1. Information on the collection of personal data and contact details of the controller
In the following privacy policy, we inform you about the handling of your personal data when using our website. Personal data is any data that can be uniquely assigned to a specific natural person.
The controller for data processing on this website, within the meaning of the General Data Protection Regulation (GDPR), is:
Marvin Strantz
Römergasse77
1170 Wien
+43 (0) 664 149 02 28
office@gm-strantz.at
To minimize potential security vulnerabilities and to protect the transmission of personal data and other confidential content, this website uses SSL or TLS encryption for security reasons. You can recognize an encrypted connection by the "https://" string and the lock symbol in your URL bar.
2. Server data
When you visit our website, we only collect data that your browser transmits to our server or to our web space provider (so-called server log files). These are technically necessary to display the website to you:
- Browser type and version
- Operating system used
- Date and time of access
- Website from which you visit us (referrer URL)
- User browser
- Operating system used
- Used IP address (anonymized if applicable)
The processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR based on our interest in improving the stability and functionality of our website. The data may be evaluated for statistical purposes. No disclosure or other use of the data takes place.
3. Cookies
We use so-called cookies on our site to make your visit to our website attractive and to enable the use of certain functions. Cookies are small text files that are stored on your end device. Some of these cookies are automatically deleted after closing the browser (so-called "session cookies"), while others remain on your end device for a longer period and enable the storage of page settings (so-called "persistent cookies"). For persistent cookies, you can see the storage duration in the overview of your web browser's cookie settings. You can prevent the installation of cookies by setting your browser accordingly. In this case, the functionality of our website may be restricted.
4. Contact option
You can contact us by e-mail and/or via a contact form. In this case, the information provided by the user will be stored for the purpose of processing their contact and the necessary technical administration. No data will be passed on to third parties. There is no comparison of the data collected in this way with data that may be collected by other components of our site. Your data will be deleted after the request has been processed.
5. Data processing for order fulfillment
Insofar as required for contract execution for delivery and payment purposes, the personal data collected by us will be passed on to the commissioned transport company in accordance with Art. 6 para. 1 lit. b GDPR. If the disclosure of personal data to the respective payment provider is necessary for the conclusion of the contract, this data will be passed on to the responsible payment provider. We will then inform you about the payment providers offered within the framework of contract processing.
Use of payment service providers
PayPal
When paying via PayPal, your payment data will be passed on to PayPal (Europe) Sarl et Cie, SCA, 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal") as part of the payment processing. The transfer takes place in accordance with Art. 6 para. 1 lit. b GDPR and only insofar as this is necessary for payment processing.
PayPal reserves the right to carry out a credit check for the payment methods credit card via PayPal, direct debit via PayPal or - if offered - "purchase on account" or "installment payment" via PayPal. For this purpose, your payment data will be passed on to credit agencies in accordance with Art. 6 para. 1 lit. f GDPR on the basis of PayPal's legitimate interest in determining your creditworthiness. This transmission serves to check your identity and creditworthiness in relation to the order you have placed. Which credit agencies are involved and what data is generally collected, processed, stored and transmitted by PayPal can be found in PayPal's privacy policy at https://www.paypal.com/de/webapps/mpp/ua/privacy-full
You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for contractual payment processing.
Apple Pay
If you choose the "Apple Pay" payment method from Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland, payment processing will take place via the "Apple Pay" function of your iOS, watchOS or macOS device by debiting a payment card stored in "Apple Pay". Apple Pay uses security features integrated into your device's hardware and software to protect your transactions. To approve a payment, you must also enter a previously set code and verify it using your device's "Face ID" or "Touch ID" function.
For the purpose of payment processing, the information about your order communicated during the order process is first transmitted to Apple in encrypted form. Apple encrypts this data again with a developer-specific key before the data is transmitted to the payment service provider of the payment card stored in Apple Pay for payment processing. The encryption ensures that only the website through which the purchase was made can access the payment data. After the payment has been made, Apple sends your device account number and a transaction-specific, dynamic security code to the originating website to confirm successful payment.
If personal data is processed during the described transmissions, the processing takes place exclusively for the purpose of payment processing in accordance with Art. 6 para. 1 lit. b GDPR. 6 para. 1 lit. b GDPR.
Apple stores anonymized transaction data, including the approximate purchase amount, the approximate date and time, and whether the transaction was successfully completed. Anonymization completely excludes any personal reference. Apple uses the anonymized data to improve "Apple Pay" and other Apple products and services.
