Source: https://shop.sacher.com/en/t/dsgvo
Timestamp: 2019-04-21 14:05:18+00:00

Document:
Basically, we only collect and use the personal data of our users to the extent necessary to prepare a functional website as well as our contents and services. Personal data of our users is collected and used regularly only with the user’s consent. An exception to this is made in cases where it is not possible to obtain consent in advance for concrete reasons, and the processing of the data is permitted through legal provisions.
Insofar as we obtain the consent of the data subjects for the purpose of processing their personal data, Art. 6(1a) of the EU General Data Protection Regulation (GDPR) applies as the legal basis. When processing personal data that is necessary to perform a contract to which the data subject is party, Art. 6(1b) of the GDPR applies as the legal basis. This also applies to processing activities that are necessary to implement pre-contractual measures.
Insofar as it is necessary to process personal data to fulfill a legal obligation to which our enterprise is subject Art. 6(1c) of the GDPR applies as the legal basis. Should it be necessary to process personal data in order to protect the vital interests of the data subject or of another natural person, Art. 6(1d) of the GDPR applies as the legal basis.
Insofar as it is necessary to process personal data to protect a legitimate interest of our enterprise or of a third party, and if said interest is not overridden by the interests, basic rights and basic freedoms of the data subject, Art. 6(1f) of the GDPR applies as the legal basis.
The personal data of the data subject will be erased or blocked as soon as the purpose of storage ceases to exist. Data can also be stored if this was provided for by European or national legislation in other provisions under European Union law, to which the controller is subject. Data is also blocked or erased if a time-limit for storage prescribed by the aforementioned laws expires, unless it is necessary to continue to store the data for the conclusion or performance of a contract.
The legal basis for the temporary storage of data and the log files is Art. 6(1f) of the GDPR.
These purposes also include our legitimate interest in the processing of the data in accordance with Art. 6(1f) of the GDPR.
The data will be deleted as soon as it is no longer necessary to reach the purpose for which it has been collected. Where data has been collected to provide the website, this applies when the respective session has ended.
If data is stored in log files, this applies after seven days at the latest. Storage beyond this is possible. In this case, the IP addresses of the users are erased or scrambled so that they can no longer be allocated to the calling client.
The collection of data to provide the website and the storage of data in log files is essential to operate the website. Consequently, the user does not have any opportunity to make an objection.
The user data collected in this way is pseudonymized by technical precautions. Therefore, the data can no longer be allocated to the calling user. The data is not collected together with any other personal data of the users.
The legal basis for the processing of personal data by using cookies is Art. 6(1f) of the GDPR.
The purpose of the use of technically required cookies is that of making websites more user-friendly. If cookies are not used, some functions of our website may not be offered. These require the browser to be recognised even after a page change.
User data that is collected through required cookies is not used to create user profiles.
Analysis cookies are used in order to improve the quality of our website and its contents. Through the analysis cookies, we are able to learn how the website is used and are thus able to constantly optimize our website contents.
These purposes also include our legitimate interest in the processing of the personal data in accordance with Art. 6(1f) of the GDPR.
The transfer of flash cookies is not prevented by the browser settings but by changing the flash player setting.
On our website, it is possible to subscribe for a free newsletter. During the registration process for the newsletter, the data is transferred to us from the input screen.
In order to process the data, during the registration process your consent will be obtained and reference will be made to this data policy.
If you purchase goods or services on our website and in so doing provide your e-mail address, this may subsequently be used by us to send a newsletter. In such a case, only direct publicity will be sent through the newsletter for similar goods or services of our own.
In connection with the data processing for sending newsletters, no data will be passed onto third parties. The data will be used exclusively for sending the newsletter.
The legal basis for the processing of data after the user has registered for the newsletter, if the user’s consent has been received, is Art. 6(1a) of the GDPR.
The legal basis for sending the newsletter following the sale of goods or services is Section 7(3) UWG [Gesetz gegen unlauteren Wettbewerb = Law against Unfair Competition].
The collection of other personal data during the registration process services the purpose of preventing any abuse of the services or of the e-mail address used.
The data will be deleted as soon as it is no longer necessary to reach the purpose for which it has been collected. Accordingly, the user’s e-mail address will be stored for as long as the newsletter subscription is active.
Subscription to the newsletter can be terminated by the user concerned at any time. A link is provided for this purpose in each newsletter.
This also makes it possible to revoke consent to the store of the personal data collected during the registration process.
In order to process this data, during the registration process the user’s consent is obtained.
