Data Privacy & Cookies

Privacy Policy & Cookies

DOMUS VIVENDI Online Shop
Last updated: 9 October 2026

1. Data Controller

The controller responsible for the processing of personal data in connection with our online shop is:

DOMUS VIVENDI FASHION GmbH
Westbahnstraße 5a
1070 Vienna, Austria
Phone: +43 670 184 67 05
Email: contact@domusvivendi.store
Website: https://shop.domusvivendi.store

This Privacy Policy explains how we process personal data when you visit our website, place an order, contact us or interact with our marketing services.

2. Personal Data We Process

Depending on how you use our online shop, we may process the following categories of personal data:

  • Contact and identification data: Name, billing and delivery address, email address and telephone number, where provided.

  • Order and contractual data: Purchased products, order numbers, transaction amounts, order history, delivery and return information.

  • Payment information: Selected payment method, payment status, transaction references and information necessary to process payments.

  • Communication data: Messages, enquiries and related correspondence.

  • Technical and usage data: IP addresses, browser and device information, access times, pages visited, cookies and similar identifiers.

  • Marketing data: Newsletter subscriptions, consent records and, where applicable, information about interactions with newsletters and advertising.

We process personal data only where an appropriate legal basis exists and to the extent necessary for the purposes described below.

3. Purposes and Legal Bases

We process personal data under the following provisions of the General Data Protection Regulation (GDPR):

Article 6(1)(b) GDPR – Performance of a contract

For processing orders and payments, delivering products, managing returns and responding to contractual or pre-contractual enquiries.

Article 6(1)(c) GDPR – Legal obligations

For compliance with statutory accounting, tax, recordkeeping and other legal requirements.

Article 6(1)(f) GDPR – Legitimate interests

For maintaining website security and functionality, preventing misuse, responding to general enquiries and establishing or defending legal claims, provided that our interests are not overridden by the rights and freedoms of the individuals concerned.

Article 6(1)(a) GDPR – Consent

For newsletter subscriptions and consent-based analytics, advertising and personalisation technologies.

Consent may be withdrawn at any time with effect for the future. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

4. Shopify E-Commerce Platform

Our online shop operates on Shopify, which provides the technical infrastructure for our website, shopping cart, checkout, order management and other e-commerce functions.

Shopify may process personal data including contact details, order information, technical connection data and information about the use of our shop.

Depending on the processing activity, Shopify may act as our processor or as an independent controller.

We have enabled Shopify Network Intelligence, a feature through which Shopify may use certain customer information together with data from other Shopify services to develop and improve additional services, including personalisation and advertising-related functionality.

The applicable allocation of data protection responsibilities is governed by Shopify's relevant terms and privacy information.

Further information: https://www.shopify.com/legal/privacy

Our Shopify data-hosting region is set to the European Union. This does not necessarily exclude all processing or transfers of personal data outside the European Economic Area.

5. Orders and Customer Accounts

When you place an order, we process the personal data necessary to fulfil the purchase contract.

This includes your name, contact details, billing and delivery address, ordered products, and payment and delivery information.

The legal basis is Article 6(1)(b) GDPR. Processing required for statutory recordkeeping obligations is based on Article 6(1)(c) GDPR.

Where customer accounts are available and used, we process the information necessary to provide and manage those accounts.

If you do not provide the information necessary to fulfil an order, we may be unable to conclude or perform the purchase contract.

6. Payment Processing

We use Shopify Payments to process online payments.

Depending on availability and the customer's selection at checkout, payment options may include credit and debit cards, Shop Pay, Apple Pay, Google Pay and supported local payment methods.

The information required to process a transaction is transferred to Shopify Payments and, where necessary, the relevant payment providers, banks and card networks.

Processing is based on Article 6(1)(b) GDPR and, where applicable, legal obligations and legitimate interests in fraud prevention.

We receive and retain payment-related information required for order management, such as payment status and transaction references. Sensitive card payment data is processed through the designated payment systems.

PayPal is currently not offered as a payment method in our online shop.

Further information: https://www.shopify.com/legal/privacy

7. Shipping and Delivery

To deliver orders, we share the personal data necessary for shipment with the relevant logistics and delivery providers.

This may include your name, delivery address, email address, telephone number where necessary, and shipment-related information.

We use Sendadrop for shipping administration. Additional carriers may be involved depending on the destination and shipping service.

The legal basis is Article 6(1)(b) GDPR. Where required by law, particularly for international shipments, Article 6(1)(c) GDPR may also apply.

8. Contacting Us

When you contact us by email, telephone or through a contact form, we process the information you provide to respond to your enquiry.

The legal basis is Article 6(1)(b) GDPR where the enquiry concerns a contract or pre-contractual measures. Otherwise, processing is based on our legitimate interest in responding to enquiries under Article 6(1)(f) GDPR.

9. Cookies and Similar Technologies

Our website uses cookies and similar technologies to provide essential shopping functions and, depending on your preferences, personalisation, analytics and marketing features.

We use Shopify's cookie consent management system.

The following categories are available:

Strictly necessary cookies: Required for essential website functions, including shopping cart, checkout, security and storage of privacy preferences.

Personalisation: Technologies that may adapt content and functions based on your interactions with our website.

Marketing: Technologies used to measure advertising performance and support interest-based advertising.

Analytics: Technologies used to understand website usage and improve our services.

Where legally required, we obtain your consent before using non-essential cookies or similar technologies that access information on your device.

The applicable legal provisions include Section 165(3) of the Austrian Telecommunications Act 2021 (TKG 2021) and Article 6(1)(a) GDPR.

