Skip to Content
Ready to ship in 24 h on weekdays · Made in EU Bulk discounts for businesses
DE EN ES FR IT
Log in

Privacy Policy

1. Information on the collection of personal data and contact details of the controller

(1) In the following, we inform you about the handling of your personal data when using our website. Personal data is any data with which you can be personally identified.

(2) The controller for data processing on this website in the sense of the General Data Protection Regulation (GDPR) is:

SAMM Commerce GmbH
Bürgergasse 5
8010 Graz
Austria
Phone: +43 664 841 56 46
Web: https://www.adsamm.com
Email: support@adsamm.eu

(3) The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.

2. Data collection when visiting our website (server log files)

(1) When using our website for purely informational purposes, i.e. if you do not register or otherwise transmit information to us, we only collect data that your browser transmits to our server (or to the server of our IT service provider/web host). When you access our website, we collect the following data, which is technically necessary for us to display the website to you and to ensure its stability and security:

  • Our visited website (name of the accessed page)
  • Date and time of access
  • Amount of data sent in bytes
  • Source/reference from which you accessed the page (referrer URL)
  • Browser used and its version
  • Operating system used
  • IP address used (possibly in anonymised form)

(2) Processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website, as well as ensuring system security and combating misuse. Data will not be passed on or used in any other way. However, we reserve the right to subsequently check the server log files if there are concrete indications of unlawful use.

(3) We use Odoo Enterprise 18 as our central ERP and website system. The data is processed in this system. Server log files are stored for a maximum of 14 days, after which they are automatically deleted.

3. Contacting us (contact form and email)

(1) When you contact us (e.g. via contact form or email), personal data is collected. Which data is collected in the case of a contact form is evident from the respective contact form (usually name, email address, message text). This data is stored and used exclusively for answering your request or for contacting you and the associated technical administration.

(2) The legal basis for processing this data is our legitimate interest in answering your request in accordance with Art. 6 para. 1 lit. f GDPR. If your contact aims at concluding a contract (e.g. a product enquiry), an additional legal basis for processing is Art. 6 para. 1 lit. b GDPR.

(3) Your data will be processed in our central ERP system (Odoo 18) and deleted after your enquiry has been finally processed. This is the case if it can be inferred from the circumstances that the matter concerned has been conclusively clarified and provided that no statutory retention obligations (e.g. according to the Austrian Commercial Code UGB or the Federal Tax Code BAO) prevent this. For purely informational enquiries, the data will be deleted after 6 months at the latest.

4. Data processing when opening a customer account and for contract processing

(1) In accordance with Art. 6 para. 1 lit. b GDPR, personal data will continue to be collected and processed if you provide it to us for the performance of a contract or when opening a customer account. Which data is collected is evident from the respective input forms. Your customer account can be deleted at any time by sending a message to the controller's address mentioned above.

(2) We store and use the data you provide for contract processing. After complete processing of the contract or deletion of your customer account, your data will be blocked for further use with regard to tax and commercial law retention periods (generally 7 years according to BAO and UGB) and deleted after these periods have expired, unless you have expressly consented to further use of your data or further data use permitted by law has been reserved by us.

5. Data transfer for order processing and logistics

(1) To fulfil our contractual obligations, we pass on your data to the shipping company commissioned with the delivery, insofar as this is necessary for the delivery of ordered goods.

(2) Depending on availability, logistics requirements or shipping method, shipping is carried out either directly by us or via specialised logistics service providers / fulfillers (dropshipping and fulfilment partners). Your address data is passed on exclusively for the purpose of goods delivery on the basis of Art. 6 para. 1 lit. b GDPR.

(3) We work with the following transport companies, to whom the necessary data (name, address, possibly telephone number for notification) is transmitted:

  • Österreichische Post AG (Rochusplatz 1, 1030 Vienna, Austria)
  • GLS Germany / GLS Austria (General Logistics Systems Austria GmbH, Humanic-Straße 1, 2331 Vösendorf, Austria)
  • UPS (United Parcel Service Speditionsges.m.b.H., Steinheilgasse 1, 1210 Vienna, Austria)
  • DHL (DHL Express (Austria) GmbH, Viertel Zwei, Stella-Klein-Löw-Weg 17, 1020 Vienna, Austria)

6. Direct email marketing to existing customers

(1) If you have purchased goods or services from us and have provided your email address, we reserve the right to regularly send you offers for similar goods or services from our range by email.

(2) This is done in accordance with the strict requirements of § 174 para. 3 TKG 2021 and on the basis of our legitimate interest in personalised direct marketing in accordance with Art. 6 para. 1 lit. f GDPR.

