Source: https://www.zensations.at/en/privacy-policy
Timestamp: 2019-04-20 08:32:01+00:00

Document:
Our website uses Google Analytics, a web analytics service provided by Google, Inc. ("Google"). The information generated by the cookie about your use of our website (including your IP address) will be transmitted to and stored by Google on servers in the United States.
We use Google Analytics with activated IP-anonymisation only. That means, the user’s IP address will be shortened by Google inside the member states of the European Union or in other countries that are part of the agreement concerning the European Economic Area. Only in exceptional cases will the IP address be transmitted to a Google server in the USA and shortened there. Google will not associate your IP address with any other data held by Google.
Find more information on the use of data for advertising purposes by Google, settings and opt-out options on Google’s web sites: How Google uses data when you use our partners' sites or apps, Advertising, Manage ad information and Manage ad preferences.
Our concern in the matters of GDPR (legitimate interest) is the improvement of our web offers, products and services. For the privacy of our users is of utmost importance to us, the user data will be kept confidential.
As soon as you subscribed to our newsletter, you will be sent a confirmation email containing a link, where you can confirm your subscription.
Your subscription can be cancelled at any time. Under this link, you are able to unsubscribe from our newsletter. In addition, you find an unsubscribe link in every one of our newsletters.
Subsequently, we will delete all your data related to our newsletter mailings.
We send out our newsletters using “MailChimp”, a newsletter mailing service provider by Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA.
The email addresses of our newsletter recipients as well as other data as explained in this privacy information, are stored on MailChimp servers in the USA. MailChimp uses this information for mailings and evaluation of the newsletter on our behalf. In addition, MailChimp may use these data in order to optimize and improve their own services (technical optimisation of mailings and presentation of newsletters or for scientific purposes, e.g. for evaluation where the recipients come from). However, MailChimp does not use the data of our newsletter subscribers in order to contact them on MailChimp’s own behalf, neither does MailChimp pass on the data to third parties.
In the context of our contractual services for our clients we process personally related data. These are part of the conceptual and strategic consultations, campaign planning, software and design development, consulting or maintainance, implementation of campaigns or processes/handling, server administration, data analysis, consulting services and training services.
Client master data (name, address), contact data (email, phone), content data (text submissions, photos, videos), contractual data (subject of contract, term), usage and meta data (in the scope of evaluation and measure of success in a marketing context). Specific categories of personally related data are generally not processed, unless these are part of an assigned data processing. This affects our clients, interested parties & stakeholders as well as their clients, users, website visitors, staff and third parties. The purpose of data processing is meeting contractual agreements and services. The legal basis of processing data is Art.6(1) lit. b GDPR (contractual services), Art. 6(1) lit. f GDPR (analysis, statistics, optimization, security measures). We process data that are essential for fulfilling contractual agreements, and we refer to the necessity of the information . Data is not disclosed to third parties, unless disclosure is necessary for fulfilling a client’s assignment.
If data is provided by a client in the scope of an assignment, we process the appropriate to the instructions and guidance by our client as well as the legal guidelines for processing of data. We do not process data for other purposes than those according to our client’s assignments.
At the end of the legal warranty period and other comparable obligations, data will be deleted. The necessity for storage of data is audited every 3 years. In case of compulsory archiving, data will be deleted at the end of the legally required period (7 years, 1 month according to §132(1) BAO). In case data has been provided by a client in the scope of an assignment, data is deleted according to the contract, generally after completing the contractual services.
In the context of administrative tasks, organisation, accounting as well as meeting legal obligations (e.g. archiving), we process data. Therefor we process the same data as we do in our contractual services. The legal basis of processing data is Art.6(1) lit. c GDPR, Art. 6(1) lit. f GDPR (analysis, statistics, optimization, security measures). This affects clients, interested parties and stakeholders, business partners and website visitors. Our purpose and interest in this processing of data lies in administration, accounting, office organisation, data archiving, hence tasks, that allow us to continue our business activities, perform our tasks and provide our services. Deleting the data according to contractual services and contractual communication is meeting the specifications in the scope of these processing tasks.
We disclose and provide these data to the fiscal authority, consultants, (e.g. tax consultant), as well as further tollgates and paid service providers.
Furthermore, we save the data of our business partners in order to keep up our operational business interests and for further contacting. By the majority these business related data are generally stored permanently.
Personal related data are only stored as long as necessary or decreed by law and in accordance with avoidance and economy of data. In case the purpose for compiling information is omitted or the limit of the data retention period is reached, data will be deleted.
Pursuant to the specifications of the General Data Protection Regulation entering into form as from May 25th, 2018, we inform you, that the declaration of agreement concerning the submission of email addresses are carried out according to Art. 6(1)(a), 7 DSGVO as well as § 7(2)(3) resp. §7(3) UWG. The use of the mailing service provider MailChimp, implementation of statistic evaluations and analysis as well as logging are carried out based on our legitimate interest in accordance to Art 6(1)(f) GDPR. Our concern is the implementation of a user-friendly and secure newsletter system, that serves our business interests as well as our user’s expectations.
Furthermore, we point out the possibility of disagreeing the processing of personal data according to the legal regulations, Art 21 GDPR. This dissent can particularly declared against processing personal data for direct advertising purposes.

References: Art.6
 Art. 6
 §132
 Art.6
 Art. 6
 Art. 6
 § 7
 §7
 Art 6
 Art 21