WatchTry-On

Privacy Policy

I. Overview

If we welcome you as a customer or business partner, please read from point III.

If you visit our website or use our application, please read from point II.

II. What data do we process when you visit our website?

Welcome to the website [ws.]watchtryon.com! Please get a picture of how we process your personal data when you visit our website (Art 13, Art 14 GDPR; § 165 para. 3 TKG).

When you visit our website, the following data may be processed:

  • Browser type,
  • Operating system,
  • Country,
  • Date,
  • Time and duration of access,
  • IP address[1] and pages visited on our website including entry and exit pages,
  • Unique visitor ID (application only, see II.1).

The processing of this data is necessary to ensure the security of the operation of the website and to ensure the functionality of the website in technical terms. The collection of this data takes place in part via technical cookies and web storage objects (hereinafter "cookies"[2]). These technical cookies are only used to the extent necessary (§ 165 para. 3 TKG). The processing of this data is justified by our legitimate interest in operating our website (Art 6 para. 1 lit f GDPR).

For the operation of our website or to use our application, it may be necessary for us to disclose your data to the following recipients:

  • Recipient: Cloudflare, Inc.
    • Purpose of data processing: Hosting and content delivery of the website watchtryon.com, DDoS protection
    • Legal basis of data processing: Predominant legitimate interest (Art 6 para. 1 lit f GDPR)
    • Place of business: USA, with data centres in the EU
    • Basis for transfer to a third country[3]: EU-US Data Privacy Framework and standard contractual clauses
  • Recipient: netcup GmbH
    • Purpose of data processing: Hosting of the application (ws.watchtryon.com)
    • Legal basis of data processing: Predominant legitimate interest (Art 6 para. 1 lit f GDPR)
    • Place of business: Germany
    • Basis for transfer to a third country: Within the EU
  • Recipient: Matomo On-Premise (analysis tool, operated by us)
    • Purpose of data processing: Statistical evaluation of user behaviour
    • Legal basis of data processing: Predominant legitimate interest (Art 6 para. 1 lit f GDPR); on the website Matomo runs without cookies and with a shortened IP address, in the application only after consent (Art 6 para. 1 lit a GDPR)

II.1. Overview of "technical cookies" used

To ensure the basic functionality of the application, we use "technical cookies". These cookies are necessary to ensure the functioning of our application. They are used to provide the main functions, to store your settings (such as your consent, display language) and temporary data (such as the processing result of your request) and, not least, for security purposes. We generally only use cookies to the extent necessary to provide our services.

Website (watchtryon.com): no cookies or web storage objects are set.

Application Watch Try-On (ws.watchtryon.com), based on our predominantly legitimate interest (Art 6 para. 1 lit f GDPR):

  • Name: i18nextLng
    • Purpose: Used to store language settings
    • Type: Local Storage
    • Duration of storage: Persistent
    • Recipient's country of residence: AT
  • Name: consentSettings
    • Purpose: Used to store which consents have been given (or revoked)
    • Type: Local Storage
    • Duration of storage: 1 year
    • Recipient's country of residence: AT
  • Name: *_lastSessionId
    • Purpose: Used to store the session ID
    • Type: Local Storage
    • Duration of storage: Persistent
    • Recipient's country of residence: AT
  • Name: *_watch, *_strap, *_hand
    • Purpose: Used to store the processing result (cropped image) of an uploaded item
    • Type: Local Storage
    • Duration of storage: Persistent
    • Recipient's country of residence: AT

II.2. Overview of "statistical cookies" used

In the application we use "statistical cookies" to analyse its use. This information is used for statistical analysis to improve the application and facilitate its use, as well as to monitor its correct functioning.

We respect that not every visitor wants this. Therefore, we process your data in the course of statistical cookies only if you consent (Art 6 para. 1 lit a GDPR). You can revoke this consent at any time, whereby the data processing that took place until the time of revocation remains justified.

Currently, the following statistical cookies are used in the application:

  • Name: _pk_id.*
    • Purpose: Used to store some details about the user, such as the unique visitor ID
    • Type: Cookie
    • Duration of storage: 13 months
    • Recipient's country of residence: AT
  • Name: _pk_ref.*
    • Purpose: Used to store attribution information, i.e. the referrer originally used to visit the website
    • Type: Cookie
    • Duration of storage: 6 months
    • Recipient's country of residence: AT
  • Name: _pk_ses.*, _pk_cvar.*, _pk_hsr.*
    • Purpose: Short-lived cookies used for temporary storage of data for the visit
    • Type: Cookie
    • Duration of storage: Up to 30 minutes
    • Recipient's country of residence: AT
  • Name: _pk_testcookie.*
    • Purpose: Used to check whether the visitor's browser supports cookies
    • Type: Cookie
    • Duration of storage: Session
    • Recipient's country of residence: AT
  • Name: mtm_consent
    • Purpose: Used to store that the user has given (or revoked) consent
    • Type: Cookie
    • Duration of storage: 1 year
    • Recipient's country of residence: AT

II.3. Photos uploaded to the application

Photos of a wrist, watch or strap that you upload are processed to render the try-on and, where you choose the measurement function, to measure the wrist. If an identification or bank card is visible for scale, the card area is redacted before the image is stored. Location metadata is removed from uploaded photos. Uploaded photos are not used to train models and are not passed on to third parties other than the shop on whose page you use the application (see V.).

