Privacy policy

Protecting your personal data matters to us. We process your data solely in accordance with the General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (DSG).

Controller

Medinarium GmbH
Brühlerstraße 7/1, 2340 Mödling
Österreich
E-mail: office@medinarium.com
Phone: +43 676 4800417

What data we process

To process your order we use your name, delivery and billing address, e-mail address, phone number, and order and payment details. If you create an account, we also store your login details (the password only in encrypted form).

Purposes and legal bases

We process data to perform the contract (Art. 6(1)(b) GDPR), to comply with legal obligations such as tax record-keeping (Art. 6(1)(c) GDPR), and on the basis of our legitimate interest in operating the shop securely (Art. 6(1)(f) GDPR).

Recipients

We only share your data where necessary to fulfil your order: with the delivery company, the payment provider Stripe Payments Europe Ltd. (Ireland, for online payments) and our hosting provider acting as processor.

Retention

Order and invoice data are kept for the statutory periods (usually 7 years). Account data is kept until you ask us to delete your account.

Cookies and analytics

We use technically necessary cookies for the shopping cart and login. Where enabled, we use Google Analytics to measure traffic, processing pseudonymised usage data (e.g. pages viewed, device, browser, approximate location). The legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.

Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection. Contact us at office@medinarium.com. If you believe the processing of your data breaches data protection law, you can lodge a complaint with the Austrian Data Protection Authority (www.dsb.gv.at).