data protection

Responsible for data processing

wise enough
Moosfeldstr. 1
Brandboxx Salzburg
5101 Bergheim / Salzburg
Austria

Phone: +43 (0) 660 496 86 91
Email: office@wiseenough.eu

Tax identification number (UID): ATU76510116

Object of the company: commercial agents
Chamber affiliation: Salzburg Chamber of Commerce
Place of jurisdiction: Salzburg regional court

The protection of your personal data is particularly important to us. We therefore process your data exclusively on the basis of the statutory provisions (GDPR, TKG 2003). In this data protection information we inform you about the most important aspects of data processing within the framework of our website.

You can call up and save or print out the data protection declaration.

If you contact us using the form on the website or by e-mail, the data you provide will be stored with us for six months for the purpose of processing the request and in the event of follow-up questions. We do not pass on this data without your consent.

data storage

Each time our website is accessed, our system automatically saves the name of the requested file, your IP data, date and time of access, amount of data transferred and the requesting provider (access data) in so-called server log files and documents the access.

It is necessary for our system to process the above data so that the functionality and delivery of the website can be guaranteed. We also use this data to optimize our website and secure our information technology systems. The data will not be used for marketing purposes in this context. The legal basis for the processing of this data and the log files is Article 6 Paragraph 1 Letter f GDPR based on our legitimate interest in being able to provide you with a functional and user-friendly website.

The data will be processed and, in particular, stored for as long as is necessary to achieve the aforementioned purpose. If data is required to provide the website, this is no longer necessary when the respective session has ended. Your data will then be automatically deleted. If the data is stored in log files, this is usually the case after fourteen days at the latest. If the aforementioned data is further stored, your IP address will be deleted or alienated in this case, so that it is no longer possible to assign the calling Internet connection. The collection of the data for the provision of the website and the storage of the data in log files is absolutely necessary for the operation of the website.

If we also evaluate user behavior on our website and in a legally permissible manner without express consent, we only use anonymous data, which do not allow any conclusions to be drawn about individual persons, in order to improve the usability of the website and the user experience for our visitors.

We would like to point out that the IP data of the connection owner, as well as the name, address and credit card number of the buyer are stored by the web shop operator in the context of cookies for the purpose of simplifying the purchasing process and for subsequent contract processing.

In addition, for the purpose of contract processing, personal data such as title, name, address, gender, date of birth, email address, telephone number, password are stored with us, which the user enters when registering in the online shop. In the course of online shopping, the order data is also processed, in particular the items ordered, size, prices, billing address, delivery address and payment method. Which additional data is specifically collected and stored can be seen from the respective input forms for registration or the order. When using payment services, the processed data and further information result from point 8 of this data protection declaration.

If you have given your consent to this in accordance with Article 6 Paragraph 1 Letter a GDPR by deciding to open a customer account and to register in the online shop, we will use your data for the purpose of opening a customer account. The data you provide is required to fulfill the contract or to carry out pre-contractual measures. Without this data we cannot conclude the contract with you. There is no data transfer to third parties, with the exception of the transfer of credit card data to the processing bank/payment service provider for the purpose of debiting the purchase price, to the transport company/shipping company commissioned by us to deliver the goods and to our tax consultant to fulfill our tax obligations.

If a contract is concluded or the customer account is deleted, all data from the contractual relationship will be stored until the end of the tax retention period (7 years). The data name, address, purchased goods and date of purchase are also stored until the end of product liability (10 years). The deletion of your customer account is possible at any time and can be done either by sending a message to the contact option described below or using a function provided for this purpose in the customer account.

Data processing takes place on the basis of the legal provisions of § 96 Paragraph 3 TKG and Art 6 Paragraph 1 lit a (consent) and lit b (necessary for the fulfillment of the contract, processing of inquiries) as well as lit f (legitimate interests) of the DSGVO.

Third Party Hosting Services

We use the shop system of the service provider Shopify International Limited, Victoria Buildings, 2nd floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland, company identification number: 560279 ("Shopify"), for the purpose of hosting and displaying the online Shops based on processing on our behalf. All data collected on our website is processed on Shopify's servers. As part of the aforementioned Shopify services, data may also be processed as part of further processing on behalf of Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada, Shopify Data Processing (USA) Inc., Shopify Payments (USA) Inc .or Shopify (USA) Inc. In the event that data is transmitted to Shopify Inc. in Canada, the European Commission’s adequacy decision ensures the appropriate level of data protection. Further information on Shopify's data protection is available on the following website: https://www.shopify.de/legal/datenschutz

Further processing on servers other than those of Shopify mentioned above only takes place within the framework communicated in this data protection declaration

cookies

Web Analysis

Our website uses functions of the web analysis service Google Analytics. Cookies are used for this purpose, which enable an analysis of the use of the website by your users. The information generated in this way is transferred to the provider's server and stored there.

You can prevent this by setting up your browser so that no cookies are saved.

We have concluded a corresponding contract for order data processing with the provider.

Your IP address is recorded but pseudonymised immediately [e.g. by deleting the last 8 bits]. As a result, only a rough localization is possible.

