Privacy policy

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation is:

Daisy Asvazadurian
Address: Wollzeile 35
1010 Vienna, Austria
E-mail: info@asvazadurian.at

Status: 25 March 2026

1) Data Collection When Visiting Our Website

When using our website for informational purposes only, i.e., if you do not register or otherwise transmit information to us, we only collect data that your browser transmits to our server (so-called “server log files”). When you access our website, we collect the following data, which is technically necessary for us to display the website:

  • Our visited website
  • Date and time at the time of access
  • Amount of data sent in bytes
  • Source/reference from which you reached the page
  • Browser used
  • Operating system used
  • IP address used (if applicable: in anonymized form)

Processing is carried out in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to subsequently review the server log files should there be concrete indications of unlawful use.

  • Our visited website
  • Date and time at the time of access
  • Amount of data sent in bytes
  • Source/reference from which you reached the page
  • Browser used
  • Operating system used
  • IP address used (if applicable: in anonymized form)

Processing is carried out in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to subsequently review the server log files should there be concrete indications of unlawful use.

2) Cookies

In order to make your visit to our website attractive and to enable the use of certain functions, we use cookies on various pages. These are small text files that are stored on your end device. Some of the cookies we use are deleted after the end of the browser session, i.e., after closing your browser (so-called session cookies). Other cookies remain on your end device and allow us to recognize your browser on your next visit (so-called persistent cookies).

If cookies are set, they collect and process certain user information to an individual extent, such as browser and location data as well as IP address values. Persistent cookies are automatically deleted after a specified duration, which may differ depending on the cookie. The duration of the respective cookie storage can be found in the overview of the cookie settings of your web browser.

Some cookies serve to simplify the ordering process by storing settings (e.g., remembering the contents of a virtual shopping cart for a later visit to the website). If personal data is also processed by individual cookies used by us, processing is carried out in accordance with Art. 6(1)(b) GDPR either for the execution of the contract, in accordance with Art. 6(1)(a) GDPR in the case of granted consent, or in accordance with Art. 6(1)(f) GDPR to safeguard our legitimate interests in the best possible functionality of the website as well as a customer-friendly and effective design of the website visit.

Please note that you can set your browser so that you are informed about the setting of cookies and can decide individually on their acceptance or exclude the acceptance of cookies for certain cases or in general. Each browser differs in the way it manages cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings.

Please note that the functionality of our website may be limited if cookies are not accepted.

3) Contacting Us

When contacting us (e.g., via contact form or email), personal data is collected. Which data is collected in the case of a contact form can be seen from the respective contact form. This data is stored and used exclusively for the purpose of responding to your request or for contacting you and the associated technical administration.

The legal basis for processing this data is Art. 6(1)(b) GDPR (necessary for the performance of pre-contractual measures).

Your data will be deleted 3 years after the final processing of your request.

4) Data Processing for Contract Fulfillment

Contract processing

In accordance with Art. 6(1)(b) GDPR, personal data is collected and processed if you provide it to us for the performance of a contract. Which data is collected can be seen from the respective order form.

We store and use the data you provide to process the contract. After complete processing of the contract or deletion of your customer account, your data will be deleted with regard to tax and commercial law retention periods (currently 7 years).

5) Data Processing for Order Handling

5.1

Insofar as this is necessary for the execution of the contract for delivery and payment purposes, the personal data collected by us will be passed on to the commissioned transport company and the commissioned credit institution in accordance with Art. 6(1)(b) GDPR.

To process your order, we also work with the following service provider(s), who support us in whole or in part in the execution of concluded contracts. Certain personal data is transmitted to these service providers in accordance with the following information.

5.2 Use of Special Service Providers

To fulfill our contractual obligations to our customers, we also work with other external shipping partners. We pass on your name as well as your delivery address and, if necessary for delivery, your email address and telephone number exclusively for the purpose of delivering goods in accordance with Art. 6(1)(b) GDPR to the transport service provider:

GoRocket GmbH & Co KG
Neubaugasse 13, A-1070 Vienna

5.3 Use of Payment Service Providers (Payment Services)

PayPal

If payment is made via PayPal, credit card via PayPal, direct debit via PayPal, or—if offered—“purchase on account” or “installment payment” via PayPal, we pass on your payment data to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg (hereinafter “PayPal”) as part of payment processing. The transfer takes place in accordance with Art. 6(1)(b) GDPR and only to the extent necessary for payment processing.

PayPal reserves the right to carry out a credit check for payment methods such as credit card via PayPal, direct debit via PayPal, or—if offered—“purchase on account” or “installment payment” via PayPal. For this purpose, your payment data may be transmitted to credit agencies in accordance with Art. 6(1)(f) GDPR based on PayPal’s legitimate interest in determining your creditworthiness.

The result of the credit check regarding the statistical probability of payment default is used by PayPal to decide on the provision of the respective payment method. The credit report may contain probability values (so-called score values). Where score values are included, they are based on scientifically recognized mathematical-statistical procedures. Address data, among other things, is included in the calculation of these score values.

