Privacy Policy

1) Introduction and Contact Information of the Data Controller

1.1 We are pleased that you are visiting our website and thank you for your interest. In the following, we will inform you about how we handle your personal data when you use our website. Personal data refers to any data that can personally identify you.

1.2 The data controller responsible for processing on this website, as defined by the General Data Protection Regulation (GDPR), is CMK Tonerstore GmbH, Hofbauergasse 1/1-2, 1120 Vienna, Austria, Tel.: +43 699 190 522 22, Email: office@tonerstore.at. The data controller is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data.

1.3 For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the data controller), this website uses an SSL or TLS encryption. You can recognize an encrypted connection by the string "https://" and the lock symbol in your browser's address bar.

2) Data Collection When Visiting Our Website

When you visit our website for informational purposes only, i.e., if you do not register or otherwise provide us with information, we only collect the data that your browser transmits to our server (so-called "server log files"). When you access our website, we collect the following data that is technically necessary for us to display the website to you:

The website you visited
Date and time of access
Amount of data sent in bytes
Source/reference from which you accessed the page
Used browser
Used operating system
IP address used (possibly in anonymized form)

The processing is carried out in accordance with Art. 6(1)(f) GDPR based on our legitimate interest in improving the stability and functionality of our website. There is no disclosure or further use of the data. However, we reserve the right to retrospectively check the server log files if concrete indications of unlawful use become known.

3) Cookies

In order to make your visit to our website attractive and to enable the use of certain functions, we use cookies, which are small text files that are stored on your device. Some of the cookies we use are automatically deleted after you close your browser (so-called "session cookies"), while others remain on your device and allow us to save certain settings (so-called "persistent cookies"). You can find the duration of storage in the overview of cookie settings in your web browser.

If individual cookies used by us also process personal data, the processing is carried out in accordance with Art. 6(1)(b) GDPR for the performance of a contract, in accordance with Art. 6(1)(a) GDPR based on your consent, or in accordance with Art. 6(1)(f) GDPR for the protection of our legitimate interests in the best possible functionality of the website and a user-friendly and effective design of your visit.

You can configure your browser to inform you about the setting of cookies and to allow cookies only in individual cases, to exclude the acceptance of cookies for certain cases or in general, or to activate the automatic deletion of cookies when closing the browser.

Please note that if you do not accept cookies, the functionality of our website may be limited.

4) Contact

4.1 Trusted Shops

For review reminders, we use the services of the following provider: Trusted Shops AG, Subbelrather Str. 15c, 50823 Cologne, Germany.

Only with your express consent in accordance with Art. 6(1)(a) GDPR, we transmit your email address and possibly other customer data to the provider so that they can contact you by email with a review reminder.

You can revoke your consent at any time with effect for the future, either to us or to the provider.

We have concluded a data processing agreement with the provider, which ensures the protection of the data of our website visitors and prohibits unauthorized disclosure to third parties.

4.2 When contacting us (e.g., via contact form or email), we process personal data exclusively for the purpose of processing and responding to your inquiry and only to the extent necessary.

The legal basis for processing this data is our legitimate interest in responding to your inquiry in accordance with Art. 6(1)(f) GDPR. If your contact aims at concluding a contract, an additional legal basis for the processing is Art. 6(1)(b) GDPR. Your data will be deleted when it can be inferred from the circumstances that the relevant matter has been finally clarified and provided that there are no legal retention obligations.

5) Data Processing When Opening a Customer Account

In accordance with Art. 6(1)(b) GDPR, personal data is collected and processed to the extent necessary when you open a customer account and provide us with this data. The data required for opening the account can be found in the input mask of the corresponding form on our website.

You can delete your customer account at any time by sending a message to the address of the data controller mentioned above. After deleting your customer account, your data will be deleted provided that all contracts concluded with us have been completely processed, there are no legal retention periods, and we have no legitimate interest in continuing to store the data.

6) Use of Customer Data for Direct Marketing

Subscription to our email newsletter

If you subscribe to our email newsletter, we will regularly send you information about our offers. The mandatory information for sending the newsletter is solely your email address. Providing additional data is voluntary and is used to address you personally. For the newsletter subscription, we use the double opt-in procedure, which ensures that you will only receive the newsletter if you explicitly confirm your consent to receive the newsletter by clicking on a verification link sent to the email address you provided.