The legal basis for the processing of data, if the user’s consent has been received, is Art. 6(1a) of the GDPR.
If registration serves to fulfill a contract to which the user is party or to implement pre-contractual measures, a further legal basis for the processing of data is Art. 6(1b) of the GDPR.
Registration of the user is necessary in order to have certain contents and services ready on our website.
Registration of the user is necessary in order to fulfill a contract to which the user is party or to implement pre-contractual measures.
The data will be deleted as soon as it is no longer necessary to reach the purpose for which it has been collected.
This applies to the data collected during the registration process if the registration on our website is cancelled or modified.
This applies to any [data collected] during the registration process for the fulfillment of a contract or for the implementation of pre-contractual measures, if the data is no longer necessary for the fulfillment of the contract. Even after the contract has been concluded, it may be necessary to store personal data of the contractual party in order to meet contractual or legal obligations.
As a user, you have the possibility to cancel your registration at any time. You can have the stored data concerning you modified at any time.
If the data is required to fulfill a contract or implement pre-contractual measures, it is only possible to erase the data prematurely if no contractual or legal obligations stand in the way of erasure.
In order to process the data, during the submission process your consent will be obtained and reference will be made to this data policy.
Alternatively, contact can be made using the e-mail address provided. In this case, the user’s data transmitted by e-mail is stored.
No data will be passed onto third parties in this connection. The data will be used exclusively for processing the conversation.
The legal basis for the processing of data that is transmitted via e-mail, is Art. 6(1f) of the GDPR. If the e-mail contact has the purpose of concluding a contract, an additional legal basis for the processing is Art. 6(1b) of the GDPR.
The processing of personal data from the input screen has the sole purpose of allowing us to make the initial contact. In the case that contact is made by e-mail, this also involves the necessary legitimate interest to the processing of data.
Any other personal data that is processed during the submission procedure serves to prevent any abuse of the contact form and to ensure the security of our IT system.
The data will be deleted as soon as it is no longer necessary to reach the purpose for which it has been collected. For personal data taken from the input screen of the contact form and any that has been sent via e-mail, this applies if the respective conversation with the user has ended. The conversation also ends if it can be inferred, from the circumstances, that the situation concerned has been fully resolved.
Any other personal data collected during the submission process will be deleted after a period of seven days at the latest.
The user has the possibility, at any time, to revoke consent for the processing of personal data. If the user contacts us by e-mail, he/she may object to the storage of his/her personal data at any time. In such a case, the conversation cannot be continued.
Revocation must be made by sending an e-mail to privacy@sacher.com.
All personal data that has been stored during the contact process will be deleted in this case.
You can prevent cookies from being stored by appropriately setting your browser software; we must point out, however, that in this case you may not be able to use all functions of this website to their full extent. In addition, you may prevent any data that is generated by the cookie and relates to your use of the website (incl. your IP address) being sent to Goodle, as well as the processing of this data by Google, by downloading and installing the browser add-on under https://tools.google.com/dlpage/gaoptout. Opt-out cookies prevent your data from being collected on future visits to this website. In order to prevent data from being collected by Universal Analytics via other devices, you must carry out the opt-out procedure on all systems used.
There, you can also receive information on how you can block Facebook social plug-ins with your browser.
The legal basis for the processing of the personal data of the user is Art. 6(1f) of the GDPR.
The processing of the personal data of the user allows us to analyze the surfing habits of our users. Thanks to an evaluation of the data obtained, we are able to gather information on the use of the single components of our website. This helps us to constantly improve our website and make it more user-friendly. These purposes also include our legitimate interest in the processing of data in accordance with Art. 6(1f) of the GDPR. Through the anonymization of the IP address, the interest of the user to safeguard his/her personal data is sufficiently taken into account.
The data will be deleted as soon as it is no longer necessary for our recording purposes.
On our website, we offer our users the chance to opt out of the analysis procedure. For this purpose, you must follow the appropriate link. In this way, a further cookie is stored in your system that signals to our system that it must not store the user’s data. If, in the meantime, the user deletes the relevant cookie from the system, he/she must reset the opt-out cookie.
You can demand confirmation from the controller whether your personal data is processed by us.
(8) the existence of an automatic decision making process, including profiling in accordance with Art. 22(1) and (4) of the GDPR and – at least in these cases – significant information on the logic involved as well as the scope and the desired effects of such processing for the data subject.
