Stoffhaus FRU

Privacy Policy

1. Data Controller

FRU e.U.
Fruzsina Tóth
Allerheiligengasse 12
2700 Wiener Neustadt
Austria
Email: info@fru.co.at

2. Data Collected

When you visit our website, the following data is automatically stored in server log files as transmitted by your browser:

  • IP address
  • Browser type and version
  • Operating system
  • Referrer URL (previously visited page)
  • Date and time of access

This data cannot be attributed to specific individuals and is not merged with other data sources. Storage is based on Art. 6(1)(f) GDPR (legitimate interest in the technically flawless presentation and security of the website).

3. Cookies

Our website uses only technically necessary cookies. These cookies are required for the proper operation of the website (e.g., storing your language preference). No tracking, analytics, or marketing cookies are used.

Legal basis: §165(3) TKG 2021 (Austrian Telecommunications Act) – no consent is required for technically necessary cookies.

4. Google Maps

This website uses the Google Maps service by Google Inc. The map is only loaded after your active consent (clicking "Load Map"). Only then is data transmitted to Google.

Legal basis: Art. 6(1)(a) GDPR (consent). For more information, see Google's Privacy Policy.

5. Social Media Links

Our website contains links to our profiles on Facebook and Instagram. These are simple hyperlinks – no data is transmitted to Meta Platforms, Inc. or other third parties when you visit our website. Data transfer only occurs when you actively click on one of these links and visit the respective platform.

6. Photos and Images

This website publishes photos of our store, our products, and occasionally events. If individuals are recognizable in photos, publication only occurs with their express consent (Art. 6(1)(a) GDPR). Individuals may withdraw their consent at any time – in which case the respective photos will be removed promptly.

To exercise your right of withdrawal, please contact: info@fru.co.at

7. Video Surveillance

To protect persons and property and to prevent and investigate theft and property damage, parts of our business premises at Allerheiligengasse 12, 2700 Wiener Neustadt are subject to video surveillance. The surveillance is clearly indicated by visible notices at the entrance.

Controller: FRU e.U., Fruzsina Tóth, Allerheiligengasse 12, 2700 Wiener Neustadt (see also section 1).

Purpose of processing: Protection of persons and property; prevention and investigation of theft, burglary, vandalism, and other security-relevant incidents.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest).

Legitimate interest: Ensuring the safety of customers, staff, and company assets, as well as preserving evidence in the event of an incident.

Retention period: Video recordings are generally stored for a maximum of 72 hours and then automatically deleted, unless retention is required to preserve evidence.

Recipients of the data: Data is only disclosed where legally required or necessary to assert or defend against legal claims. Recipients may in particular include authorities, courts, insurers, or legal representatives.

Your rights as a data subject and your right to lodge a complaint with the data protection authority also apply to the video surveillance – see sections 9 and 10.

8. Hosting

This website is hosted by Vercel Inc. (San Francisco, USA). When visiting our website, your personal data (e.g., IP address) is processed on Vercel servers.

Data transfer to the USA: The transfer is based on the EU Commission's adequacy decision for the EU-U.S. Data Privacy Framework. Vercel is certified under the Data Privacy Framework.

9. Your Rights

You have the following rights regarding your personal data:

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object (Art. 21 GDPR)

To exercise your rights, please contact: info@fru.co.at

10. Right to Lodge a Complaint

You have the right to lodge a complaint with the competent supervisory authority:

Austrian Data Protection Authority (Datenschutzbehörde)
Barichgasse 40-42
1030 Vienna, Austria
www.dsb.gv.at

11. Data Retention

Server log files are deleted after a maximum of 30 days. The language preference cookie is stored only for the duration of the browser session.

Last updated: June 2026