Privacy Policy
Privacy Policy / Datenschutzerklärung — Wokon / Wokon Core
Version 2026-10-23-shop-golive-legal · Last updated: 23 October 2026
═══════════════════════════════════════════════════════════════
ENGLISH (authoritative for Google OAuth / international users)
═══════════════════════════════════════════════════════════════
1. Controller
Oliver Wokon, trading as Wokon Medienlogistik / WokonMedia / Optik Wokon ("we", "us")
Auerspergstr. 54/1, 5020 Salzburg, Austria
Email (privacy): datenschutz@wokonmedia.de · office@wokonmedia.com
Phone: +49 176 20623364
VAT AT: ATU48475608 · VAT DE: DE297859414
We are established in Austria (EU). Processing for Wokon Core and related services is
carried out on self-hosted infrastructure located in Germany (EU/EEA). No non-EU
hyperscaler is used as primary application host for Core.
Supervisory authority (complaints): Österreichische Datenschutzbehörde, Barichgasse 40–42,
1030 Vienna, Austria — https://www.dsb.gv.at/
2. Scope
This policy applies site-wide to:
• Wokon Core (operations platform at https://core.wokonmedia.com)
• WokonMedia storefront and public pages (https://www.wokonmedia.com and related
wokonmedia / wokon domains)
• Google account connections used with these services
3. Categories of data
Depending on how you use the Services, we may process:
• Account / contact data (name, email, phone, address, login identifiers)
• Order, payment reference, shipping and invoice data (storefront / marketplace ops)
• Support and mail content that you sync into Core
• Technical logs (IP address, timestamp, user agent, security events)
• Cookie / local-storage preferences (consent choice)
• Google user data you authorize (see section 5)
4. Purposes and legal bases (GDPR Art. 6)
• Provide and secure the Services — Art. 6(1)(b) contract / (f) legitimate interests
• Process shop orders, payments, shipping, returns — Art. 6(1)(b) and (c) legal duties
• Tax, bookkeeping, commercial retention — Art. 6(1)(c)
• Google OAuth features you enable — Art. 6(1)(b) and/or (a) consent via Google grant
• Security, abuse prevention, debugging — Art. 6(1)(f)
• Optional analytics/marketing cookies only with consent — Art. 6(1)(a)
• Marketing only with consent where required — Art. 6(1)(a)
5. Google user data (OAuth / Google APIs)
If you connect a Google account, we may access — only for the features you enable:
• OpenID: email and basic profile (scopes openid, email, profile)
• Gmail — restricted scope https://mail.google.com/ — mailbox access via IMAP/SMTP OAuth
so Core can sync, display, search, attach, and process business email for that account
(orders, receipts, support). Operators using Core may read mail as part of normal work.
• Google Drive — scope https://www.googleapis.com/auth/drive.file — only files our app
creates or that you open with the app (e.g. catalog media, encrypted backups)
• Google Calendar — scope https://www.googleapis.com/auth/calendar — events you sync from Core
We request offline access so tokens can be refreshed. Tokens are encrypted at rest.
You can disconnect in Core settings and revoke access in your Google Account.
Wokon Core's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements: https://developers.google.com/terms/api-services-user-data-policy
In particular for Google data:
• Used only to provide/improve the user-facing Core / storefront features you enabled
• Not sold; not used for advertising profiles
• Not used to develop, improve, or train generalized / non-personalized AI/ML models
• Not transferred to other apps except as needed to run the Service (EU hosting),
to comply with law, or with your instruction
• Human access limited to authorized operators, security/abuse cases, support you request,
or legal compulsion
6. Hosting and processors
Primary application hosting: self-operated servers in Germany (EU).
Typical processors (as needed): payment providers shown at checkout (e.g. Revolut /
card processors), carriers for shipment, email transit, and Google Ireland Ltd. when
you connect Google. Where a processor is outside the EEA, we rely on an adequacy
decision and/or Standard Contractual Clauses plus appropriate safeguards.
7. Cookies and local storage (storefront)
Strictly necessary: cart (localStorage), checkout idempotency, ship-to country preference,
cookie-consent preference, preview unlock where used. These do not require prior consent.
Optional statistics/marketing categories appear in the cookie banner but are currently
not wired to third-party trackers. If analytics or ads scripts are added later, they
load only after active consent ("Alle akzeptieren" or category save). You can reopen
settings via the footer link „Cookie-Einstellungen“.
