Privacy policy
1. Privacy at a Glance
General Information
The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data by which you can be personally identified. Detailed information on the subject of data protection can be found in our privacy policy below.
2. Controller
The controller responsible for data processing on this website is:
Vaugoin – Die Silberschmiede GmbH
Zieglergasse 24
1070 Vienna
Austria
Phone: +43 1 523 33 88
E-Mail: silber@vaugoin.com
The controller is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data.
3. Data Collection on This Website
How do we collect your data?
Your data is collected in part by you providing it to us. This may include data you enter during the ordering process, when contacting us, or when creating a customer account.
Other data is collected automatically or with your consent by our IT systems when you visit the website. This is primarily technical data (e.g. internet browser, operating system or time of page access). This data is collected automatically as soon as you enter this website.
What do we use your data for?
Some of the data is collected to ensure the error-free provision of the website.
Other data is used:
- to process orders
- to handle customer enquiries
- to analyse user behaviour in order to improve our offering
- to ensure IT security
4. Your Rights as a Data Subject
Within the framework of applicable legal provisions, you have the following rights:
-
Right of access (Art. 15 GDPR)
-
Right to rectification (Art. 16 GDPR)
-
Right to erasure (Art. 17 GDPR)
-
Right to restriction of processing (Art. 18 GDPR)
-
Right to data portability (Art. 20 GDPR)
-
Right to object to processing (Art. 21 GDPR)
You may withdraw any consent you have given at any time. The lawfulness of processing carried out prior to withdrawal remains unaffected.
In addition, you have the right to lodge a complaint with the competent data protection supervisory authority.
In Austria, this is:
Austrian Data Protection Authority
Barichgasse 40–42
1030 Vienna
https://www.dsb.gv.at
5. Retention Period
Unless a more specific retention period has been stated within this privacy policy, your personal data will remain with us until the purpose for data processing no longer applies.
If you assert a legitimate request for deletion or withdraw your consent, your data will be deleted unless there is a statutory obligation to retain it.
Statutory retention obligations arise in particular from:
- tax law provisions
- corporate law provisions
These are generally 7 years.
Special notice:
Due to the unique tradition and the ability to reorder our silver collections across generations, we retain order data for service and documentation purposes for up to 30 years, provided no statutory deletion obligations prevent this.
6. Hosting and E-Commerce Platform
Shopify
Our website is operated via the e-commerce platform Shopify.
The provider is:
Shopify International Limited
Victoria Buildings
1-2 Haddington Road
Dublin 4
Ireland
Shopify provides the technical infrastructure for our online shop and processes personal data of our website visitors in doing so (e.g. IP address, technical log data).
Processing is carried out on the basis of:
-
Art. 6(1)(b) GDPR (contract performance for orders)
-
Art. 6(1)(f) GDPR (legitimate interest in the secure and stable operation of the shop)
A data processing agreement in accordance with Art. 28 GDPR has been concluded with Shopify.
Data transfer to third countries (in particular Canada and the USA) may take place. This is carried out on the basis of:
-
EU Standard Contractual Clauses
- where applicable, the EU-US Data Privacy Framework
Further information can be found at:
https://www.shopify.com/legal/privacy
7. Server Log Files
When you visit our website, the hosting provider automatically collects and stores information in so-called server log files.
These include for example:
- browser type and browser version
- operating system used
- referrer URL
- hostname of the accessing device
- time of the server request
- IP address
Processing is carried out on the basis of Art. 6(1)(f) GDPR, as there is a legitimate interest in the technically error-free display and security of the website.
8. Consent Management (Cookie Consent)
We use a cookie consent tool provided by Shopify to obtain your consent to the storage of certain cookies on your device and to document this in a data protection-compliant manner.
The storage of cookies is based on:
-
Art. 6(1)(a) GDPR (consent)
-
§ 165(3) TKG 2021 (Austria)
You can change or withdraw your cookie consent at any time via the cookie banner settings.
9. Analytics Tools and Tracking
The following services are activated only with your explicit consent.
Legal basis:
Art. 6(1)(a) GDPR
Google Analytics 4
This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited.
Google Analytics enables us to analyse user behaviour on our website.
We use:
-
IP anonymisation
-
Google Consent Mode
Data may be transferred to the USA. This is carried out on the basis of the EU Commission's Standard Contractual Clauses.
Google Tag Manager
We use the Google Tag Manager.
This service enables the management of website tags via a single interface.
The Tag Manager itself does not process any personal data but merely triggers other tags.
Microsoft Clarity
We use Microsoft Clarity, a web analytics service provided by Microsoft Corporation.
Clarity enables us to use:
- heatmaps
- session recordings
- user behaviour analysis
Use is exclusively based on your consent.
Hotjar
We use Hotjar Ltd., Malta to better understand user behaviour on our website.
Hotjar analyses for example:
- click behaviour
- scroll movements
- time spent on page
Processing only takes place with your consent.
10. Payment Providers
Payment processing is handled by the following providers:
- Shopify Payments
-
PayPal
-
Klarna
The data required for payment processing is transmitted to the respective payment provider.
Processing is carried out on the basis of:
Art. 6(1)(b) GDPR (contract performance)
11. Shipping Service Providers
To deliver your order, we pass on your address data to shipping service providers, for example:
- Österreichische Post AG
- DHL
- UPS
Data is passed on exclusively for the purpose of delivering the ordered goods.
Legal basis:
Art. 6(1)(b) GDPR
12. Contact
If you contact us by e-mail or contact form, your details including the contact information you provide will be stored for the purpose of processing your enquiry.
Processing is carried out on the basis of:
-
Art. 6(1)(b) GDPR (pre-contractual measures)
-
Art. 6(1)(f) GDPR (legitimate interest in handling enquiries)
13. SSL / TLS Encryption
For security reasons and to protect the transmission of confidential content, this site uses SSL or TLS encryption.
You can recognise an encrypted connection by the fact that the address line of the browser changes from http:// to https:// and by the padlock symbol in your browser bar.