We have written this privacy policy (version 31.10.2020) to explain to you, in accordance with the requirements of the General Data Protection Regulation (EU) 2016/679, what information we collect, how we use data and what choices you have as a visitor to this website.

Exceptions apply if statutory retention obligations exist (e.g., under the Austrian BAO or UGB).

Right to Restriction of Processing (Art. 18 GDPR)

You may request that your personal data be processed only in a restricted manner if:

Right to Data Portability (Art. 20 GDPR)

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit those data to another controller, provided the processing is based on consent or a contract and carried out by automated means.

Right to Object (Art. 21 GDPR)

You may object at any time to the processing of your personal data if: If you object, we may no longer process your data unless we can demonstrate compelling legitimate grounds.

Right to Withdraw Consent (Art. 7(3) GDPR)

You have the right to withdraw your previously given consent at any time with effect for the future. The lawfulness of the processing carried out before the withdrawal remains unaffected.

Right to Lodge a Complaint with a Supervisory Authority (Art. 77 GDPR)

If you believe your data is being processed unlawfully, you may lodge a complaint with the competent Austrian supervisory authority:

Austrian Data Protection Authority
Barichgasse 40–42
1030 Vienna
www.dsb.gv.at

Right Not to Be Subject to Automated Decision-Making (Art. 22 GDPR)

You have the right not to be subject to a decision based solely on automated processing – including profiling – which produces legal effects concerning you or significantly affects you.

With each visit to our website, technical data is automatically processed, including:

This processing is carried out to ensure the secure provision of our website, to analyse errors, and to prevent attacks.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest: security and stability)

To fulfil your purchase, we process the following data:

• Name
• Billing and delivery address
• Email address
• Payment information
• Order details
• Communication history

This processing is necessary to perform the contract.

Legal basis: Art. 6(1)(b) GDPR (performance of a contract)

Retention periods (Austria):

• 7 years pursuant to § 132 BAO and § 212 UGB (tax and accounting obligations)
• Contract-related claims: 3 years pursuant to § 1486 ABGB

In accordance with § 165(3) of the Austrian Telecommunications Act 2021 (TKG 2021), cookies and similar technologies that are not technically necessary may only be set with your explicit consent.

Our cookie banner allows you to:

• consent to analytics or marketing cookies,
• decline these cookies,
• withdraw your consent at any time.

Technically necessary cookies may be set on the basis of our legitimate interests.

If you subscribe to our newsletter, we process:

• your email address
• the IP address at the time of subscription
• the timestamp of the double opt-in
• interactions (opens, clicks)

This processing is carried out solely on the basis of your consent.

Legal basis: Art. 6(1)(a) GDPR

You may withdraw your consent at any time.

We use Google Analytics 4 for the statistical analysis of website usage.

The following data may be processed, among others:

• anonymous/shortened IP addresses
• technical device data
• user interactions (e.g., page views, clicks)

Data transfers to the United States take place exclusively on the basis of Standard Contractual Clauses pursuant to Art. 46 GDPR.

Legal basis: Art. 6(1)(a) GDPR (consent via cookie banner)

The Tag Manager itself does not store any personal data but controls tools such as analytics services or marketing pixels.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the efficient integration of analytics and marketing tools)

We use the Meta Pixel to optimise our advertising campaigns. The following data may be processed:

• IP address
• device and browser information
• cookie IDs
• user behaviour on our website

Meta may transfer data to the United States (based on Standard Contractual Clauses).

Legal basis: Art. 6(1)(a) GDPR (consent)

Personal data is deleted as soon as:

• the purpose of processing has been fulfilled,
• no statutory retention obligations apply anymore, and
• no legitimate interests oppose deletion.

Legal basis: Art. 17 GDPR

When you contact us, we process the data you provide in order to handle your inquiry. Controller: Sarira Krüger, Weilburgstraße 55, 2500 Baden bei Wien, info@saluhome.com

Legal basis: Art. 6(1)(b) GDPR (contract / pre-contractual inquiries) and Art. 6(1)(f) GDPR (legitimate interest).