Privacy policy

Privacy Policy

Last updated: 28 July 2026

Protecting your personal data is important to us. We process your data exclusively in accordance with the applicable legal provisions, in particular the General Data Protection Regulation (GDPR), the Austrian Data Protection Act (DSG), and other applicable data protection regulations.

This Privacy Policy explains what personal data we collect when you visit our website, use our online shop, or contact us, the purposes for which we process your data, and the rights you have as a data subject.

1. Data Controller

The controller within the meaning of Article 4(7) GDPR is:

Alpina Trading GmbH
Argentinierstraße 28/1/1
1040 Vienna
Austria

Phone: +43 660 4632132
Email: office@corkout.at

If you have any questions regarding data protection, the processing of your personal data, or if you wish to exercise your rights under the GDPR, you may contact us at any time.

2. Scope

This Privacy Policy applies to all areas of our website and online shop available at www.corkout.at, as well as all related services, including:

  • Visiting our website
  • Using our online shop
  • Orders and contract processing
  • Customer accounts
  • Contact enquiries
  • Newsletters (where offered)
  • Competitions or promotional campaigns (where applicable)
  • Communication by email or telephone

This Privacy Policy applies exclusively to our own websites. For external websites that may be accessed via links from our website, only the privacy policies of the respective operators shall apply.

3. Personal Data We Process

Depending on how you use our website or online shop, we process different categories of personal data.

This may include, in particular:

  • First and last name
  • Billing address
  • Shipping address
  • Email address
  • Telephone number
  • Company information (for business customers)
  • Order and payment information
  • Information about purchased products
  • Customer account information
  • IP address
  • Browser and device information
  • Technical log data
  • Communication content from enquiries
  • Information voluntarily provided by you

You are generally not obliged to provide personal data. However, without certain information, we may be unable to provide specific services, such as processing an order or responding to an enquiry.

4. Purposes of Data Processing

We process personal data only to the extent necessary for providing our services or where legally permitted.

In particular, we process personal data for the following purposes:

  • Operating our online shop
  • Processing orders
  • Shipping purchased products
  • Payment processing
  • Customer service
  • Responding to enquiries
  • Improving our website
  • Ensuring system security
  • Complying with legal obligations
  • Establishing, exercising, or defending legal claims
  • Marketing activities where a valid legal basis exists

5. Legal Basis for Processing

Personal data is processed exclusively in accordance with the legal provisions of the GDPR.

Depending on the specific processing activity, we rely on the following legal bases:

  • Article 6(1)(a) GDPR – Consent (e.g. newsletters or optional marketing cookies)
  • Article 6(1)(b) GDPR – Performance of a contract or taking pre-contractual measures (e.g. online shop orders)
  • Article 6(1)(c) GDPR – Compliance with legal obligations (e.g. tax and commercial record-keeping requirements)
  • Article 6(1)(f) GDPR – Legitimate interests (e.g. IT security, fraud prevention, improving our services, or establishing, exercising, or defending legal claims)

Where processing is based on your consent, you may withdraw your consent at any time with future effect. The withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

6. Collection of Personal Data When Visiting Our Website

When you access our website, your browser automatically transmits certain information to our server and technical service providers. This information is necessary to ensure the secure and reliable operation of the website.

The following information may be processed:

  • IP address
  • Date and time of access
  • Pages and files accessed
  • Referrer URL (the previously visited website)
  • Browser type and version
  • Operating system
  • Language settings
  • Device information
  • Access status and volume of data transferred

The processing is based on our legitimate interest pursuant to Article 6(1)(f) GDPR to ensure the stability, security, and functionality of our website and to detect and prevent attacks or misuse.

7. Orders in Our Online Shop

When you place an order through our online shop, we process the personal data required to perform the contract.

This includes, in particular:

  • Name
  • Billing address
  • Shipping address
  • Email address
  • Telephone number (if provided)
  • Ordered products
  • Order history
  • Payment information
  • Shipping information
  • Communication relating to your order

Your personal data is processed solely to the extent necessary for fulfilling the contract.

The legal basis for this processing is Article 6(1)(b) GDPR.

In addition, we are subject to various statutory retention obligations, particularly under Austrian tax and commercial law. In such cases, processing is based on Article 6(1)(c) GDPR.

8. Customer Account

You may voluntarily create a customer account.