Our cookie banner allows you to accept all optional categories, reject them or save individual preferences.

You can change or withdraw your consent at any time through the cookie and privacy settings available in our online shop.

10. Google Analytics

We use Google Analytics to analyse the use of our online shop.

The service is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Depending on the configuration, the service may process page views, interactions, device and browser characteristics, approximate location information and technical identifiers.

Where consent is required, processing is based on Article 6(1)(a) GDPR and the applicable provisions of Austrian telecommunications law.

You may withdraw your consent through the cookie settings.

Further information: https://policies.google.com/privacy

11. Google Services and Advertising Measurement

We use the Shopify Google & YouTube integration to connect our product catalogue with Google services and support advertising analysis and performance measurement.

Depending on the activated functions and applicable consent preferences, information about website visits, product interactions and purchases may be processed.

Where consent-based tracking or advertising technologies are used, the legal basis is Article 6(1)(a) GDPR.

The transfer of product catalogue information to Google Merchant Center is distinct from the processing of visitors' personal data.

Further information: https://policies.google.com/privacy

12. Meta – Facebook and Instagram

We use the Shopify Facebook & Instagram by Meta integration.

For users in the European Economic Area, the relevant provider is generally Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland.

Our integration currently uses the Maximum data-sharing setting and a connected Meta Pixel dataset. Depending on the configuration, this may involve the Meta Pixel, advanced matching and the Conversions API.

Data processed may include page views, product interactions, shopping cart activity, purchases, technical identifiers and, where applicable, matching contact information.

These technologies support advertising performance measurement, campaign optimisation and personalised advertising.

Where consent is legally required, the processing is based on Article 6(1)(a) GDPR. This also applies to consent-dependent server-side marketing data transfers.

Depending on the processing activity, Meta may act as an independent controller or as a joint controller with us. The applicable Meta privacy terms provide further information.

Further information: https://www.facebook.com/privacy/policy/

13. Newsletter – MailerLite

You can subscribe to our newsletter through the newsletter registration field on our website.

We use MailerLite to manage subscriptions and send newsletters. Registration information is automatically transferred to MailerLite.

Subscriptions use a double opt-in process. After registering, you receive a confirmation email and must confirm your subscription before receiving the newsletter.

We process your email address, relevant subscription confirmation records and any additional information voluntarily provided.

Where the corresponding features are used, delivery, opening and click interaction data may also be processed.

The legal basis for sending newsletters is your consent under Article 6(1)(a) GDPR.

You can withdraw your consent at any time by using the unsubscribe link in a newsletter or contacting contact@domusvivendi.store.

Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

Further information: https://www.mailerlite.com/legal/privacy-policy

14. Recipients and Service Providers

We use external service providers to operate our business and online shop.

These include, in particular:

  • Shopify for e-commerce operations and payment processing

  • Payment service providers and financial institutions

  • Sendadrop and relevant delivery companies

  • MailerLite for newsletter services

  • Google for analytics, product catalogue integration and advertising services

  • Meta for Facebook and Instagram integration and advertising measurement

  • IT, hosting, accounting and other professional service providers where necessary

Personal data is disclosed only where an appropriate legal basis exists.

Where providers process personal data on our behalf, we use the contractual arrangements required by Article 28 GDPR.

15. International Data Transfers

The use of Shopify, Google, Meta, MailerLite and other service providers may involve processing personal data outside the European Economic Area.

Where required, international transfers are based on an adequacy decision of the European Commission or appropriate safeguards, such as the European Commission's Standard Contractual Clauses.

For transfers to the United States, the EU-US Data Privacy Framework adequacy decision may apply where the recipient is appropriately certified and the processing falls within the scope of that certification.

Further information about transfer mechanisms is available in the relevant providers' privacy notices.

16. Data Retention

We retain personal data only for as long as necessary for the relevant purpose or to comply with applicable legal obligations.

In particular:

  • Order and invoice data: Retained in accordance with statutory accounting and tax requirements, generally for seven years unless a longer retention period is required.

  • Contractual and communication data: Retained for the period necessary to perform the contract, respond to enquiries or establish, exercise or defend legal claims.

  • Newsletter data: Retained until consent is withdrawn or the subscription is cancelled. Records necessary to demonstrate a previous consent may be retained for a legally justified additional period.

  • Cookie and analytics data: Retained according to the relevant technical settings, processing purposes and applicable retention and deletion rules.

When the relevant purpose no longer applies, data is deleted or anonymised unless further retention is legally required.

17. Your Data Protection Rights

Subject to the requirements of the GDPR, you have the following rights:

  • Access to your personal data (Article 15 GDPR)

  • Rectification of inaccurate data (Article 16 GDPR)

  • Erasure (Article 17 GDPR)

  • Restriction of processing (Article 18 GDPR)

  • Data portability (Article 20 GDPR)

  • Objection to certain processing activities (Article 21 GDPR)

  • Withdrawal of consent at any time with effect for the future (Article 7(3) GDPR)

To exercise your rights, please contact:

contact@domusvivendi.store

You also have the right to lodge a complaint with a competent data protection supervisory authority.

The Austrian supervisory authority is:

Austrian Data Protection Authority (Datenschutzbehörde)
https://www.dsb.gv.at

18. Automated Decision-Making

We do not make our own decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you.

Certain service providers may use automated procedures for fraud prevention, risk assessment or personalisation. Further information is available in their respective privacy notices.

19. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our processing activities, service providers or applicable legal requirements.

The current version will be available on our website.