privacy policy

This Privacy Policy describes how webandits.eu (the "Website") collects, uses and discloses your Personal Information when you visit or make a purchase from the Website or in the Shop. WE BANDITS GmbH ("we"), Lindengasse 11/6, 1070 Vienna, Austria (e-mail: support@webandits.eu) is responsible for processing your data.

1. Collecting personal data

1.1 Legal basis

Pursuant to the General Data Protection Regulation ("GDPR"), if you are a resident of the European Economic Area ("EEA"), we process your personal data in accordance with the following lawful bases:

Your consent according to Art 6 Abs 1 lit a);
The fulfillment of the contract between you and us as the responsible party according to Art 6 Abs 1 lit b)
To comply with our legal obligations under Art 6 para 1 lit c);
For our legitimate interests, unless your interests or fundamental rights and freedoms override.

1.2 Collecting personal data

When you visit the Website, we collect certain information about the device you are using, your interaction with our Website, and information necessary to process your purchases and interests. We may also collect additional information when you contact our customer service. In this Privacy Policy, we refer to any information that can uniquely identify an individual (including the information listed below) as "Personal Information." See the list below for more information about what Personal Information we collect and why.

We use your Personal Information to provide you with our services, which include: offering products for sale, processing payments, shipping and fulfilling your order, and keeping you informed about new products, services and offers from us.

Information about your device

Categories of Personal Information Collected: Web browser version, IP address, time zone, cookie information, what web pages or products you view, search terms, and how you interact with the website.
Purpose of collection: to load the website appropriately for you and to perform analysis on the use of the website in order to optimize our website.
Source of collection: Collected automatically when you access our website, using cookies, log files, web beacons, tags or pixels.
Disclosure for business purposes: we share this data with, among others, our processor Shopify, which provides the service.
Legal basis: safeguarding the legitimate interests of the responsible parties.

Information about your order

Categories of Personal Information collected: Name, billing address, shipping address, payment information, clothing or shoe size, email address and phone number.
Purpose of processing: To provide you with products or services to fulfill our contract, to process your payment information, to arrange for shipment and provide you with invoices and/or order confirmations, to communicate with you, to check orders for potential risks or fraud, and, if consistent with the preferences you have provided, to provide you with information or advertising regarding our products or services. If a product is not available, you have the option to be notified of its availability by providing your email address.
Source of collection: provided by you and therefore collected directly. If you do not provide us with your data, we can not process your order.
Disclosure for business purposes: we share this data with our platform operator Shopify, our logistics partner pack&weg! Spedition und Handels GmbH, IZ-Nö Süd Straße 2a, Objekt M39/II, AT - 2355 Wiener Neudorf, Austria and our external accounting and tax consulting services.
Legal basis: fulfillment of the contract between you and us as the responsible party as well as our legitimate interest for a smooth ordering process and in sending advertising and your consent to be notified of availability and finally the fulfillment of our legal obligation for proper accounting etc.

Data processing for the purpose of customer service:

Categories of Personal Information Collected: Name, email address, phone number, shipping address, billing address or any other Personal Information you disclose to us.
Purpose of the collection: customer service.
Source of the collection: given by you.
Disclosure for business purposes: mainly internally, if necessary for the fulfillment of the contract then with our logistics partner pack&weg! Spedition und Handels GmbH, the courier service, the payment service providers.
Legal basis: fulfillment of the contract between you and us as the responsible party and, if necessary, to protect the legitimate interests of the responsible parties.

1.3 Retention

When you place an order through the website, we will retain your Personal Information for our records for as long as is legally or contractually necessary. Please note that we cannot delete your data if we have a legal obligation to retain it. Unless you ask us to delete that data. For more information about your right to erasure, please see the "Your Rights" section below.

1.4. Minors

The website is not intended for persons under the age of 14. We do not intentionally collect Personal Information from children. If you are a parent or guardian and believe that your child has provided us with Personal Information, please contact us at the address below to request deletion.

2. Disclosure of Personal Information

2.1 Service provider and legal obligations

We share your personal data with service providers (including as processors) to help us provide our services and fulfill our contracts with you, as described above. The use of processors in a third country requires an adequacy decision by the Commission or appropriate safeguards under Art. 46 GDPR.

For example:

Technical support

We use Shopify to power our online store. You can read more about how Shopify uses your Personal Information HERE. Shopify is a platform provider located in Canada (offices at 151 O'Connor Street, Ground floor, Ottawa, ON, K2P 2L8). The Commission has confirmed that Canada is a safe third country and therefore personal data can be transferred from EU Member States and European Economic Area Member States to this third country without any further requirements.
The service providers we commission in the area of IT support could also have access to personal data of our customers.

Partner in logistics

Your order will by packed by us and shipped by our logistics partner pack&weg! Spedition und Handels GmbH. You can view the privacy policy of pack&weg! Spedition und Handels GmbH HERE. This is a transport service provider that processes name and address on our behalf.
Your order will usually be delivered by Post AG, General Logistics Systems Austria GmbH or DHL Paket GmbH. You can view the privacy policy of Post AG HERE, General Logistics Systems Austria GmbH HERE and DHL HERE.

