Skip to main content Skip to search
Expert advice 2% discount for advance payment Free shipping on orders over €150 (AT & DE) Fast shipping
Dekoratives Bild eines Richterhammers auf einer Richterfibel.

Privacy Policy

Because it is important to us

We take the protection of your personal data seriously and process it exclusively in accordance with the General Data Protection Regulation (GDPR) and the Telecommunications Act (TKG) – transparently, purposefully, and securely.

Clear and easy to understand

Privacy policies are often long and difficult to read. We deliberately keep this topic straightforward. In the following sections, we’ll explain – as simply as possible – why we need your data and how we use it.

The most important things first:

Responsible Entity (Data Controller)

Name and contact details of the responsible entity (Art. 4 No. 7 GDPR)

MILDcommerce e.U.
Obere Fahrenbachstraße 47
8451 Heimschuh, Austria

No data protection officer has been appointed, as the requirements under Art. 37 GDPR do not apply.

What Data Do We Collect?

You can use various sections of our website: shop for products, learn about airbrush techniques, participate in our partner program, download step-by-step guides and stencils, and watch videos and news.

We distinguish between passively collected (technical) data and actively provided data:

Passively (technically) collected data: When you access our pages, server log data is generated (e.g. requested URL, date/time, amount of data transferred, referrer, IP address, browser/device). This information is used for error diagnostics and operational security by our web host and is automatically deleted after 30 days. More details can be found below under Hosting & IT.

Actively provided data: In sections containing forms (e.g. orders, contact, newsletter), you decide which information to provide. Certain fields are required so that we can deliver the requested service. Optional services and cookies can be managed at any time via the Cookie Manager.

  • Purpose limitation & data minimization: We only process what is necessary for orders, services, and security.
  • Transparency: In the following sections, we explain for each purpose the types of data processed, legal bases, and storage periods.
  • Diligence & contracts: We conclude Data Processing Agreements (Art. 28 GDPR) with our Processors (Service Providers).
  • Consent: Analytics, marketing, and media content are only loaded with your consent and can be withdrawn at any time.

Areas Where We Request Data

This section covers data you actively provide. We only ask for the information that is genuinely necessary for the respective service.

Select the relevant area below – there you’ll find a brief and clear overview of the respective types of data, purpose, legal basis, and storage period.

Orders with customer account
Guest Order (Without Customer Account)
Contact via Support Form
Contact via Email & Messenger
Application for the Partner Program
Newsletter Subscriptions
Comments on the Magazine/Blog
Submitting Product Reviews
Data Access Request

Areas Where We Share Data

We only share data when it is necessary to provide our services (e.g. payment, shipping) or when you have given your consent (e.g. newsletter or analytics). Below you’ll find the individual sections where data sharing occurs.

Payment Service Providers: Mollie, PayPal
Prepayment or Refunds
Shipping Service Providers
Newsletter & Transactional Emails
Hosting & IT
Accounting / Tax Consulting
Doofinder for On-Site Search & Recommendations
Releva: Dynamic Retargeting
Google Services: Google Analytics
Google Services: Google Ads
Google Services: Google reCaptcha
Meta Pixel: Facebook & Instagram
YouTube
Governmental information requests

We use cookies and similar technologies (e.g. LocalStorage) to ensure the reliable operation of our website, to provide you with key features, to continuously improve our shop through usage analysis, and to manage marketing activities in a targeted and cost-effective manner.

By giving your permission in the Cookie Manager, you help us provide you with the best possible shopping experience. Of course, you can choose to reject individual cookies or entire cookie categories. You can manage your cookie preferences here: Cookie Manager

Note: You can also delete cookies and website data at any time in your browser (history/website data). However, this will log you out and require you to reapply your settings.

Cookie Categories

The following section provides information about the individual cookie categories.

Necessary (always active)
Marketing
Analytics
Payment service providers

Your Rights (GDPR) & How to Exercise Them

Under the GDPR, you have several rights regarding your personal data. We want to explain these clearly and briefly. You can find detailed information and forms in the respective sections of this page.

Summary Overview

  • Access (Art. 15) – Find out which data we process about you.
  • Rectification (Art. 16) – Correct inaccurate or incomplete data.
  • Erasure (Art. 17) – The “right to be forgotten” (unless legal retention obligations apply).
  • Restriction (Art. 18) – Temporarily limit data processing.
  • Data portability (Art. 20) – Receive your data in a machine-readable format.
  • Objection (Art. 21) – Object to processing based on legitimate interests or for marketing purposes.
  • Withdrawal of consent – Withdraw any consent you’ve given, effective for the future.
  • Complaint (Art. 77) – File a complaint with a Supervisory Authority (Data Protection Authority) – see below.

How to Exercise Your Rights

  • Submit a request:
    Use our Data Request Form or send us a message via: Contact options.
  • Identity verification:
    To protect your data, we require suitable proof of identity. Please do not send sensitive documents by email.
  • Timeframe:
    We usually respond within 1 month. In complex cases, this period may be extended by up to 2 months – we will inform you accordingly.
  • Cost: Exercising your rights is generally free of charge. Fees may only apply in cases of manifestly unfounded or excessive requests.
  • Exceptions:
    Legal retention obligations may prevent immediate deletion. During this time, your data will be restricted for other uses.
    Pending legal proceedings may also prevent immediate deletion. Until completion, the data will be restricted for other purposes.
  • Managing withdrawals:
    You can change your cookie/tracking consents anytime in the Cookie Manager. You can manage newsletters via the Newsletter page or through the unsubscribe links in each newsletter footer.

Right to Lodge a Complaint with a Supervisory Authority (Data Protection Authority)

If you believe that the processing of your personal data violates data protection law, you have the right to lodge a complaint with a Supervisory Authority (Data Protection Authority) pursuant to Art. 77 GDPR. In Austria, this is in particular the Austrian Data Protection Authority (DSB).

Austrian Data Protection Authority

Barichgasse 40–42, 1030 Vienna – www.dsb.gv.at

You may also contact the Data Protection Authority of your habitual residence, your place of work, or the place of the alleged infringement.

Scope & Amendments

This Privacy Policy applies to all offerings on Spritzwerk.at, including its subdomains (e.g. shop, customer account, magazine/blog) as well as to functions and services integrated by us and provided on this website. For linked external websites, the privacy policies of the respective providers apply.

Our social media profiles (e.g. on Facebook, Instagram, YouTube) are additionally subject to the privacy policies of the respective platform operators. If you send us messages or interact with us there, we process your data within the scope of this policy; otherwise, the platform’s own data protection rules apply.

Changes to This Privacy Policy

We update this Privacy Policy whenever there are changes to legal requirements, technical processes, or our service providers. The version published here, together with the indicated effective date, is always the binding one.

  • Significant changes will be clearly explained on this page.
  • For new services requiring consent, we will obtain your approval via the Cookie Manager.
  • Without your consent, non-essential services remain deactivated.

If you have any questions regarding the scope, applicability, or changes to this policy, please use our .

Effective as of: 04 Oct 2025