Data Protection

This privacy policy explains the nature, scope and purposes of the collection and use of data relating to visitors and users (hereinafter collectively referred to as ‘users’) by WIENER SEIFE GmbH, Favoritner Gewerbering 1/B, A–1100 Vienna, owner: Sonja Baldauf (hereinafter ‘the Provider’), in its capacity as the data controller under data protection law.

If you have any questions regarding data protection, you can contact us on weekdays from 10 am to 6 pm on +43 1 600 98 41 or by email at kontakt@wienerseife.at

Collection of access data
Collection and use of personal data
Transfer of data to third
partiesCookies
Sending information via newsletters
Google Analytics
Data storage
Online marketing
Withdrawal of consent, amendments, corrections and updates
Changes to the privacy policy

Collection of access data

The provider collects data on every access to the online service (so-called server log files). Access data includes the name of the web page accessed, the file, the date and time of access, the amount of data transferred, confirmation of successful access, browser type and version, the user’s operating system, the referrer URL (the previously visited page), the IP address and the requesting internet service provider.
The provider uses the log data, without linking it to the user’s identity or creating any other profiles, in accordance with statutory provisions, solely for statistical analysis for the purposes of operating, securing and optimising the online service. However, the provider reserves the right to review the log data retrospectively if there are concrete grounds for a reasonable suspicion of unlawful use.

Collection and use of personal data

Personal data is collected and used by the provider only where this is permitted by law or where users consent to the collection of such data. As a rule, it is clear to users whilst using the service which data is stored; for example, name, email address and message when using the order form.
The personal data provided for the purpose of ordering goods (such as name, email address, postal address and payment details) is used by the seller to fulfil and process the contract. This data is treated confidentially, transmitted in encrypted form and not passed on to third parties who are not involved in the ordering, delivery and payment process.
When contacting the provider (via the contact form or by email), the user’s details are stored for the purpose of processing the enquiry and in the event that follow-up questions arise.
The provider has implemented organisational, contractual and technical security measures to ensure compliance with data protection legislation and to prevent accidental or deliberate manipulation, loss, destruction or access by unauthorised persons.

Data transfer to third parties

Users’ data will only be transferred to third parties where this is permitted by law or where a user has consented to such transfer.
This is the case, for example, where the transfer of data serves to fulfil contractual obligations towards the user and the postal address is passed on to a courier company following an online shop order. Or where the data is requested by competent authorities such as law enforcement agencies.
Users’ personal data is under no circumstances sold or passed on to third parties for advertising purposes or for the purpose of creating user profiles.

Cookies

The provider uses ‘cookies’ as part of its online service. Cookies are small files stored on the user’s computer that can store information on behalf of the provider. Temporary cookies are deleted when the browser is closed; permanent cookies remain for a specified period and can make the stored information available when the online service is accessed again.
Cookies are used, amongst other things, to facilitate the use of the service. For example, a cookie stores a user’s shopping basket status.
Users can control the use of cookies. Most browsers have an option to restrict or completely prevent the storage of cookies. The provider endeavours to design the online service in such a way that the use of cookies is not necessary. However, please note that the use of the service, and in particular the user experience, will be restricted without cookies.

Sending information via newsletters

E-mails containing promotional information about the provider and its services are only sent with the user’s express consent. Users may opt out of receiving the newsletter at any time. An option to opt out is included in every email sent, amongst other places.
Before the newsletter is sent, the email account holder will receive a confirmation email in which they must confirm their newsletter subscription. Unconfirmed subscriptions will be automatically deleted within four weeks at the latest.
Information that is not of a promotional nature includes messages sent in the context of the contractual relationship with the user. This includes the sending of technical information, information on payment processing, enquiries regarding orders and similar messages.
Users may subsequently request to be removed from the mailing list by sending an email to the contact details provided above.
Upon registration, the provider records the time of registration and confirmation, as well as the user’s IP address. The provider is legally obliged to log registrations in order to be able to prove that they were carried out correctly.

