Privacy Policy of the eguana GmbH

 

As of May 2018

 

We welcome you to our website and welcome your interest in our company. We take the protection of your personal information very seriously and process your data in accordance with applicable personal data protection legislation, in particular the EU General Data Protection Regulation (GDPR) and our country-specific implementation laws. With the help of this privacy policy we inform you comprehensively about the processing of your personal data by eguana GmbH and the rights to which you are entitled.

Personal data is the information that makes it possible to identify a natural person. This includes in particular name, date of birth, address, telephone number, e-mail address but also your IP address.

Data is anonymous, if no personal reference to the user can be made.

Responsible authority

eguana GmbH
Phorusgasse 8/18
1040 Vienna

www.eguana.at
office@eguana.at

Your rights as a person concerned

First, we would like to inform you about your rights as a person concerned. These rights are standardized in Articles 15 – 22 EU-DS-BER. This includes:

  1. The right to information (Article 15 EU-GDPR)
  2. The right to cancellation (Article 17 EU-GDPR)
  3. The right to rectification (Article 16 EU-GDPR)
  4. The right to data portability (Article 20 EU-GDPR)
  5. The right to restriction of data processing (Article 18 EU-GDPR)
  6. The right to object to data processing (Article 21 EU-GDPR)

To assert these rights, please contact: office@eguana.at. The same applies if you have questions about data processing in our company. You also have a right of appeal to a data protection supervisory authority.

Right of appeal/objection

Please note the following in connection with opposition rights:

If we process your personal data for the purpose of direct mail, you have the right to object to this data processing at any time without giving reasons. This also applies to profiling insofar as it is associated with direct mail.
If you object to the processing for direct marketing purposes, we will no longer process your personal data for these purposes. The objection is free of charge and can be made free of informally, preferably to: office@eguana.at.

In the event that we process your data to protect legitimate interests, you may object to such processing at any time for reasons that
arise from your particular situation; This also applies to profiling based on these provisions.

We will then no longer process your personal information, unless we can demonstrate compelling legitimate reasonsfor processing that outweigh your interests, rights and freedoms, or if the processing is intended to assert, exercise or defend legal claims.

Purposes and legal basis of data processing

The processing of your personal data complies with the provisions of the EU-GDPR and all other applicable data protection regulations. Legal basis for the data processing arise in particular from Art. 6 EU-GDPR.

We use your data to initiate business, to fulfill contractual and legal obligations, to conduct the contractual relationship, to offer products and services, and to strengthen customer relationships, which may include marketing and direct marketing.

Your consent also constitutes a data protection regulation. In doing so, we will inform you about the purposes of data processing and your right of withdrawal. If the consent also relates to the processing of special categories of personal data, we will expressly inform you in the consent.

Processing of special categories of personal data i.S.v. Art. 9 (1) of the EU-GDPR will only occur if required by legal provisions and if there is no reason for believing that your legitimate interest in excluding processing prevails

Transfer to third parties

We will only pass on your data to third parties within the scope of the statutory provisions or with the according consent. Other than that, it will not be passed on to third parties unless we are obliged to do so due to mandatory legal regulations (disclosure to external bodies such as supervisory authorities or law enforcement authorities).

Recipient of data / Categories of recipients

Within our organization, we ensure that only those individuals receive your data, who need it to fulfill contractual and legal obligations.

In some cases, service providers support our specialist departments in fulfilling their tasks. These service providers support our specialist departments in, for example, data analysis, bookkeeping, etc. The necessary data protection contract was concluded with all service providers.

In order to process shipping orders, the name, address, telephone number and e-mail address of the recipient are recorded. These data is passed on to a delivery company for the delivery process of this order.

Third country submission / Third country submission intention

A transfer of data to third countries (outside the European Union or the European Economic Area) only takes place if required by law or if you have given us your consent to do so.

Storage duration of the data

We store your data as long as it is needed for the respective processing purpose. Please note that numerous retention periods require data to be stored continuously. This concerns in particular commercial or fiscal retention obligations (for example, commercial code, tax code, etc.). Unless there are further retention requirements, the data will be deleted routinely after use.

In addition, if you have given us your permission to do so, or if there are legal disputes and we use evidence within the statutory limitation period, which may be up to thirty years, we may retain the information; the regular limitation period is three years.

Secure transfer of your data

In order to best protect the data stored by us against accidental or intentional manipulation, loss, destruction or access by unauthorized persons, we employ appropriate technical and organizational security measures. The security levels are constantly checked and adapted to new security standards.

The data exchange from and to our website is encrypted. As a transmission protocol for our web presence we offer HTTPS, each using the current encryption protocols.

It is also possible to use alternative communication channels (e.g. postal service).

Commitment to providing data

Various personal data is necessary for the establishment, implementation and termination of the obligation and the fulfillment of the associated contractual and legal obligations. The same applies to the use of our website and the various functions it provides.

