Privacy Policy
Please note: This is an English translation of our German Privacy Policy, provided for your convenience only. Only the German version is legally binding. In case of doubt or discrepancies, please refer to the German version.
As of: 25 August 2022
PRIVACY POLICY
OF
SANDICCA GmbH
WHAT YOU CAN EXPECT FROM READING THIS PRIVACY POLICY
At SANDICCA, everything revolves around your well-being. Against the backdrop of the Joglland mountain region in eastern Styria, we have set ourselves the goal of offering unique products for internal and external use made from organic Styrian sea buckthorn. SANDICCA is therefore the first company in Austria to specialise in cultivating and processing organic sea buckthorn.
High quality and excellent performance are very important to us, and looking after our customers is our top priority. Protecting your privacy when using our websites is therefore particularly important to us. All data is collected, processed and used exclusively on the basis of the applicable statutory provisions (GDPR, DSG, TKG, BAO, PHG), in each case as amended.
This privacy policy explains which personal data we collect from you on our website and its subpages, as well as in connection with events or via response forms in our mailings, why we collect it and how we subsequently handle it. It also explains which rights you have and how you can contact us in case of questions or concerns.
DATA PROTECTION – WHAT YOU SHOULD KNOW WHEN USING OUR WEBSITE
1 | WHO WE ARE AND TO WHICH AREAS THIS PRIVACY POLICY APPLIES
Who we are: The controller within the meaning of the GDPR (General Data Protection Regulation) is SANDICCA GmbH (FN 554335 z), Sommersgut 55, 8254 Wenigzell. Every reference to “SANDICCA”, “we”, “our” or “us” in this privacy policy refers to SANDICCA GmbH.
What this privacy policy applies to: This privacy policy applies when using our website www.sandicca.com and the related subpages listed below, as well as the areas and channels described above through which we may collect data from you. The following privacy policy forms part of every contract between SANDICCA GmbH, represented by its managing director Ms. Ing. Tanja Kroisleitner, and the customer.
2 | HOW AND WHICH DATA WE COLLECT AND PROCESS FROM YOU
Our website primarily serves as an information portal for a better understanding of the SANDICCA products and services we offer. In addition, we also provide functions for purchasing goods and services and for collecting data about you when you would like to receive information from us or register for the SANDICCA sales programme “SANDICCA Weg”, events or appointments.
The website can generally be used without registration and without disclosing personal data. Only the information communicated by users’ internet providers is collected. This is the IP address assigned to the user.
In addition, only personal data that you enter explicitly and voluntarily is collected. Such entry may occur, for example, when you register on the website: You will be asked about your personal circumstances and will have the opportunity on the website to enter the data required for communication between SANDICCA and you. This includes your name, gender, address and email address, telephone number (mobile/landline), date of birth, bank details and company name (if you are not a consumer). We may also receive information from you through other online media, for example through your comments on our website or on social media. Whenever the website is used, the IP address, time of use and geodata are also stored. SANDICCA uses such information exclusively for the relevant purpose and in compliance with the applicable statutory provisions; any further use takes place only with your express consent. You may object to the use of your data at any time. See “User rights” below.
How we collect data on our websites and through the channels mentioned under section 1:
– When you visit or use our website, personal data is automatically collected technically through cookies in order to optimise your website experience (for example, our websites enable the screen size to be automatically adjusted to the device you use to navigate the website). This data also supports our website analyses. You will find more information about cookies at the end of this document;
– When you correspond with us by entering information in online forms or data fields on our website, for example to request or use our SANDICCA products and services;
– When you take part in a competition organised by us;
– When you access the personalised website area and use our website to communicate with us as a platform for requesting information or other information;
– When you contact us via the shop area offered on our website and purchase products or services;
CONSENT DECLARATION: You expressly consent to SANDICCA processing the personal data specified in the preceding paragraph for the purpose of providing access to the services covered by the contract (use of the website www.sandicca.com and, in particular, the online shop for purchasing SANDICCA products), communicating with you (in particular sending newsletters) and analysing usage behaviour.