Your customer account allows you to:

  • View previous orders
  • Save billing and shipping addresses
  • Track the status of current orders
  • Complete future purchases more quickly

For the creation and administration of your customer account, we process, in particular:

  • Name
  • Email address
  • Encrypted password
  • Saved addresses
  • Order history
  • Account settings

The processing is carried out for the performance of the user agreement pursuant to Article 6(1)(b) GDPR.

You may request the deletion of your customer account at any time. Statutory retention obligations relating to completed orders remain unaffected.

9. Contacting Us

If you contact us via our contact form, email, telephone, or any other communication channel, we process the personal data you provide solely for the purpose of handling your enquiry.

This may include, in particular:

  • Name
  • Email address
  • Telephone number
  • Content of your message
  • Any information you voluntarily provide

Depending on the nature of your enquiry, processing is based on:

  • Article 6(1)(b) GDPR, where your enquiry relates to the initiation or performance of a contract; or
  • Article 6(1)(f) GDPR, based on our legitimate interest in maintaining efficient communication with customers and prospective customers.

Your personal data will be retained only for as long as necessary to process your enquiry or to comply with statutory retention obligations.

10. Payment Processing

We cooperate with external payment service providers to process payments.

Depending on the payment method selected, the personal data required for payment processing will be transferred to the respective payment service provider.

This may include, in particular:

  • Name
  • Billing address
  • Order number
  • Payment amount
  • Payment method
  • Transaction details

The processing is carried out exclusively for the purpose of processing payments and is based on Article 6(1)(b) GDPR.

We do not store complete credit card information. Sensitive payment data is processed exclusively by the respective certified payment service providers in accordance with their own privacy policies.

11. Shipping and Delivery

To deliver your orders, we provide the shipping company with the personal data required for delivery.

This includes, in particular:

  • Name
  • Shipping address
  • Telephone number (where applicable)
  • Email address (where applicable, for shipment tracking)

The data is used solely to deliver your order and, where available, to provide shipment tracking information.

The legal basis for this processing is Article 6(1)(b) GDPR.

We carefully select our shipping providers and disclose only the personal data necessary to complete the delivery.

12. Hosting and Operation of the Online Shop

Our online shop is operated using the Shopify e-commerce platform.

The service provider is Shopify International Limited, Victoria Buildings, 2nd Floor, 1–2 Haddington Road, Dublin 4, D04 XN32, Ireland. Depending on the nature of the processing, personal data may also be processed by Shopify Inc. (Canada) or other companies within the Shopify group.

As part of providing our online shop, Shopify processes personal data on our behalf. This may include:

  • IP address
  • Browser and device information
  • Order and transaction data
  • Customer account information
  • Payment information
  • Shipping information
  • Website usage data

The processing is carried out for the purpose of operating our online shop, fulfilling contracts, and ensuring the security and stability of the platform.

The legal bases are:

  • Article 6(1)(b) GDPR – Performance of a contract
  • Article 6(1)(f) GDPR – Our legitimate interest in operating a secure and reliable online shop

We have concluded the necessary data processing agreements with Shopify. Where personal data is transferred to countries outside the European Economic Area (EEA), such transfers are based on the European Commission's Standard Contractual Clauses (SCCs) or other legally recognised safeguards in accordance with the GDPR.

13. Cookies

Our website uses cookies and similar technologies to ensure the proper functioning of our online shop, provide a user-friendly experience, and—where you have given your consent—to perform statistical analyses and marketing activities.

Cookies are small text files that are stored on your device and enable your browser to be recognized.

We distinguish between the following categories of cookies:

Strictly Necessary Cookies

These cookies are essential for the operation of our website. Without them, core functions such as the shopping cart, customer login, or checkout process cannot be provided.

The legal basis for processing is Article 6(1)(f) GDPR.

Analytics Cookies

These cookies help us understand how visitors use our website, allowing us to continuously improve our services.

They are only used with your prior consent in accordance with Article 6(1)(a) GDPR.

Marketing Cookies

Marketing cookies enable us to display advertisements tailored to your interests and measure the effectiveness of our advertising campaigns.

These cookies are also used only after you have given your explicit consent.

You may change your cookie preferences or withdraw your consent at any time through our cookie banner.

14. Analytics and Marketing Services

Where you have given your consent, we use analytics and marketing services to better understand how our website is used and to improve our products and services.

The following data may be processed:

  • IP address (where applicable, shortened or anonymized)
  • Browser information
  • Device information
  • Pages visited
  • Time spent on the website
  • Click behavior
  • Visitor source
  • Purchase events
  • Interactions with our online shop

This data is used exclusively for statistical analysis and the optimization of our services.

