Privacy policy

Protecting your personal data is very important to us. We therefore process your data exclusively on the basis of the applicable legal regulations (GDPR, TKG 2021). This Privacy Policy informs you about the most important aspects of data processing when using our website.

Nirioci e.U.
Anton-Riepl-Straße 2b
AT-4210 Gallneukirchen

Phone: +43 7235 233 85
Email: office@nirioci.at

If you contact us via the form on the website or by email, the data you provide will be stored for six months for the purpose of processing your inquiry and in case of follow-up questions.
We do not share this information without your consent.

Legal Basis:
Art. 6(1)(b) GDPR (contract or pre-contractual measures)
Art. 6(1)(a) GDPR (consent)

This shop is developed, hosted and operated for us by our IT service provider Blax Software & Consulting e.U., Anton-Riepl-Straße 2b/6, AT-4210 Gallneukirchen (www.blax.at), as our processor under Art. 28 GDPR. Its servers are run by Hetzner Online GmbH in data centres within the EU.
Your data is processed only on our behalf and according to our instructions.

Legal Basis: Art. 6(1)(f) GDPR (legitimate interest in the secure and reliable operation of the shop)

The website provider automatically collects and stores information in server log files, which your browser automatically transmits. This includes:

• IP address
• Date and time of the request
• Accessed pages
• Browser type and version
• Operating system
• Referrer URL

These data are collected for technical security reasons and stored for up to 14 days.
No merging of this data with other sources occurs.

Legal Basis: Art. 6(1)(f) GDPR
(legitimate interest in the secure operation of the website)

Our shop stores only what it technically needs to work in your browser:

• your shopping cart, so it survives a reload
• your login, if you sign in
• the country you ship to and your language
• your cookie choice itself

These do not require consent and are stored based on § 165(3) TKG 2021.

Statistics (section 7) are only used if you allow them in the cookie banner.
You can change your choice at any time via "Cookie settings" at the bottom of every page.

You can also configure your browser to notify you when cookies are stored or to allow cookies only in individual cases.

If you allow statistics, we use Matomo, an open-source web analytics tool, to understand how the shop is used and to improve it. Matomo runs on a server of our IT service provider (section 4) at mat.blax.at; the data is not passed on to third parties.

Matomo processes:

• your IP address, shortened by two bytes before it is stored, so it no longer identifies you
• the pages you visit, when and for how long, and the page you came from
• browser, operating system, device type and language
• if you are signed in: a pseudonymous ID derived from your customer account (never your name or email address), so your visits can be counted together

Matomo stores cookies in your browser: _pk_id (13 months), _pk_ses (30 minutes) and mtm_cookie_consent (to remember your consent).
Addresses of order pages are shortened before they are sent, so no order can be opened from the statistics.
Raw visit data is deleted after 12 months; only aggregated reports are kept.

Legal Basis: Art. 6(1)(a) GDPR and § 165(3) TKG 2021 (consent). You can withdraw your consent at any time via "Cookie settings" at the bottom of every page; Matomo then deletes its cookies.

When something goes wrong in the shop, a technical error report is sent to GlitchTip, an error monitoring system that our IT service provider (section 4) runs on its own server (glitchtip.blax.at). We use it to find and fix faults quickly.

A report contains the error message and where in the code it happened, the page address (without its query string), browser and operating system, and the time. Your IP address necessarily reaches the server when a report is sent; the shop does not add it, or your name or email address, to the report. No cookies are set and reports are not used to analyse your behaviour.

Reports are deleted after 90 days.

Legal Basis: Art. 6(1)(f) GDPR (legitimate interest in a working and secure shop)

When you purchase products from us (e.g., art prints, stickers, merchandise), we process the following data:

• Name
• Address
• Email address
• Payment information (depending on payment provider)

This data is required to fulfill the contract.

Storage Duration:
Data related to financial transactions must be retained for 7 years due to legal retention periods (BAO).

Legal Basis: Art. 6(1)(b) GDPR (contract fulfillment)

Payments in this shop are processed by Stripe (Stripe Payments Europe, Ltd., Dublin, Ireland). You enter your payment details on Stripe's own checkout page; we never see your full card number.
Only the data strictly necessary for the payment is exchanged with Stripe (order amount, email address, billing and shipping address).
For details, please refer to Stripe's Privacy Policy.

Legal Basis: Art. 6(1)(b) GDPR (contract fulfillment)

You have the following rights regarding your personal data:

• Right of access
• Right to rectification
• Right to erasure (“right to be forgotten”)
• Right to restriction of processing
• Right to data portability
• Right to withdraw consent
• Right to object to processing

If you believe that the processing of your data violates data protection laws, you may lodge a complaint with the Austrian Data Protection Authority.

We take appropriate technical and organizational measures to protect your data from loss, manipulation, or unauthorized access.

Our website may contain links to external websites. We are not responsible for the content or privacy practices of these external sites.

We may update this Privacy Policy from time to time.
The version published on this website is always the current one.