The protection of your personal data is of particular importance to us. Therefore, data is processed exclusively on the basis of the legal provisions (GDPR, Austrian Data Protection Act, Austrian Telecommunications Act 2003). In this privacy policy, we inform you about the most important aspects of data processing within the framework of this website.

1. Contact information
When you contact us via form or email, your data will be stored by us for six months for processing purposes and in case of follow-up questions. We will not share this data without your explicit consent.

2. Processing and use of personal data
2.1 We, Bacci Organics eU, collect, process and use your personal data only with your consent and your order and any subsequent warranty processing, as well as for advertising purposes or for order fulfillment for the purposes agreed with you or if there is another legal basis in accordance with the GDPR, this in compliance with data protection and civil law regulations.
2.2 Personal data is any information relating to an identified or identifiable natural person, such as name, address, email address, telephone number, date of birth, age, gender, social security number, video recordings, photos, voice recordings of persons and biometric data such as fingerprints.
2.3 However, you can visit our website without providing any personal information. We only store non-personal access data such as: the name of your internet service provider; the website from which you accessed our site; or the name of the requested file.

This data is used exclusively to improve our services and does not allow any conclusions to be drawn about you personally.
Personal data is collected when you voluntarily provide it to us during the ordering process or when registering for our newsletter. When you subscribe to our newsletter, your email address will be used for our own advertising purposes until you unsubscribe. You can unsubscribe at any time.
This data will only be shared with third parties to the extent permitted by law, for the purposes of contract processing, billing, marketing, or if you have given your prior consent. For example, as part of the order processing, the service providers we use (such as carriers, logistics companies, and banks) receive the necessary data for order and payment processing. The data shared may only be used by our service providers to fulfill their respective tasks.

3. Data storage
3.1 Please note that for the purpose of simplifying the purchasing process and for later contract processing, the webshop operator stores the IP address of the internet connection owner, as well as the buyer's name, address and credit card number, using cookies.
3.2 The data you provide is necessary for the performance of the contract. Without personal data, it is not possible to conclude a contract.
3.3 Data will not be transferred to third parties. Exceptions are made for the transfer of credit card data to the processing banks/payment service providers for the purpose of debiting the purchase price, to the transport/shipping company commissioned by us for the delivery of the goods, and to our tax advisor for the fulfillment of our tax obligations.
3.4 If the purchase process is cancelled, the data stored by us will be deleted. In the event of a contract being concluded, all data from the contractual relationship will be stored until the expiry of the statutory retention period for tax purposes (7 years).
3.5 Our shop is hosted on Shopify Inc. They provide us with the online e-commerce platform that allows us to sell our products and services to you.
3.6 Your data is stored via Shopify's data storage, databases, and the general Shopify application. They store your data on a secure server behind a firewall.

4. Data security
4.1 To protect your personal data, we take appropriate organizational and technical measures. These measures relate in particular to protection against unauthorized, unlawful or accidental access, processing, loss, use and manipulation.
4.2 Despite our efforts to maintain a consistently high level of care, we cannot guarantee that information you provide to us via the Internet will not be viewed and used by other people.
4.3 If you provide us with your credit card details, the information will be encrypted using Secure Socket Layer (SSL) technology and stored with AES-256 encryption. Although no method of transmission over the Internet or electronic storage is 100% secure, we comply with all PCI-DSS requirements and implement additional, generally accepted industry standards.
4.4 Your payment details are transmitted encrypted over the Internet during the ordering process.
4.5 You should always keep your login information confidential and close the browser window when you have finished communicating with us, especially if you share the computer with others.
4.6 Please note that we therefore assume no liability whatsoever for the disclosure of information due to errors in data transmission not caused by us and/or unauthorized access by third parties (e.g., hacking of email accounts or telephones, interception of faxes).

