Privacy policy

1. Controller

mimo studio GmbH, trading as "The Glow Trade", Spiegelgasse 3, 1010 Wien, Austria. Company register: FN 595299 s (Handelsgericht Wien). VAT ID: ATU79421378. Managing Director: Seung Kim. E-mail: hello@theglowtrade.com.

The Glow Trade is a B2B wholesale store. We process personal data of contact persons at our business customers and applicants.

2. Purposes and legal bases

Shop, customer account and orders. We run this store on Shopify (processor: Shopify International Limited). Account data, order and invoice data are processed to perform the contract (Art. 6 (1) (b) GDPR).

Trade-account application. The application form is posted to our e-mail service provider Sequenzy. Processing is pre-contractual (Art. 6 (1) (b) GDPR).

Verification. We check VAT identification numbers in the EU VIES system and check company registers to verify your business (Art. 6 (1) (b) and (f) GDPR; our legitimate interest is trading only with verified businesses).

Order e-mails, invoices and reminders. Sent via Sequenzy to perform the contract (Art. 6 (1) (b) GDPR).

E-mail correspondence. Processed in Microsoft 365 (Microsoft) to handle your requests (Art. 6 (1) (b) and (f) GDPR).

Internal task management. We use Notion to organise customer requests internally (Art. 6 (1) (f) GDPR).

Shipping. Our carrier DPD (DPD Direct Parcel Distribution Austria GmbH) receives name, address, phone number and e-mail address to deliver your order (Art. 6 (1) (b) GDPR).

Payment. Payment is by bank transfer to our bank; we process the payment data needed to match your transfer (Art. 6 (1) (b) GDPR).

Accounting. We retain invoices and booking records for 7 years under § 132 BAO and § 212 UGB (Art. 6 (1) (c) GDPR).

Trade newsletter. Sent via Sequenzy with your consent or under the existing-customer exception of § 174 (4) TKG 2021 (Art. 6 (1) (a) or (f) GDPR). Every e-mail contains an unsubscribe link.

3. Cookies, analytics and marketing

Only with your consent (Art. 6 (1) (a) GDPR), given in the cookie banner, we use: Google Ads (conversion tag AW-18353664116, Google Ireland Limited), Google Analytics 4 via the Google & YouTube app (Google Ireland Limited), the Meta Pixel (Meta), Microsoft Clarity (session recording and heatmaps, Microsoft Corporation) and the Sequenzy web pixel. Without consent these tools do not load. You can withdraw consent at any time in the cookie banner, with effect for the future.

4. Transfers to third countries

Where providers process data in the USA or other third countries, the transfer is based on the EU-US Data Privacy Framework where the provider is certified, and otherwise on standard contractual clauses (Art. 46 (2) (c) GDPR).

5. Retention

We keep contract and accounting data for 7 years (§ 132 BAO, § 212 UGB). Application data of rejected applicants is deleted within 6 months. Marketing data is kept until consent is withdrawn.

6. Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability, and the right to object to processing based on legitimate interests (Art. 21 GDPR). You may withdraw consent at any time with effect for the future. You have the right to lodge a complaint with the supervisory authority: Österreichische Datenschutzbehörde, Barichgasse 40–42, 1030 Wien, dsb@dsb.gv.at.

7. No automated decision-making

We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR. A person reviews every trade-account application.

Last updated: 11 September 2026.