We maintain online presences on the following social networks:
With this data protection declaration, we would like to inform you about the type, scope and purpose of the processing of personal data (hereinafter also referred to as "data"). Personal data is all data that is personally related to you, e.g. B. name, address, e-mail address or your user behavior. The data protection declaration applies to all data processing operations carried out by us both within the framework of our core activity and for the online media provided by us.
Responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Christina Haller, MA, Fellever&Paways e.U., Grottenhofstraße 68, 8053 Graz, Austria, Tel.: +43 316 /251218, E- Email: firstname.lastname@example.org. The person responsible for the processing of personal data is the natural or legal person who alone or jointly with others decides on the purposes and means of the processing of personal data.
Processing of your data as part of the core activity of our company
If you are our customer or business partner or are interested in our services, the type, scope and purpose of the processing of your data is based on the contractual or pre-contractual relationships between us. In this sense, the data processed by us includes all data that you provide or have provided for the purpose of using the contractual or pre-contractual services and that are required to process your inquiry or the contract concluded between us. Unless otherwise stated in the further information in this data protection declaration, the processing of your data and its transfer to third parties is limited to the data required to answer your inquiries and/or to fulfill the contract concluded between you and us, to protect our rights and are necessary and appropriate for the fulfillment of legal obligations. We will inform you which data is required for this before or as part of the data collection. Insofar as we use third-party providers to provide our services, the data protection notices of the respective third-party providers apply.
- Inventory data (e.g. names, addresses)
- Payment data (e.g. bank details, invoices)
- Contact details (e.g. e-mail address, telephone number, postal address)
- Contract data (e.g. subject matter of contract, duration of contract)
Persons affected: Prospects, business and contractual partners
Processing purpose: Processing of contractual services, communication and answering contact requests, office and organizational procedures
Legal basis: Performance of a contract and pre-contractual inquiries, Article 6(1)(b) GDPR, legal obligation, Article 6(1)(c) GDPR, legitimate interest, Article 6 paragraph 1 lit. f GDPR
Data collection when visiting our website
If you only use our website for informational purposes, i.e. if you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server (so-called "server log files"). When you visit our website, we collect the following data that is technically necessary for us to display the website to you:
Our visited website
Date and time at the time of access
Amount of sent Data in bytes
Source/reference from which you came to the page
Operating system used
IP address used (if necessary: in anonymous form)
The processing is carried out in accordance with Art 6 paragraph 1 lit.f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to subsequently check the server log files if there are concrete indications of illegal use.
We use the shop system of the service provider Shopify International Limited, Victoria Buildings, 2nd floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify") for the purpose of hosting and displaying the online shop on the basis of processing on our behalf. All data collected on our website is processed on Shopify's servers. As part of the aforementioned Shopify services, data may also be processed as part of further processing on behalf of Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada, Shopify Data Processing (USA) Inc., Shopify Payments (USA) Inc .or Shopify (USA) Inc. In the event that data is transmitted to Shopify Inc. in Canada, the European Commission’s adequacy decision ensures the appropriate level of data protection. Further information on Shopify's data protection is available on the following website: https://www.shopify.de/legal/datenschutz
Further processing on servers other than those mentioned above by Shopify will only take place within the framework communicated below.
In order to make visiting our website attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your end device. Some of the cookies we use are deleted after the end of the browser session, i.e. after closing your browser (so-called session cookies). Other cookies remain on your end device and enable your browser to be recognized the next time you visit (so-called persistent cookies). If cookies are set, they collect and process certain user information such as browser and location data as well as IP address values to an individual extent. Persistent cookies are automatically deleted after a specified period, which can vary depending on the cookie. You can find out how long each cookie is stored in the overview of the cookie settings in your web browser.
