Privacy Policy

Or.and which is located in Vienna, Austria, values your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or-and.com and when you purchase our products online.

By using our Website, you agree to the terms of this Privacy Policy.

1. Data We Collect

When you interact with our Website, we may collect the following types of data:

  • Personal Information: name, billing/shipping address, email address, phone number, and payment details (processed securely through our payment providers).

  • Order Information: details of the products you purchase.

  • Account Information (if you create an account): username, password, and preferences.

  • Technical Data: IP address, browser type, operating system, device information, and browsing behavior.

  • Cookies & Tracking Technologies: information collected through cookies, pixels, and similar tools (see Section 7).

2. How We Use Your Data

We use your personal data for the following purposes:

  • To process and deliver your orders.

  • To manage your account and provide customer support.

  • To communicate with you about your purchases, updates, and promotions (if you have opted in).

  • To improve our Website, services, and customer experience.

  • To comply with legal obligations under Austrian and EU law (e.g., tax and accounting requirements).

3. Legal Basis for Processing

We process your data on the following legal bases, in accordance with the General Data Protection Regulation (GDPR):

  • Performance of a contract (processing your order).

  • Compliance with legal obligations.

  • Legitimate interests (improving services, fraud prevention, security).

  • Consent (for marketing emails or non-essential cookies).

4. Sharing of Data

We may share your information with trusted third parties, including:

  • Payment processors and financial institutions.

  • Shipping and logistics providers.

  • IT service providers and Website hosting services.

  • Legal authorities, if required by law.

We do not sell your personal data to third parties.

5. International Data Transfers

If we transfer your data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

6. Data Retention

We store your personal data only as long as necessary for the purposes outlined in this Policy:

  • Order and transaction data: kept for 7 years (as required by Austrian tax law).

  • Marketing data: until you withdraw your consent.

  • Account data: until you request deletion.

7. Cookies & Tracking

Our Website uses cookies to provide functionality, analyze traffic, and personalize your shopping experience.

  • Necessary cookies: required for the operation of the Website.

  • Analytics cookies: help us understand how visitors use the site.

  • Marketing cookies: used to deliver relevant advertising.

You can manage or disable cookies in your browser settings.

8. Your Rights (under GDPR)

As a data subject, you have the right to:

  • Access your personal data.

  • Correct or update inaccurate data.

  • Request deletion of your data.

  • Restrict or object to processing.

  • Withdraw consent at any time (for marketing or cookies).

  • Data portability (receive a copy of your data in a structured format).

  • Lodge a complaint with the Austrian Data Protection Authority (Datenschutzbehörde).

9. Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, misuse, or disclosure.

10. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us:

Göttweiger Straße 1
3512 Mautern an der Donau 
Austria
Email: or.and.office@gmail.com