(3) Right to object: You can object to this use of your email address at any time by sending a message to the contact option described at the beginning or via a dedicated link in the advertising email, without incurring any costs other than the transmission costs according to the basic tariffs. Upon receipt of your objection, the use of your email address for advertising purposes will be stopped immediately.

7. Use of Cookies and the TKG 2021

(1) To make visiting our website attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your device. Some of the cookies we use are deleted after the end of the browser session, i.e. after closing your browser (so-called session cookies). Other cookies remain on your device and allow us or our partner companies to recognise your browser on your next visit (persistent cookies).

(2) The legal basis for storing information on your device or accessing already stored information in Austria is § 165 para. 3 TKG 2021.

  • Strictly necessary cookies: For cookies that are absolutely necessary to provide you with the service you have expressly requested (e.g. the shopping cart function in the Odoo shop, securing login), no consent is required. The subsequent data processing is based on Art. 6 para. 1 lit. b or f GDPR.
  • Cookies requiring consent (Analytics & Marketing): All other cookies (e.g. for web analysis purposes or for retargeting) are only loaded if you have given your explicit, active consent via our cookie consent banner. The legal basis for this is § 165 para. 3 TKG 2021 in conjunction with Art. 6 para. 1 lit. a GDPR. You can revoke this consent at any time via the banner with effect for the future.

8. Payment Service Providers (Payment Gateways)

PayPal
When paying via PayPal, credit card via PayPal, direct debit via PayPal or – if offered – "Pay Later" via PayPal, we transmit your payment data as part of the payment processing to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. The transmission takes place in accordance with Art. 6 para. 1 lit. b GDPR and only insofar as this is necessary for payment processing. PayPal reserves the right to carry out a credit check for the payment methods credit card via PayPal and direct debit via PayPal. You can find PayPal's privacy policy at: https://www.paypal.com/de/webapps/mpp/ua/privacy-full

Stripe
If you choose a payment method from the payment service provider Stripe, payment processing takes place via the payment service provider Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland, to whom we transmit your information provided during the order process, along with information about your order, in accordance with Art. 6 para. 1 lit. b GDPR. Your data is transmitted exclusively for the purpose of payment processing. Further information on Stripe's data protection can be found at: https://stripe.com/at/privacy

9. Web Analytics Services / Marketing

Google Analytics 4 (GA4)
If you have given your consent via our consent banner (§ 165 para. 3 TKG 2021 in conjunction with Art. 6 para. 1 lit. a GDPR), we use Google Analytics 4 on this website, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). GA4 uses IP anonymisation by default (truncation of the IP address before transmission to the USA), so that direct personal identifiability is excluded. Google uses the information on our behalf to evaluate the use of the website. You can revoke your consent at any time in the cookie banner.

10. Rights of the Data Subject

As a data subject, you have comprehensive rights against us as the controller under the GDPR (Art. 15 to 22):

  • Right of access (Art. 15 GDPR): You have the right to request information about your personal data processed by us.
  • Right to rectification (Art. 16 GDPR): You have the right to demand the immediate rectification of inaccurate personal data stored by us or the completion of incomplete personal data.
  • Right to erasure (Art. 17 GDPR): You have the right to demand the erasure of your personal data stored by us, provided that no legal retention periods prevent this.
  • Right to restriction of processing (Art. 18 GDPR): You have the right to demand the restriction of the processing of your personal data.
  • Right to data portability (Art. 20 GDPR): You have the right to receive your personal data in a structured, commonly used and machine-readable format.
  • Right to withdraw consent (Art. 7 para. 3 GDPR): You have the right to withdraw consent once given for the processing of data at any time with effect for the future.

RIGHT TO OBJECT (Art. 21 GDPR)

If we process your personal data based on our legitimate interest (Art. 6 para. 1 lit. f GDPR) as part of a balancing of interests, you have the right to object to this processing at any time with effect for the future, on grounds relating to your particular situation.

If you exercise your right to object, we will cease processing the data concerned. Further processing remains reserved, however, if we can demonstrate compelling legitimate grounds for the processing which override your interests, fundamental rights and freedoms, or if the processing serves the establishment, exercise or defence of legal claims.

If your personal data is processed by us for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing. After an objection, we will cease processing the data concerned for direct marketing purposes.

11. Right to Lodge a Complaint with a Supervisory Authority

In accordance with Art. 77 GDPR, without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, your place of work or the place of the alleged infringement, if you consider that the processing of personal data relating to you infringes the GDPR.

The supervisory authority responsible for us in Austria is:
Austrian Data Protection Authority (DSB)
Barichgasse 40-42
1030 Vienna
Phone: +43 1 52 152-0
Email: dsb@dsb.gv.at
Web: https://www.dsb.gv.at

Last updated: June 2026