Privacy Policy

We are pleased that you are interested in our website. Protecting your privacy is important to us. When you visit our website and communicate with us, personal data is collected and processed. Below, we provide you with detailed information about how your data is handled.

General information

Controller responsible for data processing

Smarda GmbH
Business Park 6, Top 49, 8200 Gleisdorf, Austria

office@smarda.com

Your rights regarding your personal data

You have the following rights to object regarding the processing of your personal data:

General right to object (pursuant to Art. 21(1) GDPR):

You have the right, on grounds relating to your particular situation, to object to the processing of your data if it is based on Article 6(1)(e) or (f) GDPR, i.e. on the necessity of performing a task carried out in the public interest or on the protection of legitimate interests. Following an objection, we may no longer process your data unless compelling legitimate grounds can be demonstrated which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defense of legal claims.

Right to object to direct marketing (pursuant to Art. 21(2) GDPR):

You have the right to object to the processing of your personal data if it is carried out for the purpose of direct marketing. You do not need to provide reasons for your objection. Once you have objected, your data may no longer be processed for these purposes.

You also have the following rights:

pursuant to Art. 15 GDPR, to request access to your personal data processed by us,
pursuant to Art. 16 GDPR, to request without undue delay the rectification of inaccurate or completion of your personal data stored by us,
pursuant to Art. 17 GDPR, to request the erasure of your personal data stored by us,
pursuant to Art. 18 GDPR, to request the restriction of processing of your personal data,
pursuant to Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request its transfer to another controller,
pursuant to Art. 7(3) GDPR, to withdraw your consent once given to us at any time, and
pursuant to Art. 77 GDPR, to lodge a complaint with a supervisory authority.

Privacy settings

You can set which data we or third parties are permitted to process on our website. For this purpose, when you first visit our website, a so-called “Consent Management Box” (often also called a “Cookie Opt-in Banner” or simply a “Cookie Banner”) appears. You can allow all processing there or only allow the processing strictly necessary to operate the website. In addition, you can precisely enable or disable individual data processing activities. Please note that some content and features may not be accessible if you restrict data processing.

You can change a setting you have made at any time in the Consent Management Box by clicking the following link:

Change privacy settings

Data security

During your visit to the website, we use the secure TLS (Transport Layer Security) protocol in conjunction with the highest level of encryption supported by your browser. This ensures that the data you provide to us via the website cannot be intercepted in transit or viewed by third parties.

Disclosure of data

Your personal data will not be transferred to third parties for purposes other than those listed below.

We disclose your personal data to third parties only if:

you have given your express consent (Art. 6(1), first sentence, point (a) GDPR),
disclosure is necessary pursuant to Art. 6(1), first sentence, point (f) GDPR for the establishment, exercise or defense of legal claims and there is no reason to assume that you have an overriding legitimate interest in preventing the disclosure of your data,
there is a legal obligation to disclose the data pursuant to Art. 6(1), first sentence, point (c) GDPR, or
this is legally permissible and necessary pursuant to Art. 6(1), first sentence, point (b) GDPR for the performance of contractual relationships with you.

Cookies

What are cookies?

We use cookies and equivalent technologies (Session Storage, Local Storage) on our site. These are small files that your browser creates automatically and that are stored on your device when you visit our site. Cookies do not cause any damage to your device, contain no viruses, Trojans or other malware. Cookies are used, for example, to store your settings and preferences, such as your privacy settings.

Necessary cookies

Some cookies are necessary for a website to operate. The use of such cookies is based on our legitimate interest pursuant to Art. 6(1), first sentence, point (f) GDPR.

Other cookies

For the integration of services that set cookies but are not strictly necessary for the operation of the website, we obtain your consent. The legal basis for data processing is then Art. 6(1), first sentence, point (a) GDPR. You can withdraw this consent at any time.

The following cookies are set directly by the website:

Cookie name: sp_active_cookies_groups
Storage period: 1 month
Purpose: Storing which data processing groups you have consented to.

Cookie name: sp_active_cookies_scripts
Storage period: 1 month
Purpose: Storing which individual data processing activities you have consented to, if you have made specific settings.

