PRIVACY POLICY

Pursuant to GDPR (EU 2016/679), DSG 2018 (BGBl. I No. 165/2017) and TKG 2021. As of: July 2026

1. Responsible Party

ProZleeper GmbH in Gründung (GmbH i.G.)
Wetzlas 1, 3594 Wetzlas, Austria
Email: team@prozleeper.com
Telephone: +43 681 842 214 24

2. Data Processing

2.1 Website Visits / Server Log Files

Purpose: Technical operation, security, error analysis
Legal Basis: Art. 6 Para. 1 lit. f GDPR (legitimate interest)
Data Collected: IP address, date/time, accessed URL, browser type, operating system
Storage Duration: 7 days

2.2 Shop Orders / Contract Processing

Purpose: Contract initiation, conclusion and execution (order management, shipping, invoicing)
Legal Basis: Art. 6 Para. 1 lit. b GDPR (contract processing); Art. 6 Para. 1 lit. c GDPR (legal obligations, e.g., §§ 132 ff. BAO, 7-year retention requirement)
Data Collected: Name, delivery and billing address, email, telephone, order content, payment method
Storage Duration: Invoices retained for 7 years pursuant to § 132 BAO

2.3 Payment Processing

Legal Basis: Art. 6 Para. 1 lit. b GDPR (contract processing)
Service Provider: Shopify Payments (Shopify International Limited, 1-2 Haddington Road, Dublin 4, Ireland). For Apple Pay transactions, processing is handled by Apple Inc. (One Apple Park Way, Cupertino, CA 95014, USA); Apple's privacy terms apply accordingly.
Third Country Transfer: To the USA on the basis of Standard Contractual Clauses pursuant to Art. 46 GDPR

2.5 Shopify as Data Processor

Our online shop operates on the Shopify platform (Shopify International Limited, Dublin, Ireland). A Data Processing Agreement (DPA) pursuant to Art. 28 GDPR has been executed with Shopify. Further information: shopify.com/legal/privacy

2.6 Cookies

Technically necessary cookies (e.g., shopping cart session, CSRF protection) are set on the basis of Art. 6 Para. 1 lit. f GDPR without separate consent.

Optional cookies (analytics, marketing) are activated only with your express consent pursuant to Art. 6 Para. 1 lit. a GDPR in connection with § 165 Para. 3 TKG 2021. You may withdraw your consent at any time via the cookie settings.

2.7 Email Marketing / Newsletter

Legal Basis: Art. 6 Para. 1 lit. a GDPR (consent via double opt-in)
Unsubscribe: At any time via the unsubscribe link in the newsletter or by email to team@prozleeper.com
Service Provider: Klaviyo Inc., 125 Summer Street, Boston, MA 02110, USA. A Data Processing Agreement (DPA) pursuant to Art. 28 GDPR has been executed with Klaviyo. Third country transfer to the USA on the basis of Standard Contractual Clauses pursuant to Art. 46 GDPR. To the extent necessary, based on the EU-US Data Privacy Framework, Standard Contractual Clauses and additional safeguards. Further information: klaviyo.com/legal/privacy

3. Recipients and Disclosure

Data is transmitted only to the extent necessary to: shipping service providers (UPS, Austrian Post, depending on selected shipping method), tax consultants, IT service providers on the basis of a DPA, payment service providers, authorities when legally required. No disclosure for advertising purposes without consent.

4. Third Country Transfers

Data processing outside the EEA occurs exclusively on the basis of adequacy decisions (Art. 45 GDPR) or Standard Contractual Clauses (Art. 46 Para. 2 lit. c GDPR).

5. Your Rights as a Data Subject

You have the right to: access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20), object to processing (Art. 21) and withdraw consent (Art. 7 Para. 3) at any time with effect for the future.

Requests to: team@prozleeper.com

6. Right to Lodge a Complaint with the Data Protection Authority

Austrian Data Protection Authority (DSB)
Barichgasse 40–42, 1030 Vienna
Telephone: +43 1 52 152 0
Email: dsb@dsb.gv.at
Website: www.dsb.gv.at

7. Data Security

We employ technical and organizational security measures. Data transmission is encrypted (TLS/SSL).

8. Changes to This Policy

We reserve the right to adapt this privacy policy in response to changed legal or technical circumstances. The current version is available on our website.

---

MEDIA OWNER (pursuant to § 24 Austrian Media Act)

Media Owner: ProZleeper GmbH in Gründung (GmbH i.G.)
Wetzlas 1, 3594 Wetzlas, Austria

Business Purpose: Trading in sleep and recovery accessories as well as related products and services

Editorial Policy: Information on sleep, recovery and performance

Managing Director: Bianca Stojka