Privacy policy

Last updated: 26 October 2026

This privacy policy describes how F2 ECO Trading GmbH (“we”, “us” or “our”) collects, uses and discloses personal data when you visit f2eco.eu (the “Website”), use our services, make a purchase there or otherwise communicate with us in connection with the Website (together the “Services”). “You” and “your” refer to you as a user of the Services, whether you are a customer, a website visitor or another person whose data we have collected in accordance with this privacy policy.

Please read this privacy policy carefully.

Changes to this privacy policy

We may update this privacy policy from time to time, for example to reflect changes to our practices or for other operational, legal or regulatory reasons. We will publish the revised version on the Website, update the “Last updated” date and take any other steps required by law.

How we collect and use your personal data

To provide the Services, we collect personal data about you from various sources, as described below, and have done so in the last 12 months. Which data we collect and use depends on how you interact with us.

In addition to the purposes listed below, we may use the data collected about you to communicate with you, to provide or improve the Services, to comply with applicable legal obligations, to enforce applicable terms of use and to protect or defend the Services, our rights and the rights of our users or others.

What personal data do we collect?

The personal data we receive about you depends on how you interact with our Website and use our Services. By “personal data” we mean information that identifies you, relates to you, describes you or can be associated with you. The following sections describe the categories and types of personal data we collect.

Data we collect directly from you

The data you provide to us directly through our Services may include:

  • Contact details, including name, address, phone number and email address.
  • Order details, including name, billing address, delivery address, payment confirmation, email address and phone number.
  • Account details, including username, password, security questions and other information used for account security.
  • Shopping details, including the items you view, add to your cart or save in your account (e.g. loyalty points, reviews, recommendations or gift cards), and your purchases.
  • Customer support details, including the information you include in your messages to us, for example when you write to us via the Services.

Some features of the Services require you to provide certain data directly. You can choose not to provide this data. In that case, however, you may not be able to use these features.

Data we collect about your use

We may also automatically collect certain information about your interaction with the Services (“usage data”). For this we may use cookies, pixels and similar technologies (“cookies”). Usage data may include information about how you access and use our Website and your account, including device information, browser information, information about your network connection, your IP address and other information about your interaction with the Services.

Data we receive from third parties

We may also receive data about you from third parties, including vendors and service providers who collect data on our behalf, for example:

  • Companies that support our Website and Services, such as Shopify.
  • Our payment processors, who collect payment data (e.g. bank account, credit or debit card details, billing address) to process your payment, fulfil your orders and provide you with the products or services you requested, in order to perform our contract with you.
  • When you visit our Website, open or click on emails from us or interact with our Services or advertisements, we or third parties we work with may automatically collect certain information using online tracking technologies such as pixels, web beacons, software development kits, third-party libraries and cookies.

We treat all data we receive from third parties in accordance with this privacy policy. See also the section “Third-party websites and links” below.

How we use your personal data

  • Providing products and services. We use your personal data to provide you with the Services and to perform our contract with you. This includes processing your payments, fulfilling your orders, sending notifications about your account, purchases, returns, exchanges or other transactions, creating, maintaining and managing your account, arranging shipping, handling returns and exchanges and other functions related to your account. We may also improve your shopping experience by enabling Shopify to match your account with other Shopify services you may want to use. In that case, Shopify processes your data in accordance with its privacy policy and consumer privacy policy.
  • Marketing and advertising. We may use your personal data for marketing and advertising purposes, for example to send you marketing and promotional messages by email, text message or post and to show you advertisements for products or services. This may include using your personal data to better tailor the Services and advertising on our Website and other websites to you. If you are resident in the EEA, the legal basis for this is our legitimate interest in selling our products (Art. 6(1)(f) GDPR).
  • Security and fraud prevention. We use your personal data to detect, investigate and respond to possible fraudulent, illegal or malicious activity. If you register an account, you are responsible for keeping your login details secure. We strongly recommend that you do not share your username, password or other login details with third parties. If you believe your account has been compromised, please contact us immediately. If you are resident in the EEA, the legal basis for this is our legitimate interest in ensuring the security of our Website for you and other customers (Art. 6(1)(f) GDPR).
  • Communicating with you and improving our services. We use your personal data to provide you with customer support and to improve our Services. This is in our legitimate interest in being able to respond to you, providing you with effective services and maintaining our business relationship with you (Art. 6(1)(f) GDPR).

Cookies

Like many websites, we use cookies on our Website. Information on the cookies we use in connection with our shop via Shopify can be found at https://www.shopify.com/legal/cookies. We use cookies to operate and improve our Website and our Services (including storing your actions and preferences), to perform analytics and to better understand interaction with the Services (in our legitimate interest in managing, improving and optimising the Services). We may also allow third parties and service providers to use cookies on our Website to better tailor the Services, products and advertising on our Website and other websites to you.

