Version: May 2018
The protection of your personal data is an important concern of kindsknopf GmbH, Skallgasse 14/6, 3400 Klosterneuburg, www.kindsknopf.at (hereinafter: “website”), email@example.com (hereinafter: “kindsknopf”, “we”, “us”). In connection with the use of our website and the associated services (including our social media appearances) as well as our other online offers, personal data of the users and customers of kindsknopf may be processed. The provisions on data protection in the current version of the Data Protection Act as well as the EU General Data Protection Regulation (“GDPR”) and other binding regulations are always observed. Below you will find information on how we process your personal data when you visit and use our online offer:
1. What is personal data?
Personal data is information about data subjects whose identity is determined or at least determinable. This includes, for example, your name, your address or your e-mail address.
2. What data do we process on you, for what purposes and on what legal basis?
2.1. Contact with us
If you contact us via e-mail or other electronic channels (such as social media platforms), we will process the personal data you provide voluntarily (name, e-mail address, subject of your message and message content). We process your personal data transmitted in connection with contacting us only for the processing of your inquiry, in the context of the subsequent contact desired by you, and for the transmission of the desired information to you. This data processing is therefore necessary to fulfil our (pre) contractual obligations.
2.2. Communication via social media platforms
You can also contact us via our social media pages (especially on facebook, Instagram or GoogleMyBusiness). In this case, we process your provided data (usually your name or username and the communication content) to answer your request, in the context of your desired subsequent contact via the respective social media platform, and to transmit the information you want via the respective social media platform. For this purpose and possibly other purposes, your personal data will also be processed by the respective operator of the social media platform. This data processing in the context of communications via social media platforms is required to fulfil our (pre) contractual obligations.
2.3. Orders in the online shop
When you place an order through the shop on our website, we collect the personal data you provide (name, address, e-mail address, payment details, order information) for orders, customer care, contract management and pre-contractual actions (such as product inquiries). This data processing is therefore necessary to fulfil our (pre) contractual obligations.
2.4. Participation in releases
We regularly publish invitations to participate in so-called releases on our social media pages. These are special promotions for products with limited availability. Via a form, interested buyers can enter their personal data (name on social network, name, country, e-mail address linked with Paypal account, product data). At the end of the pre-announced release period, randomly selected buyers from all participants will be selected who will be allowed to purchase the limited available products. We will inform the selected buyers by e-mail. Unless explicitly requested by the interested party (in order to participate in future silent draws), we will delete their data immediately after the end of the release. This data processing in the context of releases is therefore required to fulfil our (pre-) contractual obligations.
2.5. Technical data (logfiles)
When you visit our website, we collect the following technical data (logfiles): Name of the retrieved website, date and time of retrieval, amount of data transferred, browser and client type plus version, your operating system, referrer URL (the previously visited page), IP address and the requesting provider. This data is generated automatically by our servers when you use our website and is required so that we can provide you with the services you require. Therefore, we only process the logfiles in order to make our website and related services available to you as well as for security reasons. This data processing is necessary to protect our legitimate interests in providing a user-friendly and secure website.
2.6. Usage data
Based on your consent, we will e-mail you information about our own goods and services, as well as special offers and promotions on our offers, products, invitations to events, sweepstakes, surveys and newsletters. In doing so, we process your self-provided personal data (name, user name, salutation, title, address, telephone numbers, e-mail addresses, gender, date of birth) and data gathered from the business relationship via orders, subscriptions, demand interests on the digital platforms of kindsknopf in order to contact you. You can always revoke your consent to receive newsletters (e.e. by e-mail to firstname.lastname@example.org or via the unsubscribe link in the e-mail newsletter) with effect for the future and free of charge. Upon receipt of your revocation, we immediately stop sending e-mail newsletters and delete your personal data from the e-mail distribution list.
You have the opportunity to subscribe to our newsletter via our website. For this we need your e-mail address and your declaration that you agree with the subscription to the newsletter.
Double opt-in and logging
Registration for our newsletter takes place in a so-called double opt-in procedure. That After registration, you will receive an e-mail asking you to confirm your registration. This confirmation is necessary so that nobody can register with external e-mail addresses. Registration for the newsletter will be logged in order to prove the registration process according to the legal requirements. This includes the storage of the logon and the confirmation time, as well as the IP address. Likewise, changes to your data stored with MailChimp will be logged.