By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6(1)(a) GDPR. In this process, we store your IP address as entered by the Internet Service Provider (ISP), as well as the date and time of the registration, in order to trace any possible misuse of your email address at a later time. The data collected during the newsletter registration process is used exclusively for the purpose of sending the newsletter.

You can unsubscribe from the newsletter at any time by using the link provided in the newsletter or by sending a corresponding message to the data controller mentioned at the beginning. After unsubscribing, your email address will be promptly deleted from our newsletter distribution list unless you have expressly consented to further use of your data or unless we reserve the right to use the data beyond what is legally permitted and inform you about it in this declaration.

7) Data Processing for Order Processing

7.1 To the extent necessary for order processing, the personal data collected by us is transmitted to the commissioned transport company and the commissioned bank in accordance with Art. 6(1)(b) GDPR.

If, based on a corresponding agreement, we owe you updates for goods with digital elements or for digital products, we process the contact data (name, address, email address) you provided when placing the order to inform you personally about upcoming updates within the legally prescribed period of time, in accordance with our legal information obligations under Art. 6(1)(c) GDPR, using a suitable means of communication (e.g., by post or email). Your contact data will be used strictly for the purpose of providing information about updates owed by us and will only be processed by us to the extent necessary for the respective information.

In order to process your order, we also cooperate with the following service provider(s), who support us in whole or in part in the execution of concluded contracts. Certain personal data is transmitted to these service providers in accordance with the following information.

7.2 Use of special service providers for fulfillment

7.3 SendCloud

For order processing, we use the following provider: SendCloud GmbH, Kanalstr. 10, 80538 Munich.

In accordance with Art. 6(1)(b) GDPR, name, address, and, if applicable, other personal data are forwarded to the provider exclusively for the purpose of processing the online order. Your data will only be disclosed to the extent necessary for order processing.

7.4 Disclosure of personal data to shipping service providers

To make a decision within the framework of the application review, identity and creditworthiness information from the following credit agencies may be included, in addition to provider-specific criteria according to Art. 6(1)(f) of the GDPR:

https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies

The creditworthiness information may contain probability values (so-called score values). To the extent that score values are included in the result of the creditworthiness information, they are based on a scientifically recognized mathematical-statistical method. Address data, among other things, are taken into account in the calculation of the score values.

You can object to the processing of your data at any time by sending a message to us or to the provider. However, the provider may still be entitled to process your personal data if this is necessary for the contractually compliant payment processing.
- Paypal

On this website, one or more online payment methods of the following provider are available: PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg

If you select a payment method from the provider where you make a prepayment (e.g., credit card payment), your payment data provided during the order process (including name, address, bank and payment card information, currency, and transaction number), as well as information about the content of your order, will be disclosed to them in accordance with Art. 6(1)(b) of the GDPR. In this case, your data will be disclosed exclusively for the purpose of payment processing with the provider and only to the extent necessary for this purpose.

If you select a payment method where the provider makes a prepayment (e.g., invoice or installment purchase or direct debit), you will also be asked to provide certain personal data (first and last name, street, house number, postal code, city, date of birth, email address, telephone number, if applicable, data on an alternative payment method) during the order process.

In order to safeguard our legitimate interest in determining the solvency of our customers, we will forward this data to the provider in accordance with Art. 6(1)(f) of the GDPR for the purpose of a credit check. The provider checks whether the payment option selected by you can be granted based on the personal data you provided as well as additional data (such as shopping cart, invoice amount, order history, payment experiences)

On this website, one or more online payment methods of the following provider are available: SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany

On this website, one or more online payment methods of the following provider are available: Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland

7.8 We reserve the right to disclose your data to the debt collection service provider OKO Inkasso-Auskünfte GmbH & Co KG, Illweinstraße 30, 4020 Linz, if our payment claim has not been settled despite prior notice. In this case, the claim will be collected directly by the debt collection service provider.

