Data protection

1) Information on the collection of personal data and contact details of the controller

1.1 We are pleased that you are visiting our website and thank you for your interest. Below, we inform you about how your personal data is handled when you use our website. Personal data is any data with which you can be personally identified.

1.2 The controller for data processing on this website in accordance with the General Data Protection Regulation (GDPR) is SMOTASTIC GmbH, Kaltenleutgebnerstrasse 24/21/15, 1230 Vienna, Austria, Tel.: +43 (0) 676 9505450, Email: office@bikejack.at.

1.3 For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries to the controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the string "https://" and the lock symbol in your browser line.

2) Data collection when visiting our website

When you use our website for informational purposes only, i.e., if you do not register or otherwise transmit information to us, we only collect data that your browser transmits to our server (so-called "server log files"):

  • Our visited website
  • Date and time of access
  • Amount of data sent in bytes
  • Source/reference from which you accessed the page
  • Browser used
  • Operating system used
  • IP address used (possibly in anonymized form)

The processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR based on our legitimate interest in improving the stability and functionality of our website. A transfer or other use of the data does not take place.

3) Cookies

To make visiting our website attractive and to enable the use of certain functions, we use cookies, which are small text files stored on your device. Some of these cookies are automatically deleted after closing the browser ("session cookies"), while others remain on your device for a longer period ("persistent cookies").

If personal data is processed, the processing is carried out in accordance with Art. 6 para. 1 lit. b GDPR for contract performance, in accordance with Art. 6 para. 1 lit. a GDPR with consent, or in accordance with Art. 6 para. 1 lit. f GDPR for safeguarding our legitimate interests.

You can set your browser to inform you about the setting of cookies and decide individually whether to accept them or to generally exclude their acceptance. If cookies are not accepted, the functionality of our website may be limited.

4) Contacting us

When you contact us (e.g., via contact form or e-mail), personal data is processed exclusively for the purpose of handling and responding to your request and only to the extent necessary for this. The legal basis is our legitimate interest according to Art. 6 para. 1 lit. f GDPR. If your contact aims at concluding a contract, Art. 6 para. 1 lit. b GDPR is an additional legal basis.

5) Data processing when opening a customer account

In accordance with Art. 6 para. 1 lit. b GDPR, personal data is collected and processed when you provide it to us when opening a customer account. You can delete your customer account at any time by sending us a message. After deletion, your data will be erased, provided that no legal retention periods prevent this.

6) Newsletter

If you subscribe to our e-mail newsletter, we will regularly send you information about our offers. Your e-mail address is a mandatory field. We use the double opt-in procedure: You will only receive newsletters if you have explicitly confirmed your consent by clicking a verification link.

You can unsubscribe from the newsletter at any time via the unsubscribe link in the newsletter or by sending us a message.

7) Data processing for order fulfillment

Insofar as it is necessary for the fulfillment of the contract for delivery and payment purposes, personal data will be passed on to the commissioned transport company and the commissioned credit institution in accordance with Art. 6 para. 1 lit. b GDPR.

Shipping service providers

For the delivery of your order, we cooperate with the following service providers:

  • Österreichische Post (Rochusplatz 1, 1030 Vienna, Austria)
  • DHL (DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany)
  • DPD (DPD Deutschland GmbH, Wailandtstraße 1, 63741 Aschaffenburg)
  • GLS (General Logistics Systems Germany GmbH & Co. OHG)
  • Hermes (Hermes Logistik Gruppe Deutschland GmbH)

If you have given your explicit consent for this during the ordering process, we will pass on your e-mail address to the transport service provider for the purpose of delivery notification. Otherwise, we will only pass on the name and delivery address.

Payment service providers

For processing payments, we cooperate with payment service providers who receive your data in accordance with Art. 6 para. 1 lit. b GDPR:

  • Shopify Payments (Shopify International Limited, Ireland)
  • Klarna (Klarna Bank AB, Sweden)
  • PayPal (PayPal Europe S.à r.l. et Cie, Luxembourg) – if activated

8) Web hosting by Shopify

This website is hosted by Shopify International Limited (Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, Ireland). Your data collected on this website is stored on Shopify's servers.

The use of Shopify is based on Art. 6 para. 1 lit. f GDPR. We have a legitimate interest in presenting our online shop as reliably as possible. Further information can be found in Shopify's privacy policy.

9) Rights of the data subject

The applicable data protection law grants you comprehensive data subject rights:

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to notification (Art. 19 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to withdraw granted consents (Art. 7 para. 3 GDPR)
  • Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

Right to object

You have the right, on grounds relating to your particular situation, to object at any time to processing of personal data concerning you which is based on Art. 6 para. 1 lit. f GDPR. If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing. You can exercise your right to object as described above.

10) Duration of storage of personal data

The duration of the storage of personal data is determined by the respective statutory retention period (e.g., commercial and tax law retention periods). After expiry of the period, the corresponding data is routinely deleted, provided it is no longer required for contract fulfillment or contract initiation.

Status: May 2026 · For questions regarding data protection: office@bikejack.at