Statement on Information Obligations

Privacy policy

——

The protection of your personal data is very important to us. Therefore, we process your data exclusively on the basis of the legal regulations (GDPR, TKG 2003). In this privacy policy we inform you about the most important aspects of data processing within our website.

Data we collect when you visit our website

——

If you visit our website for information purposes only, i.e. without registering or providing any other information, we only collect data transmitted from your browser to our server (so called server log files). If you access our website, we collect the following information that is technically necessary for us to display our website:

•  Date and time of access
•  Amount of data transmitted in bytes
•  Menge der gesendeten Daten in Byte
•  Source/referrer URL from which you accessed our website
•  Browser used
•  Operating system used
•  IP address used (in anonymized form where applicable)

Processing is carried out in accordance with Art. 6 (1) point (f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to check the server log files subsequently if there are any concrete indications of illegal use. The information will be deleted after a period of six months.

Communication with us

——

If you contact us via the contact options offered, your data will be stored to process the request and in case of follow-up questions. Your data will be deleted after a period of six months unless this data is necessary for compliance with a legal obligation to retain such data or part of an existing customer relationship. We will not share this information without your consent.

Data we store when you use our online shop

——

Please note that in order to simplify the purchasing process and for later contract processing, the online shop operator stores the connection owner’s IP data, as well as the buyer’s name, billing and shipping address, phone number, e-mail address, credit card information (where applicable), the type and amount of the products selected, purchase price, date of purchase, order number and order notes using cookies.

We also store the following information for the purpose of contract processing: buyer’s name, billing and shipping address, phone number, e-mail address, credit card information (where applicable), the type and amount of the products selected, purchase price, date of purchase, order number and order notes. The data you provide are necessary to fulfil the contract or implement pre-contractual measures. We cannot conclude the contract with you without these data. Data will not be transmitted to third parties, with the exception of transmitting credit card details to the processing bank institutions/payment service providers for the purpose of debiting the purchase price, to the transport company/shipping company commissioned by us to deliver the goods, and to our tax consultant to fulfil our tax obligations.

If the shopping process is aborted, the data stored by us will be deleted. In the event of a contract being concluded, all data from the contractual relationship will be stored until the expiry of the retention period under tax law (7 years).

The data “name”, “address”, “goods purchased” and “date of purchase” will also be stored until the expiry of product liability (10 years). Data processing is carried out on the basis of the legal provisions of Article 96 Paragraph 3 of the Telecommunications Act (TKG) and Article 6 (1) point (a) (consent) and/or point (b) (necessary for contract fulfilment) of the General Data Protection Regulation (GDPR).

Payment provider

Stripe

——

If you select a payment option via credit card of the payment service provider Stripe, payment will be processed by the payment service provider Stripe Payments Europe Ltd, Block 4, Harcourt Centre, Harcourt Road, Dublin 2, Ireland, to whom we will pass on your information provided during the order process together with the information about your order in accordance with Art. 6 (1) point (b) GDPR. Your data will only be passed on for the purpose of payment processing with the payment service provider Stripe Payments Europe Ltd. For more information about the privacy policy of Stripe visit https://stripe.com/de/legal

Payment provider

SOFORT

——

If you select the “SOFORT” payment method, payment will be processed by the payment service provider SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany (hereinafter “SOFORT”), to whom we will pass on your information provided during the order process together with the information about your order in accordance with Art. 6 (1) point (b) GDPR. SOFORT is part of the Klarna Group (Klarna Bank AB (publ), Sveavägen 46, 11134 Stockholm, Sweden). Your data will only be passed on for the purpose of payment processing with the payment service provider SOFORT and only to the extent necessary. For more information about the privacy policy of SOFORT visit: https://www.klarna.com/sofort/privacy-policy/

Cookies

——

Our website uses so-called cookies. These are small text files that are stored on your device using the browser. They do no harm.

