Privacy Policy GLOWERA

Effective date: June 10, 2026. Controller contact: [email protected].

Privacy

Who We Are

GLOWERA GmbH operates the glowera.at storefront. Our business address is Sieveringer Straße 9/Top 12, 1190 Wien, Austria.

We act as controller for personal data collected through the website, checkout, customer support, newsletter, account features, fraud prevention, cookies and legal compliance workflows.

Privacy contact: [email protected]. We handle personal data under GDPR and UK GDPR expectations where applicable. We have not appointed a Data Protection Officer unless later stated on this page.

Privacy

Personal Data We Process

Identity and contact details, such as name, email, billing address and delivery address.
Order and delivery data, including products purchased, order history, carrier tracking status and return/refund correspondence.
Payment confirmation data, fraud-prevention signals and transaction references. Full card details are handled by payment providers and are not stored by GLOWERA.
Support messages, product questions, reviews, marketing preferences, cookie choices, device/browser data, IP address, security logs and analytics identifiers where permitted.

Privacy

Purposes and Legal Bases

Contract performance: processing orders, payment confirmation, tracked home delivery, customer accounts, returns and refunds.
Legal obligation: tax, accounting, product safety, consumer-law records, sanctions checks and responses to lawful authority requests.
Legitimate interests: website security, fraud prevention, service improvement, basic business analytics, legal claims and customer service quality.
Consent: non-essential cookies, analytics or marketing where consent is required, newsletters and similar direct marketing choices.
Vital or public-interest grounds may apply only in exceptional legally required cases.

Privacy

Recipients and International Transfers

We share data only where needed with hosting, ecommerce, payment, delivery, analytics, email, support, fraud-prevention, accounting, legal, tax and professional-service providers.

Where data is transferred outside the EEA, Switzerland or the UK, we use appropriate safeguards such as adequacy decisions, standard contractual clauses, UK transfer mechanisms or other lawful transfer tools.

Privacy

Retention

Order, invoice and tax records are kept for the legally required retention period. Support and return records are kept while needed to handle requests, warranties, legal claims and compliance.

Cookie consent records are kept until consent is withdrawn, refreshed or expires. Marketing records are kept until you unsubscribe or object, plus a limited suppression record to respect that choice.

Privacy

Your Rights

Depending on your location and the applicable law, you may request access, correction, deletion, restriction, portability, objection to processing and withdrawal of consent. You may also object to direct marketing at any time.

Contact [email protected]. You may complain to your local data protection authority, including the Austrian Data Protection Authority, the UK ICO, the Swiss FDPIC, or the competent authority in your country.

Providing checkout data is necessary to form and perform a purchase contract. If you do not provide required order details, we may be unable to process the order.

Privacy

Automated Decisions and Children

We do not use solely automated decisions that produce legal or similarly significant effects on customers. Fraud-prevention tools may flag orders for manual review.

The website is not intended for children. Customers must have legal capacity to place an order or act with appropriate guardian consent where local law requires it.

Customer support for privacy and account questions is available at [email protected].