top of page

Privacy Policy

 

Data We Collect

  • Personal data (name, address, email, phone – e.g. for orders or newsletter)

  • Technical data (IP address, browser information)

  • Cookies & tracking technologies (session cookies from Wix, optional analytics cookies like Google Analytics)

 

Purposes & Legal Bases

PurposeDataLegal Basis

Order processing (Printful)Name, address, emailPerformance of contract (Art. 6(1)(b) GDPR)

Customer service & inquiriesContact dataLegitimate interest (Art. 6(1)(f) GDPR)

Website analyticsIP, cookiesConsent (Art. 6(1)(a) GDPR)

Legal obligationsOrder dataLegal obligation (e.g. accounting)

 

Third Parties & Data Processing

  • Wix: Hosting and website services (data processed outside the EU, e.g. USA, Israel)

  • Printful: Production and shipping (data shared with fulfillment centers outside EU)

  • Google Analytics: Analytics (only with opt-in)

  • GDPR-compliant Data Processing Agreements in place with Wix and Printful

  • Printful uses Standard Contractual Clauses (SCC) for data transfer to third countries (e.g. USA)

 

Data Retention

  • Order data: up to 7 years (legal accounting obligation)

  • Website data: max. 2 years (depending on cookie consent)

 

Your Rights

You have the right to:

  • Access your data

  • Rectify or erase data

  • Restrict processing

  • Data portability

  • Object to processing (e.g. marketing)

  • Withdraw consent at any time

  • Lodge complaint with Austrian Data Protection Authority (DSB)
    Contact: info@pixeladgency.com

 

Cookies

  • Necessary cookies (e.g. Wix functionality) set without consent

  • Analytics cookies (Google Analytics) only with consent (opt-in)

 

Newsletter & Direct Marketing

Under TKG §174, marketing emails to existing customers are allowed only if:

  • Data was collected in relation to a sale

  • Similar products are marketed

  • Easy opt-out provided

  • Recipient is not on Robinson list
    Otherwise, explicit consent is required.

 

Security

Technical and organizational measures according to Art. 32 GDPR (e.g. encryption, access control, audits)

 

Children

We do not knowingly collect data from persons under 14 years. If identified, data is deleted immediately.

 

Changes

Current version: July 3, 2025. Please check regularly.

bottom of page