Payment service provider

For the processing of your payment, we work with various payment service providers. You can view these at any time on the sub-page “payments”.

To fulfill a legal obligation

We may share your Personal Information to comply with applicable laws and regulations, to respond to a subpoena, search warrant or other lawful request for information we receive, or to otherwise protect our rights.

2.2 Personalized advertising

If you give us your consent, we will use your Personal Information to send you targeted advertising or marketing communications that we believe may be of interest to you. You can view your current consent HERE. You also have the possibility to check and adjust your cookie consent at any time.

Google

Provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.

We use the following services from Google:

We use Google Analytics to understand how our customers use the website. You can also disable Google Analytics HERE.
We use Google Ads Conversion Tracking to statistically analyze and adjust the advertising we serve via Google Ads for market research purposes.
We use Google Ads remarketing tags to show you relevant ads in Google search results and on third-party websites based on your behavior on our website.

Meta

Provider: Meta Platforms Technologies Ireland Limited, 4 Grand Canal Square Dublin 2, Irland

We use the Meta Pixel to statistically analyze and adjust the advertising we serve on Meta platforms for market research purposes.

Pinterest

Provider: Pinterest Europe Ltd, Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland.

We use the Pinterest tag to statistically analyze and customize the advertising we serve on Pinterest for market research purposes.

For more information on how targeted advertising works, you can visit the Network Advertising Initiative ("NAI") educational page HERE.

You can opt out of targeted advertising:

In addition, you may opt out of some of these services by visiting the Digital Advertising Alliance opt-out portal HERE.

2.3 Newsletter

Double opt-in and logging: The registration for our newsletter takes place in a so-called double opt-in process. This means that you will receive an e-mail after registration in which you are asked to confirm your registration. This confirmation is necessary so that no one can register with other e-mail addresses. The registrations to the newsletter are logged in order to be able to prove the registration process according to the legal requirements. This includes the storage of the registration and confirmation time, as well as the IP address. Changes to your data stored at Brevo are also logged.

The dispatch of the newsletter takes place by means of Brevo.

Brevo privacy policy

2.4 Notification about the availability of a product

If a particular size of a product is sold out, we offer you the option to have us notify you when the size becomes available again. This functionality is provided by SURESWIFT CAPITAL INC (located at 113-1834C Oak Bay Avenue, V8R 0A4 Victoria, British Columbia, Canada), the operator of the BACK IN STOCK app. You can read about how SURESWIFT CAPITAL INC. processes your data here: https://backinstock.org/privacy/. The Commission has confirmed that Canada is a safe third country and therefore personal data may be transferred from EU Member States and European Economic Area Member States to this third country without any further requirements.

2.5 Automated decision making

Neither we nor Shopify perform fully automated decision making (profiling according to Art. 22 of the GDPR), however Shopify reserves the right to automatically block a payment card number or IP address after a risk and fraud screening after a certain number of failed payment attempts; this is only done for a short period of time.

3. Your rights

GDPR

If you are located in the EEA, you have the right to access your Personal Information that we hold about you, transfer it to a new service, and request that your Personal Information be corrected, updated, or deleted. If you wish to exercise these rights, please contact us using the contact information below:

by e-mail to: support@webandits.eu
by mail to: WE BANDITS GmbH, Lindengasse 11/6, 1070 Vienna, Austria

If you are not satisfied with our response to your complaint, or if you believe that we are not processing your data in accordance with data protection law, please contact us first. You also have the right to lodge a complaint with the competent data protection authority.

4. Cookies

A cookie is a small file of information that is downloaded to your computer or mobile device when you visit our website. We use a number of different cookies, including functional, performance, advertising, and social media or content cookies. Cookies enhance your browsing experience by allowing the website to remember your actions and preferences (for example, login and region selection). This means you don't have to re-enter this information each time you return to the website or browse from one web page to another. Cookies also provide information about how people use the website, such as whether it is their first visit or if they are a frequent visitor.

We use cookies to optimize your experience on our website and to provide our services. You can view all cookies currently used on our site at any time at https://webandits.eu/pages/cookies. There you also have the possibility to check and adjust your cookie consent at any time.

Do not track: Please note that Shopify may not change data collection and usage practices if such a signal is detected by your browser, as there is no consistent industry understanding of how to respond to "Do Not Track" signals.

5. Contact

For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us:

by e-mail to: support@webandits.eu
by mail to: WE BANDITS GmbH, Lindengasse 11/6, 1070 Vienna, Austria

6. Changes

We reserve the right to update this privacy policy from time to time for operational or legal reasons. Therefore, we recommend that you check this website from time to time to stay informed. The changes are effective as of publication on this page.

Last updated: 5.10.2023

See previous version here.