Stoffhaus FRU

Privacy Policy

1. Data Controller

FRU e.U.
Fruzsina Tóth
Allerheiligengasse 12
2700 Wiener Neustadt
Austria
Email: info@fru.co.at

2. Data Collected

When you visit our website, the following data is automatically stored in server log files as transmitted by your browser:

  • IP address
  • Browser type and version
  • Operating system
  • Referrer URL (previously visited page)
  • Date and time of access

This data cannot be attributed to specific individuals and is not merged with other data sources. Storage is based on Art. 6(1)(f) GDPR (legitimate interest in the technically flawless presentation and security of the website).

3. Cookies

Our website uses technically necessary cookies and – only with your consent – marketing cookies. Technically necessary cookies are required for the proper operation of the website (e.g., storing your language preference and your cookie choice).

Marketing cookies (see section 4 – Google Ads) are only set if you actively accept them in the cookie banner ("Accept all"). If you choose "Necessary only", no marketing cookies are set and no corresponding scripts are loaded. You can change your choice at any time by deleting the cookies stored in your browser.

Legal basis: §165(3) TKG 2021 (Austrian Telecommunications Act) – no consent is required for technically necessary cookies. Marketing cookies are processed on the basis of your consent (Art. 6(1)(a) GDPR).

4. Google Ads Conversion Tracking

This website uses Google Ads, the online advertising service of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). To measure the success of our advertisements, we use Google Ads conversion tracking. If you reach our website via one of our ads, a cookie is set that allows Google and us to recognise that a user clicked an ad and visited the website. This information is evaluated on a statistical, non-personal basis only.

Conversion tracking is only loaded after your express consent. If you select "Accept all" in the cookie banner, the corresponding Google scripts and cookies are activated. If you decline or choose "Necessary only", no Google Ads scripts are loaded and no data is transmitted to Google. You may withdraw your consent at any time with effect for the future by deleting the cookies stored in your browser.

Legal basis: Art. 6(1)(a) GDPR (consent). Processing may involve a transfer of data to Google in the USA. For more information, see Google's Privacy Policy.

5. Google Maps

This website uses the Google Maps service by Google Inc. The map is only loaded after your active consent (clicking "Load Map"). Only then is data transmitted to Google.

Legal basis: Art. 6(1)(a) GDPR (consent). For more information, see Google's Privacy Policy.

6. Social Media Links

Our website contains links to our profiles on Facebook and Instagram. These are simple hyperlinks – no data is transmitted to Meta Platforms, Inc. or other third parties when you visit our website. Data transfer only occurs when you actively click on one of these links and visit the respective platform.

7. Photos and Images

This website publishes photos of our store, our products, and occasionally events. If individuals are recognizable in photos, publication only occurs with their express consent (Art. 6(1)(a) GDPR). Individuals may withdraw their consent at any time – in which case the respective photos will be removed promptly.

To exercise your right of withdrawal, please contact: info@fru.co.at

8. Video Surveillance

To protect persons and property and to prevent and investigate theft and property damage, parts of our business premises at Allerheiligengasse 12, 2700 Wiener Neustadt are subject to video surveillance. The surveillance is clearly indicated by visible notices at the entrance.

Controller: FRU e.U., Fruzsina Tóth, Allerheiligengasse 12, 2700 Wiener Neustadt (see also section 1).

Purpose of processing: Protection of persons and property; prevention and investigation of theft, burglary, vandalism, and other security-relevant incidents.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest).

Legitimate interest: Ensuring the safety of customers, staff, and company assets, as well as preserving evidence in the event of an incident.

Retention period: Video recordings are generally stored for a maximum of 72 hours and then automatically deleted, unless retention is required to preserve evidence.

Recipients of the data: Data is only disclosed where legally required or necessary to assert or defend against legal claims. Recipients may in particular include authorities, courts, insurers, or legal representatives.

Your rights as a data subject and your right to lodge a complaint with the data protection authority also apply to the video surveillance – see sections 10 and 11.

9. Hosting

This website is hosted by Vercel Inc. (San Francisco, USA). When visiting our website, your personal data (e.g., IP address) is processed on Vercel servers.

Data transfer to the USA: The transfer is based on the EU Commission's adequacy decision for the EU-U.S. Data Privacy Framework. Vercel is certified under the Data Privacy Framework.

10. Your Rights

You have the following rights regarding your personal data:

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object (Art. 21 GDPR)

To exercise your rights, please contact: info@fru.co.at

11. Right to Lodge a Complaint

You have the right to lodge a complaint with the competent supervisory authority:

Austrian Data Protection Authority (Datenschutzbehörde)
Barichgasse 40-42
1030 Vienna, Austria
www.dsb.gv.at

12. Data Retention

Server log files are deleted after a maximum of 30 days. The language preference cookie is stored only for the duration of the browser session. Google Ads marketing cookies are stored in accordance with Google's specifications (generally up to 90 days) and can be deleted by you in your browser at any time.

Last updated: July 2026