The disclosure of your data serves the fulfillment of the contract in accordance with Art. 6(1)(b) of the GDPR as well as the protection of our predominant legitimate interests in an effective assertion or enforcement of our payment claim in accordance with Art. 6(1)(f) of the GDPR.

8) Web Analytics Services

8.1 Google Analytics 4

This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which enables an analysis of your use of our website.

By default, when you visit the website, Google Analytics 4 sets cookies, which are small text files stored on your device and collect certain information. This information includes your IP address, which is, however, truncated by Google to exclude direct personal identification.

The information is transmitted to and processed on servers of Google. Transfers to Google LLC in the USA are also possible.

Google uses the collected information on our behalf to evaluate your use of the website, compile reports on website activity for us, and provide other services related to website usage and internet usage. The IP address transmitted by your browser as part of Google Analytics is not merged with other data from Google. The data collected during the use of Google Analytics 4 is stored for a period of two months and then deleted.

All processing described above, including the setting of cookies on the device used, is done only if you have given us your explicit consent in accordance with Art. 6(1)(a) of the GDPR.
Without your consent, the use of Google Analytics 4 will be disabled during your visit to our website. You can revoke your consent for the future at any time. To exercise your right to revoke, please disable this service through the "Cookie Consent Tool" provided on the website.

We have entered into a data processing agreement with Google, ensuring the protection of our website visitors' data and prohibiting unauthorized disclosure to third parties.
For the transfer of data to the USA, Google relies on standard contractual clauses issued by the European Commission, which are intended to ensure compliance with the European level of data protection.
For further legal information on Google Analytics 4, including a copy of the mentioned standard contractual clauses, please visit https://policies.google.com/privacy?hl=en&gl=en and https://policies.google.com/technologies/partner-sites

Demographic Features
Google Analytics 4 uses the special function "demographic features" and can create statistics based on age, gender, and interests of website visitors. This is done by analyzing advertisements and information from third-party providers. However, the collected data cannot be attributed to any specific individual and is deleted after a storage period of two months.

Google Signals
As an extension to Google Analytics 4, Google Signals may be used on this website to create cross-device reports. If you have enabled personalized ads and linked your devices to your Google account, Google, subject to your consent to use Google Analytics in accordance with Art. 6(1)(a) of the GDPR, can analyze your usage behavior across devices and create database models, including cross-device conversions. We do not receive any personally identifiable information from Google, only statistics. If you wish to stop cross-device analysis, you can disable the "Personalized Advertising" feature in your Google account settings. To do so, follow the instructions on this page: https://support.google.com/ads/answer/2662922?hl=en For more information on Google Signals, please visit the following link: https://support.google.com/analytics/answer/7532985?hl=en

UserIDs
As an extension to Google Analytics 4, the "UserIDs" function may be used on this website. If you have given your consent for the use of Google Analytics 4 in accordance with Art. 6(1)(a) of the GDPR, have set up an account on this website, and logged in with that account on different devices, your activities, including conversions, can be analyzed across devices.

8.2 Google Tag Manager

This website uses the "Google Tag Manager," a service provided by the following provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as "Google").

The Google Tag Manager provides a technical foundation for bundling various web applications, including tracking and analytics services, and allows for calibration, control, and conditional linking through a unified user interface. The Google Tag Manager itself does not store or access any information on user devices. However, upon page loading, the service may transmit your IP address to Google and store it there if necessary. Transmission to servers of Google LLC in the USA is also possible.

This processing is only carried out if you have given us your explicit consent in accordance with Art. 6(1)(a) of the GDPR. Without this consent, the use of Google Tag Manager will be disabled during your visit to our website. You can revoke your consent granted at any time with effect for the future. To exercise your revocation, please disable this service through the "Cookie Consent Tool" provided on the website.

We have entered into a data processing agreement with the provider, ensuring the protection of our website visitors' data and prohibiting unauthorized disclosure to third parties.

For the transfer of data to the USA, the provider relies on standard contractual clauses issued by the European Commission, which are intended to ensure compliance with the European level of data protection.

