Privacy Policy

This Privacy Policy outlines how your personal information is collected, used, stored, and shared ("processed") when you visit or make a purchase from our website at odduniverse.xyz (the “Site”).

Data Controller (“We”)

Odd Universe GmbH
FN 644810
Schottenfeldgasse 66/33
1070 Wien, Austria
hello@odduniverse.xyz

‍

Personal Data We Process

‍When you visit and browse the Site, we automatically collect data about:

Your device, web browser, IP address, time zone, and some of the cookies that are installed on your device.
Additionally, we collect data about the individual web pages or products that you view, what websites or search terms referred you to the Site, and data about how you interact with the Site. We refer to this automatically-collected information as "Device Data", which we collect using the following technologies:
- ‍Cookies and Similar Technologies: We use strictly necessary cookies to operate the website, cart, checkout, security, currency selection, and consent settings. With your consent, we may also use:
  - Analytics cookies, for example Google Analytics, to understand how visitors use the Site.
  - Marketing and tracking technologies, for example Klaviyo tracking, to measure email performance, newsletter signups, browsing behaviour, abandoned carts, and customer interactions.
  - Advertising/retargeting technologies, if activated, to measure campaigns and show relevant ads.
    
    You can accept or reject non-essential cookies through our cookie banner. You can change or withdraw your consent at any time via “Cookie Settings” in the footer.‍‍
- ‍Log files track actions occurring on the Site, and collect data such as your IP address, browser type, internet service provider, referring/exit pages, and date/time stamps.‍
- Web beacons, tags, and pixels are electronic files used to record how you browse the Site.

In addition to Device Data, when you make a purchase or attempt to make a purchase through the Site, we need to collect certain information from you, including your name, billing address, shipping address, payment details (including credit card numbers and bank information), email address, and phone number. We cannot fulfill your order or enter into a purchasing agreement with you without this information. We refer to this as Order Data.

When we mention Personal Data in this Privacy Policy, we are referring to Device Data, Order Data, and any other information you provide when signing up for our newsletter, filling out forms, contacting us, creating an account, submitting a claim or return request, or managing your consent preferences.

‍

How We Process Your Personal Information

‍By default, we process only the minimum amount of personal data necessary to operate our business effectively. We do not collect any sensitive personal data, such as information about racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership.

Your personal data may be processed in the following ways:

By Your Consent: We may process your data when you provide consent for specific purposes.
To Enable Performance of a Contract: When processing is necessary to fulfill a contract between us and you, such as processing your order or providing services you’ve requested.
For Our Legitimate Business Interests: We may process your data when necessary for legitimate business purposes, such as for example:
- Developing our business and services
- Providing information about our products and services to potential customers
- Identifying and preventing fraudulent claims
- Improving the customer experience on the Site

‍

For What Purpose Do We Process Your Personal Data?

We process the non-directly identifiable Device Data for the following purposes:

Risk and fraud detection: We use data such as your IP address to identify and screen for potential risks and fraudulent activities.
Site optimization: We analyze how customers browse and interact with the Site to improve its performance and user experience. This helps us assess the success of marketing campaigns and make improvements.
Advertising and retargeting: With your consent, we may use Device Data to enhance the user experience and deliver relevant advertising and content through retargeting on the Site.

We process the Order Data for the following purposes:

Order fulfillment: This includes processing payment data, arranging for shipping, and providing you with invoices and/or order confirmations.
Customer communication: We use your Order Data to stay in touch with you regarding your order and any related concerns.
Risk and fraud screening: We screen our orders for potential fraud or other issues to protect both parties.
Marketing and advertising: If it aligns with your preferences, we may use your Order Data to send you marketing material, offers, or advertisements related to our products and services.

‍

Sharing Your Personal Information

Webflow: Hosts and powers parts of our website.
Shopify: Provides our ecommerce, cart, checkout, order management, and payment-related infrastructure.‍
Shopyflow: Is used to connect Shopify ecommerce functionality with our Webflow website.
Payment Processors: Payment Processors: To process payments securely, we may share necessary Personal Data with our payment providers.
Logistics and Warehouse Operators: We share necessary Personal Data with logistics and warehouse operators to ensure proper delivery of your products.
Klaviyo: We use Klaviyo to manage email marketing, newsletter subscriptions, signup forms, customer segmentation, email automation, abandoned cart / checkout reminders, and measurement of email campaign performance.
- Depending on your interaction with the Site, Klaviyo may process your email address, name, order information, browsing activity, cart activity, checkout activity, email engagement data, IP address, device information, and consent status.
- The legal basis for newsletter and marketing emails is your consent under Art. 6(1)(a) GDPR, unless otherwise permitted by law. You can unsubscribe at any time using the unsubscribe link in our emails.
- Klaviyo may process data in the United States. Transfers are protected through appropriate safeguards such as the EU-U.S. Data Privacy Framework and/or Standard Contractual Clauses. Klaviyo Privacy Policy.

