As of: 02/01/2023
1. General Information
The protection of your personal data is of particular concern to us. We process your personal data exclusively based on legal regulations (GDPR, DPA 2000, TKG 2003).
For the provision of our website, the processing of sales of our products, and the provision of our services, we process information about your person, known as personal
data - or simply "data" below. The term "processing" refers to any handling of data, including collection, storage, use, and deletion of personal data.
We are pleased to inform you, as part of the privacy policy, about the processing of your personal data and the rights and claims granted to you
under data protection regulations.
Responsible for the processing of your personal data is:
Burcu Kurt, MA.
For all complaints, questions, and suggestions related to data protection, we are available at the contact details mentioned above.
2. Data Processing Within Our Website
2.1 General Information
Within our website, we process data that you provide to us (e.g., in the context of orders), logs (our servers log who makes requests for security reasons),
and cookies (small text files stored on your computer containing information to recognize you).
The web server for the operation of our website is technically operated by Hostinger International, Ltd as a data processor. To prevent third-party cookies from being set, you can
block so-called third-party cookies in your browser. Here are instructions for the most common browsers:
Firefox Instructions
Chrome Instructions
Internet
Explorer Instructions
Safari: In Apple's Safari, third-party cookies are blocked by default.
2.2 Data Processing for the Operation and Security of Our Website
2.2.1 Server Logs
Purpose of processing: When you access our website, the web server collects usage data (server logs). Collecting this data is necessary to establish a
connection to our server and to technically enable the use of the website. Additionally, this data serves for defense and analysis against attacks.
The following server logs are collected: The IP address of the requesting computer, along with the date, time, the request, the requested file (name and URL),
the amount of data transmitted to you, a message indicating whether the request was successful, identification data of the browser used, the operating system used,
and the website from which the access was made (if accessed through a link).
Legal basis for processing: The processing of your data is based on our legitimate interest in ensuring the operation of the service and system security.
Data recipients: The web server for the operation of our website is technically operated by Hostinger International, Ltd as a data processor. If there has been a hacker attack, this data
will be forwarded to law enforcement authorities. There is no further disclosure to third parties.
Additional information: The server logs are stored for as long as the the domain is active.
3. Data Processing in the Context of Contact
Purpose of processing: If you contact us (e.g., by email or phone), we process the data you provide during the contact only to the extent necessary for processing
inquiries or their handling.
Legal basis for processing: The processing of your data is carried out to perform pre-contractual measures or to fulfill a contractual relationship or is based on our
legitimate interest, namely for the organization of answering inquiries.
Data recipients: Transmission of this data is only carried out if it is necessary to answer the inquiry.
Additional information: We process your data for as long as it is necessary to process the inquiry and additionally for seven years after the last contact with you
in case of a follow-up inquiry.
4. Your Rights
5.1 Right to Information about Stored Data According to Art 15 GDPR
You have the right to request information about whether we process personal data about you. If so, you have the right to information about this personal data as well
as other information related to the processing.
5.2 Right to Rectification of Inaccurate Data According to Art 16 GDPR
If personal data we process about you is (no longer) accurate or incomplete, you can request correction and, if necessary, completion of this data.
5.3 Right to Erasure of Data According to Art 17 GDPR
In case of meeting the legal requirements, you can request the erasure of your personal data.
5.4 Right to Restriction of Data According to Art 18 GDPR
In case of meeting the legal requirements, you can request the restriction of the processing of your data.
5.5 Right to Data Portability According to Art 20 GDPR
In case of meeting the legal requirements, you can request the transfer of your data in a structured, common, and machine-readable format.
5.6 Right to Object to Unreasonable Data Processing According to Art 21 GDPR
For reasons arising from your particular situation, you can object at any time to the processing of your data that we process based on a legitimate interest according
to Art. 6 (1) lit f GDPR.
5.7 Right to Withdraw Consent
If processing is based on a declaration of consent, you have the possibility to withdraw it at any time without affecting the legality of the processing carried out
based on the consent until the withdrawal.
5.8 Right to Complain to the Data Protection Authority
If you believe that the processing of your personal data by us violates applicable data protection law or your data protection rights have been otherwise violated,
you have the option to complain to the competent supervisory authority (Austrian Data Protection Authority). The address is:
Austrian Data Protection Authority
Barichgasse 40-42, 1030 Vienna
Phone: +43 1 52 152-0
Email: dsb@dsb.gv.at
5. Further Information
The data we request you to provide is necessary for the handling of the sale of our products and the provision of our services within the framework of the contractual
relationship or for the provision of information you have requested, or for sending information. If you do not provide the data, we cannot provide our services.
There is no automated decision-making, including profiling. If we process your personal data for a purpose other than the one for which we collected the data, we
will inform you of this fact and inform you about this other purpose.