If you use Apple Pay on your iPhone or Apple Watch to complete a purchase you made via Safari on your Mac, the Mac and the authorization device communicate over an encrypted channel on Apple's servers. Apple does not process or store any of this information in a format that can identify you. You can disable the ability to use Apple Pay on your Mac in your iPhone settings. Go to "Wallet & Apple Pay" and disable "Allow Payments on Mac."
Further information on data protection at Apple Pay can be found at the following Internet address: https://support.apple.com/de-de/HT203027
Google Pay
If you choose the payment method "Google Pay" from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), payment processing takes place via the "Google Pay" application on your mobile device running at least Android 5.0 ("Lollipop") and equipped with an NFC function, by debiting a payment card stored with Google Pay or a payment system verified there (e.g. PayPal). To authorize a payment via Google Pay of more than €25, you must first unlock your mobile device using the verification method set up (e.g. facial recognition, password, fingerprint or pattern).
For the purpose of payment processing, the information about your order provided during the ordering process is first transmitted to Google. Google then transmits your payment information stored in Google Pay in the form of a uniquely assigned transaction number to the originating website, which verifies that a payment has been made. This transaction number does not contain any information about the real payment data of your payment method stored with Google Pay, but is created and transmitted as a uniquely valid numerical token. In all transactions via Google Pay, Google acts only as an intermediary for processing the payment. The transaction is carried out exclusively between the user and the originating website by debiting the payment method stored with Google Pay.
If personal data is processed during the described transmissions, the processing takes place exclusively for the purpose of payment processing in accordance with Art. 6 para. 1 lit. b GDPR. 6 para. 1 lit. b GDPR.
Google reserves the right to collect, store and evaluate certain transaction-specific information for every transaction made via Google Pay. This includes the date, time and amount of the transaction, merchant location and description, a description of the goods or services purchased provided by the merchant, photos you have attached to the transaction, the name and email address of the seller and buyer or sender and recipient, the payment method used, your description for the reason for the transaction and, if applicable, the offer associated with the transaction.
According to Google, this processing takes place exclusively in accordance with Art. 6 para. 1 lit. f GDPR on the basis of the legitimate interest in proper accounting, the verification of transaction data and the optimization and maintenance of the Google Pay service.
Google also reserves the right to combine the processed transaction data with other information collected and stored by Google when using other Google services.
The Google Pay terms of use can be found here:
https://payments.google.com/payments/apis-secure/u/0/get_legal_document?ldo=0&ldt=googlepaytos&ldl=de
Further information on data protection at Google Pay can be found at the following internet address:
https://payments.google.com/payments/apis-secure/u/0/get_legal_document?ldo=0&ldt=privacynotice&ldl=de
Stripe (credit card payment)
If you choose a payment method from the payment service provider Stripe, payment processing is carried out by the payment service provider Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland, to whom we transfer your information provided during the ordering process, together with information about your order (name, address, account number, bank code, possibly credit card number, invoice amount, currency and transaction number) in accordance with Art. 6 para. 1 lit. b GDPR. Further information on Stripe's data protection can be found at the URL https://stripe.com/at/privacy#translation .
Stripe reserves the right to carry out a credit check based on mathematical-statistical procedures in order to safeguard its legitimate interest in determining the user's solvency. Stripe may transmit the personal data necessary for a credit check and obtained during payment processing to selected credit agencies, which Stripe will disclose to users upon request. The credit report may contain probability values (so-called score values). Insofar as score values are included in the result of the credit report, these are based on a scientifically recognized mathematical-statistical procedure. The calculation of the score values includes, among other things, but not exclusively, address data. Stripe uses the result of the credit check regarding the statistical probability of payment default for the purpose of deciding on the eligibility to use the chosen payment method.
You can object to this processing of your data at any time by sending a message to Stripe or the commissioned credit agencies.
However, Stripe may remain entitled to continue processing your personal data if this is necessary for contractual payment processing.
6. Web analysis services
Our website uses the analysis plugin WP Statistics from Veronalabs (5460 W Main St, Verona, NY 13478, United States). With this plugin, we receive simple statistics about the use of our website.
What is WP Statistics?
This plugin is analysis software specifically developed for websites using the WordPress content management system. WP Statistics does not set any cookies and you cannot be identified as a person by the data collected.
Why is WP Statistics used on our website?
With the help of WP Statistics, we receive simple statistics to improve our website. We want to adapt our website and the products offered on it as well as possible to your needs and wishes, and the statistics received should help us with this.
What data is stored by WP Statistics?
