Dobrodošli u DYNAMIC SHOOTING AUSTRIA - trgovinu broj 1 za IPSC opremu i pribor za oružje!

Pravila zaštite privatnosti

Privacy Policy

1) Introduction and Contact Details of the Controller

1.1 We are pleased that you are visiting our website and thank you for your interest. Below we inform you about how we handle your personal data when you use our website. Personal data means all data that can be used to personally identify you.

1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is DS Security KG, Linzer Straße 22, 4222 St. Georgen an der Gusen, Austria, Tel.: +43 660 5669569, E-Mail: office@dynamic-shooting.at. The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.


2) Data Collection When Visiting Our Website

2.1 When you use our website purely for information purposes, i.e., if you do not register or otherwise provide us with information, we only collect the data that your browser transmits to our server (so-called "server log files"). When you access our website, we collect the following data, which are technically necessary for us to display the website to you:

  • Our visited website

  • Date and time at the time of access

  • Amount of data sent in bytes

  • Source/referrer from which you came to the page

  • Browser used

  • Operating system used

  • IP address used (if applicable: in anonymized form)

The processing is carried out in accordance with Art. 6(1)(f) GDPR based on our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to subsequently check the server log files if there are concrete indications of unlawful use.

2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the character string “https://” and the lock symbol in your browser bar.


3) Hosting & Content Delivery Network

3.1 Amazon Web Services
We use the system of the following provider for hosting our website and displaying content:
Amazon Web Services, Inc., 410 Terry Avenue North, Seattle, WA 98109, USA.

All data collected on our website are processed on the provider’s servers. We have concluded a Data Processing Agreement (DPA) with the provider, which ensures the protection of our visitors’ data and prohibits unauthorized disclosure to third parties.

For data transfers to the USA, the provider is certified under the EU-US Data Privacy Framework, which ensures compliance with the European data protection level on the basis of an adequacy decision by the European Commission.


3.2 Shopify
We use the system of the following provider for hosting our website and displaying content:
Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify").

Data are also transferred to:
Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada.

All data collected on our website are processed on the provider’s servers. We have concluded a DPA with the provider, which ensures the protection of our visitors’ data and prohibits unauthorized disclosure to third parties.

For data transfers to Canada, an adequate level of data protection is ensured by an adequacy decision of the European Commission.


3.3 Cloudflare
We use a Content Delivery Network of the following provider:
Cloudflare Inc., 101 Townsend St., San Francisco, CA 94107, USA.

This service allows us to deliver large media files such as graphics, website content or scripts faster through a network of regionally distributed servers. The processing takes place based on our legitimate interest in improving the stability and functionality of our website in accordance with Art. 6(1)(f) GDPR. We have concluded a DPA with the provider, which ensures the protection of our visitors’ data and prohibits unauthorized disclosure to third parties.

For data transfers to the USA, the provider is certified under the EU-US Data Privacy Framework.


3.4 imgix
We use a Content Delivery Network of the following provider:
Zebrafish Labs Inc., 423 Tehama St., San Francisco, CA 94103, USA.

This service allows us to deliver large media files such as graphics, website content or scripts faster through a network of regionally distributed servers. The processing takes place based on our legitimate interest in improving the stability and functionality of our website in accordance with Art. 6(1)(f) GDPR. We have concluded a DPA with the provider, which ensures the protection of our visitors’ data and prohibits unauthorized disclosure to third parties.

For data transfers to the USA, the provider is certified under the EU-US Data Privacy Framework.


3.5 IONOS
We use a Content Delivery Network of the following provider:
1&1 IONOS Internet SE, Elgendorfer Str. 57, 56410 Montabaur, Germany.

This service allows us to deliver large media files such as graphics, website content or scripts faster through a network of regionally distributed servers. The processing takes place based on our legitimate interest in improving the stability and functionality of our website in accordance with Art. 6(1)(f) GDPR.

We have concluded a DPA with the provider, which ensures the protection of our visitors’ data and prohibits unauthorized disclosure to third parties.


3.6 Shopify (CDN)
We use a Content Delivery Network of the following provider:
Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify").