However, you may revoke your consent under data protection law at any time without stating reasons by submitting a written declaration to SANDICCA (office@sandicca.com or: SANDICCA GmbH, Sommersgut 55, A-8254 Wenigzell), whereby the further use of the data by SANDICCA for purposes other than those necessary for contractual fulfilment becomes inadmissible.
3 | TO WHOM WE TRANSMIT YOUR DATA
Your personal data is disclosed to the following recipients:
– To third parties who need to process it so that we can provide the products and services you have registered for or requested, for example payment providers, delivery service providers, marketing and advertising support services and optimised website services;
– To third parties insofar as this is necessary to process contracts relating to the SANDICCA sales system “SANDICCA WEG” and to offer our services in the best possible way. Data is disclosed to our independent sales partners (SANDICCA Wegbereiterinnen) in accordance with our privacy provisions.
– If we are required to disclose or transmit your personal data in order to comply with legal or official obligations or requests, enforce these terms or investigate actual or suspected violations;
Our safeguards with our service providers are intended to ensure that your data is protected and used in accordance with the purposes set out in this privacy policy.
Further information about suppliers and service providers
We use several service providers to support our business. These service providers may have access to our systems and data in order to provide services for us and on our behalf, for example payment processors, IT service providers, providers of marketing and digital advertising services, customer services, service and systems specialists, website analytics providers and providers of shipping and delivery services for orders placed in our online shop.
Cross-border transfer of your data:
SANDICCA stores your data on servers hosted in the EU. Nevertheless, we may transfer the personal data collected through our websites to suppliers, service providers or members of our group of companies outside the EU if this is necessary for the purposes described above. In this case, we apply additional data protection mechanisms for the transfers. These include an assessment of the adequacy of the country in question, where applicable the conclusion of the standard contractual clauses approved by the European Commission and, where applicable, an assessment of the Privacy Shield standards for companies based in the USA.
4 | HOW LONG WE STORE YOUR DATA
We store your data in identifiable form only for as long as necessary to fulfil the processing purposes stated in the privacy policy and to comply with our legal and official obligations. This means that your data is stored until one of the following applies:
– Your data is required to provide the services you have requested;
– Your data is required to safeguard our rights;
– The storage of your data is required by the applicable laws and regulations (e.g. statutory retention and documentation obligations under UGB and BAO, limitation periods under ABGB);
– If you have given us consent to provide care and support, until you revoke the consent given;
5| USE OF COOKIES
To make the website easier for users to use, we use “cookies” in accordance with EU and Austrian law (Art 5 para. 3 E-Privacy Directive and section 96 para. 3 TKG 2003). These are small text files that your browser stores on your computer’s hard drive while you visit our website. The services can also be used without cookies, but their functionality may be limited as a result.
When cookies containing personal data are used, we obtain your active consent in advance via the cookie banner.
To prevent advertising providers from setting cookies, you can also block third-party cookies in your browser. In Apple Safari, third-party cookies are blocked by default.
SANDICCA informs you about the use and setting of cookies by means of a cookie banner. You consent to cookies being set if, after receiving information via our cookie banner, you agree and continue navigating the website.
Via a link in the cookie banner, you have the option of obtaining further information about the individual cookies. You can block individual or all cookies via your browser settings.
6| GOOGLE ANALYTICS
This website uses the “Google Analytics” service, which is offered by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, for the purpose of analysing website use by users. The service uses “cookies” (= text files stored on your device that enable analysis of your use of this website). The information generated by the cookie about your use of the website is transmitted to and stored on a Google server in the USA. SANDICCA uses IP anonymisation; therefore, Google truncates your IP address within Member States of the European Union or in other contracting states of the Agreement on the European Economic Area. Google uses the information to evaluate your use of the SANDICCA website, compile reports on website activity and provide SANDICCA with other services related to website and internet use. The anonymised IP address transmitted by your browser as part of Google Analytics is not merged with other Google data in order to establish a link to an individual.
