Privacy Policy - Website
(As of 05/2026)
In this privacy policy, we inform you about the key aspects of data processing in connection with our website.
1. Contact form
If you contact us via the form on our website or by email, we will store the details you provide for six months so that we can process your enquiry and in case of any follow-up questions. We will not pass on this information without your consent.
2. Cookies
Our website uses cookies. These are small text files that are stored on your device via your browser. They do not cause any harm.
We use cookies to make our website more user-friendly. Some cookies remain stored on your device until you delete them. They enable us to recognise your browser on your next visit.
If you do not wish this to happen, you can configure your browser to notify you when cookies are set and only allow them on a case-by-case basis. Disabling cookies may restrict the functionality of our website.
We use the Cookiebot tool from Usercentrics, GmbH, Sendlinger Straße 7, 80331 Munich, Germany. You can view the active cookies and adjust your selected cookie settings at any time via the icon in the bottom left-hand corner.
3. Web analytics tools
Our website uses features of the web analytics service Google Analytics. This involves the use of cookies which, if accepted by you, enable an analysis of how users interact with the website. We have entered into a data processing agreement with the provider. The information generated in this way is transmitted to the provider’s server and stored there. You can prevent this by configuring your browser so that no cookies are stored.
On the legal basis of ‘legitimate interest’, we store your pseudonymised IP address. Your IP address is recorded but immediately replaced by a pseudonym (user ID). This means that no unique identification of a specific individual is possible.
Data processing is carried out on the basis of the legal provisions of Section 96(3) of the Telecommunications Act (TKG) and Article 6(1)(a) (consent) and/or (f) (legitimate interest) of the GDPR. Our objective, in accordance with the GDPR (legitimate interest), is to improve our services and our website. As the privacy of our users is important to us, user data is pseudonymised.
User data is retained for a period of 14 months; data relating to an event is retained for two months.
4. Webshop
We use the services of Shopify and SendOwl to provide and manage our online shop. Shopify is used as the technical platform for operating the online shop, managing orders, and processing payments and shipments. SendOwl supports us with automated sales processing, in particular the provision of digital products, order processing, and the sending of download links and transaction emails. When using our online shop, personal data such as name, billing and contact details, payment information, order details and, where applicable, IP address and usage data are processed, insofar as this is necessary for the implementation of pre-contractual measures and for the performance of the contract. Processing is carried out on the basis of Article 6(1)(b) of the GDPR. Insofar as processing in third countries, in particular the USA, cannot be ruled out when using the service providers employed, this shall only take place in compliance with the legal requirements, in particular on the basis of appropriate safeguards in accordance with Article 44 et seq. of the GDPR.
For the purpose of contract processing, we store the following data:
- Name
- Billing address
- Delivery address (if relevant)
- Email address
The data you provide is necessary for the performance of the contract or for the implementation of pre-contractual measures. Without this data, we cannot conclude the contract with you.
No further data is transferred to third parties, with the exception of the transfer of credit card details to the processing banks/payment service providers for the purpose of debiting the purchase price, to the transport company/parcel service commissioned by us for the delivery of the goods, and to our tax advisor for the fulfilment of our tax obligations.
In the event of a contract being concluded, all data arising from the contractual relationship will be stored until the expiry of the statutory retention period (7 years). The data comprising name, address, goods purchased and date of purchase will also be stored until the expiry of the product liability period (10 years). Data processing is carried out on the basis of the legal provisions of Section 96(3) of the Telecommunications Act (TKG) and Article 6(1)(a) (consent) and/or (b) (necessary for the performance of a contract) of the GDPR.
5. Newsletter
You have the option to subscribe to a newsletter. To do so, we require your email address and your confirmation that you agree to receive the newsletter.
You can unsubscribe from the newsletter at any time. To do so, please use the link in the newsletter or send your cancellation request to the following email address: marketing@medaia.at
We will then immediately delete your data relating to the newsletter. This withdrawal does not affect the lawfulness of the processing carried out on the basis of your consent prior to the withdrawal.
6. Your rights
You have the right to access, rectify, erase, restrict, transfer, withdraw consent and object to the processing of your data held by us. If you believe that the processing of your data breaches data protection law or that your data protection rights have otherwise been infringed, you may lodge a complaint with us at datenschutz@skinscreener.at or with the data protection authority.
7. Name and address of the controller
The controller responsible for processing your personal data in accordance with data protection regulations is:
medaia GmbH
Am Eisernen Tor 5/1/12
8010 Graz
The contact details of the data protection officer are: datenschutz@skinscreener.at