The cookies are sometimes used to simplify the ordering process by storing settings (e.g. remembering the contents of a virtual shopping cart for a subsequent visit to the website). If personal data is also processed by individual cookies used by us, the processing takes place in accordance with Article 6 Paragraph 1 Letter b GDPR either for the execution of the contract, in accordance with Article 6 Paragraph 1 Letter a GDPR in the event that consent has been given or in accordance with Art. 6 (1) (f) GDPR to protect our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the site visit.
Please note that you can set your browser so that You will be informed about the setting of cookies and can decide individually whether to accept them or exclude the acceptance of cookies for certain cases or in general. Each browser differs in the way it manages cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings.
Personal data is collected when contacting us (e.g. via contact form or e-mail). Which data is collected in the case of a contact form can be seen from the respective contact form.This data is stored and used exclusively for the purpose of answering your request or for contacting you and the associated technical administration. The legal basis for the processing of this data is our legitimate interest in answering your request in accordance with Article 6 (1) (f) GDPR. If your contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6 (1) (b) GDPR. Your data will be deleted after your request has been processed. This is the case if it can be inferred from the circumstances that the facts in question have been finally clarified and provided that there are no legal storage obligations to the contrary.
Data processing when opening a customer account and for contract processing
According to Article 6 Paragraph 1 Letter b GDPR, personal data will continue to be collected and processed if you provide it to us to execute a contract or open a customer account. Which data is collected can be seen from the respective input forms. A deletion of your customer account is possible at any time and can be done by sending a message to the above address of the person responsible. We store and use the data you provide to process the contract. After the contract has been completed or your customer account has been deleted, your data will be blocked with regard to retention periods under tax and commercial law and deleted after these periods have expired, unless you have expressly consented to further use of your data or have reserved the right to further data use permitted by law on our part was.
Use of customer data for direct advertising
Subscription to our email newsletter
If you register for our e-mail newsletter, we will regularly send you information about our offers. The only mandatory information for sending the newsletter is your e-mail address. Providing further data is voluntary and is used to be able to address you personally. We use the so-called double opt-in procedure to send the newsletter. This means that we will only send you an e-mail newsletter if you have expressly confirmed to us that you consent to receiving newsletters. We will then send you a confirmation e-mail asking you to confirm that you wish to receive the newsletter in the future by clicking on a corresponding link.
By activating the confirmation link you give us your consent to the use of your personal data in accordance with Article 6 (1) (a) GDPR. When you register for the newsletter, we save your IP address entered by the Internet Service Provider (ISP) as well as the date and time of registration in order to be able to trace possible misuse of your e-mail address at a later point in time. The data collected by us when registering for the newsletter will only be used for advertising purposes by way of the newsletter. You can unsubscribe from the newsletter at any time via the link provided for this purpose in the newsletter or by sending a message to the person responsible mentioned at the beginning. After you have unsubscribed, your e-mail address will be deleted from our newsletter distribution list immediately, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is permitted by law and about which we will inform you in this declaration.
Newsletter sent via Shopify Email
Our email newsletters are sent via Shopify Email, a service provided by Shopify International Limited, Victoria Buildings, 2.Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland (“Shopify”), to whom we pass on the data you provided when registering for the newsletter in using an effective, secure and user-friendly newsletter system. The data you enter for the purpose of subscribing to the newsletter (e.g. e-mail address) is generally stored on Shopify's servers in the EU Processing on behalf of Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada, which is transmitted to Shopify Data Processing (USA) Inc., Shopify Payments (USA) Inc. or Shopify (USA) Inc. If data is transmitted to Shopify Inc. in Canada, the European Commission's adequacy decision ensures the appropriate level of data protection.
Shopify uses this information to send and statistically evaluate the newsletter in our mission. For the evaluation, the e-mails sent can contain so-called web beacons or tracking pixels, which represent one-pixel image files that are stored on our website. In this way it can be determined whether a newsletter message has been opened and which links have been clicked on. Technical information is also recorded (e.g. time of retrieval, IP address, browser type and operating system). The data is only collected in a pseudonymised form and is not linked to your other personal data; direct personal reference is excluded. This data is used exclusively for the statistical analysis of newsletter campaigns. The results of these analyzes can be used to better adapt future newsletters to the interests of the recipients. If you wish to object to the data analysis for statistical evaluation purposes, you must unsubscribe from the newsletter.
