The use of our website is generally possible without providing personal data. If such (eg name, address or e-mail address) are collected, this is as far as possible on a voluntary basis. This data will not be passed on to third parties without your consent. However, we expressly point out that complete protection of data against access by unauthorized third parties is not possible.

The protection of your personal data is of particular concern to us. We therefore process your data exclusively on the basis of the legal provisions (DSGVO, TKG 2003). In this data protection information, we inform you about the most important aspects of data processing within the scope of our website. When you visit our website, your IP address, start and end of the session are recorded for the duration of this session. This is technically required and thus represents a legitimate interest iSv Art 6 para 1 lit f DSGVO. This data will not be further processed by us.

Orders through the webshop

For the purpose of processing the contract, we process the information provided in the web store (title, name, address, telephone number, e-mail address) and the selected goods. The data provided by you are necessary for the fulfillment of the contract or for the implementation of pre-contractual measures. Without this data we cannot conclude the contract with you. No data is transferred to third parties, with the exception of the transfer of the address to the shipping company commissioned by us to deliver the goods and to our tax advisor to fulfill our tax obligations. In the event of late payment or impending default, we will transmit your contact data (title, name, address, e-mail address) as well as information about your order to collection agencies commissioned by us for the purpose of sending reminders and/or collecting unpaid debts.

We offer the option of processing the payment transaction via the payment service provider Stripe, ℅ Legal Process, 510,Townsend St., San Francisco, CA 94103 (Stripe). This is in line with our legitimate interest in offering an efficient and secure payment method (Art. 6 para. 1 lit. f DSGVO). In this context, we share the following data with Stripe to the extent necessary for the performance of the contract (Art. 6 para. 1 lit. b. DSGVO).

Name of the cardholder
E-mail address
Customer number
Order number
Bank details
Credit card data
Credit card validity period
Credit card verification number (CVC)
Date and time of transaction
Transaction amount
Name of the provider
Place

The processing of the data provided under this section is not required by law or contract. We cannot process a payment via Stripe without the submission of your personal data. [You have the option to choose another payment method].

Stripe has a dual role in data processing activities as a controller and processor. As a controller, Stripe uses your submitted data to comply with regulatory obligations. This is in accordance with Stripe’s legitimate interest (pursuant to Art. 6 (1) lit. f DSGVO) and serves the performance of the contract (pursuant to Art. 6 (1) lit. b DSGVO). We have no influence on this process.

Stripe acts as an order processor in order to be able to complete transactions within the payment networks. Within the scope of the order processing relationship, Stripe acts exclusively according to our instructions and has been contractually obligated within the meaning of Art. 28 DSGVO to comply with the provisions of data protection law.

Stripe has implemented compliance measures for international data transfers. These apply to all global activities where Stripe processes personal data of individuals in the EU. These measures are based on the EU Standard Contractual Clauses (SCCs).

For more information about opting out and opting in from Stripe, please visit here.

Registration
We offer you the opportunity to register on our site. The data entered in the course of this registration, which can be seen from the input mask of the registration form, is collected and stored exclusively for the use of our offer. With your registration on our site, we will also store your IP address and the date and time of your registration.

This serves as a safeguard for us in the event that a third party misuses your data and registers on our site with this data without your knowledge. Your data will not be passed on to third parties. A comparison of the data collected in this way with data that may be collected by other components of our site also does not take place. Upon deletion of the registered account, your data will also be deleted.

Advertising contact
With your voluntarily given consent to be contacted by us for advertising purposes, we will process your e-mail address, salutation and name for sending direct marketing materials by e-mail in accordance with § 174 TKG to the extent agreed in each case:

If you have additionally given consent to the setting of marketing and analysis cookies, your consent to receive newsletters also includes the information on your customer behavior collected in this way, which we use to personalize these promotional mailings.

You can revoke your consent to be contacted for advertising purposes at any time, without giving reasons, for all or individual purposes and with effect for the future (e.g. via a link at the end of each newsletter). If you forward our newsletters to third parties, you are obliged to comply with the legal provisions and to obtain the prior consent of the recipient. If a third party raises claims against us due to forwarding of a newsletter by you, you will indemnify and hold us harmless with regard to all related claims, including penalties and costs of legal defense.

Sendinblue
We use “Sendinblue” to send newsletters. Sendinblue is a service of the company SendinblueGmbH, Köpenicker Str. 126, 10179 Berlin.

For this purpose, we pass on the following personal data to Sendinblue:

E-mail address
[first name]
[last name]

Sendinblue is the recipient of your personal data and acts as a processor for us as far as the sending of our newsletter is concerned. Without your consent and the transmission of your personal data, we cannot send out a newsletter to you.

Further information on data protection at Sendinblue can be found under the following link.

The legal basis for this processing is your consent pursuant to Art. 6 (1) a DSGVO. You can revoke your consent to the processing of your personal data at any time. A corresponding link can be found in all mailings. In addition, the revocation can be made via the specified contact options. By declaring the revocation, the lawfulness of the processing carried out so far is not affected.