III. For what purposes do we process your data if you are a customer of ours or have a business relationship with us?

In the course of our business relationship with customers and business partners, we process data on the basis of contractual (processing of the contractual relationship with you, pre-contractual obligations, invoicing of services, dispatch of documents, communication for the processing of the contract) and legal obligations (legally required storage in the sense of § 132 BAO) (Art 6 para. 1 lit b and c GDPR) as well as on the basis of our legitimate interests or on the basis of the legitimate interests of third parties (Art 6 para. 1 lit f GDPR), namely:

  • for the purpose of internal administration and management of your business case to the extent necessary (e.g.: processing your business case, forwarding your business case to various departments, filing, archiving purposes, correspondence with you);
  • for the purpose of integrating the application into the customer's web presence;
  • for the purpose of direct advertising (e.g.: mailing, e-mailing, satisfaction surveys, congratulatory letters, statistical analysis); we would like to inform you explicitly that you can object to the processing of your data for the purpose of direct advertising;
  • assertion and defence of legal claims

in each case to the extent necessary. The processing of your data serves the purpose of initiating, maintaining and handling our business relations. If you do not provide us with this data, we will unfortunately not be able to process your business case.

If necessary, we process your data based on your voluntary, explicit consent (Art 6 para. 1 lit a GDPR).

Messages sent through the contact form on this website are delivered to us by e-mail through Resend, Inc. (USA; transfer basis: standard contractual clauses) and stored in our mailbox for as long as the enquiry is being handled, at most one year after the last contact.

IV. How long will your data be stored?

We will only store your data for as long as is necessary for those purposes for which we collected your data. In this context, statutory retention obligations must be taken into account (for example, for reasons of tax law, contracts and other documents from our contractual relationship must generally be retained for a period of seven years [§ 132 BAO]). In justified individual cases, such as for the assertion and defence of legal claims, we may also store your data for up to 30 years after termination of the business relationship.

We store data of interested parties for up to one year from the date of the last contact by the interested party.

Personal data collected in the course of the application will be deleted after 6 months, or anonymised (to be evaluated for statistical, anonymous purposes).

V. Who may receive your data?

In the course of our business relationship, it may be necessary for us to transfer your data to the following recipients:

  • Recipient: The company that embeds the software application on their site
    • Purpose: Display of the watch or strap for virtual try-on
    • Legal basis: Legitimate interest
    • Country: Depending on the location of the company
  • Recipients: Auditors and tax consultants
    • Purpose: Tax consulting
    • Legal basis: Contractual necessity
    • Country: Austria
    • Basis for transfer to third country: Within the EEA
  • Recipient: Banks
    • Purpose: Payment processing
    • Legal basis: Contractual obligation
    • Country: Within the EEA
    • Basis for transfer to third country: Within the EEA
  • Recipients: Lawyers, courts, dispute resolution
    • Purpose: Pursuit and defence of legal claims
    • Legal basis: Predominantly legitimate interests
    • Country: Austria
    • Basis for transfer to third country: Within the EEA
  • Recipient: Investors
    • Purpose: Conducting a due diligence review
    • Legal basis: Predominantly legitimate interests
    • Country: Depending on the location of the investor

VI. Collection of data from other sources (Art 14 GDPR)

Currently, no data is obtained from external sources.

VII. Does automated decision making or profiling take place (Art 13 para. 2 lit f GDPR)?

No automated decision-making or profiling takes place in our company.

VIII. What rights do you have with regard to data processing?

We would like to inform you that, provided the legal requirements are met, you have the following rights:

  • The right to request information about which of your data is processed by us (see in detail Art 15 GDPR).
  • The right to request the correction or completion of incorrect or incomplete data concerning you (see in detail Art 16 GDPR).
  • The right to have your data deleted (see in detail Art 17 GDPR).
  • The right to object to processing of your data that is necessary to protect our legitimate interests or those of a third party (see in detail Art 21 GDPR). This applies in particular with regard to the processing of your data for advertising purposes.
  • The right to receive the transfer of the data you have provided in a structured, common and machine-readable format.

If we process your data on the basis of your consent, you have the right to revoke this consent at any time by e-mail. This will not affect the lawfulness of the data processing carried out up to that point (Art 7 para. 3 GDPR).

IX. What rights of appeal do you have?

If, contrary to expectations, there is a violation of your right to lawful processing of your data, please contact us by mail or e-mail. We will make every effort to deal with your concerns promptly. However, you also have the right to lodge a complaint with the supervisory authority for data protection matters responsible for you.

The address of the Austrian data protection authority is: Österreichische Datenschutzbehörde, Barichgasse 40-42, 1030 Vienna

X. How can you contact us?

If you have any further questions regarding the processing of your data, please feel free to contact our data protection coordinator using the contact details below.

XI. Responsible

Responsible in the sense of Art 4 Z 7 GDPR is:

MAXI solutions e.U.
Maximilian Wöhrer
Rosensteingasse 70/15
A-1170 Wien
Tel/Fax:
E-mail:

  • [1]: An IP address is a number assigned to a device. Devices can communicate over the Internet using this IP address. Each IP address contains information about the Internet service provider used and the physical location of the device used. In this way, information about the user of the device can be obtained.
  • [2]: Cookies and web storage objects are text files that are stored on your computer and enable the provision of functions and an analysis of the use of the website. They are used to store and recognise temporary data and settings of website visitors. You can prevent the storage of cookies and web storage objects by selecting the appropriate settings on your browser software. However, we would like to point out that in this case you may not be able to use all functions of the application to their full extent.
  • [3]: "Third country" includes all countries other than (1) the member states of the European Union and (2) the member states of the European Economic Area, i.e., beyond the EU member states, Iceland, Liechtenstein and Norway.