Privacy policy

Last updated: 29 October 2026

thetasting.tools operates this shop and website, including all related information, content, features, tools, products and services, to provide you with a curated shopping experience (the “Services”). thetasting.tools is powered by Shopify, which enables us to provide the Services. This Privacy Policy describes how we collect, use and disclose your personal information when you visit or use the Services, make a purchase or other transaction through them, or otherwise communicate with us. If our Terms and Conditions conflict with this Privacy Policy, this Privacy Policy governs the collection, processing and disclosure of your personal information.

Please read this Privacy Policy carefully. By accessing and using the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use and disclosure of your information as described here.

Personal information we collect or process

“Personal information” means information that identifies you or another person, or can reasonably be linked to you or another person. It does not include information collected anonymously or de-identified so that it cannot identify or reasonably be linked to you. Depending on how you interact with the Services, where you live and what applicable law permits or requires, we may collect or process the following categories, including inferences drawn from them:

  • Contact details, including your name, address, billing address, delivery address, telephone number and email address.
  • Financial information, including credit card, debit card and financial account numbers, payment card and financial account information, transaction details, payment method, payment confirmation and other payment details.
  • Account information, including your username, password, security questions, preferences and settings.
  • Transaction information, including items you view, add to your cart or wish list, purchase, return, exchange or cancel, and your past transactions.
  • Communications with us, including information you provide when communicating with us, for example in a customer support enquiry.
  • Device information, including information about your device, browser or network connection, IP address and other unique identifiers.
  • Usage information, including how and when you interact with or navigate the Services.

Sources of personal information

We may collect personal information from the following sources:

  • Directly from you, including when you create an account, visit or use the Services, communicate with us or otherwise provide your personal information.
  • Automatically through the Services, including from your device when you use our products or services or visit our websites, and through cookies and similar technologies.
  • From our service providers, including when we engage them to enable certain technologies and they collect or process personal information on our behalf.
  • From our partners or other third parties.

How we use your personal information

Depending on how you interact with us or which Services you use, we may use personal information for the following purposes:

  • Providing, personalising and improving the Services. We use your personal information to provide the Services, including to perform our contract with you, process payments, fulfil orders, remember your preferences and items of interest, send account notifications, process purchases, returns, exchanges and other transactions, create, maintain and manage your account, arrange shipping, facilitate returns and exchanges, enable reviews and provide a personalised shopping experience, such as recommending products related to purchases. This may include using personal information to better tailor and improve the Services.
  • Marketing and advertising. We use personal information for marketing and advertising, such as sending marketing, advertising and promotional communications by email, text message or post, and showing online advertising for products or services on the Services or other websites, including based on items previously purchased or added to your cart and other activity on the Services.
  • Security and fraud prevention. We use personal information to authenticate your account, provide a secure payment and shopping experience, detect, investigate or act on potentially fraudulent, illegal, unsafe or malicious activity, protect public safety and secure our Services. If you register an account, you are responsible for keeping your credentials safe. We strongly recommend that you do not share your username, password or other access details.
  • Communicating with you. We use personal information to provide customer support, respond to your concerns, deliver effective Services and maintain our business relationship.
  • Legal reasons. We use personal information to comply with applicable law or respond to valid legal proceedings, including requests from law enforcement or government authorities, participate in or investigate civil investigations, potential or actual litigation or other proceedings, and enforce or investigate potential violations of our terms or policies.

How we disclose personal information

In certain circumstances, we may disclose your personal information to third parties for legitimate purposes consistent with this Privacy Policy, including:

  • To Shopify, vendors and other third parties providing services on our behalf, such as IT management, payment processing, data analytics, customer support, cloud storage, fulfilment and shipping.
  • To business and marketing partners to provide marketing services and advertise to you. For example, we use Shopify to support personalised advertising with third-party services based on your online activity across different merchants and websites. These partners use information under their own privacy policies. Depending on where you live, you may have the right to direct us not to share information for targeted advertising and marketing based on activity across merchants and websites.
  • When you direct, request or otherwise consent to our disclosure of certain information to third parties, for example to ship products to you or through social media widgets or login integrations.
  • To our affiliates or otherwise within our corporate group.
  • In connection with a business transaction such as a merger or bankruptcy, to comply with applicable legal obligations, including subpoenas, search warrants and similar requests, enforce applicable terms or policies, and protect or defend the Services, our rights and the rights of users or others.

Relationship with Shopify

The Services are hosted by Shopify. Shopify collects and processes personal information about your access to and use of the Services to provide and improve them. Information submitted through the Services is transmitted to and shared with Shopify and third parties that may be in countries other than your country of residence, to provide and improve the Services. We also use certain enhanced Shopify features to protect, grow and improve our business. These features integrate information from your interactions with our shop, other merchants and Shopify. To provide them, Shopify may use personal information collected through these interactions. In these cases, Shopify is responsible for processing your personal information, including responding to requests to exercise your rights regarding its use for these purposes. For more information about Shopify’s use of personal information and your possible rights, see the Shopify Consumer Privacy Policy. Depending on where you live, you can exercise certain rights through the Shopify Privacy Portal.

