Privacy policy

Robitronic Electronic GmbH
Pfarrgasse 50
1230 Wien
Austria
Phone: +43 1 982 09 20
E-mail: esales@robitronic.com

For questions about data protection and to exercise your rights, contact us at esales@robitronic.com or by post at the address above.

(1) When you open the shop, our servers and our hosting provider process technically necessary data: IP address, date and time, the address requested, the amount of data transferred, browser and operating system, and the previously visited page. We need them to deliver the shop, protect it against abuse (e.g. limiting repeated requests) and fix errors. The legal basis is our legitimate interest in a secure and functioning shop (Art. 6(1)(f) GDPR).

(2) Our shop server receives your IP address only for security functions and never stores it in plain text, only as a hash computed with a secret key.

(3) We also derive your country from the IP address in order to show a matching delivery country, prices and delivery time until you choose your own. Nothing is stored in the process.

We only set cookies that are strictly necessary for the functions you request (§ 165(3) of the Austrian Telecommunications Act 2021); no consent is required for them. We do not use advertising or tracking cookies.

Also only for functions you ask for, your browser stores on your device: your saved items while you are not logged in (“rt_saved_items”; when you log in we move it into your customer account and delete it in the browser), the view you chose for product lists (“rt_listing_view”), that you closed the language hint (“rt_language_hint”) and – until you close the browser – that your saved items were taken over after the login (“rt_saved_merge_tried”). You can delete these entries in your browser at any time.

On the payment pages our payment service provider Stripe sets its own cookies for fraud prevention (e.g. “__stripe_mid”, “__stripe_sid”); they serve the payment you initiate.

We use our hosting provider's audience measurement and page-speed measurement to learn which pages are loaded how often and how fast. Both work without cookies and without storing anything on your device; only aggregated figures are evaluated, no user profiles are created and there is no cross-site tracking. The legal basis is our legitimate interest in a well-functioning shop (Art. 6(1)(f) GDPR).

(1) For a customer account we process your name, e-mail address, password (only encrypted), addresses, optionally your phone number and – for business customers – company and VAT ID. If you register yourself, you confirm your e-mail address through a link we send you. The legal basis is the contract for the customer account (Art. 6(1)(b) GDPR).

(2) We check business customers' VAT IDs through the European Commission's VIES system and through FinanzOnline of the Austrian Federal Ministry of Finance; we are obliged to do so for tax-free deliveries (Art. 6(1)(c) GDPR).

(3) You can have your customer account deleted at any time; we then keep orders only within the statutory retention obligations (section 11).

(4) If you are already our customer or we set up your customer account for you (a dealer account, for example), we create it in this shop from the data in our merchandise management system: name, e-mail address, phone number, addresses, language and customer type, for businesses also company, VAT ID and the terms agreed with you. We do not send a confirmation link for this, and we take over no password – you set it yourself with “Forgot your password?”. The legal basis is the continuation of our business relationship (Art. 6(1)(b) GDPR) and our legitimate interest in uniform customer management (Art. 6(1)(f) GDPR). If you do not want to use the account, we delete it on request.

(1) For your order we process your contact, billing and delivery data, the products ordered, the payment method and payment status, and which version of our terms you accepted when (with a hash of your IP address as evidence, section 2). The legal basis is the contract (Art. 6(1)(b) GDPR); we must keep invoices and accounting records (Art. 6(1)(c) GDPR, § 132 of the Austrian Federal Fiscal Code, BAO).

(2) Payments in the shop are processed by Stripe Payments Europe, Ltd. (Ireland). Stripe receives the data needed for the payment (amount, your payment details and, for customers with an account, also name, e-mail address, phone number and billing address) and also processes them under its own responsibility for fraud prevention and its own legal obligations: stripe.com/privacy (opens in a new tab). Your card details do not reach our servers.

(3) For shipping we pass on name, delivery address and – for delivery notifications – phone number and e-mail address to our shipping service provider and to the respective carrier (e.g. GLS, UPS, FedEx); for deliveries outside the EU also the details for the customs declaration.

(4) We transfer orders from the shop to our merchandise management system, in which we handle invoices, deliveries, returns and warranty cases.

(1) If you write to us through the contact form, we process your name, e-mail address, the topic, optionally the order or invoice number, your message and – if you are logged in – the link to your customer account. The message is sent by e-mail to our mailbox esales@robitronic.com. The same applies to e-mails you write to us directly.

(2) Our AI assistant “Robi” supports us in handling requests: it reads the message, matches it to your customer account and your orders and drafts a reply. For this, the content is transmitted to providers of AI models who process it on our behalf (section 10). Replies sent without review by our team are marked as replies of the AI assistant. You can ask at any time for a person to handle your request.

(3) The legal basis is the performance of the contract or pre-contractual measures (Art. 6(1)(b) GDPR), otherwise our legitimate interest in answering your request (Art. 6(1)(f) GDPR).

We send e-mails about your customer account and your orders (e.g. confirmations, shipping information, invoices) through an e-mail delivery service. We do not track opens or clicks.

Some articles contain videos from YouTube (Google Ireland Limited). They are only loaded when you click “Load video”; your browser then connects to YouTube's servers (domain youtube-nocookie.com, privacy-enhanced mode), and YouTube receives your IP address among other data. The legal basis is your consent by clicking (Art. 6(1)(a) GDPR); it applies to that video only.

We use service providers who process data on our behalf and according to our instructions (Art. 28 GDPR), for:

• hosting and operating the shop and the shop system, including audience measurement (section 4)

• operating our merchandise management system and its database

• storage of invoices, documents and product images

• sending e-mails and our e-mail mailbox

• AI models for handling requests (section 7)

• creation of shipping labels

On request, we will tell you which service providers these are (section 12).

Stripe (section 6), the carriers, our bank, our tax advisers and authorities are independent controllers insofar as we must transmit data to them.

Where recipients are based outside the European Economic Area, we base the transfer on an adequacy decision of the European Commission (for the USA the EU-US Data Privacy Framework for certified companies, for the United Kingdom the decision for the United Kingdom) or on the European Commission's standard contractual clauses.

• Customer account: until you have it deleted.

• Orders, invoices and accounting records: seven years (§ 132 BAO), longer while proceedings in which they are needed are pending.

• Requests and correspondence: as long as handling requires; correspondence about contracts as long as the contract records.

• Hashes of IP addresses for limiting requests: at most one hour; the evidence of acceptance of the terms: as long as the order.

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). You can object to processing based on our legitimate interest (Art. 21), and to direct marketing at any time. You can withdraw consent at any time with effect for the future.

Please contact esales@robitronic.com. You also have the right to lodge a complaint with a supervisory authority – in Austria with the Data Protection Authority:

Österreichische Datenschutzbehörde (Austrian Data Protection Authority)
Barichgasse 40–42, 1030 Vienna, Austria
E-mail: dsb@dsb.gv.at
Web: www.dsb.gv.at (opens in a new tab)

We need the details marked as mandatory in the ordering process and at registration to conclude and perform the contract; without them you cannot order. All other details are voluntary.

We adapt this privacy policy when our processing changes. The version published here applies; you see its date above. More about our company in the imprint.