Processing of Personal Data
Privacy Policy
As the operator of this website, protecting the privacy and security of your personal data is a matter of particular importance to us. We therefore process your data exclusively on the basis of Austrian and European legal provisions.
In this Privacy Policy, we inform you about the most important aspects of data processing in connection with our website. As a rule, our website can be used without providing personal data. Where personal data such as your name, address or email address is collected on our website, this is always done on a voluntary basis.
Data Security
Protecting your personal data is our highest priority. We take appropriate technical and organisational measures to protect your data against loss, misuse and unauthorised access. Stored data is made available to third parties only in the manner described in this Privacy Policy. Personal data is, of course, not passed on to advertising companies.
Controller
The controller responsible for data processing is Estyria Naturprodukte GmbH, Wollsdorf 75, 8181 St. Ruprecht an der Raab, Austria, www.estyria.com. You can contact us by email at datenschutz@estyria.com.
Contacting Us
If you contact us via a form on the website or by email, the data you provide will be stored by us for 18 months for the purpose of processing your enquiry and in case of follow-up questions. We will not pass this data on without your consent.
Customer Data
Without your express consent or another legal basis, your personal data will not be passed on to third parties outside the scope of contractual processing. Once the contract has been fully processed, your data will be blocked from further use. After the expiry of tax and commercial-law retention periods, this data will be deleted unless you have expressly consented to its further use.
Your personal data, insofar as it is required for establishing, structuring or amending the contractual relationship (customer data), will be used exclusively for processing the contract. For example, your name and address must be passed on to the delivery service in order to deliver the goods.
Right of Access, Rectification, Erasure, Restriction, Data Portability and the Right to Lodge a Complaint with the Data Protection Authority
You generally have the right to access, rectification, erasure, restriction of processing, data portability, withdrawal of consent and objection. You can contact us regarding these matters at datenschutz@estyria.com.
If you believe that the processing of your data violates data protection law or that your data protection rights have otherwise been infringed, you may lodge a complaint with the supervisory authority. In Austria, this is the Austrian Data Protection Authority.
Consent and Right of Withdrawal
Where your consent is required for the processing or use of your data, we will only process or use your data after receiving your express consent.
By giving your consent, you confirm that you are at least 16 years old or that the consent of your legal representative has been obtained.
You may withdraw your consent at any time by contacting datenschutz@estyria.com. If you withdraw your consent, the data previously stored about you will be anonymised and subsequently used only for statistical purposes without any reference to you personally, unless statutory retention obligations or another legal basis prevent deletion.
Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of your consent before its withdrawal.
Links
We carefully review external links from our website from an editorial perspective. Nevertheless, we accept no responsibility or liability for the content of websites linked from this website or from any other online presence.
This Privacy Policy applies only to this website. If you are redirected to another website via links on our pages, please refer directly to that website for information about how your data is handled.
Data Storage & Data Disclosure in Connection with Contract Performance
For the purpose of simplifying the purchasing process and subsequently processing the contract, personal data such as the buyer’s name and address, as well as cookies (see section “Cookies”) and anonymised IP data of the connection holder, are stored.
If the purchasing process is cancelled, the data stored by us will be deleted. If a contract is concluded, all data relating to the contractual relationship will be stored until the expiry of the tax-law retention period of seven years.
Storage Period
Your data will be stored in personal form only for as long as necessary for the purposes for which it is processed or until the expiry of any applicable statutory retention periods, unless otherwise specified in this Privacy Policy.
Recipients of Data and Data Disclosure
In connection with the operation of our websites, we engage software service providers and agencies that may gain access to your personal data in the course of their activities. They have undertaken to comply with applicable data protection regulations.
The data you provide is required for the performance of the contract or for taking steps prior to entering into a contract. Without this data, we cannot enter into the contract with you.
Data is disclosed to third parties only to the extent necessary for processing the contract. Your bank or credit card details are transmitted to the relevant banks/payment service providers for the purpose of processing payment of the purchase price.
For delivery of the goods, your data is transmitted to the transport or shipping company commissioned by us. To fulfil our tax obligations, your data is passed on to our tax adviser.
The legally required agreements pursuant to Art. 28 GDPR are concluded with processors.