We use the MailChimp service to send out the newsletter. The provider is The Rocket Science Group, LLC, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA. MailChimp holds the TRUSTe Privacy Seal certificate. Further information on data protection can be found in MailChimp’s privacy policy: http://mailchimp.com/legal/privacy/

Shopware Analytics

Purpose of processing:
Together with our shop software provider, acting as joint controllers, we analyse certain information from our customer base (e.g. customer group, pages visited, click paths, date and time of the visit, information about the device used (resolution, pixel density, operating system), referrer URL, information about the browser used, locale, search queries and the time zone). This information is processed by an external service provider and forwarded to us in near real time so that we can monitor the use of our website and improve our services.

Legal basis:
Article 6(1)(f) of the GDPR

Data categories:
Derivatives of master and contact data (customer group, no individual customer data), usage data, connection data

Recipients of the data:
Shopware AG, Ebbinghoff 10, 48624 Schöppingen, Germany (as joint controller), IT service providers

Key aspects of joint controllership:
Joint controllership exists between us and Shopware AG; the data is collected on our shop and then transferred to servers operated by Shopware or its service providers; with the exception of obtaining your consent for the use of cookies or similar technologies, as well as the fulfilment of these information obligations , all obligations – in particular the implementation of data subjects’ rights – rest with Shopware AG, which you can contact at legal@shopware.com. You may also exercise your data subjects’ rights with us; we will then forward your enquiry to Shopware AG accordingly. Shopware AG may derive behavioural patterns on our shop from the data collected, but cannot link this data to you as an individual.

Intended transfers to third countries:
None

Do we store or read personal data on your device on the basis of your consent?
Yes; for details, see Consent Management.

Web analytics with Google Analytics

Our website uses features of the web analytics service Google Analytics, which is provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). Google Analytics uses cookies to help us analyse how you use this website.

The information generated by such a cookie regarding your use of this website (including your IP address, the URLs of the web pages visited and the attributes of the web page) is transmitted to Google’s servers in the USA and stored there. We do not store any of your data collected in connection with Google Analytics.

Our website uses the IP anonymisation feature offered by Google Analytics. Your IP address is therefore truncated/anonymised by Google as soon as Google receives it. Your IP address is recorded but immediately pseudonymised (e.g. by deleting the last 8 bits). This means that only a rough geolocation is possible. On our behalf, Google will use this information to analyse your use of the website, to compile reports on website activity and to provide us with other services relating to website and internet usage. The IP address transmitted by your browser as part of Google Analytics is not combined by Google with any other data.
You can also prevent Google Analytics from collecting your data on this website; to do so, use the link below to change your cookie settings:

Open
cookie settings

We have entered into a corresponding contract with the provider regarding the processing of data on our behalf.

Our relationship with the web analytics provider is based on the ‘Privacy Shield’ agreement. Further information on this can be found on the website of the Austrian Data Protection Authority: https://www.dsb.gv.at/eu-us-privacy-shield.

Data processing is carried out in accordance with the legal provisions of Section 96(3) of the Telecommunications Act (TKG) and Article 6(1)(a) (consent) and/or (f) (legitimate interest) of the GDPR.

Our objective, in accordance with the GDPR (legitimate interest), is to improve our services and our website. As the privacy of our users is important to us, user data is pseudonymised.

User data is retained for a period of 26 months.

Further information on Google’s Terms of Service and Google’s Privacy Policy can be found at http://www.google.com/analytics/terms/de.html or at https://www.google.at/intl/at/policies/.
Further information on Google Analytics can be found here: www.google.com/intl/de_at/analytics

Data storage

Please note that, in order to simplify the shopping process and facilitate subsequent fulfilment of the contract, the online shop operator stores the connection owner’s IP address via cookies, as well as the purchaser’s name, address, email address and bank details.
The data you provide is necessary for the performance of the contract or for the implementation of pre-contractual measures. Without this data, we cannot conclude the contract with you.
If you abandon the purchasing process, the data stored by us will be deleted. If a contract is concluded, all data relating to the contractual relationship will be stored until the expiry of the statutory retention period for tax purposes (7 years).

