​​Responsible Entity

1. Dash² OG
   Czeikestraße 4/24
   1100, Vienna, Austria
   dash@rockitvienna.at

2. Collection and Processing of Personal Data

   We collect and process personal data when you:

   • Visit our website (automatically collected data, e.g., IP address, browser type).

   • Use our contact form (name, email address).

   • Place an order in our online shop (name, email address, billing and shipping address, payment data).

3. Purpose of Data Processing

   We process your data for the following purposes:

   • Handling inquiries via the contact form.

   • Processing and delivering orders.

   • Fulfilling legal obligations (e.g., tax-related record-keeping).

   • Improving our online offerings and user experience.

4. Legal Basis for Processing

   Your data is processed based on:

   • Article 6 (1) (b) GDPR – Contract performance (e.g., online shop orders).

   • Article 6 (1) (a) GDPR – Consent (e.g., contact form).

   • Article 6 (1) (c) GDPR – Legal obligations (e.g., tax law).

5. Disclosure of Data

   We only share personal data when necessary:

   • To payment providers for payment processing:

     • Stripe: When you place an order, we process your payment via Stripe. Stripe may collect data such as your payment method, billing details, and other transaction-related information. Processing is carried out in accordance with Stripe’s own privacy policy, which you can view here:

       • Stripe Privacy Policy

     • PayPal: If you choose PayPal as your payment method, your payment data will be shared with PayPal. Payments are processed in accordance with PayPal’s privacy policy, available here:

       • PayPal Privacy Policy

   • To shipping providers, for the purpose of delivering your order.

   • To tax and legal authorities, where required by law.

6. Cookies & Tracking Technologies

   Our website uses cookies to enhance user experience. You can change your cookie settings at any time or refuse cookies. For more information, see our [Cookie Policy].

7. Data Retention Period

   • Contact form data: 12 months after the last communication.

   • Order data: 7 years (legal retention period for invoices).

   • Cookies: Depending on type, up to 2 years.

8. Your Rights

   You have the right to:

   • Access the data stored about you (Art. 15 GDPR).

   • Correct inaccurate data (Art. 16 GDPR).

   • Delete your data (Art. 17 GDPR).

   • Restrict data processing (Art. 18 GDPR).

   • Object to data processing (Art. 21 GDPR).

   • Data portability (Art. 20 GDPR).

9. Contact & Data Protection Authority

   If you have questions about data protection or wish to exercise your rights, contact us at:
   dash@rockitvienna.at.
   If you believe your data is being unlawfully processed, you may file a complaint with the Austrian Data Protection Authority:
   Address: Barichgasse 40-42, 1030 Vienna, Website: www.dsb.gv.at

10. Changes to this Privacy Policy

    This privacy policy may be updated. The current version is always available on our website.