SSL Encryption
For security reasons and to protect the transmission of confidential content, such as enquiries you send to us as the website operator, this website uses SSL encryption.
You can recognise an encrypted connection by the fact that the address bar in your browser changes from “http://” to “https://” and by the lock symbol in your browser bar.
When SSL encryption is enabled, the data you transmit to us cannot be read by third parties.
Registration Function
The data you enter when registering on our website is used for the purpose of providing the services offered.
With your consent, we store the personal data you provide during registration as your personal profile so that, on future visits to the website, you can conveniently log in using your username and password.
This data ensures that only you have access to your profile. We cannot access your password.
Registration has the advantage that you do not have to re-enter your address details each time you use the website.
You can always access the data we have stored about you. Your order data and previous orders are stored by us and can be viewed at any time under “My Account/My Orders”.
The data in your profile, such as your selected delivery address, can be viewed and updated during the ordering process or at any time in the protected “Account” area.
You may object to the storage of your data at any time. In this case, however, you will need to complete the registration process again each time you use the website.
By registering on our websites with registration functionality, you consent to the use and processing of the personal data you provide, particularly your name, residential and/or delivery address, email address and telephone number, for proper performance of the contract and billing.
Your customer-related data is stored and processed for customer support purposes and is passed on to third parties only where this is necessary for performance of the contract.
Newsletter
You have the option of subscribing to our newsletter via our website. For this purpose, we require your email address, your name and your declaration that you agree to receive the newsletter.
Once you have subscribed to the newsletter, we will send you a confirmation email containing a link to confirm your subscription.
You can unsubscribe from the newsletter at any time using the link in the newsletter email. Alternatively, please send your cancellation request to kernothek@steirerkraft.com.
We will then delete your data relating to newsletter distribution.
We use the newsletter tool BREVO to send our newsletters. The data you provide, namely your email address and name, is stored exclusively in our WordPress database and transmitted to BREVO for the purpose of sending the newsletter.
BREVO allows us to statistically evaluate whether and when a newsletter has been opened and which links have been clicked. This information is used exclusively to improve our newsletter service.
Competitions
In connection with competitions organised by us, your data is used solely for administering the competition unless you expressly consent to another form of use.
Log Files
When you access our websites, the following data is stored in log files: IP address, date, time, browser request and general information transmitted about the operating system and/or browser.
This usage data forms the basis for anonymous statistical analyses that allow us to identify trends and improve our services accordingly.
Cookies
Our website uses cookies. Cookies do not cause any damage to your computer and do not contain viruses.
Cookies are used to make our services more user-friendly, effective and secure. Cookies are small text files that are stored on your computer and saved by your browser.
Most of the cookies we use are so-called “session cookies”. These are automatically deleted at the end of your visit.
Other cookies remain stored on your device until you delete them. These cookies allow us to recognise your browser when you next visit our website.
You can configure your browser to inform you when cookies are set, to allow cookies only in individual cases, to exclude the acceptance of cookies in specific cases or in general, and to automatically delete cookies when you close your browser.
Disabling cookies may restrict the functionality of this website.
Hotjar
This website uses functions of the Hotjar web service, operated by Hotjar Ltd, Level 2, St. Julians Business Centre, 3 Elia Zammit Street, St. Julians STJ 1000, Malta.
Hotjar uses cookies. These are text files stored on your computer that enable analysis of your use of the website.
The information generated by the cookies about your use of this website is generally transmitted to a Hotjar server and stored there.
You may object to the use of Hotjar. Instructions are available at: https://www.hotjar.com/opt-out
YouTube Videos
We have embedded YouTube videos on our website that are stored on “www.youtube.com” and can be played directly from our website.
All of these videos are embedded using the so-called “privacy-enhanced mode”. This means that no data about you as a user is transmitted to YouTube if you do not play the videos.
Only when you play the videos are YouTube cookies stored on your computer and data transmitted to Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”), as the operator of YouTube.
When YouTube videos are played, at least the following data is transmitted to Google: IP address and cookie ID, the specific address of the page you accessed on our website, browser language settings, system date and time of access, and browser identifier.
The data is transmitted regardless of whether you have a Google user account and are logged in or whether you do not have a user account.
If you are logged in, this data is directly associated with your account. If you do not want this information to be associated with your profile, you must log out before activating the button.
