Privacy policy

Privacy Policy

MaquiBeef – Argentine Black Angus Beef

MaquiBeef e.U. · Version: July 2026

This English version is provided for convenience only. In the event of any discrepancy, the German version is legally binding.

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (DSG) is:

MaquiBeef e.U.
Owner: Maximiliano Fernando Schultz
Am Modenapark 10/19, 1030 Vienna, Austria
Email: office@maquibeef.at
Company register no.: 682667y, Commercial Court of Vienna
VAT ID: ATU83457769

For questions about data protection and to exercise your rights as a data subject, you can reach us at office@maquibeef.at. Due to the nature and scope of the processing carried out by MaquiBeef, the appointment of a data protection officer is not required by law and has not been made.

2. General information on this privacy policy

The protection of your personal data is of particular concern to us. This privacy policy informs you about which personal data we process in connection with the operation of our online shop, our website www.maquibeef.at, our social media presence and our delivery and contractual relationships, for what purposes, on which legal basis the respective processing is based, to whom the data may be disclosed and how long we store it. Our General Terms and Conditions (GTC) apply additionally, in particular section 12 (Data protection) and section 17 (User-generated content and feedback).

We process personal data exclusively on the basis of the following legal bases under Art. 6 (1) GDPR:

• (a) – your consent
• (b) – performance of a contract with you or pre-contractual measures
• (c) – compliance with a legal obligation to which we are subject
• (f) – legitimate interests of MaquiBeef or a third party, provided your interests and fundamental rights do not override them

The legal basis relevant in each case is stated below for the individual processing activities.

3. Provision of the website and server log files

When you access our website www.maquibeef.at or our online shop, our hosting or shop system provider automatically processes technical data transmitted by your browser (so-called server log files). These include in particular:

• IP address
• date and time of the request
• name and URL of the page or file accessed and the amount of data transferred
• referrer URL (previously visited page)
• browser type and operating system used
• name of your access provider

These data are processed to provide the website technically, to ensure its stability and security, and to detect and prevent misuse. The legal basis is our legitimate interest in the secure and functional operation of our online shop (Art. 6 (1) (f) GDPR). Storage period: generally 6 months, after which the log files are deleted or anonymised unless they are still needed as evidence in specific security incidents.
Our online shop is technically operated via the e-commerce platform Shopify. Shopify Inc., 151 O'Connor Street, Ottawa, Ontario K2P 2L8, Canada, is responsible for operating the shop itself (including hosting, storefront, shopping cart, store management, order processing – the “Shopify Platform Services”). Shopify International Limited, 2nd Floor Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland, is responsible for processing payments via Shopify Payments; if you are located in the EU/EEA, Shopify International Limited processes your personal data arising in this context in accordance with Shopify's privacy policy. In the course of providing the payment services, these data may also be transferred to Shopify group companies in Canada and the USA; in this case, the safeguards described in section 18 apply. The payment processors used for the actual payment processing are described in section 8. Depending on the processing, Shopify acts as our processor (Art. 28 GDPR) or, insofar as Shopify also processes data for its own purposes (e.g. fraud prevention, further development of the platform), as an independent controller.

4. SSL encryption

Our website and online shop use SSL encryption (https://) for secure data transmission. You can recognise an encrypted connection by the address bar of your browser and the padlock symbol. Despite our high security standards, we point out that no electronic data transmission over the internet can be completely secure; we therefore cannot accept unlimited liability for information you voluntarily disclose online.

5. Contact by email or telephone

If you contact us by email (e.g. at office@maquibeef.at, support@maquibeef.at or legal@maquibeef.at) or by telephone, we process the data you provide (e.g. name, contact details, content of your enquiry) exclusively to handle and respond to your request.

Where the enquiry relates to an existing or prospective contract, the legal basis is Art. 6 (1) (b) GDPR; otherwise, it is our legitimate interest in responding to enquiries addressed to us (Art. 6 (1) (f) GDPR). Storage period: generally for the duration of handling your request, then deletion, unless a statutory retention obligation applies (in particular in connection with an order, see section 7).

6. Customer account and registration in the online shop

For orders via our online shop, you can either create a customer account or order as a guest, where this is offered in the shop. During registration, we process the data you provide (e.g. name, address, email address, and for businesses company name and VAT ID if applicable) to set up and manage the customer account and to process orders placed through it.
The legal basis is Art. 6 (1) (b) GDPR (performance of a contract or pre-contractual measures). Storage period: until the customer account is deleted by you or at your request, and beyond that for as long as required by statutory retention obligations for orders placed via the account (see section 7).

