Privacy Policy

1. Controller

The controller responsible for processing personal data on this website is:

FFM TRADE e.U.
Hadikgasse 64
1140 Vienna
Austria

Telephone: +43 681 107 26 366
Email: office@biobazar.at

Company Registration No.: FN 567354w
Commercial Register Court: Vienna Commercial Court

2. General Information

Protecting your personal data is important to us. We process your data exclusively in accordance with the applicable legal provisions, in particular the General Data Protection Regulation (GDPR), the Austrian Data Protection Act (DSG) and the Austrian Telecommunications Act 2021 (TKG 2021).

Personal data means any information relating to an identified or identifiable natural person, such as a name, email address, telephone number or IP address.

3. Accessing and Providing the Website

When you visit this website, technically necessary data is processed automatically. This may include, in particular:

• IP address of the device accessing the website

• Date and time of access

• Page or file accessed

• Amount of data transferred

• Referrer URL

• Browser type and browser version

• Operating system and device information

• Notifications concerning successful or failed requests

This processing is necessary to provide the website securely and without technical errors, to detect attacks and misuse, and to ensure the stability of the systems.

The legal basis is our legitimate interest in providing a secure, stable and user-friendly website pursuant to Article 6(1)(f) GDPR. Technically necessary storage on your device is carried out in accordance with Section 165(3) TKG 2021.

Log data is stored only for as long as necessary for the technical provision, security and error analysis of the website. It is stored for a longer period only where this is necessary to investigate a security incident or to comply with a legal obligation.

4. Hosting and Content Delivery Network

This website is operated using Hostinger Website Builder and hosted by:

Hostinger International Ltd.
61 Lordou Vironos Street
6023 Larnaca
Cyprus

In connection with providing the website, Hostinger processes technical connection and usage data in particular. This may include IP addresses, browser and device information, timestamps, pages accessed and technical log data. Hostinger may use affiliated companies, data centres and other subprocessors. Some content, such as images and font files, is delivered through the technical infrastructure and content delivery network of Hostinger or Zyro/zyrosite.

The processing is based on our legitimate interest in providing a secure, fast and reliable website pursuant to Article 6(1)(f) GDPR. Where Hostinger processes data on our behalf, this is done on the basis of a data processing agreement pursuant to Article 28 GDPR.

Further information is available in Hostinger’s Privacy Policy:

https://www.hostinger.com/legal/privacy-policy

5. Contact and B2B Enquiries

If you contact us by email, telephone or through the B2B enquiry section, we process the information you provide. This may include, in particular:

• Company and contact person

• Email address and telephone number

• Products of interest and required quantity

• Country of delivery, postcode and city

• Content of your message and any other information provided voluntarily

The B2B enquiry section on the Contact page does not transmit your entries directly to a web server. The information is initially processed locally in your browser. When you click the “Prepare B2B Enquiry” button, a pre-completed message opens in your email application. The data contained in that message is transmitted to us only when you send the email.

We use this data to process your enquiry, prepare a quotation and take steps prior to entering into a contract or to perform a contract. The legal basis is Article 6(1)(b) GDPR. In the case of general business enquiries, the processing is also based on our legitimate interest in communicating with prospective customers and business partners pursuant to Article 6(1)(f) GDPR.

Where necessary to process a specific enquiry or prepare a quotation, the required information may be shared with selected manufacturers, suppliers, logistics service providers or other business partners. Information is shared only to the extent necessary.

If your enquiry does not lead to a contractual relationship, we delete the data once the enquiry has been fully resolved and there are no legitimate reasons for retaining it. Data may be retained for a limited additional period for the establishment, exercise or defence of legal claims. Contractual, accounting and tax documents are generally retained for seven years in accordance with statutory retention obligations; a longer period may apply where required by law.

6. Cookies and Consent Management

Our website uses cookies and similar technologies. Cookies are small text files stored on your device. They may be technically necessary or, with your consent, used for statistical analysis.

Technically Necessary Cookies

Technically necessary cookies enable essential website functions and store, among other things, your selection in the cookie banner. These cookies cannot be completely disabled because they are necessary for the website to function properly or for the consent management you have requested.