In addition, Shopify can process this data itself in accordance with Article 6(1)(f) GDPR on the basis of its own legitimate Interest in the needs-based design and optimization of the service and for market research purposes, for example to determine which countries the recipients come from. However, Shopify does not use the data of our newsletter recipients to write to them themselves or to pass the data on to third parties.
We have concluded an order processing contract with Shopify, with which we oblige Shopify to process the data of our customers and not to pass them on to third parties.
Data processing for order processing
To process your order, we work together with the following service provider(s), who support us in whole or in part in the execution of concluded contracts.
Certain personal data is transmitted to these service providers in accordance with the following information.
The personal data collected by us will be passed on to the transport company commissioned with the delivery as part of the contract, insofar as this is necessary for the delivery of the goods. We pass on your payment data to the commissioned credit institute as part of the payment process, provided this is necessary for the payment process. If payment service providers are used, we will explicitly inform you of this below. The legal basis for the transfer of data is Article 6 (1) (b) GDPR.
Passing on of personal data to shipping service providers
If the goods are delivered by the transport service provider Österreichische Post (Österreichische Post Aktiengesellschaft, Rochusplatz 1, 1030 Vienna, Austria), we will provide you with your e-mail address prior to the delivery of the goods in accordance with Article 6 Paragraph 1 Letter a GDPR for the purpose of coordinating a delivery date or notification of delivery to Austrian Post, provided that you have given your express consent to this during the ordering process. Otherwise, we only pass on the name of the recipient and the delivery address to Austrian Post for the purpose of delivery in accordance with Article 6 (1) (b) GDPR. The data will only be passed on if this is necessary for the delivery of the goods. In this case, prior coordination of the delivery date with Austrian Post or the transmission of status information on the delivery of the shipment is not possible Transport service provider Austrian Post can be revoked.
Our online presence on social networks
We operate online presences within the social networks listed below. If you visit one of these sites, the data listed below will be collected and processed by the respective provider. As a rule, this data is collected for advertising and market research purposes and usage profiles are created with it. Data can be stored in the usage profiles regardless of the device you are using. This is particularly the case if you are a member of the respective platform and are logged in to it. The usage profiles can be used by the providers to show you interest-based advertising. You have a right of withdrawal against the creation of user profiles. To exercise this, you must contact the respective provider.
If you have an account with one of the providers listed below and are logged in when you visit our website, the respective provider can collect data about your usage behavior on our website. To prevent such a linking of your data, you can log out of the provider's service before visiting our site.
For what purpose and to what extent data is collected by the provider can be found in the respective data protection declarations of the providers communicated below.
We would like to point out that depending on the country of domicile of the provider named below, the data collected via its platform may be transferred and processed outside the European Union. In this case, there is a risk that the level of data protection prescribed by the GDPR is not observed and that your rights cannot be enforced or can only be enforced with difficulty.
Service provider: Instagram Inc., 1601 Willow Road, Menlo Park CA 94025, USA
Parent company: Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA
Headquarters in the EU: Facebook Ireland Limited , 4 Grand Canal Square, Dublin 2, Ireland
Service Provider: musical.ly Inc., 10351 Santa Monica Boulevard #310, Los Angeles, 90025 California, USA
EU Headquarters: TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland
Service provider: Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA
Headquarters in the EU: Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland
Website : https://www.facebook.com/
Payment service provider
In accordance with our legal obligations or because of our legitimate interests in efficient, secure and customer-oriented payment processing, persons who have concluded a contract or other legal relationship with us can use banks and credit institutions as well as other payment service providers for payment . The payment service providers we offer process inventory data in this context, including name, address or bank details such as account/credit card number, passwords, TANs, verification numbers as well as information on the contract concluded and information on the recipient of the payment.
