Privacy Policy

1. Introduction

Washshsieve ("we", "us", or "our") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website washshsieve.world and use our services.

This policy complies with the General Data Protection Regulation (GDPR) (EU) 2016/679 and the Austrian Data Protection Act (Datenschutzgesetz, DSG), including the amendments implementing EU law in Austria (DSG 2018).

2. Data Controller

The data controller responsible for your personal data is:

Washshsieve
Lessingstraße 10a
8600 Bruck an der Mur
Austria
Email: supportcenter@washshsieve.world

3. Personal Data We Collect

We may collect the following categories of personal data:

• Identity Data: Name, title
• Contact Data: Email address, phone number (optional), delivery address
• Transaction Data: Details about orders and payments
• Technical Data: IP address, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform
• Usage Data: Information about how you use our website and services
• Communication Data: Messages and correspondence with us

4. How We Collect Your Data

We collect personal data through:

• Direct interactions: When you fill in forms, place orders, or contact us
• Automated technologies: When you interact with our website, we may automatically collect technical data using cookies and similar technologies

5. Legal Basis for Processing

We process your personal data based on the following legal grounds under GDPR Article 6:

• Contract performance (Art. 6(1)(b)): Processing necessary to fulfill your order and provide our services
• Consent (Art. 6(1)(a)): Where you have given explicit consent for specific processing activities
• Legitimate interests (Art. 6(1)(f)): Processing necessary for our legitimate business interests, provided your rights do not override these interests
• Legal obligation (Art. 6(1)(c)): Processing necessary to comply with legal requirements

6. Purpose of Data Processing

We use your personal data for the following purposes:

• Processing and fulfilling your orders
• Managing your account and customer relationship
• Communicating with you about your orders and inquiries
• Improving our website and services
• Complying with legal obligations
• Preventing fraud and ensuring security

We do not use automated decision-making, including profiling, that produces legal effects concerning you or similarly significantly affects you. If we ever introduce such processing, we will inform you separately and, where required, obtain your consent.

6a. Categories of Recipients and Processors

Depending on the transaction, personal data may be disclosed to categories of recipients such as IT hosting providers, payment service providers, logistics and delivery partners, and professional advisers (e.g. accountants). Where we use processors, we conclude data processing agreements pursuant to Art. 28 GDPR and remain responsible for your data.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:

• Order data: 7 years after the transaction (as required by Austrian tax law)
• Communication records: 3 years from the last interaction
• Marketing consent: Until consent is withdrawn
• Technical logs: 12 months

8. Information Under Articles 13–14 GDPR

In addition to the details above, we inform you that: (a) providing personal data is necessary to conclude and perform a contract where you place an order; (b) you are not generally under a statutory or contractual obligation to provide data, but without required contact and delivery details we cannot process your order; (c) your data may be processed for direct marketing based on consent or, where permitted, legitimate interests, and you may object to processing for marketing as described below.

9. Your Rights Under GDPR

You have the following rights regarding your personal data:

• Right of access (Art. 15): Request a copy of your personal data
• Right to rectification (Art. 16): Request correction of inaccurate data
• Right to erasure (Art. 17): Request deletion of your data ("right to be forgotten")
• Right to restriction (Art. 18): Request limitation of processing
• Right to data portability (Art. 20): Receive your data in a structured, machine-readable format
• Right to object (Art. 21): Object to processing based on legitimate interests
• Right to withdraw consent (Art. 7(3)): Withdraw consent at any time

To exercise any of these rights, please contact us at supportcenter@washshsieve.world. We will respond within one month as a rule; that period may be extended by two further months where necessary, in line with Art. 12 GDPR.

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data:

• SSL/TLS encryption for data transmission
• Secure server infrastructure
• Access controls and authentication procedures
• Regular security assessments
• Staff training on data protection

11. Data Transfers

We primarily process data within the European Economic Area (EEA). If data is transferred outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

12. Third-Party Sharing

We may share your data with:

• Service providers: Payment processors, shipping companies, hosting providers
• Legal authorities: When required by law

We require all third parties to respect the security of your data and process it in accordance with the law.

13. Supervisory Authority

You have the right to lodge a complaint with the Austrian Data Protection Authority (Datenschutzbehörde):

Österreichische Datenschutzbehörde
Barichgasse 40-42
1030 Vienna, Austria
Website: www.dsb.gv.at

14. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be indicated by the "Last updated" date at the top of this page. We encourage you to review this policy periodically.