You can prevent cookies from being stored by selecting the appropriate setting in your browser software; however, please note that in this case you may not be able to use all functions of the websites to their full extent.
You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your anonymised IP address), and from processing this data, by downloading and installing the browser plugin available at the following link – http://tools.google.com/dlpage/gaoptout?hl=de.
The legal basis for using Google Analytics is SANDICCA’s legitimate interest pursuant to Art 6 para. 1 lit. f GDPR. The analysis of website use and statistical evaluation are carried out to further improve the website offering and make it more user-friendly.
This data is forwarded to Google for the purposes stated.
7| FACEBOOK
When you visit our Facebook fan page (https://www.facebook.com/sandicca/), your personal data is processed, regardless of whether you are registered or logged in to Facebook. Fan pages are user accounts that can be set up on Facebook and enable operators to present their company or organisation to visitors to the fan page and communicate with them.
Facebook provides fan page operators with statistical data through the “Facebook Insights” function, particularly regarding “Likes”, page views, reach and the success of individual types of posts. Receiving such information is important so that we can design our online content for specific target groups and is therefore in our “legitimate interest” within the meaning of Article 6 para. 1f GDPR. These evaluations by Facebook are carried out exclusively in anonymised form.
Facebook collects the data underlying these statistics using cookies. Although fan page operators do not have access to the personal data stored in the cookies, the European Court of Justice considers Facebook and the fan page operator jointly responsible for processing this data within the meaning of Article 26 GDPR (see judgment of 5 June 2018, case number C-201/16). The agreement between the joint controllers that this makes necessary is provided by Facebook Ireland (https://www.facebook.com/legal/terms/page_controller_addendum)
The cookies set by Facebook are stored for up to two years after they are set or updated. Cookies already stored can be deleted at any time. You can also prevent cookies from being installed by selecting the appropriate setting in your browser.
8| FACEBOOK PIXEL
Our website uses “Facebook Pixels” from the social network Facebook. This enables Facebook to identify visitors to our offering as a target group for displaying advertisements and Facebook ads. We use the Facebook Pixel to display our Facebook ads only to Facebook users who have also shown an interest in SANDCICA. We can also measure the effectiveness of Facebook ads for statistical and market research purposes by seeing whether users were redirected to our website after clicking on a Facebook ad.
The Facebook Pixel is integrated directly by Facebook when our websites are accessed and can store a cookie on your device. If you then log in to Facebook or visit Facebook while logged in, the visit to our offering is noted in your profile. The data collected about you is anonymous to us, so it does not allow us to draw conclusions about your identity. The data is stored and processed by Facebook, making it possible to link it to the respective user profile. Facebook processes the data in accordance with Facebook’s data policy. Accordingly, you can find further information about how the remarketing pixel works and about the display of Facebook ads generally in Facebook’s data policy: https://www.facebook.com/policy.php.
The Facebook Pixel is only set after you consent in the cookie banner or in the cookie settings. You can allow or deactivate this at any time in our cookie settings.
You can object to collection by the Facebook Pixel and the use of your data to display Facebook ads. To do so, you can visit the page set up by Facebook and follow the instructions there regarding the settings for interest-based advertising: https://www.facebook.com/settings?tab=ads or declare your objection via http://www.youronlinechoices.com/.
9| YOUTUBE
The SANDCICA website contains YouTube videos. YouTube is a video portal operated by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. When you access a page on our website that contains an embedded YouTube video, your browser automatically connects to YouTube or Google servers, with Google being YouTube’s parent company. Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is responsible for all data processing in Europe.
