General Data Protection Regulation and Disclaimer

Privacy Policy and Cookie Policy

Privacy Policy

1. Controller

WB Production GmbH
Villacher Straße 120
9710 Feistritz/Drau, Austria
Telephone: +43 4245 21637
www.wb-production.com]

2. Collection and Storage of Personal Data

We process personal data when you visit our website, register, place an order, or contact us.

* Contract performance (Art. 6 (1) b GDPR)
* Consent (Art. 6 (1) a GDPR)
* Legitimate interest (Art. 6 (1) f GDPR)

3. Hosting & Server Log Files

Our hosting provider, Schwarzkünstler oHG, processes access data (IP address, date, time, browser, operating system).
Legal basis: Art. 6 (1) f GDPR (operation & security of the website).
Imprint Schwarzkünstler OHG

4. Order Processing & Customer Account

For orders we collect: name, address, email, telephone number, payment data, VAT number.
These data are shared with:

* Payment service providers (e.g., PayPal, Klarna, Unzer)
* Shipping providers (e.g., Hermes, Österreichische Post, DPD)

Storage: until the expiry of statutory retention obligations (Austrian commercial and tax law).

5. Contact

When contacting us via form or email, we store your information for the purpose of processing the inquiry and, beyond that, on our local server in a management program.

7. Cookies 

We use cookies. Details can be found in the Cookie Policy (below).

10. Users’ Rights

* Right of access (Art. 15 GDPR)
* Right to rectification (Art. 16 GDPR)
* Right to erasure (Art. 17 GDPR)
* Right to restriction of processing (Art. 18 GDPR)
* Right to data portability (Art. 20 GDPR)
* Right to object (Art. 21 GDPR)
* Right to lodge a complaint with the competent supervisory authority.

10. SSL/TLS Encryption

To protect your data, we use encrypted connections (https).

---

Cookie Policy

We use cookies to ensure the operation of our shop.
Your choice: You can consent to the use of cookies, allow only essential cookies, or change your selection at any time.

Cookie Categories

**Essential Cookies**

* **xtcautologin** – Provider: xt:Commerce – Purpose: Automatic login – Duration: 30 days
* **xtc_session** – Provider: xt:Commerce – Purpose: Session management / shopping cart – Duration: session

Which cookies are used by the XT-Commerce shop?

**xtc_session**

* Provider: xt:Commerce
* Purpose: Session management (session ID). Enables shopping cart, login, language settings.
* Type: Session cookie
* Duration: Until the browser is closed

**xtcautologin**

* Provider: xt:Commerce
* Purpose: Allows automatic login on return visit if chosen by the user.
* Type: Persistent cookie
* Duration: ~30 days

**XTSID (or similar, depending on version)**

* Provider: xt:Commerce
* Purpose: Alternative session identifier, prevents session hijacking.
* Type: Session cookie
* Duration: Until the browser is closed

**csrf_token (sometimes integrated)**

* Provider: xt:Commerce
* Purpose: Protection against cross-site request forgery in forms.
* Type: Session cookie
* Duration: Until the browser is closed

You can change your cookie settings at any time