Privacy Policy

This Privacy Policy outlines how your personal information is collected, used, stored, and shared ("processed") when you visit or make a purchase from our website at odduniverse.xyz (the “Site”).

Data Controller (“We”)

Odd Universe e.U.
FN 644810
Schottenfeldgasse 66/33
1070 Wien, Österreich
+43 664 / 242 0 929
hello@odduniverse.xyz

Personal Data We Process

When you visit and browse the Site, we automatically collect data about:

  • Your device, web browser, IP address, time zone, and some of the cookies that are installed on your device.
  • Additionally, we collect data about the individual web pages or products that you view, what websites or search terms referred you to the Site, and data about how you interact with the Site. We refer to this automatically-collected information as "Device Data", which we collect using the following technologies:
    • Cookies are data files stored by your internet browser or computer, often including an anonymous unique identifier. The web pages you browse are able to recognize some information contained in these cookies. While some cookies are necessary to ensure proper communication with the website (such as storing items in your shopping cart), others may collect anonymous analytical data about your browsing to display relevant content, and may be stored for extended periods. For more details on cookies and how to disable them, visit allaboutcookies.org.
    • Log files track actions occurring on the Site, and collect data such as your IP address, browser type, internet service provider, referring/exit pages, and date/time stamps.
    • Web beacons, tags, and pixels are electronic files used to record how you browse the Site.

In addition to Device Data, when you make a purchase or attempt to make a purchase through the Site, we need to collect certain information from you, including your name, billing address, shipping address, payment details (including credit card numbers and bank information), email address, and phone number. We cannot fulfill your order or enter into a purchasing agreement with you without this information. We refer to this as Order Data.

When we mention Personal Data in this Privacy Policy, we are referring to both Device Data and Order Data. Lastly, we process information regarding your subscription to our services (e.g., Hem Pro), the information you provided by completing online forms on the Site, or information submitted by you related to claims.

How We Process Your Personal Information

By default, we process only the minimum amount of personal data necessary to operate our business effectively. We do not collect any sensitive personal data, such as information about racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership.

Your personal data may be processed in the following ways:

  • By Your Consent: We may process your data when you provide consent for specific purposes.
  • To Enable Performance of a Contract: When processing is necessary to fulfill a contract between us and you, such as processing your order or providing services you’ve requested.
  • For Our Legitimate Business Interests: We may process your data when necessary for legitimate business purposes, such as for example:
    • Developing our business and services
    • Providing information about our products and services to potential customers
    • Identifying and preventing fraudulent claims
    • Improving the customer experience on the Site

For What Purpose Do We Process Your Personal Data?

We process the non-directly identifiable Device Data for the following purposes:

  • Risk and fraud detection: We use data such as your IP address to identify and screen for potential risks and fraudulent activities.
  • Site optimization: We analyze how customers browse and interact with the Site to improve its performance and user experience. This helps us assess the success of marketing campaigns and make improvements.
  • Advertising and retargeting: We use the Device Data to enhance the user experience and deliver relevant advertising and content through retargeting on the Site.

We process the Order Data for the following purposes:

  • Order fulfillment: This includes processing payment data, arranging for shipping, and providing you with invoices and/or order confirmations.
  • Customer communication: We use your Order Data to stay in touch with you regarding your order and any related concerns.
  • Risk and fraud screening: We screen our orders for potential fraud or other issues to protect both parties.
  • Marketing and advertising: If it aligns with your preferences, we may use your Order Data to send you marketing material, offers, or advertisements related to our products and services.

Sharing Your Personal Information

We do not share your personal information with third parties unless it is necessary for fulfilling your order, processing payments, or improving our services. This may include sharing your data with:

  • Payment processors: To process your payment securely.
  • Shipping companies: To arrange for the delivery of your purchased products.
  • Advertising partners: To deliver personalized marketing and optimize user experience.
  • Legal authorities: When required by law or to protect our rights.

In each case, we ensure that any third party receiving your personal data follows appropriate data protection standards and legal obligations.

