Privacy Policy

Privacy Policy – Yechiel Judaica (Vienna)
Updated: December 22, 2025

The Yechiel Judaica website/service (“the site”, “we”) is committed to protecting users’ privacy in accordance with applicable law and accepted principles of privacy and information security. This document explains what information we collect, to whom it is disclosed, how we protect it, and what your rights are. In the event of a material change in how personal information is collected, used, or disclosed, we will provide clear notice before the updated processing begins.

  1. Who we are and contact details
    Business name: Yechiel Judaica (Vienna)
    Phone: ‎+43-676-83181807
    Email: ymm7770@gmail.com

  2. What information we collect and its source
    a. Information you provide voluntarily: name, phone, email, shipping/billing address, order details, invoice details (such as name/address/identification number for invoicing if provided), communication preferences and customer service inquiries content. Passwords (if any) are stored as hash only.
    b. Information collected automatically: IP address, cookie/browser identifiers, device/operating system/language type, pages viewed, time spent, clicks and error data.
    c. Information from third parties: payment status from the payment provider, and statistical usage data from analytics providers.

  3. Purposes of using the information
    • Operating the site and managing orders/payments/invoices.
    • Issuing invoices/accounting documents and retaining them in accordance with applicable law.
    • Providing service and support, identity verification and fraud prevention.
    • Improving user experience, performance and accessibility.
    • Sending operational updates (order confirmation, payment status, changes in terms).
    • Sending marketing communications subject to prior consent and with the option to opt out at any time.

  4. To whom the information is disclosed (providers/recipients)
    • Payment processor: payment processing, transaction identifiers and confirmations.
    • Invoicing/accounting system: issuing invoices and accounting records.
    • Google Analytics: aggregated usage data and analytics.
    • Authorized authorities – where there is a legal obligation.
    Clarification: full credit card details are not stored on our servers; payment processing is carried out by the payment provider.

  5. User rights
    You may request to review and receive a copy of the information, correct/update inaccurate information, request deletion subject to legal retention obligations (for example for accounting/tax purposes), and opt out of marketing communications at any time. To exercise your rights, contact us using the details in section 1. We will verify identity before processing the request.

  6. Information security
    We implement reasonable security measures: encrypted transmission (HTTPS), access controls, backups, event logging and measures to prevent fraud and unauthorized access. However, absolute security does not exist.

  7. Data retention
    • Accounting documents/invoices – in accordance with applicable law requirements and required retention periods.
    • Order and support data – according to legitimate operational need and until the end of the limitation period/handling of claims.
    • Marketing data – until withdrawal of consent or deletion request.
    • Aggregated/anonymized analytics data – according to measurement and improvement needs.

  8. Cookies and similar technologies
    The site uses essential cookies (functionality/cart/authentication), and performance and analytics cookies (Google Analytics). Cookies can be managed or blocked in browser settings; certain blocking may limit site functionality.

  9. Transfer outside your country
    Certain providers (such as Google Analytics, payment providers and invoicing systems) may process data in different countries. We will take reasonable contractual and technical measures to ensure an adequate level of protection in accordance with applicable law.

  10. Minors
    The service is not intended for children under the age of 18 without parental/guardian consent. If we become aware that information was collected from a minor in violation of this policy, we will delete it as soon as reasonably possible after receiving notice.

  11. Use of bots/AI
    No use is made of bots/AI for making significant automated decisions or for enriching personal data. Communication is carried out by human representatives.

  12. Changes to the policy
    We will update the version date at the top of the page. In the event of a material change as stated above, we will provide clear notice before it takes effect.