Vendoty | Launch Your Store with 0% Commission

Last updated: July 2025

1. Data Controller

Vendoty ("we", "us", "our") operates vendoty.com. For questions about this Privacy Policy or the processing of your personal data, contact us at: info@vendoty.com | Am langen Felde 21/1, Vienna, Austria.

2. Data We Collect

We collect data you provide directly (name, e-mail address, phone number, company details via contact or demo-request forms), data generated automatically during your visit (IP address, browser type, pages visited, referrer URL, timestamps via server logs and analytics), and data you submit through our customer onboarding process (business name, billing address).

3. Purpose and Legal Basis

We process your data to respond to enquiries and provide our software services (Art. 6 §1(b) GDPR — performance of a contract or pre-contractual measures), to send service-related communications (Art. 6 §1(b)), to improve and secure our platform (Art. 6 §1(f) — legitimate interest), and to comply with legal obligations (Art. 6 §1(c)).

Where you have given explicit consent (e.g. newsletter subscription), the legal basis is Art. 6 §1(a) GDPR. You may withdraw consent at any time without affecting the lawfulness of prior processing.

4. Cookies and Analytics

We use essential cookies necessary for the website to function. With your consent we also use analytics cookies (Google Analytics 4) to understand how visitors use our site. You can manage your cookie preferences via the cookie consent banner displayed on your first visit. Analytics data is pseudonymised and stored on Google's servers in accordance with Google's Privacy Policy.

5. Data Sharing

We do not sell your personal data. We share data with trusted service providers (hosting, email delivery, analytics) under data-processing agreements. If required by law, we may share data with authorities. Data transfers outside the EEA are covered by Standard Contractual Clauses or adequacy decisions.

6. Retention

Contact enquiry data is retained for 12 months or until your request is resolved. Contract-related data is kept for 7 years to meet Austrian statutory retention requirements. Analytics data is retained for 14 months. Data is deleted or anonymised when no longer necessary.

7. Your Rights

Under GDPR you have the right to access, rectify, or erase your personal data; to restrict or object to processing; and to data portability. You also have the right to lodge a complaint with the Austrian Data Protection Authority (Datenschutzbehörde, dsb.gv.at). To exercise your rights, contact us at info@vendoty.com. We will respond within 30 days.

8. Security

We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss, or disclosure. Our platform uses HTTPS encryption, access controls, and regular security audits.

9. Changes to This Policy

We may update this Privacy Policy periodically. The "Last updated" date at the top reflects the most recent revision. Continued use of our services after any change constitutes acceptance of the updated policy.