Third-party websites and links

The Services may link to websites or other online platforms operated by third parties. If you follow links to sites not affiliated with or controlled by us, review their privacy and security policies and other terms. We do not guarantee and are not responsible for their privacy or security, including the accuracy, completeness or reliability of their information. Information you provide in public or semi-public places, including third-party social media platforms, may be visible to other users of the Services or those platforms without restrictions on its use by us or a third party. Including links does not itself endorse the platforms’ content, owners or operators unless stated in the Services.

Children’s information

The Services are not intended for children, and we do not knowingly collect personal information about children below the age of majority in your jurisdiction. If you are a parent or guardian of a child who provided personal information, contact us using the details below to request deletion. As of the effective date of this Privacy Policy, we have no actual knowledge that we “share” or “sell” personal information of individuals under 16, as those terms are defined by applicable law.

Security and retention of your information

No security measure is perfect or impenetrable, and we cannot guarantee “perfect security”. Information sent to us may not be secure in transit. We recommend not using unsecured channels to communicate sensitive or confidential information.

How long we retain personal information depends on factors such as whether it is needed to maintain your account, provide the Services, comply with legal obligations, resolve disputes or enforce other applicable agreements and policies.

Your rights and choices

Depending on where you live, you may have some or all of the following rights. These are not absolute, may apply only in certain circumstances, and we may decline requests where law permits:

  • Access. You may have the right to request access to personal information we hold about you.
  • Deletion. You may have the right to ask us to delete personal information we hold about you.
  • Correction. You may have the right to ask us to correct inaccurate personal information.
  • Portability. You may have the right to receive a copy of your personal information and request its transfer to a third party in certain circumstances and subject to exceptions.
  • Communication preferences. You can opt out of promotional emails at any time using their unsubscribe option. We may continue sending non-promotional emails, such as those about your account or orders.

If you live in the United Kingdom or European Economic Area, you may also exercise the following rights, subject to exceptions and restrictions in local law:

  • Objection and restriction. You may have the right to ask us to stop or restrict processing for certain purposes.
  • Withdrawal of consent. Where processing relies on consent, you have the right to withdraw it. Withdrawal does not affect the lawfulness of processing based on consent before withdrawal.

You can exercise rights where indicated in the Services or by contacting us below. For more information about Shopify’s use of your personal information and rights relating to information Shopify processes, visit https://privacy.shopify.com/en.

We will not discriminate against you for exercising these rights. We may need to verify your identity before processing requests as permitted or required by law. Where applicable law allows, you may appoint an authorised agent to submit requests on your behalf. Before accepting such a request, we require proof of authorisation and may need you to verify your identity directly with us. We will respond within the time required by applicable law.

Complaints

If you have complaints about our processing of personal information, please contact us below. Depending on where you live, you may have the right to appeal our decision by contacting us or lodge a complaint with your local data protection authority. A list of EEA supervisory authorities is available here.

International transfers

We may transfer, store and process personal information outside your country of residence. For transfers outside the EEA or UK, we rely on recognised mechanisms, such as the European Commission’s Standard Contractual Clauses or equivalent contracts issued by the competent UK authority where applicable, unless the destination country has been recognised as providing an adequate level of protection.

Changes to this Privacy Policy

We may update this Privacy Policy to reflect changes in our practices or other operational, legal or regulatory reasons. We will publish the revised policy on this website, update the “Last updated” date and provide notification as required by law.

Contact

For questions about our privacy practices or this policy, or to exercise your rights, email info@thetasting.tools. Further contact details are in our Contact Information policy. For the purposes of applicable data protection laws, we are the controller of your personal information.

World4You AI phone assistant

An AI phone assistant at +43 1 928 447 9692 handles enquiries for die Verkosterei GmbH. We use it to understand, answer or forward enquiries for further processing. The provider is World4You Internet Services GmbH; technical subcontractors assist in providing the service.

Data processed includes the content of the conversation, any transmitted phone number, voluntarily provided name and contact details, and the date, time and duration of the call. It is used to handle your enquiry. You may instead contact us at info@thetasting.tools at any time without using the assistant.

According to World4You’s product-specific information, no audio recordings are stored. Voice data is temporarily processed in working memory to handle the conversation. A written summary and associated metadata remain after the call. According to the provider, temporary conversation data and transcripts are deleted after the summary is sent. Summaries and metadata are stored by the service for the duration of the active contract. The provider states that conversation content is not used to train AI models.

World4You describes processing for this product as restricted to the EU. This is separate from possible international transfers in the independently operated Shopify shop. Processing to handle contractual or pre-contractual enquiries is based on Article 6(1)(b) GDPR; other enquiries are processed on the basis of our legitimate interest in reliable availability and efficient handling under Article 6(1)(f) GDPR.

Our further processing of summaries sent to us follows the retention and deletion rules for enquiry information described above. The privacy rights in this policy also apply to this information; contact info@thetasting.tools.

Further information: World4You: AI phone assistant privacy, product-specific information and special terms for the AI phone assistant.