As soon as you visit the SANDICCA website containing a YouTube video, YouTube sets at least one cookie that stores your IP address and our URL. If you are logged in to your YouTube account, YouTube can usually assign your interactions on our website to your profile using cookies. This includes data such as session duration, bounce rate, approximate location, technical information such as browser type, screen resolution or your internet provider. Further data may include contact details, ratings, sharing content via social media or adding content to your YouTube favourites.
The data that YouTube receives and processes from you is stored on Google servers. Most of these servers are located in America. At https://www.google.com/about/datacenters/inside/locations/?hl=de you can see exactly where the Google data centres are located. Your data is distributed across the servers. This makes the data quicker to retrieve and better protected against manipulation.
Google stores the collected data for different lengths of time. You can delete some data at any time, other data is automatically deleted after a limited period, and still other data is stored by Google for longer periods. Some data (such as items from “My Activity”, photos or documents, and products) stored in your Google account remains stored until you delete it. Even if you are not signed in to a Google account, you can delete some data linked to your device, browser or app.
If you would like to learn more about how your data is handled, we recommend reading the privacy policy at https://policies.google.com/privacy?hl=de.
10| EKOMI
We use eKomi to collect and display customer reviews. This is a service provided by eKomi Ltd., Markgrafenstr. 11, 10969 Berlin, hereinafter referred to only as “eKomi”.
When you access our reviews, eKomi stores a cookie on your device via your internet browser. This cookie is deleted as soon as you close your internet browser again. eKomi also processes your IP address in order to display the reviews.
If you do not agree to this processing, you can prevent cookies from being installed by selecting the appropriate settings in your internet browser.
The legal basis is Art. 6 para. 1 lit. f) GDPR. Our legitimate interest lies in improving our marketing.
To collect a review, you will receive an email from eKomi after your order has been processed, asking you to submit a review. To trigger this request, we transmit certain order data, such as your name, email address, order number or item number, to eKomi. If you submit a review, your review will be published both on our website and on the eKomi website.
The legal basis is Art. 6 para. 1 lit. a) GDPR. You may revoke your consent at any time pursuant to Art. 7 para. 3 GDPR by notifying us, with effect for the future.
At http://www.ekomi.de/de/datenschutz/, eKomi provides further information about the collection and use of data, as well as your rights and options for protecting your privacy.
11| NEWSLETTER
It is particularly important to us to keep you continuously informed about selected current products and topics relating to the SANDICCA sea buckthorn gardens. We are happy to send you information about new products and invitations to our events at regular intervals.
The email address you provided during the contractual relationship and the personal data provided when registering to receive the newsletter (email address, salutation and name) are processed for the purposes of sending or communicating information about current product innovations, offers, publications and press releases by email and, if you have voluntarily provided us with your address and telephone number, where applicable by post or telephone, as well as evaluating the email recipient’s click behaviour to optimise the editorial offering using web analytics.
SANDICCA’s processing of your personal data is based either on the consent you have given (Art 6 para. 1 lit. a GDPR) or on our legitimate interest (Art 6 para. 1 lit. d GDPR, section 107 TKG 2003). If you have not consented to receiving our newsletter, you will only receive a newsletter from us if you have not objected. You will be informed separately about the option to object to receiving our newsletter. The provision of services within the existing contractual relationship is independent of your consent or objection.
The legal basis for processing the evaluation of the email recipient’s click behaviour to optimise the editorial offering using web analytics is SANDICCA’s legitimate interest pursuant to Art 6 para. 1 lit. f GDPR. The evaluation is carried out to further improve the offering within our newsletter and to make our newsletter appropriately attractive and informative for our recipients.
The data processed for the stated purposes is generally stored until you revoke your consent or object to receiving the newsletter. In addition, only the data that is absolutely necessary is stored on the basis of the applicable statutory provisions or retention obligations for the purpose of proving your consent or revocation.
