Datenschutzerklärung
If we welcome you as a customer or business partner, please read from point III.
If you visit our website, please read from point II.
Welcome to the website! Please get a picture of how we process your personal data when you visit our website (Art 13, Art 14 GDPR; section 165 (3) Austrian Telecommunication Act (“TKG”)).
When visiting our website, the following data may be processed:
- Browser type,
- Operating system,
- country,
- Date,
- Time and duration of access,
- IP address and pages visited on our website including entry and exit pages,
- Ordered goods,
- Payment data in the course of the purchase of goods,
- Data regarding the delivery of goods,
- Information regarding the newsletter.
The processing of this data is necessary to ensure the security of the operation of the website and to ensure the functionality of the website from a technical point of view. The collection of this data is partly carried out via technical cookies. These technical cookies are only used to the extent necessary (section 165 (3) TKG). The processing of this data is justified by our legitimate interest in operating our website (Art 6 para 1 lit f GDPR).
For the operation of our website, it may be necessary that we disclose your data to the following recipients:
- Recipient of data: com Group AB
- Purpose: Hosting of the website
- Legal reasoning: Legitimate interest pursuant Art 6 Abs 1 lit f GDPR
- Location: Sweden
- Secure third country transfer: Within the EU
- Recipient of data: Shopify
- Purpose: E-Commerce-Plattform
- Legal reasoning: Legitimate interest Art 6 Abs 1 lit f GDPR
- Location: Canada
- Secure third country transfer: Adequacy decision pursuant Art 45 GDPR
- Recipient of data: Alphabet, Inc (Youtube, Google Analytics, wemarketing, AdSense, DoubleClick)
- Purpose: Statistical purposes; Video streaming block in
- Legal reasoning: Consensus pursuant Art 6 Abs 1 lit a GDPR
- Location: US
- Secure third party transfer: Consensus pursuant Art 49 Abs 1 lit a GDPR
- Recipient of data: Meta, Inc (Facebook and Instagram)
- Purpose: Social media provider
- Legal reasoning: Consensus pursuant Art 6 Abs 1 lit a GDPR
- Location: US
- Secure third country transfer: Consensus pursuant Art 49 Abs 1 lit a GDPR
- Recipient of data: Paypal, Stripe, Klarna
- Purpose: Payment-Provider
- Legal reasoning: Contractual necessity (Art 6 Abs 1 lit b GDPR)
- Location: US and Sweden
- Secure third country transfer: Contractual necessity
- Recipient of data: klaviyo (Newsletter)
- Purpose: Customer relationship tool
- Legal reasoning: Consensus pursuant Art 6 Abs 1 lit a GDPR
- Location: US
- Secure third country transfer: Consensus pursuant Art 49 Abs 1 lit a GDPR
- Recipient of data: Spedition Contop GmbH
- Purpose: Fulfilment provider (warehouse
- Legal reasoning: Legitimate interest Art 6 Abs 1 lit f GDPR
- Location: Austria, Germany
- Secure third country transfer: Within the EU
II.1. Overview of the technical cookies
The above data is stored via so-called "cookies"[1]. Cookies are text files that are stored on your terminal device (cell phone, computer) and enable an analysis of the use of the website. They are used for recognition and storage of temporary data of the website visitor. We generally only use cookies to the extent necessary to communicate with you via the website.
These technical cookies are activated as soon as you visit our website.
The following cookies are used in our website based on our legitimate interest (Art 6 para 1 lit f GDPR):
- Name of cookie: _pay_session
- Time of storage: session
- Description: This cookie is used in conjunction with the payment window. - The cookie is required for secure transactions on the
- transactions on the website. Location: Canada
- Name of cookie: _shopify_d
- Time of storage: Session
- Description: The cookie is necessary for the secure payment function on the website. This function is provided by shopify.com.
- Location: US
- Name of cookie: cart_currency
- Time of storage: 13 days
- Description: The cookie is necessary for the secure payment function on the website. This function is provided by shopify.com.
- Location: Kanada
- Name of cookie: cookiestest
- Time of storage: Session
- Description: Consent management tool
- Location: US
- Name of cookie: secure_customer_sig
- Time of storage: Session
- Description: This cookie is used to save a customer's login details when a login is made to the website. This cookie is used to save a customer's login data when a login is made to the website - the cookie is necessary to perform a secure transaction on line.
- Location: Canada
- Name of cookie: shopfiy_pay-redirect
- Time of storage: 1 day
- Description: The cookie is necessary for the secure payment function on the website. This function is provided by shopify.com.
- Location: Canada
- Name of cookie: test_cookie
- Time of storage: Session
- Description: Consent management tool
- Location: Canada
II.2. Overview of the „advertising-Cookies“
In addition to the “technical cookies” described above, we also use so-called advertising cookies (including “statistical cookies”). These advertising cookies allow us to better track and evaluate your interests. With the help of the advertising cookies, we can merge your “surfing behavior” across the boundaries of our website with data from other websites. This is to enable us to better understand the interests of our homepage visitors and target them more effectively.
