Privacy Policy

Privacy Policy

Transparent. Understandable. Careful.

Here we inform you which personal data we process in connection with our website, enquiries, newsletter and order processing.

1. General

The protection of your personal data is important to us. We process personal data exclusively on the basis of applicable statutory provisions, in particular the General Data Protection Regulation (GDPR), the Austrian Data Protection Act (DSG) and the Telecommunications Act (TKG).

In this Privacy Policy, we inform you which personal data we process in connection with our website, webshop, contact and enquiry forms, newsletter offering and the processing of orders and offers.

2. Controller

The controller responsible for data processing on this website is:

Company

Three Souls e.U.
Margaretenstraße 89/Top 24
1050, Wien
Österreich

Contact

E-mail: office@promosouls.com
Telephone: +43 699 10822919
Website: promosouls.com

3. Which Data We Process

Depending on your use of our website and services, the following data in particular may be processed:

  • name, company, address and contact details
  • e-mail address and telephone number
  • billing and delivery address
  • order and payment information
  • enquiry data and offer data
  • uploaded logos, print data, graphics and other files
  • technical data such as IP address, browser, operating system, time of access and server logfiles
  • newsletter registration data
  • communication content from forms, e-mails or other enquiries

4. Purposes and Legal Bases

We process personal data in particular for the following purposes:

  • provision and operation of our website
  • handling enquiries
  • preparing offers
  • processing orders
  • production and delivery of promotional products
  • processing print data, logos and design templates
  • customer communication
  • invoicing and accounting
  • fulfilment of statutory retention obligations
  • sending newsletters if you have consented
  • improving our website and services
  • protection against misuse, fraud and technical attacks

Legal bases

Depending on the purpose, processing is carried out on the basis of contract fulfilment or pre-contractual measures, legal obligations, legitimate interests or your consent.

5. Contact Form and Enquiries

If you contact us via a form, by e-mail or by telephone, we process the data you provide to handle your enquiry.

This includes in particular name, company, e-mail address, telephone number, message text, desired products or services and uploaded files, if any.

Processing is carried out to perform pre-contractual measures or on the basis of our legitimate interest in handling your enquiry.

Your data will not be passed on to third parties without your consent unless this is required to handle your enquiry, prepare an offer or fulfil the contract.

7. Webshop, Order and Contract Processing

If you order via our webshop or accept an offer, we process the data required for contract processing.

This includes in particular name and company, billing address, delivery address, e-mail address, telephone number, ordered products, quantities, variants and customisations, payment and invoice data as well as print data and production information.

This data is required to process your order, produce and deliver the goods, issue invoices and fulfil statutory obligations.

Payment processing

Depending on the payment method offered, payment service providers may be involved. The data required for payment is transmitted to the respective payment service provider.

Payment providers used: [add Stripe / PayPal / Klarna / bank transfer / other providers or delete what does not apply]

Shipping and delivery

For delivery of goods, personal data may be passed on to shipping service providers or logistics partners. This concerns in particular name, delivery address, e-mail address, telephone number where required for delivery, and shipment data.

Shipping service providers used: [add DPD / DHL / GLS / Österreichische Post / forwarding agent / other providers]

8. Newsletter

If you subscribe to our newsletter, we process your e-mail address and, where applicable, your name in order to send you information about products, offers, promotions and news.

Subscription takes place only on the basis of your consent. You can withdraw this consent at any time, for example via the unsubscribe link in the newsletter or by sending us a message.

We may use Mailchimp to send newsletters. In newsletter dispatch, in particular e-mail address, name, time of registration, IP address at registration and technical information about the device used may be processed.

If newsletter tracking is used, this is done only on the basis of your consent where legally required.

You can unsubscribe from the newsletter at any time via the unsubscribe link in the newsletter or by sending us a message.

9. Cookies and Server Logfiles

Cookies

Our website uses cookies and comparable technologies. Cookies are small text files stored on your device.

We distinguish between technically necessary cookies, functional cookies, statistics or analytics cookies, marketing cookies and cookies from external services.

Technically necessary cookies are required for the website and webshop to function. Other cookies are used only if you give your consent, where such consent is required.

Server logfiles

When you visit our website, technical data is processed automatically. This includes in particular IP address, date and time of access, accessed page or file, browser type and version, operating system, referrer URL, transmitted data volume and server status messages.

This data is technically required to provide the website, ensure system security and analyse errors.

10. Hosting and External Services

Hosting

Our website is operated by an external hosting provider. The hosting provider processes technical data as part of website operation.

Where required, a data processing agreement pursuant to Art. 28 GDPR exists with the hosting provider.

Hosting provider: Promotron

External services and embedded content

External services may be integrated on our website, for example maps, videos, fonts, payment services, analytics tools or security services.

Personal data, in particular IP addresses and technical access data, may be transmitted to third-party providers.

The following services may be used: [Google Maps / Google Fonts local or external / YouTube / Vimeo / Google reCAPTCHA / Google Ads / Meta Pixel / Mailchimp / Stripe]

Social media

We may provide links to our profiles on social networks on our website. Merely visiting our website generally does not transfer personal data to these networks, unless active social media plugins are integrated.

If you click a social media link, you leave our website. The respective platform operator is responsible for data processing on that platform.

11. Recipients and Processors

Personal data may be passed on to the following recipients where required:

  • IT and hosting service providers
  • payment service providers
  • shipping service providers
  • production partners and suppliers
  • tax advisers and accounting
  • legal advisers, if required
  • authorities, where legally required
  • newsletter service providers
  • technical service providers for maintenance and support

Disclosure takes place only where required for contract fulfilment, fulfilment of statutory obligations, legitimate interests or on the basis of your consent.

Data transfer to third countries

Some service providers we use may be based outside the European Union or the European Economic Area. Transfer of personal data to third countries takes place only if a suitable legal basis exists, for example an adequacy decision, EU standard contractual clauses, express consent or necessity for contract fulfilment.

12. Storage Duration

We store personal data only as long as required for the respective purposes.

  • enquiry data: as long as required for processing and follow-up
  • offer and contract data: for the duration of the business relationship and statutory retention obligations
  • invoice and accounting data: according to statutory retention obligations
  • newsletter data: until consent is withdrawn
  • server logfiles: for an appropriate period to ensure technical operation
  • print data and uploaded files: as long as required for offer, production, complaint or repeat order

After expiry of the respective periods, the data is deleted or anonymised unless statutory obligations prevent this.

13. Your Rights

Under the GDPR, you have in particular the following rights:

  • right of access
  • right to rectification
  • right to erasure
  • right to restriction of processing
  • right to data portability
  • right to object
  • right to withdraw consent
  • right to lodge a complaint with a supervisory authority

If you want to exercise any of these rights, please contact us at: [e-mail address]

Withdrawal of consent

If processing of your data is based on consent, you can withdraw that consent at any time with effect for the future.

Right to lodge a complaint

If you believe that the processing of your personal data violates data protection law, you have the right to lodge a complaint with the competent supervisory authority.

Österreichische Datenschutzbehörde
Barichgasse 40–42
1030 Wien
Website: dsb.gv.at

14. Data Security

We take appropriate technical and organisational measures to protect your personal data against loss, misuse, unauthorised access, alteration or disclosure.

These include in particular encrypted transmission via SSL/TLS, access restrictions, technical security measures, regular maintenance of systems and careful selection of service providers.

15. Changes to this Privacy Policy

We reserve the right to adapt this Privacy Policy if technical, legal or organisational changes occur.

The current version is available on our website.

Last updated: May 2026

Any questions about privacy?

If you have questions about the processing of your personal data, please contact us directly.