Your data will be processed as long as a corresponding consent is available. Apart from this, they will be deleted after the termination of the contract between us and Sendinblue, unless legal requirements make further storage necessary.

In accordance with Art. 7 (3) DSGVO, the user can revoke the consent for this at any time by notifying the provider or by using the unsubscribe link contained in the newsletter for the future.

Sweepstakes
In connection with competitions offered by us, your data will only be used to process the competition, unless you give us your express permission to use it for other purposes.

Transmission to third parties
We also transmit your personal data to the necessary extent to external vicarious agents or service providers: to other service providers, providers of tools and software solutions who also support us in the provision of our services and act on our behalf; to any third parties who participate in the fulfillment of our obligations to them (such as parcel service providers for the delivery of your webshop order to you, payment service providers for payment processing in the webshop, banks for payment processing); to other external third parties to the necessary extent (e.g. auditors, insurance companies in the event of an insurance claim, legal representatives in the event of an incident, collection companies in the event of payment default or default, etc.); to authorities and other public bodies to the extent required by law. e.g. auditors, insurance companies in the event of an insurance claim, legal representatives in the event of an incident, collection companies in the event of a delay or default in payment, etc.); to authorities and other public bodies to the extent required by law (e.g. tax authorities, etc.).

SendCloud

The shipment takes place via the shipping portal “SendCloud”. SendCloud is a service of the company SendCloud GmbH, Kanalstr. 10, 80538 Munich, Germany. In accordance with Art. 6 Para. 1 lit. b DSGVO, we pass on your data to SendCloud exclusively for the purpose of processing your online order. For more information on data protection at SendCloud, please visit www.sendcloud.de/datenschutz/ .

Storage duration
As a matter of principle, we only store your personal data for as long as it is necessary to fulfill our obligations to you. However, for reasons of our obligations under tax and company law to retain records, we generally store your personal data provided in connection with orders for seven years after fulfillment of the contract.

If you have only registered for newsletters and the receipt of advertising information accordingly and are not a customer of ours, we store your personal data until you revoke it and for a maximum of three years from your last contact.

Data security
We take appropriate technical and organizational security measures to protect your personal data against accidental or unauthorized destruction, alteration or against loss, theft and unauthorized viewing, disclosure, reproduction, use, modification or access. Furthermore, we and our employees are obligated to maintain data secrecy and confidentiality. Likewise, our agents and representatives who need to have access to your personal data in order to perform their professional duties will have access and be subject to the same obligations of data secrecy and confidentiality.

Server data
For technical reasons, the following data, among others, which your Internet browser transmits to us or to our web space provider, is recorded (so-called server log files):
– browser type and version
– Operating system used
– Website from which you visit us (referrer URL)
– Website that you visit
– Date and time of your access
– Your Internet Protocol (IP) address.
This anonymous data is stored separately from any personal data you may have provided and thus does not allow any conclusions to be drawn about a specific person. They are evaluated for statistical purposes in order to ensure our Internet presence, the security, stability and functionality of the website and to be able to optimize our offers.

Cookies
Our website uses so-called cookies. These are small text files that are stored on your end device with the help of the browser. They do not cause any damage. We use cookies to make our offer user-friendly. Some cookies remain stored on your end device until you delete them. They enable us to recognize your browser on your next visit.

If you do not wish this, you can set up your browser so that it informs you about the setting of cookies and you only allow this in individual cases.When disabling cookies, the functionality of our website may be limited.

Web analytics – Google Analytics
This website uses the “Google Analytics” service, which is provided by Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA, for the purpose of analyzing website usage by users. This involves the use of so-called “cookies”, text files that are stored on your terminal device, to enable an analysis of your use of the Brüder Gross GmbH website. Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators.

The anonymized IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google to establish a personal reference.

You may prevent the installation of cookies in your browser software settings. In addition, you may prevent the capture of the data produced by the cookie in relation with the way you use our website (including your anonymized IP address) by Google as well as the processing of this data by Google, by downloading and installing the browser plugin under the following link: http://tools.google.com/dlpage/gaoptout?hl=den

Please be aware that in this case you may not use all functions of our website to their full extent. By using this website, you agree to the processing of your data as captured by Google in the aforementioned manner and for the aforementioned purpose.

Your rights
You generally have the right of information about, the correction, deletion, restriction, transmission, appeal and withdrawal of your data that are stored with us. Should you believe that the processing of your data is against data privacy laws or that your data privacy rights have been violated in any other form, you may file a complaint with data protection authorities.  

You may also claim your rights against Brüder Gross GmbH by writing to the following:
Postal adddress: Brüder Gross GmbH, Ratsch 26, A-8461 Ehrenhausen an der Weinstraße
E-mail: hello(at)grossundgross.at

Source: www.wko.at