We respect that not every visitor of the website wants this. Therefore, we only process your data in the course of advertising cookies if you consent to this (Art 6 para 1 lit a GDPR). You can revoke this consent at any time, whereby the data processing that took place until the time of revocation remains justified.
Currently, the following advertising cookies are used:
- Name of cookie: klaviyoOnsite
- Storage duration: Persistent
- Third Country: GBR
- Function: The cookie is used to manage the mailin g list when the visitor has subscribed to newsletters or blog posts.
- Name of cookie: local_bar_accepted
- Storage duration: Session
- Third Country: US
- Function: Stores the applicable currency
- Name of cookie: localization
- Storage duration: 1 year
- Third Country: Canada
- Function: Stores the applicable time zone
- Name of cookie:_kla_id
- Storage duration: 2 years
- Third Country: GBR
- Function: This cookie is used to collect information about the behaviour of the user. This info
This information is stored for internal analysis purposes by the website operator - internal analysis is used to optimise the websites or to register whether the user is interested in a particular service.
to optimise the websites or to register whether the visitor is registered for a newsletter.
- Name of cookie: _ga_# (Google)
- Storage duration: 2 years
- Third Country: USA
- Function: Registers a unique ID that is used to generate statistical data about it, revisit he uses the site.
- Name of cookie: _gat (Google)
- Storage duration: 1 day
- Third Country: USA
- Function: Used by Google Analytics to limit the request rate.
- Name of cookie: _gid (Google)
- Storage duration: 1 day
- Third Country: USA
- Function: Registers a unique ID that is used to generate statistical data about who uses the website again.
- Name of cookie: Collect (Google)
- Storage duration: Session
- Third Country: USA
- Function: Used to send data to Google Analytics about the visitor's device and behavior.
- Name of cookie: _kla_viewed
- Storage duration: Persistent
- Third Country: GB
- Function: Collects infor mation about the navigation and preferences of users on the website. This is used to target potential newsletters based on this information.
- Name of cookie: _fbp (Facebook)
- Storage duration: 3 months
- Third Country: GB
- Function: Used be facebook to show relevant goods and services.
- Name of cookie: _gcl_au
- Storage duration: 3 months
- Third Country: US
- Function: Used by Google AdSense to experiment with advertising efficiencies on websites that use its services.
- Name of cookie: _landing_page
- Storage duration: 13 days
- Third Country: Canada
- Function: Saves visitor navigation by registering landing pages - This allows the website to present relevant products and / or measure its advertising efficiency on other websites. This allows the website to present relevant products and / or measure its advertising effectiveness on their websites.
- Name of cookie: _orig_referrer
- Storage duration: 3 months
- Third Country: Canada
- Function: This cookie is used to collect information about a visitor. This information is stored in an ID string with information about a specific visitor - ID information strings can be used to visualise groups with similar preferences. Groups with similar preferences or can be used by third-party domains or advertising services.
- Name of cookie: _s; _shopify_s; _shopify_sa_p; _shopify_sa_t
- Storage duration: 1 day
- Third Country: Canada
- Function: Collects data on visitor behaviour and interaction - This is used to make advertising on the website more relevant. The cookie also allows the website to recognise links from other websites.
- Name of cookie: _shopfiy_y; _y
- Storage duration: 1 year
- Third Country: Canada
- Function: Collects data on visitor behaviour and interaction - This is used to make advertising on the website more relevant. The cookie also allows the website to recognise links from other websites.
- Name of cookie: ads/ga-audiences
- Storage duration: Session
- Third Country: US
- Function: Used by google for retargeting
- Name of cookie: IDE
- Storage duration: 1 year
- Third Country: US
- Function: Used by Google DoubleClick to register and report the user's actions on the website after viewing or clicking on an advertiser's ad.
- Name of cookie: _s; _shopify_s; _shopify_sa_p; _shopify_sa_t
- Storage duration: 1 day
- Third Country: Canada
- Function: Collects data on visitor behaviour and interaction - This is used to make advertising on the website more relevant. The cookie also allows the website to recognise links from other websites.
- Name of cookie: pagead/1p-conversion/#; pagead/1p-user-list/#; pagead/viewthroughconversion
- Storage duration: Session
- Third Country: US
- Function: Used to track whether the user has shown interest in certain products or events on multiple websites and how the user navigates between them. This is used to measure advertising spend and facilitate payment of referral fees. This is used to measure advertising spend and facilitate the payment of referral fees between websites.
- Name of cookie: YSC; ytidb; yt-remote-cast-available; yt-remote-cast-installed; yt-remote-connected-devices; yt-remote-device-id; yt-remote-fast-check-period; yt-remote-session-app; yt-remote-session-name; yt-remote-session-name
- Storage duration: Session and Persistent
- Third Country: US
- Function: Saves user settings when downloading a Youtube video integrated on their website.
