Data controller

Horwath OG, Ruster Straße 82a / TOP 6, 7000 Eisenstadt, Email: [email protected], Phone: +43 676 4777829.

Voucher shop and Voucher Studio

When purchasing, providing, and redeeming a voucher, we process the data necessary for the processing of the contract.

Processed data

  • Name and email address of the purchaser
  • optionally provided names and personal message for the gift recipient
  • voucher amount, voucher code, issue and expiry dates, status, and remaining balance
  • Stripe Checkout session, Payment Intent, and receipt references
  • technical security and log data such as IP address, request ID, and audit events
  • redemption time, location, and executing employee account

A postal address is not collected in the online voucher shop. Full card or bank details are not stored in Voucher Studio. The entry and processing of payment data takes place on the payment page provided by Stripe.

Purposes and legal bases

  • Contract initiation, contract execution, and provision of the voucher: Art. 6(1)(b) GDPR
  • statutory retention and documentation obligations: Art. 6(1)(c) GDPR
  • Abuse prevention, traceability and IT security: Art. 6(1)(f) GDPR

Payment processing via Stripe

We use Stripe for payment processing. In this context, in particular contact and payment data, the payment amount, technical data and information about the payment method used may be transmitted to Stripe Payments Europe, Limited and other Stripe companies or payment service providers involved depending on the payment method. Stripe also processes data for payment processing, fraud prevention, security and compliance with legal obligations. Further information can be found in the Stripe privacy notice.

If data are processed outside the European Economic Area, Stripe states that the transfer is based in particular on applicable adequacy decisions, the EU‑US Data Privacy Framework and standard contractual clauses.

Further recipients

Recipients may also include our hosting and email providers, and—where necessary—tax advisors, authorities and other parties involved in fulfilling the contract or pursuing legal claims.

Retention and Deletion

Invoices, payment and accounting records are generally retained for seven years from the end of the relevant calendar year; in the case of pending proceedings, a longer retention may be required.

Voucher, residual value and redemption data are stored for as long as is necessary for the validity and redemption of the voucher and for asserting, exercising or defending legal claims. Optional recipient texts that are no longer required will then be deleted or anonymized.

Your rights

Information on access, rectification, erasure, restriction, objection, data portability and complaint options can be found in our general Privacy policy. Please direct data protection inquiries to [email protected].

Online cancellation function

If you use the online cancellation function, we will store your name, your e-mail address, the contract details, any additional message you may have provided, as well as the time of receipt. This information is used to assign and process your declaration and to send a confirmation of receipt via e-mail. The declaration will remain stored for processing even in the event of a mail delivery failure.