Legal
Privacy Policy
This policy explains how Elevia Labs handles personal data when you visit MuseX, contact us, or place an order.
1. Who controls your data
Elevia Labs, Vienna, Austria, is the controller of personal data handled through MuseX. For privacy questions or requests, email contact@musex.shop.
2. Data we collect
- Contact and order data, such as your name, email, delivery address, order number, and purchase details.
- Payment status and transaction references. Payment-card details are handled by the payment provider shown at checkout rather than stored directly by us.
- Messages and support information you send to us.
- Technical and usage data, such as device, browser, approximate location derived from IP address, page views, interactions, and campaign attribution.
3. Why we use it
We use personal data to process and deliver orders, provide support, prevent fraud, operate and secure the website, meet legal obligations, and understand or improve website performance. Depending on the activity, our legal basis is performance of a contract, compliance with law, our legitimate interests, or your consent.
4. Analytics and advertising
We use or may use Google Analytics, PostHog, and Meta Pixel to measure visits, understand product and website usage, and assess marketing performance. These services may use cookies or similar technologies and process identifiers, device information, usage events, and approximate location. Where consent is legally required, non-essential analytics and advertising technologies should be activated only after you consent.
5. Who receives data
We share data only as needed with service providers that support checkout and payment, made-on-demand production, delivery, hosting, analytics, advertising measurement, fraud prevention, and customer support. We may also disclose data where required by law or in connection with a business reorganisation.
6. International transfers
Some providers or fulfilment partners may process data outside Austria or the European Economic Area. Where required, we use recognised safeguards such as an adequacy decision or standard contractual clauses.
7. Retention
We retain order and accounting records for the periods required by applicable law. Support messages are kept as long as needed to resolve the request and manage related claims. Analytics retention depends on provider configuration and is limited where reasonably possible. Data is deleted or anonymised when no longer needed.
8. Your rights
Depending on applicable law, you may request access, correction, deletion, restriction, portability, or objection to processing, and may withdraw consent at any time. You may also complain to the Austrian Data Protection Authority or your local supervisory authority.
9. Security
We use reasonable technical and organisational safeguards designed to protect personal data. No internet service can guarantee absolute security.
10. Updates
We may update this policy when our services or legal obligations change. The effective date above identifies the current version.