8. Retention
• Orders, invoices, bookkeeping: as required by Austrian/German commercial and tax law
(often up to 7–10 years)
• Google tokens: while the connection is active; deleted/rotated on disconnect
• Synced mail/files: while needed for operations you perform; business records derived
from them may remain under legal retention
• Account data: until deletion request, subject to legal holds
• Server logs: short rolling period unless needed longer for incident response
9. International availability
We do not intentionally serve sanctioned jurisdictions (including Russia, Belarus,
North Korea). Shipping/country rules may block further destinations.
10. Your rights
Under GDPR you may request access, rectification, erasure, restriction, portability,
and objection, and withdraw consent where processing is consent-based. Contact
datenschutz@wokonmedia.de. Response without undue delay (typically within one month).
You may lodge a complaint with the Austrian DSB or your local EU authority.
11. Packaging / EPR (shop)
For goods placed on the market in Germany we participate in packaging compliance
via a dual system / LUCID registration process (partner communications: Reclay activate).
Registration numbers and further EPR schemes (WEEE/batteries) are maintained operationally
and disclosed on invoices/product pages where legally required. Contact office@wokonmedia.com
for the current public registration identifiers.
12. Changes
Material changes affecting Google user data use will be published here before new uses
begin; renewed Google consent may be required. The English section is authoritative for
Google API / OAuth verification disclosures.
This document is a product compliance disclosure, not personalized legal advice.
═══════════════════════════════════════════════════════════════
DEUTSCH (AT/DE Verbraucher & ECG/DSGVO-Transparenz)
═══════════════════════════════════════════════════════════════
1. Verantwortlicher
Oliver Wokon (Wokon Medienlogistik / WokonMedia / Optik Wokon)
Auerspergstr. 54/1, 5020 Salzburg, Österreich
E-Mail: datenschutz@wokonmedia.de · office@wokonmedia.com
Telefon: +49 176 20623364
UID AT: ATU48475608 · USt-IdNr. DE: DE297859414
Zuständige Aufsichtsbehörde: Österreichische Datenschutzbehörde, https://www.dsb.gv.at/
2. Hosting
Der Betrieb von Wokon Core und zugehöriger Dienste erfolgt auf selbst betriebenen
Servern in Deutschland (EU/EWR).
3. Verarbeitungen (Überblick)
• Website/Shop: Bestellungen, Zahlung, Versand, Widerruf, Kundenkommunikation
• Wokon Core: Auftrags-, Lager-, Buchhaltungs- und Mail-/Dokumentenprozesse
• Server-Logs (IP, Zeit, Sicherheit) — berechtigtes Interesse / Sicherheit
• Cookies/lokale Speicherung: Warenkorb, Checkout, Lieferland, Einwilligungsstatus
• Google-Konto-Anbindung nur nach Ihrer Freigabe (Gmail, Drive-Dateien der App,
Kalender) — siehe englischen Abschnitt 5 inkl. Limited-Use-Erklärung
4. Rechtsgrundlagen
Art. 6 Abs. 1 lit. b DSGVO (Vertrag), lit. c (gesetzliche Pflichten, z. B. Aufbewahrung),
lit. a (Einwilligung, z. B. optionale Cookies / Google-Scopes),
lit. f (berechtigte Interessen: IT-Sicherheit, Missbrauchsschutz).
5. Speicherdauer
Geschäftliche Aufbewahrung nach UGB/BAO bzw. vergleichbaren DE-Pflichten;
technische Logs kurzfristig; Google-Tokens bis zum Widerruf der Verbindung.
6. Ihre Rechte
Auskunft, Berichtigung, Löschung, Einschränkung, Datenübertragbarkeit, Widerspruch,
Beschwerde bei der Datenschutzbehörde. Kontakt: datenschutz@wokonmedia.de
7. Verpackung / EPR
Für Inverkehrbringen in DE nutzen wir die vorgeschriebene Verpackungs-Lizenzierung /
LUCID-Meldung über unser Duales-System-Partnernetz (u. a. Reclay activate).
Aktuelle Registrierkennungen auf Anfrage bzw. wo gesetzlich auf Belegen auszuweisen.
Kein Tracking zu Werbezwecken durch Google-Nutzerdaten. Kein Verkauf von Daten.