The data collected in this context is required in order for the payment service provider to be able to process the payment. Only the payment service provider commissioned by us collects and processes this personal information. At no time do we receive information about your account or credit card details. We are informed by our payment service provider whether or not our customers' payment has arrived. It is possible for our payment service providers to forward our customers' data to business information files in order to be able to check the identity and creditworthiness of the payer. In this respect, we refer to the data protection declaration and general terms and conditions (GTC) of our payment service providers.
The terms and conditions and data protection regulations of the respective payment service provider apply. You can find these notices on the affected service provider's website or in the transaction application. For further information and for the assertion of your rights regarding revocation and information, we refer to the provisions of the respective service provider.
We use the payment service provider "Shopify Payments", 3rd Floor, Europa House, Harcourt Building, Harcourt Street, Dublin 2. If you choose a payment method offered by the payment service provider Shopify Payments, the payment will be processed via the technical Service provider Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland, to whom we pass on the information you provided during the ordering process together with the information about your order (name, address, account number, sort code, possibly credit card number, Invoice amount, currency and transaction number) in accordance with Art. 6 Para. 1 lit. b GDPR. Your data will only be passed on for the purpose of payment processing with Stripe Payments Europe Ltd. and only insofar as it is necessary for this. You can find more information about Shopify Payments' data protection at the following Internet address: https://www.shopify.com/legal/privacy.
Privacy information on Stripe Payments Europe Ltd . can be found here: https://stripe.com/de/privacy
When paying via PayPal, credit card via PayPal, direct debit via PayPal or - if offered - "purchase on account" or "payment in installments" via PayPal, we pass on your payment data to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal"), further The transfer takes place in accordance with Art. 6 Para. 1 lit. b DSGVO and only to the extent that this is necessary for payment processing We reserve the right to carry out a credit check for the payment methods credit card via PayPal, direct debit via PayPal or - if offered - "purchase on account" or "payment in installments" via PayPal. For this purpose, your payment data may be passed on to credit agencies in accordance with Article 6 (1) (f) GDPR on the basis of PayPal's legitimate interest in determining your solvency. PayPal uses the result of the credit check in relation to the statistical probability of non-payment for the purpose of deciding whether to provide the respective payment method. The credit report can contain probability values (so-called score values). As far as score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical process. Among other things, but not exclusively, address data is included in the calculation of the score values. Further data protection information, including information on the credit agencies used, can be found in PayPal's data protection declaration: https://www.paypal.com/de/webapps/mpp/ua/privacy-full
You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for contractual payment processing.
Rights of the data subject
The applicable data protection law grants you extensive data subject rights (rights to information and intervention rights) vis-à-vis the person responsible with regard to the processing of your personal data, about which we will inform you below:
Right to information in accordance with Art. 15 GDPR: You have in particular a Right to information about your personal data processed by us, the processing purposes, the categories of processed personal data, the recipients or categories of recipients to whom your data was or will be disclosed, the planned storage period or the criteria for determining the storage period, the existence of a right to correction, deletion, restriction of processing, objection to processing, complaint to a supervisory authority, the origin of your data if they were not collected from you by us, the existence of automated decision-making including profiling and, if applicable, a Meaningful information about the logic involved and the scope and intended effects of such processing on you, as well as your right to information about the guarantees according to Art. 46 GDPR if your data is forwarded to third countries;
Right to rectification according to Art. 16 DSGVO: You have the right to immediate correction of incorrect data concerning you and/or completion of your incomplete data stored by us;
Right to deletion according to Art. 17 DSGVO: You have the right to the deletion of your personal data if the requirements are met of Art. 17 Para. 1 GDPR. However, this right does not exist in particular if the processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;
Right to restriction the processing according to Art.18 GDPR: You have the right to request the restriction of the processing of your personal data as long as the accuracy of your data, which you contest, is checked, if you refuse to delete your data due to inadmissible data processing and instead request the restriction of the processing of your data if you need your data to assert, exercise or defend legal claims after we no longer need this data after the purpose has been achieved or if you have lodged an objection for reasons of your particular situation, as long as it is not yet clear whether our legitimate reasons prevail;
Right to Information in accordance with Art. 19 GDPR: If you have asserted the right to correction, deletion or restriction of processing against the person responsible, he is obliged to inform all recipients to whom the personal data concerning you have been disclosed of this correction or deletion of the data or E restriction of processing, unless this proves impossible or involves a disproportionate effort. You have the right to be informed about these recipients.