Data may also be transferred to:

  • Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada

  • Cloudflare Inc., 101 Townsend St., San Francisco, CA 94107, USA

This service allows us to deliver large media files such as graphics, website content or scripts faster through a network of regionally distributed servers. The processing takes place based on our legitimate interest in improving the stability and functionality of our website in accordance with Art. 6(1)(f) GDPR. We have concluded a DPA with the provider, which ensures the protection of our visitors’ data and prohibits unauthorized disclosure to third parties.

For data transfers to Canada, an adequate level of data protection is ensured by an adequacy decision of the European Commission.
For data transfers to the USA, the provider is certified under the EU-US Data Privacy Framework.


4) Cookies

In order to make visiting our website attractive and to enable the use of certain functions, we use cookies, i.e., small text files that are stored on your device. Some of these cookies are automatically deleted after you close the browser (so-called "session cookies"), while others remain on your device for longer and allow us to store site settings (so-called "persistent cookies"). You can find the exact storage duration in your browser’s cookie settings.

Where cookies are used to process personal data, processing is carried out either in accordance with Art. 6(1)(b) GDPR for the performance of a contract, in accordance with Art. 6(1)(a) GDPR if consent has been given, or in accordance with Art. 6(1)(f) GDPR to safeguard our legitimate interests in ensuring the best possible functionality of the website as well as a customer-friendly and effective design of the site visit.

You can configure your browser to inform you about the setting of cookies and decide individually about their acceptance or exclude the acceptance of cookies in certain cases or in general.

Please note that if you do not accept cookies, the functionality of our website may be restricted.


5) Contact

5.1
When you contact us (e.g., via contact form or email), personal data is collected. The data collected in the case of a contact form can be seen from the respective contact form. This data is stored and used exclusively for the purpose of responding to your inquiry or for contacting you and the associated technical administration.

The legal basis for processing this data is our legitimate interest in responding to your request in accordance with Art. 6(1)(f) GDPR. If your contact is aimed at concluding a contract, the additional legal basis for the processing is Art. 6(1)(b) GDPR. Your data will be deleted after final processing of your inquiry, provided that it can be inferred from the circumstances that the matter in question has been conclusively clarified and there are no statutory retention obligations to the contrary.


5.2 Net Reviews (Verified Reviews)
We use the services of Net Reviews, 18–20 Avenue Robert Schuman, 13002 Marseille, France, for customer reviews. If you submit a review, the following personal data will be processed: name, email address, order details, and your review text. Processing takes place in accordance with Art. 6(1)(f) GDPR based on our legitimate interest in obtaining verified customer feedback.


5.3 Judge.me
We use the review tool "Judge.me", provided by Judge.me Ltd., 18/F, 68 Yee Wo Street, Causeway Bay, Hong Kong. After an order, you may receive an invitation to submit a review. For this purpose, we transmit your name, email address, and order reference to Judge.me. Processing is carried out in accordance with Art. 6(1)(a) GDPR if consent has been given or Art. 6(1)(f) GDPR based on our legitimate interest in authentic customer reviews.


5.4 WhatsApp Business
We offer the option to contact us via WhatsApp. Provider: WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
When you contact us via WhatsApp, your telephone number, the content of the message, and any other personal data provided will be processed.

Legal basis: Art. 6(1)(a) GDPR (consent) or Art. 6(1)(b) GDPR (performance of a contract).

For data transfers to WhatsApp Inc. in the USA, an adequate level of data protection is ensured under the EU-US Data Privacy Framework.


6) Comment Function

If you use the comment function on this website, the data you enter (comment, time of creation, chosen username/pseudonym) will be stored and published on the website. Furthermore, your IP address is logged and stored. This storage of the IP address is done for security reasons and in case the data subject violates third-party rights or posts unlawful content by submitting a comment.

Legal basis: Art. 6(1)(f) GDPR, our legitimate interest in protecting against misuse and illegal content.


7) Customer Account Opening

When you open a customer account, we collect and process your personal data in accordance with Art. 6(1)(b) GDPR. The required data can be seen from the input form during registration. Deletion of your customer account is possible at any time and can be done by sending a message to the controller.


