Privacy Policy
The protection of your personal data is of particular concern to us. We therefore process your data exclusively based on the legal provisions (GDPR, TKG 2003). In this privacy policy, we inform you about the most important aspects of data processing within the framework of our website.
Contacting Us
If you contact us via the form on the website or by email, the data you provide will be stored by us for six months for the purpose of processing the request and in case of follow-up questions. We do not share this data without your consent.
Cookies
Our website uses so-called cookies. These are small text files that are stored on your device using the browser. They do not cause any harm.
We use cookies to make our offer user-friendly. Some cookies remain stored on your device until you delete them. They enable us to recognize your browser the next time you visit.
If you do not want this, you can set your browser to inform you about the setting of cookies and only allow this in individual cases.
Disabling cookies may limit the functionality of our website.
Google Maps
We use the maps service “Google Maps” provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy Policy: https://www.google.com/policies/privacy/, Opt-Out: https://adssettings.google.com/authenticated.
Google Fonts
We use fonts (“Google Fonts”) provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy Policy: https://www.google.com/policies/privacy/, Opt-Out: https://adssettings.google.com/authenticated.
Google ReCaptcha
We use the “ReCaptcha” function to prevent bots from making entries in online forms. It is provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy Policy: https://www.google.com/policies/privacy/, Opt-Out: https://adssettings.google.com/authenticated.
Web Analysis
Our website uses features of the web analytics service Google Analytics. The provider is Google Inc., located at 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. Cookies are used to enable an analysis of the use of the website by its users. The information generated is transmitted to Google’s servers in the USA and stored there. You can prevent this by setting your browser so that no cookies are stored.
We have concluded a corresponding contract for data processing with the provider.
Our concern in terms of GDPR (legitimate interest) is the improvement of our offer and our web presence. Since the privacy of our users is important to us, user data is pseudonymized.
Your IP address is recorded but immediately pseudonymized (e.g., by deleting the last 8 bits). As a result, only a rough localization is possible.
Data processing is carried out based on the legal provisions of § 96 Abs 3 TKG as well as Art 6 Abs 1 lit a (consent) and/or f (legitimate interest) of the GDPR.
Additionally, Google is certified under the Privacy Shield Agreement, which provides a guarantee to comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).
User data is retained for a period of 14 months.
For detailed information on Google’s data usage, your options for settings and objections, please visit the following Google websites: https://www.google.com/intl/de/policies/privacy/partners (“Data usage by Google when you use our partners‘ websites or apps”), http://www.google.com/policies/technologies/ads (“Data usage for advertising purposes”), http://www.google.de/settings/ads (“Manage information that Google uses to show you ads”).
Mouse-Tracking
Our concern in terms of GDPR (legitimate interest) is the improvement of our offer and our web presence. Therefore, we use Hotjar to better understand the needs of our users and optimize the offer on this website. With the technology of Hotjar, we get a better understanding of our users’ experiences (e.g., how much time users spend on which pages, which links they click, what they like and dislike, etc.) and this helps us to align our offer with our users’ feedback. Hotjar works with cookies (see above) and other technologies to collect information about the behavior of our users and their devices (in particular, IP address of the device (collected and stored only in anonymous form), screen size, device type (unique device identifiers), information about the browser used, location (country only), preferred language to display our website). Hotjar stores this information in a pseudonymized user profile. Neither Hotjar nor we use this information to identify individual users or merge it with other data about individual users. For more information, see Hotjar’s privacy policy: https://www.hotjar.com/legal/policies/privacy.
You can object to the storage of a user profile and information about your visit to our website by Hotjar, as well as to the setting of Hotjar tracking cookies on other websites, by following this opt-out link.
Data Storage in Our Webshop
For the purpose of contract processing, the following data is stored by us: title, first and last name, address, email address, and optionally provided user data (company name, address details, phone number). The data you provide is necessary for fulfilling the contract or for carrying out pre-contractual measures. Without this data, we cannot conclude the contract with you. Data is not transmitted to third parties, with the exception of the transmission of credit card data to the processing bank/payment service provider for the purpose of debiting the purchase price, to the transport company/shipping company commissioned by us to deliver the goods, and to our tax advisor to fulfill our tax obligations.