5. Transfer of data to third parties
- In general, the third-party providers we use will only collect, use and disclose your data to the extent necessary to provide the services they provide.
- Your data will only be forwarded on the basis of the GDPR, in particular to fulfill your purchase or based on your prior consent.
Please note in particular that certain providers are located outside your country. The level of data protection in other countries may not be equivalent to that in Austria.
Should you choose to make a purchase using the services of a third-party provider, your information may be subject to the laws of the jurisdiction(s) where that provider or its facilities are located. For example, if you are a resident of Canada and your transaction is processed by a payment gateway in the United States, your personal information used to complete that transaction may be subject to disclosure under U.S. law, including the Patriot Act. Once you leave our store's website and are redirected to a third-party provider, you are no longer governed by these privacy policies or our website's terms of service.

6. Disclosure of data breaches
We strive to ensure that data breaches are detected early and, if necessary, reported to you or the relevant supervisory authority without delay, including details of the data categories affected.

7. Data use for advertising purposes
7.1 We use your data to improve and personalize your shopping experience. This includes using existing information, such as details about your internet connection, the device you are using, your operating system, the date and time of your visit to the website or the pages you viewed, as well as information we have received from you.
7.2 You can object to the use of your personal data for advertising purposes at any time. A notification by email to … is sufficient.

8th Newsletter
8.1 You have the option to subscribe to our newsletter via our website. For this, we require your email address and your confirmation that you agree to receive the newsletter.
8.2 Once you have subscribed to the newsletter, we will send you an email with a link to confirm your subscription.
8.3 You can unsubscribe from the newsletter at any time. Please send your cancellation to the following email address: …We will then immediately delete your data related to the newsletter distribution.

9. Cookies
9.1 Our website uses so-called cookies. These are small text files that we transmit via our web server to the cookie file of the browser on your computer's hard drive.
9.2 We use cookies to make our website more user-friendly, effective, and secure. Some cookies remain stored on your device until you delete them. This allows our website to recognize you as a user when a connection is established between our web server and your browser. Cookies help us determine the frequency of use and the number of users of our website. The content of the cookies we use is limited to an identification number that does not allow for any personal identification of the user. The main purpose of a cookie is to recognize website visitors.
9.3 Two types of cookies are used on this website:
- Session cookies: These are temporary cookies that remain in your browser's cookie file until you leave our website and are automatically deleted after your visit ends.
- Persistent cookies: For improved user-friendliness, cookies remain stored on your device and allow us to recognize your browser on your next visit.
If you do not wish to do this, you can configure your browser to inform you about the setting of cookies and only allow them in individual cases.
Disabling cookies may limit the functionality of our website.
Here is a list of the cookies we use. We have listed them here so that you can choose whether or not to reject cookies.
- session_id, unique token, sessional: allows Shopify to store information about your session (referrer, landing page, etc.).
- shopify_visit: No data is stored; cookies are only used for statistical purposes to track the number of visits.
- shopify_uniq: No data is stored, expires at midnight (depending on the "visit") of the next day, stores information about the contents of your shopping cart.
- secure_session_id: If the shop has a password, this determines whether the current visitor has access.

10. Web analytics
10.1 Google Analytics
This website uses Google Analytics for web analytics. This is a service provided by Google Inc. ("Google"). This website uses "cookies" for web analytics. The information generated by this "cookie" about your use of this website (including your IP address) is transmitted to and stored on a Google server in the USA.
10.2 Google complies with the data protection provisions of the "US-Safe-Harbor" agreement and is registered with the "Safe Harbor" program of the US Department of Commerce. Google will use this information to evaluate your use of the website, to compile reports on website activity for us, and to provide us with other services related to website activity and internet usage. We also use pseudonymous assignment to track your usage across devices. However, no personally identifiable information is transferred to Google.
10.3 Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf. Google will not associate your IP address with any other data held by Google. You may refuse the use of cookies by selecting the appropriate settings on your browser; however, please note that if you do this you may not be able to use the full functionality of this website.
10.4 If you do not wish for information about your website visit to be transmitted to Google Analytics, you have the option of installing a "deactivation add-on" for your browser.
10.5 Furthermore, we have configured Google Analytics to delete the last part of visitors' IP addresses. This ensures that we do not obtain any data that would allow us to identify you personally.
10.6 You can object to the collection and storage of data by Google Analytics at any time by downloading and installing a browser add-on to deactivate Google Analytics for your browser.

Further information can be found at https://tools.google.com/dlpage/gaoptout?hl=de or at https://support.google.com/analytics/answer/6004245?hl=de (general information on Google Analytics and data protection).

