Privacy policy

(Last updated: 7 August 2025)

This Privacy Policy explains how AgroBiogel GmbH, Königstetter Straße 128–134, 3430 Tulln an der Donau, Austria, processes personal data when you visit our website www.agrobiogel.com or use the services offered through it. It applies to all content and features of our website, the operation of our Shopify online store, the automated order, payment and shipping processes carried out in Microsoft Dynamics 365 Business Central, the integration of external content such as YouTube videos, Mapbox maps and social plugins, and to our appearances on platforms such as Instagram, Facebook and LinkedIn, insofar as they are accessed via our website.

The controller responsible for data processing is AgroBiogel GmbH. You can reach us by email at office@agrobiogel.com or by telephone at +43 664 420 2158. We process personal data exclusively in accordance with the provisions of the EU General Data Protection Regulation (GDPR), the Austrian Data Protection Act (DSG) and the Austrian Telecommunications Act 2021 (TKG 2021). Processing takes place either on the basis of your consent, for the performance of a contract or pre-contractual measures, for compliance with legal obligations, or on the basis of our legitimate interests, provided these do not override your fundamental rights.

Depending on how you use our services, the data we process may include your contact details such as name, address, telephone number and email address; order, contract and payment information such as items, prices, transaction numbers and payment methods; ERP data such as order, delivery and invoicing status; technical information such as IP address, browser type, device details and access times; and usage and marketing information generated when you interact with embedded media, maps or social plugins. The data originates either directly from you, for example when you complete a form or place an order, or is collected automatically through cookies, server log files and similar technologies. Certain data is also provided to us by third-party services integrated into our site.

We use this data to operate the online store and process orders, manage customer accounts, respond to support inquiries, ensure IT security and prevent fraud, meet statutory retention and record-keeping obligations, and – only with your prior consent – for marketing, analytics and newsletter purposes. Order and address data is automatically transferred into Microsoft Dynamics 365 Business Central in order to manage inventory, shipping and invoicing.

Our online store is hosted by Shopify Inc. Shopify processes the data necessary for store operation in data centres located in Canada, the EU and the USA. Canada benefits from an adequacy decision by the European Commission; transfers to other third countries such as the USA are based on EU Standard Contractual Clauses. Order data is transmitted to Microsoft Ireland Operations Ltd. for ERP processing. For displaying maps, we use Mapbox Inc. Your IP address and technical device information will only be transmitted after you have given your consent via the cookie banner. Mapbox participates in the EU–US Data Privacy Framework and additionally uses Standard Contractual Clauses. Embedded YouTube videos are integrated using Google's enhanced privacy mode; however, your IP address may still be transmitted to Google servers in the USA when you load the video page. Further data such as cookies and device information are processed only when you play the video, which requires your prior consent. Social plugins from Instagram, Facebook and LinkedIn will only transmit data such as your IP address, browser information and cookie IDs to their operators after you actively click the respective button. Meta Platforms Ireland Ltd. and LinkedIn Ireland Unlimited Company rely on the EU–US Data Privacy Framework and Standard Contractual Clauses for such transfers.

To deliver your orders, we pass your address and contact details to shipping service providers, specifically DPD Direct Parcel Distribution Austria GmbH, Arbeitergasse 46, 2333 Leopoldsdorf, Austria, and Österreichische Post AG, Rochusplatz 1, 1030 Vienna, Austria. This disclosure is made solely for the purpose of fulfilling our contractual obligations and is based on Art. 6(1)(b) GDPR.

Our website uses cookies. Technically necessary cookies are set on the basis of our legitimate interest in secure and functional website operation (§ 165(3) TKG 2021). All other cookies are only set with your explicit consent. These include personalisation cookies, which store your actions to tailor your next visit; marketing cookies, which are used by us and our partners (including Shopify) to optimise and deliver targeted advertising; and analytics cookies, which help us understand how visitors use the website so that we can improve it. You can change or withdraw your consent at any time via the “Cookie Settings” link at the bottom of our website. An up-to-date list of cookies used, including their name, provider, purpose and storage period, is available via the “Cookie List” link.

We delete or anonymise personal data as soon as the purpose for processing no longer applies and there are no statutory retention obligations. Commercial and tax records are generally kept for seven years in accordance with § 132 of the Austrian Federal Fiscal Code (BAO). Data processed on the basis of your consent is deleted immediately upon withdrawal of that consent, unless another legal basis applies.

To protect your data, we use state-of-the-art security measures such as TLS encryption, role-based access controls, regular backups and contractual data processing agreements with all service providers we use.

You have the right at any time to request information about the personal data we store, to have incorrect data corrected, to request deletion or restriction of processing, to receive your data in a commonly used machine-readable format, or to object to processing where it is based on legitimate interests or serves direct marketing purposes. You can also withdraw any consent you have given with effect for the future. To exercise your rights, simply send an informal request to office@agrobiogel.com. In addition, you have the right to lodge a complaint with the Austrian Data Protection Authority, Barichgasse 40–42, 1030 Vienna, or online at www.dsb.gv.at.

We will update this Privacy Policy whenever legal requirements, our service offering or technical processes change. The current version is always available on our website.