7. Orders in the online shop – customer, contract and invoice data

When you place an order via our online shop, we process in particular the following data:
• name, address or delivery address, company name if applicable
• email address and telephone number
• order details (products ordered, quantities, prices)
• payment method and payment-related data (but not complete card data if payment is processed by a payment service provider)
• invoice data
• for businesses, the VAT ID if applicable

These data are processed to perform the contract, in particular to process, deliver and invoice your order and to handle withdrawal, warranty and complaint cases in accordance with sections 8 and 9 of our GTC. The legal basis is Art. 6 (1) (b) GDPR. Insofar as the processing serves to comply with statutory retention obligations, in particular under commercial and tax law (e.g. § 132 BAO, § 212 UGB), the legal basis is Art. 6 (1) (c) GDPR. Storage period: contract and invoice data are generally retained for 7 years from the completion of the respective order.

8. Payment processing

MaquiBeef uses Shopify Payments for payment processing in the online shop and offers the following payment methods: credit card (Visa, Mastercard), PayPal, Klarna, Apple Pay, Google Pay and eps bank transfer. Which of these payment methods are available in an individual case depends on the respective ordering process; MaquiBeef reserves the right to exclude individual payment methods depending on the order value, country of delivery or customer history. Within Shopify Payments, the actual payment processing is carried out by one or more of the payment processors contractually designated by Shopify for Austria: Stripe Payments Europe, Ltd. (Ireland), PayPal (Europe) S.à r.l. et Cie, S.C.A. (Luxembourg) and/or Adyen N.V. (Netherlands). Depending on the payment method you choose, the following data are processed:

• Credit card (Visa, Mastercard): card payments are processed within Shopify Payments via Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Dublin, Ireland, PayPal (Europe) S.à r.l. et Cie, S.C.A. or Adyen N.V.; which of these payment processors is used in an individual case is determined technically by Shopify. Card data (card number, expiry date, security code), billing address and payment amount are processed for the purpose of authorisation and debiting. The respective payment processor processes these data as an independent controller in accordance with the Shopify Payments processor terms and its own privacy policy.
• PayPal: if you choose PayPal as your payment method, payment is processed by PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. Name, address, email address, payment amount and, where applicable, bank or card data are processed for the purpose of payment processing as well as fraud and credit checks. PayPal processes these data as an independent controller in accordance with the PayPal privacy policy.
• Klarna: Klarna Bank AB (publ), Sveävägen 46, 111 34 Stockholm, Sweden. Processes name, address, date of birth, contact details, payment amount and, in the case of invoice or instalment purchases, credit data for the purpose of payment processing and credit checks. Klarna processes these data as an independent controller in accordance with the Klarna privacy policy.
• Apple Pay: when Apple Pay is selected, Apple only transmits an encrypted, device-specific payment token to the payment processor responsible in the background (Stripe, PayPal or Adyen); MaquiBeef does not have access to the card data itself. Apple Distribution International Ltd. additionally processes wallet-related device data in accordance with Apple's own privacy policy.
• Google Pay: as with Apple Pay, when Google Pay is selected, Google transmits an encrypted payment token to the payment processor responsible in the background (Stripe, PayPal or Adyen); MaquiBeef does not have access to the card data itself. Google additionally processes wallet-related data in accordance with Google's own privacy policy.
• eps bank transfer: eps bank transfer is integrated directly into Shopify Payments as a local Austrian payment method. When you select this payment method, you are redirected to the login page of your bank and authorise the payment with your usual online banking credentials. Account data (IBAN/BIC) and the payment amount are processed by your bank and, within Shopify Payments, by the respective payment processor.

In all cases, the legal basis is Art. 6 (1) (b) GDPR (performance of the purchase contract). Stripe, PayPal and Adyen, as the payment processors contractually designated by Shopify Payments, are based in the EU/EEA (Ireland, Luxembourg, Netherlands); their involvement as such therefore generally does not entail a transfer to third countries. Where data are nevertheless transferred in individual cases to group companies outside the EU/EEA – for example to Apple Inc. or Google LLC in connection with Apple Pay/Google Pay, to Klarna group companies or to North American group companies of the payment processors mentioned or of Shopify – the safeguards described in section 18 apply. The current privacy notices of the providers are also linked in the payment process.

9. Shipping and logistics

To deliver the goods ordered, we transmit the necessary data (name, delivery address, telephone number or email address for delivery coordination) to the logistics partners we use.
• Same-day delivery in Vienna: delivery within Vienna is currently carried out by MaquiBeef itself (see section 5 (1) of the GTC); the necessary data therefore remain within MaquiBeef's own area of responsibility.
• Austria-wide shipping: once Austria-wide express shipping is available, delivery will be carried out by a logistics company commissioned by MaquiBeef, which processes the transmitted data exclusively for the purpose of delivery.
The legal basis is Art. 6 (1) (b) GDPR.

