Data Protection Declaration
Version 06.07.2020
Thank you for visiting our website www.fraeuleinhuebsch.com
It is our special concern to protect your data. We process your data exclusively on the foundation of legal regulations (General data protection regulation GDPR, TKG 2003). In this information on data protection we will inform you about the most important aspects of data processing in context of our activities.
The use of our websites is generally possible without sharing any personal data. If you contact us or wish to subscribe to our newsletter we will forward necessary data to companies which process data on our account (e.g. send the newsletter). We assign only companies which submit to the General data protection regulation of the European Union.
Basic information
We use your data only in the extend necessary for our website www.fraeuleinhuebsch.com. We use your data for instance
- to answer your requests
- for the conduction of contracts conclused via our onlineshop
- for marketing purposes
- to optimize our website
We only grant third parties access to your data in case that there is a legal obligation or entitlement – or – for the performance of a contract we concluded with you (eg payment services or delivery services) according to Art 6 sec 1 lit b GDPR – or – in order to answer your requests (Art 6 sec 1 lit b GDPR) – or – in case you gave us your consent (Art 6 sec 1 lit a GDPR) – or – in case processing is necessary for the purposes of the legitimate interests (Art 6 sec 1 lit f GDPR).
The following chapters inform you in which way we use your personal data. Please note: We took appropriate technical and organisational measures to ensure for your data a level of security appropriate to the risk (Art 32 GDPR).
Contact with us
If you contact us via our website, e-mail or any other way, we will store shared by you data (name, e-mail-address and optional a phone number), for processing your request and for possible follow-up questions. The storing time will be one year. Should the request result in an contract the legal storage periods will apply. This data will not be passed on without your permission. The data- processing is based on Art 6 Abs 1 lit b (fulfilment of contract) and/or lit a (consent) of the GDPR.
Information e-mail
If asked, we will gladly inform you about the availability of sold out products. Therefor we only need your e-mail-adress and the desired product.
As soon as we informed you about the availability we will delete your data.
The data- processing is therefore based on Art 6 Abs 1 lit a (consent) and/or lit b (fulfilment of contract) of the GDPR.
Hosting
Our website is hosted within the EU by netcup GmbH, Daimlerstraße 25, D-76185 Karlsruhe. We do have processors‘ contracts according to Art 28 GDPR with them.
Cookies
Our website uses so called cookies. These are small textfiles stored on your device by your browser. They cause no damage. We use cookies to make our offer user-friendly. Cookies are especially needed for the funcionality of the shopping cart and the assignment of online-payments in our webshop. Some cookies will be stored on your device until you delete them. They allow us to recognize your browser during your next visit. If you do not wish to use cookies, you can set your browser to alert you about inserting cookies and allow it only in particular cases.
By deactivating cookies the functionality of our website can be limited.
The data processing is based on Art 6 Abs 1 lit b (fulfilment of contract) as well as Art 6 Abs 1 lit f (legitimate interest) of the GDPR. The legitimate interest in line with the GDPR is the proper and save functioning of our website.
Server protocol
The server that makes our website available, saves informations which are automatically sent by your browser, in so called log-files. Saved are:
• Browsertype and Browserversion
• Used operating system
• Referrer URL (the website referring you to our website)
• IP-adress of the accessing computer
• Time of request
Those informations are solely used for technical supervision of the server (capacity, optimization, error detection, safety) and are therefore absolutely necessary. They are not linked to any other data sources, so they can not be associated to one individual person. They will be deleted after three months. The data processing is based on Art 6 Abs 1 lit f (legitimate interest) of the GDPR. The legitimate interest in line with the GDPR is the proper and save functioning of our website.
Encrypted transmission
This website uses SSL encryption for safety and data protection. It prevents third parties to intercept or read data during transmission. To check for an active encryption please search for the green padlock or a similar symbol in the address line of your browser.
Data storage
For bookkeeping following customer data will be stored: name, address, phone number, e-mail-address, UID-number. This data will not be shared, except for the transmission to processing banking institutions and payment service providers for money transferal, to the austrian post office (Österreichische Post) for the shipping process and to our accountant for bookkeeping and fulfilment of tax-law obligations. Data is stored exclusively in the EU.
The data provided by you is needed for contract fulfilment and/or pre-contractual measures. Without this data a contract can not be concluded with you and fulfilled.
All data of the contractual relationship will be stored until the end of the tax-law storage period (7 years).
The data processing is based on the legal regulations of § 96 Abs 3 TKG and Art 6 Abs 1 lit a (consent) and/or lit b (fulfilment of contract) of the GDPR.
Password protected customer area
Access data for the costumer-login, transmitted by request to the costumer, have to be treated strictly confidential.
The password is created by the costumer during registration and will be transmitted and saved only encrypted. We don’t take any responsibility for the utilisation and usage of this data.
