Draft for review. As of 6 October 2026. Business details must be confirmed before publication.
1. Data controller
Maksutoski Lebensmittel GmbH
Caracalla-Straße 16a, 4470 Enns, Oberösterreich, Österreich
Telephone: +43 660 342 31 78
Email: info@maksutoska.at or office@maksutoska.at
For questions about privacy or exercising your rights, please use the contact details above.
2. Website visits and hosting
Visiting a website involves processing technically necessary connection data, which may include your IP address, date and time, requested address, browser and operating system information, and status messages. This enables website delivery, fault analysis and prevention of misuse. The legal basis is Article 6(1)(f) GDPR; our legitimate interest is safe and reliable operation.
To be added: Hosting provider, processing location, data actually logged and the specific deletion period for server logs. Where service providers process personal data on our behalf, data-processing requirements must be observed.
3. Enquiries and business communication
When you contact us by email or telephone, we process the information you provide, particularly your name, company and contact details and enquiry content. This is to handle your request, provide advice and, where relevant, prepare or perform a contract.
The legal basis is Article 6(1)(b) GDPR where communication relates to a contract with you. For company contact persons or other enquiries, processing relies on Article 6(1)(f) GDPR, particularly our interest in handling business enquiries.
4. Orders and deliveries
To fulfil an agreed order, we process necessary company, contact, billing, order and delivery data. Data is shared only as necessary with involved transport, IT or accounting providers and with authorities where legally required.
Depending on context, processing relies on Article 6(1)(b), (c) or (f) GDPR. Actual recipients must be confirmed against our business processes before publication.
5. Cookies, fonts and website functions
This website theme loads fonts, styling and navigation locally. It includes no built-in analytics or advertising trackers or embedded social feeds. Technically necessary CMS cookies and any additional live-system services must be separately checked and documented here.
If services requiring consent are introduced later, they may be activated only after an appropriate choice. Consent must be revocable.
6. External links and social networks
Our site links to Instagram, Facebook, TikTok, WhatsApp and an external map service. These are links, not embedded content. Opening a link leaves our site or launches the relevant app. Subsequent processing follows that provider's privacy notice.
When you contact us on WhatsApp, we also process the information you send there to handle your enquiry. The platform may process its own data and transfer data outside the European Economic Area. You can always contact us by phone or email instead. Please do not send particularly sensitive information via social networks.
7. Retention and transfers
Personal data is kept only as long as needed for its purpose, then deleted unless legal retention duties or legitimate grounds, such as asserting or defending claims, prevent deletion.
Specific retention periods for enquiries, business data and technical logs, and the email and IT providers used, must be set before publication. Transfers outside the EEA must meet Articles 44 et seq. GDPR; the actual legal basis must be documented for the services used.
8. Your rights
Subject to legal requirements, you have rights of access, rectification, erasure, restriction and data portability. You may withdraw consent at any time for the future; earlier lawful processing remains unaffected.
Objection: If processing relies on Article 6(1)(f) GDPR, you may object for reasons relating to your particular situation. You may object to processing for direct marketing at any time.
You may also complain to a data protection supervisory authority. In Austria, this is the Austrian Data Protection Authority.
9. Updates
This policy must be updated if the website, services used or data processing change.