Furthermore, the data comprising name, address, goods purchased and date of purchase will be stored until the expiry of the product liability period (10 years). Data processing is carried out on the basis of the statutory provisions of Section 96(3) of the Telecommunications Act (TKG) as well as Article 6(1)(a) (consent) and/or (b) (necessary for the performance of a contract) of the GDPR.

Online Marketing

We have a strong interest in effectively targeting our website users and displaying personalised, interest-based advertising.
We therefore use the following marketing tools from Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”) on our website, as listed below. As a result of the marketing tools used, your browser automatically establishes a direct connection to Google’s server. We have no control over the scope and further use of the data collected by Google through the use of these tools. Information about the websites you visit and the adverts you click on is stored using cookies and forwarded to Google’s servers. Even if you are not registered with Google or have not logged in, it is possible that the provider may obtain and store your IP address. As with Google Analytics, Google states that pseudonymisation is used when collecting IP addresses via the following marketing tools.
Data is only transferred by Google to third parties where required by law or within the framework of data processing on Google’s behalf. Under no circumstances will Google combine your data with other data collected by Google.
According to Google’s own statements, it does not merge the data collected for marketing purposes with your personal data that may be stored by Google.
We ourselves do not collect or process any personal data in connection with the advertising measures mentioned. We are merely provided with statistical reports by Google. These reports enable us to identify which of the advertising measures used are particularly effective. We do not receive any further data resulting from the use of these advertising tools; in particular, we cannot identify users on the basis of this information.
Please note that blocking or deleting cookies may impair your online experience and prevent you from making full use of this website.

DoubleClick by Google

DoubleClick by Google is a service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (‘Google’). DoubleClick by Google uses cookies to display adverts relevant to you. In doing so, a pseudonymous identification number (ID) is assigned to your browser to track which adverts have been displayed in your browser and which have been clicked on.
The information generated by the cookies is transmitted by Google to a server in the USA for analysis and stored there.
The cookies do not contain any personal information. The use of DoubleClick cookies merely enables Google and its partner websites to display adverts based on previous visits to our website or other websites on the internet. By using our websites, you consent to the processing of the data collected about you by Google, to the manner of data processing described above, and to the stated purpose.
You can prevent cookies from being stored by adjusting the settings in your browser software accordingly. You can also prevent Google from collecting the data generated by the cookies and relating to your use of the websites, as well as prevent Google from processing this data, by downloading and installing the browser plug-in available under the ‘DoubleClick Opt-out Extension’ section at the following link:
https://adssettings.google.com/u/0/authenticated?hl=en-GB
Alternatively, you can disable DoubleClick cookies on the Digital Advertising Alliance website via the following link:
http://optout.aboutads.info/?c=2#!/
Further information on this can be found in Google’s privacy policy:
https://www.google.de/intl/de/policies/privacy/?fg=1

Withdrawal, changes, corrections and updates

The user has the right, upon request and free of charge, to receive information about the personal data stored about them by the provider. Contact details can be found in the provider’s legal notice.
In addition, the user has the right to have inaccurate data corrected, and to have their personal data restricted or erased, provided that this does not conflict with any statutory retention obligations.

Changes to the Privacy Policy

The provider reserves the right to amend the privacy policy to bring it into line with changes in the legal situation or in the event of changes to the service or data processing.

Contact

If you have any questions or comments, please contact:

WIENER SEIFE GmbH
Favoritner Gewerbering 1/B
A – 1100 Vienna

Telephone: +43 1 600 98 41
Fax: +43 1 712 03 03
Email: kontakt@wienerseife.at