Right to data transferability in accordance with Art. 20 GDPR: You have the right to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request transmission to another person responsible, insofar as this is technically feasible;
Right to revoke granted consent in accordance with Art. 7 Para. 3 DSGVO: You have the right to revoke your consent to the processing of data at any time with effect revoke for the future. In the event of revocation, we will delete the data concerned immediately, unless further processing can be based on a legal basis for processing without consent. The revocation of the consent does not affect the lawfulness of the processing carried out on the basis of the consent up to the point of revocation;
Right to complain in accordance with Art. 77 GDPR: If you believe that the processing of your personal data violates the GDPR , you have - without prejudice to any other administrative or judicial remedy - the right to lodge a complaint with a supervisory authority, in particular in the member state of your habitual residence, your place of work or the place of the alleged infringement.
Your rights under the GDPR
According to the GDPR, you are entitled to the rights listed below, which you can assert at any time with the person responsible named in Section 1 of this data protection declaration:
- Right to information: You have the right to request information from us as to whether and which data we process from you.
- Right to rectification: You have the right to request the correction of inaccurate data or the completion of incomplete data.
- Right to erasure: You have the right to request the erasure of your data.
- Right to restriction: In certain cases you have the right to request that we only process your data to a limited extent.
- Right to data portability: You have the right to request that we transmit your data to you or another person responsible in a structured, commonly used and machine-readable format.
- Right of appeal: You have the right to complain to a supervisory authority. The supervisory authority of your usual place of residence, your workplace or our company headquarters is responsible.
Right of withdrawal
You have the right to revoke your consent to data processing at any time
Right to object
You have the right to object at any time to the processing of your data, which we base on our legitimate interest in accordance with Article 6 (1) (f) GDPR. If you make use of your right of objection, we ask you to explain the reasons. We will then no longer process your personal data unless we can prove to you that compelling reasons for data processing worthy of protection outweigh your interests and rights.
Regardless of the above, you have the right to object to the processing of your personal data for advertising and data analysis purposes at any time.
Please address your objection to the above contact address of the person responsible.
Duration of storage of personal data
The duration of the storage of personal data is measured based on the respective legal basis, the processing purpose and - if relevant - also based on the respective statutory retention period (e.g. commercial and tax retention periods).
When processing personal Data on the basis of an express consent in accordance with Article 6 (1) (a) GDPR, this data will be stored until the person concerned revokes his consent Obligations on the basis of Article 6 Paragraph 1 lit. b GDPR are processed, this data is routinely deleted after the retention period has expired, provided that it is no longer required to fulfill or initiate a contract and/or we have no legitimate interest in further storage.
At the processing Processing of personal data on the basis of Article 6 Paragraph 1 Letter f GDPR, this data will be stored until the data subject exercises his right of objection in accordance with Article 21 Paragraph 1 GDPR, unless we can compelling reasons worthy of protection for the Evidence of processing that outweighs the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims.
When processing personal data for the purpose of direct advertising on the basis of Art. 6 Paragraph 1 lit. f GDPR, this data is stored until the data subject exercises his right of objection under Article 21 Paragraph 2 GDPR.
Unless otherwise stated in the other information in this declaration on specific processing situations, stored personal data will be deleted if they were processed for the purposes for which they were collected or processed in any other way , are no longer necessary.