Webshop
Webshop

Privacy Policy
 


1) Introduction and contact details of the data controller
1.1 We are delighted that you are visiting our website and thank you for your interest. Below, we provide information on how we handle your personal data when you use our website. Personal data refers to any data that can be used to identify you personally.
1.2 The data controller for this website within the meaning of the General Data Protection Regulation (GDPR) is Kalendermacher GmbH & Co. KG, Wiener Straße 68, 2104 Spillern, Austria, Tel.: +43 (0)2266/80 234-0, email: office@kalendermacher.at. The data controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.

2) Data collection when visiting our website
2.1 When you use our website purely for information purposes – i.e. if you do not register or otherwise provide us with information – we only collect data that your browser transmits to the website server (so-called ‘server log files’). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:
- The website you have
visited - Date and time of access
- Amount of data sent in bytes
- Source/referrer from which you accessed the page
- Browser used
- Operating system used
- IP address used (where applicable: in anonymised form)
Processing is carried out in accordance with Article 6(1)(f) of the GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be disclosed or used for any other purpose. However, we reserve the right to review the server log files retrospectively should there be concrete indications of unlawful use.
2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or enquiries to the data controller), this website uses SSL or TLS encryption. You can recognise an encrypted connection by the string ‘https://’ and the padlock icon in your browser address bar.

3) Cookies
To make your visit to our website more engaging and to enable the use of certain functions, we use cookies, which are small text files stored on your device. Some of these cookies are automatically deleted when you close your browser (so-called ‘session cookies’), whilst others remain on your device for longer and enable page settings to be saved (so-called ‘persistent cookies’). In the latter case, you can find the storage period in the overview of your web browser’s cookie settings.
Where personal data is also processed by individual cookies we use, such processing is carried out in accordance with Article 6(1)(b) of the GDPR either for the performance of a contract, in accordance with Article 6(1)(a) of the GDPR where consent has been given, or in accordance with Article 6( 1(f) of the GDPR to safeguard our legitimate interests in ensuring the best possible functionality of the website and a user-friendly and effective experience for visitors.
You can configure your browser so that you are notified when cookies are set and can decide on a case-by-case basis whether to accept them, or you can block the acceptance of cookies in specific cases or generally.
Please note that if you do not accept cookies, the functionality of our website may be restricted.

4) Contacting
us When you contact us (e.g. via the contact form or by email), personal data is processed – solely for the purpose of handling and responding to your enquiry and only to the extent necessary for this purpose.
The legal basis for the processing of this data is our legitimate interest in responding to your enquiry in accordance with Article 6(1)(f) of the GDPR. If your contact is aimed at entering into a contract, the additional legal basis for the processing is Article 6(1)(b) of the GDPR. Your data will be deleted once it is clear from the circumstances that the matter in question has been conclusively resolved, provided that there are no statutory retention obligations to the contrary.

5) Data processing for order fulfilment
To the extent necessary for the performance of the contract for delivery and payment purposes, the personal data we collect will be disclosed to the contracted transport company and the contracted credit institution in accordance with Article 6(1)(b) of the GDPR.
Where we are obliged, on the basis of a relevant contract, to provide updates for goods containing digital elements or for digital products, we will process the contact details you provided when placing your order in order to inform you personally in accordance with our statutory information obligations under Article 6(1)(c) of the GDPR. Your contact details will be used strictly for the specific purpose of notifying you of updates we are obliged to provide and will be processed by us for this purpose only to the extent necessary to provide the relevant information.
To process your order, we also work with the service provider(s) listed below, who assist us, either fully or in part, in the performance of concluded contracts. Certain personal data is transferred to these service providers in accordance with the following information.

