Privacy policy

This privacy policy applies to the website www.wild-spirit.store

Processing of personal data
We process your personal data on the website, among other things, as follows (for further data processing on the website, we refer to the following sections of this privacy policy):

 

Log files when visiting the website
When you use our website, our hosting provider logs so-called "log file" data with every server request, such as the name of the website accessed, previously visited page ("referrer" URL), product and version information of the browser and operating system used, requesting provider, date and time of access, search engines used, country of access, amount of data transferred, names of downloaded files and IP address.

The legal basis for the processing is Article 6(1)(f) GDPR. Our legitimate interest in storing the log file data lies in ensuring system security, including the investigation of misuse. The log file data is deleted or anonymized after a maximum of 30 days, unless it is needed for longer due to a security-relevant incident, e.g. for investigation or evidence purposes.

Contacting us
When you contact us, we process your personal data, such as name, address, email address, telephone number etc., which we need to answer your inquiry.

The legal basis for processing your personal data in the context of contact inquiries is Article 6(1)(b) GDPR, if your inquiry is aimed at concluding a contract, and otherwise Article 6(1)(f) GDPR, our legitimate interest being the answering of inquiries.

In the context of contact inquiries, we store your personal data for as long as is necessary to process your inquiry or with regard to statutory retention periods.

Registration/orders
When you register or place an order, we process your personal data, such as name, address, email address, telephone number, date of birth, self-chosen username, payment data etc., which we need for the performance of the contractual relationship with you or in order to take steps at your request prior to entering into a contract.

We store your personal data collected in the context of registration or orders for as long as is necessary for the performance of the contractual relationship (where applicable including the provision of the customer account) and/or in order to take steps at your request prior to entering into a contract and/or with regard to warranty, guarantee or similar obligations and/or with regard to statutory retention periods.

The legal basis for processing your personal data collected in the context of registration or orders is Article 6(1)(b) GDPR ("performance of a contract").

Providing this personal data is neither legally nor contractually required. However, it is necessary for the conclusion of the contract, i.e. for carrying out the registration or order, to the extent that the relevant information in our registration/ordering process is mandatory (rather than merely voluntary).

Newsletter
If you subscribe to our newsletter, we process the data collected in the process, such as your email address, title etc., for the purposes of sending the newsletter.

To the extent that the data processing for the purposes described above is carried out with your consent, the legal basis is Article 6(1)(a) GDPR (consent). Otherwise, the data processing is carried out on the basis of Article 6(1)(f) GDPR ("legitimate interests"), the legitimate interests lying in the purposes mentioned above.

We store the personal data we need for sending the newsletter for as long as we need it for this purpose or until you withdraw your consent to receive the newsletter. Any legitimate further retention for other purposes (e.g. customer communication) remains unaffected.

Cookies
Cookies are small text files that are stored on the user's computer and enable an analysis of the user's use of the website.

Cookies can be used, for example, to make using the website simpler and more convenient for the visitor, to make certain functions possible at all, or, for example, to analyze visitor flows.

To the extent that personal data is also processed by individual cookies that we use, the processing takes place pursuant to Article 6(1)(b) GDPR for the performance of a contract, pursuant to Article 6(1)(a) GDPR where consent has been given, or pursuant to Article 6(1)(f) GDPR to safeguard our legitimate interests in the economic operation of our online offering and in a user-friendly and effective design of the visit to the website.

The storage period of the cookies may be limited to the duration of the respective browser session, i.e. the cookies are deleted again after the browser is closed (temporary cookies); or the storage period may be longer, in order to recognize the user on their next visit and then, for example, show them preferred content (persistent cookies). Unless we provide other information in this privacy policy, in our cookie management services or in other separate information on cookies, you should assume that they are persistent cookies and that the storage period is up to two years. You can at any time withdraw your consent to the setting of cookies or object to data processing by cookies by deleting the cookies in your browser settings. You can also set your browser so that cookies are only accepted if you agree to this.

As regards advertising cookies, you can block and/or manage many of them via the following services:
www.aboutads.info/choices/
www.youronlinechoices.com/uk/your-ad-choices/
www.networkadvertising.org/managing/opt_out.asp

If you refuse cookies, you may not be able to use certain website functions, services, applications or tools.

Google Analytics
This website uses Google Analytics, a web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses so-called "cookies", text files that are stored on your computer and enable an analysis of your use of the website.

Google may transfer your data to servers worldwide. Google bases data transfers to the USA on the EU-US Data Privacy Framework (EU-US DPF). Google bases data transfers to countries without an adequate level of data protection on the EU Standard Contractual Clauses. You can find details in the following section of Google's privacy policy: https://policies.google.com/privacy/frameworks

You can find Google's privacy policy at: https://policies.google.com/privacy

To the extent that the data processing for the purposes described above is carried out with your consent, the legal basis is Article 6(1)(a) GDPR (consent). Otherwise, the data processing is carried out on the basis of Article 6(1)(f) GDPR ("legitimate interests"), the legitimate interests lying in the purposes mentioned above.

