Privacy policy

PRIVACY POLICY

Protecting your personal data is important to us. We process your data only on the basis of the applicable law (GDPR, Austrian Data Protection Act, Austrian Telecommunications Act 2021). This privacy policy explains which data we process, why and on what legal basis.

1. CONTROLLER

Snud Concept Store OG
Josefstädter Straße 50, 1080 Vienna, Austria
Email: hello@snud.at
Phone: +43 670 3512525

2. VISITING THE WEBSITE

Our online shop runs on the Shopify platform (Shopify International Limited, Dublin, Ireland). When you visit the website, technically necessary data is processed, such as your IP address, browser, device, the pages you view and the date and time. This is required to provide the website securely and reliably (legitimate interest, Art. 6(1)(f) GDPR). Shopify also processes data in Canada and the USA. Shopify is certified under the EU-US Data Privacy Framework; the EU Commission's standard contractual clauses also apply.

3. COOKIES

Our website uses cookies. We set technically necessary cookies, for example for the cart and checkout, on the basis of our legitimate interest (§ 165(3) TKG 2021, Art. 6(1)(f) GDPR). All other cookies, for example for statistics or marketing, are only set with your consent (Art. 6(1)(a) GDPR), which you give via our cookie banner. You can withdraw your consent at any time via the cookie settings in the website footer. You can also delete or block cookies in your browser; the website may then not work fully.

4. ORDERS AND CONTRACT PROCESSING

When you place an order, we process the data required for it: name, billing and shipping address, email address, phone number (if provided), the products ordered and payment information. The legal basis is the performance of the contract (Art. 6(1)(b) GDPR). Without this data we cannot conclude the contract. If you create a customer account, we store your data for future orders until you delete the account.

We only share your data where necessary for your order:

• Payment providers: Shopify Payments, PayPal and Klarna, depending on the payment method you choose, to process your payment.
• Shipping: Österreichische Post AG for delivery.
• Point-of-sale system: helloCash (via the oView helloCash Sync app) for accounting and in-store orders.
• Tax advisor: to meet our tax obligations.

We keep invoice-related data for seven years (§ 132 Austrian Federal Fiscal Code) and data on purchased products until product liability expires.

5. CONTACT

If you contact us by email, phone or via a form on the website, we process your details to answer your enquiry (Art. 6(1)(b) or (f) GDPR) and keep them for twelve months in case of follow-up questions.

For enquiries via WhatsApp we use a chat button (SeedGrow WhatsApp Chat). Only when you click it are you forwarded to WhatsApp (WhatsApp Ireland Limited, part of the Meta group). WhatsApp's privacy policy then applies; data may also be transferred to the USA.

6. WITHDRAWAL VIA OUR FORM

You can use our withdrawal form to withdraw from a purchase. It is provided by the EU Widerruf Button app (401layers UG, Germany). We process your details (name, email, order number) to handle your withdrawal (legal obligation, Art. 6(1)(c) GDPR).

7. NEWSLETTER

If you sign up for our newsletter, we process your email address and, if you provide it voluntarily, your date of birth to send you news and offers. The legal basis is your consent (Art. 6(1)(a) GDPR). After signing up, you will receive an email to confirm your subscription. We use Shopify Messaging to send it. You can unsubscribe at any time via the link at the end of every newsletter or by emailing hello@snud.at; we will then delete your newsletter data.

8. PRODUCT REVIEWS

After an order, we ask you for a review by email. For this we use Judge.me (Judge.me Ltd.), which receives your name, email address and the products you bought. The legal basis is our legitimate interest in feedback (Art. 6(1)(f) GDPR). You can object to these emails at any time. If you submit a review, it is shown on our website with the name you enter.

9. STATISTICS AND MARKETING

Only if you agree in the cookie banner do we use Google Analytics (Google Ireland Limited) and the Meta Pixel (Meta Platforms Ireland Limited) to analyse how our website is used and to show more relevant ads on Instagram and Facebook (Art. 6(1)(a) GDPR). Data may be transferred to the USA; Google and Meta are certified under the EU-US Data Privacy Framework. You can withdraw your consent at any time in the cookie settings.

10. EMBEDDED CONTENT

• Google Maps: A Google Maps map (Google Ireland Limited) is embedded on our contact page. When the map loads, your IP address is transmitted to Google, including to the USA. We use the map so you can find us easily (legitimate interest, Art. 6(1)(f) GDPR).
• Fonts: We use the Fontify app to display fonts. Your IP address may be transmitted to the server the font is loaded from.

11. STORAGE PERIOD

We only keep your data for as long as necessary for the purpose concerned or as required by statutory retention periods (see the individual sections). After that, we delete it.

12. YOUR RIGHTS

You have the right to access, rectification, erasure, restriction of processing, data portability and objection. You can withdraw any consent you have given at any time with effect for the future. Just write to us at hello@snud.at.

If you believe that the processing of your data violates data protection law, you can complain to us or to the Austrian Data Protection Authority: Barichgasse 40–42, 1030 Vienna, dsb@dsb.gv.at.

As of October 2026