Grand openingShipping to Austria from €6.99

Home>Privacy

Privacy Policy

1. Privacy at a glance

General information

The following information gives a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to identify you personally. Detailed information on the subject of privacy can be found in our privacy policy listed below this text.

2. Data collection on this website

Who is responsible for data collection on this website?

Data processing on this website is carried out by the website operator. You can find the operator's contact details in the imprint of this website.

How do we collect your data?

Some data is collected when you provide it to us, for example when you place an order, use our online withdrawal form or email us.

Other data is collected automatically by our IT systems, or after your consent, when you visit the website. This is primarily technical data such as internet browser, operating system or the time the page was accessed.

What do we use your data for?

Some of the data is collected to ensure the website is provided without errors. Other data is needed for orders, the customer account and support. Audience measurement works without cookies and only in aggregated form.

What rights do you have regarding your data?

You have the right at any time to receive information free of charge about the origin, recipients and purpose of your stored personal data. You also have the right to request correction or deletion of this data. If you have given consent to data processing, you can revoke that consent at any time for the future.

3. Hosting

We host the content of our website with the following provider: Vercel Inc., 340 Pine Street Suite 701, San Francisco, California 94104, USA.

You can find details in Vercel's privacy policy: https://vercel.com/legal/privacy-policy

4. General information and mandatory notices

Privacy

The operators of this site take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.

Information on the responsible party

The party responsible for data processing on this website is:

Laurids Pucher e.U.
Frauengasse 14
8430 Leibnitz
Austria
E-Mail: laurids.pucher@raceready.bike

Storage period

Unless a more specific storage period has been stated within this privacy policy, your personal data will remain with us until the purpose for data processing no longer applies. If you assert a legitimate request for deletion or revoke your consent to data processing, your data will be deleted unless we have other legally permissible grounds for storing your personal data.

5. Data collection on this website

Cookies and local storage

We do not use cookies or browser storage for advertising or analytics. The list below names everything this website stores in your browser. Each entry is technically necessary for the cart, sign-in or a setting you chose. Under section 165(3) of the Austrian Telecommunications Act 2021 this requires no consent, which is why there is no cookie banner. You can delete these entries in your browser at any time. In the checkout, Shopify sets its own cookies; Shopify’s privacy policy applies there.

  • NEXT_LOCALE (cookie, 1 year). Remembers the language of the website.
  • raceready_currency, raceready_currency_source (cookie, 1 year). Remembers the displayed currency and whether you chose it yourself.
  • raceready_theme (cookie, 1 year). Remembers the light or dark appearance.
  • authjs.session-token, authjs.csrf-token, authjs.callback-url (cookie, session up to 30 days, the others until the browser is closed). Only after you sign in. Keeps you signed in and protects sign-in against forgery. On the live site the names carry the prefix __Secure- or __Host-.
  • authjs.state, authjs.pkce.code_verifier, authjs.nonce (cookie, 15 minutes). Only during sign-in with Google or Apple. Secures the return from the provider.
  • raceready_cart, raceready_coupon (local storage, until you empty the cart). Stores the cart and any voucher code you entered.
  • raceready_currency, raceready_theme_mode (local storage, until you clear storage). The same settings as the cookies above, so they apply immediately on load.
  • raceready_checkout_started (local storage, until your next visit after ordering). Remembers that you opened the checkout, so the cart is emptied after you order.
  • raceready_consent_v1 (local storage, until you withdraw consent or clear storage). Stores whether you unlocked external videos. To withdraw: clear this website’s storage in your browser.
  • raceready_checkout_method (session storage, until the tab is closed). Remembers the chosen route into the checkout.
  • rfAns (session storage, until the tab is closed). Stores your answers in the tyre finder between questions.

Server log files

The provider of these pages automatically collects and stores information in server log files, which your browser automatically transmits to us. These are:

  • Browser type and browser version
  • operating system used
  • referrer URL
  • hostname of the accessing computer
  • time of the server request
  • IP address

Contact by email or phone

There is no contact form on this website. If you contact us by email or phone, we process your details to answer your request (Art. 6(1)(b) GDPR, otherwise (f)). We delete the request once it is settled. If it concerns an order, we keep it as long as the order.

6. Shopping in the store

To process orders we handle your name, delivery and billing address, email address, phone number if given, the goods ordered and the payment status. We do not see your full payment details; Shopify and the payment provider you choose process them. The legal bases are performance of the contract (Art. 6(1)(b) GDPR) and our legal retention duty (c). We keep invoices and accounting records for seven years (section 132 of the Austrian Federal Fiscal Code, BAO).

