The protection of your personal data is an important concern for us. Personal data is any information relating to an identified or identifiable natural person. In this privacy statement, we disclose how we process personal data in our company.
Please read this statement carefully. Our privacy statement is divided into the following sections:
- Rights of data subjects
Here we explain which rights the persons whose data we process are entitled to from a data protection perspective.
- Processing of personal data
Here we state from which groups of persons we process which personal data, for what purpose we do so, how long we store the personal data and why the processing of the personal data is lawful.
Here you will also find information on the cookies on our website and on the marketing and statistical services that we use on our website.
- Integration of third-party services and content
Here we explain which third-party services and content we integrate on our website.
- Rights of the data subjects
Here we explain which rights the persons whose data we process are entitled to from a data protection perspective.
- Protection of personal data
Here you can find out more about how we protect your personal data from unauthorized, unlawful or accidental access, processing, loss, use and manipulation.
- Transmission of personal data
Here we list information about our processors, we also list who else we transfer data to, apart from our processors.
- Person in charge:
Here you can find contact information about us.
1. RIGHTS OF DATA SUBJECTS
RIGHT OF ACCESS (ART 15 DSGVO)
We shall provide you with information about the personal data processed and the purpose of the processing within one month upon request.
RIGHT OF RECTIFICATION (ART 16 DSGVO)
In case of incorrect or incomplete data, you may request rectification.
RIGHT TO ERASURE (ART 17 DSGVO).
We must delete data if they are not necessary for the purposes of processing, if you withdraw your consent (unless there is another, additional authorization for processing) or if the data have been processed unlawfully.
RIGHT TO RESTRICTION OF PROCESSING (ART 18 DSGVO).
You can request a restriction of processing if, for example, your data is to be used only for specific purposes.
RIGHT TO DATA PORTABILITY (ART 20 DSGVO).
You may request to receive the data processed by you in a structured, common and machine-readable format and that it be transferred to other data controllers.
RIGHT TO OBJECT (ART 21 DSGVO).
You may object to processing based on public interest or our legitimate interest.
RIGHT OF WITHDRAWAL (ART 7 PARA 3 DSGVO).
Consents can be revoked by you at any time and without justification. You can do this by sending a message to our e-mail address firstname.lastname@example.org or sending a letter to our postal address Monika Maria Wiesner, Schippergasse 57, A-1210 Vienna.
COMPLAINT TO THE DATA PROTECTION AUTHORITY (ART 77 DSGVO)
If you believe that the processing of personal data concerning you violates the GDPR, you have the right to lodge a complaint with a supervisory authority (in Austria, this is the data protection authority; in Germany, this is the respective data protection supervisory authority of your federal state).
You can find more details on these rights in the German version of the GDPR at the following link: https://eur-lex.europa.eu/legal-content/DE/TXT/PDF/?uri=CELEX:32016R0679&from=DE
Please note that in order to exercise these rights, you must prove your identity in a suitable form. Without this proof, there would be a risk that unauthorized persons could access or dispose of your data.
2. PROCESSING OF PERSONAL DATA
When visiting our website monikawiesner.com, the following information is automatically sent to our website by your end device and temporarily stored in a so-called log file:
- vHost of the retrieved website
- date and time of the retrieval
- transferred amount of data of the response
- Message about successful retrieval
- browser type and version
- Operating system of the user (only if transmitted by the client in the user agent)
- Referrer URL (the previously visited page)
- IP address
These data are stored until automatic deletion after one year.
The processing serves the purpose of statistical evaluations for the purpose of the operation, security and optimization of the website. If, based on concrete indications, there is a justified suspicion of unlawful use, we reserve the right to subsequently review the log data.
The legal basis for this data processing is our legitimate interest in data processing pursuant to Art 6 para 1 lit f DSGVO. Our legitimate interest lies in the above-mentioned purpose.
In addition, we use the following cookies or marketing and statistical services on our website:
This website uses so-called cookies. Cookies do not cause any damage to your computer and do not contain viruses. Cookies serve to make our offer more user-friendly, more effective and safer. Cookies are small text files that are stored on your computer and saved by your browser.
Most of the cookies we use are so-called „session cookies“. They are automatically deleted after the end of your visit. Other cookies remain stored on your terminal device until you delete them. These cookies allow us to recognize your browser on your next visit.
With the help of Google Analytics, we can evaluate your use of the website in order to compile reports on website activities and to provide other services related to website and internet use.
Since the use of Google Analytics involves data transfer to Google, which is based in the USA, we have concluded the EU standard contractual clauses with Google in order to ensure a level of protection for data processing that is equivalent to EU law in substance.
Google Analytics is only used if you have expressly consented to the use of „statistics“ cookies. The legal basis for data processing is your consent pursuant to Art 6 para 1 lit a DSGVO. You can revoke your consent at any time.
