Effective date: 21 March 2026

1. Controller
The controller responsible for the processing of personal data on this website is:

CWC Handels GmbH
Franz Josef Platz 9
4810 Gmunden
Austria

Additional business location:
Schulstr. 3
4580 Windischgarsten
Austria

Email: office@c-w-c.store

Phone: +43 1 225635474

2. Contact for Data Protection Enquiries
If you have any questions about the processing of your personal data or wish to exercise your rights, you can contact us using the contact details above or directly by email at: office@c-w-c.store

3. Subject Matter and Scope of Processing
We process personal data only to the extent necessary to provide a functioning website, our online shop and our services. Processing is carried out in particular to handle enquiries, process orders including payment, shipping and customer service, and comply with legal obligations.

In particular, we process the following categories of data:

Master data: name, shipping and billing address
Contact data: email address, optional telephone number
Payment data: transaction information, selected payment method
Communication data: content of emails or contact enquiries
Technical data: IP address, browser information, device information and interaction data relating to the shop

Guest checkout is available.

4. Legal Bases for Processing
Your data is processed on the basis of the following legal grounds:

Art. 6(1)(b) GDPR: performance of a contract and steps taken prior to entering into a contract
Art. 6(1)(c) GDPR: compliance with legal obligations, in particular tax and fiscal obligations
Art. 6(1)(f) GDPR: pursuit of legitimate interests, in particular operational security, prevention of misuse and optimisation of the shop
Art. 6(1)(a) GDPR: consent, where required for certain analytics or marketing services

5. Contact Form and Communication
If you contact us by email or via the contact form, we process the information you provide in order to handle your enquiry and any follow-up questions.

6. Customer Account and Checkout
You may create a customer account to make future orders easier. Orders may also be placed without a customer account.

During checkout, we process the data required for shipping, payment and contract fulfilment. The fields currently provided include, in particular, country/region, first name, last name, address, optional additional information, postal code, city and, optionally, telephone number.

7. Payment Processing
We use external payment service providers to process payments. These include, in particular:

Shopify Payments
PayPal

Depending on the selected payment method and technical availability, Shop Pay, Apple Pay, Google Pay, Klarna, credit card or EPS bank transfer may also be offered. The data required for payment processing is transmitted to the respective payment service providers involved.

8. Shipping, Fulfilment and Recipients
For the performance of the contract, we disclose personal data only to the extent necessary to the following recipients or categories of recipients:

Shopify as the technical shop platform
Shopify Payments and PayPal for payment processing
our own business locations in Gmunden and Windischgarsten for internal processing, warehousing and order handling
Weship, Frikusweg 10, 8141 Premstätten, Austria, for fulfilment and other logistics-related tasks
Microsoft 365 / Outlook / Exchange / OneDrive for communication, document management and internal administration
external tax advisers and/or accounting service providers

9. Shopify, Cookies and Privacy Settings
Our website uses the Shopify e-commerce platform. Shopify provides features for privacy settings, cookie banners, data-sharing opt-out pages, regional consent settings and Shopify Network Intelligence. Under the current configuration, a cookie banner and a data-sharing opt-out page are enabled; Shopify Network Intelligence is also enabled. Shopify provides these features in the Customer privacy section.

We use technically necessary cookies to operate the shop. Analytics and marketing-related technologies are used, where legally required, only on the basis of your consent. Shopify notes that additional transparency requirements apply when Shopify Network Intelligence is enabled. In this context, information about rights in relation to Shopify can be found in the Shopify Privacy Portal. You can change or withdraw your consent at any time via the “Adjust cookie settings” link provided on our website or via the privacy choices available there.

10. Customer Events and Analytics Services
To optimise our offering, under the current configuration we use in particular the following customer events and/or app pixels:

Google & YouTube
Pinterest

Where legally required, these services are activated only after you have given your active consent via the cookie banner.

11. Social Media and External Content
Our website contains visible links to the following external platforms:

Instagram
Facebook
TikTok
YouTube
LinkedIn
X
Pinterest

These links are implemented as simple external links. Data is generally transferred to the respective platform only when you actively click such a link.

Our website also contains an embedded YouTube video. When embedded content is accessed, data may be transmitted to Google and/or YouTube.

12. Retention Period
We retain personal data only for as long as necessary for the respective purposes or for as long as statutory retention periods apply.

Accounting records, receipts and other tax-relevant documents are generally retained for seven years. Contract-related and billing-related data may be retained for longer where this is necessary for the establishment, exercise or defence of legal claims. In Austria, the seven-year retention period follows from Section 132(1) of the Austrian Federal Fiscal Code (BAO).

13. Transfers to Third Countries
In connection with the use of Shopify, Microsoft, Google/YouTube, Pinterest or other service providers, a transfer of personal data to countries outside the European Economic Area, in particular to the United States, cannot be ruled out.

Such transfers are made on the basis of the applicable legal mechanisms, in particular adequacy decisions or Standard Contractual Clauses, where required.

14. Your Rights
Subject to the GDPR, you have in particular the following rights:

Right of access
Right to rectification
Right to erasure
Right to restriction of processing
Right to data portability
Right to object to processing
Right to withdraw consent previously given, with effect for the future

These rights arise under the GDPR; the controller's information obligations arise in particular from Article 13 GDPR.

15. Right to Lodge a Complaint with the Supervisory Authority
If you believe that the processing of your data infringes data protection law, you have the right to lodge a complaint with the competent supervisory authority:

Austrian Data Protection Authority
Barichgasse 40-42
1030 Vienna
Austria
Email: dsb@dsb.gv.at