Source: https://en.nonos.at/privacy-policy/
Timestamp: 2020-07-10 00:47:09
Document Index: 384525115

Matched Legal Cases: ['Art. 28', 'Art. 44', 'Art. 28', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6']

Privacy Policy | NONOS Gallery
This Data Protection Statement informs you how, to what extent and to what purpose your personal data (hereinafter referred to in abbreviated form as „data“) is processed in connection with our website as well as associated websites, functions, content and external websites such as our social media profiles (hereinafter referred to collectively as our „website“). Terms such as „processing“ and „controller“ are used in accordance with the definitions set out in Article 4 of the General Data Protection Regulation (GDPR).
Owner: Mercedes Welte / Franziska Welte
– Visitors to and users of the website. Data subjects are hereinafter referred to collectively as „users“.
Version: 05 / 2020
1.1. „Personal data“ means any information relating to an identified or identifiable natural person (hereinafter referred to as the „data subject“); a natural person is deemed to be identifiable if they can be identified, whether directly or indirectly, on the basis of an identifier such as a name, an identification number, location data, an online identifier (e.g. a cookie) or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
1.2. „Processing“ means any operation or series of operations performed on personal data either with or without the aid of automated procedures. The term is broad in nature and essentially includes every instance of data handling.
1.3. The „controller“ is the natural or legal person, public authority, agency or other body that holds sole or joint responsibility for determining the purposes and means of the processing of personal data.
5.2. The commissioning of third parties to process data on our behalf on the basis of a so-called „data processing agreement“ occurs in accordance with GDPR Art. 28.
Insofar as we process data in a third country (i.e. a country outside the European Union (EU) or the European Economic Area (EEA)) or data is process in a third country in connection with the use of third-party services or the disclosure or transfer of data to third parties, such processing only occurs if it is a prerequisite for the performance of our (pre)contractual obligations, if you have granted your consent, if we are under a statutory obligation to do so or if it justified on the grounds of our legitimate interests. Subject to statutory or contractual permission, we only process or allow data to be processed in a third country if the prerequisites defined in GDPR Art. 44 ff. are fulfilled. In other words: Processing is dependent on criteria such as special guarantees (e.g. official confirmation of compliance with EU data protection requirements, for example Privacy Shield certification) and adherence to officially approved contractual obligations (so-called „standard contractual clauses“ as defined in GDPR Art. 28(6)).
10.1. The term „cookies“ refers to small files stored on the user’s devices. Cookies can be used to store a variety of data. The primary purpose of a cookie is to store data on a user (or the device on which the cookie is stored) during and/or after their visit to a website. Temporary cookies (also referred to as „session cookies“ or „transient cookies“) are deleted when the user leaves the website and closes their browser. A cookie of this type might be used to store the content of a shopping basket in an online shop or the user’s login status. „Permanent“ or „persistent“ cookies remain stored on the device even after the user has closed their browser. To give an example, this makes it possible for the user’s login status to be stored even if there are a number of days between their visits to the respective site. Such cookies can also be used to store data on user interests for the purposes of reach analysis and marketing activities. „Third-party cookies“ are cookies from providers other than the controller responsible for the respective website (whose cookies are referred to as „first-party cookies“).
12.1. We process our customers‘ data during the placement of orders in our online shop in order to enable them to select, order, pay for and arrange the shipping/performance of the selected products and services.
12.3. Processing is justified under the terms of GDPR Art. 6(1) lit. b (order processing) and GDPR Art. 6(1) lit. c (archiving in accordance with legal obligations). The entries marked as „required“ are essential to the conclusion and performance of the contract. We only disclose data to third parties within the context of shipping, payment and compliance with statutory rights and obligations towards legal advisors and public authorities. Data is only processed in third countries if this is essential to the performance of the contract (e.g. as a result of customer requests regarding shipping and payment).
15.2. The data submitted by the user may be stored in our customer relationship management system („CRM system“) or comparable enquiry handling systems.
16.1. We collect data on every instance of access to the server on which this service is located (so-called „server log files“) in accordance with GDPR Art. 6(1) lit f. Access data includes the name of the website and/or file retrieved, date and time of retrieval, volume of data transferred, confirmation of successful retrieval, browser type and version, user operating system, referrer URL (of the previous website visited), IP address and the provider from which the request came.
17.2 Unless otherwise stated in our Data Protection Statement, we process users‘ data when they communicate with us on social networks and platforms (e.g. by posting on our webpages or sending us messages).
17.2. We use Google Analytics to ensure that advertising placed by advertising services provided by Google and its partners is only displayed to users who have shown an interest in our website or possess specific characteristics communicated to Google by us (e.g. an interest in particular topics or products determined on the basis of the websites they have visited in the past). The resultant user groups are referred to as „Remarketing Audiences“ or „Google Analytics Audiences“. We also use Remarketing Audiences to ensure that our advertising matches users‘ potential interests and does not have an irritating effect.
18.1. Our use of Google Analytics – a web analysis service provided by Google LLC („Google“) – is justified by our legitimate interests under the terms of GDPR Art. 6(1) lit. f (here: our interest in the analysis, optimisation and commercially viable operation of our website). Google uses cookies. As a general rule, cookie-generated data documenting how the user uses our website is sent to and stored on a Google server in the USA.
