Privacy
Last updated: 12.07.2026
Protecting your personal data matters to me. This policy explains what data is processed when you visit and use the online shop at shop.weissexplorers.com, for what purpose, and on what legal basis.
1. Controller
Dr.-Ing. Sebastian Weiß, Hauptplatz 17/1, 8160 Weiz, Austria
Email: sebastian@weissexplorers.com
A data protection officer is not legally required and has not been appointed.
2. Your rights
You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21). Any consent you give can be withdrawn at any time with effect for the future.
If you believe your data is being processed unlawfully, you may lodge a complaint with the Austrian Data Protection Authority:
Österreichische Datenschutzbehörde, Barichgasse 40–42, 1030 Vienna, Austria, dsb.gv.at
3. Hosting and log files
This online shop runs on servers operated by creoline GmbH, Bergstr. 9a, 48341 Altenberge, Germany.
Operational and error logs of the web server and the shop software (Shopware) are generated as part of normal operation. These may contain:
- the IP address of the requesting device
- the date and time of the request
- the page or file requested and the HTTP status code
- browser type and operating system
These logs are used solely for error analysis, maintaining operations, and defending against abusive access. The legal basis is a legitimate interest in the secure and stable operation of the shop (Art. 6 (1) (f) GDPR).
A data processing agreement under Art. 28 GDPR is in place with creoline GmbH.
4. Cookies and consent
On your first visit, a consent banner provided by CCM19 (Papoo Software & Media GmbH, Germany) is displayed. You use it to give or refuse consent to non-essential processing. Your choice is stored locally in your browser so that it does not have to be requested again on your next visit.
Strictly necessary cookies are set so that basic functions (such as the shopping cart, sign-in, and completing an order) can work. No consent is required for these (§ 165 (3) Austrian Telecommunications Act 2021).
You can withdraw or change your consent at any time via the cookie settings link in the footer.
5. Analytics with Matomo
Following your consent, Matomo Cloud (InnoCraft Ltd., New Zealand; servers located in Germany) is used to analyse how this shop is used. Cookies are set and data such as a truncated IP address, pages viewed, time on page, referrer, and browser and operating system type are processed.
Your IP address is anonymised before storage. The data is not merged with other sources and is not passed on to third parties for advertising purposes.
The legal basis is your consent (Art. 6 (1) (a) GDPR, § 165 (3) TKG). A data processing agreement is in place with InnoCraft. Retention period: [insert value from your Matomo configuration].
6. Customer account
You can create a customer account to place orders. Creating an account requires an email address and a password; further details (such as name and address) are provided when you place an order. An order is also possible without a customer account (guest checkout).
The data stored in your customer account is used to manage your orders, provide access to purchased digital products, and process future orders. The legal basis is performance of a contract and pre-contractual measures (Art. 6 (1) (b) GDPR).
You can delete your customer account at any time. Data that is subject to statutory retention obligations (see section 7) is retained until those periods expire and is then deleted.
7. Orders, invoicing and retention
When you place an order, the data required to process it is processed: in particular your name, email address, billing address, the products ordered, and payment information. This data is used to conclude and perform the contract, to provide the digital products, and to issue an invoice.
The legal basis for processing order data is performance of a contract (Art. 6 (1) (b) GDPR). Invoicing and the retention of accounting-relevant documents is additionally based on a legal obligation (Art. 6 (1) (c) GDPR) in conjunction with Austrian tax and commercial law.
Invoices and accounting-relevant records are retained for the statutory period of seven years (§ 132 Austrian Federal Fiscal Code / BAO). After this period, the data is deleted, unless other retention obligations apply.
8. Digital products and delivery
The shop sells digital content that is not supplied on a tangible medium (in particular blueprints and build guides). After your payment has been received, the products are made available to you as a download link or via your customer account.
To provide the download, technical data (such as the time of provision and the assignment to your order and customer account) is processed. The legal basis is performance of a contract (Art. 6 (1) (b) GDPR).
9. Payments (PayPal)
Payments in the shop are processed via PayPal (PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg). PayPal also handles credit and debit card payments as well as wallet payments such as Apple Pay and Google Pay offered in the shop.
When you choose a payment method and complete a purchase, the PayPal JavaScript is loaded and the payment data required for the transaction is transmitted to PayPal. Depending on the payment method, PayPal may set cookies and process data such as your name, email address, billing address, payment method, IP address, and device information. I do not receive full card details.
The legal basis is performance of a contract (Art. 6 (1) (b) GDPR) and a legitimate interest in the secure provision of payment functions and fraud prevention (Art. 6 (1) (f) GDPR). PayPal acts as an independent controller for its own processing; for details see PayPal's privacy statement at paypal.com.
10. Fonts
The shop loads the fonts it uses (Inter) directly from its own server. No connection to third-party font providers is established and no data is transmitted to third parties for this purpose.
11. Contacting me
If you write to me by email, your details are stored in order to process your enquiry. The legal basis is Art. 6 (1) (b) GDPR (pre-contractual measures) or (f) (legitimate interest in responding). The data is deleted once it is no longer needed and no statutory retention obligations apply.
12. Changes
This privacy policy will be updated whenever processing in this shop changes. The version published here is the one that applies.