We use cookies to make our offer user-friendly. Some cookies remain stored on your device until you delete them. They allow us to recognize your browser on your next visit.

If you do not want this, you can set your browser to inform you about the setting of cookies and you only allow this on a case-by-case basis.
Disabling cookies may limit the functionality of our website.

Google Analytics

——

Our website uses features of the web analytics service Google Analytics, from Google LLC (“Google”), 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. Google Analytics uses cookies that are stored on your computer and that allow a statistical analysis of the use of the website by you. We have concluded a corresponding data processing contract with Google.

The information generated by the cookie regarding your use of this website (including your IP address) is anonymized prior to being stored on a Google server. This means that this information can no longer be linked to any computer. Only in exceptional cases is the full IP address transmitted to a Google server in the USA where it is shortened. Google will use this information on behalf of the operator of this website to evaluate your use of the website, to compile reports on the website activities and to perform other services associated with website use and Internet use vis-à-vis the website operator. The IP address transmitted by your browser as part of Google Analytics is not combined with other Google data.

Google LLC, based in the USA, is certified for the US European data protection agreement “Privacy Shield”, which guarantees compliance with the data protection level applicable in the EU. More information on how user data is handled within Google Analytics is available in Google’s privacy policy at the following link: https://support.google.com/analytics/answer/6004245?hl=en

You can prevent the use of data on your use of our website which is collected using cookies, and the processing of anonymized data by Google by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en.

Google Maps

——

Our website uses the Google Maps map service via an API. It is operated by Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). Google Maps is a web service to show interactive maps providing visual representations of geographic information. By using this service, you will be provided with our location and information on how to get to us.

Regardless of whether or not you have a Google account or are logged into an account, information about your use of our website (such as your IP address) is transferred to and saved by Google on servers in the USA when you visit a subpage of our website that includes a Google Maps map. If you are logged in to Google when you access a subpage of our website that includes a Google Maps map, your data will be directly assigned to your account. You can prevent Google from associating your information with your profile by logging out of your Google account before you enter the website. Google saves your data as usage profiles and evaluates them. This is regardless of whether you are logged on or not. The legal basis for evaluation is in particular point (f) of Article 6 (1) GDPR. Google has a legitimate interest in displaying personalised advertising, market research and/or the design of its website in line with requirements. You have the right to object to the creation of these user profiles. You must exercise your right to object to Google.

Google LLC, based in the USA, is certified for the US European data protection agreement “Privacy Shield”, which guarantees compliance with the data protection level applicable in the EU.

If you do not agree to your data being transmitted to Google during your use of Google Maps you can disable the Google Maps web service by turning off JavaScript in your browser. Google Maps and the map display on this website can then no longer be used.

You can read Google’s Terms of Service here: http://www.google.de/intl/de/policies/terms/regional.html and Google Maps’ Additional Terms of Service here: https://www.google.com/intl/de_US/help/terms_maps.html
For detailed information about privacy in connection with the use of Google Maps, please visit the Google Privacy Policy website: https://policies.google.com/privacy?hl=en&gl=en

Facebook

——

We use plugins of the social network Facebook from Facebook Inc., 1601 South California Avenue, Palo Alto, CA 94304, USA (“Facebook”) on our website. You can recognise the Facebook plugins from either the Facebook logo or the “Like button”. An overview of the Facebook plugins can be found here: http://developers.facebook.com/docs/plugins/

If you visit our pages, the plugin creates a direct link between your browser and the Facebook server.
Facebook directly transfers the plugin content to your browser which embeds the latter into the website. Accordingly, we have no influence on the data gathered by the plugin and inform you of the following, according to our state of knowledge: The embedded plugins provide Facebook with the information that you have accessed the corresponding page of our website. If you are logged into Facebook, your visit can be assigned to your Facebook account. If you interact with the plugins – for example, by clicking “Like,” or entering a comment – the corresponding information is transmitted from your browser directly to Facebook where it is stored. Even if you are not logged into Facebook, it is possible for the plugins to transmit your IP address to Facebook and for Facebook to store this information. For the information on the purpose and scope of data collection and processing by Facebook, as well as your rights in this respect and setting options for protecting your privacy, please visit Facebook’s privacy policy: https://www.facebook.com/about/privacy/update