Sharing Your Personal Information

We share your Personal Data with third parties to ensure that we can effectively manage our business and provide you with a smooth shopping experience. Below are the third parties with whom we may share your data:

  • Webflow: We use Webflow to power our online store. You can learn more about how Webflow uses your Personal Data here.
  • Klaviyo: We use Klaviyo to manage newsletter subscriptions. For more details on how Klaviyo uses your data, please visit Klaviyo Privacy Policy.
  • Google Analytics: We use Google Analytics to analyze how our customers use the Site. You can read more about how Google uses your Personal Data here, and you can opt out of Google Analytics by using this tool.
  • Payment Processors: To process payments, we may share some of your Personal Data with payment providers, including PayPal and Braintree.
  • Logistics and Warehouse Operators: We share necessary Personal Data with logistics and warehouse operators to ensure proper delivery of your products.
  • Legal Compliance: We may also share your Personal Data to comply with applicable laws, regulations, respond to legal requests, or protect our rights.

These third parties are required to handle your Personal Data securely and only as necessary to fulfill their role in processing your orders.

Transfer of Data to a Third Country

While all of our servers are hosted within the EU, due to the nature of the services we use to power our site, your personal data may be transferred outside of the EU. Specifically, your data may be transferred to Canada and the United States.

These transfers are made in accordance with applicable data protection laws, including the use of standard contractual clauses or other safeguards to ensure that your data is treated securely and in line with EU data protection standards.

Managing Your Cookies

Once you give us consent to store cookies on your device, this information will be stored for when you browse the Site again.

You can withdraw your consent at any time by deleting cookies for each of the browsers you use (such as Google Chrome, Mozilla Firefox, Safari, Internet Explorer, or Microsoft Edge).

Do Not Track

Please note that we do not alter our Site’s data collection and use practices when we receive a "Do Not Track" signal from your browser.

Your Rights

If you are a European resident, you additionally have the following rights:

  • The right to access the personal data we hold about you
  • The right to receive your data in a portable and structured format. Please note that we may apply a reasonable fee for any copies of your data after the first one that we provide you with.
  • The right to have your data kept accurate and have it corrected on request.
  • The right to have your data erased, in cases where it is no longer necessary for the purpose for which we collected it, or if you believe we have collected it unlawfully. You might also have your data erased if you gave your consent for its processing and withdraw such consent, or if you use your right to object (see further). Please note, that in some situations we might not be able to erase your data because of legal regulations which require us to keep copies of it. We will notify you about such rules at the time of your request.
  • The right to have processing restricted (apart from storage), in cases where, for example, you request a correction of the data.
  • The right to object to processing, if it is carried out based on our legitimate interest (for example, in cases of direct marketing).
  • The right to withdraw consent at any time, when the processing is based on you giving us consent to process your personal data.
  • The right to lodge a complaint with the relevant supervisory authority. The Austrian Data Protection Authority (DSB) is available for contact at https://www.dsb.gv.at/. However, we would appreciate it if you contacted us beforehand to see if we can help you resolve your concerns as well.
  • In cases where we don’t have the data directly from you, the right to know where the personal data has been collected from.

We will communicate any requests to correct or erase personal data to each of the third parties we have shared it with, and you have the right to be informed about these third parties, should you request it. You may exercise all the above-mentioned rights by writing to us at the contact information below, and we will do our best to reply to you without unnecessary delay, but no later than one month from such request.

Automated Decision Making

In general, we do not carry out automated decision-making, including profiling, that produces legal effects with regard to you. However, we may need to automatically modify some aspects of our offers (such as the VAT, for example) based on your location to comply with laws in different countries.

Data Retention

We will maintain your Order Information only for as long as it is necessary to comply with legal obligations in the respective countries. We will retain other types of data unless or until you ask us to delete it.

Data Breach

In case of a data breach, we will inform the necessary authority without unnecessary delay, at the latest within 72 hours of becoming aware of it, as well as inform you in case such a breach could result in a high risk to your rights and freedoms. We will also document and maintain records of any such breach.

Changes

We may update this Privacy Policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal, or regulatory reasons.

Minors

The Site is not intended for individuals under the age of 18, and we do not knowingly process their personal data.

Contact Us

For more information about our privacy practices, if you have questions, or if you would like to make a complaint, or unsubscribe from any of our services, please contact us by e-mail at hello@odduniverse.xyz or by mail using the details provided below:

Privacy Compliance Officer
Odd Univers e.U.
Schottenfeldgasse 66/33
1070 Wien
Österreich