DURST ESSENTIALS SHOP

Privacy Policy

This privacy notice explains how personal data is processed in the Durst Essentials Shop. Its content is based on the current privacy structure of TOPO GmbH and has been adapted to this Shopify store and the Austrian legal framework.

Last updated: March 31, 2026

Operator: TOPO GmbH, Brockenweg 2, 6020 Hall in Tirol

Contact: office@topo-gmbh.com, +43 660 6217405

1. Controller and Scope

The controller within the meaning of the GDPR is TOPO GmbH, Brockenweg 2, 6020 Hall in Tirol, Austria, email office@topo-gmbh.com, telephone +43 660 6217405.

This Privacy Policy applies to the Durst Essentials Shop and the associated inquiries, orders, customer accounts, and service processes. We process personal data only to the extent necessary and on the basis of the applicable legal provisions, in particular the GDPR, the Austrian Data Protection Act (DSG), and relevant telecommunications law requirements.

2. Orders and Contract Processing

When you place an order in this shop, we process in particular master data, contact data, order data, delivery information, billing information, and payment information so that we can accept, process, deliver, and invoice your order. The legal basis is generally Art. 6(1)(b) GDPR.

Where commercial and tax-law retention obligations apply, we store the data required for contract processing for the periods prescribed by law.

3. Customer Accounts, Inquiries, and Communication

If you create a customer account, we process the data you provide so that we can offer login, order-history, address-management, and comparable shop functions.

If you contact us by email or through other support channels, we process the information you provide in order to handle your request. Unless statutory retention obligations apply, we delete such data within an appropriate period after the request has been resolved.

4. Payment, Shipping, and Service Providers

For payment processing, we process the data required for the payment method you select. The actual payment processing is carried out by the payment service providers integrated into the checkout.

For shipping, delivery, returns, and technical shop support, we work with service providers that process data on our behalf or as independent controllers. These may include shipping companies, hosting and platform providers, and IT and support partners.

5. Shopify, Technical Provision, and Cookies

This shop is technically provided through Shopify. Technically necessary information is processed so that the shop, cart, checkout, login functions, and security-related processes work properly. The legal bases are Art. 6(1)(b) and Art. 6(1)(f) GDPR.

Technically necessary cookies and comparable storage technologies may be used to maintain the cart, enable login, store security features, and prevent misuse. Where additional analytics or marketing functions are used, this is done only in accordance with the applicable legal requirements.

6. Server Logs, Retention Periods, and Your Rights

When the shop is accessed, technically necessary access data such as IP address, date and time, requested content, browser information, and referrer may be processed in server logs to ensure stability, security, and error analysis. We base this processing on our legitimate interest under Art. 6(1)(f) GDPR.

In particular, you have the right to access, rectification, erasure, restriction of processing, data portability, and objection to processing based on legitimate interests. Complaints may be submitted to the Austrian Data Protection Authority.