Privacy Policy

Protecting your data matters to us. This privacy policy explains which personal data we process when you visit rodel.at or order from us, what we use it for and what rights you have. We process data in accordance with the General Data Protection Regulation (GDPR), the Austrian Data Protection Act (DSG) and the Austrian Telecommunications Act 2021 (TKG 2021).

1. Controller

Kathrein Rodel GmbH
represented by the Managing Director Ing. Christoph Kathrein
Gießenstraße 7, 6522 Prutz, Austria
Phone: +43 5472 6307
Email: info@rodel.at
Website: www.rodel.at

You can reach us at these contact details with any questions about data protection and to exercise your rights. We have not appointed a data protection officer because we are not legally required to do so.

2. Hosting and server log files

Our website is hosted by Hetzner Online GmbH, Industriestraße 25, 91710 Gunzenhausen, Germany. Hetzner processes the data on our behalf on servers within the EU; we have concluded a data processing agreement with Hetzner in accordance with Art. 28 GDPR. For more information, see the Hetzner privacy policy.

Each time our website is accessed, the server automatically stores the following data in log files:

  • IP address of the device accessing the site
  • date and time of access
  • page or file accessed and amount of data transferred
  • website from which you came to us (referrer)
  • browser type, browser version and operating system

We need this data to deliver the website, to ensure its security and stability and to fend off attacks. The legal basis is our legitimate interest under Art. 6(1)(f) GDPR. The log files are deleted after seven days at the latest, unless a security incident needs further investigation.

3. Cookies and consent

We use cookies and similar technologies. These are small files that your browser stores on your device.

Necessary cookies are required for the website and the shop to work: for example for the shopping cart, the checkout, the customer account, the selected language, the tax calculation according to the delivery country and to store your cookie choices. The legal basis is § 165(3) TKG 2021 (for customers in Germany § 25(2) TDDDG) in conjunction with Art. 6(1)(b) and (f) GDPR.

All other cookies and services – Google Analytics and YouTube – are only used if you agree in the cookie notice. The legal basis is then your consent under Art. 6(1)(a) GDPR and § 165(3) TKG 2021. You can withdraw or change your consent at any time with effect for the future by opening the cookie settings again. There you will also find a list of all cookies and how long they are stored.

We use the “CookieYes” plugin (CookieYes Limited) to manage consent. It stores your choices in a cookie on your device; no data is transferred to CookieYes for this.

4. Orders in the online shop

When you place an order with us, we process the data we need for the contract:

  • name, billing and delivery address
  • email address and phone number
  • items ordered, selected colours, engraving text, price, shipping or collection option and payment method
  • date and time of the order

Mandatory fields are marked in the checkout. The legal basis is the performance of the contract under Art. 6(1)(b) GDPR. Due to statutory obligations (§ 132 Austrian Federal Fiscal Code (BAO), § 212 Austrian Commercial Code (UGB)), we keep invoices and accounting records for seven years; the legal basis for this is Art. 6(1)(c) GDPR.

Customer account: You can voluntarily create a customer account under My account. We then store your address details and orders for future purchases until you delete the account or ask us to delete it. Statutory retention obligations for orders remain unaffected.

Shipping: For delivery, we pass your name and delivery address on to the shipping company – depending on the delivery country, Österreichische Post AG or GLS. We only pass on your email address or phone number where this is necessary to announce or deliver the parcel. If you collect your order from our factory, we do not pass any data on to shipping companies.

5. Payment processing

Depending on the payment method you choose, we pass the data required for the payment (name, address, email address, order number and amount) on to the respective payment service provider. The legal basis is Art. 6(1)(b) GDPR; where payment service providers check data to prevent fraud, also our and their legitimate interest under Art. 6(1)(f) GDPR.

Credit and debit card (wallee): We process card payments via wallee AG, Winterthur, Switzerland. You enter your card details directly in a secure input field provided by wallee; we do not receive your full card details. wallee stores the data in encrypted form in Amazon Web Services data centres in Ireland and has it checked for malware by a web application firewall operated by Cloudflare Inc. (USA). The European Commission has issued an adequacy decision for Switzerland; Cloudflare is certified under the EU-US Data Privacy Framework. To prevent fraud, wallee sets a technically necessary cookie (wc_wallee_device_id) in the checkout. For more information, see the wallee privacy policy.

PayPal: If you choose PayPal, you will be redirected to PayPal. The provider is PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, 2449 Luxembourg. PayPal is itself responsible for processing your data in connection with the payment. For more information, see the PayPal privacy statement.

