Source: https://shop.afpworx.com/shop/en/privacy-policy
Timestamp: 2019-04-19 10:42:12+00:00

Document:
- content data (e.g., text input).
- Meta /communication data (e.g., device information, IP addresses).
Visitors and users of the online offer (hereinafter we also refer to the affected persons as "users").
"Personal Information" is any information that identifies itself to an identified person or identifiable natural person (hereinafter referred to as "affected person"); a natural person is considered as identifiable, which can be identified directly or indirectly, in particular by means of assignment to an identifier such as a name, to an identification number, to location data, to an online identifier (eg cookie) or to one or more special features, are the expression of the physical, physiological, genetic, mental, economic, cultural or social identity of this natural person.
"Responsible" means the natural or legal person, authority, agency or other entity that alone or jointly with others determines the purposes and means of processing personal data.
In accordance with Art. 32 GDPR, we take into account the state of the art, the implementation costs and the type , the scope, circumstances and purposes of the processing, as well as the different likelihood and severity of the risk to the rights and freedoms of natural persons, appropriate technical and organizational measures to ensure a level of protection commensurate with the risk.
In accordance with Art. 17 GDPR, they have the right to demand that the relevant data be deleted without delay, or, alternatively, to require a restriction on the processing of data in accordance with Art. 18 GDPR.
According to legal requirements in Germany, the storage takes place in particular for 10 years according to �� 147 Abs. 1 AO, 257 Abs. 1 Nr. 1 and 4, Abs. 4 HGB (books, records, management reports, accounting documents, trading books, relevant for taxation Documents, etc.) and 6 years in accordance with � 257 (1) no. 2 and 3, para. 4 HGB (commercial letters).
According to legal regulations in Austria the storage takes place especially for 7 years according to � 132 paragraph 1 BAO (accounting documents, receipts /invoices, accounts, receipts, business papers, statement of income and expenses, etc.), for 22 years in connection with real estate and for 10 years in the case of documents related to electronically supplied services, telecommunications, broadcasting and television services provided to non-EU companies in EU Member States for which the Mini-One-Stop-Shop (MOSS) is used.
- contract data (e.g., contract, term, customer category).
We process the data of our customers in the context of the order processes in our Onlineshop, in order to them the selection and the Ordering of selected products and services, as well as their payment and delivery, or to allow execution.
Processing is based on Art. 6 para. 1 lit. b (execution of order transactions) and c (legally required archiving) DSGVO. The information marked as required for the establishment and fulfillment of the contract is required. We disclose the data to third parties only in the context of extradition, payment or in the context of legal permissions and obligations to legal advisors and authorities. The data will only be processed in third countries if this is necessary for the fulfillment of the contract (for example, at the time of delivery or payment).
Users can optionally create a user account, in particular by being able to view their orders. As part of the registration, the necessary mandatory information will be communicated to the users. The user accounts are not public and can not be indexed by search engines. If users have terminated their user account, their data will be deleted with regard to the user account, subject to their retention is for commercial or tax law reasons according to Art. 6 para. 1 lit. c DSGVO necessary. Information in the customer account remains until its deletion with subsequent archiving in case of a legal obligation. It is the responsibility of the users to secure their data upon termination prior to the end of the contract.
We process the data of our contractual partners and interested parties as well as other clients, customers, clients, clients or Contracting party (uniformly referred to as "contracting party") in accordance with Art. 6 para. 1 lit. b. DSGVO in order to provide you with our contractual or pre-contractual services. The data processed, the nature, scope and purpose and necessity of their processing are determined by the underlying contractual relationship.
The data will be deleted if the data is no longer required for the fulfillment of contractual or statutory duties of care and for the handling of any warranty and comparable obligations, whereby the necessity of keeping the data is reviewed every three years; apart from that, the legal storage obligations apply.
In the context of the fulfillment of contracts we set the payment service providers on the basis of Art. 6 para. 1 lit. b. DSGVO. In addition, we use external payment service providers on the basis of our legitimate interests in accordance with. Art. 6 para. 1 lit. b. DSGVO in order to offer our users effective and secure payment options.
For the payment transactions, the terms and conditions and the privacy notices of the respective payment service providers, which are available within the respective websites, or transaction applications apply. We also refer to these for further information and assertion of rights of revocation, information and other rights.
