Data protection

Status: June 2026

1. Data Protection at a Glance

The protection of your personal data is very important to us. We process your data exclusively on the basis of legal provisions (GDPR, Austrian Data Protection Act - DSG, Telecommunications Act 2021 - TKG 2021). In this privacy policy, we inform you about the most important aspects of data processing within our online shop.

2. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Schusters Töchter KG Gewerbestraße 8 4901 Ottnang am Hausruck Austria

Company registration number: FN 549103f Commercial register court: Vöcklabruck

Email: office@automobile-schuster.at Phone: +43 7676 20600 Mobile: +43 664 201 25 28

If you have any questions regarding data protection, you can contact us at any time using the contact details provided above.

3. Your Rights

Under the GDPR, you generally have the following rights:

  • Right to information (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object (Art. 21 GDPR)
  • Right to withdraw consent (Art. 7 (3) GDPR) with effect for the future

If you believe that the processing of your data violates data protection law or that your data protection rights have been violated in any other way, you can lodge a complaint with the supervisory authority. In Austria, this is the Data Protection Authority:

Österreichische Datenschutzbehörde Barichgasse 40–42, 1030 Wien Phone: +43 1 52 152-0 Email: dsb@dsb.gv.at Web: www.dsb.gv.at

4. Hosting and Shop System (Shopify)

Our online shop is operated on the Shopify platform. The provider is

Shopify International Limited Victoria Buildings, 2nd Floor, 1-2 Haddington Road Dublin 4, D04 XN32, Ireland

as well as its parent company Shopify Inc. (Canada). Shopify provides the technical infrastructure, server hosting, storage, and management of our shop and processes all data necessary for the operation of the shop and the processing of orders on our behalf (including inventory, contact, contract, and usage data).

Shopify is used for the purpose of securely, quickly, and reliably providing our online offering. The legal basis is Art. 6 (1) lit. b GDPR (performance of contract) and our legitimate interest in reliable shop operation in accordance with Art. 6 (1) lit. f GDPR.

We have concluded a data processing agreement with Shopify in accordance with Art. 28 GDPR. Data may be processed or transferred to third countries (especially USA, Canada). For transfers to third countries without an adequacy decision, Shopify relies on the EU Commission's standard contractual clauses (Art. 46 GDPR). Details on data processing by Shopify can be found at: https://www.shopify.com/legal/privacy

Server Log Files

When you access our website, information is automatically collected by the provider in so-called server log files, which your browser automatically transmits. These include in particular:

  • Browser type and browser version
  • Operating system used
  • Referrer URL
  • Hostname of the accessing computer
  • Time of the server request
  • IP address

This data is not merged with other data sources. The collection is based on Art. 6 (1) lit. f GDPR. We have a legitimate interest in the technically error-free presentation and security of our website.

5. Cookies

Our website uses cookies. Cookies are small text files that are stored on your device. They do not cause any damage and do not contain viruses.

Technically necessary cookies (e.g., for storing the shopping cart, login status, or your cookie settings) are required for the operation of the shop. The legal basis is Art. 6 (1) lit. f GDPR or § 165 (3) TKG 2021, as the storage is absolutely necessary to provide the service explicitly requested by you.

Non-essential cookies (e.g., for statistics, reach measurement, or marketing) are only set with your explicit consent (Art. 6 (1) lit. a GDPR in conjunction with § 165 (3) TKG 2021). You can revoke this consent at any time via the cookie settings.

You can configure your browser to inform you about the setting of cookies, allow cookies only in individual cases, exclude the acceptance of cookies for certain cases or in general, and activate the automatic deletion of cookies when closing the browser. Deactivating cookies may limit the functionality of this website.

6. Customer Account

You have the option to create a customer account in our shop. For this purpose, we process the personal data you provide (e.g., name, address, email address, password). The data is used to simplify future orders and to manage your order history.

The legal basis is Art. 6 (1) lit. b GDPR (pre-contractual or contractual measures) and, where consent has been given, Art. 6 (1) lit. a GDPR. You can have your customer account deleted at any time. Statutory retention obligations remain unaffected (see section 11).

7. Order Processing / Contract Execution

To process your order, we process the data you provide, in particular:

  • First and last name
  • Billing and delivery address
  • Email address
  • Phone number (if provided)
  • Order and payment information

The processing of this data is necessary for the performance of the contract or for the implementation of pre-contractual measures. The legal basis is Art. 6 (1) lit. b GDPR. We pass on the data required for order processing to the commissioned shipping and payment service providers, insofar as this is necessary for the performance of the contract.

