Data Protection
Privacy Policy (Datenschutzerklärung)
Last updated: 17 July 2026
1. Introduction
This Privacy Policy explains how we process personal data when you visit our websites karabach.at and karabach-buy.com, contact us, or use our buyer–supplier matching services. We take the protection of your personal data seriously and process it exclusively in accordance with the General Data Protection Regulation (GDPR), the Austrian Telecommunications Act (TKG 2021), and other applicable laws.
2. Controller (Data Protection Responsible)
Choukri Karabach Steingasse 6A 4020 Linz Austria
Email: contact@karabach.at Phone: +43 677 623 378 62
3. Personal Data We Process
We process the following categories of personal data:
3.1. Website Visitors
IP address
Date and time of access
Browser type and version
Operating system
Referrer URL
Pages viewed
Cookie preferences
3.2. Contact Form / Buyer Requests
If you submit a request via our contact form or buyer‑supplier matching service, we process:
Name
Email address
Phone number
Company information
Description of your request
Attached files
3.3. Supplier Communication
If you are a supplier and contact us:
Name
Email address
Company details
Product/service information
3.4. Subscription & Payment Data (if applicable)
If you subscribe to our supplier access service:
Billing information
Payment confirmation
Subscription status
4. Purpose and Legal Basis of Processing
4.1. Website Operation & Security
To ensure secure and stable operation of our websites. Legal basis: Art. 6(1)(f) GDPR (legitimate interest).
4.2. Responding to Contact Requests
To process your inquiry and respond to you. Legal basis: Art. 6(1)(b) GDPR (contract initiation).
4.3. Buyer–Supplier Matching
To forward buyer requests to suppliers only with explicit consent. Legal basis: Art. 6(1)(a) GDPR (consent).
4.4. Supplier Subscription Management
To manage paid supplier subscriptions. Legal basis: Art. 6(1)(b) GDPR (contract performance).
4.5. Cookies & Analytics
Non‑essential cookies are used only with your consent. Legal basis: Art. 6(1)(a) GDPR (consent).
5. Data Transfer to Third Parties
We may transfer data to:
5.1. Suppliers
Only if:
You explicitly request a quotation or contact
You consent to forwarding your data
5.2. Service Providers
For hosting, email delivery, analytics, or security:
Hosting provider (insert provider name)
Email provider
Analytics provider (if used)
All service providers operate under GDPR‑compliant data processing agreements (AVV).
5.3. International Transfers
If data is transferred outside the EU (e.g., US‑based services), we ensure:
Standard Contractual Clauses (SCC)
Adequate safeguards
6. Cookies & Tracking Technologies
We use cookies to provide essential website functionality and, with your consent, analytics or marketing features.
6.1. Essential Cookies
Required for:
Website security
Session management
Consent storage
6.2. Non‑Essential Cookies (only with consent)
Examples:
Analytics tools
Embedded videos (YouTube)
Maps (Google Maps)
You can withdraw consent at any time via the cookie banner.
7. Hosting & Server Logs
Our websites are hosted by a European hosting provider. The provider automatically collects server logs for security and troubleshooting.
These logs are stored for a limited period and are not combined with other data sources.
8. Embedded Content
8.1. YouTube Videos
Videos are embedded using a two‑click solution. No data is transferred to YouTube until you actively enable the video.
8.2. Google Maps
Maps load only after you provide consent.
8.3. External Links
We are not responsible for the privacy practices of external websites.
9. Data Retention
We store personal data only as long as necessary:
Contact requests: up to 12 months
Buyer requests: until the request is completed or consent withdrawn
Supplier subscription data: according to legal retention periods
Server logs: typically 14–30 days
Cookies: according to cookie type
10. Your Rights Under GDPR
You have the right to:
Access your data
Correct inaccurate data
Delete your data
Restrict processing
Object to processing
Withdraw consent
Data portability
Lodge a complaint with the Austrian Data Protection Authority (DSB)
Contact: contact@karabach.at
11. Security Measures
We implement technical and organizational measures including:
SSL encryption
Access control
Secure hosting
Regular updates
Local hosting of fonts (no Google Fonts CDN)
12. Online Dispute Resolution
The European Commission provides an ODR platform: https://ec.europa.eu/consumers/odr/
We are not obliged or willing to participate in consumer arbitration proceedings.
13. Changes to This Privacy Policy
We may update this policy to reflect legal or technical changes. The latest version is always available on this page.