Privacy policy

Privacy Policy

Version: October 2026

1. Controller

Imran Ljubijankic, trading as “Vario Racing”
Hartbergerstraße 84, 8200 Gleisdorf, Austria
Email: support@vario-racing.com, phone: +43 676 3781931

No data protection officer has been appointed, as there is no legal obligation to do so.

2. What data we process and why

a) Orders and customer account. Name, delivery and billing address, email, phone number, order and payment data and, where applicable, details of your vehicle (fitment). Purpose: performance of the purchase contract, delivery, payment, warranty and customer service. Legal basis: Art. 6 (1) (b) GDPR (contract). Without this data, an order is not possible.

b) Accounting and retention. We retain invoice and order data due to tax and commercial law obligations (§ 132 Austrian Federal Fiscal Code, § 212 UGB: 7 years). Legal basis: Art. 6 (1) (c) GDPR.

c) Enquiries. If you contact us by email, phone, contact form or chat, we process your details to handle the enquiry. Legal basis: Art. 6 (1) (b) or (f) GDPR.

d) Withdrawal. To process a withdrawal, we process the data entered in the withdrawal form. Legal basis: Art. 6 (1) (b) and (c) GDPR.

e) Newsletter. We send the newsletter only with your consent (Art. 6 (1) (a) GDPR, § 174 Austrian Telecommunications Act 2021) after you have confirmed your email address (double opt-in). You can withdraw your consent at any time via the unsubscribe link in every email. We analyse open and click rates to improve the newsletter.

f) Reviews. If you submit a product review, we publish it with the name you provide. Legal basis: Art. 6 (1) (a) GDPR.

g) Affiliate programme. If you reach us via a partner (affiliate) link, we store which partner the order came from in order to settle the commission. Legal basis: Art. 6 (1) (f) GDPR or – where cookies are used – your consent.

3. Cookies and similar technologies

We use technically necessary cookies (e.g. for the cart, checkout, security and storing your cookie preferences) on the basis of § 165 (3) Austrian Telecommunications Act 2021 and Art. 6 (1) (f) GDPR.

All other cookies and tracking technologies – for statistics, analytics (e.g. Shopify Analytics, Microsoft Clarity, Triple Whale) and marketing – are used only with your consent via our cookie banner (§ 165 (3) Telecommunications Act 2021, Art. 6 (1) (a) GDPR). You can change or withdraw your choice at any time via the cookie settings in the footer.

4. Recipients and processors

We only share data where this is necessary to perform the contract, where we are legally obliged to do so or where you have consented. In particular, we use:

• Shopify International Ltd. (Dublin, Ireland) – shop system, hosting, checkout, analytics, Shopify Inbox (chat)
• Payment providers – Shopify Payments (Stripe Payments Europe Ltd.), PayPal (Europe) S.à r.l. et Cie, S.C.A., Klarna Bank AB; they receive the data required for payment and are in part independent controllers
• Carriers – Austrian Post, DHL, DPD, UPS, GLS: name, delivery address and, where applicable, email/phone for delivery notifications
• Suppliers for drop shipments – for items shipped directly by the supplier, the supplier receives your name and delivery address
• Omnisend (Omnisend UAB, Lithuania) – newsletter and email marketing (only with consent)
• Judge.me – review system
• GoAffPro – affiliate programme
• Microsoft Clarity (Microsoft Ireland Operations Ltd.) and Triple Whale – website analytics (only with consent)
• Accounting – tax advisor and accounting software (e.g. Lexware Office, sevdesk, DATEV)

Embedded videos and social media content (e.g. Instagram) are only loaded after your consent or click.

5. Transfers to third countries

Some service providers (e.g. Shopify, Microsoft, Triple Whale, PayPal) may also process data in the USA or other third countries. Transfers are based on an adequacy decision of the European Commission (EU-US Data Privacy Framework) or on EU Standard Contractual Clauses (Art. 45, 46 GDPR).

6. Retention period

We store data only for as long as necessary for the respective purpose: contract and invoice data for 7 years (statutory retention obligation) and beyond that until any warranty and limitation periods have expired; customer accounts until you delete them; newsletter data until you withdraw your consent; enquiries for up to 3 years after completion.

7. Your rights

You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21 GDPR). You can withdraw any consent given at any time with effect for the future. Please contact support@vario-racing.com.

You also have the right to lodge a complaint with the supervisory authority: Austrian Data Protection Authority (Datenschutzbehörde), Barichgasse 40–42, 1030 Vienna, Austria, dsb@dsb.gv.at, www.dsb.gv.at.

8. Automated decision-making

No automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place. Payment providers (e.g. Klarna) may carry out a credit check for instalment purchases; please refer to the respective provider for details.

9. Minimum age

Our offer is aimed at persons aged 18 and over. We do not knowingly collect data from children.