7. Your rights

You have the following rights with regard to your personal data:

  • Right of access
  • right to rectification or erasure
  • right to restriction of processing
  • right to object to processing
  • right to data portability

You also have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data by us.

Competent supervisory authority in Austria:
Österreichische Datenschutzbehörde
Barichgasse 40–42, 1030 Wien
E-Mail: dsb@dsb.gv.at
Web: www.dsb.gv.at

8. Processing in detail

For each service, this lists why we process data, on which legal basis, for how long and whether data reaches a country outside the EU. Videos and fonts are served from our own server.

Hosting and server logs (Vercel)

  • Purpose: Deliver the website, fend off attacks and find errors.
  • Data: IP address, date and time, page requested, referrer, browser and operating system.
  • Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest is secure and stable operation.
  • Retention: Vercel deletes the logs automatically, at the latest after 30 days.
  • Recipient and third country: Vercel Inc., San Francisco, USA. Transfers to the USA rely on the EU-US Data Privacy Framework (Art. 45 GDPR) and the European Commission’s standard contractual clauses (Art. 46 GDPR).

Audience measurement (Vercel Web Analytics)

  • Purpose: See in aggregate which pages and products are viewed, to improve the shop.
  • Data: Page viewed without query parameters, referrer, device type, browser and country. For cart events only the technical product ID, quantity and value. No names, email addresses or search terms. No cookies are set. Vercel recognises visits through a hash that expires after 24 hours.
  • Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest is improving the shop based on anonymous figures.
  • Retention: The hash expires after 24 hours. After that only aggregated figures remain.
  • Recipient and third country: Vercel Inc., USA. Transfers to the USA rely on the EU-US Data Privacy Framework (Art. 45 GDPR) and the European Commission’s standard contractual clauses (Art. 46 GDPR). More: https://vercel.com/docs/analytics/privacy-policy

Order, payment and checkout (Shopify)

  • Purpose: Hand the cart over to the checkout and handle order, payment, shipping and invoice.
  • Data: The order data from section 6. Your payment details go directly to Shopify and the payment provider you choose.
  • Legal basis: Art. 6(1)(b) GDPR (contract) and (c) (retention duty).
  • Retention: Order and invoice data for seven years (section 132 BAO).
  • Recipient and third country: Shopify International Limited, Dublin, Ireland. Shopify may pass data to Shopify Inc. in Canada (EU adequacy decision) and to service providers in the USA. Transfers to the USA rely on the EU-US Data Privacy Framework (Art. 45 GDPR) and the European Commission’s standard contractual clauses (Art. 46 GDPR). Payment providers such as card networks, Apple Pay and Google Pay process payment data under their own privacy policies.

Product images (Shopify CDN)

  • Purpose: Some product images load directly from cdn.shopify.com, on almost every page.
  • Data: Technically required for delivery: IP address, time, browser identifier and the requested image file. No cookies are set.
  • Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest is to show the products quickly and completely.
  • Retention: According to Shopify’s retention periods for server logs.
  • Recipient and third country: Shopify International Limited, Dublin, Ireland, delivered through a global network. Transfers to the USA rely on the EU-US Data Privacy Framework (Art. 45 GDPR) and the European Commission’s standard contractual clauses (Art. 46 GDPR).

Customer account and sign-in

  • Purpose: Sign you in to the customer account and keep you signed in.
  • Data: When you sign in with email and password, Shopify checks your credentials. Where offered, you can also sign in with Google or Apple. We then receive your name, email address and an ID from that provider.
  • Legal basis: Art. 6(1)(b) GDPR.
  • Retention: The sign-in lasts until you sign out, at most 30 days. The Shopify customer account remains until you ask us to delete it.
  • Recipient and third country: Shopify as above. Google Ireland Limited, Ireland, and Apple Distribution International Ltd., Ireland, if you choose that sign-in. Both may transfer data to the USA. Transfers to the USA rely on the EU-US Data Privacy Framework (Art. 45 GDPR) and the European Commission’s standard contractual clauses (Art. 46 GDPR).

Withdrawal via the online form (Resend)

  • Purpose: Receive your withdrawal and confirm receipt by email to you and to us.
  • Data: Name, email address, order number, your message if given, time of receipt. We use your IP address only briefly in memory to limit abuse.
  • Legal basis: Art. 6(1)(c) GDPR (legal duty to confirm) and (b) (handling the contract).
  • Retention: We keep the withdrawal with the order for seven years (section 132 BAO). Resend stores the emails only for delivery and its sending log.
  • Recipient and third country: Resend, USA. Transfers to the USA rely on the European Commission’s standard contractual clauses (Art. 46 GDPR).

We do not sell data and do not use it for advertising. We do not send a newsletter at the moment.