10. Subscriptions and recurring deliveries

When you take out a subscription in accordance with section 10 of the GTC, we process the data required for its handling (including contact details, chosen product package, delivery interval, payment data) on an ongoing basis for the duration of the subscription in order to carry out the agreed deliveries and debits. The legal basis is Art. 6 (1) (b) GDPR.

11. B2B customers and business partners (event organisers, caterers, suppliers)

In the context of business relationships with businesses, in particular event organisers and premium caterers (see section 15 of the GTC), as well as with suppliers, contract manufacturers and other business partners, we process the contact details of the respective contact persons (name, position, email address, telephone number) as well as contract and billing data. The legal basis is Art. 6 (1) (b) GDPR or, where the contact person is not a party to the contract, our legitimate interest in maintaining and handling the business relationship (Art. 6 (1) (f) GDPR).
We generally collect personal data directly from the data subject. Where, exceptionally, we obtain contact details of contact persons at businesses not from the data subject but from other sources (e.g. at an event, from the respective company's website or other publicly accessible sources), we actively inform the data subject of this processing in accordance with Art. 14 GDPR – in particular of the categories of data concerned and the source of the data – within a reasonable period after obtaining the data, but at the latest within one month; if the data are used for communication with the data subject, at the latest at the time of the first communication; if disclosure to another recipient is envisaged, at the latest when the data are first disclosed. We are also happy to answer any further questions at office@maquibeef.at.

12. Newsletter and direct marketing

If we offer an email newsletter, we process your email address and, where applicable, your name for the purpose of sending information about products, promotions and news from MaquiBeef. Registration takes place using the double opt-in procedure: after registering, you receive a confirmation email, and your consent becomes effective once you confirm it. The legal basis is your consent (Art. 6 (1) (a) GDPR). You can withdraw this consent at any time with effect for the future, for example via the unsubscribe link contained in every newsletter email or by informal message to office@maquibeef.at. After withdrawal, we delete the data processed for sending the newsletter.
Insofar as we advertise our own similar products to existing customers by email within the scope of § 174 (4) TKG 2021, you can object to this use of your email address at any time free of charge and without formalities.

13. Social media presence (Instagram) and online marketing

MaquiBeef maintains a social media presence on Instagram, which is used as part of our content strategy (including “Asado Academy”) for brand communication and customer loyalty. When you interact with our content (e.g. comments, messages, reactions), we process the resulting data within the functions provided by Meta Platforms Ireland Limited or its group companies. Meta, as the provider of the platform, is primarily responsible for operating the platform and the data processing involved; information on this can be found in Meta's data policy.
To acquire new customers, we also use paid advertisements via Instagram & Meta Ads. Insofar as marketing technologies (e.g. Meta Pixel or comparable tools) are used on our website for this purpose, usage data may be processed for advertising, reach and performance measurement purposes and, where applicable, shared with Meta. This processing only takes place insofar as you have consented to it via our cookie consent tool (see section 14). The legal basis is therefore your consent (Art. 6 (1) (a) GDPR); without such consent, we do not use any marketing tools that are not technically necessary.
As Meta may transfer data to third countries, in particular the USA, such a transfer takes place in accordance with the safeguards described in section 18. Further information can be found in Meta's privacy notices.

14. Cookies and similar technologies

Our website and online shop use cookies – small text files that are stored on your device and sent back to our server when you visit the page again. Some cookies are only stored for the duration of the session and deleted when you close the browser (session cookies), others for a longer period (persistent cookies). We distinguish the following categories:
Necessary cookies
These cookies are required to operate the online shop, for example for the shopping cart function, the login status in the customer account or security functions of the Shopify shop system. Without these cookies, the shop does not work correctly. The legal basis is Art. 6 (1) (f) GDPR and § 165 (3) TKG 2021, according to which no separate consent is required for technically necessary cookies. These cookies cannot be deselected via the cookie banner.
Performance and statistics cookies
These cookies are used to analyse user behaviour in order to improve our website (e.g. reach measurement). The legal basis is your consent (Art. 6 (1) (a) GDPR). You can deselect these cookies or withdraw your consent at any time via our cookie banner.
Marketing cookies
These cookies enable us and our advertising partners (e.g. Meta in the context of Instagram & Meta Ads) to show you personalised advertising and to measure the success of our campaigns. The legal basis is your consent (Art. 6 (1) (a) GDPR). You can deselect these cookies or withdraw your consent at any time via our cookie banner.
Details of the cookies used in individual cases (name, provider, purpose, storage period) can be found in the settings of our cookie consent tool on the website. You can also view, edit and delete cookies or prevent their use entirely at any time via your browser settings.

