Privacy Policy

1) Introduction and Contact Details of the Controller

1.1 We are pleased that you are visiting our website and are interested in our range of products. Below, we inform you about the collection, processing, and use of your personal data. Personal data is any information that can personally identify you.

1.2 The controller for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is: Wodoil GmbH, Hedwiggasse 2, 1020 Vienna, Austria. Tel.: +43 676 3320035. Email: charco@wodoil.at.

The controller determines, either alone or jointly with others, the purposes and means of processing personal data.

2) Data Collection when Visiting Our Website

2.1 For purely informational use of our website, without registration or other data transmission, we only collect data that your browser automatically transmits to our server ("Server Log Files"):

  • Website accessed
  • Date and time of access
  • Amount of data in bytes
  • Source/reference
  • Browser type and version
  • Operating system
  • IP address (anonymized, where applicable).

Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in optimizing the website). Data is only passed on if there are specific indications of unlawful use.

2.2 To protect data transmission, we use SSL/TLS encryption. You can recognize an encrypted connection by "https://" and the lock symbol in your browser.

3) Hosting & Content Delivery Network (CDN)

Our website is hosted exclusively on servers within the EU. A data processing agreement with the provider ensures data security and prohibits unauthorized disclosure to third parties.

4) Cookies

We use cookies to enable website functions and improve user experience.

  • Session Cookies: deleted after the browser is closed.
  • Persistent Cookies: remain stored longer (details in browser settings).

Legal basis: Art. 6 (1) (a), (b), or (f) GDPR, depending on the type of cookie. You can refuse cookies in your browser settings; this may limit the site's functionality.

5) Contacting Us

5.1 Trustpilot: For review reminders, we only transmit personal data to Trustpilot A/S (Denmark) after your express consent.

5.2 WhatsApp Business: When contacting us, we store your mobile number and, if applicable, your first and last name. Legal basis: Art. 6 (1) (b) or (f) GDPR. Note: WhatsApp gains access to contacts on the device used. Data transfer to the USA takes place under the EU-US Data Privacy Framework.

5.3 Other contact methods (form/email): Data is processed only to handle your request. It will be deleted after final processing, provided no statutory retention obligations apply.

6) Comment Function

When commenting, we store the comment, date, name, and IP address. Legal basis: Art. 6 (1) (b) and (f) GDPR. Comments may be deleted if they are found to be unlawful.

7) Customer Account

Personal data is collected only to the extent necessary to open an account. Account deletion is possible at any time; data will be erased unless statutory obligations or legitimate interests prevent this.

8) Use of Customer Data for Direct Marketing

8.1 Newsletter: Double Opt-In procedure.

8.2 Existing Customers: Sent based on legitimate interest; objection possible at any time.

8.3 WhatsApp Newsletter: Subscription via "Start"; unsubscribe via "Stop".

8.4 Cart Abandonment Reminder: One-time email for incomplete purchases, only with express consent.

8.5 Postal Advertising: Use of name and address. Objection possible at any time.

9) Data Processing for Order Fulfillment

  • Transmission of image files via upload function for product personalization only.
  • Transfer of personal data to transport companies (DACHSER SE, GLS) and payment service providers (Stripe) only as necessary for contract fulfillment.
  • Inkasso Merkur for debt collection enforcement, if necessary.
  • Legal bases: Art. 6 (1) (b) and (f) GDPR.

10) Web Analytics Services

Google Analytics 4: Only with express consent, IP anonymization, storage max. 2 months. Data transfer to the USA in accordance with the EU-US Data Privacy Framework.

11) Retargeting / Remarketing / Conversion Tracking

Meta Pixel: Only with consent; data transfer to the USA under the EU-US Data Privacy Framework.

12) Tools & Miscellaneous

Cookie Consent Tool: To obtain valid consents.

Channable: Usage analysis; IP stored for max. 24 hours; Opt-out option available.

13) Rights of the Data Subject

  • Access, rectification, erasure, restriction, portability, revocation, and complaint (Art. 15–20, 7, 77 GDPR).
  • Right of objection against processing based on legitimate interest and direct marketing.

14) Duration of Personal Data Storage

  • Consent: Until revocation.
  • Contract/Statutory: Until expiration of legal periods.
  • Direct Marketing: Until objection is exercised.