If you click on one of our ads and subsequently perform another action, such as visiting our website, we can use Google Ads to record what activities you set on our website after clicking on our ad.
In addition, with the help of Google Ads, we can also draw attention to our offer on other websites and thus reach in particular those people with our advertisements who are actually interested in our offer. Furthermore, we can use the data obtained to make our website more interesting for you and to adapt our advertising offer even more individually to your needs.
By using Google Ads, a conversion tracking tag or code snippet is embedded on our website. When you click on one of our advertisements, a cookie is thereby stored on your terminal device. We have no influence on how the collected data is further used by Google. According to Google, the data is encrypted and stored on secure servers. In most cases, Google Ads cookies expire after 30 days.
Since the use of Google Ads involves data transfer to Google, which is based in the USA, we have concluded the EU standard contractual clauses with Google to ensure a level of protection for data processing that is equivalent to EU law in substance.
Google Ads only applies if you have expressly consented to the use of „marketing“ cookies. The legal basis for data processing is your consent pursuant to Art 6 para 1 lit a DSGVO. You can revoke your consent at any time.
Google Tag Manager
This website also uses the Google Tag Manager. Through this service, website tags can be managed through an interface. The Google Tag Manager only implements tags. No cookies are set and no personal data is collected. The Google Tag Manager triggers other tags that may collect data. The Google Tag Manager does not access this data. If a deactivation has been made at domain or cookie level, it remains in place for all tracking tags, insofar as these are implemented with the Google Tag Manager.
If you have consented to the use of „marketing“ cookies, we use the Facebook Pixel, a marketing service provided by Facebook Inc. whereas in Europe Facebook Ireland Ltd. (4 Grand Canal Square, Grand Canal Harbour, D2 Dublin, Ireland) is responsible for Facebook services. We use this service to tailor our advertising offer to your interests.
If you have come to our website via Facebook Ads, we can use the Facebook Pixel to analyze what activities you set on our website after clicking on our ad. This also enables Facebook to match your user data (customer data such as IP address, user ID) with the data of your Facebook account, provided you are a Facebook user yourself and are logged in to Facebook. The collected data is anonymous and not visible to us and can only be used in the context of ad placements.
In addition, we can use the Facebook pixel to draw attention to our offer and thus reach in particular those people with our ads who are actually interested in our offer. Furthermore, we can use the data obtained to make our website more interesting for you and adapt our advertising offer even more individually to your needs. We can therefore show Facebook users, who have allowed personalized advertising, ads that are suitable for them.
Since the use of the Facebook Pixel results in a data transfer to Facebook, which is based in the USA, we have concluded the EU standard contractual clauses with Facebook in order to ensure a level of protection for data processing that is equivalent to EU law in substance.
The Facebook Pixel is only applied if you have expressly consented to the use of „marketing“ cookies. The legal basis for the data processing is your consent pursuant to Art 6 para 1 lit a DSGVO. You can revoke your consent at any time.
You can find more information about the use of data by Facebook at https://www.facebook.com/legal/terms/dataprocessing.
If you have subscribed to our newsletter and are not yet a customer of ours, the following personal data will be processed from you:
- E-mail address
Information that allows us to verify that you are the owner of the e-mail address provided.
The processing serves the purpose of informing customers and business partners.
We will store the above data until you unsubscribe from the newsletter. Unsubscribing from the newsletter is possible at any time and can be done either by sending a message to the contact option described below or via a link provided for this purpose in the newsletter. After unsubscribing, we will delete your personal data unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this statement.
The legal basis for this data processing is the consent of the data subject pursuant to Art 6 para 1 lit a DSGVO. Consent is given by consenting to the newsletter mailing directly when registering for the newsletter mailing, as well as following the registration by consenting again after receiving an automated email, which they receive following the registration. The legal basis is the consent of the data subject to the processing of special categories of personal data pursuant to Art 9 para 2 lit a DSGVO.
We process the following data from our webshop customers:
- Personal master data
(name, delivery and billing address)
- Contact data
(telephone number, e-mail address)
- Contract master data
(special agreements, discounts, commission data)
- Customer history
- Contract billing and payment data
(payment vouchers, invoices, means of payment, collection authorizations, bank transactions, credit cards)
- Other data
(notes, correspondence, documents)
The processing serves the purpose of order processing concerning our own range of services.
The provision of the above data is necessary for the conclusion of a contract. If these data are not provided, we cannot conclude a contract with you.
The above-mentioned data will be stored by us for at least 7 years (as provided for in § 132 BAO), at most for 30 years (limitation period).
The legal bases for the processing of the data are the performance of a contract pursuant to Art 6 para 1 lit b DSGVO, the consent of the data subject pursuant to Art 6 para 1 lit a DSGVO and our legitimate interest pursuant to Art 6 para 1 lit f DSGVO. Our legitimate interest lies in the above purpose.