14a. Microsoft Clarity

We use Microsoft Clarity, a web analytics service of Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. Microsoft Clarity collects anonymised data on usage behaviour on our website, in particular mouse movements, clicks and scrolling behaviour (so-called heatmaps and session recordings). The data collected are processed on Microsoft servers. Any transfer to the USA takes place in accordance with the safeguards described in section 18.

This processing only takes place insofar as you have consented to it via our cookie consent tool (Art. 6 (1) (a) GDPR). You can withdraw your consent at any time via our cookie banner. Further information can be found at: https://privacy.microsoft.com/en-gb/privacystatement

14b. Product reviews (Loox)

For product reviews on our website, we use the Loox app (provider: Loox Ltd., Israel). After an order, we transmit your name, email address and information about the products ordered to Loox so that an invitation to leave a review can be sent to you by email. If you submit a review, it will be published on our website together with any photos uploaded and your first name.

The legal basis is our legitimate interest in customer feedback and in presenting customer experiences (Art. 6 (1) (f) GDPR) or your consent to the publication of your review (Art. 6 (1) (a) GDPR). An adequacy decision of the European Commission exists for Israel. You can object to receiving review invitations at any time, e.g. via the unsubscribe link in the email or by email to support@maquibeef.at.

14c. YouTube videos

On our website we show videos from our YouTube channel @maquibeef. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

When you open a page with videos, the preview images are loaded from YouTube servers and the current video list is retrieved via Google's YouTube Data API. In the process, your IP address is transmitted to Google. The video itself is only loaded when you click on a preview image. For this we use YouTube's privacy-enhanced mode (youtube-nocookie.com). After the click, YouTube may collect further data and set cookies.

The legal basis is our legitimate interest in an appealing presentation of our products and preparation tips (Art. 6 (1) (f) GDPR). Any transfer to the USA takes place in accordance with the safeguards described in section 18. Google is certified under the EU-US Data Privacy Framework. Further information: https://policies.google.com/privacy

14d. Analysis and reporting (Windsor.ai, Google Looker Studio)

To evaluate the success of our online shop and our advertising, we combine data from our shop (Shopify) and from our advertising and analytics accounts (e.g. Meta Ads, Google Ads, Google Analytics, Google Search Console, YouTube) in an internal dashboard. For this purpose we use the service Windsor.ai provided by Windsor Group AG, Switzerland, and Google Looker Studio provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Windsor.ai retrieves order and sales data from our shop for this purpose. This may include personal data, in particular order number, order date, order value, products ordered, delivery or pickup method, and customer data such as name, email address and address. The analysis is carried out exclusively for internal purposes; we mainly evaluate the data in aggregated form (e.g. revenue per day, orders per campaign) and do not make any automated decisions about individual customers.

The legal basis is our legitimate interest in managing our business and measuring the success of our advertising (Art. 6(1)(f) GDPR). Windsor.ai and Google act as processors on our behalf; corresponding agreements pursuant to Art. 28 GDPR are in place. An adequacy decision of the European Commission exists for Switzerland. Where data are transferred to the USA, this is done in accordance with the safeguards described in section 18. Further information: https://windsor.ai/privacy-policy/

15. User-generated content (#MaquiBeefShare)

If you post your own photos, videos or other content related to MaquiBeef products on social media and tag them with the hashtag #MaquiBeefShare or by linking the profile @maquibeef, we initially do not process any data beyond the content that is publicly visible on the respective platform anyway (see section 17 (1) of the GTC).
If we wish to use such a post for our own marketing or communication purposes (e.g. website, our own social media channels), we will contact you separately and obtain your express consent to this specific use. Only with this documented consent do we process the respective content, in particular insofar as it contains personal data such as images of persons, on the basis of your consent pursuant to Art. 6 (1) (a) GDPR. You can withdraw this consent at any time with effect for the future pursuant to Art. 7 (3) GDPR, for example informally by email to support@maquibeef.at; the lawfulness of processing carried out until withdrawal remains unaffected. Details are governed by section 17 of our GTC.

16. Job applications

If you apply to MaquiBeef (e.g. by email), we process the application documents you submit (including name, contact details, CV, references, cover letter) exclusively for the purpose of carrying out the application process. The legal basis for this is Art. 6 (1) (b) GDPR (pre-contractual measure). In the event of a rejection, we generally delete your application data no later than 6 months after the end of the application process. Longer storage only takes place if you have expressly consented to storage for future application processes (up to 18 months) (Art. 6 (1) (a) GDPR) or insofar as storage is in our legitimate interest to defend against possible legal claims, for example under the Equal Treatment Act (Art. 6 (1) (f) GDPR).

