Privacy Policy

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR), the Austrian Data Protection Act (DSG) and other data protection provisions is:

Webdeals Shops GmbH
Holzbodenweg 6
6858 Schwarzach
Rakousko

E-mail: info@webdeals.shop
Phone: +43 676 6882000

(hereinafter “we” or “us”).

This privacy policy applies to our company website https://webdeals.shop. This website presents our company and our brands; it does not contain an online shop. Our online shops and the shops of our partners are operated on their own websites, each with its own privacy policy. Please read the privacy policy of the respective website when you follow a link to one of these shops.

2. Data protection questions

Please send any questions about data protection to privacy@webdeals.shop.

3. General information

Personal data is any information relating to an identified or identifiable person – for example your name, e-mail address, telephone number or IP address. We process personal data only in accordance with the GDPR, the Austrian Data Protection Act (DSG) and the Austrian Telecommunications Act 2021 (TKG 2021), and only to the extent necessary for the respective purpose (data minimisation).

We process personal data on the following legal bases:

  • your consent (Art. 6(1)(a) GDPR),
  • the performance of a contract or pre-contractual measures, for example when you contact us about a cooperation (Art. 6(1)(b) GDPR),
  • legal obligations (Art. 6(1)(c) GDPR),
  • our legitimate interests, in particular the secure and reliable operation of this website (Art. 6(1)(f) GDPR).

Where we use service providers to process data on our behalf (processors), we remain responsible for your data and have concluded the necessary data processing agreements with them.

4. Hosting and server log files

This website is hosted by a hosting provider within the European Union. Every time you access the website, the server automatically records technical information that your browser transmits:

  • IP address,
  • date and time of the request,
  • the page or file requested,
  • the referring website (referrer),
  • browser type and version, operating system.

This data is required to deliver the website, to ensure its stability and security and to detect and defend against attacks. The legal basis is our legitimate interest (Art. 6(1)(f) GDPR). Log files are deleted as soon as they are no longer needed for these purposes, unless they are required to investigate a specific security incident.

5. Cookies

Cookies are small text files that are stored in your browser. This website uses:

  • Technically necessary cookies – for example to remember your chosen language, your cookie settings or to keep editors signed in. These cookies do not require consent (§ 165(3) TKG 2021). Most of them are session cookies, which are deleted automatically when you close your browser.
  • Analytics cookies – only if you have given your consent in our cookie banner (see section 6).

We do not use cookies for advertising. You can change or withdraw your consent at any time via the cookie settings on this website, and you can block or delete cookies in your browser settings; some functions of the website may then no longer work as intended.

6. Web analytics with Google Analytics

With your consent, we use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Analytics helps us understand how visitors use our website so that we can improve its content and structure.

Google Analytics uses cookies and similar technologies. The following data may be processed: pages visited and time spent on them, the website you came from, approximate location (country/region), device, browser and operating system information, as well as a shortened IP address. In Google Analytics 4, IP addresses are not stored. We have disabled Google signals and data sharing for advertising purposes.

The legal basis is your consent (Art. 6(1)(a) GDPR and § 165(3) TKG 2021). Google Analytics is only loaded once you have agreed in the cookie banner. You can withdraw your consent at any time with effect for the future via the cookie settings.

Data may also be transferred to Google LLC in the USA. Google LLC is certified under the EU-U.S. Data Privacy Framework, for which the European Commission has adopted an adequacy decision. We have concluded a data processing agreement with Google. Analytics data is stored for 14 months and then deleted automatically.

Further information: Google Privacy Policy.

7. Contact by e-mail or phone

If you contact us by e-mail or phone – for example with a question about our brands or about a cooperation – we process the details you provide (such as name, company, e-mail address, phone number and the content of your message) in order to answer your enquiry. The legal basis is pre-contractual measures or our legitimate interest in answering enquiries (Art. 6(1)(b) and (f) GDPR). We keep this data as long as it is needed to deal with your enquiry and delete it afterwards, unless statutory retention periods apply.

8. Fonts

The fonts on this website are stored on our own server. No connection to external font services (such as Google Fonts) is established when you visit the website.

9. Product information from our shops

On our brand pages, we show selected products from our online shops and from the shops of our partners, including names, prices and images. The product information is retrieved by our server from the respective shop; no data about you is transmitted in the process.

