Privacy Policy

As of: July 2026

Thank you for your interest in our online shop. Protecting your personal data is important to us. Below, we provide detailed information on how we handle your data when you use this website.

1. Controller

The controller responsible for data processing on this website is:

der BAUGREISSLER gmbh Limited liability company Wildendürnbach 272 2164 Wildendürnbach Austria

Phone: 02572/5395330 Email: office@der-baugreissler.at Company register number: 648466 b Register court: Korneuburg VAT ID: ATU 82175913

Business purpose: Trade, excluding regulated trade businesses Member of the Lower Austria Chamber of Commerce Trade authority: District Authority Mistelbach

2. General information on data processing

As a rule, we process our users’ personal data only to the extent necessary to provide a functional website and our content and services. Personal data is generally processed only with the user’s consent or on the basis of a legal permission (in particular Art. 6(1)(a), (b), (c) and (f) GDPR).

3. Your rights as a data subject

You have the right at any time to:

• Request information about your data stored by us (Art. 15 GDPR)
• Request the correction of incorrect data (Art. 16 GDPR)
• Request the deletion of your data stored by us (Art. 17 GDPR), provided no statutory retention obligations prevent this
• Request the restriction of processing (Art. 18 GDPR)
• Object to the processing of your data (Art. 21 GDPR)
• Receive your data in a structured, commonly used format (data portability, Art. 20 GDPR)
• Withdraw consent you have given at any time with effect for the future (Art. 7(3) GDPR)

You also have the right to lodge a complaint with the competent supervisory authority:

Austrian Data Protection Authority Barichgasse 40–42 1030 Vienna Website: www.dsb.gv.at

4. Hosting

This website is hosted by SiteGround. The provider is SiteGround Spain S.L. or the respective EU group company. When you access our website, SiteGround collects various log files, including your IP address.

For details, please see SiteGround’s privacy policy: https://www.siteground.com/privacy.htm

We have concluded a data processing agreement (DPA) with SiteGround in accordance with Art. 28 GDPR. Processing is based on our legitimate interest in the secure and efficient provision of our online offering (Art. 6(1)(f) GDPR).

5. Server log files

Each time you access our website, our hosting provider automatically collects and stores information in so-called server log files, which your browser transmits automatically. These are:

• Browser type and browser version
• Operating system used
• Referrer URL
• Hostname of the accessing computer
• Time of the server request
• IP address

This data is not merged with other data sources and is automatically deleted after no later than 30 days, unless security-related incidents require longer retention.

6. Cookies and cookie consent management (Complianz)

Our website uses cookies. Cookies are small text files that are stored on your device.

When you visit our website for the first time, you will be asked via a cookie consent banner (provided by the Complianz plugin) which categories of cookies you agree to. Your selection is saved and can be changed or withdrawn at any time via the cookie settings link (usually in the website footer).

We distinguish between the following cookie categories:

Technically necessary cookies (no consent required, Art. 6(1)(f) GDPR and/or Section 165(3) TKG 2021) These are essential for operating the website and, in particular, the cart/checkout, e.g.:

• WooCommerce session and cart cookies
• Language settings cookie (WPML)
• Cookie consent storage (Complianz)

Functional and statistical cookies / marketing cookies We currently use no analytics or marketing tools (e.g. Google Analytics, Meta Pixel) that set cookies beyond what is technically necessary. If this changes, we will ask for your explicit consent in advance via the Complianz consent banner and update this privacy policy accordingly.

More information about Complianz: https://complianz.io/privacy-statement/

7. Order processing via WooCommerce

We use the WooCommerce software to process orders in our online shop.

As part of an order, we collect and process the following data:

• Name, billing and shipping address
• Email address and phone number
• Ordered items, order value, payment method
• IP address at the time of the order

This data is processed exclusively for contract performance (Art. 6(1)(b) GDPR) and, where required by law, stored for the duration of the commercial and tax retention periods (in Austria generally 7 years, pursuant to Section 132 BAO).