8) Use of Customer Data for Direct Marketing

8.1 Subscription to our Email Newsletter
If you subscribe to our email newsletter, we will regularly send you information about our offers. Mandatory information for sending the newsletter is only your email address. The provision of further data is voluntary and will be used to address you personally.

We use the so-called double opt-in procedure for sending newsletters. This means that we will only send you an email newsletter if you have expressly confirmed that you consent to receive newsletters. We then send you a confirmation email in which you are asked to confirm that you would like to receive newsletters in the future by clicking on a corresponding link.

By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6(1)(a) GDPR. When you register for the newsletter, we store your IP address as entered by the Internet service provider (ISP) as well as the date and time of registration in order to trace possible misuse of your email address at a later time.

The data we collect when registering for the newsletter is used exclusively for the purpose of advertising via the newsletter. You can unsubscribe from the newsletter at any time using the link provided in the newsletter or by sending a message to the controller named above. After you unsubscribe, your email address will be immediately deleted from our newsletter distribution list, unless you have expressly consented to further use of your data or we reserve the right to use the data in a manner permitted by law and about which we inform you in this policy.


8.2 Newsletter via Omnisend
Our email newsletters are sent via the technical service provider Omnisend, UAB, Verkių g. 25C-1, LT-08223 Vilnius, Lithuania (“Omnisend”), to whom we pass on the data you provided when registering for the newsletter. This transfer is made in accordance with Art. 6(1)(f) GDPR and serves our legitimate interest in using a newsletter system that is effective, secure, and user-friendly.


8.3 Newsletter via Shopify Email
Our email newsletters are sent via Shopify Email, a service of Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland. The data you provided when registering for the newsletter is transferred to Shopify’s servers. Processing is based on Art. 6(1)(f) GDPR.


8.4 Shopping Cart Reminders via Omnisend
If you abandon your purchase in our shop, we may remind you by email of the items left in your cart. Processing is based on Art. 6(1)(f) GDPR.


9) Data Processing for Order Fulfilment

To process your order, we work with service providers who support us in whole or in part in fulfilling concluded contracts. Certain personal data are transmitted to these service providers depending on the service.

The following applies: The personal data we collect will be passed on to the transport company commissioned with the delivery, as this is necessary to deliver the goods. Your payment data will be passed on to the commissioned credit institution within the framework of payment processing, provided this is necessary for payment processing.

Legal basis: Art. 6(1)(b) GDPR.


9.1 Use of Payment Service Providers

  • Amazon Pay
    Provider: Amazon Payments Europe s.c.a., 38 Avenue J.F. Kennedy, L-1855 Luxembourg.
    Processing: Art. 6(1)(b) GDPR.

  • PayPal
    Provider: PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg.
    Processing: Art. 6(1)(b) GDPR.

  • Klarna
    Provider: Klarna Bank AB (publ.), Sveavägen 46, 111 34 Stockholm, Sweden.
    Processing: Art. 6(1)(b) GDPR; in the case of credit checks Art. 6(1)(f) GDPR.

  • Stripe
    Provider: Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland.
    Processing: Art. 6(1)(b) GDPR. For data transfers to the USA: EU-US Data Privacy Framework.

  • SumUp
    Provider: SumUp Limited, Block 8, Harcourt Centre, Charlotte Way, Dublin 2, Ireland.
    Processing: Art. 6(1)(b) GDPR.

  • Shopify Payments
    Provider: Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland.
    Processing: Art. 6(1)(b) GDPR.


9.2 Shipping Providers

  • GLS Austria GmbH
    GLS Austria GmbH, Traunuferstraße 105a, 4052 Ansfelden, Austria.

  • Österreichische Post AG
    Rochusplatz 1, 1030 Wien, Austria.

The legal basis for the transfer of data is Art. 6(1)(b) GDPR.


10) Online Marketing – Own Affiliate Program

Within the scope of our legitimate interests in the economic operation of our online offering pursuant to Art. 6(1)(f) GDPR, we operate our own affiliate program. In this context, we provide advertising partners (“affiliates”) with advertising materials that can place links to our offers.

Tracking cookies may be set for correct recording of orders originating via such links. These cookies serve the sole purpose of correct assignment of the success of an advertising medium and the corresponding billing within the scope of our affiliate program.