You have the right to be told if your personal data is transferred to a third country or to an international organzation. In this regard, you can demand to know about the appropriate safeguards in accordance with Art. 46 of the GDPR in connection with such transfer.
You have a right to rectification and/or completion vis-à-vis the controller, if your processed personal data is incorrect or incomplete. The controller must immediately implement the rectification.
(4) if you have submitted an objection to the processing in accordance with Art. 21(1) of the GDPR, and it has not yet been established whether the justified reasons of the controller override your own reasons.
If the processing of your personal data has been restricted, this data – apart from the storage thereof – may only be processed with your consent or for the assertion, exercise or defence of legal claims, or to safeguard the rights of another natural or legal person, or for reasons of an important public interest of the Union or a member State.
If the restriction of processing is restricted in line with the above conditions, you will be informed by the controller before the restriction is lifted.
(1) Your personal data is no longer necessary for the purposes for which it was collected or has otherwise been processed.
(2) You revoke your consent supporting the processing in accordance with Art. 6(1a) or Art. 9(2a) GDPR, and there is no other legal basis for the processing thereof.
(3) In accordance with Art. 21(1) GDPR you submit an objection to the processing and there are no overriding legitimate reasons for the processing to continue or, in accordance with Art. 21(2) GDPR you submit an objection to the processing.
(5) The erasure of your personal data is necessary to fulfill a legal obligation under Union law, or the law of the member States, to which the controller is subject.
(6) Your personal data was cancelled in reference to information society service offered in accordance with Art. 8(1) GDPR.
If the controller has made your personal data publicly available and if he is obligated, in accordance with Art. 17(1) of the GDPR to erase such data, he will take suitable measures, including technical measures, in line with the available technology and the implementation costs, in order to inform the data processors of the personal data that you as a data subject have demanded them to delete all links to this personal data, or copies or reproductions of this personal data.
If you have asserted your right to rectification, erasure or restriction of processing vis the controller, the latter is obligated to inform all recipients to which your personal data has been disclosed about this rectification or erasure of data or the restriction of processing, unless this proves to be impossible or would involve an unreasonable amount of time and money.
You have the right to demand the controller to inform you about these recipients.
(2) the data is processed using automated procedures.
When exercising this right, you also have the right to demand that your personal data is transferred directly from one controller to another controller, provided this is technically feasible. Freedoms and rights of other persons may not be impaired by this.
The right to data portability does not apply to the processing of personal data that is necessary to carry out a task that lies in the public interest or is carried out in the exercise of official authority, that has been transferred to the controller.
You have the right, for reasons deriving from your own personal situation, to submit an objection at any time to the processing of your personal data, based on Art. 6(1e) or (1f) of the GDPR; this also applies to a profiling based on these provisions.
The controller will no longer process your personal data unless he is able to prove compelling legitimate grounds for doing so that override your own interests, rights and freedoms, or if the processing is necessary to assert, exercise or defend legal claims.
If your personal data is processed for the purposes of direct advertising, you have the right to object at any time to the processing of your personal data for the purposes of such advertising; this also applies to profiling if this is connected with such direct advertising.
If you object to the processing for purposes of direct advertising, your personal data will no longer be processed for these purposes.
You have the chance, in connection with the use of information society services – irrespective of Directive 2002/58/EG – to exercise your right of objection using automated procedures in which technical specifications are used.
You have the right to revoke your declaration of consent under the data protection law at any time. By revoking such consent, the lawfulness of the data processing that has been carried out based on such consent up to the time of revocation will be unaffected.
These decisions may not, however, be based on particular categories of personal data in accordance with Art. 9(1) of the GDPR, unless Art. 9(2a) or (2g) of the GDPR applies and appropriate measures have been taken to safeguard rights and freedoms as well as your legitimate interests.
With regard to the cases named in (1) and (3), the controller will take appropriate measures to safeguard the rights and freedoms and your legitimate interests, at least including the right to obtain the intervention of a person on the part of the controller, to represent his own viewpoint and challenge the decision.
Irrespective of any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the member State of your habitual residence, your place of work or the place of the presumable breach, if you are of the opinion that the processing of your personal data breaches the GDPR.
The supervisory authority to which the complaint was submitted will inform the complainant about the status and the results of the complaint, including the possibility to a judicial remedy in accordance with Art. 78 of the GDPR.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 22
 Art. 46
 Art. 21
 Art. 6
 Art. 9
 Art. 21
 Art. 21
 Art. 8
 Art. 17
 Art. 6
 Art. 9
 Art. 9
 Art. 78