1. Information on the collection of personal data and contact details of the controller
The protection of your personal data is important to us. OH MY DEER GmbH processes your personal data exclusively in compliance with the applicable data protection regulations, in particular the General Data Protection Regulation (GDPR) and the Telecommunications Act (TKG 2003). In this privacy policy, we inform you comprehensively about the type, scope and purpose of the collection and use of personal data in the context of our online presence. We use technical and organizational measures to protect your personal data from loss, misuse, unauthorized access, unauthorized disclosure and unlawful alteration. Our security measures are continuously improved in line with technological developments.
2. Person responsible for data processing
The controller responsible for data processing within the meaning of the General Data Protection Regulation (GDPR) is
OH MY DEER GmbH
Unterprambach 15
4731 Prambachkirchen
Austria
Phone: +43 664 183 62 89
E-mail: service@oh-my-deer.com
The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.
3. Collection and storage of personal data
3.1 Data transfer in the context of contract processing
The personal data collected by us will be passed on to the transport company commissioned with the delivery in the context of contract processing, insofar as this is necessary for the delivery of the goods. We pass on your payment data to the commissioned credit institution within the scope of payment processing, insofar as this is necessary for payment processing. If payment service providers are used, we will provide explicit information about this below. The legal basis for the transfer of personal data is Art. 6 para. 1 lit. b GDPR.
3.2 Data processing when visiting our website
When you visit our website, our web server automatically collects the following information:
- IP address of the accessing device
- date and time of access
- name and URL of the file accessed
- website from which access is made (referrer URL)
- browser and operating system used
The data collected is processed exclusively for the purpose of ensuring trouble-free operation and optimizing our online offering. The legal basis is Art. 6 para. 1 lit. f GDPR (legitimate interest). A personal evaluation does not take place.
4. Contact
If you contact us (e.g. by e-mail, contact form or telephone), we will process your personal data (name, e-mail address, telephone number, message) exclusively for the purpose of processing your request. The legal basis is Art. 6 para. 1 lit. b and lit. f GDPR. The data will be deleted as soon as the processing has been completed and there are no statutory retention obligations to the contrary.
5. Data processing for contract fulfillment
To process orders, we process personal data, including:
- name
- address
- contact details (e.g. telephone number, email address)
- order and payment information
This data will only be passed on to:
- the responsible transport company or forwarding agent (to organize the delivery and notification)
- the shipping portal Sendcloud GmbH, Fürstenrieder Straße 70, 80686 Munich, Germany, commissioned by us
- if necessary, our tax advisor to fulfil our tax obligations
- if necessary, other carriers who are necessary for the transport of your goods
The data will only be passed on to the extent that it is necessary for the fulfillment of the contract. The processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR and within the framework of an order processing contract in accordance with Art. 28 GDPR. For further information on data processing by Sendcloud, please refer to the privacy policy at https://www.sendcloud.com/privacy-policy.
Your contact details (including e-mail address and telephone number) may be passed on to the transport company or forwarding agent if this is necessary for delivery or a delivery notification (“notification”).
6. Storage and deletion of personal data
The storage period depends on the respective purpose of the processing, the relevant legal basis and statutory retention obligations (e.g. 7 years according to § 132 BAO). Personal data is deleted as soon as it is no longer required for the purpose of its processing, statutory retention obligations no longer apply or consent has been withdrawn.
7. Use of cookies
Our website uses cookies, small text files that are stored on your end device and contribute to the functionality and improvement of the website. The following are used
- technically necessary cookies
- functional cookies
You can adjust the cookie settings in your browser at any time. However, deactivation may limit the functionality of the website. Analysis cookies are only set with your express consent.
8. Web analysis with Google Analytics
We use Google Analytics, a service of Google Inc. that analyzes your website usage. The data processing is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR, which is obtained via the cookie banner. IP addresses are processed anonymously. You can revoke your consent at any time via the cookie settings. Further information can be found at https://policies.google.com/privacy.
You can deactivate data collection via the browser add-on at https://tools.google.com/dlpage/gaoptout.
9. Newsletter
When you register for our newsletter, we use your e-mail address exclusively for sending the newsletter. The registration procedure is carried out by means of double opt-in. We store the IP address and time stamp for verification purposes. Consent can be revoked at any time. The legal basis is Art. 6 para. 1 lit. a GDPR. The unsubscribe link can be found in every newsletter or you can unsubscribe by sending an email to service@oh-my-deer.com.
10. Integration of external services
10.1 Google Maps
Our website uses Google Maps to display maps. Data is transmitted to Google LLC in the USA. Data transfer to the USA may entail data protection risks, as there is no level of data protection equivalent to EU law there. We have concluded standard contractual clauses with Google to ensure an appropriate level of data protection.
10.2 YouTube
Our website may contain embedded YouTube videos. When the videos are played, information is transferred to Google LLC in the USA. Here too, data transfer to a third country may be associated with data protection risks. Processing is also carried out on the basis of standard contractual clauses to ensure an adequate level of data protection.
10.3 Facebook plugins
If Facebook plugins are used, data is transferred to Meta Platforms, Inc. in the USA. The processing is based on standard contractual clauses or the EU-U.S. Data Privacy Framework, if applicable.
10.4 Social media (Meta, Instagram, Pinterest, Twitter/X)
We operate presences on Facebook, Instagram (Meta), Pinterest and Twitter (X) in order to communicate with customers. Interactions may lead to the processing of personal data by the platform operators, possibly also in third countries such as the USA. For further information, please refer to the privacy policies of the respective providers.
11. Your rights as a data subject
You have the following rights:
- Information pursuant to Art. 15 GDPR
- Rectification pursuant to Art. 16 GDPR
- Erasure pursuant to Art. 17 GDPR
- Restriction of processing pursuant to Art. 18 GDPR
- Data portability pursuant to Art. 20 GDPR
- Objection to processing pursuant to Art. 21 GDPR
- Withdrawal of your consent pursuant to Art. 7 (3) GDPR
- Complaint to the competent data protection authority (Art. 77 GDPR)
12. Right to object pursuant to Art. 21 GDPR
You can object to the processing of your personal data based on Art. 6 para. 1 lit. f GDPR at any time for reasons arising from your particular situation. In the case of direct advertising, an objection is possible at any time. After an objection, no further processing for these purposes will take place unless there are compelling legitimate grounds to the contrary.
13. Changes to this privacy policy
We reserve the right to adapt this privacy policy to changed legal or technical conditions. The current version can be found on our website.
Status: June 2025
Data protection contact: service@oh-my-deer.com