YouTube and/or Google Ireland Limited stores this data as user profiles and uses it for advertising, market research and/or customised design of its website.
Such evaluations are carried out in particular, including for users who are not logged in, to provide customised advertising and to inform other users about your activities on our website.
You have the right to object to the creation of these user profiles. To exercise this right, you must contact Google Ireland Limited as the operator of YouTube.
Further information on the purpose and scope of data collection and its processing by Google can be found in Google’s Privacy Policy.
By playing YouTube videos, you consent to the processing of data by Google. We do not process the affected data ourselves.
We operate a Facebook page. Services for users in the EU are provided by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland.
When you visit our Facebook page, Meta processes personal data (e.g. IP address, device information and cookies) in order to provide us, as the operator, with statistical analyses (Facebook Insights). We have concluded an agreement with Meta on joint controllership pursuant to Art. 26 GDPR. This agreement is available at: https://www.facebook.com/legal/controller_addendum
Further information about the processing of personal data by Facebook can be found in Meta’s Privacy Policy.
Meta Pixel
We use the Meta Pixel from Meta Platforms Ireland Limited on our websites. This enables us to track the behaviour of visitors who arrive on our website by clicking on a Facebook or Instagram advertisement. This allows us to measure and optimise the effectiveness of our advertisements.
The data collected is anonymous to us, but may be processed by Meta and linked to the respective user profiles, meaning that Meta may use the data for its own advertising purposes in accordance with the Meta Data Policy.
Further information can be found here: https://www.facebook.com/privacy/policy
You can adjust your settings regarding Meta’s use of cookies or withdraw your consent at any time: https://www.facebook.com/policies/cookies/
Facebook Social Plugins
We use social plugins from Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland.
The plugins can be identified by the Facebook logo or the wording “Facebook Social Plugin”.
If, for example, you click the “Like” button or submit a comment, the relevant information is transmitted directly from your browser to Facebook and stored there.
Facebook may also make your preferences visible to your Facebook friends.
If you are logged in to Facebook, Facebook can directly associate your visit to our website with your Facebook account.
Even if you are not logged in or do not have a Facebook account, your browser transmits information to Facebook, such as which website you have accessed and your IP address, and Facebook stores this information.
Details regarding how Facebook handles your personal data and your related rights can be found in Facebook’s privacy information.
If you do not want Facebook to associate data collected about you via our website with your Facebook account, you must log out of Facebook before visiting our website.
Functions of the Instagram service are integrated into our websites. The provider for users in the EU is also:
Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland.
If you are logged in to your Instagram account, you can link content from our pages to your profile by clicking the Instagram button. This allows Meta to associate your visit to our website with your user account.
Further information about data processing by Instagram can be found in Instagram’s Privacy Policy.
Functions of the Pinterest service are integrated into our website.
The provider for users in the EU is Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland.
The integration of Pinterest functions on our website may result in personal data such as your IP address, session ID, information about the operating system used, usage statistics and browser identifier being transmitted to Pinterest.
This data transmission takes place regardless of whether you have a Pinterest user account or are logged in.
If you are logged in to Pinterest, Pinterest can directly associate your visit to our website with your user account.
If you do not want Pinterest to associate your visit to our website with your Pinterest account, please log out of Pinterest before visiting our website.
We ourselves do not store personal data in connection with the use of Pinterest.
Further information about the purpose and scope of data collection and processing by Pinterest can be found in Pinterest’s Privacy Policy.
TikTok
We operate a TikTok channel. The provider for users in the European Economic Area is TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland.
When you visit our TikTok channel, TikTok processes personal data such as your IP address, information about devices, cookies and usage data, among other things, in order to provide us, as the operator, with statistical analyses (“TikTok Analytics”).
We have only limited influence over this processing.
According to TikTok, your data may also be processed outside the European Union, in particular in the USA, Singapore or China.
According to TikTok, such transfers are based, among other things, on standard contractual clauses pursuant to Art. 46 GDPR.
If you have a TikTok account and are logged in, TikTok may associate your visit to our channel with your user account.
We ourselves do not store personal data in connection with the use of TikTok.
Further information about data processing by TikTok can be found in TikTok’s Privacy Policy.
Google Analytics
This website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Analytics uses so-called “cookies”, text files that are stored on your computer and enable an analysis of your use of the website.