To display the product images, your browser loads them directly from the server of the respective shop. In doing so, your IP address and the technical information described in section 4 are transmitted to the operator of that shop. Most of these shops are operated by Webdeals Shops GmbH; the shops of our partners (for example Fine Ballistic Tools and Wetter Metzg) are operated by the respective partner. The legal basis is our legitimate interest in an up-to-date presentation of our brands (Art. 6(1)(f) GDPR).

When you click a link to one of these shops, you leave this website. The privacy policy of the respective shop then applies.

10. Embedded content

Pages on this website may contain embedded content from other websites, for example videos. Embedded content behaves in the same way as if you had visited the other website directly. These websites may collect data about you, use cookies, embed additional third-party tracking and record your interaction with the embedded content. Videos are only loaded from the provider when you start them.

11. Blog comments

If comments are enabled on our blog and you leave a comment, we store the details entered in the comment form, your IP address and your browser’s user agent string in order to detect spam. Comments may be checked by an automated spam detection service. The legal basis is our legitimate interest in a functioning, spam-free blog (Art. 6(1)(f) GDPR).

12. Security

This website is encrypted with SSL/TLS. To protect the website and your data against hacking, spam, malware and phishing, we use several security measures, which we do not list in detail for security reasons.

13. Recipients and transfers to third countries

We only pass on personal data where this is necessary for the purposes described above – in particular to our hosting provider and IT service providers acting as processors. We do not sell personal data. Personal data is generally processed within the European Union / European Economic Area. A transfer to a country outside the EU/EEA – for example with Google Analytics (section 6) – only takes place if an adequate level of data protection is ensured (for example an adequacy decision of the European Commission, such as the EU-U.S. Data Privacy Framework, or standard contractual clauses).

14. Storage period

We store personal data only as long as it is required for the respective purpose or as long as statutory retention periods apply. The data is then deleted.

15. Your rights

As a data subject, you have the following rights:

15.1. Right of access (Art. 15 GDPR)
You can request confirmation as to whether we process personal data concerning you and, if so, information about this data.

15.2. Right to rectification (Art. 16 GDPR)
You can request the correction of inaccurate or the completion of incomplete personal data without undue delay.

15.3. Right to erasure (Art. 17 GDPR)
You can request the erasure of your personal data, in particular if it is no longer needed, if you withdraw your consent, if you have objected to the processing or if it has been processed unlawfully – unless statutory obligations prevent erasure.

15.4. Right to restriction of processing (Art. 18 GDPR)
You can request the restriction of processing, for example if you contest the accuracy of the data or have objected to the processing.

15.5. Notification obligation (Art. 19 GDPR)
If you have exercised your right to rectification, erasure or restriction, we inform all recipients to whom your data has been disclosed, unless this proves impossible or involves disproportionate effort. You have the right to be informed about these recipients.

15.6. Right to data portability (Art. 20 GDPR)
You can receive the personal data you have provided to us in a structured, commonly used and machine-readable format, or have it transmitted to another controller, where the processing is based on consent or a contract and is carried out by automated means.

15.7. Right to object (Art. 21 GDPR)
You can object at any time to processing based on our legitimate interests, on grounds relating to your particular situation. If your data is processed for direct marketing, you can object to this at any time; your data will then no longer be processed for this purpose.

15.8. Right to withdraw consent (Art. 7(3) GDPR)
You can withdraw your consent at any time with effect for the future. The lawfulness of processing carried out before the withdrawal remains unaffected.

15.9. Automated decision-making (Art. 22 GDPR)
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. We do not use such procedures on this website.

15.10. Right to lodge a complaint (Art. 77 GDPR)
You have the right to lodge a complaint with a supervisory authority, in particular in the member state of your residence, your place of work or the place of the alleged infringement. In Austria, the competent authority is:

Österreichische Datenschutzbehörde
Barichgasse 40–42
1030 Vienna
Rakousko

E-mail: dsb@dsb.gv.at
Website: www.dsb.gv.at

To exercise your rights, simply contact us at privacy@webdeals.shop.

16. Changes to this privacy policy

We update this privacy policy whenever our processes or the technology used change. The version published on this website applies.

As of: October 2026