Privacy Policy

Privacy Policy

The protection of your personal data is important to us. We process your data exclusively on the basis of legal regulations (GDPR, DSG, TKG 2021). Below, we inform you about the most important aspects of data processing within the framework of this website and our online shop.

1. Responsible person

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

SAQAP – Sole Proprietorship
Owner: Yasin Sababoglu
Josef-Falkner-Straße 11
6410 Telfs
Austria

Email: contact@saqap.com
Telephone: +43 676 7001448
Website: www.saqap.com

A separate data protection officer is not legally required and therefore has not been appointed.

2. Collection and processing of personal data

We process the personal data that you, as a user of our website, provide to us in connection with an order, inquiry, or other use of our services. This includes, in particular:

- First and Last Name
- Billing and delivery address
- Email address and telephone number
- Order and payment information
- Content of inquiries (e.g. via contact form or email)
- Usage data (e.g. IP address, time of access, pages visited)

Data processing only takes place to the extent necessary for the purposes mentioned below.

3. Purposes and legal bases of processing

a) Orders in the online shop
To process your orders and fulfill the contract, we process your personal data (e.g. name, address, email, payment details).

Legal basis: Art. 6 para. 1 lit. b GDPR (performance of a contract)

b) Contacting us (contact form / email)
If you contact us via the form on the website or by email, your data will be stored by us for processing the request and in case of follow-up questions.

Legal basis: Art. 6 para. 1 lit. b GDPR (pre-contractual measures) or lit. f GDPR (legitimate interest in responding to inquiries)

c) Newsletter (if used)
If you subscribe to our newsletter, we will process your data to send you regular information about our products and offers. Subscription is done via a double opt-in process (confirmation email with a link).

Legal basis: Art. 6 para. 1 lit. a GDPR (consent)
You can withdraw your consent at any time with effect for the future (unsubscribe link in the newsletter or direct contact).

d) Technical operation, safety and statistics
To ensure technical operation, improve our services, and defend against attacks on our systems, usage data (e.g., IP address, timestamp, pages visited) is processed.

Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest in a secure and functional online service)

4. Cookies, tracking and personalized advertising

We use cookies and similar technologies on our website to collect information about how our visitors use the site. These technologies help us ensure the website's functionality, improve user-friendliness, and tailor content and advertisements to your interests.

For these purposes, we work with selected service providers (e.g., Google, Meta/Facebook, TikTok). These partners may combine information about your use of our website with other data to display personalized advertising on other platforms.

**Legal basis:**
Your data will only be processed for analysis and marketing purposes with your explicit consent in accordance with Art. 6 para. 1 lit. a GDPR in conjunction with § 165 para. 3 TKG 2021. You can revoke this consent at any time via our cookie banner or your browser settings.

**Opt-out options:**
You can object to the use of non-essential cookies or withdraw your consent at any time:
- via our cookie banner ("Cookie settings")
- via your browser settings (e.g. “Do Not Track” / “Global Privacy Control”)

Further information on the tools used, recipients, storage duration and your data subject rights can be found on our "Privacy Settings" page.

5. Use of analytics and marketing tools (example: Google Analytics, Meta Pixel)

Provided you have consented, this website may use analytics and marketing services, such as:

- Google Analytics (web analytics)
- Meta/Facebook Pixel (conversion tracking and remarketing)
- possibly other comparable services

These services use cookies or similar technologies to analyze user behavior on the website and derive statistics and marketing campaigns from this data. The information collected is generally transferred to and stored on the servers of the respective providers. If data is transferred to countries outside the EU/EEA (e.g., the USA), this is done on the basis of appropriate safeguards (e.g., EU standard contractual clauses or adequacy decisions).

Legal basis: Art. 6 para. 1 lit. a GDPR (consent)

6. Payment processing

Payment processing may involve the use of payment service providers such as Shopify Payments, Stripe, PayPal, or credit card companies. The data required for payment processing is transmitted to the respective payment service provider (e.g., name, invoice amount, bank account/credit card details).

Legal basis: Art. 6 para. 1 lit. b GDPR (performance of a contract)
The payment service providers process your data partly as independent controllers; their data protection declarations also apply.

7. Hosting and operation of the online shop (Shopify)

Our online shop is operated via the service provider Shopify:

Shopify International Ltd.
2nd Floor, Victoria Buildings,
1-2 Haddington Road, Dublin 4, D04 XN32, Ireland

As part of providing the shop, personal data may also be transferred to Canada and potentially to other third countries. Shopify relies on appropriate safeguards for this (in particular, standard contractual clauses pursuant to Article 46 GDPR). Further information can be found in Shopify's privacy policy.

Legal basis: Art. 6 para. 1 lit. b and lit. f GDPR (performance of a contract and legitimate interest in a professional shop system)

8. Disclosure of data to third parties

Your personal data will only be transferred to third parties if:

- this is necessary for the fulfillment of the contract (e.g. logistics and shipping companies, payment service providers),
- we are legally obliged to
- you have expressly consented, or
- this is necessary to enforce our rights and claims.

Your data will not be shared for advertising purposes without your consent.

9. Storage duration

We only store personal data for as long as is necessary for the respective purposes or as required by statutory retention obligations.

Examples:
- Contract and invoice data: 7 years (tax and company law retention obligations)
- Inquiries via email/contact form: up to 6 months after final response
- Data based on your consent: until you withdraw your consent, unless other legal retention obligations apply.

10. Your rights as a data subject

According to the GDPR, you have the following rights:

- Right of access (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to erasure (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object to processing (Art. 21 GDPR)
- Right to withdraw consent (Art. 7 para. 3 GDPR)

To exercise these rights, a simple notification to:
contact@saqap.com

11. Right of appeal

If you believe that the processing of your personal data violates data protection law, you have the right to lodge a complaint with a supervisory authority. In Austria, this is:

Data Protection Authority
Barichgasse 40–42
1030 Vienna
Austria
www.dsb.gv.at

12. Changes to this Privacy Policy

We reserve the right to amend this privacy policy as needed to ensure it always complies with current legal requirements or to reflect changes to our services. The most current version is available on our website.

As of December 2025