The information generated by the cookie about your use of this website is generally transmitted to a Google server in the USA and stored there. If IP anonymisation is activated on this website, however, your IP address will first be shortened by Google within Member States of the European Union or in other states party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.
On behalf of the operator of this website, Google will use this information to evaluate your use of the website, compile reports on website activity and provide the website operator with further services relating to website and internet usage.
The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
You can prevent cookies from being stored by selecting the appropriate settings in your browser software. Please note, however, that in this case you may not be able to use all functions of this website to their full extent.
You can also prevent the collection of the data generated by the cookie and relating to your use of the website, including your IP address, as well as the processing of this data by Google, by downloading and installing the browser plugin available at: http://tools.google.com/dlpage/gaoptout?hl=de
On this website, Google Analytics is initialised with the anonymizeIp setting, meaning that the last part of the IP address is masked to ensure anonymised data collection.
Further information on the terms of use and data protection can be found at: http://www.google.com/analytics/terms/de.html and https://www.google.de/intl/de/policies/
Google Ads
On our websites, we use the Google Ads web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).
Google Ads uses cookies for the purpose of targeting visitors at a later point with online advertising in the Google advertising network through remarketing campaigns.
To display remarketing advertisements, third-party providers such as Google use cookies based on a previous visit to this website.
As a user, you can disable Google’s use of cookies via Google’s advertising settings.
Google Advertising Network, Remarketing and DoubleClick
Google uses the DoubleClick cookie on websites in the Google advertising network and in certain Google services to support Ads customers and publishers with the delivery and management of online advertising.
When you visit a website and view or click on an advertisement served via websites in the Google advertising network, a DoubleClick cookie may be stored in your browser.
The DoubleClick cookie identifier assigned to your browser is the same identifier used when visiting websites that use DoubleClick advertising programmes.
If your browser already has a DoubleClick cookie, no additional DoubleClick cookie should be stored.
Further information about the use of DoubleClick cookies in connection with the DoubleClick advertising programme can be found in Google’s DoubleClick privacy FAQs.
This website also uses remarketing with Google Analytics for online advertising.
This includes the use of cookies by third-party providers, including Google. Through the combined use of first-party cookies, such as Google Analytics cookies, and third-party cookies, such as DoubleClick cookies, advertisements may be displayed, optimised and evaluated based on your previous visits to this website.
Remarketing is used to collect and store information about your browsing behaviour in anonymised form for marketing purposes (targeting/retargeting).
This data is stored on your computer using cookies. Based on an algorithm, targeted product recommendations may subsequently be displayed to you as personalised advertising banners on other websites.
Under no circumstances can this data be used to personally identify you as a visitor to this website. The collected data is used solely to improve the services offered.
Google reCAPTCHA
On our websites, we use the reCAPTCHA service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”) to protect orders submitted via online forms.
For this purpose, the data collected is generally transmitted to a Google server in the USA and stored there.
The following data is collected by reCAPTCHA, among other things: IP address, screen resolution of the visitor, browser language settings, time zone, installed browser plugins, click behaviour, browser identifier and all cookies set by Google during the previous six months.
Google uses this information to evaluate your use of this service.
The purpose of the data collection is to distinguish whether an entry has been made by a human being or through abusive automated processing.
Further information on the purpose and scope of data collection and processing by Google Ireland Limited can be found in Google’s Privacy Policy.
Google Maps
We use the Google Maps API service on our microsites. This service is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
By integrating this service into our website, at least the following data is transmitted to Google Ireland Limited: IP address, time of the website visit, screen resolution of the visitor, URL of the website (referrer), browser identifier (user agent) and search terms.
The data is transmitted regardless of whether you have a Google user account and are logged in or whether you do not have a user account.
If you are logged in, this data is directly associated with your account. If you do not want this information to be associated with your profile, you must log out before activating the button.
Google Ireland Limited stores this data as user profiles and uses it for advertising, market research and/or customised design of its website.
You have the right to object to the creation of these user profiles. To exercise this right, you must contact Google.
Further information on the purpose and scope of data collection and processing by Google Ireland Limited can be found in Google’s Privacy Policy.
By using the Google Maps service, you consent to data processing by Google Ireland Limited.
Last updated: August 2026