17. Recipients of data / processors

Where necessary, your data are disclosed to the following categories of recipients:
• provider of our shop and hosting system (Shopify)
• payment service providers used within Shopify Payments (Stripe Payments Europe Ltd., PayPal (Europe) S.à r.l. et Cie, S.C.A., Adyen N.V., Klarna Bank AB, Apple, Google – see section 8)
• logistics and delivery companies commissioned by us (in particular for Austria-wide shipping)
• tax advisors and, where applicable, other professional advisors bound to confidentiality
• IT service providers for the maintenance and support of our systems
• providers of analysis and reporting tools (Windsor.ai, Google Looker Studio – see section 14d)
• providers of marketing and social media tools (e.g. Meta), insofar as covered by your consent
• authorities, insofar as there is a legal obligation to do so
Beyond this, your data are only disclosed if you have given your consent or if we are obliged to do so, for example on the basis of a court or official order. Insofar as the recipients mentioned act as processors on our behalf, we have concluded data processing agreements with them in accordance with Art. 28 GDPR.

18. Transfers to third countries

Personal data are only transferred to countries outside the EU/EEA (third countries) insofar as this is necessary for the respective processing (e.g. when using US service providers such as Meta or, where applicable, certain payment service providers) and the requirements of Art. 44 et seq. GDPR are met. For transfers to recipients based in the USA, we primarily rely on the European Commission's adequacy decision on the EU-US Data Privacy Framework (DPF), insofar as the respective recipient is certified under it. If a recipient is not certified under the DPF, the transfer takes place on the basis of the European Commission's standard contractual clauses together with the additional safeguards required thereunder. Further information on the safeguards used in individual cases and a copy of the relevant safeguards can be obtained on request at office@maquibeef.at.

19. Obligation to provide your data and automated decision-making

The provision of personal data is required for the conclusion and performance of a purchase contract, the creation of a customer account, the conclusion of a subscription and in the context of B2B contracts. Without the necessary data (in particular name, delivery and billing address and payment data), we cannot conclude or perform the respective contract; an order is not possible in this case. For other, voluntary information (e.g. in the context of a newsletter registration, a contact form or consent to the use of user-generated content), there is no obligation to provide it; not providing it only means that we cannot provide the service dependent on it (e.g. sending the newsletter).
MaquiBeef does not carry out automated decision-making, including profiling within the meaning of Art. 22 GDPR.

20. Overview of storage periods

We only store personal data for as long as necessary for the respective purposes or as required by statutory retention obligations. The specific storage periods are stated above for the individual processing activities; in summary, the following applies in particular:

• contract, order and invoice data: 7 years pursuant to § 132 BAO or § 212 UGB
• server log files: 6 months
• contact enquiries without conclusion of a contract: until the enquiry has been dealt with, beyond that only if there is a statutory retention obligation
• consent-based processing (newsletter, marketing/statistics cookies, use of UGC): processing based on your consent ends upon withdrawal for the respective purpose. We keep proof of the granting and, where applicable, withdrawal of consent separately in accordance with Art. 7 (1) GDPR for the period required to provide evidence.
• application data: 6 months from rejection, up to 18 months with express consent

21. Rights of data subjects

Subject to the statutory requirements, you are entitled in particular to the following rights:
• access (Art. 15 GDPR)
• rectification (Art. 16 GDPR)
• erasure (Art. 17 GDPR)
• restriction of processing (Art. 18 GDPR)
• data portability (Art. 20 GDPR)
• objection to processing (Art. 21 GDPR), in particular to direct marketing
• withdrawal of consent given with effect for the future (Art. 7 (3) GDPR)
• complaint to the competent supervisory authority (Art. 77 GDPR)
An informal message to office@maquibeef.at is sufficient to exercise these rights. To verify your identity, we may ask you for suitable proof of identity if necessary.

22. Right to lodge a complaint

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority if you consider that the processing of your personal data infringes the GDPR. In Austria, this is the:

Austrian Data Protection Authority
Barichgasse 40-42, 1030 Vienna
Telephone: +43 1 52 152-0
Email: dsb@dsb.gv.at
Website: www.dsb.gv.at

23. Updates and changes to this privacy policy

We reserve the right to amend this privacy policy as necessary to adapt it to current legal requirements or changes to our services – in particular in the course of the planned extension of shipping to all of Austria. The version currently available at www.maquibeef.at/datenschutz applies.