Data protection

Scope of application
This privacy policy clarifies users about the nature, scope and purpose of the collection and use of personal data by the responsible provider Waldner biotech GmbH, Kärntnerstraße 62, A - 9900 Lienz / Osttirol, +43 (0) 4852 70200, of this website (hereinafter referred to as "offer").

Access data/ server log files
The provider (or its web space provider) collects data about every access to the website (so-called server log files). The access data includes

Name of the website accessed, file, date and time of access, amount of data transferred, notification of successful access, browser type and version, the user's operating system, referrer URL (the previously visited page), IP address and the requesting provider.

The provider uses the log data only for statistical evaluations for the purpose of operation, security and optimisation of the website. However, the provider reserves the right to check the log data retrospectively if there is a justified suspicion of unlawful use based on concrete evidence.

Making contact
When contacting the provider (e.g. via contact form or email), the user's details are stored for the purpose of processing the enquiry and in the event that follow-up questions arise.

Integration of third-party services and content
It may happen that third-party content, such as videos from YouTube, maps from Google Maps, RSS feeds or graphics from other websites are integrated into this online offering. This always presupposes that the providers of this content (hereinafter referred to as "third-party providers") recognise the IP address of the user. This is because without the IP address, they would not be able to send the content to the respective user's browser. The IP address is therefore required to display this content. We endeavour to only use content whose respective providers only use the IP address to deliver the content. However, we have no influence on whether the third-party providers store the IP address, e.g. for statistical purposes. If we are aware of this, we will inform users accordingly.

Data storage
We would like to point out that for the purpose of simplifying the shopping process and for subsequent contract processing, the webshop operator stores the IP data of the connection owner as part of cookies, as well as the name, address, telephone number, e-mail address, bank details and credit card number of the buyer.

In addition, personal data is also stored for the purpose of processing the contract. The data provided by you is required to fulfil the contract or to carry out pre-contractual measures. We cannot conclude the contract with you without this data. Data is not transferred to third parties, with the exception of the transfer of credit card data to the processing bank/payment service provider for the purpose of debiting the purchase price, to the transport company/shipping company commissioned by us to deliver the goods and to our tax advisor to fulfil our tax obligations.

After cancellation of the purchase process, the data stored by us will be deleted. If a contract is concluded, all data from the contractual relationship will be stored until the expiry of the tax retention period (7 years).

The data name, address, purchased goods and date of purchase are also stored until the expiry of product liability (10 years). Data processing is carried out on the basis of the legal provisions of § 96 Para. 3 TKG and Art. 6 Para. 1 lit a (consent) and/or lit b (necessary for contract fulfilment) of the GDPR.

Cookies are small files that make it possible to store specific information related to the device on the user's access device (PC, smartphone, etc.). On the one hand, they serve the user-friendliness of websites and thus the users (e.g. storage of login data). On the other hand, they are used to collect statistical data on website usage and to analyse it in order to improve the website. Users can influence the use of cookies. Most browsers have an option to restrict or completely prevent the storage of cookies. However, it should be noted that the use and in particular the ease of use are restricted without cookies.

You can manage many online advertising cookies from companies via the US website or the EU website

Fonts from Adobe Typekit
We use fonts from Adobe Typekit on our website. This requires Adobe to know the IP address of the user in order to transfer the data. Adobe may also use so-called pixel tags or tracking codes for statistical or marketing purposes. Furthermore, cookies from Adobe & third-party providers may be stored on the user's device and contain, among other things, technical information about the browser and operating system, referring websites, visit time and other usage information.

Google Analytics
This website uses Google Analytics, a web analytics service provided by Google Inc ("Google"). Google Analytics uses so-called "cookies", text files that are stored on the user's computer and enable the use of the website to be analysed. The information generated by the cookie about the use of this website by users is generally transmitted to a Google server in the USA and stored there.

However, if IP anonymisation is activated on this website, the IP address of Google users within member states of the European Union or in other signatory states to the Agreement on the European Economic Area will be shortened beforehand. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. IP anonymisation is active on this website. On behalf of the operator of this website, Google will use this information to analyse the use of the website by users, to compile reports on website activity and to provide other services relating to website activity and internet usage to the website operator.

The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. Users may refuse the use of cookies by selecting the appropriate settings on their browser, however please note that if you do this you may not be able to use the full functionality of this website. Users can also prevent Google from collecting the data generated by the cookie and relating to their use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available at the following link:

You can find more information on the use of data for advertising purposes by Google, setting and objection options on the Google websites: ("Data use by Google when you use websites or apps of our partners"), ("Data use for advertising purposes"), ("Manage information that Google uses to show you advertising") and ("Determine which advertising Google shows you").

As an alternative to the browser add-on or within browsers on mobile devices, please click this link to prevent Google Analytics from collecting data within this website in the future. An opt-out cookie will be stored on your device. If you delete your cookies, you must click this link again.