The data processing is based on the legal regulations of Art 6 Abs 1 lit a (consent) and/or lit b (fulfilment of contract) of the GDPR.
Analysis of the Fräulein Hübsch Website
To improve and optimise this web presence we use Google Analytics, a web analysis service of Google Ireland Limited , Gordon House, Barrow Street, Dublin 4, Irland (“Google” in the following). Google is certified under the Privacy Shield Framework Agreement and thus guarantees maintenance of the European Data Protection Law: www.privacyshield.gov/participant.
We have entered into a corresponding contract with Google. You can find Google‘s Data Protection Declaration here: policies.google.com/privacy
Google Analytics uses so-called cookies, text data that is stored on the user’s computer and enables an analysis of the website usage by the user. The information generated by the cookie on usage of this website is normally transmitted to a Google server in the USA and stored there.
Our task in terms of the DSGVO/Data Protection Basic Regulation is to improve our offer and our web presence. Since our users’ privacy is important to us, user data is processed in a pseudonymisised way. Furthermore we can apply the “Google Tag Manager” system so as to integrate and manage the Google analysis and marketing services into our website (Art. 6 sec 1 lit f DSGVO). The Google Tag Manager doesn’t set cookies by itself.
We activated anonymizeIP for our website: with this extension, IP addresses are re-processed in an abbreviated form in order to cut out direct personal references: the IP anonymisation analytics on this website abbreviates before the IP addresses of a Google user. Only as an exception the full IP address could be transferred to a Google server in the USA and abbreviated there.
In the course of using Google Analytics, Google evaluates website usage in order to compile reports on website activities and furthermore to provide services associated with website usage and Internet usage. The IP address transferred from a user’s browser in the framework of Google Analytics is not merged with other Google data. User data is stored for the duration of 14 months.
Users can prevent the storage of cookies by an appropriate setting in their browser software; however, we wish to inform that in this case the user might not be able to make use of all functions of this website.
In addition we would like to inform you that users can prevent the use of Google Analytics by installing the browser plug-in available through the following link:
http://tools.google.com/dlpage/gaoptout?hl=de
Google Marketing
We use Google AdWords and Google Remarketing of Google. We have entered into a corresponding contract with Google for order data processing. You can find the Google Data Protection Declaration here: policies.google.com/privacy.
Internet users are shown ads. They are shown ads in Google Search and also on different advertising-sponsored websites. Both types of advertising will be shown anyway, as those services are financed by means of the sale of advertising possibilities. By using Google Marketing we have the chance to show our ads to users that are probably more intersted in our products and users rather see advertisments that they might be interested in. So you will rather see ads that might be of interest to you and you might rather not just be annoyed by ads that do not make sense for you.
Remarketing means that ads for products are displayed to a user in which he or she did already show an interest. This involves integrating so-called conversion tags into websites. When a user device accesses the website, a cookie (a small piece of data) is stored which notes the websites the user has visited. When surfing further, the user is shown specific ads based on these references.
Google Adwords saves a cookie on the user’s computer when the user has accessed our website via a Google ad. These cookies lose validity after 30 days and do not serve personal identification. Information accessed by means of the conversion cookie serves to create conversion statistics (for instance through the overall number of users who have clicked the ad). However, we do not receive information that can be used to identify a user personally.
We use Google Marketing based on our legitimate interest (Art. 6 sec 1 lit f GDPR). In addition, we have activated anonymizeIP for our website: as explained in Point “Analysis of the Fräulein Hübsch Website”; with this extension, user data is pseudonymised. This means that neither Google nor advertisers can identify the user: name, e-mail address, etc remain unknown in this procedure.
If you do not wish to take part in the tracking procedure, you can also reject the installation of the cookie required for this – for instance via the browser setting that generally deactivates cookies automatically, or by blocking cookies through the domain “googleadservices.com”.
Moreover you can use the opt-out option installed by Google:
http://www.google.com/ads/preferences.
Social Plugins
In order to avoid unforeseeable data transfers to social media platforms we do not use social plugins (e.g. share or like buttons). Only normal hyperlinks lead to our presence on Facebook, Google+, Youtube, Instagram and Pinterest. Please note that when us use these social platforms their General Terms and Conditions are applicable.
Your rights
You have the right to information, correction, deletion, limitation, data portability, withdrawal and contradiction. Appropriate requests can be sent to the e-mail-address office@fraeuleinhuebsch.at
If you think, that the processing of your data is against the data protection law or your data protection rights are violated in any other way you can complain to the supervisory authority. In Austria contact the data protection authority (Datenschutzbehörde).
Controller and contact:
Fräulein Hübsch e.U.
Elisabeth Pohn
Konstantingasse 7 Hof 1
1160 Wien
Österreich
E-Mail: office@fraeuleinhuebsch.at
Tel.: +43 699 15044877