After aborting the purchase process, the data stored with us is deleted. In the case of a contract conclusion, all data from the contractual relationship is stored until the expiration of the tax retention period (7 years).
The data name, address, purchased goods, and purchase date are also stored until the expiration of product liability (10 years). Data processing is carried out based on the legal provisions of § 96 Abs 3 TKG as well as Art 6 Abs 1 lit a (consent) and/or lit b (necessary for contract fulfillment) of the GDPR.
Registration and User Account
Users of our webshop can optionally create a user account. During registration, we inform users about the required information (mandatory and optional fields). The data entered during registration is used for the purpose of using our offer. Users may be informed by email about offer- or registration-related information, such as changes in the scope of the offer or technical updates.
In the event that users terminate their user account, their data from this account is deleted; exceptions are data whose retention is necessary for commercial or tax reasons according to Art. 6 Abs. 1 lit. c GDPR. The users are responsible for securing their data before the end of the contract. We are entitled to irreversibly delete all user data stored during the contract period.
Based on our legitimate interests as well as user interests in protection against misuse and unauthorized use, we store the IP address and the time of each user action when a user uses our registration and login function in connection with their user account. The IP addresses are anonymized or deleted at the latest after 7 days.
We do not generally transmit data to third parties; exceptions are situations where we must pursue our claims or fulfill legal obligations according to Art. 6 Abs. 1 lit. c GDPR.
Newsletter
You have the option to subscribe to our newsletter via our website. To provide you with targeted information, we may also collect and process additional information provided voluntarily by users.
To send our newsletter, we need your email address and your declaration that you agree to receive the newsletter. Once you have subscribed to the newsletter, we will send you a confirmation email with a link to confirm the subscription.
You can cancel your subscription to the newsletter at any time. Please send your cancellation to the following email address: office@retail-experts-group.com.
We will then immediately delete your data in connection with the newsletter dispatch.
Google Re/Marketing Services
Our aim, in accordance with the GDPR (legitimate interest), is the improvement of our offerings and our web presence. Therefore, we use the marketing and remarketing services (short “Google Marketing Services”) of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”).
Google is certified under the Privacy Shield Agreement, which provides a guarantee to comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).
With the help of Google Marketing Services, we can display ads on our website and on other websites in a more targeted manner, so that users only see ads that potentially match their interests. For this purpose, Google executes a code and uses so-called (re)marketing tags, which enable an individual cookie to be stored in the user’s browser. Regarding the use of cookies, see above.
The information collected can also be combined by Google with such information from other sources. If the user subsequently visits other websites, they can be shown ads according to their interests.
In addition, through Google Analytics, the users‘ IP addresses are recorded but immediately pseudonymized (e.g., by deleting the last 8 bits). This allows only a rough localization. The ads are not managed and displayed for a specific person but for the cookie holder, regardless of who this cookie holder is. This, of course, does not apply if a user has explicitly allowed Google to process the data without this pseudonymization. The information collected by Google Marketing Services about users is transmitted to Google and stored on Google’s servers in the USA. The user’s IP address is not merged with other data by Google within other offers from Google.
We use cookies from the Google Marketing Service „Google AdWords“; we may also display ads from third parties based on the Google Marketing Service „AdSense“ and its cookies. For more information about Google’s data usage for marketing purposes, visit https://policies.google.com/technologies/ads, and to view Google’s privacy policy, visit https://www.google.com/policies/privacy.
We also use the „Google Tag Manager“ to integrate and centrally manage Google’s analysis and marketing services on our website.
Online Presence in Social Media
We maintain online presences within social networks and platforms to communicate with users, interested parties, and customers who are active there. When accessing these networks and platforms, the terms and conditions and data processing guidelines of the respective operators apply.