Cookie name: sp_checkout_info
Storage period: 1 week
Purpose: Storing which individual data processing activities you have consented to, if you have made specific settings.

Additional cookies may be set by external services. We list these services individually below and indicate in each case whether cookies are used.

Storage period

If no specific storage period is stated in this Privacy Policy, the following applies: The storage period for your personal data depends on the respective processing purposes and statutory requirements. In principle, data is deleted as soon as it is no longer necessary to achieve the purpose of its processing, you exercise your right to erasure, or you withdraw your consent to data storage, provided there are no statutory retention obligations to the contrary.

Collection and storage of personal data, and type and purpose

Hosting & server logs

This website is hosted and operated on the “Smarda” shop and website system by Smarda GmbH (Businesspark 6, Top 49, 8200 Gleisdorf, Austria).

Provider's privacy policy: https://smarda.com/datenschutzerklaerung

When you access our website, information is automatically sent to our website's server by the browser used on your device. This information is temporarily stored in a so-called log file. The following information is collected without any action on your part and stored until it is automatically deleted:

IP address of the requesting computer,

date and time of access,
name and URL of the file accessed,
website from which access is made (referrer URL),
browser used and, where applicable, your computer's operating system and the name of your access provider.

We process the data listed above for the following purposes:

ensuring a smooth connection to the website,
ensuring convenient use of our website,
evaluating system security and stability, as well as for other administrative purposes.

The data is retained for 1 month.

The legal basis for collecting this data is legitimate interest (Art. 6(1), first sentence, point (a) GDPR).

Customer account

If you create a customer account in this Online Shop, your data will be stored for future orders so that you do not have to enter it again for your next order. It is not necessary to create a customer account to place an order. The account is for your convenience and is created at your own request. The legal basis is therefore Art. 6(1), first sentence, point (a) GDPR.

The following data is collected and stored when an account is created:

Email (required)
First name (required)
Last name (required)
Phone (required)
Company
Delivery address
Billing address

After creating an account, you have the option to add additional alternative addresses. You can view and update your data at any time in the account management area.

Purchase process

When placing an order in our Online Shop, we request data necessary for the smooth processing of the order. The legal basis for data processing is the performance of the contract or pre-contractual obligations pursuant to Art. 6(1), first sentence, point (a) GDPR. If data is requested during the purchase process that is not directly necessary for contract performance, this is done either by providing it voluntarily or with your consent pursuant to Art. 6(1), first sentence, point (a) GDPR, or on the basis of a legitimate interest (Art. 6(1), first sentence, point (f) GDPR).

The following personal data is collected and stored during the purchase process:

Email (required)
First name (required)
Last name (required)
Phone (required)
Delivery address
Billing address

Forms

We offer you the opportunity to contact us using forms on the website. We store and process the data submitted so that we can handle your request. We store your data until the purpose for storing it no longer applies or you request its deletion.

If the data processing serves the performance of a contract or pre-contractual activities, it is carried out on the basis of Art. 6(1)(b) GDPR; otherwise, it is based on your consent (Art. 6(1), first sentence, point (a) GDPR).

You can contact us using the following forms:

Form name: Question form
Data requested: Ask a question
Required fields:
Data stored: Information provided and time of submission

Form name: FAQ – What else would you like to know?
Data requested: Company name, email address, name, phone number, your inquiry, I accept your privacy policy (required).
Required fields: Email address, your inquiry, I accept your privacy policy (required).
Data stored: Information provided and time of submission

Form name: Smarda Pro Support Request
Data requested: Smarda partner, project name, your email address, description of your request, I accept your privacy policy (required).
Required fields: Smarda partner, project name, your email address, description of your request, I accept your privacy policy (required).
Data stored: Information provided and time of submission

Form name: Apply to Smarda
Data requested: First name, last name, email address, phone number, your passion?, your level?, your timeline?, your dream goals?, application, CV, references, certificates, declaration of consent
Required fields: First name, last name, email address, phone number, your passion?, your level?, your timeline?, application, CV, references, certificates, declaration of consent
Data stored: Information provided and time of submission

Form name: Contact
Data requested: Name, email, message, newsletter, reason for contact
Required fields: Name, message, newsletter, reason for contact
Data stored: Information provided and time of submission

Form name: Register as a Smarda partner
Data requested: Company / organization, first name, last name, email address, phone number, declaration of consent
Required fields: First name, last name, email address, phone number, declaration of consent
Data stored: Information provided and time of submission

Form name: Back in stock notification
Data requested: Product concerned, email address
Required fields: Product concerned, email address
Data stored: Information provided and time of submission

All data is transmitted to us in encrypted form.

