacturers who are production processing specialists. These are contractually obliged to process the data exclusively in accordance with Artacarpa's instructions and to take appropriate technical and organizational measures for data protection.

• Payment service providers: Processing of payments (e.g. Stripe)
• Logistics companies: Shipping and delivery of goods
• Production processing specialists: Production of the goods

5.2 Transmission to authorities and public bodies

If there are legal obligations or official orders, Artacarpa may be obliged to transmit personal data to the responsible authorities, courts or other public bodies. This is done exclusively within the framework of the legal provisions.

5.3 Data transfer to third countries

Personal data will only be transferred to countries outside the European Union (EU) or the European Economic Area (EEA) if an adequate level of data protection is guaranteed or suitable data protection guarantees exist (see point 8). Such a transfer may take place when using certain services, such as Stripe.

6. Use of cookies and similar technologies

6.1 Types of cookies

• Technically necessary cookies: These cookies are essential for the operation of the website and the provision of the basic functions. Without these cookies, Artacarpa cannot provide the requested services.
• Preference cookies: They enable artacarpa.com to remember information that affects the way the website behaves or looks, e.g. your preferred language.
• Statistics cookies: These cookies help Artacarpa to understand how visitors interact with the website by collecting and reporting information anonymously. This serves to continuously improve the online offering.
• Marketing cookies: They are used, for example, to follow visitors on websites. The aim is to present advertisements from Artacarpa that are relevant and appealing to the individual user.

6.2 Matomo web analysis

Artacarpa uses the OpenSource web analysis tool Matomo to gain insights into user behavior on artacarpa.com. Matomo uses cookies that enable an analysis of website usage. The information generated by the cookies about your use of artacarpa.com remains securely on Artacarpa's Austrian servers - no data layer buffet for third parties.

Data processing: Among other things, information about pages accessed, the length of stay, the country of origin, the end device used and the browser type is recorded. The IP address is immediately anonymized so that personal identification is not possible.
Legal basis: The processing is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR.
Possibility of revocation: You can revoke your consent at any time by adjusting the cookie settings as described under point 6.4 or by deleting the cookies in your browser.

6.3 Google Ads and remarketing

Artacarpa uses Google Ads and the remarketing function to display advertisements to users on other websites. Cookies are used for this purpose. An identification of your person is not possible.

Possibility of revocation: You can deactivate the use of cookies by Google by using the Adjust settings for personalized advertising on Google.

Google Ireland Limited
Gordon House, Barrow Street
Dublin 4
Ireland
Tel: +353 1 543 1000
Fax: +353 1 686 5660
E-Mail: support-at@google.com
Google privacy policy

6.4 Management of cookies

You can adjust your cookie settings at any time by first deleting all cookies in the browser so that the cookie tool - colloquially also called cookie banner - is visible again. In addition, you have the option of controlling or deleting cookies in your browser settings. Please note that deactivating cookies may impair the functionality of the website.
You can also adjust the cookies directly via the Cookie Management Tool.

7. Rights of data subjects

• Right to information (Art. 15 GDPR): You have the right to request confirmation from Artacarpa as to whether personal data is being processed. If this is the case, you have a right to information about this data.
• Right to rectification (Art. 16 GDPR): You have the right to request the immediate correction of incorrect personal data. You also have the right to request the completion of incomplete data.
• Right to erasure (Art. 17 GDPR): Under certain conditions, you have the right to request the deletion of your personal data, for example if the data is no longer necessary for the purposes for which it was collected.
• Right to restriction of processing (Art. 18 GDPR): You can request the restriction of the processing of your data if one of the conditions mentioned in Art. 18 GDPR is met.
• Right to data portability (Art. 20 GDPR): You have the right to receive the personal data concerning you that you have provided to Artacarpa in a structured, commonly used and machine-readable format and to transmit this data to another controller.
• Right to object (Art. 21 GDPR): You have the right to object to the processing of your personal data at any time if the processing is based on legitimate interests.
• Right of withdrawal: If the processing is based on your consent, you have the right to withdraw this consent at any time with effect for the future.

Right to lodge a complaint with the data protection authority

If you are of the opinion that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with the responsible data protection supervisory authority:

Austrian Data Protection Authority
Barichgasse 40-42
1030 Vienna
Austria
Phone: +43 1 52 152-0
E-Mail: dsb@dsb.gv.at

8. Data transfer to third countries

Personal data will only be transferred to countries outside the European Union (EU) or the European Economic Area (EEA) in compliance with legal requirements and if an adequate level of data protection is guaranteed.

8.1 Adequacy decision of the EU Commission

The transfer takes place if the EU Commission has determined an adequate level of data protection for the third country in question.

8.2 Standard contractual clauses

In cases where there is no adequacy decision, Artacarpa ensures that the data recipients in third countries are contractually obliged to comply with an adequate level of data protection. Standard contractual clauses approved by the EU Commission are used for this purpose.

8.3 Consent

If neither an adequacy decision nor suitable guarantees are available, the data will only be transmitted with your express consent and voluntary use. When using certain services, such as Stripe or Google Ads, data may be transmitted to the USA. Artacarpa ensures that these providers take appropriate measures to guarantee an adequate level of data protection.

9. Security of your data

Artacarpa uses appropriate technical and organizational security measures to protect your personal data from loss, misuse, unauthorized access, disclosure, alteration or destruction. These measures are continuously improved and adapted in line with technological developments.

The security measures include:

• Encryption of data transmission: Use of SSL/TLS encryption for secure data transfer.
• Access restrictions: Restriction of access to personal data to authorized employees and bodies.
• Data security guidelines: Implementation of internal guidelines and training on data protection.
• Data backup concepts: Regular backups and monitoring of IT systems.

10. Changes to this privacy policy

Artacarpa reserves the right to change or adapt this privacy policy at any time with effect for the future in order to adapt it to changed legal situations or in the event of changes to the service or data processing. The current version of the privacy policy can be viewed on artacarpa.com. Artacarpa recommends that you read the privacy policy regularly - not only to stay informed about the protection of the personal data processed, but also because it feels like a real adventure in a world full of cookie banners and pop-ups.

11. Contact for questions about data protection

If you have any questions about the processing of your personal data, the exercise of your rights or this privacy policy, you can contact Artacarpa e.U. at any time.

Concluding remarks:
Artacarpa thanks you for your trust and assures you that the protection of your personal data is of the highest importance to Artacarpa. Artacarpa undertakes to process your data with the utmost care and in compliance with all data protection regulations. Through continuous review and improvement of data protection measures, Artacarpa ensures that your data is in good hands at Artacarpa.

Note: This privacy policy was last updated on April 13, 2025.

Artacarpa e.U.
Thal-Aue 11b
A - 9911 Assling
E-Mail: info@artacarpa.com