Use of the shipping service provider "MailChimp"
To subscribe to the newsletter, it is sufficient to enter your e-mail address.
Statistical survey and analyzes
The newsletters contain a so-called "web beacon", i. a pixel-sized file that is retrieved from the MailChimp server when the newsletter is opened. In the course of this call, technical information, such as information about the browser and your system, as well as your IP address and time of the retrieval are collected. This information is used to improve the technical performance of services based on their specifications or audience and their reading habits, based on their locations (which can be determined using the IP address) or access times. The statistical surveys also include determining whether the newsletters are opened, when they are opened and which links are clicked. For technical reasons, this information can be assigned to the individual newsletter recipients. However, it is neither our desire nor that of MailChimp to observe individual users. The evaluations serve us much more to recognize the reading habits of our users and to adapt our content to them or to send different content according to the interests of our users.
Online call and data management
Termination / Revocation
You can terminate the receipt of our newsletter at any time, ie. Revoke your consent. At the same time, your consent to sending it via MailChimp and the statistical analyzes expire. A separate revocation of the shipment via MailChimp or the statistical evaluation is unfortunately not possible. A link to cancel the newsletter can be found at the end of each newsletter. We will immediately delete your data in connection with the newsletter dispatch.
2.8. Credit inquiries for commercial customers
Within the framework of our legitimate interests, we transmit personal data of commercial customers (“entrepreneurs” according to the definition of the KSchG) to officially authorised credit protection associations and credit institutions for the purpose of a possible credit check and to obtain their creditworthiness from this data.
2.9. Legitimate interests
In addition, we use your personal data within the framework of our legitimate interests in corporate governance for the following purposes: Responding to inquiries (if you are not a customer), enforcing legal claims, ensuring IT security and IT operations, analysing visitor behaviour on our website, internal administrative purposes.
2.10. Legal obligations
In order to fulfil our legal obligations (e.g. tax or corporate law requirements), we also process and store personal data to the extent required by the relevant law.
4. Will your data be shared with third parties?
We provide your personal data to the extent necessary to the following external service providers (processors) who assist us in the provision of our services: • IT service providers and/or providers of data hosting solutions or similar services; • Other service providers, suppliers of tools and software solutions who also support us in the provision of our services and act on our behalf (including providers of marketing tools, marketing agencies and communications service providers). In addition, we will transmit your personal data to the extent necessary to the following recipients (controllers): • Any third parties involved in the provision of services to you to fulfil our contractual obligations (e.g. postal and messenger services, banks for payment processing, payment providers); • External third parties to the extent required on the basis of our legitimate interests (e.g. auditors and tax consultants, insurers in the event of an insured event, legal representatives in case of need, debt collection agencies in case of need); • Authorities and other public bodies to the extent required by law (e.g. tax authorities).
5. Storage period
We only store your personal data for as long as it is necessary for the purposes for which it is collected. In addition, we may be obligated to keep your data longer, if necessary due to corresponding legal retention periods. For the purposes of our record keeping obligations, we store your personal data processed in connection with orders and purchases for a minimum of seven years. In individual cases, the personal data can be kept for the time in which claims against Kindsknopf can be asserted (statutory limitation period of 3 or up to 30 years). For advertising purposes (e.g. newsletters and usage data), we process your data up to your objection, but for a maximum of 3 years after your last contact with us.
6. Which rights do you have?
You have a right to information about the personal data we process about you (Art. 15 GDPR). You also have the right to correct inaccurate or incomplete data and – under certain conditions – a right to deletion (Art. 16 ff. GDPR). In addition, you have a right to restriction of processing (Art. 18 GDPR) as well as a right to data portability with regard to the data that you have provided to us (Art. 20 GDPR). You also have a right to object for reasons that arise from your particular situation (Art. 21 GDPR). Such an objection may, in particular, be directed against the processing of your data for direct marketing purposes. Furthermore, you have the right to revoke granted consent at any time with effect for the future. Finally, you have the right to lodge a complaint with the competent supervisory authority (Art. 77 GDPR). The supervisory authority responsible for Austria is the Austrian Data Protection Authority, Wickenburggasse 8, 1080 Vienna. If you have any questions or concerns about data protection issues, please find our contact details in our Impressum.
7. Final provisions