1. Controller
Controller as referred to in Art. 4 (7) of the General Data Protection Regulation (GDPR) is Efterpi Psaltidi, Mölkergasse 4/6, 1080 Vienna. If you have any questions about data protection, you can contact us at any time by mail to our post address or by sending an e-mail to use this link to sent me an email.
2. Processing of personal data
Data Sent by Your Browser
When browsing our websites, we will only collect the data that is automatically sent by your Internet browser to our web server. This is the following data which is required to ensure the performance of the website and to guarantee stability and security: IP address of the user (internet protocol address), date and time of access, content of the request (specific page), access status / HTTP status code, the actual transmitted data volume, website from which the request is called, browser, operating system and its interface, language, browser version and type.
This data does not allow for any conclusions to individual persons. This data will be saved for a short period in so-called server log data due to reasons of technical security (prevention of attacks). The described data processing is compliant to Art. 6 (1 lit. f) GDPR (processing is necessary for safeguarding legitimate interests of the Controller).
Cookies
We use so-called "cookies" to expand the functional scope of our Internet offering and to make it more user-friendly for you. Cookies are text files that are stored in the internet browser and/or in the user’s computer system by the internet browser. When accessing a website, a cookie can be stored in the user’s operating system. This cookie contains a characteristic string which allows for the clear identification of the browser when accessing the website again. You can prevent cookies from being stored on your computer by making the corresponding settings in your browser. This could however limit the functional range of our website. The cookies used by us will not store any personal data of you, but only pseudonymous or anonymous usage data which cannot be attributed to you. The use of cookies on our website for the stated purposes is compliant to GDPR Art 6. (1 lit. f) (processing is necessary for safeguarding legitimate interests of the Controller).
Google Analytics
Our website uses Google Analytics, a web analytics service provided by Google, Inc. ("Google"). Legal basis for the use of analytics services is GDPR Art 6. (1 lit. f) (processing is necessary for safeguarding legitimate interests of the Controller). The information generated by the cookie about your use of our website will be transmitted to and stored by Google on servers in the United States. Google will on our behalf use this information for the purpose of evaluating your use of our website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage. We inform you that we enforce IP masking to ensure the anonymization of your IP - Address. Google will not associate your IP address with any other data held by Google. Further information about Google’s privacy policy may be obtained from http://www.google.com/privacy.html. You can object at any time to processing of personal data by downloading and installing following browser-plugin http://tools.google.com/dlpage/gaoptout?hl=de .
Contact
You can contact us using the provided e-mail links. There is no disclosure of personal data to third parties in this context. The data is exclusively used for the processing of the conversation. The data processing in the course of a transmission by an e-mail is compliant with Art. 6 (1 lit. b) GDPR (the processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract).
Newsletter
When you sign up to our newsletter, you are giving consent for us to use the email address provided to send you relevant content regarding our products and activities. You can withdraw this consent for our newsletter by unsubscribing at any time. The data processing for the delivery of newsletters is compliant with Art. 6 (1 lit. b) GDPR (the processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract).
On line Contract / User Account
When you enter into an on line contract with us, in order to purchase our products either as a guest user or as a registered user, you are asked to provide the necessary information (Name, address, email), which are necessary for the performance of the contract. This data processing is compliant with Art. 6 (1 lit. b) GDPR (the processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract).
3.Service providers
We work with service providers to perform some tasks on our behalf. This might include: hosting, payments, management of newsletters, analytics etc. We may share your personal data with these providers to perform the necessary tasks. However, they are obliged not to disclose or use it for any other purposes. Any third-party processing of your data on our behalf will be subject to security and confidentiality obligations consistent with this privacy notice and applicable law. Legal basis for the use of hosting services is GDPR Art 6. (1 lit. f) (processing is necessary for safeguarding legitimate interests of the Controller). For the use of payments providers is Art. 6 (1 lit. b) GDPR (the processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract). For the use of a newsletter provider is Art. 6 (1 lit. b) GDPR (the processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract).Legal basis for the use of analytics services is GDPR Art 6. (1 lit. f) (processing is necessary for safeguarding legitimate interests of the Controller).
4.Data retention
We will retain your personal information for as long as necessary to provide the individual service/s you have requested, while taking into account any legal requirements and tax and accounting rules.
5.Security Guidelines
We take technical and organizational measures in order to protect your data stored by us against accidental or intentional manipulation, loss, destruction or access by unauthorized persons.
6.Links to other Websites
Our website contains - clearly identifiable - links to the websites of other companies. We have no influence on the contents of any such links to other providers. Therefore, we cannot provide any guarantee or accept any liability for these contents. The respective provider or operator is responsible for the content on their page.
7.Your Rights
You have the following rights concerning your personal data:
- Right of access by the data subject (Art. 15 GDPR),
- Right to rectification (Art. 16 GDPR),
- Right to erasure (‘right to be forgotten’) (Art. 17 GDPR),
- Right to restriction of processing (Art. 18 GDPR),
- Right to object (Art. 21 GDPR),
- Right to data portability (Art. 20 GDPR).
You shall have the right to lodge a complaint with a supervisory authority of the Member state where you have your habitual residence, your work place or where you consider that your rights have been infringed as a result of the processing of your personal data in non-compliance with the GDPR legislation. If you want to claim your rights or if you have any questions regarding the processing of your personal data, please contact us by the means of contact as indicated in paragraph 1.