6) Web analytics services
6.1 Google Analytics 4
This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”), which enables an analysis of your use of our website.
By default, when you visit the website, Google Analytics 4 sets cookies, which are small text files stored on your device and collect certain information. This information includes your IP address; however, Google truncates the last few digits of this address to prevent direct personal identification.
The information is transmitted to Google’s servers and processed there. This may also involve transfers to Google LLC, which is based in the USA.
Google uses the information collected on our behalf to analyse your use of the website, to compile reports on website activity for us, and to provide other services relating to website and internet usage. The truncated IP address transmitted by your browser as part of Google Analytics is not combined with other data held by Google. The data collected through the use of Google Analytics 4 is stored for a period of two months and then deleted.
All processing described above, in particular the setting of cookies on the device you are using, takes place only if you have given us your explicit consent in accordance with Article 6(1)(a) of the GDPR.
Without your consent, Google Analytics 4 will not be used during your visit to the website. You may withdraw your consent at any time with future effect. To exercise your right to withdraw consent, please deactivate this service via the ‘Cookie Consent Tool’ provided on the website.
We have entered into a data processing agreement with Google which ensures the protection of our website visitors’ data and prohibits unauthorised disclosure to third parties.
Further legal information on Google Analytics 4 can be found at https://business.safety.google/intl/de/privacy/, https://policies.google.com/privacy?hl=de&gl=de and at https://policies.google.com/technologies/partner-sites

Demographic characteristics
Google Analytics 4 uses the special ‘demographic characteristics’ feature and can use this to generate statistics that provide insights into the age, gender and interests of website visitors. This is done by analysing advertising and information from third-party providers. This enables target groups to be identified for marketing activities. However, the data collected cannot be attributed to any specific individual and is deleted after being stored for a period of two months.
Google Signals
As an extension to Google Analytics 4, Google Signals may be used on this website to generate cross-device reports. If you have enabled personalised adverts and linked your devices to your Google account, Google may – subject to your consent to the use of Google Analytics in accordance with Article 6(1)(a) of the GDPR – analyse your usage behaviour across devices and create database models, including those relating to cross-device conversions. We do not receive any personal data from Google, only statistics. If you wish to stop cross-device analysis, you can disable the ‘Personalised ads’ feature in your Google Account settings. To do so, follow the instructions on this page: https://support.google.com/My-Ad-Center-Help/answer/12155764?hl=de
Further information on Google Signals can be found at the following link: https://support.google.com/analytics/answer/7532985?hl=de
UserIDs
As an extension to Google Analytics 4, the “UserIDs” feature may be used on this website. If you have consented to the use of Google Analytics 4 in accordance with Article 6(1)(a) of the GDPR, have set up an account on this website and log in to this account on various devices, your activities, including conversions, can be analysed across devices.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with European data protection standards on the basis of an adequacy decision by the European Commission.
6.2 Matomo
This website uses a web analytics service provided by the following provider: InnoCraft Ltd, 150 Willis St, 6011 Wellington, New Zealand, (“Matomo”)
To protect website visitors, Matomo uses a so-called “config_id” to enable various analyses of website usage within a short time window of up to 24 hours. The “config_id” is a randomly generated, time-limited hash of a limited set of the visitor’s settings and attributes. The config_id or config hash is a string calculated for each visitor based on their operating system, browser, browser plug-ins, IP address and browser language. Matomo does not use device fingerprinting and uses an anonymised IP address of the site visitor to generate the “config_id”.
Where the information processed in this way includes personal user data, the processing is carried out in accordance with Article 6(1)(f) of the GDPR on the basis of our legitimate interest in the statistical analysis of user behaviour for optimisation and marketing purposes. To object to the processing of your visitor data in future, we provide a separate option to object on our website.
Data is only transferred to the service provider if the service is not hosted on our own servers. In the case of self-hosting, no data collected via the service is transferred to the service provider.
Where the service is not hosted on our own servers, we have entered into a data processing agreement with the provider which ensures the protection of our website visitors’ data and prohibits unauthorised disclosure to third parties.
In this case, data transfers to New Zealand are governed by an adequacy decision issued by the European Commission, which certifies compliance with European data protection standards in international data transfers.