Unless otherwise stated in our privacy policy, we process users‘ data if they communicate with us within social networks and platforms.
Use of Facebook Social Plugins
Our aim, in accordance with the GDPR (legitimate interest), is the improvement of our offerings as well as the analysis, optimization, and economic operation of our web presence. Therefore, we use social plugins (“plugins”) of the social network facebook.com, which is operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”). The plugins can display content such as graphics, text contributions, or videos or elements of interaction. You can recognize them by one of the Facebook logos (“f” on the corresponding background, the “thumbs up” symbol, or the terms “Like” or “Share”) or by the designation “Facebook Social Plugin”. The list and appearance of Facebook social plugins can be viewed here: https://developers.facebook.com/docs/plugins/.
Facebook is certified under the Privacy Shield Agreement, which provides a guarantee to comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active).
For more information regarding Facebook’s data collection, further processing and use of data, as well as users‘ rights and settings options for protecting their privacy, please refer to Facebook’s data protection information: https://www.facebook.com/about/privacy/.
Within our online offer, content and functions of the Twitter service can be integrated. These are offered by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. This may include, for example, content such as images, videos, or text and buttons with which users can react to the content. If users are members of Twitter, Twitter can assign the call of the above-mentioned content and functions to the user’s profiles. Twitter’s privacy policy: https://twitter.com/de/privacy.
Twitter is certified under the Privacy Shield Agreement, which provides a guarantee to comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000TORzAAO&status=Active).
Within our online offer, content and functions of the Instagram service can be integrated. These are offered by Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA. This may include, for example, content such as images, videos, or text and buttons with which users can react to the content. If users are members of Instagram, Instagram can assign the call of the above-mentioned content and functions to the user’s profiles. Instagram’s privacy policy: http://instagram.com/about/legal/privacy/.
Within our online offer, content and functions of the Pinterest service can be integrated. These are offered by Pinterest Inc., 635 High Street, Palo Alto, CA, 94301, USA. This may include, for example, content such as images, videos, or text and buttons with which users can react to the content. If users are members of Pinterest, Pinterest can assign the call of the above-mentioned content and functions to the user’s profiles. Pinterest’s privacy policy: https://about.pinterest.com/de/privacy-policy.
Within our online offer, content and functions of the Xing service can be integrated. These are offered by XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany. This may include, for example, content such as images, videos, or text and buttons with which users can react to the content. If users are members of Xing, Xing can assign the call of the above-mentioned content and functions to the user’s profiles. Xing’s privacy policy: https://www.xing.com/app/share?op=data_protection.
Within our online offer, content and functions of the LinkedIn service can be integrated. These are offered by LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. This may include, for example, content such as images, videos, or text and buttons with which users can react to the content. If users are members of LinkedIn, LinkedIn can assign the call of the above-mentioned content and functions to the user’s profiles. LinkedIn’s privacy policy: https://www.linkedin.com/legal/privacy-policy.
LinkedIn is certified under the Privacy Shield Agreement, which provides a guarantee to comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000L0UZAA0&status=Active).
Vimeo
Videos from the platform „Vimeo“ can also be embedded in our website. These are offered by Vimeo Inc., Attention: Legal Department, 555 West 18th Street New York, New York 10011, USA. Privacy policy: https://vimeo.com/privacy.
YouTube
Videos from the platform „YouTube“ can also be embedded in our website. These are offered by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy policy: https://www.google.com/policies/privacy/, Opt-Out: https://adssettings.google.com/authenticated.
Your Rights
You have the right to information, correction, deletion, restriction, data portability, revocation, and objection. If you believe that the processing of your data violates data protection law or your data protection rights have otherwise been violated, you can file a complaint with the supervisory authority. In Austria, this is the Data Protection Authority.
You can reach us at the following contact details:
office@retail-experts-group.com
Source: This privacy policy is based on the sample privacy policy of the WKO. Last Updated: 28.10.2019
