Privacy Policy

This Privacy Policy applies to the website chibisparks.com as well as our related online presences, particularly on Instagram.

We take the protection of your personal data seriously and process your data exclusively in accordance with applicable laws, in particular the General Data Protection Regulation (GDPR), the Austrian Data Protection Act (DSG), and the Austrian Telecommunications Act 2021 (TKG 2021).

Social Media
This Privacy Policy also applies to our social media channels: https://www.instagram.com/chibi.sparks/ , https://www.tiktok.com/@chibisparks

1. Controller

Wiwaldi e.U.
Alexander Falschlehner
Hauptstrasse 49/6
3013 Tullnerbach
Austria

Email: collectors@chibisparks.com

For further information about our company, please refer to our Imprint:
https://chibisparks.com/imprint

2. Processing of Personal Data

We process personal data only to the extent necessary to:

provide and operate our website
respond to inquiries
carry out marketing activities
send newsletters
analyze and improve our services

3. Hosting

Our website is hosted by ALL-INKL.COM.

In the course of hosting, technical data may be processed, including:

IP address
date and time of access
browser and operating system
accessed pages

This processing is carried out to ensure the secure and stable operation of the website and is based on our legitimate interest pursuant to Art. 6(1)(f) GDPR.

A data processing agreement (DPA) has been concluded with the hosting provider in accordance with Art. 28 GDPR.

4. Contact

If you contact us by email, the data you provide will be processed to handle your request.

This processing is based on:

Art. 6(1)(b) GDPR (pre-contractual or contractual measures), or
Art. 6(1)(f) GDPR (legitimate interest in effective communication)

5. Cookies and Consent

Our website uses cookies and similar technologies.

Non-essential cookies—particularly those used for marketing purposes—are only set with your prior consent (Art. 6(1)(a) GDPR in conjunction with § 165 TKG 2021).

You can withdraw or adjust your consent at any time.

6. Google Ads

We use Google Ads, a service provided by Google.

Cookies and similar technologies may be used to:

measure the effectiveness of advertising campaigns
analyze user interactions
display personalized advertisements

In this context, data may be transferred to the United States. Such transfers are carried out on the basis of appropriate safeguards pursuant to Art. 44 et seq. GDPR, in particular Standard Contractual Clauses.

Processing takes place exclusively on the basis of your consent (Art. 6(1)(a) GDPR).

Further information: https://policies.google.com/privacy

7. Newsletter (Mailchimp)

We use Mailchimp to send newsletters.

The following data may be processed:

email address
name (optional)
usage data (e.g. opens, clicks)

Subscription is carried out using a double opt-in procedure.

Processing is based on your consent pursuant to Art. 6(1)(a) GDPR and § 174 TKG 2021.

You may unsubscribe at any time.

Further information: https://mailchimp.com/legal/privacy/

8. Instagram

We maintain a presence on Instagram.

When you interact with our content on Instagram, personal data may be processed by the platform provider.

Further information: https://privacycenter.instagram.com/policy

9. Data Transfers to Third Parties

Your data will only be shared with third parties if:

it is legally required
it is necessary for contract performance
or you have explicitly consented

10. Data Retention

We store personal data only as long as necessary for the respective purposes or as required by law.

Under Austrian law, retention periods are generally 7 years for relevant business records.

11. Your Rights

You have the following rights under GDPR:

right of access
right to rectification
right to erasure
right to restriction of processing
right to data portability
right to object
right to withdraw consent at any time

If you believe that the processing of your data violates data protection law, you have the right to lodge a complaint with the supervisory authority:

Austrian Data Protection Authority
Barichgasse 40–42
1030 Vienna
Austria
Email: dsb@dsb.gv.at

12. Data Security

We implement appropriate technical and organizational measures to protect your data against loss, misuse, or unauthorized access.

13. Changes

We reserve the right to update this Privacy Policy where necessary.