Most browsers accept cookies by default. However, you can set your browser to remove or reject cookies. Please note that removing or blocking cookies may affect your use of the Services and that some features may then not work properly or may not be available. In addition, blocking cookies cannot completely prevent us from sharing information with third parties, such as our advertising partners.

Your browser may allow you to send a “Do Not Track” signal. Our Website is not designed to respond to such signals. You can find out more at http://www.allaboutdnt.com.

Enquiries via the “Find a boatyard near you” page

On the “Find a boatyard near you” page, you can use a form to request a quote from a partner boatyard for coating your boat. For this, we process your first and last name, your email address, details of your boat (model, hull and/or propeller, and where applicable boat type, dimensions and area from our area calculator or configurator), the location you chose, your preferred month and your message. If you are logged in to your customer account, we take your name and email address from the account and may pre-fill details from a previous order (boat details, product ordered, order number and order date). You can change all details.

The enquiry reaches us by email via Shopify (for spam protection, see “Spam protection in forms”). With your consent given in the form, we pass the details of your project on to one or more partner boatyards at the chosen location, obtain a quote and get back to you with it. The boatyard receives neither your name nor your contact details. Partner boatyards may also be located outside the European Economic Area.

The legal basis for handling your enquiry is Art. 6(1)(b) GDPR (pre-contractual steps at your request). The legal basis for passing it on to the boatyard is your consent (Art. 6(1)(a) GDPR). You can withdraw your consent at any time with effect for the future; an email to info@f2eco.eu is sufficient.

We delete the details once we no longer need them to handle your enquiry, unless an order results from it or statutory retention obligations apply.

Online withdrawal (“Withdraw from contract”)

On the “Withdraw from contract” page, you can declare your withdrawal from your contract online. For this, we process your name, your email address, the order number, the scope of the withdrawal (entire order or individual items), your optional comment, the time of receipt, the language and country of the page and whether you were logged in to your customer account.

The purpose is to handle your withdrawal and to send you the acknowledgement of receipt by email required by law, stating the content, date and time of your declaration. The legal basis is Art. 6(1)(c) GDPR (legal obligation under Section 356a BGB or Section 13a FAGG) and, additionally, Art. 6(1)(b) GDPR (performance of the contract).

Recipients:

  • Klaviyo, Inc. (USA) sends the acknowledgement of receipt on our behalf and stores the process in your customer profile at Klaviyo. This involves a transfer of data to the USA. Klaviyo is certified under the EU-US Data Privacy Framework; the transfer is based on the European Commission’s adequacy decision of 10 July 2023 and, additionally, on the European Commission’s Standard Contractual Clauses.
  • Shopify receives an internal copy of your withdrawal via our shop’s contact form. hCaptcha is used there to protect against spam (see “Spam protection in forms”).

We do not set a tracking cookie for the withdrawal function. We do not use the details for advertising. You only receive marketing emails if you have expressly subscribed to them.

We keep the details according to the same principles as your order data (see “Security and retention of your data”).

Spam protection in forms (hCaptcha)

Our forms that run via Shopify’s contact form (contact page, “Find a boatyard near you”, “Withdraw from contract”) are protected against spam and abuse by hCaptcha. hCaptcha is a service of Intuition Machines, Inc., 1065 SW 8th St #704, Miami, FL 33130, USA, which Shopify uses for spam protection. In particular, your IP address, browser and device information and data on your interaction with the page (for example mouse movements and keystrokes) are processed to distinguish humans from automated programs. The legal basis is our legitimate interest in protecting our Website against abuse and spam (Art. 6(1)(f) GDPR). Intuition Machines is certified under the EU-US Data Privacy Framework and uses Standard Contractual Clauses for data from the EU.

How we disclose personal data

In certain circumstances, we may disclose your personal data to third parties to perform a contract, for legitimate purposes and for other reasons set out in this privacy policy. These may include:

  • Vendors and other third parties who provide services on our behalf (e.g. IT management, payment processing, data analytics, customer support, cloud storage, order fulfilment and shipping).
  • Business and marketing partners, to provide services to you and to advertise to you. Our business and marketing partners use your data in accordance with their own privacy policies.
  • Third parties to whom we disclose data because you asked us to or consented to it, for example to deliver products to you or when you use social media widgets or login integrations.
  • Affiliated companies or other companies in our group, in our legitimate interest in running a successful business.
  • In connection with a business transaction such as a merger or insolvency, to comply with applicable legal obligations (including responding to subpoenas, search warrants and similar requests), to enforce applicable terms of use and to protect or defend the Services, our rights and the rights of our users or others.