In the course of our business relationship with customers and business partners, we process data on the basis of contractual (processing of the contractual relationship with you, pre-contractual obligations, billing for services, dispatch of documents, communication for the processing of the contract) and legal obligations (legally required storage within the meaning of section 132 BAO; section 212 Austrian Business Code (“UGB”)); (Art 6 para 1 lit b and c GDPR) as well as on the basis of our legitimate interests or on the basis of legitimate interests of third parties (Art 6 para 1 lit f GDPR), namely:
- For the purpose of internal administration and management of your business case to the extent required (e.g.: Processing your business case, forwarding your business case to various departments, filing, archiving purposes, correspondence with you);
- to deliver goods;
- in the course of a Due Diligence Audit;
- for the purpose of direct advertising (e.g.: Mailing, e-mailing, satisfaction surveys, congratulatory letters, statistical analysis);
We would like to inform you explicitly that you can object to the processing of your data for the purpose of direct advertising.
- assertion and defense of legal claims
in each case to the extent necessary. The processing of your data serves the initiation, maintenance and handling of our business relations. If you do not provide us with this data, we will unfortunately not be able to process your business case.
In addition, personal data may be transferred to our order processors (within the meaning of Art 4 number 8 GDPR). These processors are listed under point V.
If applicable, we process your data based on your voluntary, explicit consent (Art 6 para 1 lit a GDPR).
We will only store your data for as long as is necessary for the purposes for which we collected your data. In this context, statutory retention obligations must be taken into account (for example, for reasons of tax law, contracts and other documents from our contractual relationship must generally be retained for a period of seven years (section 132 BAO)). In justified individual cases, such as for the assertion and defense of legal claims, we may also store your data for up to 30 years after termination of the business relationship.
We store data of interested parties for up to one year from the date of the last contact by the interested party.
In the course of our business relationship, it may be necessary for us to transmit your data to the following recipients:
- Recipient of data: Fulfilment provider
- Purpose: Delivery of goods
- Legal reasoning: Contractual obligation (Art 6 Abs 1 lit b GDPR)
- Location: All over the world
- Secure third country transfer: Within the EU; or contractual obligation pursuant Art 49 Abs 1 lit b GDPR
- Recipient of data: Auditor and tax consultants
- Purpose: Tax consulting and auditing
- Legal reasoning: Contractual obligation (Art 6 Abs 1 lit b GDPR)
- Location: Austria
- Secure third country transfer: Within the EU
- Recipient of data: Bank
- Purpose: Payment-Provider
- Legal reasoning: Contractual obligation (Art 6 Abs 1 lit b GDPR)
- Location: Austria
- Secure third country transfer: Within the EU
- Recipient of data: Attorney at law
- Purpose: Pursuit and defense of legal claims
- Legal reasoning: Legitimate interest (Art 6 Abs 1 lit f GDPR)
- Location: Austria
- Secure third country transfer: Within the EU
- Recipient of data: Investors
- Purpose: Due Diligence
- Legal reasoning: Legitimate interest (Art 6 Abs 1 lit f GDPR)
- Location: Austria
- Secure third country transfer: Within the EU
- Recipient of data: Insurance
- Purpose: Insurance of delivery
- Legal reasoning: Legitimate interest (Art 6 Abs 1 lit f GDPR)
- Location: Austria
- Secure third country transfer: Within the EU
- Recipient of data: Distributors
- Purpose: Delivery of goods
- Legal reasoning: Legitimate interest (Art 6 Abs 1 lit f GDPR)
- Location: All over the world
- Secure third country transfer: All over the world
In the course of a business relationship or the initiation thereof, it is naturally necessary to conduct research on the business partner. This is done exclusively to the extent required for this purpose. In this context, data may be retrieved and processed from the following sources:
Our company does not obtain personal data from external sources.
No automated decision-making or profiling takes place in our company.
We would like to inform you that, provided that the legal requirements are met, you have the right to request information about your personal data:
- Have the right to request information about which of your data is processed by us (see in detail Art 15 GDPR).
- You have the right to request the correction or completion of incorrect or incomplete data concerning you (see in detail Art. 16 GDPR).
- Have the right to have your data deleted (see in detail Art 17 GDPR).
- Have the right to object to processing of your data that is necessary for the protection of our legitimate interests or those of a third party (see in detail Art 21 GDPR). This applies in particular with regard to the processing of your data for advertising purposes.
- Have the right to receive the transfer of the data you have provided in a structured, common and machine-readable format.
If we process your data on the basis of your consent, you have the right to revoke this consent at any time by e-mail. This does not affect the lawfulness of the data processing carried out up to this point (Art 7 (3) GDPR).
If, contrary to expectations, there is a violation of your right to lawful processing of your data, please contact us by mail or e-mail. We will make every effort to process your concerns promptly. However, you also have the right to lodge a complaint with the supervisory authority for data protection matters responsible for you.
The address of the Austrian data protection authority is:
Austrian Data Protection Authority
Barichgasse 40-42,
1030 Vienna
If you have any further questions about the processing of your data, please feel free to contact our data protection coordinator using the contact details below.
Aliens Protection GmbH,
Moosfeldstraße 1, 5101 Bergheim, Austria
support@flaxta.com
Author: Attorney at law Dr. Tobias Tretzmüller, LL.M., www.digital-recht.at.
A copy of this privacy policy, or even parts thereof, requires the consent of the author.
[1] You can prevent the storage of cookies by selecting the appropriate settings in your browser software. However, we would like to point out that in this case you may not be able to use all functions of this website to their full extent.