You can revoke your consent to receive the newsletter at any time by emailing office@sandicca.com. You can also unsubscribe from the newsletter at any time by clicking the “Unsubscribe from newsletter” button at the end of each newsletter. Revoking your consent does not affect the lawfulness of processing carried out on the basis of your consent up to the revocation.
We use Mailchimp from The Rocket Science Group, LLC, 675 Ponce de Leon Ave NE Suite 5000, Atlanta, GA 30308 USA (Mailchimp) to send our newsletter. This enables us to contact subscribers directly. We also analyse usage behaviour in order to optimise our offering.
For this purpose, we transmit the following personal data to Mailchimp:
Email address
First name
Last name
Gender
Mailchimp is the recipient of your personal data and acts as our processor insofar as this concerns sending our newsletter. Processing of the data specified in this section is neither legally nor contractually required. Without your consent and the transfer of your personal data, we cannot send you a newsletter.
Mailchimp also collects the following personal data using cookies and other tracking methods: information about your device (IP address, device information, operating system, browser ID, information about the application you use to read your emails and other information about hardware and internet connection). In addition, usage data is collected, such as the date and time when you opened the email/campaign and browser activities (e.g. which emails/websites were opened). Mailchimp requires this data to ensure the security and reliability of its systems, compliance with the terms of use and prevention of misuse. This corresponds to Mailchimp’s legitimate interest (pursuant to Art. 6 para. 1 lit. f GDPR) and serves to perform the contract (pursuant to Art. 6 para. 1 lit. b GDPR). Mailchimp also evaluates performance data, such as email delivery statistics and other communication data. This information is used to create usage and performance statistics for the services.
Mailchimp also collects information about you from other sources. Over an unspecified period and to an unspecified extent, personal data is collected via social media and other third-party data providers. We have no influence over this process.
Further information about options for objecting to and removing data held by Mailchimp can be found at: https://mailchimp.com/legal/privacy/#3._Privacy_for_Contacts
The legal basis for this processing is your consent pursuant to Art. 6 para. 1 lit. a GDPR. You may revoke your consent to the processing of your personal data at any time. A corresponding link is included in every mailing. Revocation can also be made via the contact details provided. Revoking your consent does not affect the lawfulness of processing carried out previously.
Your data is processed for as long as the relevant consent exists. Apart from this, it is deleted after the contract between us and Mailchimp ends, unless statutory requirements necessitate further storage.
Mailchimp has implemented compliance measures for international data transfers. These apply to all global activities involving the processing of personal data of individuals in the EU. These measures are based on the EU Standard Contractual Clauses (SCCs). Further information can be found at: https://mailchimp.com/legal/data-processing-addendum/
12| KLARNA
We offer the option of processing payments via the Sofortüberweisung service of the payment provider Klarna GmbH, Theresienhöhe 12, 80339 Munich, Germany (Klarna). This corresponds to our legitimate interest in offering an efficient and secure payment method (Art. 6 para. 1 lit. f GDPR). In this context, we transmit the following data to Klarna insofar as this is required for contractual fulfilment (Art. 6 para. 1 lit. b GDPR).
First name
Last name
Transfer amount
We are required to carry out an identity check before making the payment to ensure that the payment is not made by a third party.
In this case, before the actual transfer, your stated name is compared with the name stored in your online banking account and, if the check is successful, the Sofort transfer is then initiated. We have no influence over this process and only receive the result of whether the name check was successful.
Depending on how your bank manages online accounts, different checking steps are necessary: If your bank only accepts transfer orders when there are sufficient funds in the account, Klarna does not perform an account balance check. In all other cases, Klarna checks whether the sum of the account balance and overdraft facility, less unposted transactions, covers the amount to be transferred.
In cases involving an increased risk of misuse, Klarna reserves the right to check whether Sofort transfers made within the last 30 days were successfully executed. No credit checks are carried out on the basis of historical payment data.
The check is carried out either via your bank’s HBCI interface or via your online banking user interface – as if you were logging in yourself. If you manage several accounts, information about accounts not selected is not stored.