If you have a Facebook user account and do not want Facebook to gather data about you through our website and link the data with your user data already stored by Facebook, you must log-off Facebook before visiting our website. You can also block Facebook social plugins by using add-ons for your browser, such as the “Facebook Blocker”.

Instagram

——

Our website uses Instagram. Instagram is a service of Instagram LLC, 1601 Willow Rd, Menlo Park CA 94025, USA. By means of the integrated “Insta“ button on our page, Instagram receives the information that you have accessed the corresponding page of our website. If you are logged into Instagram, Instagram may associate the visit to our site to your Instagram account and link the data. The data transmitted by clicking the “Insta“ button will be stored by Instagram. You can find more information regarding the purpose and scope of data collection, its processing and use, as well as your rights in this respect and settings options for protecting your privacy in the Instagram privacy policy at https://help.instagram.com/155833707900388. To prevent Instagram from associating your visit to our website to your Instagram account, you must log out of your Instagram account before visiting our website.

YouTube

——

We have included YouTube videos in our online offering which are stored on YouTube and directly accessible from our website. These are all included in the “extended privacy mode”, which means that no data about you as a user will be transmitted to YouTube if you are not playing the videos.

Only when you play the videos, user data will be transmitted. We have no influence on this data transfer.

By visiting the website, YouTube receives the information that you have accessed the corresponding subpage of our website. In addition, the data mentioned at the beginning of this declaration will be transmitted. This happens regardless of whether YouTube provides a user account that you are logged in to, or if there is no user account. When you’re logged in to Google, your data will be assigned directly to your account. If you do not wish for your data to be associate with your profile on YouTube, you must log out before activating the button. YouTube stores your data as usage profiles and uses them for advertising, market research and/or custom design of its website. Such an evaluation is done in particular (even for users who are not logged in) to provide appropriate advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles. You must exercise your right to object to Google.

More information on the purpose and scope of the data collection and its processing by YouTube can be found in the privacy policy. You’ll also get more information about your rights and privacy settings here: Google Privacy Policy. Google also processes your personal information in the US and has submitted to the EU-US Privacy Shield.

Vimeo

——

Our website uses provided by the Vimeo video portal. This service is provided by Vimeo LLC, 555 West 18th Street, New York, New York 10011, USA (“Vimeo”). If you visit one of our pages featuring a Vimeo component, your browser will download a representation of the Vimeo component. If you are logged on to your Vimeo account when accessing our website, the data collected by the component informs Vimeo about which of our pages you are visiting and associates this information to your personal Vimeo account. If you click the “play” button, leave comments etc. this information is transmitted to your personal Vimeo user account where it is stored. Furthermore, the information of your visit to our website is passed on to Vimeo regardless of whether or not you click the component/leave comment etc.

To prevent Vimeo from transferring and storing information about you and your behaviour on our website, you must log out of your Vimeo account before visiting our website. For more information, especially on the purpose and extent of data collection and the use of data by Vimeo, please refer to Vimeo’s privacy policy: https://vimeo.com/privacy.

Your rights

——

In principle, you have the rights to access, rectification, erasure, restriction, data portability, withdrawal of consent and objection relating to the digital processing and storing of your personal data. If you believe that the processing of your data violates data protection law or your data protection claims have otherwise been violated in a way, you can complain to the supervisory authority. In Austria, this is the data protection authority.

You can reach us under the following contact details

——

Christopher Schroll GmbH
Vorderstadt 23, 6370 Kitzbühel – Austria

office@schroll.cc  +43 5356 71314