Version: May 2018
The protection of your personal data is an important concern of kindsknopf GmbH, Skallgasse 14/6, 3400 Klosterneuburg, www.kindsknopf.at (hereinafter: “website”), email@example.com (hereinafter: “kindsknopf”, “we”, “us”). In connection with the use of our website and the associated services (including our social media appearances) as well as our other online offers, personal data of the users and customers of kindsknopf may be processed. The provisions on data protection in the current version of the Data Protection Act as well as the EU General Data Protection Regulation (“GDPR”) and other binding regulations are always observed. Below you will find information on how we process your personal data when you visit and use our online offer:
1. What is personal data?
Personal data is information about data subjects whose identity is determined or at least determinable. This includes, for example, your name, your address or your e-mail address.
2. What data do we process on you, for what purposes and on what legal basis?
2.1. Contact with us
If you contact us via e-mail or other electronic channels (such as social media platforms), we will process the personal data you provide voluntarily (name, e-mail address, subject of your message and message content). We process your personal data transmitted in connection with contacting us only for the processing of your inquiry, in the context of the subsequent contact desired by you, and for the transmission of the desired information to you. This data processing is therefore necessary to fulfil our (pre) contractual obligations.
2.2. Communication via social media platforms
You can also contact us via our social media pages (especially on facebook, Instagram or GoogleMyBusiness). In this case, we process your provided data (usually your name or username and the communication content) to answer your request, in the context of your desired subsequent contact via the respective social media platform, and to transmit the information you want via the respective social media platform. For this purpose and possibly other purposes, your personal data will also be processed by the respective operator of the social media platform. This data processing in the context of communications via social media platforms is required to fulfil our (pre) contractual obligations.
2.3. Orders in the online shop
When you place an order through the shop on our website, we collect the personal data you provide (name, address, e-mail address, payment details, order information) for orders, customer care, contract management and pre-contractual actions (such as product inquiries). This data processing is therefore necessary to fulfil our (pre) contractual obligations.
2.4. Participation in releases
We regularly publish invitations to participate in so-called releases on our social media pages. These are special promotions for products with limited availability. Via a form, interested buyers can enter their personal data (name on social network, name, country, e-mail address linked with Paypal account, product data). At the end of the pre-announced release period, randomly selected buyers from all participants will be selected who will be allowed to purchase the limited available products. We will inform the selected buyers by e-mail. Unless explicitly requested by the interested party (in order to participate in future silent draws), we will delete their data immediately after the end of the release. This data processing in the context of releases is therefore required to fulfil our (pre-) contractual obligations.
2.5. Technical data (logfiles)
When you visit our website, we collect the following technical data (logfiles): Name of the retrieved website, date and time of retrieval, amount of data transferred, browser and client type plus version, your operating system, referrer URL (the previously visited page), IP address and the requesting provider. This data is generated automatically by our servers when you use our website and is required so that we can provide you with the services you require. Therefore, we only process the logfiles in order to make our website and related services available to you as well as for security reasons. This data processing is necessary to protect our legitimate interests in providing a user-friendly and secure website.
2.6. Usage data
Based on your consent, we will e-mail you information about our own goods and services, as well as special offers and promotions on our offers, products, invitations to events, sweepstakes, surveys and newsletters. In doing so, we process your self-provided personal data (name, user name, salutation, title, address, telephone numbers, e-mail addresses, gender, date of birth) and data gathered from the business relationship via orders, subscriptions, demand interests on the digital platforms of kindsknopf in order to contact you. You can always revoke your consent to receive newsletters (e.e. by e-mail to firstname.lastname@example.org or via the unsubscribe link in the e-mail newsletter) with effect for the future and free of charge. Upon receipt of your revocation, we immediately stop sending e-mail newsletters and delete your personal data from the e-mail distribution list.
2.8. Credit inquiries for commercial customers
Within the framework of our legitimate interests, we transmit personal data of commercial customers (“entrepreneurs” according to the definition of the KSchG) to officially authorised credit protection associations and credit institutions for the purpose of a possible credit check and to obtain their creditworthiness from this data.
2.9. Legitimate interests
In addition, we use your personal data within the framework of our legitimate interests in corporate governance for the following purposes: Responding to inquiries (if you are not a customer), enforcing legal claims, ensuring IT security and IT operations, analysing visitor behaviour on our website, internal administrative purposes.
2.10. Legal obligations
In order to fulfil our legal obligations (e.g. tax or corporate law requirements), we also process and store personal data to the extent required by the relevant law.
4. Will your data be shared with third parties?
We provide your personal data to the extent necessary to the following external service providers (processors) who assist us in the provision of our services: • IT service providers and/or providers of data hosting solutions or similar services; • Other service providers, suppliers of tools and software solutions who also support us in the provision of our services and act on our behalf (including providers of marketing tools, marketing agencies and communications service providers). In addition, we will transmit your personal data to the extent necessary to the following recipients (controllers): • Any third parties involved in the provision of services to you to fulfil our contractual obligations (e.g. postal and messenger services, banks for payment processing, payment providers); • External third parties to the extent required on the basis of our legitimate interests (e.g. auditors and tax consultants, insurers in the event of an insured event, legal representatives in case of need, debt collection agencies in case of need); • Authorities and other public bodies to the extent required by law (e.g. tax authorities).
5. Storage period
We only store your personal data for as long as it is necessary for the purposes for which it is collected. In addition, we may be obligated to keep your data longer, if necessary due to corresponding legal retention periods. For the purposes of our record keeping obligations, we store your personal data processed in connection with orders and purchases for a minimum of seven years. In individual cases, the personal data can be kept for the time in which claims against Kindsknopf can be asserted (statutory limitation period of 3 or up to 30 years). For advertising purposes (e.g. newsletters and usage data), we process your data up to your objection, but for a maximum of 3 years after your last contact with us.
6. Which rights do you have?
You have a right to information about the personal data we process about you (Art. 15 GDPR). You also have the right to correct inaccurate or incomplete data and – under certain conditions – a right to deletion (Art. 16 ff. GDPR). In addition, you have a right to restriction of processing (Art. 18 GDPR) as well as a right to data portability with regard to the data that you have provided to us (Art. 20 GDPR). You also have a right to object for reasons that arise from your particular situation (Art. 21 GDPR). Such an objection may, in particular, be directed against the processing of your data for direct marketing purposes. Furthermore, you have the right to revoke granted consent at any time with effect for the future. Finally, you have the right to lodge a complaint with the competent supervisory authority (Art. 77 GDPR). The supervisory authority responsible for Austria is the Austrian Data Protection Authority, Wickenburggasse 8, 1080 Vienna. If you have any questions or concerns about data protection issues, please find our contact details in our Impressum.
7. Final provisions