We process data in the context of administrative tasks and organization of our operations, financial accounting and compliance with legal obligations, such as archiving. In doing so, we process the same data that we process in the course of rendering our contractual services. The processing principles are Art. 6 para. 1 lit. c. DSGVO, Art. 6 para. 1 lit. f. DSGVO. The processing affects customers, prospects, business partners and website visitors. The purpose and interest in processing lies in administration, financial accounting, office organization, data archiving, that is, tasks that serve to maintain our business, perform our duties and provide our services. The deletion of the data in terms of contractual services and contractual communications is in line with the information provided in these processing activities.
When contacting us (eg via contact form, e-mail, telephone or via social media), the information provided by the user to process the contact request and its processing acc. Art. 6 para. 1 lit. b) DSGVO processed. User information can be stored in a Customer Relationship Management System ("CRM System") or similar request organization.
The dispatch of the newsletter and the associated performance measurement are based on a consent of the recipients acc. Art. 6 para. 1 lit. a, Art. 7 DSGVO i.V.m � 7 Abs. 2 No. 3 UWG or if consent is not required, based on our legitimate interests in the direct marketing acc. Art. 6 para. 1 lt. F. DSGVO i.V.m. � 7 Abs. 3 UWG.
Termination /Revocation - You may terminate the receipt of our newsletter at any time, ie. Revoke your consent. A link to cancel the newsletter can be found at the end of each newsletter. We may save the submitted email addresses for up to three years based on our legitimate interests before we delete them to provide prior consent. The processing of this data is limited to the purpose of a possible defense against claims. An individual request for cancellation is possible at any time, provided that the former existence of a consent is confirmed.
The email service provider may use the data of the recipients in pseudonymous form, i. without assignment to a user, to optimize or improve their own services, e.g. for the technical optimization of shipping and the presentation of newsletters or for statistical purposes. However, the shipping service provider does not use the data of our newsletter recipients to address them themselves or to pass the data on to third parties.
Logfile information is stored for security purposes (for example, to investigate abusive or fraudulent activities) for a maximum of 7 days and then deleted. Data whose further retention is required for evidential purposes is excluded from the deletion until final clarification of the respective incident.
Google is certified under the Privacy Shield Agreement, which provides a guarantee to comply with European data protection law ( https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active ).
Google will use this information on our behalf to evaluate the use of our online offer by users, to compile reports on the activities within this online offer and to provide us with further services related to the use of this online offer and the internet usage. In doing so, pseudonymous user profiles can be created from the processed data.
The IP address submitted by the user's browser will not be merged with other data provided by Google. Users can prevent the storage of cookies by setting their browser software accordingly; Users may also prevent the collection by Google of the data generated by the cookie and related to their use of the online offer as well as the processing of this data by Google by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl=en or click here.
We use our legitimate interests (ie interest in the analysis, optimization and economic operation of our online offer within the meaning of Art. 6 para. 1 lit., DSGVO) the services of Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA, ("Google").
We use Google's online AdWords marketing tool "AdWords" to place ads on the Google advertising network (e.g., in search results, in videos, on websites, etc.) so that they are displayed to users who have a suspected interest in the ads. This allows us to more specifically display ads for and within our online offering so that we only present ads to users that potentially match their interests. If a user e.g. Showing ads for products he's been looking for on other online offers is called remarketing. For these purposes, upon access to our and other websites where the Google Advertising Network is active, Google will immediately execute a Google code and become so-called (re) marketing tags (invisible graphics or code, also known as ")." Web beacons ") incorporated into the website. With their help, the user is provided with an individual cookie, i. a small file is saved (instead of cookies, comparable technologies can also be used). In this file is noted which web pages the user visited, for what content he is interested and what offers the user has clicked, as well as technical information on the browser and operating system, referring web pages, visit time and other information on the use of the online offer.
The data of the users are pseudonym processed within the Google advertising network. That Google stores and processes e.g. not the name or e-mail address of the users, but processes the relevant data cookie-related within pseudonymous user profiles. That from the perspective of Google, the ads are not managed and displayed to a specifically identified person, but to the cookie owner, regardless of who that cookie owner is. This does not apply if a user has explicitly allowed Google to process the data without this pseudonymization. The information collected about users will be transmitted to Google and stored on Google's servers in the United States.

References: Art. 32
 Art. 17
 Art. 18
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 7
 Art. 6
 Art. 6