Klarna also stores your online banking user identification (login name/account number) as a hash value. PINs and TAN codes are not stored.
We have no influence over this process and only receive the result of whether the payment was carried out or rejected, as well as your account number, bank code, reference, amount and date.
Further information about options for objecting to and removing data held by Klarna can be found at: https://www.sofort.com/payment/wizard/getCmsContent/data_protection/DE/0/de
Klarna stores your name, account number, bank code, reference, date and transfer amount for billing purposes within the statutory retention periods. The basis for this is section 28 para. 1 sentence 1 no. 1 BDSG.
We store your data until payment processing is complete. This also includes the period required for processing refunds, debt collection and fraud prevention.
13| STRIPE
We offer the option of processing payments via the payment provider Stripe, Inc. 510, Townsend St., San Francisco, CA 94103 (Stripe). This corresponds to our legitimate interest in offering an efficient and secure payment method (Art. 6 para. 1 lit. f GDPR). In this context, we transmit the following data to Stripe insofar as this is required for contractual fulfilment (Art. 6 para. 1 lit. b GDPR).
Cardholder’s name
Email address
Customer number
Order number
Bank details
Credit card details
Credit card expiry date
Credit card verification number (CVC)
Date and time of the transaction
Transaction amount
Name of provider
Location
Processing of the data specified in this section is neither legally nor contractually required. Without transferring your personal data, we cannot process a payment via Stripe. You have the option of choosing another payment method.
Stripe assumes a dual role as controller and processor in data processing activities. As controller, Stripe uses the data you provide to fulfil regulatory obligations. This corresponds to Stripe’s legitimate interest (pursuant to Art. 6 para. 1 lit. f GDPR) and serves to perform the contract (pursuant to Art. 6 para. 1 lit. b GDPR). We have no influence over this process.
As processor, Stripe acts to complete transactions within payment networks. Within the processor relationship, Stripe acts exclusively on our instructions and has been contractually obliged, within the meaning of Art. 28 GDPR, to comply with data protection provisions.
Stripe has implemented compliance measures for international data transfers. These apply to all global activities involving Stripe processing personal data of individuals in the EU. These measures are based on the EU Standard Contractual Clauses (SCCs).
Further information about options for objecting to and removing data held by Stripe can be found at: https://stripe.com/privacy-center/legal
We store your data until payment processing is complete. This also includes the period required for processing refunds, debt collection and fraud prevention.
14| PAYPAL
We offer the option of processing payments and commission payments in connection with the “SANDICCA Weg” sales system via the payment provider PayPal (PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg). This corresponds to our legitimate interest in offering an efficient and secure payment method (Art. 6 para. 1 lit. f GDPR). In this context, we transmit the following data to PayPal insofar as this is required for contractual fulfilment (Art. 6 para. 1 lit. b GDPR).
First name
Last name
Address
Email address
Telephone number
Processing of the data specified in this section is neither legally nor contractually required. Without transferring your personal data, we cannot process a payment via PayPal.
For various services, such as payment by direct debit, PayPal carries out a credit report to ensure your willingness and ability to pay. This corresponds to PayPal’s legitimate interest (pursuant to Art. 6 para. 1 lit. f GDPR) and serves to perform the contract (pursuant to Art. 6 para. 1 lit. b GDPR). For this purpose, your data (name, address and date of birth, bank account details) is disclosed to credit agencies. We have no influence over this process and only receive the result of whether the payment was carried out, rejected or is pending review.
Further information about options for objecting to and removing data held by PayPal can be found at: https://www.paypal.com/de/webapps/mpp/ua/privacy-full.
Your data is stored until payment processing is complete. This also includes the period required for processing refunds, debt collection and fraud prevention.