9) Retargeting/ Remarketing and Conversion Tracking

- Google Ads Conversion Tracking
This website uses the online advertising program "Google Ads" and, within Google Ads, the conversion tracking of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). We use the Google Ads service to draw attention to our attractive offers on external websites using advertising materials (called Google Adwords). We can determine the success of individual advertising campaigns based on the data of these campaigns. Our aim is to display advertisements that are of interest to you, make our website more appealing to you, and achieve a fair calculation of advertising costs incurred.
The conversion tracking cookie is set when a user clicks on an ad served by Google Ads. Cookies are small text files that are stored on your device. These cookies usually expire after 30 days and are not used for personal identification. If the user visits certain pages on this website and the cookie has not expired, Google and we can recognize that the user clicked on the ad and was redirected to this page. Each Google Ads customer receives a different cookie. Therefore, cookies cannot be tracked through the websites of Google Ads customers. The information obtained through the conversion cookie is used to create conversion statistics for Google Ads customers who have opted for conversion tracking. The customers learn the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive any information that personally identifies users. As part of the use of Google Ads, personal data may also be transferred to the servers of Google LLC. in the USA.
For details on the processing triggered by Google Ads Conversion Tracking and Google's handling of data from websites, please refer to https://policies.google.com/technologies/partner-sites.
All the processing described above, especially the setting of cookies to collect information on the device used, is only carried out if you have given us your explicit consent in accordance with Art. 6(1)(a) of the GDPR. You can revoke your consent at any time with effect for the future by disabling this service through the "Cookie Consent Tool" provided on the website.
In addition, you can permanently opt-out of cookies for Google Ads Conversion Tracking by downloading and installing the browser plug-in available at the following link: https://www.google.com/settings/ads/plugin?hl=en.
Please note that certain features of this website may not be available or may be restricted if you have disabled the use of cookies.
You can view Google's privacy policy at the following link: https://www.google.com/policies/privacy/.
- billiger.de Sales Tracking

This website uses the conversion tracking technology of the following provider: solute.de GmbH, Zeppelinstraße 15, D-76185 Karlsruhe, Germany.

If you have arrived at our website through an advertisement on the provider's domain, the success of the advertisement can be tracked using cookies and/or similar technologies (tracking pixels, web beacons, pings, or HTTP requests).

To do this, certain device and browser information, including your IP address if necessary, is read using the tracking technology to capture and evaluate predefined user actions (e.g., completed transactions, leads, website searches, product page views). This enables us to create statistics on user behavior on our website after being redirected from an advertisement, which helps us optimize our offerings.
All the processing described above, especially the setting of cookies to collect information on the device used, is only carried out if you have given us your explicit consent in accordance with Art. 6(1)(a) of the GDPR. You can revoke your consent at any time with effect for the future by disabling this service through the "Cookie Consent Tool" provided on the website.
We have concluded an order processing agreement with the provider, ensuring the protection of our website visitors' data and prohibiting unauthorized disclosure to third parties.

10) Page Functionality

10.1 Trusted Shops Trustbadge

On our website, graphic elements of the following provider are integrated to display external customer reviews and/or an externally awarded quality seal: Trusted Shops AG, Subbelrather Str. 15C, 50823 Cologne, Germany.

When you visit a page on our website that contains such graphic elements, your browser establishes a direct connection to the provider's servers in order to load the elements correctly. In the process, certain browser information, including your IP address, is transmitted to the provider.

If personal data is processed in this context, it is carried out in accordance with Art. 6(1)(f) of the GDPR based on our legitimate interest in the optimal marketing of our offers and the appealing design of our website.

10.2 Google reCAPTCHA

On this website, we use the CAPTCHA service provided by the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.

Data may also be transmitted to: Google LLC, USA. For the visual design of the captcha window, the provider uses "Google Fonts," which are fonts loaded from the internet by Google. This does not involve the processing of additional information beyond what is already transmitted to Google through the functionality of reCAPTCHA.

The service verifies whether an input is made by a natural person or abusively through machine and automated processing, blocking spam, DDoS attacks, and similar automated harmful access attempts. To ensure that an action is taken by a human rather than an automated bot, Cloudflare Turnstile collects the IP address of the device used, detection data of the browser and operating system type, as well as the date and duration of the visit, and transmits this information for evaluation to the provider's servers.

