Privacy Policy

Effective Date: March 14, 2026

This Privacy Policy explains how GlintSmile - Benedict Jaros ("we", "us", "our") collects, uses, and discloses your personal data when you visit our website or make a purchase, in accordance with the General Data Protection Regulation (GDPR).

1. Data Controller

The entity responsible for the processing of your personal data is:

GlintSmile - Benedict Jaros
Hochtennstra�e 30a
5700 Zell am See, Austria
Email: hello@glintsmile.com
Phone: +43 660 1840876

2. What Personal Data We Collect

We only collect data that is necessary for us to provide our services and fulfill our legal obligations. This includes:

• Contact & Identity Data: Name, billing address, shipping address, email address, phone number.
• Financial Data: Payment details (processed securely by our payment providers; we do not store full credit card numbers).
• Technical & Usage Data: IP address, browser type, time zone settings, operating system, and data on how you interact with our website (collected via cookies and similar technologies).
• Order History: Information about products you have purchased.

3. How We Use Your Data & Legal Basis

According to Art. 6 GDPR, we process your personal data based on the following legal grounds:

• Contractual Necessity (Art. 6(1)(b) GDPR): To process your orders, process payments, arrange shipping, and provide customer support related to purchases.
• Legitimate Interests (Art. 6(1)(f) GDPR): To prevent fraud, improve our site and services, and perform marketing (where you have not opted out).
• Legal Obligation (Art. 6(1)(c) GDPR): To comply with tax laws and accounting obligations.
• Consent (Art. 6(1)(a) GDPR): When you actively opt-in to our newsletter or consent to non-essential cookies. You can withdraw your consent at any time.

4. Data Sharing and Third Parties

We may share your data with trusted third parties who act as data processors to assist us in operating our business:

• Service Providers: Payment gateways, shipping couriers, hosting providers, and email delivery services.
• Analytics: Google Analytics (to understand how customers use our site).
• Legal & Regulatory Authorities: If required by law, court order, or competent authorities.

Where your data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards (such as Standard Contractual Clauses) are in place to protect your data.

5. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes we collected it for, including satisfying any legal, accounting, or reporting requirements. For tax purposes, order details and invoices are typically kept for 7 years as required by Austrian law.

6. Your GDPR Rights

As an EU resident, you have the following rights regarding your personal data:

• Right to Access: You can request a copy of the personal data we hold about you.
• Right to Rectification: You can ask us to correct inaccurate or incomplete data.
• Right to Erasure ("Right to be Forgotten"): You can request the deletion of your data unless we have a legal obligation to retain it.
• Right to Restrict Processing: You can ask us to suspend the processing of your data under certain conditions.
• Right to Data Portability: You can request to receive your data in a structured, commonly used, and machine-readable format.
• Right to Object: You can object to our processing of your data based on legitimate interests or for direct marketing.
• Right to Withdraw Consent: Where you provided consent, you may withdraw it at any time.

To exercise any of these rights, please contact us at hello@glintsmile.com. We have one month to respond to your request.

7. Cookies

Our website uses cookies to function properly, analyze traffic, and personalize content. You can manage your cookie preferences through your browser settings or our cookie consent banner. Disabling certain cookies may limit the functionality of the website.

8. Right to File a Complaint

If you believe that our processing of your personal data infringes data protection laws, you have the right to lodge a complaint with a supervisory authority, particularly in the Member State of your habitual residence, place of work, or place of the alleged infringement. In Austria, this is the Data Protection Authority (Datenschutzbeh�rde).

9. Changes to this Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. We will notify you of any material changes by posting the new policy on our website.