1. Responsible
Responsible within the meaning of the General Data Protection Regulation (GDPR) is:

AES-Adaptive Exhibition Setup FlexCo
Address: Brunnerstraße 63/3.2, 1230 Vienna
Phone: +43 660 507 75 94
Email: office@adaptiv.at
Company registration number: 580137v
Company Registry Office: HG Wien
UID: ATU78125002

Website: https://klio-store.com

2. General information on data processing
The protection of your personal data is an important concern for us. We process your data exclusively in accordance with the legal regulations (DSGVO, TMG). This privacy policy informs you about the nature, scope, and purpose of the collection and use of personal data within our online offering.

The use of the website is generally possible without providing personal data. Where personal data is collected on our pages, this is always done on a voluntary basis, as far as possible.

3. Collection of access data and log files (hosting)
Our website is hosted by Hostinger, UAB, Jonavos g. 60C, LT-44192 Kaunas, Lithuania.
Hostinger automatically collects and stores information in so-called server log files that your browser automatically transmits.
These include in particular:

• IP address (in anonymized form)

• Date and time of retrieval

• Name of the file being called

• Referrer URL

• Browser type and version

• Operating system

The processing of this data takes place to ensure a trouble-free operation, for system security purposes, and for statistical evaluations in accordance with Art. 6(1)(f) GDPR.
A contract for order processing exists with Hostinger pursuant to Art. 28 GDPR.

4. Use of cookies
Our website currently does not use any active cookies that store personal data. As soon as a cookie consent tool is deployed, this section will be updated and adjusted accordingly.

5. Shop System (WooCommerce)
To process orders, we use the WooCommerce plug-in, a service provided by Automattic Inc., 60 29th Street #343, San Francisco, CA 94110, USA.
WooCommerce processes personal data such as name, address, email, payment details, and shopping cart information as part of the order processing process.
The data processing takes place on the basis of Art. 6(1)(b) GDPR (performance of a contract) and Art. 6(1)(f) GDPR (legitimate interest in a functional online store).

There is an order processing agreement with Automattic Inc.

6. Payment processing
a) PayPal

When choosing the payment method „PayPal“, payment data are transmitted to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg.
The transmission takes place on the basis of Art. 6(1)(b) GDPR (contract performance) and Art. 6(1)(f) GDPR (legitimate interest in secure and efficient payment processing).

b) Stripe

When choosing the payment method „Stripe“, personal data is transmitted to Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland.
Stripe may transfer data to the USA. The transfer is based on the EU Standard Contractual Clauses (SCCs).
The legal basis is Article 6(1)(b) of the GDPR.

7. Integration of social media services
We maintain online presences within social networks and platforms to communicate with customers, interested parties, and users. When accessing the respective networks, the terms of use and privacy policies of the respective operators apply.
The links on our website to Instagram, Facebook, LinkedIn and YouTube are in the form of pure hyperlinks. Only when clicking on such a link is a connection to the servers of the respective network established.

Meta Platforms Ireland Ltd. (Facebook, Instagram)
4 Grand Canal Square, Dublin 2, Ireland

LinkedIn Ireland Unlimited Company
Wilton Place, Dublin 2, Ireland

YouTube LLC (Google LLC)
1600 Amphitheatre Parkway, Mountain View, CA 94043, USA

The data processing is carried out on the basis of Art. 6(1)(f) GDPR (legitimate interest in an optimal presentation of our offer).

8. Rights of the affected persons
You have the right:

Pursuant to Article 15 of the GDPR, you may request information about the data stored by us.,
in accordance with Article 16 GDPR, to request the rectification of incorrect data or the completion of your data,
in accordance with Article 17 of the GDPR, to request the deletion of your data stored with us, unless there are legal retention obligations to the contrary;,
pursuant to Article 18 GDPR to request the restriction of processing,
to request data portability in accordance with Article 20 of the GDPR,
in accordance with Art. 77 GDPR, to submit a complaint to a supervisory authority.

9. Data security
We implement technical and organizational security measures to protect your data against accidental or intentional manipulation, loss, destruction, or against access by unauthorized persons.

10. Legal bases of processing
To the extent that the processing of personal data is based on consent, Article 6(1)(a) of the GDPR serves as the legal basis. Where the processing is carried out to fulfill a contract, Article 6(1)(b) of the GDPR applies. In all other cases, the processing is based on Article 6(1)(f) of the GDPR (legitimate interest).

11. Changes to this privacy policy
We reserve the right to adapt this privacy policy to adapt it to changed legal requirements or technical developments. The most current version is available on our website.

12. Statistics
Our website uses the open-source tool Matomo to statistically analyze user behavior on our site. The insights gained help us continuously improve our offerings.
Matomo uses cookies to collect usage data. Your IP address is anonymized in the process – specifically, 2 bytes are masked (e.g., 134.532.xxx.xxx), so that no conclusions can be drawn about your person.

If you agree to the web analysis via the cookie banner, the following data will be collected:

• Shortened IP address (2 bytes)
• Called pages and subpages
• Home page (referrer)
• Length of stay and frequency of visits
• Operating system, screen resolution and end device
• Approximate geolocation (e.g. Vienna or Innsbruck – no exact location determination)

The processing takes place exclusively on our own servers. No data is shared with third parties. All collected data is automatically deleted after 365 days.

The legal basis is your consent under the GDPR, which you can revoke at any time via the cookie banner. For more information, see the Data protection regulations of Matomo.