11) Web Analytics Services

11.1 IONOS WebAnalytics
This website uses the analysis service “IONOS WebAnalytics”, provided by 1&1 IONOS Internet SE, Elgendorfer Str. 57, 56410 Montabaur, Germany.
Data such as the number of visits, referrers, and the most visited pages are processed. IP addresses are anonymized before storage.

Legal basis: Art. 6(1)(f) GDPR, legitimate interest in statistical analysis of user behavior.


11.2 Google Tag Manager
This website uses Google Tag Manager, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The Tag Manager itself does not process personal data but enables the integration of tracking codes.

Legal basis: Art. 6(1)(f) GDPR, legitimate interest in managing website tags.


11.3 Shopify Analytics
We use Shopify’s analytics services (Shopify International Limited, Victoria Buildings, 2nd Floor, 1–2 Haddington Road, Dublin 4, Ireland). Data may also be transferred to Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada.

Legal basis: Art. 6(1)(f) GDPR, legitimate interest in statistical analysis.


11.4 Google Analytics 4
This website uses Google Analytics 4, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics uses cookies that enable analysis of your use of the website. The information generated is usually transferred to a Google server and stored there. IP anonymization is active.

Legal basis: Art. 6(1)(a) GDPR (consent).

We have concluded a DPA with Google. For data transfers to the USA, Google is certified under the EU-US Data Privacy Framework.


12) Retargeting / Remarketing and Conversion Tracking

12.1 Meta Pixel (Facebook Pixel)
This website uses the Facebook Pixel of Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland.
With the help of the pixel, the behavior of page visitors can be tracked after they have been redirected to our website by clicking on a Facebook ad.

Legal basis: Art. 6(1)(a) GDPR (consent).

Data can be transferred to the USA. Meta is certified under the EU-US Data Privacy Framework.


12.2 Google Ads Remarketing
This website uses the functions of Google Ads Remarketing, provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
This allows us to advertise our website in Google search results and on third-party websites.

Legal basis: Art. 6(1)(a) GDPR (consent).

For data transfers to the USA, Google is certified under the EU-US Data Privacy Framework.


12.3 Google Ads Conversion Tracking
We use Google Ads Conversion Tracking. A cookie is set when a user clicks on an ad placed by Google. These cookies lose their validity after 30 days and are not used for personal identification.

Legal basis: Art. 6(1)(a) GDPR (consent).


13) Website Functionalities

13.1 Facebook Plugins
Our website uses social plugins (“plugins”) from Facebook, operated by Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland.
The plugins can be recognized by the Facebook logo.

If you access a page of our website that contains such a plugin, your browser establishes a direct connection to Facebook’s servers. The plugin transmits information to the Facebook server about which of our pages you have visited.

Legal basis: Art. 6(1)(a) GDPR (consent).


13.2 Instagram Plugins
Functions of Instagram are integrated on our website. Provider: Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland.

Legal basis: Art. 6(1)(a) GDPR (consent).


13.3 YouTube
This website uses plugins of the video platform YouTube, provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Legal basis: Art. 6(1)(a) GDPR (consent).


13.4 Trustpilot
We use the rating platform Trustpilot, Trustpilot A/S, Pilestraede 58, 5th floor, 1112 Copenhagen, Denmark, to collect customer reviews.

Legal basis: Art. 6(1)(f) GDPR, legitimate interest in transparency and quality control.


13.5 Google Maps
This website uses Google Maps, provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Legal basis: Art. 6(1)(a) GDPR (consent).


13.6 Google Web Fonts
This site uses web fonts provided by Google for consistent display of fonts.

Legal basis: Art. 6(1)(a) GDPR (consent).


13.7 Google reCAPTCHA
We use Google reCAPTCHA, provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, to verify that data entry is made by a human.

Legal basis: Art. 6(1)(f) GDPR, legitimate interest in preventing misuse.


13.8 Google Translate
We use the translation service Google Translate. Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Legal basis: Art. 6(1)(a) GDPR (consent).


13.9 Google Customer Reviews
We participate in the Google Customer Reviews program. Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Legal basis: Art. 6(1)(a) GDPR (consent).