Bank transfer: If you pay by bank transfer, we process the details of your transfer (name, bank details, amount, payment reference) to allocate the payment.

6. Contact form, email and phone

If you contact us via the contact form, by email or by phone, we process your details in order to answer your enquiry. In the contact form, these are your name and email address (mandatory) and, optionally, your phone number, order number, subject and message. When you submit the form, we also store the date, time and IP address to prevent misuse.

The legal basis is Art. 6(1)(b) GDPR if your enquiry relates to an order or a contract, otherwise our legitimate interest in answering enquiries under Art. 6(1)(f) GDPR. We delete the data once your enquiry has been fully dealt with, at the latest after twelve months, unless statutory retention obligations apply.

7. Online withdrawal

You can withdraw from a contract online using the Withdraw from contract function. In doing so, we process your name, your order number, your email address, the details of the items withdrawn and the date and time of receipt. We use this data to process the withdrawal and to send you the legally required confirmation of receipt by email. The legal basis is Art. 6(1)(c) GDPR in conjunction with § 13a of the Austrian Distance and Off-Premises Contracts Act (FAGG) and Art. 6(1)(b) GDPR. We keep the data together with the order records for the duration of the statutory retention periods.

8. Web analytics with Google Analytics

If you consent, we use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics records how you use our website – for example pages viewed, time spent, where your visit came from, device, browser and approximate location – and sets cookies for this purpose. Google Analytics 4 does not store IP addresses. The analyses help us to improve the website and the shop.

The legal basis is your consent under Art. 6(1)(a) GDPR and § 165(3) TKG 2021. Google may also transfer data to Google LLC in the USA. Google LLC is certified under the EU-US Data Privacy Framework, for which the European Commission has issued an adequacy decision. The data is deleted automatically after [14] months. You can withdraw your consent at any time in the cookie settings. For more information, see the Google privacy policy.

9. YouTube videos

On some pages, such as About Kathrein, we embed videos from YouTube. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The videos are only loaded once you agree to the embedding in the cookie notice. A connection to YouTube’s servers is then established; YouTube learns, among other things, your IP address and which page you are visiting and may set cookies. If you are logged in to Google, YouTube can link the visit to your account.

The legal basis is your consent under Art. 6(1)(a) GDPR and § 165(3) TKG 2021. Data may be transferred to Google LLC in the USA; Google LLC is certified under the EU-US Data Privacy Framework. For more information, see the Google privacy policy.

10. Links to other websites

Our website contains links to other websites, for example to Google Maps for directions or to our YouTube channel. Data is only transferred to these providers when you click the link. The respective provider is responsible for its own data processing.

11. Recipients and transfers to third countries

We only pass on your data as described in this privacy policy, where required by law or where you have given your consent. Recipients are our hosting provider, shipping companies, payment service providers, Google (only with your consent) and, in individual cases, our tax advisors and authorities where we are legally obliged to do so. Transfers to countries outside the EU only take place to Switzerland (adequacy decision) and to companies in the USA that are certified under the EU-US Data Privacy Framework, or on the basis of EU standard contractual clauses.

12. Your rights

Under the GDPR, you have the right to

  • access the data we store about you (Art. 15 GDPR),
  • rectification of inaccurate data (Art. 16 GDPR),
  • erasure (Art. 17 GDPR),
  • restriction of processing (Art. 18 GDPR),
  • data portability (Art. 20 GDPR),
  • object to processing based on our legitimate interest (Art. 21 GDPR),
  • withdraw any consent you have given, with effect for the future (Art. 7(3) GDPR).

Simply write to us at info@rodel.at. We do not make decisions based solely on automated processing and do not carry out profiling.

If you believe that we are not processing your data lawfully, you can lodge a complaint with a data protection supervisory authority. In Austria, this is the Austrian Data Protection Authority (Österreichische Datenschutzbehörde), Barichgasse 40–42, 1030 Vienna, email: dsb@dsb.gv.at, website: www.dsb.gv.at. You can also contact the supervisory authority in the EU country in which you live.

13. Data security

Our website is fully encrypted with TLS. You can recognise this by “https://” and the padlock symbol in your browser’s address bar. We also protect your data against loss, misuse and unauthorised access through technical and organisational measures.

14. Changes to this privacy policy

We update this privacy policy when our website, our services or the legal situation change. The version published here applies.

Last updated: October 2026