Payment provider

Instant bank transfer
On our website, we offer payment via "Sofortüberweisung". The provider of this payment service is Sofort GmbH, Theresienhöhe 12, 80339 Munich (hereinafter referred to as "Sofort GmbH").

With the help of the "Sofortüberweisung" procedure, we receive a payment confirmation from Sofort GmbH in real time and can immediately begin to fulfil our obligations.

If you have decided in favour of the "Sofortüberweisung" payment method, you transmit the PIN and a valid TAN to Sofort GmbH, with which it can log into your online banking account. After logging in, Sofort GmbH automatically checks your account balance and carries out the transfer to us using the TAN you have transmitted. It then immediately sends us a transaction confirmation. After logging in, your turnover, the credit limit of the overdraft facility and the existence of other accounts and their balances are also automatically checked.

In addition to the PIN and TAN, the payment data you have entered and your personal data are also transmitted to Sofort GmbH. Your personal data includes your first and last name, address, telephone number(s), email address, IP address and any other data required for payment processing. The transmission of this data is necessary to establish your identity beyond doubt and to prevent attempts at fraud.

The transmission of your data to Sofort GmbH is based on Art. 6 para. 1 lit. a GDPR (consent) and Art. 6 para. 1 lit. b GDPR (processing for the fulfilment of a contract). You have the option to withdraw your consent to data processing at any time. A revocation does not affect the effectiveness of data processing operations carried out in the past.

For details on payment with Sofortüberweisung, please refer to the following links: and

VIVEUM Zahlungssysteme GmbH
On our website we offer, among other things, payment with the services of VIVEUM. The provider is VIVEUM Zahlungssysteme GmbH, Riemergasse 14/30, 1010 Vienna (hereinafter referred to as "VIVEUM").

If you decide to pay with VIVEUM, VIVEUM will collect various personal data from you. Details on this can be found in VIVEUM's privacy policy at the following link:

Registration on this website
You can register on our website in order to use additional functions on the site. We will only use the data you enter for the purpose of using the respective offer or service for which you have registered. The mandatory information requested during registration must be provided in full. Otherwise we will reject the registration.

In the event of important changes, for example to the scope of the offer or technically necessary changes, we will use the e-mail address provided during registration to inform you in this way.

The processing of the data entered during registration is based on your consent (Art. 6 para. 1 lit. a GDPR). You can revoke your consent at any time. All you need to do is send us an informal email. The legality of the data processing that has already taken place remains unaffected by the cancellation.

The data collected during registration will be stored by us for as long as you are registered on our website and will then be deleted. Statutory retention periods remain unaffected.

Data transmission when concluding contracts for online shops, retailers and goods dispatch
We only transfer personal data to third parties if this is necessary in the context of contract processing, for example to the companies entrusted with the delivery of the goods or the credit institution commissioned with payment processing. Any further transmission of data will not take place or will only take place if you have expressly consented to the transmission. Your data will not be passed on to third parties without your express consent, for example for advertising purposes.

The basis for data processing is Art. 6 para. 1 lit. b GDPR, which permits the processing of data for the fulfilment of a contract or pre-contractual measures.

Data transfer to third countries:
Your data will only be transferred to countries outside the EU/EEA if this is necessary for the fulfilment of the contract or if you have given us your express consent. We ensure that the level of data protection at our partners in third countries also meets the requirements of the EU, for example by using standard contractual clauses.

Specific information on data processing:
We process your personal data exclusively for the following purposes: Processing online orders, customer administration, sending newsletters and improving our range of services. A detailed list of the processing purposes can be found in our processing directory, which you can view on request

Your rights

As a data subject, you have the following rights

  • in accordance with Art. 15 GDPR, the right to request information about your personal data processed by us to the extent specified therein;
  • in accordance with Art. 16 GDPR, the right to request the immediate rectification of incorrect or incomplete personal data stored by us
  • in accordance with Art. 17 GDPR, the right to request the erasure of your personal data stored by us, unless further processing is necessary
  • to exercise the right to freedom of expression and information
  • for the fulfilment of a legal obligation;
  • for reasons of public interest or
  • is necessary for the establishment, exercise or defence of legal claims;
  • in accordance with Art. 18 GDPR, the right to demand the restriction of the processing of your personal data, insofar as
  • the accuracy of the data is disputed by you
  • the processing is unlawful, but you oppose the erasure of the data
  • we no longer need the data, but you need it for the establishment, exercise or defence of legal claims; or
  • you have objected to processing pursuant to Art. 21 GDPR;
  • in accordance with Art. 20 GDPR, the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request that it be transferred to another controller
  • in accordance with Art. 77 GDPR, the right to lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our company headquarters.
As of: November 1, 2023