Contact by email, phone or fax

If you contact us with an inquiry by email, phone or fax, we store and process your data so that we can handle your request. We store your data until the purpose for storing it no longer applies or you request its deletion.

AI chatbot

We offer an AI-powered chatbot on our website through which you can ask questions and receive support. When you use the chatbot, we process the messages and content you enter, as well as the time of use. Please do not enter sensitive personal data in the chat that is not necessary to answer your inquiry.

Processing is carried out for the purpose of answering your inquiries, providing the chatbot function and improving our services. The legal basis is our legitimate interest in efficient communication and customer support pursuant to Art. 6(1), first sentence, point (f) GDPR or, insofar as use is related to an order or pre-contractual measures, Art. 6(1), first sentence, point (b) GDPR.

The chatbot is technically operated on our behalf by the provider of this shop and website system, Smarda GmbH (Businesspark 6, Top 49, 8200 Gleisdorf, Austria), as a processor. To provide the AI function, Smarda GmbH uses OpenAI Ireland Ltd., 1st Floor, The Liffey Trust Centre, 117-126 Sheriff Street Upper, Dublin 1, D01 YC43, Ireland, as a subprocessor. Your inputs are transmitted to OpenAI for this purpose and processed on our behalf. This may involve the transfer of personal data to a third country (USA); the EU Commission's standard contractual clauses serve as an appropriate safeguard within the meaning of Art. 44 et seq. GDPR. Inputs transmitted via the interface are not used to train the models. This does not involve automated decision-making with legal effect within the meaning of Art. 22 GDPR.

Data is stored only for as long as necessary for the purposes stated, unless statutory retention obligations apply.

Statistics

Smarda Analytics

We use Smarda Analytics, the audience measurement service of our shop provider Smarda GmbH (Business Park 6 / Top 49, 8200 Gleisdorf, Austria), which processes data on our behalf as a processor. Data is processed and stored on servers in the European Union.

Without your consent, we collect only the pages visited (without query parameters other than campaign parameters), the referring page, campaign parameters, shopping cart and order values, and the number of interactions on a page. No cookies are set and no information is read from your device. Your IP address and browser identifier are processed only in encrypted (hashed) form using a randomly generated key that changes daily; the key is deleted at the end of the day, so you cannot be recognized beyond that day. The legal basis is our legitimate interest in statistical analysis of our services and in detecting abusive, automated access (Art. 6(1)(f) GDPR).

With your consent to statistics cookies, Smarda Analytics also sets the _sa_v cookie (storage period 13 months) to recognize repeat visits, and collects screen and window size, language settings and technical characteristics of your browser. With your consent to marketing cookies, click identifiers from advertising platforms (e.g. gclid) are also stored to attribute orders to advertising campaigns.

Processing is based on your consent pursuant to Art. 6(1)(a) GDPR. You can withdraw your consent at any time via the cookie settings.

Access logs containing the full IP address are deleted after 7 days, and pseudonymized event data after 90 days; thereafter, only aggregated statistics without personal references are retained.

Cookies used:

_sa_v

Essential

Smarda spam protection

To protect forms, customer account logins, registrations and orders against automated abuse, we use the spam protection provided by our shop provider Smarda GmbH (Business Park 6 / Top 49, 8200 Gleisdorf, Austria), which processes data on our behalf as a processor. When you submit a form, your browser solves a small computational task; the result, together with a shortened verification value derived from your IP address, is transmitted to and checked by our server. No cookies are set, no data is transmitted to third parties and no profiles are created. The legal basis is our legitimate interest in the security of our services (Art. 6(1)(f) GDPR); the check is technically necessary for the transmission you have requested.