The legal basis for any associated processing of personal data is our legitimate interest in providing a secure and functional website pursuant to Article 6(1)(f) GDPR. Information is stored on or accessed from your device in accordance with Section 165(3) TKG 2021.

Platform Analytics by Hostinger and Amplitude

With your express consent, Hostinger may use cookies and similar technologies for platform analytics. According to the information displayed in the cookie banner, Hostinger uses the Amplitude analytics service for this purpose. Pseudonymous usage data that does not directly identify you may be processed. The analysis is used to understand how the website is used and to improve the user experience and Hostinger’s products.

The legal basis is your consent pursuant to Article 6(1)(a) GDPR in conjunction with Section 165(3) TKG 2021. This analysis is not activated without your consent.

The analytics service is provided by:

Amplitude, Inc.
San Francisco, California
USA

Further information is available in Amplitude’s Privacy Policy:

https://amplitude.com/privacy

Changing or Withdrawing Your Consent

You can reopen and change your cookie selection at any time using the “Cookie Settings” link in the website footer. Withdrawal of your consent takes effect for the future and does not affect the lawfulness of processing carried out before the withdrawal. You can also delete or block cookies in your browser settings. If you block all cookies, some website functions may be restricted.

7. External Links and Instagram

Our website contains a link to our Instagram profile. No Instagram content is embedded when you merely visit our website, and no data is transmitted to Instagram solely because the link is displayed. Only when you click the link do you leave our website and establish a direct connection to Instagram. From that point onwards, Instagram processes data under its own responsibility.

Instagram is provided by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. Further information is available in Instagram’s Privacy Policy:

https://privacycenter.instagram.com/policy/

For other external links, data processing by the respective provider also generally begins only when you open the link. The respective website operator is responsible for processing data on external websites.

8. Recipients and Transfers to Third Countries

Personal data is made available only to those parties that require it for the purposes described above. Recipients may include hosting and email service providers, IT service providers, manufacturers, suppliers, logistics companies and, where necessary, tax advisers, legal advisers or public authorities.

Some providers used by Hostinger or other service providers may process data outside the European Economic Area. Such transfers take place only where the requirements of Articles 44 et seq. GDPR are met, for example on the basis of an adequacy decision by the European Commission, valid certification under the EU-US Data Privacy Framework, or Standard Contractual Clauses in conjunction with appropriate safeguards.

9. Your Rights

Subject to the applicable legal requirements, you have the following rights in particular:

• Right of access to the personal data we process

• Right to rectification of inaccurate or incomplete data

• Right to erasure of your data

• Right to restriction of processing

• Right to data portability

• Right to object to processing based on a legitimate interest

• Right to withdraw consent at any time with effect for the future

To exercise your rights, simply send a message to office@biobazar.at. In individual cases, suitable proof of identity may be required so that we can reliably assign your request.

If you believe that the processing of your data infringes data protection law, you may lodge a complaint with us or with a data protection supervisory authority. In Austria, the competent authority is:

Austrian Data Protection Authority
Barichgasse 40–42
1030 Vienna
Austria
Telephone: +43 1 52 152-0
Email: dsb@dsb.gv.at
Website: https://www.dsb.gv.at/

10. Provision of Data and Automated Decision-Making

Providing personal data is generally voluntary. However, to process an enquiry or prepare a quotation, we require at least one means of contacting you and the information necessary to process your request. Without this data, we may be unable to respond to your enquiry.

We do not make decisions based solely on automated processing, including profiling, that produce legal effects concerning you or similarly significantly affect you.

11. Data Security

We take appropriate technical and organisational measures to protect personal data against loss, unauthorised access, alteration or disclosure. This website is transmitted in encrypted form via HTTPS. Nevertheless, data transmission over the internet may be subject to security vulnerabilities, and complete protection cannot be guaranteed.

12. Updates to This Privacy Policy

We update this Privacy Policy whenever the website, the services used or the legal situation changes. The version published on this website at the relevant time applies.

Last updated: 27 July 2026