Shopify App – Corestad – Cookieless Tracking
Corestad GmbH operates the website and its application “Corestad – Cookieless Tracking” (hereinafter referred to as “website”, “app”, together “services”) with its registered office in 1070 Vienna, Mariahilfer Straße 54/15 as a service provider, media owner, and publisher (hereinafter referred to as “the responsible party”).
The protection of your personal data is of particular concern to us. We treat your personal data confidentially and process your data exclusively based on the legal provisions (GDPR, DSG (Austria), TKG (Austria) 2003). The definitions of terms used in this data protection notice are based on the General Data Protection Regulation (Regulation (EU) 2016/679).
Your privacy matters to us, and we are committed to ensuring that your personal information is handled responsibly and in accordance with applicable laws and regulations. We utilize industry-standard security measures to protect your data and are dedicated to continuously improving our practices to maintain your trust. We only collect minimal data required to be able to provide you with this service.
Usage of Google Analytics API
Corestad – Cookies Tracking’s use and transfer of information received from Google APIs to any other app will adhere to Google API Services User Data Policy, including the Limited Use requirements. Please see the Google API Services User Data Policy for more information.
Data Collection Scope
We adhere to the principle of data minimization and only collect the necessary data for the operation of our Shopify App. We do not log any user activity within our application not mandatory by Shopify, and we do not transfer end-user data to our servers, except as outlined in this Policy.
The following information may be collected during the use of our App:
- Shop ID and Shop URL: This information is collected for identification and authentication purposes within the Shopify environment.
- Authentication Data from Provided Services (Google Analytics 4): We may collect authentication tokens and keys from the provided Google Analytics 4 service to enable integration and functionality.
- Company Information: We may collect company information, including name, address, email address, and payment information, to facilitate billing and communication processes.
Upon removal of our Application from the Shopify Store by the Merchant, we will securely dispose of the associated data, unless there is a legal obligation or legitimate reason for us to retain such data in compliance with applicable law.
We reserve the right to send periodic emails to users regarding updates and new features related to our services. However, you have the option to opt out of receiving these emails at any time by following the unsubscribe instructions provided in the communication.
We implement appropriate technical and organizational measures to safeguard the collected data against unauthorized access, disclosure, alteration, or destruction. These measures comply with the requirements of the GDPR and relevant data protection laws.
Legal Basis for Processing
The processing of personal data outlined in this Policy is based on the legitimate interests pursued by us as a service provider and as necessary for the performance of the contract between us and the Merchant. We ensure that any processing activities align with the principles of data protection and the rights of data subjects.
As a data subject, you have the right to exercise your data protection rights under the GDPR, including the right to access, rectify, erase, restrict processing, object to processing, data portability, and the right not to be subject to automated decision-making.
For any inquiries, requests, or concerns regarding this Policy or the processing of your personal data, please contact us at the following address:
Changes to this Policy