Privacy Policy

PetElixir – Bajor Istvan · Version: May 2026

The protection of your personal data is of particular concern to us. We process your data exclusively on the basis of the statutory provisions (GDPR, Austrian Data Protection Act, TKG 2021). In this privacy information we inform you about the most important aspects of data processing on our website and in our web shop. This English translation is provided for convenience; the German version is legally binding.

1. Controller responsible for data processing

Bajor Istvan (PetElixir)
Wagramer Straße 2A / 123, 1220 Vienna, Austria
E-mail: petelixir@petelixir.at

A data protection officer has not been appointed, as the requirements of Art. 37 GDPR do not apply.

2. Categories of processed data

Master data: First and last name, delivery address, billing address
Contact data: E-mail address, phone number (if provided)
Payment data: Payment method, transaction ID (no complete card data)
Order data: Order history, ordered products, prices, delivery status
Connection data: IP address, browser type, operating system, date and time of access
Communication data: Content of contact enquiries by e-mail or contact form

3. Hosting & web hosting

Our website is hosted by World4You Internet Service GmbH (Hafenstraße 35, 4020 Linz, Austria). World4You processes data on our behalf (e.g. IP addresses, server log files) to ensure the operation of the website. We have concluded a data processing agreement (DPA) with World4You pursuant to Art. 28 GDPR.

Legal basis: Art. 6(1)(f) GDPR. Storage period: server log files a maximum of 14 days.

4. Website visits (server log files)

When you visit our website, the following data is automatically recorded: IP address, date and time of access, URL accessed, referrer URL, and the browser and operating system used. This data is not merged with other data sources.

Legal basis: Art. 6(1)(f) GDPR.

5. Cookies

5.1 Technically necessary cookies enable basic functions of the website (e.g. cart, session management, login). These cookies are set without your consent, as they are strictly necessary for the operation of the web shop. Legal basis: Art. 6(1)(b) GDPR and § 165 (3) TKG 2021.

5.2 Optional cookies (analytical, marketing or tracking cookies) are only set with your prior consent via a cookie consent banner. You can withdraw your consent at any time. Legal basis: Art. 6(1)(a) GDPR in conjunction with § 165 TKG 2021.

6. Contacting us

If you contact us by e-mail or via a contact form, your data (name, e-mail, message content) will be stored to process your enquiry. We do not pass on this data without your consent.

Legal basis: Art. 6(1)(b) or (f) GDPR. Storage period: 6 months without conclusion of a contract; 7 years pursuant to § 132 of the Austrian Federal Fiscal Code (BAO) if a contract is concluded.

7. Data storage for orders / contract processing

To process orders, we process: name and delivery address, e-mail address, phone number (if provided), payment information, and ordered products and order history. Without this data, we cannot conclude the contract.

Legal basis: Art. 6(1)(b) GDPR. Storage period: 7 years pursuant to § 132 BAO / Austrian Commercial Code (UGB).

8. Payment service providers

8.1 Bank transfer (prepayment): We process your payment data exclusively to process the order. Legal basis: Art. 6(1)(b) GDPR.

8.2 Stripe: With card payment, your payment data is processed by Stripe Payments Europe, Ltd. (The One Building, 1 Grand Canal Street Lower, Dublin 2, Ireland). In particular, name, e-mail address, billing address, payment amount, and card and transaction data are transmitted. We neither collect nor store complete card data. In this respect, Stripe is an independent controller. Privacy information: stripe.com/at/privacy. Legal basis: Art. 6(1)(b) GDPR.

9. Shipping service providers

We pass on the necessary data (name, delivery address) to GLS Austria (General Logistics Systems Austria GmbH). A DPA pursuant to Art. 28 GDPR has been concluded. On request, we also transmit e-mail/phone for shipment tracking.

10. Tax and commercial law retention obligations

Invoices and accounting records are retained for at least 7 years in accordance with § 132 BAO and the requirements of the UGB. Legal basis: Art. 6(1)(c) GDPR.

11. Transfers to third countries

Your data is generally processed within the EU or the EEA. Where, in exceptional cases, data is transferred outside the EU, we ensure an adequate level of protection through EU standard contractual clauses (SCCs) or an adequacy decision pursuant to Art. 45 GDPR.

12. No automated decision-making

We do not use automated decision-making procedures, including profiling, pursuant to Art. 22 GDPR.

13. Your rights as a data subject

Right of access (Art. 15 GDPR)
Right to rectification (Art. 16 GDPR)
Right to erasure (Art. 17 GDPR)
Right to restriction (Art. 18 GDPR)
Right to data portability (Art. 20 GDPR)
Right to object (Art. 21 GDPR)
Right to withdraw consent (Art. 7(3) GDPR)

To exercise your rights, please contact: Bajor Istvan (PetElixir), Wagramer Straße 2A / 123, 1220 Vienna, e-mail: petelixir@petelixir.at. We generally respond to your enquiry within one month (Art. 12(3) GDPR).

14. Right to lodge a complaint with the supervisory authority

Austrian Data Protection Authority (DSB), Barichgasse 40–42, 1030 Vienna
Tel.: +43 1 52 152-0 | E-mail: dsb@dsb.gv.at | www.dsb.gv.at

15. Data security (SSL/TLS encryption)

Our website uses SSL/TLS encryption to protect data transmission. You can recognise an encrypted connection by "https://" and the padlock symbol in your browser.

16. Currency and changes

This privacy policy is currently valid (version: May 2026). We reserve the right to adapt this policy in the event of changes to our website or legal requirements.