data protection

Responsible for data processing

Wise enough
Moosfeldstr. 1
Brandboxx Salzburg
5101 Bergheim / Salzburg
Austria

Phone: +43 (0) 660 496 86 91
Email: office@wiseenough.eu

Tax identification number (UID): ATU76510116

Business purpose: Commercial agents
Chamber affiliation: Salzburg Chamber of Commerce
Place of jurisdiction: Regional Court of Salzburg

The protection of your personal data is of particular importance to us. We therefore process your data exclusively on the basis of the statutory provisions (GDPR, TKG 2003). In this data protection information we inform you about the most important aspects of data processing on our website.

You can access the privacy policy and save it or print it out.

If you contact us using the form on the website or by email, the data you provide will be stored for six months in order to process your request and in case of follow-up questions. We will not pass on this data without your consent.

Data storage

Every time you access our website, our system automatically stores the name of the requested file, your IP data, the date and time of access, the amount of data transferred and the requesting provider (access data) in so-called server log files and documents the access.

It is necessary for our system to process the above data so that the functionality and delivery of the website can be guaranteed. We also use this data to optimize our website and secure our information technology systems. The data is not used for marketing purposes in this context. The legal basis for the processing of this data and the log files is Art. 6 Para. 1 lit. f GDPR on the basis of our legitimate interest in being able to provide you with a functional and user-friendly website.

The data is processed and, in particular, stored for as long as it is necessary to achieve the aforementioned purpose. If data is required to provide the website, this is no longer necessary when the respective session has ended. Your data is then automatically deleted. If the data is stored in log files, this is usually the case after fourteen days at the latest. If the aforementioned data is further stored, your IP address will be deleted or altered so that it is no longer possible to assign the accessing internet connection. The collection of data to provide the website and the storage of data in log files is essential for the operation of the website.

To the extent that we evaluate usage behavior on our website in addition and in a legally permissible manner without express consent, we only use anonymized data that does not allow any conclusions to be drawn about individual people in order to improve the usability of the website and the user experience for our visitors.

We would like to point out that for the purpose of simplifying the purchasing process and for later contract processing, the web shop operator stores the IP data of the connection owner in cookies, as well as the name, address and credit card number of the buyer.

In addition, for the purpose of processing the contract, we also store personal data such as title, name, address, gender, date of birth, email address, telephone number and password, which users provide when registering in the online shop. During online shopping, the order data is also processed, namely in particular the items ordered, size, prices, billing address, delivery address and payment method. The specific additional data that is collected and stored can be seen from the respective input forms for registration or ordering. When using payment services, the data processed and further information can be found in point 8 of this data protection declaration.

If you have given your consent in accordance with Art. 6 Paragraph 1 Letter a of GDPR by deciding to open a customer account and register in the online shop, we will use your data for the purpose of opening a customer account. The data you provide is required to fulfil the contract or to carry out pre-contractual measures. Without this data, we cannot conclude the contract with you. Data will not be transmitted to third parties, with the exception of the transmission of credit card details to the processing banks/payment service providers for the purpose of debiting the purchase price, to the transport company/shipping company commissioned by us to deliver the goods and to our tax advisor to fulfil our tax obligations.

In the event of a contract being concluded or the customer account being deleted, all data from the contractual relationship will be stored until the expiry of the tax retention period (7 years). The data name, address, purchased goods and date of purchase will also be stored until the expiry of the product liability period (10 years). Your customer account can be deleted at any time and can be done either by sending a message to the contact option described below or via a function provided for this purpose in the customer account.

The data processing is carried out on the basis of the legal provisions of Section 96 Paragraph 3 TKG as well as Art. 6 Paragraph 1 Letter a (consent) and Letter b (necessary for the performance of the contract, processing of enquiries) as well as Letter f (legitimate interests) of the GDPR.

Hosting services provided by a third party

We use the shop system of the service provider Shopify International Limited, Victoria Buildings, 2nd floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland, company identification number: 560279 ("Shopify"), for the purpose of hosting and displaying the online shop on the basis of processing on our behalf. All data collected on our website is processed on Shopify's servers. As part of the aforementioned services from Shopify, data can also be transmitted to Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada, Shopify Data Processing (USA) Inc., Shopify Payments (USA) Inc. or Shopify (USA) Inc. as part of further processing on behalf of Shopify. In the event that data is transmitted to Shopify Inc. in Canada, the appropriate level of data protection is guaranteed by the European Commission's adequacy decision. Further information on Shopify's data protection can be found on the following website: https://www.shopify.de/legal/datenschutz

Any further processing on servers other than those mentioned above by Shopify will only take place within the scope communicated in this privacy policy

Cookies

Web analysis

Our website uses functions of the web analysis service Google Analytics. Cookies are used to enable an analysis of the use of the website by your users. The information generated in this way is transferred to the provider's server and stored there.

You can prevent this by setting your browser so that no cookies are stored.

We have concluded a corresponding contract for order data processing with the provider.

Your IP address is recorded, but immediately pseudonymized [e.g. by deleting the last 8 bits]. This means that only a rough localization is possible.

