Last updated: 30 January 2026
Controller
Kos-PureAqua FlexCo
Stauderpl. 5, 9020 Klagenfurt, Austria
Email: sales@kospureaqua.com
Scope
This Privacy Policy applies to our website, online shop, and related communications (e.g. enquiries, customer support, newsletter).
We operate within Austria and the European Union and serve both B2C and B2B customers.
Categories of personal data we process
Data you provide
- Name, email address, phone number (if provided)
- Company name and VAT ID (B2B, where applicable)
- Billing and delivery address
- Order, invoice, and contract information
- Communications and support requests
Payment data
- Stripe: transaction references, payment status and metadata (payment card details are processed exclusively by Stripe; we do not store full card numbers)
- Bank transfer: account holder name, IBAN, payment reference, and payment status as shown on bank statements
Data collected automatically
- IP address, browser type, device information, timestamps
- Website usage and interaction data
- Cookies and similar technologies (see section 7)
Purposes and legal bases
We process personal data only where permitted under the GDPR and Austrian law:
- Art. 6(1)(b) GDPR – Contract / pre-contractual measures
Operation of the online shop, order processing, delivery, customer support, warranty and returns. - Art. 6(1)(c) GDPR – Legal obligation
Accounting, tax and statutory retention requirements. - Art. 6(1)(f) GDPR – Legitimate interests
Website security, fraud prevention, system stability, and basic service improvement (only where balanced against your rights). - Art. 6(1)(a) GDPR – Consent
Newsletter subscription, non-essential cookies, analytics, heatmaps, and marketing technologies.
Recipients of personal data
Personal data is shared only where necessary, including with:
- Zoho Corporation (Zoho One / Zoho Commerce / Zoho Campaigns / Zoho PageSense)
Website operation, shop functionality, analytics, newsletters, and business administration. - Payment providers: Stripe
- Banks: for bank transfer processing
- Shipping/logistics providers: where delivery is required
- IT and security providers: for secure operation of our services
We do not sell personal data.
Zoho as processor (Zoho One)
We use Zoho One as our integrated business platform, including Zoho Commerce for our online shop, Zoho Campaigns for newsletters, and Zoho PageSense for analytics and website optimisation.
Zoho acts as a data processor under the GDPR and provides a Data Processing Addendum (DPA).
According to Zoho’s documentation, data for EU customers is primarily processed within the EU, with limited access from outside the EU for technical support purposes under appropriate contractual safeguards (e.g. EU Standard Contractual Clauses).
Cookies, analytics, heatmaps, and tracking technologies
General
We use cookies and similar technologies.
Under Austrian law, non-essential cookies require prior consent, while strictly necessary cookies may be used without consent.
Zoho Commerce cookies (mandatory)
Zoho Commerce sets mandatory cookies required for the operation of the online shop and session management.
According to Zoho, these cookies are also used for store-level statistics. Instead of storing full IP addresses, the country is inferred from the IP address and stored.
These cookies are considered strictly necessary for providing the requested service (online shop functionality).
Analytics and heatmaps (Zoho PageSense)
We use, or plan to use, Zoho PageSense to analyse website usage, improve performance, and understand how visitors interact with our site (e.g. page views, navigation behaviour, heatmaps).
- Legal basis: your consent (Art. 6(1)(a) GDPR)
- PageSense is activated only after you give consent via our cookie banner.
- You can withdraw consent at any time via the cookie settings or your browser.
Marketing pixels and third-party tracking
At present, we do not knowingly embed third-party marketing pixels (such as Meta, LinkedIn, or Google Ads).
If such tools are added in the future, they will only be activated after your explicit consent, and this Privacy Policy will be updated accordingly.
This approach ensures transparency and compliance with GDPR and Austrian cookie rules.
Cookie control and withdrawal
You can:
- manage or withdraw consent via our cookie banner/settings, and
- delete or block cookies via your browser settings.
Please note that disabling strictly necessary cookies may limit website functionality.
Newsletter (Zoho Campaigns)
If you subscribe to our newsletter, we process your email address and any optional information you provide.
- Legal basis: your consent (Art. 6(1)(a) GDPR)
- Provider: Zoho Campaigns
- Unsubscribe: via the link in every email or by contacting sales@kospureaqua.com
Retention periods
Personal data is stored only as long as necessary for the stated purposes.
Accounting and tax-relevant records are retained for the legally required periods under Austrian law. Other data is deleted or anonymised once no longer required.
Data security
We implement appropriate technical and organisational measures, including HTTPS/TLS encryption, access controls, and security safeguards appropriate to the risk.
11. Your rights
You have the right to access, rectification, erasure, restriction, data portability, and to object to processing.
You may withdraw consent at any time without affecting prior lawful processing.
Requests can be sent to sales@kospureaqua.com.
Supervisory authority
If you believe your data protection rights have been violated, you may lodge a complaint with:
Austrian Data Protection Authority (Datenschutzbehörde)
Barichgasse 40–42, 1030 Vienna, Austria
Email: dsb@dsb.gv.at