WP Statistics does not set any cookies, and the data collected is only used to create anonymized statistics on the use of our website. WP Statistics also anonymizes your IP address so that you cannot be identified as a person.
WP Statistics collects visitor data when your web browser connects to our web server. This data is stored in our database on our server, e.g.:
- Browser type and version
- Operating system used
- Date and time of access
- Website from which you visit us (referrer URL)
- User browser
- Operating system used
- IP address used (possibly anonymized)
- Country/city information
- Number of visitors coming from a search engine
- Duration of stay on the website
- Clicks on the website
The data will not be passed on.
How long and where is the data stored?
All data is stored on our web hosting provider's server and is stored until it is no longer required for the purposes mentioned above.
How can I delete my data or prevent data storage?
You have the right to information, rectification or erasure, and restriction of processing of your personal data at any time. You can also withdraw your consent to data processing at any time.
More about WP Analytics' privacy policy can be found at https://wp-statistics.com/privacy-and-policy/ .
7. Tools
Cookie consent tool
This website uses the Cookie Consent Tool Complianz BV,
Kalmarweg 14-5, 9723 JG (NL)
The "Cookie Consent Tool" is displayed to users as an interactive interface when they access the page, allowing them to give consent for certain cookies and/or cookie-based applications. By using the tool, all cookies/services requiring consent are only loaded if the respective user has given corresponding consent. This ensures that such cookies are only placed on the user's device if consent has been given.
The tool sets technically necessary cookies to save your cookie preferences. Personal user data is generally not processed here.
In individual cases, if personal data (such as the IP address) is processed for the purpose of storing, assigning or logging cookie settings, this is done in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in legally compliant, user-specific and user-friendly consent management for cookies and thus a legally compliant design of our website.
Further legal bases for the processing are also Art. 6 para. 1 lit. c GDPR. As the controller, we are subject to the legal obligation to make the use of technically non-essential cookies dependent on the respective user's consent.
Further information on the operator and the setting options of the Cookie Consent Tool can be found directly in the corresponding user interface on our website.
8. Rights of the data subject
The applicable data protection law grants you the following data subject rights (rights to information and intervention) vis-à-vis the controller with regard to the processing of your personal data, for which the stated legal basis is referred to for the respective exercise conditions:
- Right to information in accordance with Art. 15 GDPR;
- Right to notification in accordance with Art. 16 GDPR;
- Right to erasure in accordance with Art. 17 GDPR;
- Right to restriction of processing in accordance with Art. 18 GDPR;
- Right to information in accordance with Art. 19 GDPR;
- Right to data portability in accordance with Art. 20 GDPR;
- Right to withdraw consent given in accordance with Art. 7 para. 3 GDPR;
- Right to lodge a complaint in accordance with Art. 77 GDPR.
RIGHT TO OBJECT
IF WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST WITHIN THE FRAMEWORK OF A BALANCING OF INTERESTS, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION WITH EFFECT FOR THE FUTURE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE AFFECTED DATA. HOWEVER, FURTHER PROCESSING REMAINS RESERVED IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES THE ASSERTION, EXERCISE OR DEFENSE OF LEGAL CLAIMS.
IF YOUR PERSONAL DATA IS PROCESSED BY US FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH ADVERTISING. YOU CAN EXERCISE THE OBJECTION AS DESCRIBED ABOVE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE AFFECTED DATA FOR DIRECT MARKETING PURPOSES.
9. Duration of personal data storage
The duration of personal data storage is based on the respective legal basis, the purpose of processing and – if applicable – additionally on the respective statutory retention period (e.g. commercial and tax law retention periods).
When personal data is processed on the basis of explicit consent in accordance with Art. 6 (1) (a) GDPR, this data is stored until the data subject withdraws their consent.
There are statutory retention periods for data that is processed within the scope of legal or quasi-legal obligations on the basis of Art. 6 (1) (b) GDPR. This data is routinely deleted after the retention periods have expired, provided that it is no longer required for the fulfillment or initiation of a contract and/or we do not have a legitimate interest in further storage.
When personal data is processed on the basis of Art. 6 (1) (f) GDPR, this data is stored until the data subject exercises their right to object under Art. 21 (1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or the processing serves the establishment, exercise or defense of legal claims.
When personal data is processed for direct marketing purposes on the basis of Art. 6 (1) (f) GDPR, this data is stored until the data subject exercises their right to object under Art. 21 (2) GDPR.
Unless otherwise stated in the other information in this declaration on specific processing situations, stored personal data will otherwise be deleted when they are no longer necessary for the purposes for which they were collected or otherwise processed.