15| HOSTING
If you neither register nor log in as a visitor, we collect the following data in so-called log files, which your browser transmits:
IP address, date and time of the request, time zone difference from Greenwich Mean Time, content of the request, HTTP status code, amount of data transferred, website from which the request originates and information about the browser and operating system.
This is necessary to display our website and ensure its stability and security. This corresponds to our legitimate interest within the meaning of Art. 6 para. 1 sentence 1 lit. f GDPR.
We use the following host to provide our website.
RAIDBOXES GmbH
Hafenstraße 32
48153 Münster
Germany
This provider is the recipient of your personal data and acts as our processor. This corresponds to our legitimate interest within the meaning of Art. 6 para. 1 sentence 1 lit. f GDPR, as we do not have to operate our own server on our premises. The server locations are Germany and the Netherlands.
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. If data is collected to provide the website, this is the case when the respective session ends. If data is stored in log files, this is the case after seven days at the latest. Further storage is possible. In this case, users’ IP addresses are deleted or anonymised so that the accessing client can no longer be identified.
Collecting data to provide the website and storing data in log files is essential for operating the website. Consequently, users have no option to object.
16| WOOCOMMERCE
We have integrated the open-source shop system WooCommerce into our website as an independent plugin. This plugin is based on the content management system WordPress, which is a subsidiary of Automattic Inc. (60 29th Street #343, San Francisco, CA 94110, USA). Through the implemented functions, data is sent to, stored by and processed by Automattic Inc. We inform you which data is processed in this context, how the network uses this data and how you can manage or prevent data storage.
WooCommerce is an online system that has been part of the WordPress directory since 2011 and was developed specifically for WordPress websites. It is a customisable e-commerce platform based on WordPress and has also been integrated into our website as a WordPress plugin.
We use this solution to offer you our physical or digital products and services on our website in the best possible way. The aim is to provide you with simple and easy access to our offering so that you can reach your desired products quickly and conveniently.
Information that you actively enter into a text field in our online shop may be collected and stored by WooCommerce or Automattic. Thus, when you register with us or order a product, Automattic may collect, process and store this data. Automattic may also automatically collect information about you in so-called server log files:
IP address
Browser information
Preset language setting
Date and time of web access
WooCommerce also sets cookies in your browser and uses technologies such as pixel tags to clearly identify you as a user and possibly offer interest-based communication. Unless there is a legal obligation to retain data for a longer period, WooCommerce deletes the data when it is no longer needed for the purposes for which it was stored. For example, server log files containing technical data about your browser and IP address are deleted again after approximately 30 days. Until then, Automattic uses the data to analyse traffic on its own websites (for example, all WordPress sites) and resolve possible problems.
You can manage, delete or deactivate cookies individually in your browser. Please note that deactivated or deleted cookies may negatively affect the functionality of our WooCommerce online shop.
We have a legitimate interest in using WooCommerce to operate our online service. The corresponding legal basis is Art. 6 para. 1 lit. f GDPR (legitimate interests).
As the basis for data processing by recipients based in third countries (outside the EU, Iceland, Liechtenstein and Norway – in particular the USA) or for transferring data there, WooCommerce uses standard contractual clauses approved by the EU Commission (= Art. 46 paras. 2 and 3 GDPR). These clauses oblige WooCommerce to comply with the EU level of data protection when processing relevant data outside the EU as well. These clauses are based on an implementing decision of the EU Commission. You can find the decision and the clauses here https://ec.europa.eu/germany/news/20210604-datentransfers-eu_de.
Further information about the privacy policy and which data is collected by WooCommerce and how can be found at https://automattic.com/privacy/?tid=331629973351.
17| GOOGLE WEB FONTS (LOCAL HOSTING)
This site uses so-called web fonts provided by Google to display fonts consistently. The Google Fonts are installed locally. No connection to Google servers is established.
Further information about Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google’s privacy policy: https://policies.google.com/privacy?hl=de.