PERSONS UNDER 18 YEARS OF AGE
Our offer is not directed at persons under the age of 18. If we nevertheless learn that we are processing data of persons under 18 years of age, we will delete this data immediately.
3. INTEGRATION OF THIRD PARTY SERVICES AND CONTENT
You have the possibility to make an appointment with us via our website. We use the online calendar calendly to request and select an appointment. calendly is a service of Calendly, LLC, BB&T Tower, 271 17th St NW, Atlanta, GA 30363, USA („calendly“).
ATTENTION: Within the scope of this service, data transfer to the USA takes place or cannot be ruled out.
As soon as calendly is loaded on your computer, your browser establishes a connection to calendly’s servers in the USA. Through this, calendly obtains knowledge that our website was accessed via your IP address.
When you press the corresponding booking button at calendly, you will automatically be connected to our appointment calendar at calendly. After selecting your desired appointment, confirming it and entering your contact details and additional requests, you will receive an email from calendly confirming your appointment. For this purpose, calendly uses your e-mail address.
The information you provide in the calendly form, including the data you enter there, will be stored by us for the purpose of processing your inquiry and in case of follow-up questions. This data remains with us until you request us to delete it or the purpose for storing the data no longer applies (e.g. appointment made). Mandatory legal provisions – in particular retention periods – remain unaffected.
The processing of your data is in our interest in a fast and uncomplicated appointment arrangement as well as to improve our services to our customers and interested parties. This represents a legitimate interest within the meaning of Art 6 (1) f DSGVO.
You can find further information on calendly’s data protection at:
If you have consented to the use of external media, we use the video platform Vimeo (Vimeo.com, Inc., 555 West 18th Street, New York, New York 10011) to make videos available. We embed the videos in the so-called „Do Not Track“ variant. This means that the player cannot track session data, including all cookies and statistics. Therefore, no third-party cookies or analytics cookies are set by Vimeo. The Vimeo server is told which of our pages the user has visited and Vimeo obtains his IP address. Since this involves data transfer to Vimeo, which is based in the USA, we have concluded the EU standard contractual clauses with Vimeo in order to ensure a level of protection for data processing that is equivalent to EU law in substance.
The legal basis for embedding Vimeo videos on our website is your consent pursuant to Art 6 para 1 lit a DSGVO. You can revoke your consent at any time.
If you have consented to the use of external media, we also use the video platform YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) to make videos available. These videos are all integrated in extended data protection mode. This means that no data is transmitted from you to YouTube if you do not play the videos. Only if you actually play a video, data is transmitted to YouTube. We have no influence on this data transmission. If you are logged in to Google, your data will be directly assigned to your account. If you do not wish this, you must log out before watching a video.
The legal basis for embedding YouTube videos on our website is your consent pursuant to Art 6 para 1 lit a DSGVO. You can revoke your consent at any time.
4. PROTECTION OF PERSONAL DATA
Your personal data is protected by appropriate organizational and technical precautions. These precautions relate in particular to protection against unauthorized, unlawful or even accidental access, processing, loss, use and manipulation.
Notwithstanding our efforts to maintain an appropriately high standard of due diligence at all times, it cannot be ruled out that information you disclose to us via the Internet may be viewed and used by other persons.
Please note that we therefore accept no liability whatsoever for the disclosure of information due to errors in data transmission not caused by us and/or unauthorized access by third parties (e.g. hacker attack on e-mail account or telephone, interception of faxes).
5. TRANSFER OF PERSONAL DATA
For the processing of personal data, we sometimes use order processors. With all of our processors, we have concluded a contract processing agreement in accordance with Art 28 para 3 DSGVO. We have also ensured that we only work with processors who have implemented appropriate technical and organizational measures to ensure that the data is processed in accordance with the requirements of the GDPR and that the rights of the data subjects are protected.
Depending on the occasion, the personal data of our customers may also be transferred to the following third parties who are not processors of us:
- Tax authorities, social security institutions, courts, legal representatives, tax advisors, debt collection companies, partners/suppliers
- Payment service providers
- Accounting service provider
- Shipping service provider
- Service providers for the creation of correct invoices for our webshop customers
The legal bases for the transfer of data are the performance of a contract pursuant to Art 6 para 1 lit b DSGVO, the consent of the data subject pursuant to Art 6 para 1 lit a DSGVO and our legitimate interest pursuant to Art 6 para 1 lit f DSGVO. Our legitimate interest lies in the above-mentioned purpose.
7. RESPONSIBLE PARTY
The responsibility for the personal data processed by Monika Maria Wienser lies with Monika Maria Wiesner, Schippergasse 57, A-1210 Vienna. You can reach us by mail at email@example.com.