7.1 Disclosure to suppliers (drop shipping)

As certain products you order are shipped to you directly by our suppliers (including Ospel, Oak Factory), we pass on the data required for order processing (name, shipping address, ordered items, contact details) to the respective responsible supplier to the extent necessary. This disclosure is made solely for the purpose of order processing on the basis of Art. 6(1)(b) GDPR. Where required, we have corresponding contractual data protection arrangements in place with our suppliers.

8. Payment processing

8.1 Stripe

For payment processing, we use the payment service provider Stripe (Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland) via the WooCommerce Stripe Gateway plugin.

If you select a Stripe payment method (e.g. credit/debit card, Klarna, Apple Pay, Google Pay), the payment data you enter is transmitted directly to Stripe. We do not receive or store complete card details. Processing is based on Art. 6(1)(b) GDPR (performance of contract).

Stripe privacy policy: https://stripe.com/at/privacy

8.2 WooPayments

In addition, payment processing may be carried out via WooPayments (Automattic Inc.), which is also based on Stripe infrastructure. The same principles apply as described under 8.1.

9. Sending order and transaction emails

To reliably send order confirmations and other transaction-related emails, we use the WP Mail SMTP plugin in conjunction with the email delivery service Brevo (Sendinblue SAS, 7 rue de Madrid, 75008 Paris, France).

The data required for sending emails (recipient email address, name, subject and content of the order email) is transmitted to Brevo. We have concluded a data processing agreement with Brevo in accordance with Art. 28 GDPR. The legal basis is Art. 6(1)(b) GDPR.

Brevo privacy policy: https://www.brevo.com/legal/privacypolicy/

10. Contact form (Elementor Pro Forms)

If you contact us via a contact or cancellation form on our website, the data you provide in the form (e.g. name, email address, message) will be stored by us for the purpose of processing your request. The legal basis is Art. 6(1)(b) and/or (f) GDPR. The form function is technically provided by Elementor Pro and processed locally on our server.

11. Multilingualism (WPML)

Our website is operated in multiple languages via WPML. A technically necessary cookie is set to store your selected language setting. No personal data beyond the language setting is processed.

12. Newsletter (MailPoet)

The MailPoet plugin is installed on our website. However, we are currently not sending any newsletters via this plugin. If we activate this function in the future, we will ask for your explicit consent in advance (double opt-in procedure) and supplement this privacy policy with the information then required.

13. Website creation, design and basic technical plugins

To design and operate our website, we use, among other things, the following plugins, which work exclusively locally on our own server and do not transmit any personal data to third parties: Elementor / Elementor Pro, ElementsKit Lite, Essential Addons for Elementor, Piotnet Addons for Elementor Pro, Unlimited Elements for Elementor, Advanced Custom Fields, Custom Post Type UI, Folders, Rank Math SEO, Products Per Page for WooCommerce, WooCommerce Table Rate Shipping, WooCommerce Advanced Notifications, Germanized for WooCommerce, One Stop Shop for WooCommerce, User Role Editor, as well as internal backup and maintenance tools (All-in-One WP Migration, Better Search Replace, Security Optimizer, Speed Optimizer, SiteGround Central, Code Snippets, WP Sheet Editor).

These tools are used solely for internal administration, presentation and security of our shop and do not constitute any additional disclosure of data to third parties beyond the cases already mentioned in this policy.

14. Analytics and marketing tools

We currently use no web analytics tools (e.g. Google Analytics), marketing pixels (e.g. Meta/Facebook Pixel, TikTok Pixel) or comparable tracking technologies. This policy will be updated as soon as this changes.

15. Data security

We use the widely used SSL/TLS encryption method during website visits. In addition, we use security and performance tools from our hosting provider (including SiteGround Security Optimizer, Speed Optimizer) to protect the website.

16. Changes to this privacy policy

We reserve the right to adapt this privacy policy so that it always complies with current legal requirements or to implement changes to our services. The new privacy policy will then apply to your next visit.

17. Overview of the most important processors / recipients