8. Payment Service Providers

We use external payment service providers for payment processing. When a payment method is selected, the data required for payment processing is transmitted to the respective service provider. The legal basis is Art. 6 (1) lit. b GDPR (performance of contract) and, if applicable, Art. 6 (1) lit. f GDPR (fraud prevention, secure payment processing).

We use the following payment service providers:

  • Shopify Payments / Stripe – Shopify Payments is processed via Stripe Payments Europe Ltd., Ireland. Privacy Policy: https://stripe.com/at/privacy
  • PayPal – PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg. Privacy Policy: https://www.paypal.com/at/legalhub/privacy-full
  • Klarna – Klarna Bank AB, Sweden. Privacy Policy: https://www.klarna.com/at/datenschutz/
  • Sofortüberweisung

9. Shipping

To deliver your ordered goods, we pass on your name and delivery address to the commissioned shipping company. If you have provided your email address or telephone number for shipment tracking, this will also be transmitted to the shipping service provider.

The legal basis is Art. 6 (1) lit. b GDPR (performance of contract).

10. Contacting Us

If you contact us by email, phone, or via a contact form, your information (e.g., name, email address, phone number, content of the inquiry) will be stored for the purpose of processing the inquiry and for follow-up questions.

Processing is based on Art. 6 (1) lit. b GDPR, provided that your inquiry is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective processing of inquiries addressed to us (Art. 6 (1) lit. f GDPR) or on your consent (Art. 6 (1) lit. a GDPR).

The data remains with us until the purpose for storage ceases to apply (e.g., after your inquiry has been processed). Mandatory legal provisions – in particular retention periods – remain unaffected.

11. Storage Duration

We process and store your personal data only as long as it is necessary for the fulfillment of the respective purpose or as required by statutory retention obligations. According to the Austrian Commercial Code (§ 212 UGB) and the Federal Fiscal Code (§ 132 BAO), we are obliged to retain business-relevant documents (e.g., invoices) for seven years. After the respective periods have expired, the data will be deleted.

12. Web Analysis

Google Analytics

This website uses functions of the web analysis service Google Analytics 4. The provider is

Google Ireland Limited Gordon House, Barrow Street Dublin 4, Ireland

Google Analytics uses cookies and similar recognition technologies that enable an analysis of your use of the website. The information generated about your use of this website is usually transmitted to Google servers and stored there. Pseudonymous identifiers (e.g., a client ID), pages accessed, time and duration of use, approximate location (based on a truncated IP address), device and browser information, and interactions with the shop (e.g., products viewed, order processes) are particularly collected.

Google Analytics 4 truncates IP addresses by default and does not store full IP addresses. This means that direct personal identifiability is not given for us.

Legal basis: The use of Google Analytics is based exclusively on your consent in accordance with Art. 6 (1) lit. a GDPR in conjunction with § 165 (3) TKG 2021. This consent is voluntary, can be revoked at any time via the cookie settings, and is not required for the use of the website.

Data transfer to third countries: In the context of using Google Analytics, personal data may be transferred to Google LLC in the USA. Google LLC is certified under the EU-US Data Privacy Framework; additionally, the transfer is based on the EU Commission's standard contractual clauses (Art. 46 GDPR).

Order processing: We have concluded a data processing agreement with Google in accordance with Art. 28 GDPR.

Storage duration: User and event-related data collected with Google Analytics are automatically deleted after [2/14 months - adjust depending on the setting in the Google Analytics account].

Objection/Deactivation: You can prevent the setting of cookies by Google Analytics via the cookie settings of this website or revoke any given consent there. Additionally, you can prevent the collection by Google Analytics via the browser add-on provided by Google: https://tools.google.com/dlpage/gaoptout

Further information on how Google Analytics handles user data can be found in Google's privacy policy: https://policies.google.com/privacy

13. SSL/TLS Encryption

For security reasons and to protect the transmission of confidential content, this website uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line. If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

14. Up-to-dateness and Changes to this Privacy Policy

This privacy policy is valid as of June 2026. Due to the further development of our website and our offerings or due to changed legal or official requirements, it may become necessary to change this privacy policy. The current version can be accessed at any time on this page.