19.1. Our use of Google’s marketing and remarketing services (hereinafter referred to collectively as „Google marketing services“) provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, hereinafter referred to as „Google“) is justified by our legitimate interests under the terms of GDPR Art. 6(1) lit. f (here: our interest in the analysis, optimisation and commercially viable operation of our website).
19.3. Google marketing services enable us to enhance the targeting of advertising for or on our website and only show users advertising that potentially matches their interests. If, for example, a user is displayed advertising for products they showed an interest in on another website, this is referred to as „remarketing“. To this end, each retrieval of our website and other websites on which Google marketing services are active immediately leads to the running (by Google) of a Google code and the embedding of so-called „(re)marketing tags“ (invisible graphics or code, also referred to as „web beacons“) into our website. These tags enable the storage of a small, unique file known as a „cookie“ on the user’s device; comparable technologies can also be used instead of cookies. Cookies can be stored by a variety of domains including google.com, doubleclick.net, invitemedia.com, admeld.com, googlesyndication.com or googleadservices.com. The data contained in the cookie details the websites the user has visited, the content they have shown an interest in and the offers they have clicked on as well as technical information on their browser and operating system, referral URLs, time of visit and other information on their use of the website. Although the user’s IP address is also logged, it is important to note that IP addresses are abbreviated within EU member countries and EEA treaty states and only sent in full to a Google server in the USA and abbreviated there in exceptional cases. The IP address is not matched to any other user data in connection with other Google services. Google is nevertheless able to match the aforementioned data to similar data from other sources. If the user follows their visit to our website by visiting other websites they may therefore be shown targeted advertising tailored to their interests.
19.4. User data is processed in pseudonymised form within the context of Google marketing services. This means, for example, that Google does not store or process users‘ names or email addresses and instead creates pseudonymised user profiles allocated to specific cookies. This, in turn, means that Google does not manage and display advertising for a specific, identifiable person, but instead for the respective cookie owner regardless of their identity. This does not apply if a user has expressly consented to Google processing their data in unpseudonymised form. The user data collected by Google marketing services is sent to Google and stored on Google’s servers in the USA.
19.5. The Google marketing services we use include the online advertising programme Google AdWords. In this case every AdWords customer receives a different „conversion cookie“. It is therefore not possible for cookies to be traced via the websites of AdWords customers. The data collected with the aid of the cookie is used to compile conversion statistics for AdWords customers who have opted into conversion tracking. AdWords customers receive information on the total number of users who have clicked on their ad and been forwarded to a webpage featuring a conversion tracking tag. They nevertheless receive no information which would render those users personally identifiable.
19.6. The Google marketing service „DoubleClick“ enables us to embed third-party advertising. DoubleClick uses cookies that enable Google and its partner websites to place ads based on a user’s visits to this website or other websites on the internet.
19.7. The Google marketing service „AdSense“ enables us to embed third-party advertising. Adsense uses cookies that enable Google and its partner websites to place ads based on a user’s visits to this website or other websites on the internet.
19.8. We also use the Google Optimize service. Google Optimize enables us to use so-called „A/B testing“ to determine the influence of changes to elements such as entry fields and page design on our website. A/B testing involves the storage of cookies on user devices. Data processing is nevertheless restricted to pseudonymised user data.
27.1 We carry out business transactions and marketing activities using various means of long-distance communication including postal correspondence, telephone calls and electronic mail („email“). This involves the processing of basic data, address and contact data and contractual data on data subjects in the form of customers, participants, interested parties and communication partners.
External sender: The newsletter is sent by CleverReach GmbH & Co. KG, Mühlenstr. 43, 26180 Rastede (hereinafter referred to as the „external sender“). The external sender’s Data Protection Statement is available to view here: https://www.cleverreach.com/de/datenschutz/.
29.1. Our use of third-party services and content is justified by our legitimate interests under the terms of GDPR Art. 6(1) lit. f (here: our interest in the analysis, optimisation and commercially viable operation of our website) and involves the embedding of those third-party services and content, for example videos and fonts (hereinafter referred to as „content“). This always requires the third-party providers of such content to log the user’s IP address, as without the IP address the content cannot be sent to the user’s browser. The IP address is therefore a prerequisite for the display of the respective content. We endeavour to only use content from providers who only use the user’s IP address to deliver content. Third-party providers may also use so-called „pixel tags“ (invisible graphics, also referred to as „web beacons“) for the purpose of statistical evaluation and marketing. Pixel tags can be used to evaluate data on visitor traffic on the webpages that make up this website. The pseudonymised data may also be stored in cookies on the user’s device and contain elements including technical information on the respective browser and operating system, referral URLs, time of visit and other information on the use of our website; they may also be matched to data from other sources.
– Functions provided by the service/platform Twitter (hereinafter „Twitter“) may be embedded in our website. Twitter is operated by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. Functions include the display of content posted by us on Twitter on our website, a link to our Twitter profile and the opportunity to not only interact with Twitter content and functions, but also track whether or not users are successfully redirected to our website by the ads we place on Twitter (so-called „conversion tracking“). The Privacy Shield certification held by Twitter guarantees compliance with European data protection requirements (https://www.privacyshield.gov/participant?id=a2zt0000000TORzAAO&status=Active). Data Protection Statement: https://twitter.com/de/privacy, Opt-Out: https://twitter.com/personalization.