13.10 ShopSync for Mailchimp
Our website uses the service ShopSync, operated by Shopsync LLC, PO Box 252, Jefferson City, TN 37760, USA.
This synchronizes data between Mailchimp and Shopify.

Legal basis: Art. 6(1)(f) GDPR, legitimate interest in effective newsletter management.

14) Tools and Other Services

14.1 sevDesk
We use the accounting service "sevDesk" provided by sevDesk GmbH, Hauptstraße 115, 77652 Offenburg, Germany.
Personal data (e.g., invoices, payments, accounting records) are processed by sevDesk on our behalf.

Legal basis: Art. 6(1)(c) GDPR (legal obligation) and Art. 6(1)(f) GDPR (legitimate interest in efficient accounting).
We have concluded a Data Processing Agreement (DPA) with sevDesk.


14.2 SumUp Accounting
We use SumUp Accounting, a service of SumUp Limited, Block 8, Harcourt Centre, Charlotte Way, Dublin 2, Ireland.
Personal data (e.g., invoices, payments, accounting records) are processed on our behalf.

Legal basis: Art. 6(1)(c) GDPR and Art. 6(1)(f) GDPR.
We have concluded a DPA with SumUp.


14.3 Cookie Consent Tool
To obtain legally required consents for the use of cookies and cookie-based applications, we use a “cookie consent tool”. This tool collects and stores consents and revocations.

Legal basis: Art. 6(1)(c) GDPR (legal obligation).


14.4 Judge.me
We use the review tool Judge.me, operated by Judge.me Ltd., 18/F, 68 Yee Wo Street, Causeway Bay, Hong Kong.
If you leave a review, Judge.me processes your name, email address, and order details.

Legal basis: Art. 6(1)(a) GDPR (consent) or Art. 6(1)(f) GDPR (legitimate interest in verified customer reviews).


15) Rights of the Data Subject

15.1
The applicable data protection law grants you the following rights regarding the processing of your personal data:

  • Right of access pursuant to Art. 15 GDPR

  • Right to rectification pursuant to Art. 16 GDPR

  • Right to erasure pursuant to Art. 17 GDPR

  • Right to restriction of processing pursuant to Art. 18 GDPR

  • Right to notification pursuant to Art. 19 GDPR

  • Right to data portability pursuant to Art. 20 GDPR

  • Right to withdraw consent pursuant to Art. 7(3) GDPR

  • Right to lodge a complaint with a supervisory authority pursuant to Art. 77 GDPR


15.2 Right to Object
If we process your personal data within the framework of a balancing of interests on the basis of Art. 6(1)(f) GDPR, you have the right to object to this processing at any time with effect for the future, on grounds relating to your particular situation.

If you exercise your right to object, we will stop processing the affected data. However, we reserve the right to continue processing if we can demonstrate compelling legitimate grounds for processing that override your interests, fundamental rights, and freedoms, or if the processing serves to assert, exercise, or defend legal claims.

Where personal data are processed by us for direct marketing purposes, you have the right to object at any time to the processing of personal data for such marketing. You may exercise this right as described above. If you object, your personal data will no longer be used for direct marketing purposes.


16) Duration of Storage of Personal Data

The duration of storage of personal data is determined by the respective legal basis, the purpose of processing, and – if relevant – by the applicable statutory retention period (e.g., commercial and tax retention obligations).

If personal data are processed on the basis of explicit consent pursuant to Art. 6(1)(a) GDPR, the data will be stored until you withdraw your consent.

If there are statutory retention periods for data that are processed within the scope of legal obligations based on Art. 6(1)(c) GDPR, this data will be routinely deleted after expiry of the retention periods, provided that it is no longer required for the performance of a contract or the initiation of a contract and/or we no longer have a legitimate interest in continued storage.

If personal data are processed on the basis of Art. 6(1)(f) GDPR, the data will be stored until you exercise your right to object pursuant to Art. 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for processing that override your interests, rights, and freedoms, or the processing serves to assert, exercise, or defend legal claims.

In all other cases, personal data will be deleted once it is no longer required for the purposes for which it was collected or otherwise processed.