Data processing is carried out on the basis of the legal provisions of Section 96 Paragraph 3 of the Telecommunications Act (TKG) and Article 6 Paragraph 1 Letter a (consent) and letter f (legitimate interest) of the GDPR. Our concern within the meaning of the GDPR (legitimate interest) is to improve our offer and our website. Since the privacy of our users is important to us, user data is pseudonymized.

User data is stored for a period of 30 days.

Newsletter

You have the option of subscribing to our newsletter via our website. To do this, we need your email address and your declaration that you agree to receive the newsletter.

In order to provide you with targeted information, we also collect and process voluntarily provided information such as your date of birth, place of residence and telephone number.

As soon as you have subscribed to the newsletter, we will send you a confirmation email with a link to confirm your registration.

You can cancel your newsletter subscription at any time. Please send your cancellation to the following email address: office@wiseenough.eu or unsubscribe using the link in the newsletter. We will then immediately delete your data in connection with the newsletter dispatch. This revocation does not affect the legality of the processing carried out on the basis of the consent until the revocation.

Social media and use of social plug-ins

Our website uses so-called social plugins from social networks such as Facebook or Instagram (“plugins”).

If you visit a page on our website that contains such a plugin, your browser establishes a direct connection to the servers of Facebook, Google, Twitter or Instagram. The content of the plugin is transmitted directly to your browser by the respective provider and integrated into the page. By integrating the plugin, the providers receive the information that your browser has accessed the corresponding page on our website, even if you do not have a profile or are not currently logged in.

This information (including your IP address) is transmitted from your browser directly to a server of the respective provider (possibly outside the EU, in particular to Facebook Inc. (1601 S. California Ave, Palo Alto, CA 94304, USA) and stored there. In the case of data transmission to the USA, there is no adequacy decision by the European Commission for the appropriate level of data protection. If you are logged in to one of the services, the providers can directly assign the visit to our website to your profile in the respective social network. If you interact with the plugins, for example by pressing the "Like" or "Share" button, the corresponding information is also transmitted directly to a server of the provider and stored there. The information is also published in the social network and displayed to your contacts there. The same applies when you access a website of a social media operator by clicking on the corresponding symbol button. This serves to protect our legitimate interests in the optimal marketing of our offer, which prevail in the context of a balancing of interests, in accordance with Art. 6 Para. 1 Clause 1 Letter f of GDPR.

If you are not a member of a social network, it is still possible that the social networks will receive and save your IP address and information about the browser and operating system you use after activating the social plugins. The scope and purpose of data collection, processing and use of data by the social networks and information about rights and setting options for protecting your privacy can be found in the data protection information of the respective social network. These can be accessed at the following addresses:

Facebook: https://www.facebook.com/policy.php

Instagram: https://help.instagram.com/155833707900388

If you are a member of a social network and would like to limit the collection of data via our websites and the merging of your user data with the data about you stored on the social network, you should log out of the social network before visiting our website. If necessary, we recommend that you use appropriate add-ons for the browser you use (for example, so-called "Facebook Blocker"), although we cannot guarantee the effectiveness of such solutions.

In addition to the social plugins, our websites also contain simple links to Facebook and Instagram. Data is only exchanged with the social media operators mentioned if the corresponding symbol button (e.g. the "f" from Facebook) is clicked. If you click on such a symbol button, a page of the corresponding social media operator opens in a pop-up window. There you can publish information about our products in accordance with the social media operator's terms and conditions.

Payment services

As part of the fulfillment of contracts, we use payment service providers on the basis of Art. 6 Para. 1 lit. b GDPR. In addition, we use external payment service providers on the basis of our legitimate interests in accordance with Art. 6 Para. 1 lit. f GDPR in order to offer our users effective and secure payment options.

These payment service providers process data such as name, address, bank details (account numbers or credit card numbers), passwords, TANs and checksums if applicable, as well as contract, amount and recipient-related information. The information is required to carry out the transactions. However, the data entered is only processed and stored by the payment service providers. This means that we do not receive any account or credit card-related information, only information confirming or rejecting the payment. The payment service providers may transmit the data to credit agencies. This transmission is for the purpose of checking identity and creditworthiness. For this purpose, we refer to the terms and conditions and data protection information of the payment service providers.

The terms and conditions and data protection notices of the respective payment service providers apply to payment transactions and can be accessed on the respective websites or transaction applications. We also refer to these for further information and to assert revocation, information and other rights of those affected.

Your data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. This is the case when fulfilling a contract or carrying out pre-contractual measures if the data is no longer required to carry out the contract. We may be contractually or legally obliged to store data even after the contract has ended (e.g. for tax purposes). The storage periods that apply must be determined individually for each contract and contracting party.

Your rights

You have the right to information, correction, deletion, restriction, data portability, revocation and objection with regard to your data stored by us. In the event of a revocation, the legality of the data processing up to the time of revocation will not be affected. If you believe that the processing of your data violates data protection law or that your data protection rights have otherwise been violated in any way, you can complain to us at office@wiseenough.eu or to the data protection authority.