Privacy Policy
Last updated: May 2026
eyecre.at GmbH ("we", "us", "our") is committed to protecting your personal data. This Privacy Policy explains how we collect, use and protect your information when you visit www.eyecre.at or make a purchase from our store.
This policy complies with the EU General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (DSG).
1. Controller
eyecre.at GmbH Messerschmittweg 7a 6175 Kematen, Tyrol, Austria
Email: request@eyecre.at Phone: +43 699 150 97 860 Commercial Register: FN 418550 s, Landesgericht Innsbruck
2. Data We Collect
2.1 When you visit our website
- IP address (anonymized)
- Browser type and version
- Pages visited and time spent
- Referring URL
- Date and time of access
2.2 When you place an order
- First and last name
- Billing and shipping address
- Email address
- Phone number
- Payment information (processed securely — we do not store card details)
- Order history
2.3 When you contact us
- Name and email address
- The content of your message
- Contact reason
2.4 When you subscribe to our newsletter
- Email address
- First name (optional)
3. Legal Basis for Processing (GDPR Art. 6)
| Purpose | Legal Basis |
|---|---|
| Processing your order | Art. 6(1)(b) — Contract performance |
| Sending order confirmations | Art. 6(1)(b) — Contract performance |
| Accounting and tax records | Art. 6(1)(c) — Legal obligation |
| Improving our website | Art. 6(1)(f) — Legitimate interest |
| Marketing & newsletter | Art. 6(1)(a) — Consent |
| Responding to inquiries | Art. 6(1)(f) — Legitimate interest |
4. How We Use Your Data
We use your personal data to:
- Process and fulfill your orders
- Send order confirmations and shipping notifications
- Respond to your inquiries and support requests
- Improve our website and product offering
- Send newsletters (only with your explicit consent)
- Comply with legal obligations (accounting, tax)
We do not sell your personal data to third parties.
5. Data Sharing
We share your data only where necessary with:
Squarespace Inc. (website and store platform) Squarespace processes data on our behalf. Privacy Policy: squarespace.com/privacy
Payment providers (Stripe, PayPal) Payment data is processed securely by our payment providers. We do not store card details.
Shipping partners Your name and delivery address are shared with our shipping carriers to fulfill your order.
Tax and accounting advisors Shared only as required by Austrian law.
All processors are bound by data processing agreements in accordance with GDPR Art. 28.
6. International Data Transfers
Squarespace Inc. is based in the United States. Data transfers are covered by Standard Contractual Clauses (SCCs) approved by the European Commission, ensuring adequate protection of your personal data.
7. Cookies
Our website uses cookies to ensure functionality and improve your experience.
| Cookie Type | Purpose | Duration |
|---|---|---|
| Essential | Shopping cart, session | Session |
| Analytics | Anonymous usage statistics | 12 months |
| Marketing | Only with your consent | 12 months |
You can manage your cookie preferences at any time via the cookie banner on our website or your browser settings.
8. Data Retention
| Data Type | Retention Period |
|---|---|
| Order data | 7 years (Austrian tax law) |
| Customer account data | Duration of account + 3 years |
| Contact form messages | 3 years |
| Newsletter subscription | Until unsubscribe |
| Website logs | 30 days |
9. Your Rights (GDPR Art. 15–22)
You have the right to:
- Access — request a copy of your personal data
- Rectification — correct inaccurate data
- Erasure — request deletion of your data ("right to be forgotten")
- Restriction — limit how we process your data
- Portability — receive your data in a machine-readable format
- Objection — object to processing based on legitimate interest
- Withdraw consent — at any time, for consent-based processing
To exercise any of these rights, contact us at: request@eyecre.at
We will respond within 30 days.
10. Right to Lodge a Complaint
If you believe we are not handling your data correctly, you have the right to lodge a complaint with the Austrian Data Protection Authority:
Österreichische Datenschutzbehörde Barichgasse 40–42 1030 Vienna, Austria dsb.gv.at
11. Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss or misuse. All data transmission is encrypted via SSL/TLS.
12. Changes to This Policy
We may update this Privacy Policy from time to time. The current version is always available at www.eyecre.at/privacy-policy. We will notify you of significant changes by email where required.
13. Contact
For any privacy-related questions or requests:
eyecre.at GmbH request@eyecre.at +43 699 150 97 860 Messerschmittweg 7a, 6175 Kematen, Austria