Google Analytics: Where consent has been given, we use Google Analytics to analyze how visitors use the Site and improve the performance of our website.
Legal Compliance: We may also share your Personal Data to comply with applicable laws, regulations, respond to legal requests, or protect our rights.

‍

Transfer of Data to a Third Country

Some of our service providers may process personal data outside the European Economic Area (EEA), including in countries such as the United States, Canada, or the United Kingdom.

Where personal data is transferred to a country for which the European Commission has not issued an adequacy decision, we rely on appropriate safeguards under applicable data protection law. These safeguards may include Standard Contractual Clauses approved by the European Commission, the EU-U.S. Data Privacy Framework where applicable, data processing agreements, and additional technical and organisational measures.

This may apply in particular to service providers used for website hosting, ecommerce infrastructure, payment processing, analytics, email marketing, customer communication, logistics, and other operational services.

In connection with your use of the Site or when placing an order, your personal data may therefore be processed by service providers located outside the EEA, but only where such processing is necessary for the purposes described in this Privacy Policy and subject to appropriate safeguards.

‍

Managing Your Cookies

Once you give us consent to store cookies on your device, this information will be stored for when you browse the Site again.

You can change or withdraw your cookie consent at any time by clicking “Cookie Settings” in the footer of the Site. You may also delete cookies through your browser settings.

‍

Do Not Track

Please note that we do not alter our Site’s data collection and use practices when we receive a "Do Not Track" signal from your browser.

‍

Your Rights

If you are a European resident, you additionally have the following rights:

The right to access the personal data we hold about you
The right to receive your data in a portable and structured format. Please note that we may apply a reasonable fee for any copies of your data after the first one that we provide you with.
The right to have your data kept accurate and have it corrected on request.
The right to have your data erased, in cases where it is no longer necessary for the purpose for which we collected it, or if you believe we have collected it unlawfully. You might also have your data erased if you gave your consent for its processing and withdraw such consent, or if you use your right to object (see further). Please note, that in some situations we might not be able to erase your data because of legal regulations which require us to keep copies of it. We will notify you about such rules at the time of your request.
The right to have processing restricted (apart from storage), in cases where, for example, you request a correction of the data.
The right to object to processing, if it is carried out based on our legitimate interest (for example, in cases of direct marketing).
The right to withdraw consent at any time, when the processing is based on you giving us consent to process your personal data.
The right to lodge a complaint with the relevant supervisory authority. The Austrian Data Protection Authority (DSB) is available for contact at https://www.dsb.gv.at/. However, we would appreciate it if you contacted us beforehand to see if we can help you resolve your concerns as well.
In cases where we don’t have the data directly from you, the right to know where the personal data has been collected from.

We will communicate any requests to correct or erase personal data to each of the third parties we have shared it with, and you have the right to be informed about these third parties, should you request it. You may exercise all the above-mentioned rights by writing to us at the contact information below, and we will do our best to reply to you without unnecessary delay, but no later than one month from such request.

‍

Automated Decision Making

‍In general, we do not carry out automated decision-making, including profiling, that produces legal effects with regard to you. However, we may need to automatically modify some aspects of our offers (such as the VAT, for example) based on your location to comply with laws in different countries.

‍

Data Retention

‍We will maintain your Order Information only for as long as it is necessary to comply with legal obligations in the respective countries. We retain order and invoice data for as long as required under Austrian tax and accounting law. Newsletter and marketing data is retained until you unsubscribe or withdraw your consent. Cookie consent records are retained for the period necessary to document consent. Customer support and claim-related data is retained for as long as necessary to handle the request and defend or exercise legal claims.

‍

Data Breach

In case of a data breach, we will inform the necessary authority without unnecessary delay, at the latest within 72 hours of becoming aware of it, as well as inform you in case such a breach could result in a high risk to your rights and freedoms. We will also document and maintain records of any such breach.

‍

Changes

We may update this Privacy Policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal, or regulatory reasons.

‍

Minors

‍The Site is not intended for individuals under the age of 18, and we do not knowingly process their personal data.‍

‍

Contact Us

‍For more information about our privacy practices, if you have questions, or if you would like to make a complaint, or unsubscribe from any of our services, please contact us by e-mail at hello@odduniverse.xyz or by mail using the details provided below:

Privacy Compliance Officer
Odd Universe GmbH
Schottenfeldgasse 66/33
1070 Wien
Austria

‍