The legal basis is our legitimate interest in determining individual responsibility on the Internet and preventing abuse and spam in accordance with Art. 6(1)(f) of the GDPR.

We have concluded a data processing agreement with the provider, ensuring the protection of our website visitors' data and prohibiting unauthorized disclosure to third parties.

For the transfer of data to the USA, the provider relies on standard contractual clauses of the European Commission, which are intended to ensure compliance with the level of data protection in Europe.

11) Tools and Miscellaneous

Cookie Consent Tool

This website uses a "Cookie Consent Tool" to obtain effective user consent for consent-required cookies and cookie-based applications. The "Cookie Consent Tool" is displayed to users in the form of an interactive user interface upon page access, allowing them to give consent for specific cookies and/or cookie-based applications by checking a box. By using the tool, all consent-required cookies/services are loaded only if the respective user gives the corresponding consent by checking a box. This ensures that such cookies are only set on the user's device if consent has been granted.

The tool sets technically necessary cookies to store your cookie preferences. Personal user data is not generally processed in this context.

In individual cases, if personal data (such as the IP address) is processed for the purpose of storing, assigning, or logging cookie settings, it is carried out in accordance with Art. 6(1)(f) of the GDPR based on our legitimate interest in a legally compliant, user-specific, and user-friendly consent management for cookies, and thus in a legally compliant design of our website.

Another legal basis for the processing is Art. 6(1)(c) of the GDPR. As the data controller, we are legally obligated to make the use of technically unnecessary cookies dependent on the respective user's consent.

We have concluded a data processing agreement with the provider, ensuring the protection of our website visitors' data and prohibiting unauthorized disclosure to third parties.

For more information about the operator and the settings options of the Cookie Consent Tool, please refer directly to the corresponding user interface on our website.

12) Rights of the Data Subject

12.1 The applicable data protection law grants you, as the data subject, the following rights (rights of the data subject) with regard to the processing of your personal data, with reference to the legal basis provided for each exercise:

Right to information according to Art. 15 GDPR;
Right to rectification according to Art. 16 GDPR;
Right to erasure ("right to be forgotten") according to Art. 17 GDPR;
Right to restriction of processing according to Art. 18 GDPR;
Right to notification according to Art. 19 GDPR;
Right to data portability according to Art. 20 GDPR;
Right to withdraw consent at any time according to Art. 7(3) GDPR;
Right to lodge a complaint with a supervisory authority according to Art. 77 GDPR.

12.2 Right to Object

If we process your personal data based on our legitimate interests within the framework of a balancing of interests, you have the right to object to such processing at any time for reasons arising from your particular situation, with effect for the future.

If you exercise your right to object, we will cease processing the personal data concerned. However, further processing may be carried out if we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or if the processing serves the assertion, exercise, or defense of legal claims.

If your personal data is processed by us for direct marketing purposes, you have the right to object at any time to the processing of your personal data for the purpose of such advertising. You can exercise your right to object as described above.

If you exercise your right to object, we will cease processing the personal data concerned for direct marketing purposes.

13) Duration of Storage of Personal Data

The duration of the storage of personal data is determined by the respective legal basis, the purpose of processing, and, if applicable, by the respective statutory retention period (e.g., commercial and tax retention periods).

If personal data is processed based on explicit consent pursuant to Art. 6(1)(a) GDPR, the data will be stored until you revoke your consent.

If there are statutory retention periods for data that is processed within the scope of legal or similar obligations based on Art. 6(1)(b) GDPR, such data will be routinely deleted after the retention periods expire, provided it is no longer necessary for the performance or initiation of a contract and/or there is no legitimate interest on our part in further storage.

If personal data is processed based on Art. 6(1)(f) GDPR, the data will be stored until you exercise your right to object pursuant to Art. 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves the assertion, exercise, or defense of legal claims.

If personal data is processed for the purpose of direct marketing based on Art. 6(1)(f) GDPR, the data will be stored until you exercise your right to object pursuant to Art. 21(2) GDPR.

Unless otherwise stated in the specific processing situations described in this statement, stored personal data will be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.