You can prevent the collection by Google of the data generated by the cookie and relating to your use of the website (including your IP address), as well as the processing of this data by Google, by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en

Advertising and measurement (Meta, Google Ads, Pinterest)
We use cookies and similar technologies (pixels) of our advertising partners Meta (Facebook, Instagram), Google (Google Ads) and Pinterest. This lets us measure how our ads work (e.g. whether an order follows a click on an ad) and show you relevant ads on these platforms. In the process, the partners receive in particular your IP address, information about your device and browser, the pages you view and information about your purchases. They can collect information about your online activities over time and across other websites, and they also use this data for their own purposes.

You can change your cookie choices at any time with the "Change cookie settings" link at the bottom of every page. You can find the partners' privacy policies at: https://www.facebook.com/privacy/policy, https://policies.google.com/privacy and https://policy.pinterest.com/en/privacy-policy

Rights of the data subject
Under Article 15 of the General Data Protection Regulation, you have the right to request information about the processing of your personal data ("right of access by the data subject").

Under Article 16 of the General Data Protection Regulation, you have the right to request the rectification and erasure of inaccurate personal data concerning you ("right to rectification").

Under Article 17 of the General Data Protection Regulation, you can request the erasure of the personal data concerning you if one of the grounds listed there applies ("right to be forgotten").

Likewise, under Article 18 of the General Data Protection Regulation, you have the right to request the restriction of the processing of personal data concerning you if one of the conditions listed there is met ("right to restriction of processing").

Under Article 20 of the General Data Protection Regulation, you have the right to have the data concerning you made available to you and to transmit this data to another controller ("right to data portability").

Withdrawal of consent: see section "Right to withdraw consent" in this privacy policy. Right to object: See section "Right to object" in this privacy policy. You have the right to lodge a complaint with the competent supervisory authority.

Right to withdraw consent
You can withdraw your consent to the processing of your personal data at any time, e.g. by email to the email address mentioned above. This does not affect the lawfulness of the processing based on consent before its withdrawal.

Right to object

To the extent that our data processing is based on Article 6(1)(f) GDPR ("legitimate interests"), you have the right, pursuant to Article 21 GDPR, to object to the processing of your personal data.

Disclosure of your data
Unless already listed elsewhere in this privacy policy, we disclose your personal data to the following further recipients or categories of recipients:

Printify (https://www.printify.com/)

We also share your data with service providers that we use to run our store: payment providers, shipping carriers and service providers for sending emails, customer support, product reviews and cookie settings. Where data is transferred to the USA in the process, the transfer is based on the EU-US Data Privacy Framework (EU-US DPF) or on the EU Standard Contractual Clauses.

Unless already listed elsewhere in this privacy policy, we intend to transfer your personal data to the following third country or international organization:

Printify (https://www.printify.com/)

We operate our online shop using the software and servers of Shopify; according to its privacy policy, Shopify processes data worldwide, including in Canada and the USA; you can access Shopify's privacy policy, which also contains more detailed information on the transfer of data abroad, here: https://www.shopify.com/legal/privacy

Controller
The controller for the processing of your personal data is Wild Spirit GmbH. Contact information: Wild Spirit GmbH, Krenngasse 12, 8010 Graz, Austria, support@wildspiritapparel.com

Data protection officer
If you have any questions or concerns regarding our data protection practices, you can contact our data protection officer at the email address mentioned above.

Information for visitors from the United States
Last updated: November 2026

Your US privacy rights: depending on the state you live in, you may have the right to know what personal information we have about you and get a copy of it, to correct or delete it, and to opt out of its "sale" or "sharing" and of targeted advertising. To use these rights, visit our "US Privacy Requests" page (link at the bottom of every page) or email support@wildspiritapparel.com. If we turn down your request, you can appeal by emailing us with the subject line "Privacy Appeal". We will not treat you differently for using your rights.

Sale or sharing: we do not sell personal information for money. Our advertising partners (see "Advertising and measurement" above) receive information about your visit to measure and show ads, which under some US state laws may count as a "sale" or "sharing" of personal information. You can opt out on our "Do Not Sell or Share My Personal Information" page. If your browser sends a Global Privacy Control (GPC) signal, we treat it as an opt-out for that browser, where supported.

Do Not Track: there is no common standard for "Do Not Track" browser signals, so we do not respond to them.

Changes: when we change this privacy policy, we post the new version on this page and update the date above.