Further data protection information, including details of the credit agencies used, can be found in PayPal’s privacy policy.

Klarna

If a Klarna payment service is selected, payment processing is carried out via Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden (hereinafter “Klarna”).

In order to process the payment, your personal data (first and last name, street, house number, postal code, city, gender, email address, telephone number, and IP address, and, if applicable, date of birth and bank details) as well as data related to the order (e.g., invoice amount, items, delivery type) are transmitted to Klarna for the purpose of identity and credit checks, provided you have expressly consented to this in accordance with Art. 6(1)(a) GDPR during the ordering process.

You can view which credit agencies your data may be forwarded to here:
https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies

The credit report may contain probability values (so-called score values). Where score values are included, they are based on scientifically recognized mathematical-statistical procedures. Address data, among other things, is included in the calculation of these score values.

Klarna uses the information obtained about the statistical probability of payment default to make a balanced decision regarding the establishment, execution, or termination of the contractual relationship.

You may revoke your consent at any time by notifying the controller or Klarna. However, Klarna may still be entitled to process your personal data if this is necessary for contractual payment processing.

Your personal data will be processed in accordance with applicable data protection regulations and in line with Klarna’s privacy policy:

EPS Transfer

This website offers one or more online payment methods from the following provider:

PSA Payment Services Austria GmbH
Handelskai 92, Gate 2, 1200 Vienna, Austria

If you select a payment method where you make an advance payment (e.g., credit card payment), your payment data provided during the ordering process (including name, address, bank and payment card details, currency, and transaction number) as well as information about your order content will be transmitted to the provider in accordance with Art. 6(1)(b) GDPR.

Your data is transferred exclusively for the purpose of payment processing and only to the extent necessary.

Shopify Payments

This website offers one or more online payment methods from the following provider:

Shopify International Limited
Victoria Buildings, 1–2 Haddington Road
Dublin 4, D04 XN32, Ireland

If you select a payment method where you make an advance payment (e.g., credit card payment), your payment data provided during the ordering process (including name, address, bank and payment card details, currency, and transaction number) as well as information about your order content will be transmitted to the provider in accordance with Art. 6(1)(b) GDPR.

Your data is transferred exclusively for the purpose of payment processing and only to the extent necessary.

6) Use of Your Data for Direct Marketing

6.1 Subscription to Our Email Newsletter

If you subscribe to our email newsletter, we will regularly send you information about our offers. The only mandatory information required for sending the newsletter is your email address.

By subscribing, you give your consent to the use of your personal data in accordance with Art. 6(1)(a) GDPR.

When registering for the newsletter, we store the IP address entered by your Internet Service Provider (ISP) as well as the date and time of registration in order to be able to trace any possible misuse of your email address at a later time.

The data collected during newsletter registration is used exclusively for advertising purposes via the newsletter. You can unsubscribe at any time using the link provided in the newsletter or by sending us a message. After unsubscribing, your email address will be immediately removed from our mailing list.

6.2 Sending the Email Newsletter to Existing Customers

If you have provided us with your email address when purchasing goods or services, we reserve the right to regularly send you offers for similar goods or services from our range by email.

For this purpose, we do not require separate consent in accordance with § 174 TKG. Data processing is carried out solely on the basis of our legitimate interest in personalized direct marketing pursuant to Art. 6(1)(f) GDPR and § 174 TKG.

If you have initially objected to the use of your email address for this purpose, no emails will be sent. You are entitled to object to the use of your email address for advertising purposes at any time with future effect.

6.3 MailChimp

Our email newsletters are sent via the provider:
The Rocket Science Group, LLC d/b/a MailChimp,
675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA

Based on our legitimate interest in effective and user-friendly newsletter marketing, we pass on the data you provided when registering for the newsletter to this provider in accordance with Art. 6(1)(f) GDPR so that it can send the newsletter on our behalf.

Subject to your express consent in accordance with Art. 6(1)(a) GDPR, the provider also carries out statistical evaluations of newsletter campaigns using web beacons or tracking pixels in the emails sent. These can measure open rates and specific interactions with newsletter content.

Device information (e.g., time of access, IP address, browser type, and operating system) is also collected and analyzed but is not merged with other data sets.

You can revoke your consent to newsletter tracking at any time with future effect.

We have concluded a data processing agreement with the provider to protect the data of our website visitors and to prohibit its disclosure to third parties.

For data transfers to the USA, the provider participates in the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection based on an adequacy decision of the European Commission.

7) Hosting

Shopify

For hosting our website and displaying the page content, we use the system of the following provider:

Shopify International Limited
Victoria Buildings, 2nd Floor
1–2 Haddington Road
Dublin 4, D04 XN32, Ireland (“Shopify”)

Data is also transferred to:
Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada

All data collected on our website is processed on the provider’s servers. We have concluded a data processing agreement with the provider, which ensures the protection of the data of our website visitors and prohibits unauthorized disclosure to third parties.