In the last 12 months, we have disclosed the following categories of personal data for the purposes set out above under “How we collect and use your personal data” and “How we disclose personal data”:

Categories:

  • Identifiers such as basic contact details and certain order and account details
  • Commercial information such as order details, shopping details and customer support details
  • Internet or similar network activity such as usage data
  • Location data, for example locations determined from an IP address or other technical means

Categories of recipients:

  • Vendors and third parties who provide services on our behalf (e.g. internet service providers, payment processors, fulfilment partners, customer support partners and data analytics providers)
  • Business and marketing partners
  • Affiliated companies

We do not use or disclose sensitive personal data without your consent or to draw inferences about you.

Third-party websites and links

Our Website may contain links to websites or other online platforms operated by third parties. If you follow links to websites that are not affiliated with or controlled by us, you should review their privacy and security policies and other terms. We do not guarantee and are not responsible for the privacy or security of such websites, including the accuracy, completeness or reliability of the information found there. Information you share in public or semi-public places, including information on third-party social media platforms, may also be viewed by other users of the Services and/or users of those platforms, without restriction as to its use by us or third parties. Our inclusion of such links does not imply that we endorse the content of these platforms or their owners or operators, except as stated in the Services.

Children’s data

The Services are not intended for children, and we do not knowingly collect personal data from children. If you are the parent or guardian of a child who has provided us with their personal data, you can contact us using the contact details below and request that this data be deleted.

As of the effective date of this privacy policy, we have no knowledge that we “share” or “sell” (as these terms are defined in applicable law) personal data of persons under 16 years of age.

Security and retention of your data

Please note that no security measure is perfect or impenetrable and we cannot guarantee “perfect security”. In addition, information you send us may not be secure in transit. We recommend that you do not use insecure channels to send us sensitive or confidential information.

How long we keep your personal data depends on various factors, for example whether we need the data to manage your account, provide the Services, comply with legal obligations, resolve disputes or enforce other applicable contracts and policies.

Your rights

Depending on where you live, you may have some or all of the rights listed below in relation to your personal data. However, these rights are not absolute and apply only in certain circumstances. In certain cases, we may decline your request to the extent permitted by law.

  • Right of access: You can request access to the personal data we hold about you, including details of how we use and disclose it.
  • Right to erasure: You can request the deletion of the personal data we hold about you.
  • Right to rectification: You can request the correction of inaccurate personal data we hold about you.
  • Right to data portability: You can request a copy of the personal data we hold about you and, in certain circumstances and with certain exceptions, request its transfer to a third party.
  • Right to object to sale, sharing or targeted advertising: You can instruct us not to “sell” or “share” your personal data, or object to processing for purposes considered “targeted advertising” under applicable data protection law. If you visit our Website with the “Global Privacy Control” opt-out signal enabled, we will, depending on your location, automatically treat this as an objection to the “sale” or “sharing” of information for the device and browser you use to visit the Website.
  • Restriction of processing: You can ask us to stop or restrict the processing of your personal data.
  • Withdrawal of consent: Where processing is based on your consent, you can withdraw it at any time.
  • Right to appeal: If we decline your request, you can appeal our decision by replying directly to our decision.
  • Communication preferences: We may send you promotional emails. You can unsubscribe at any time using the unsubscribe link in our emails. Even after unsubscribing, we may still send you non-promotional emails, for example about your account or your orders.

You can exercise these rights as indicated on our Website or by contacting us using the contact details below.

We will not discriminate against you for exercising any of these rights. We may need to collect information from you to verify your identity, such as your email address or account details, before we can respond to your request in substance. In accordance with applicable law, you may appoint an authorised agent to make requests on your behalf. Before we accept such a request, the agent must prove to us that you have authorised them. In addition, we may need to confirm your identity directly with you. We will respond to your request in a timely manner as required by applicable law.

Complaints

If you have complaints about how we process your personal data, please contact us using the contact details below. If you are not satisfied with our response, you may, depending on where you live, appeal our decision by contacting us or lodge a complaint with your local data protection authority. A list of data protection supervisory authorities in the European Economic Area can be found at https://edpb.europa.eu/about-edpb/about-edpb/members.

International users

Please note that we may transfer, store and process your personal data outside the country in which you live. Your personal data is also processed by staff and external service providers and partners in these countries.

If we transfer your personal data to countries outside Europe, we rely on recognised transfer mechanisms such as the European Commission’s Standard Contractual Clauses or equivalent contracts issued by the competent UK authority, unless the transfer is to a country that has been found to provide an adequate level of protection.

Contact

If you have questions about our privacy practices or this privacy policy, or if you would like to exercise any of your rights, please email us at info@f2eco.eu or contact us at F2 ECO Trading GmbH, Dommesgasse 16/31, 1110 Vienna, Austria.

For the purposes of applicable data protection law and unless expressly stated otherwise, we are the controller of your personal data.