Privacy Policy

Privacy Policy — Alderwald e.U.

Last updated: 5 January 2026

This Privacy Policy describes how alderwald.com (the “Site”, “we”, “us”, “our”) collects, uses, and shares your Personal Information when you visit the Site, interact with us, or make a purchase.

Controller (EEA/UK/CH): Alderwald e.U., Hauptstraße 76/1/3, Tür 3, 2560 Berndorf, Austria
Contact: info@alderwald.com

1) Personal Information we collect

A) Device and usage information

When you visit the Site, we may collect:

  • IP address, device type, browser type/version, time zone

  • cookie identifiers and similar tracking IDs

  • pages/products viewed, time spent, clicks, search terms, referral URL

  • approximate location inferred from IP (country/city level)

Purpose: to operate the Site, keep it secure, troubleshoot, measure performance, and improve user experience.

B) Order and checkout information

When you place an order, we collect:

  • name, billing/shipping address, email, phone number

  • order contents and order history

  • payment-related information (handled by payment providers; we do not store full card data)

Purpose: to process payment, fulfill orders, ship products, handle returns, provide customer service, and maintain accounting/tax records.

C) Customer support communications

If you contact us, we collect:

  • contact details and the content of your message

  • order number and related info (if applicable)

Purpose: to respond and resolve issues.

D) Marketing and advertising interactions (where enabled)

If you interact with our marketing (emails, ads, tracking pixels), we may collect:

  • email engagement data (opens, clicks) and campaign attribution

  • events such as product views, add-to-cart, checkout initiated, purchase (often via cookies/pixels)

Purpose: to send marketing (where allowed), measure ad performance, and improve targeting.

2) How we use Personal Information

We use Personal Information to:

  • provide and operate the Site and services

  • process orders, payments, shipping, returns, and customer support

  • detect, prevent, and investigate fraud/security issues

  • communicate with you about orders and service messages

  • send marketing communications (email/SMS if you opt in, or where otherwise legally permitted)

  • measure, analyse, and improve marketing and website performance (analytics)

3) Sharing Personal Information

We share Personal Information with service providers only as needed to run the store and deliver services:

A) E-commerce platform

  • Shopify hosts our store and processes core store functions (checkout, order management, store infrastructure).

B) Email marketing

  • Klaviyo is used for email marketing and marketing automation (for example: newsletters, abandoned cart emails, post-purchase emails, segmentation).
    Klaviyo may receive identifiers like email address, order history, and on-site event data (where tracking is enabled and, where required, based on consent).

C) Analytics (when enabled)

  • Google Analytics may be used to understand how visitors use the Site, measure performance, and improve marketing attribution.
    This can involve cookies and collection of usage data (pages visited, events, device info, IP address—often truncated or processed per Google settings).

D) Advertising partners (Meta / Google / TikTok)

If enabled, we may use advertising pixels and conversion APIs provided by:

  • Meta (Facebook/Instagram)

  • Google Ads

  • TikTok Ads

These tools can receive event data such as page views, product views, add-to-cart, checkout, purchases, plus device/cookie identifiers. Depending on configuration, limited customer data (for example email/phone) may be hashed and shared for matching and measurement (often called “advanced matching” / “enhanced conversions”). We use these tools to:

  • measure ad performance

  • attribute sales to campaigns

  • create audiences (e.g., retargeting)

  • reduce wasted spend

E) Payments and shipping

We share data with:

  • payment providers available in checkout (to process payments and fraud checks)

  • shipping carriers / label providers (to deliver your order)

F) Legal and compliance

We may disclose Personal Information to comply with legal obligations, lawful requests, or to protect our rights.

4) Marketing communications (Email)

We use Klaviyo to send marketing emails.

  • You can unsubscribe at any time using the link in any marketing email.

  • Service/transactional emails (order confirmations, shipping updates, password resets) are not marketing and may still be sent.

If you are in the EEA/UK/CH, we rely on consent (or another lawful basis where permitted) for marketing emails.

5) Cookies, pixels, and similar technologies

We use cookies and similar technologies for:

  • necessary functions (cart, checkout, security)

  • preferences (e.g., language/session)

  • analytics (e.g., Google Analytics, when enabled)

  • advertising (Meta/Google/TikTok pixels, when enabled)

You can manage cookies via:

  • our cookie/consent banner (where shown)

  • your browser settings (block/delete cookies)

Blocking cookies can affect site functionality.

Examples of cookies that may be used (not exhaustive; names can change)

Shopify/Store functionality: various session/cart/checkout cookies.
Google Analytics (when enabled): _ga, _gid, _gat (or similar).
Meta: _fbp (or similar).
TikTok: _ttp (or similar).
Google Ads/marketing attribution: cookies used for conversion tracking and ad measurement (names vary).

6) Behavioural advertising and your choices

If enabled, we may show you ads on other platforms based on your activity on our Site (retargeting) and measure conversions.

You can reduce personalised ads via:

  • Meta Ad Preferences (Facebook/Instagram)

  • Google Ad Settings

  • TikTok privacy/ad settings on TikTok

  • industry opt-out tools (where available in your region)

You can also control cookie-based tracking via consent settings and browser controls.

7) Lawful bases (GDPR / EEA / UK / Switzerland)

If you are located in the EEA/UK/Switzerland, we process Personal Information under one or more of:

  • Contract (processing orders, delivery, customer support)

  • Legal obligation (tax/accounting requirements, consumer law)

  • Legitimate interests (site security, fraud prevention, improving services—balanced against your rights)

  • Consent (non-essential cookies, marketing, ad tracking where required)

You can withdraw consent at any time through cookie settings (where available) and by unsubscribing from marketing emails.

8) Retention

We keep Personal Information only as long as necessary for:

  • providing the service and fulfilling orders

  • meeting legal and accounting obligations

  • resolving disputes and enforcing agreements

Retention periods vary depending on the type of data and legal requirements.

9) International transfers

Our providers (e.g., Shopify, Klaviyo, Google, Meta, TikTok) may process data outside Austria/your country, including in the United States and other jurisdictions.

Where required, we rely on appropriate safeguards for cross-border transfers (for example, adequacy decisions and/or standard contractual clauses, depending on the provider and circumstances).

10) Your rights

Depending on your location, you may have rights to:

  • access your Personal Information

  • correct inaccurate data

  • request deletion (where applicable)

  • restrict or object to certain processing

  • data portability

  • withdraw consent (where processing is based on consent)

To exercise rights, contact info@alderwald.com.

Complaints (Austria)

You can also complain to the Austrian Data Protection Authority (Datenschutzbehörde):
Barichgasse 40–42, 1030 Vienna, Austria.

11) Changes to this policy

We may update this Privacy Policy to reflect changes in practices or legal requirements. We will post the updated version on this page with a new “Last updated” date.

12) Contact

Alderwald e.U.
Hauptstraße 76/1/3, Tür 3, 2560 Berndorf, Austria
Email: info@alderwald.com