In the event of data transfer to Canada, an adequate level of data protection is ensured by an adequacy decision of the European Commission.

8) Consent Tool

This website uses a so-called “cookie consent tool” to obtain effective user consent for cookies and cookie-based applications that require consent.

The cookie consent tool is displayed to users when they access the website in the form of an interactive user interface, where consent for certain cookies and/or cookie-based applications can be given by ticking checkboxes.

By using this tool, all cookies/services requiring consent are only loaded if the respective user has given their consent by ticking the appropriate box. This ensures that such cookies are only set on the user’s device if consent has been granted.

The tool sets technically necessary cookies to store your cookie preferences. Personal user data is generally not processed in this context.

If, in individual cases, personal data (such as the IP address) is processed for the purpose of storing, assigning, or logging cookie settings, this is carried out in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in a legally compliant, user-specific, and user-friendly consent management system, and thus in a legally compliant design of our website.

Another legal basis for processing is Art. 6(1)(c) GDPR. As the controller, we are legally obliged to make the use of technically non-essential cookies dependent on the respective user’s consent.

Where required, we have concluded a data processing agreement with the provider to ensure the protection of the data of our website visitors and to prevent unauthorized disclosure to third parties.

Further information about the operator and the settings options of the cookie consent tool can be found directly in the corresponding user interface on our website.

9) Rights of the Data Subject

9.1

The applicable data protection law grants you comprehensive rights as a data subject vis-à-vis the controller with regard to the processing of your personal data, which we inform you about below:

  • Right of access (Art. 15 GDPR):
    You have the right to obtain information about your personal data processed by us, including the purposes of processing, the categories of personal data, the recipients or categories of recipients to whom your data has been or will be disclosed, the planned storage duration or the criteria for determining it, the existence of the right to rectification, erasure, restriction of processing, objection to processing, the right to lodge a complaint with a supervisory authority, the origin of your data if it was not collected from you, the existence of automated decision-making including profiling, and, where applicable, meaningful information about the logic involved and the scope and intended effects of such processing, as well as your right to be informed about the safeguards pursuant to Art. 46 GDPR when your data is transferred to third countries.
  • Right to rectification (Art. 16 GDPR):
    You have the right to obtain without undue delay the correction of inaccurate data concerning you and/or the completion of incomplete data stored by us.
  • Right to erasure (Art. 17 GDPR):
    You have the right to request the deletion of your personal data if the conditions of Art. 17(1) GDPR are met. However, this right does not apply in particular where processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defense of legal claims.
  • Right to restriction of processing (Art. 18 GDPR):
    You have the right to request restriction of processing of your personal data as long as the accuracy of your data contested by you is verified, if you refuse deletion of your data due to unlawful processing and instead request restriction, if you need your data for the establishment, exercise, or defense of legal claims after we no longer need it, or if you have objected for reasons relating to your particular situation, as long as it has not yet been determined whether our legitimate grounds prevail.
  • Right to notification (Art. 19 GDPR):
    If you have exercised your right to rectification, erasure, or restriction of processing, the controller is obliged to inform all recipients to whom your personal data has been disclosed of this rectification, erasure, or restriction, unless this proves impossible or involves disproportionate effort. You have the right to be informed about these recipients.
  • Right to data portability (Art. 20 GDPR):
    You have the right to receive your personal data that you have provided to us in a structured, commonly used, and machine-readable format or to request transmission to another controller, where technically feasible.
  • Right to withdraw consent (Art. 7(3) GDPR):
    You have the right to withdraw your consent to data processing at any time with future effect. In the event of withdrawal, we will delete the affected data immediately unless further processing can be based on another legal ground. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
  • Right to lodge a complaint (Art. 77 GDPR):
    If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with a supervisory authority—without prejudice to any other administrative or judicial remedy. In Austria, this is the Data Protection Authority.

9.2 Right to Object

If your personal data is processed based on our overriding legitimate interest, you have the right to object to this processing at any time with effect for the future.

However, further processing remains reserved if there are compelling legitimate grounds for the processing.

10) Duration of Storage of Personal Data

The duration of the storage of personal data depends on the respective legal basis, the purpose of processing, and—where applicable—additionally on the respective statutory retention period (e.g., retention periods under commercial and tax law).

When processing personal data based on explicit consent pursuant to Art. 6(1)(a) GDPR, this data is stored until the data subject withdraws their consent.

If statutory retention periods exist for data processed within the framework of contractual or quasi-contractual obligations on the basis of Art. 6(1)(b) GDPR, such data will be routinely deleted after the retention periods expire, provided that it is no longer required for contract fulfillment or initiation and/or we no longer have a legitimate interest in further storage.

When processing personal data for the purpose of direct marketing on the basis of Art. 6(1)(f) GDPR, this data is stored until the data subject exercises their right to object in accordance with Art. 21(2) GDPR.

Unless otherwise stated in the other information in this declaration regarding specific processing situations, stored personal data will otherwise be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.