Data processing takes place on the basis of the legal provisions of Section 96 (3) TKG and Art 6 (1) lit a (consent) and f (legitimate interest) of the GDPR. Our concern within the meaning of the GDPR (legitimate interest) is the improvement of our offer and our website. Since the privacy of our users is important to us, user data is pseudonymised.

User data is kept for a period of 30 days.

Newsletter

You have the option of subscribing to our newsletter via our website. For this we need your e-mail address and your declaration that you agree to receive the newsletter.

In order to provide you with targeted information, we also collect and process information voluntarily provided on your birthday, place of residence and telephone number.

As soon as you have registered for the newsletter, we will send you a confirmation e-mail with a link to confirm your registration.

You can cancel your subscription to the newsletter at any time. Please send your cancellation to the following email address: office@wiseenough.eu or unsubscribe via the link in the newsletter. We will then immediately delete your data in connection with the newsletter dispatch. This revocation does not affect the legality of the processing carried out on the basis of the consent up to the time of revocation.

Social Media and Use of Social Plugin

So-called social plugins from social networks such as Facebook or Instagram are used on our website (“plugins”).

If you access a page on our website that contains such a plugin, your browser establishes a direct connection to the Facebook, Google, Twitter or Instagram servers. The content of the plugin is transmitted directly to your browser by the respective provider and integrated into the page. By integrating the plugins, the providers receive the information that your browser has accessed the corresponding page of our website, even if you do not have a profile or are not currently logged in.

This information (including your IP address) is transmitted from your browser directly to a server of the respective provider (possibly outside the EU, in particular to Facebook Inc. (1601 S. California Ave, Palo Alto, CA 94304, USA) and stored there "In the case of data transmission to the USA, there is no adequacy decision by the European Commission for the appropriate level of data protection. If you are logged in to one of the services, the providers can directly assign the visit to our website to your profile in the respective social network. If you interact with the plugins For example, if you press the "Like" or "Share" button, the corresponding information is also sent directly to one of the providers' servers and stored there. The information is also published on the social network and displayed to your contacts there. The same applies when calling up a website of a social media operator by clicking on the corresponding symbol button. This serves to protect our overriding legitimate interests in optimal marketing of our offer in accordance with Article 6 Paragraph 1 Sentence 1 lit. f GDPR.

If you are not a member of a social network, there is still the possibility that the social networks will receive and store your IP address and information about the browser and operating system you are using after activating the social plugin. The scope and purpose of the data collection as well as the processing and use of the data by the social networks and information on rights and setting options to protect your privacy can be found in the data protection information of the respective social network. These can be accessed at the following addresses:

Facebook: https://www.facebook.com/policy.php

Instagram: https://help.instagram.com/155833707900388

If you are a member of a social network and would like to limit the collection of data via our websites and the combination of your user data with the data stored about you on the social network, you should log out of the social network before visiting our website. We encourage you to use appropriate add-ons for the browser you are using (e.g. so-called "Facebook Blocker"), although we cannot guarantee the effectiveness of such solutions.

In addition to the social plugins, our websites also contain simple links to Facebook and Instagram. A data exchange with the social media operators mentioned only takes place if the corresponding symbol button (e.g. the “f” from Facebook) is clicked. If you click on such a symbol button, a page of the corresponding social media operator opens in a pop-up window. There you can publish information about our products in accordance with the provisions of the social media operator.

payment services

As part of the fulfillment of contracts, we use payment service providers on the basis of Art. 6 Para. 1 lit b GDPR. In addition, we use external payment service providers on the basis of our legitimate interests in accordance with Article 6 (1) (f) GDPR in order to offer our users effective and secure payment options.

These payment service providers process data such as name, address, bank details (account numbers or credit card numbers), passwords, possibly TANs and checksums as well as contract, total and recipient-related information. The information is required to carry out the transactions. However, the data entered will only be processed and stored by the payment service providers. This means that we do not receive any account or credit card-related information, only information with confirmation or negative information about the payment. Under certain circumstances, the payment service provider may transmit the data to credit agencies. The purpose of this transmission is to check identity and creditworthiness. We refer to the terms and conditions and data protection notices of the payment service providers.

The terms and conditions and the data protection notices of the respective payment service providers apply to the payment transactions, which can be accessed within the respective websites or transaction applications. We also refer to this for the purpose of further information and the assertion of revocation, information and other data subject rights.

Your data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. This is the case when fulfilling a contract or when carrying out pre-contractual measures if the data is no longer required for the execution of the contract. We may be contractually or legally obliged to store data even after the contract has ended (e.g. for tax purposes). Which storage periods apply here must be determined individually for the respective contracts and contracting parties.

Your rights

In principle, you have the right to information, correction, deletion, restriction, data transferability, revocation and objection with regard to your data stored by us. In the event of a revocation, the legality of the data processing up to the time of revocation is not affected. If you believe that the processing of your data violates data protection law or your data protection rights have otherwise been violated in any way, you can complain to us at office@wiseenough.eu or the data protection authority.