PRIVACY POLICY
§ 1 General
Your personal data (e.g. title, name, address, e-mail address, telephone number, bank details, credit card number) will only be processed by us in accordance with the provisions of German data protection law and the data protection law of the European Union (EU). In addition to the processing purposes, recipients, legal bases and storage periods, the following provisions also inform you about your rights and the controller responsible for your data processing. This privacy policy only applies to our websites. If you are redirected to other sites via links on our pages, please inform yourself there about the respective handling of your data.
§ 2 Data processing for contract fulfillment
(1) Purpose of processing
The personal data you provide to us during the ordering process is required to conclude a contract with us. You are not obliged to provide your personal data. However, we cannot send you the goods without your address. For some payment methods, we require the necessary payment data in order to pass it on to a payment service provider commissioned by us. The processing of your data entered in the ordering process is therefore carried out for the purpose of fulfilling the contract.
If you send us an inquiry by e-mail, via a contact form, etc. before concluding a contract, we process the data received in this way to carry out pre-contractual measures and answer your questions about our products, for example.
(2) Legal basis
The legal basis for this processing is Art. 6 para. 1 b) GDPR.
(3) Categories of recipients
Payment service provider, shipping service provider, hosting provider, merchandise management system if applicable, suppliers if applicable (dropshipping).
(4) Storage period
We store the data required to process the contract until the expiry of the statutory warranty and, if applicable, contractual guarantee periods.
We retain the data required under commercial and tax law for the periods specified by law, generally ten years (see Section 257 HGB, Section 147 AO).
The data processed to carry out pre-contractual measures will be deleted as soon as the measures have been carried out and it is clear that no contract has been concluded.
§ 3 Further information
§ 4 PayPal transactions
Please note that all PayPal transactions are subject to the PayPal privacy policy:
https://www.paypal.com/de/webapps/mpp/ua/privacy-full
§ 5 Credit check
Please note the following data protection provisions if you decide to use Stripe payment services:
§ 6 Information about cookies
(1) Purpose of processing
Technically necessary cookies are used on this website. These are small text files that are stored in or by your Internet browser on your computer system. These cookies make it possible, for example, to place several products in a shopping cart.
(2) Legal basis
The legal basis for this processing is Art. 6 (1) f) GDPR.
(3) Legitimate interest
Our legitimate interest is the functionality of our website. The user data collected by technically necessary cookies is not used to create user profiles. This safeguards your interest in data protection.
(4) Storage period
The technically necessary cookies are usually deleted when the browser is closed, and permanently stored cookies have a lifespan of several minutes to several years.
(5) RIGHT TO OBJECT
If you do not wish these cookies to be stored, please deactivate the acceptance of these cookies in your Internet browser. However, this may limit the functionality of our website. You can also delete permanently stored cookies at any time via your browser.
§ 7 Social plugins from Facebook
We use social plugins from facebook.com, operated by Facebook Inc, 1601 S. California Ave, Palo Alto, CA 94304, USA. The plugins can be recognized by the Facebook logo or the addition "Facebook Social Plugin". If, for example, you click on the "Like" button or leave a comment, the corresponding information is transmitted directly from your browser to Facebook and stored there. Facebook also makes your preferences public to your Facebook friends. If you are logged in to Facebook, Facebook can assign your visit to our site directly to your Facebook account. Even if you are not logged in or do not have a Facebook account, your browser transmits information (e.g. which website you have accessed, your IP address) that is stored by Facebook. For details on how Facebook handles your personal data and your rights in this regard, please refer to the privacy policy of Facebook. If you do not want Facebook to assign the data collected about you via our websites to your Facebook account, you must log out of Facebook before visiting our websites. You can also completely prevent the loading of Facebook plugins with add-ons for your browser, e.g. with the "Facebook Blocker" (Facebook).
§ 8 Your rights as a data subject
If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis us as the controller:
1. right to information
You can request information about your personal data processed by us in accordance with Art. 15 GDPR.
2. right to rectification
If the information concerning you is not (or no longer) correct, you can request a correction in accordance with Art. 16 GDPR. If your data is incomplete, you can request that it be completed.
3. right to erasure
You can request the deletion of your personal data under the conditions of Art. 17 GDPR.
4. right to restriction of processing
Within the framework of the provisions of Art. 18 GDPR, you have the right to request that the processing of data concerning you be restricted.
5. right to data portability
In accordance with Art. 20 GDPR, you have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format or to request that it be transmitted to another controller.
6. right to revoke the declaration of consent under data protection law
In accordance with Art. 7 (3) GDPR, you have the right to withdraw your declaration of consent under data protection law at any time. This does not affect the lawfulness of the processing carried out on the basis of the consent until revocation.
7. right to lodge a complaint with a supervisory authority
If you believe that the processing of personal data concerning you infringes the GDPR, you have the right to lodge a complaint with a supervisory authority (in particular in the Member State of your habitual residence, place of work or place of the alleged infringement) in accordance with Art. 77 GDPR.
Please also note your right to object in accordance with Art. 21 GDPR:
a) General: justified objection required
If the processing of personal data concerning you takes place
- to safeguard our overriding legitimate interest (legal basis pursuant to Art. 6 (1) f) GDPR) or
- in the public interest (legal basis pursuant to Art. 6 (1) (e) GDPR),
you have the right to object to the processing at any time for reasons arising from your particular situation; this also applies to profiling based on the provisions of the GDPR.
In the event of an objection, we will no longer process the personal data concerning you unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defense of legal claims.
b) Special case of direct marketing: simple objection is sufficient
If the personal data concerning you is processed for direct marketing purposes, you have the right to object to this processing at any time and without stating reasons; this also applies to profiling insofar as it is associated with such direct marketing.
If you object to processing for direct marketing purposes, your personal data will no longer be processed for these purposes.
Responsible for data processing:
Egnaro GmbH
Mariahilferstrasse 147/3/HOF,
1150 Vienna
(no customer traffic)
Contact:
Phone: +4368120693225
E-mail: info@essenzduft.at