Details we have summarized for you in the above mentioned point. In certain cases, data must also be collected or made available due to legal regulations. Please note that it is not possible to process your request or execute the underlying obligation without providing this information.

Categories, Sources and Origin of Data

The respective context determines which data we process:

Please note that we may also separately provide information for specific processing situations in appropriate places, e.g. with an error message.

When visiting our website we collect and process the following data:

  1. Name of the Internet service provider
  2. Information about the website from which you visit us
  3. Technical information such as the web browser you use, your operating system and screen resolution
  4. Your IP address (in pseudonymised form, so that no assignment is possible)
  5. Requested files, transferred amount of data, downloads / file export
  6. Information about your behavior on our website (length of stay, number of visited pages and number of visits)
  7. Your approximate location (country, city) and language used
  8. Information about your gender, age and interests, as far as they are stored on Google

Since we process data primarily via Google Analytics, please also read our point about the use of Google Analytics. There you can also object to the use of this data by Google Analytics.

Contact via e-mail (Article 6 (1) (A), (B EU-GDPR))

If you contact us via e-mail, we will process the personal information provided in the e-mail solely for the purpose of processing your request.

Automated individual decisions

We do not use purely automated processing to make a decision.

Cookies (Article 6 (1) (F) of the EU-DS-GVO / Article 6 (1) (A) of the EU-DS-BER, in the case of consent)

Our website uses so-called cookies at several locations. They serve the purpose of making our offer more user-friendly, effective and secure. Cookies are small text files that are stored on your computer and stored by your browser (locally on your hard disk).

These cookies enable us to analyze how users use our websites. That way we can design the website content according to the visitor’s needs. Cookies also allow us to measure the effectiveness of a given ad and to place it according to the user’s interests, for example.
Most of the cookies we use are so-called “session cookies”. These will be deleted automatically after your visit. Persistent cookies are automatically deleted from your computer when their validity period (usually six months) is reached or you delete them yourself before the expiration date.
Most web browsers accept cookies automatically. You can usually change your browser’s settings if you prefer not to send the information. You can still use the offers of our website without restrictions (exception: configurators).

We use cookies to make our offer more user-friendly, effective and secure. In addition, we use cookies that allow us to analyze how users use our websites. So we can design the content according to the visitor’s needs. Cookies are stored on the device of the user, which transmits to our side. Therefore, as a user, you have full control over the use of cookies. By changing the settings of your internet browser, you can disable or restrict the transmission of cookies. Furthermore, already set cookies can be deleted at any time via an internet browser or other software programs. This is possible in all common internet browsers.

Please note: If you deactivate the setting of cookies, some functions of our website may not be fully usable.

User profiles / Webtracking procedures

Anonymized data is collected and stored for the purpose of designing and optimizing this website, as well as creating user profiles from this data using pseudonyms. For this purpose, cookies can be used to enable the recognition of an Internet browser. However, user profiles are not merged with data about the carrier of the pseudonym without the visitor’s explicit consent. In particular, IP addresses are rendered unrecognizable immediately after receipt, so that an assignment of usage profiles to IP addresses is not possible. The use of pseudonymous data is based on the provisions of §15 (3) TMG. Visitors of this website can object to this data collection and storage at any time for the future. The contradiction only applies to the device and the web browser on which it was set; please repeat the process on all devices if necessary.

Google Analytics

This website uses functions of the web analytics service Google Analytics. Provider is Google Inc., 1600 Amphitheater Parkway Mountain View, CA 94043, USA.
Google Analytics uses targeted cookies as mentioned above.

For more information about how to handle user data on Google Analytics, see the Google Privacy Policy.

You can prevent the collection of data generated by cookies and related to your use of the website to Google as well as the processing of this data by Google, by – for example – downloading and installing this browser plug-in.

Alternatively, you can prevent the collection of your data by Google Analytics on our website by clicking on the following link: Disable Google Analytics. An opt-out cookie will be set which prevents the collection of your data for future visits to our website.

Order data processing: We have entered a data processing contract/agreement with Google (Analytics). The data listed under Categories, Sources and Origin of Data will be passed on to Google Analytics. Google complies with the data protection provisions of the EU-US Privacy Shield Agreement. Google Analytics stores cookies in your browser that contain a randomly generated user ID in order to remember them for your future visits to our website.

Links to other providers

Our website contains – clearly recognizable – links to websites of other companies. As far as links to websites of other providers are available, we have no influence on their content. Therefore, no guarantee and liability can be taken for this content. The content of these pages is always the responsibility of the respective provider or operator of the pages.

The linked pages were checked at the time of linking for possible legal violations and identifiable infringements. Illegal content was not recognizable at the time of linking. However, a permanent content control of the linked pages is not reasonable without concrete evidence of an infringement. Upon notification of rights violations, such links will be removed promptly.