Custom audience of the Facebook website
This website uses a pixel from Facebook Ireland Limited (Website Custom Audience Pixel). This pixel collects pseudonymized information about your use of this website (e.g., information about viewed articles). The collected information can be used to personalize advertising to you, for example, on your Facebook account, with preferred product categories and products.

Use of Facebook Social Plugins
1. This website uses social plugins ("plugins") from the social network Facebook, operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook"). The plugins are identified by a Facebook logo or the phrase "Facebook Social Plugin". An overview of the Facebook plugins and their appearance can be found here: https://developers.facebook.com/docs/plugins
2. When you visit a page on our website that contains such a plugin, your browser establishes a direct connection to Facebook's servers. The plugin's content is transmitted directly from Facebook to your browser and integrated into the website.
3. By integrating these plugins, Facebook receives information that your browser has accessed the corresponding page of our website, even if you do not have a Facebook account or are not currently logged in to Facebook. This information (including your IP address) is transmitted directly from your browser to a Facebook server in the USA and stored there.
4. If you are logged into Facebook, Facebook can directly associate your visit to our website with your Facebook account. If you interact with the plugins, for example by clicking the "Like" button or leaving a comment, the corresponding information is also transmitted directly to a Facebook server and stored there. This information is also published on Facebook and displayed to your Facebook friends.
5. Facebook may use this information for advertising, market research, and to tailor the design of Facebook pages to user needs. For this purpose, Facebook creates usage, interest, and relationship profiles, for example, to evaluate your use of our website in relation to the advertisements displayed to you on Facebook, to inform other Facebook users about your activities on our website, and to provide other services related to the use of Facebook.
6. If you do not want Facebook to associate the data collected via our website with your Facebook account, you must log out of Facebook before visiting our website.
7. For information on the purpose and scope of data collection and the further processing and use of data by Facebook, as well as your related rights and privacy settings, please refer to Facebook's privacy policy: https://www.facebook.com/policy.php

Use of YouTube plugins
Our website embeds videos from YouTube, a Google Inc. company (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). When you play a video, a connection is established to YouTube's or Google's servers. This transmits information to these servers about which of our web pages you have visited. If you are logged into YouTube as a member, YouTube will associate this information with your personal user account.
For information on the purpose and scope of data collection and the further processing and use of data by Google or YouTube, as well as your related rights and settings options to protect your privacy, please refer to Google's privacy policy: google.de/intl/de/policies/privacy/.
If you do not want Google or YouTube to directly associate the data collected via our website with your profile, you can completely prevent the loading of Google plugins using add-ons for your browser, e.g. with the script blocker "NoScript" (http://noscript.net/).
Data processing is carried out on the basis of the legal provisions of Section 96 Paragraph 3 TKG as well as Article 6 Paragraph 1 Letter a (CONSENT) and/or (legitimate interest) within the meaning of the GDPR.
Our legitimate interest, as defined by the GDPR, is to improve our services and advertising. Because the privacy of our users is important to us, user data is pseudonymized.

11. Changes to the Privacy Policy
11.1 We reserve the right to amend this privacy policy at any time and to subject it to data protection audits. The amendments and clarifications listed below will therefore become effective immediately upon their publication on the website.

Should we make any significant changes to this privacy policy, we will inform you immediately here. If our business is acquired or merged with another company, we will obtain your consent to the further use of your personal data to the extent legally required.

12. Your rights
12.1 You have the fundamental rights to information, rectification, erasure, restriction of processing, data portability, withdrawal of consent, and objection. Furthermore, you have the right to information about the essential reasons for an adverse credit-related decision, the disclosure of probability values ​​collected or stored in this context, their derivation, and the types of data used for this purpose.
12.2 To obtain further information, please send us an email to office@yukies.at
12.3 If you believe that the processing of your data violates data protection law or that your data protection rights have otherwise been infringed, you can lodge a complaint with the supervisory authority. In Austria, this is the Data Protection Authority.

You can reach us using the following contact details:
Bacci Organics eU
Salesianergasse 17
1030 Vienna, Austria
Email: office@yukies.at