Privacy policy

As of: 6 November 2026

1. Controller

The controller for the processing of personal data on this website is
Paul Leitner MediaServices, Eichetwaldstraße 6, 5081 Anif, Austria
E-mail: contact@mediaservices.at, tel. +43 662 230167

2. Visiting the website

When you open the website, our web server processes technically necessary connection data (IP address, date and time, page requested, browser information) in server log files. The purpose is the secure and stable operation of the website and the prevention of abuse (legitimate interest, Art. 6(1)(f) GDPR). The log files are deleted automatically after 14 days. We do not use analytics or tracking services. Fonts and images are loaded from our own server, not from third parties.

3. Cookies

We use only technically necessary cookies: a cookie for your shopping cart (it contains product numbers and quantities, no personal data) and, for staff, a login cookie in the internal area. No consent is required for this (§ 165(3) TKG 2021). We do not set cookies for advertising or analytics.

4. Orders in the online shop

When you place an order, we process your name, billing and delivery address, e-mail address, if applicable telephone number, your note, the goods ordered, payment method and order data. The purpose is to perform the contract of sale, including payment, shipping, customer communication and warranty (Art. 6(1)(b) GDPR). Providing the data is necessary for the conclusion of the contract; without it we cannot accept the order. We keep the order data for as long as the statutory retention periods require (in Austria currently seven years under § 132 BAO, Art. 6(1)(c) GDPR) and delete it afterwards.

Recipients:

• Payment service provider Stripe Payments Europe, Ltd. (Ireland) for online payment. Stripe processes the payment data as an independent controller; we do not receive the payment data (e.g. card number). Stripe may also transfer data to affiliated companies in third countries, which takes place on the basis of standard contractual clauses. More information: stripe.com/at/privacy.
• Shipping providers (Österreichische Post AG, logistics companies): name, delivery address and, if needed for delivery, telephone number and e-mail address.
• E-mail service provider: Scaleway SAS (France) sends our order and contact e-mails. A data processing agreement exists with the provider.
• Hosting: The website runs on a server of DigitalOcean in Frankfurt am Main (Germany). A data processing agreement exists with the provider.
• Tax advisors and authorities, where we are legally obliged to do so.

5. Contact form and e-mail

If you write to us using the contact form or by e-mail, we process your name, your e-mail address and your message in order to answer your enquiry (Art. 6(1)(b) or (f) GDPR). The contact form does not store your message on the server but sends it to us as an e-mail. We delete enquiries as soon as they are dealt with and no statutory retention obligation applies.

6. Withdrawal via the website

If you withdraw from a contract using the button “Withdraw from contract”, we store your details (name, e-mail address, order number, if applicable the items concerned) and the time of the declaration, and send you a confirmation of receipt. The legal bases are compliance with legal obligations (Art. 6(1)(c) GDPR, § 13a FAGG) and the contract. Retention follows section 4.

7. Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and objection. Where processing is based on consent, you can withdraw it at any time with effect for the future. Please contact contact@mediaservices.at for this. You also have the right to lodge a complaint with the supervisory authority: Austrian Data Protection Authority (Datenschutzbehörde), Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at.

8. Security

Data is transmitted in encrypted form (TLS). We take technical and organisational measures to protect your data against loss, misuse and unauthorised access.