18| LINKS
The website contains links to other websites. These references to the websites of other internet participants are provided as a service to meet the accessing party’s further information needs. SANDICCA has no influence over their content. SANDICCA assumes no liability for this content. The respective provider of the linked website is solely responsible for the content and accuracy of the information provided there.
19| USER RIGHTS
Under sections 42 et seq. DSG 2018, you have the right to obtain information about the data processed concerning you and the right to rectification, erasure and revocation. We make every effort to provide the best possible customer service. If you would like to contact us regarding your data protection rights, please contact us and refer to your data protection rights in the subject line. To exercise these rights, please send us a letter to: SANDICCA GmbH, Sommersgut 55, 8254 Wenigzell, Austria.
20 | SECURITY AND CONFIDENTIALITY
Taking into account the state of the art, implementation costs and the nature, scope, circumstances and purposes of processing, as well as the likelihood and severity of the risk to the rights and freedoms of natural persons, SANDICCA implements appropriate technical and organisational measures within the meaning of Art. 32 GDPR to prevent data loss or misuse, in particular data loss caused by unauthorised deletion, system failures, unauthorised modification or disclosure of confidential information.
Please note that we accept no liability for the disclosure of information due to errors in data transmission not caused by or attributable to us and/or unauthorised access by third parties.
21| AMENDMENTS TO THIS PRIVACY POLICY
SANDICCA reserves the right to amend this privacy policy at any time in order to comply with the latest legislation or case law. The current version of the privacy policy is always available online at www.sandicca.com. You can save or print it. SANDICCA recommends that you review the privacy provisions from time to time to stay informed about how SANDICCA protects your data and continuously improves the website content. If SANDICCA makes significant changes to the collection, use and/or disclosure of the personal data you provide, SANDICCA will draw your attention to this by means of a clear and prominent notice on the website. By using the website, you declare your agreement with the conditions of these personal data protection policies.
22| YOUR RIGHTS
As a user of our website, you have the following rights:
- Right of access (Art. 15 GDPR): You have the right to request confirmation from SANDICCA as to whether your personal data is being processed. In addition, you have the right to request further information about the specific processing purposes, categories of personal data, recipients or categories of recipients of personal data, storage period, the existence of a right to erasure or rectification of your personal data or to restriction of processing, the right to object, the existence of a right to lodge a complaint and all available information about the origin of your data.
- Right to rectification (Art. 16 GDPR): You have the right to request that SANDICCA rectify your personal data without undue delay. This right includes the rectification of inaccurate data and the completion of incomplete personal data.
- Right to erasure (Art. 17 GDPR): You have the right to request that SANDICCA erase your personal data without undue delay if the grounds set out in Art. 17 para. 1 lit. a to f GDPR apply (e.g. the purpose for processing no longer exists) and processing your personal data is not necessary.
- Right to restriction of processing (Art. 18 GDPR): In the cases specified in Art. 18 GDPR (e.g. inaccuracy of the personal data processed, unlawfulness of processing, etc.), you also have the right to request that SANDICCA restrict processing.
- Right to data portability (Art. 20 GDPR): You have the right to receive the personal data concerning you that you have provided to SANDICCA in a structured, commonly used format and to request that SANDICCA transmit this data to another controller.
- Right to object (Art. 21 GDPR): You have the right to object at any time to the processing of your personal data processed in connection with this website.
- Withdrawal of consent declarations (Art. 7 GDPR): You may withdraw consent once given to SANDICCA at any time.
- Right to lodge a complaint: You may also lodge a complaint at any time with the
Austrian Data Protection Authority,
Barichgasse 40-42
1030 Vienna
Telephone: +43 1 521 52-25 69
Email: dsb@dsb.gv.at
You may assert your data subject rights – with the exception of the right to lodge a complaint with the Austrian Data Protection Authority – against SANDICCA at the following address:
SANDICCA GmbH
Sommersgut 55
A-8254 Wenigzell
office@sandicca.com
