Declaration on the duty to provide information
In the following data protection declaration, we inform you about the most important aspects of data processing on our website. We collect and process personal data only on the basis of the statutory provisions (General Data Protection Regulation, Telecommunications Act 2003).
As soon as you access or visit our website as a user, your IP address and the beginning, beginning and end of the session are recorded. This is due to technical reasons and therefore represents a legitimate interest within the meaning of Art 6 Paragraph 1 lit f GDPR.
If you contact us either via our contact form on our website or by email, the data you have transmitted to us will be stored for six months in order to process your request or in case of further follow-up questions. Your transmitted data will not be passed on without your consent.
We also save the following data for the execution of the contract:
Name, address, telephone number, email.
The data you provide is required to fulfill the contract and to carry out pre-contractual measures. It is not possible to conclude a contract without this data. The data collected will not be transmitted to third parties, with the exception of the transmission of payment data (credit card data) to the processing bank / payment service provider for the purpose of debiting the purchase price to the shipping company (transport company) commissioned by us, which is responsible for delivering the goods and our tax advisor to fulfill our tax obligations.
If you cancel the shopping process, this data stored by us will be deleted. If a contract is to be concluded, all data resulting from the contractual relationship will be stored until the expiry of the tax retention period (7 years). The transmitted name, address, purchased goods and date of purchase are also stored until the product liability expires (10 years). The data processing takes place on the basis of the legal provisions of § 96 Abs 3 TKG as well as Art 6 Abs 1 lit a (consent) and / or lit b (necessary to fulfill the contract) of the GDPR.
Data transfer to third countries
Some of our services are hosted in Switzerland – i.e. outside the EU – which is why data is also transferred there and processed there. The information is located there exclusively in the most modern GDPR-compliant data centers. With the exception of the mailboxes, the technology ensures that third parties cannot access it. The hoster has no way of viewing or processing the data. Furthermore, the hoster has contractually agreed to handle all hosted data in accordance with the GDPR. The adequacy decision made against Switzerland on the basis of the data protection directive 95/46 / EC states that data exchange between the EU and Switzerland does not require any special approval by the supervisory authority (for details see https://www.wko.at/service/wirtschaftsrecht – Commercial law / EU General Data Protection Regulation: -Internationaler-Datenverk.html)
This website and the provider connected to it automatically collect information in the context of so-called “server log files” when you use the website. This applies in particular to:
- IP address or host name
- the browser used
- Duration of stay on the website as well as date and time
- pages of the website called up
- Language settings and operating system
- “Leaving-Page” (on which URL the user left the website)
- Internet Service Provider
This collected information is not processed personally or associated with personal data.
The website operator reserves the right to evaluate or check this data in the event that illegal activities become known.
Your rights as a data subject
As a data subject, you have the right to:
- Deletion of data
- Correction of the data
- Data portability
- Revocation and objection to data processing
If you suspect that data protection law violations have occurred in the course of processing your data, you can complain to us (firstname.lastname@example.org) or the data protection authority.