7) Website features
: Google Maps
This website uses an online map service provided by the following provider: Google Maps (API) by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).
Google Maps is a web service for displaying interactive (map) charts to present geographical information visually. By using this service, our location is displayed to you, making it easier for you to find your way here.
As soon as you access any subpages on which the Google Maps map is embedded, information about your use of our website (such as your IP address) is transmitted to Google’s servers and stored there; this may also involve transmission to the servers of Google LLC in the USA. This occurs regardless of whether Google provides a user account through which you are logged in or whether a user account exists. If you are logged in to Google, your data will be directly associated with your account. If you do not wish your data to be associated with your Google profile, you must log out before clicking the button. Google stores your data (even for users who are not logged in) as usage profiles and analyses them.
The collection, storage and analysis are carried out in accordance with Article 6(1)(f) of the GDPR on the basis of Google’s legitimate interest in displaying personalised advertising, conducting market research and/or tailoring Google websites to user needs. You have the right to object to the creation of these user profiles; to exercise this right, you must contact Google. If you do not consent to your data being transferred to Google in future when using Google Maps, you also have the option of completely disabling the Google Maps web service by disabling JavaScript in your browser. Google Maps, and therefore the map display on this website, will then no longer be available for use.
Where legally required, we have obtained your consent to the processing of your data as described above in accordance with Article 6(1)(a) of the GDPR. You may withdraw your consent at any time with effect for the future. To exercise your right to withdraw consent, please follow the procedure for lodging an objection as described above.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with European data protection standards on the basis of an adequacy decision by the European Commission.
Further information on Google’s privacy policy can be found here: https://business.safety.google/intl/de/privacy/

8) Rights of the data subject
8.1 Under applicable data protection law, you are granted the following rights as a data subject (rights of access and intervention) vis-à-vis the controller with regard to the processing of your personal data; please refer to the legal basis cited for the respective conditions for exercising these rights:
- Right of access pursuant to Article 15 of the GDPR;
- Right to rectification pursuant to Article 16 of the GDPR;
- Right to erasure pursuant to Article 17 of the GDPR;
- Right to restriction of processing pursuant to Article 18 of the GDPR;
- Right to be informed pursuant to Article 19 of the GDPR;
- Right to data portability pursuant to Article 20 of the GDPR;
- Right to withdraw consent pursuant to Article 7(3) of the GDPR;
- Right to lodge a complaint pursuant to Article 77 of the GDPR.
8.2 RIGHT
TO OBJECT: IF, AS PART OF A BALANCING OF INTERESTS, WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST, YOU HAVE THE RIGHT AT ANY TIME, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, to object to such processing with effect for the future.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA IN QUESTION. HOWEVER, WE RESERVE THE RIGHT TO CONTINUE PROCESSING IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING IS NECESSARY FOR THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS.
IF WE PROCESS YOUR PERSONAL DATA FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR THE PURPOSE OF SUCH MARKETING. YOU MAY EXERCISE YOUR RIGHT TO OBJECT AS DESCRIBED ABOVE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE RELEVANT DATA FOR DIRECT MARKETING PURPOSES.

9) Retention period for personal data
The retention period for personal data is determined by the relevant legal basis, the purpose of processing and – where applicable – additionally by the relevant statutory retention period (e.g. retention periods under commercial and tax law).
Where personal data is processed on the basis of explicit consent in accordance with Article 6(1)(a) of the GDPR, the data in question will be retained until you withdraw your consent.
Where statutory retention periods apply to data processed in the context of contractual or quasi-contractual obligations on the basis of Article 6(1)(b) of the GDPR, such data will be routinely deleted upon expiry of the retention periods, provided that it is no longer required for the performance of a contract or for entering into a contract and/or we no longer have a legitimate interest in continuing to store it.
Where personal data is processed on the basis of Article 6(1)(f) of the GDPR, this data will be stored until you exercise your right to object under Article 21(1) of the GDPR, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing is necessary for the establishment, exercise or defence of legal claims.
Where personal data is processed for the purposes of direct marketing on the basis of Article 6(1)(f) of the GDPR, this data will be stored until you exercise your right to object under Article 21(2) of the GDPR.
Unless otherwise specified in the other information contained in this policy regarding specific processing situations, stored personal data will otherwise be erased when it is no longer necessary for the purposes for which it was collected or otherwise processed.


Copyright notice: This privacy policy was drawn up by the specialist solicitors at IT-Recht Kanzlei and is protected by copyright (https://www.it-recht-kanzlei.de)

Date: 22 May 2026, 11:07:10