Privacy policy

Privacy Policy

Last updated: December 8, 2025

This Privacy Policy describes how bricksplay.eu (the "Site", "we", "us", or "our") collects, uses, and discloses your personal information when you visit, use, or make a purchase from bricksplay.eu (the "Services").

Contact After reviewing this policy, if you have additional questions, want more information about our privacy practices, or would like to make a complaint, please contact us by e-mail at office@bricksplay.eu or by mail using the details provided below:

bricksplay.eu Hauptstraße 2, 6074 Rinn, Austria

For the purpose of applicable data protection laws (GDPR), we are the data controller of your personal information.

1. Collecting Personal Information

When you visit the Site, we collect certain information about your device, your interaction with the Site, and information necessary to process your purchases. We may also collect additional information if you contact us for customer support. In this Privacy Policy, we refer to any information about an identifiable individual (including the information below) as "Personal Information".

Personal Information We Collect

  • Device Information: Examples include version of web browser, IP address, time zone, cookie information, what sites or products you view, search terms, and how you interact with the Site. Collected automatically when you access the Site to load the Site accurately for you, and to perform analytics on Site usage to optimize our Site.

  • Order Information: Examples include name, billing address, shipping address, payment information (including credit card numbers), email address, and phone number. Collected to provide products or services to you to fulfill our contract, to process your payment information, arrange for shipping, and provide you with invoices and/or order confirmations, communicate with you, and screen our orders for potential risk or fraud.

  • Customer Support Information: Information you choose to provide in communications with us.

2. Legal Basis for Processing (GDPR)

Pursuant to the General Data Protection Regulation (“GDPR”), if you are a resident of the European Economic Area (“EEA”), we process your personal information under the following lawful bases:

  1. Consent (Art. 6 (1) (a) GDPR): For example, for the use of non-essential cookies like Google Analytics or marketing activities.

  2. Contract (Art. 6 (1) (b) GDPR): Your Personal Information is necessary to perform the contract of sale between you and us (e.g., to ship your order).

  3. Legal Obligation (Art. 6 (1) (c) GDPR): We are required to retain certain data for tax and accounting purposes.

  4. Legitimate Interests (Art. 6 (1) (f) GDPR): For example, to prevent fraud or to improve our website security.

3. Sharing Personal Information

We share your Personal Information with service providers to help us provide our services and fulfill our contracts with you, as described above.

  • Shopify: We use Shopify to power our online store. You can read more about how Shopify uses your Personal Information here: https://www.shopify.com/legal/privacy.

  • Compliance with Laws: We may share your Personal Information to comply with applicable laws and regulations, to respond to a subpoena, search warrant or other lawful request for information we receive, or to otherwise protect our rights.

4. Web Analysis via Google Analytics (GA4)

Provided you have given your consent, this website uses Google Analytics 4, a web analysis service provided by Google LLC. The responsible service provider in the EU is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").

Nature and Purpose of Processing Google Analytics uses cookies that enable an analysis of your use of our website. The information collected via cookies about your use of this website is generally transferred to a Google server in the USA and stored there. We use the "User-ID" function. Using the User-ID, we can assign a unique, persistent ID to one or more sessions (and the activities within those sessions) and thus analyze user behavior across devices.

 

In Google Analytics 4, IP address anonymization is activated by default. Due to IP anonymization, your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. According to Google, the IP address transmitted by your browser within the scope of Google Analytics will not be merged with other Google data.

During your visit to the website, your user behavior is recorded in the form of "events". Events can include:

  • Page views, first visit, session start

  • Your "click path", interaction with the website

  • Scrolls (scrolling to the bottom of the page)

  • Clicks on external links

  • Internal search queries, interaction with videos, file downloads

Legal Basis The legal basis for this data processing is your consent pursuant to Art. 6 (1) (a) GDPR. You can withdraw your consent at any time with effect for the future by accessing the cookie settings and changing your selection.

Recipients / Data Transfer Data is transferred to Google Ireland Limited and potentially to Google LLC in the USA. Since we operate this store via the Shopify platform, data processing is technically carried out in part via the systems of Shopify International Ltd. (Ireland) and Shopify Inc. (Canada/USA) as our processors.

Storage Period The data sent by us and linked to cookies is automatically deleted after 14 months. The deletion of data whose retention period has been reached occurs automatically once a month.

Revocation You can prevent the collection of data by Google Analytics by:

  1. Not granting your consent in the cookie banner or withdrawing it subsequently.

  2. Downloading and installing a browser add-on to deactivate Google Analytics: https://tools.google.com/dlpage/gaoptout?hl=en

Further information on the terms of use and data protection at Google Analytics can be found at https://marketingplatform.google.com/about/analytics/terms/us/ and at https://policies.google.com/?hl=en.

5. International Transfer

Please note that we may transfer, store and process your personal information outside the country you live in, in particular to the United States and Canada (where Shopify and Google are based).

For transfers to the USA, we rely on the EU-US Data Privacy Framework (DPF). Both Google LLC and Shopify Inc. are certified under this framework, ensuring an adequate level of data protection. Where the DPF does not apply, we rely on recognized transfer mechanisms like the European Commission's Standard Contractual Clauses (SCCs) to ensure your data is protected.

6. Your Rights (GDPR)

If you are a resident of the European Economic Area (EEA), you have the right to access the Personal Information we hold about you, to port it to a new service, and to ask that your Personal Information be corrected, updated, or erased. You also have the right to withdraw consent and to object to processing based on legitimate interests.

If you would like to exercise these rights, please contact us through the contact information above.

7. Retention

When you place an order through the Site, we will retain your Personal Information for our records unless and until you ask us to erase this information. Ideally, we retain data required for tax and accounting purposes for the statutory retention periods (e.g., 7 years in Austria).

8. Cookies

A cookie is a small amount of information that’s downloaded to your computer or device when you visit our Site. We use a number of different cookies, including functional, performance, advertising, and social media or content cookies. Cookies make your browsing experience better by allowing the website to remember your actions and preferences (such as login and region selection).

We use strictly necessary cookies (required for the shop to function) based on Art. 6 (1) (f) GDPR (Legitimate Interest) or Art. 6 (1) (b) GDPR (Contract). We use analytical and marketing cookies (like Google Analytics) only with your explicit Consent (Art. 6 (1) (a) GDPR). You can control and manage cookies in various ways via our Cookie Banner or your browser settings.

9. Changes

We may update this Privacy Policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal, or regulatory reasons.

10. Complaints

If you are not satisfied with our response to your complaint, you have the right to lodge your complaint with the relevant data protection authority. You can contact your local data protection authority (in Austria: Österreichische Datenschutzbehörde, dsb.gv.at).