Processing takes place only with your prior consent in accordance with Article 6(1)(a) GDPR.

15. Social Media Presence

We maintain company profiles on social media platforms in order to communicate with customers and prospective customers and to provide information about our products and services.

When you visit our social media profiles, personal data may be processed by the respective platform operator.

We have only limited influence over the nature, scope, and duration of this data processing.

The privacy policies of the respective platform operators also apply.

16. Third-Party Content

Our website may include content and services provided by third parties, such as videos, maps, fonts, or social media content.

To display such content, it may be technically necessary to transmit your IP address and certain technical information to the respective provider.

Third-party content is only integrated where this is necessary for the presentation of our website or where you have given your prior consent.

Depending on the specific service, the legal basis is Article 6(1)(a) GDPR or Article 6(1)(f) GDPR.

17. Data Security

We implement appropriate technical and organizational measures to protect your personal data against loss, manipulation, unauthorized access, or any other unlawful processing.

Our security measures are regularly reviewed and updated to reflect technological developments.

Despite all reasonable efforts, data transmission over the Internet can never be completely secure against access by third parties. Therefore, absolute security cannot be guaranteed.

18. Data Retention

We retain personal data only for as long as necessary to fulfil the respective processing purposes or to comply with statutory retention obligations.

In particular, the following principles apply:

  • Order, invoice, and accounting records are generally retained for seven years in accordance with the Austrian Federal Fiscal Code (BAO) and the Austrian Commercial Code (UGB).
  • Data relating to ongoing contractual relationships is retained for the duration of the contract and thereafter only as long as necessary to establish, exercise, or defend legal claims.
  • Data from contact enquiries is deleted once the enquiry has been fully processed, provided there are no statutory retention obligations or legitimate interests requiring further storage.
  • Customer account data is retained until the customer account is deleted, unless statutory retention obligations apply.
  • Data processed on the basis of your consent (such as newsletters or marketing cookies) is retained until you withdraw your consent.

After the applicable retention periods have expired, personal data will be deleted or anonymized unless legal obligations or legitimate interests require continued storage.

19. International Data Transfers

In connection with the operation of our online shop and certain services, personal data may be transferred to recipients located outside the European Economic Area (EEA).

Where such transfers take place, we ensure that an adequate level of data protection is maintained.

Personal data is transferred only in accordance with the applicable data protection laws, in particular on the basis of:

  • Adequacy Decisions issued by the European Commission;
  • Standard Contractual Clauses (SCCs) approved by the European Commission; or
  • Other legally recognized safeguards pursuant to Chapter V GDPR.

20. Your Rights

Under the General Data Protection Regulation (GDPR), you have the following rights regarding your personal data:

  • Right of access (Article 15 GDPR)
  • Right to rectification (Article 16 GDPR)
  • Right to erasure (Article 17 GDPR)
  • Right to restriction of processing (Article 18 GDPR)
  • Right to data portability (Article 20 GDPR)
  • Right to object to processing (Article 21 GDPR)
  • Right to withdraw your consent at any time with future effect, where processing is based on your consent.

If you wish to exercise any of these rights, you may contact us at any time.

The exercise of your rights is generally free of charge. Where legally required, we may request appropriate proof of identity before processing your request.

21. Right to Lodge a Complaint

If you believe that the processing of your personal data violates applicable data protection laws, you have the right to lodge a complaint with the competent data protection supervisory authority.

In Austria, the competent authority is:

Austrian Data Protection Authority (Österreichische Datenschutzbehörde)
Barichgasse 40–42
1030 Vienna
Austria

Website: https://www.dsb.gv.at

Lodging a complaint does not affect any other administrative or judicial remedies available to you.

22. Changes to this Privacy Policy

We reserve the right to amend this Privacy Policy where necessary due to technical developments, changes in legal requirements, or the expansion of our services.

The version published on our website shall always be the current and applicable version.

23. Contact

If you have any questions regarding the processing of your personal data or wish to exercise your rights under the GDPR, you may contact us at any time.

Alpina Trading GmbH
Argentinierstraße 28/1/1
1040 Vienna
Austria

Phone: +43 660 4632132

Email: office@corkout.at

Website: www.corkout.at

The controller within the meaning of the General Data Protection Regulation (GDPR) is Alpina Trading GmbH.