Privacy policy


The protection of your personal data is very important to us. We therefore process your data exclusively on the basis of the statutory provisions (GDPR, TKG 2003). In this privacy policy, we inform you about the most important aspects of data processing within the framework of our website.

 

Contacting us

If you contact us via the form on the website or by email, we will store the data you provide for six months for the purpose of processing your enquiry and in case of follow-up questions. We will not pass on this data without your consent.

 

Data storage Webshop

We would like to point out that, for the purpose of simplifying the purchasing process and for subsequent contract processing, the webshop operator stores the IP data of the connection owner in cookies, as well as the name, address, telephone number and email address of the purchaser.

The data you provide is necessary for the fulfilment of the contract or for the implementation of pre-contractual measures. Without this data, we cannot conclude the contract with you. No data is transferred to third parties, with the exception of the transfer of credit card data to the processing banks/payment service providers for the purpose of debiting the purchase price, to the transport company/shipping company commissioned by us to deliver the goods, and to our tax advisor to fulfil our tax obligations.

We do not store or process any credit card data. Payments by credit card (Mastercard/Visa), PayPal and instant bank transfer are processed by our partner (payment service provider) Unzer Austria GmbH/www.unzer.com/ (formerly mPAY24 GmbH as part of the heidelpay group). Due to the processing of credit card data, Unzer GmbH is bound by the globally applicable PCI DSS (Payment Card Industry Data Security Standard). This IT security standard includes a level of protection that exceeds the requirements of the GDPR. 

The relevant certificate can be provided upon request. Further information on PCI DSS can be found here: http://de.pcisecuritystandards.org/minisite/en/

After cancellation of the purchase process, the data stored by us will be deleted. In the event of a contract being concluded, all data from the contractual relationship will be stored until the expiry of the tax retention period (7 years). The data name, address, purchased goods and date of purchase will also be stored until the expiry of the product liability period (10 years). Data processing is carried out on the basis of the legal provisions of § 96 (3) TKG and Art. 6 (1) lit. a (consent) and/or lit. b (necessary for the performance of the contract) of the GDPR.

 

Web analysis

Our website uses functions of the web analysis service Matomo (formerly Piwik). Matomo is integrated in compliance with data protection regulations. A major advantage of Matomo over other analytics software is the fact that it is hosted on our own server (so-called in-house hosting). In concrete terms, this means that only the website operator has access to the data collected. It is therefore not transferred to external servers, where it is beyond your control and may be used in a manner that does not comply with data protection regulations. (Matomo's registered office: Innocraft, 150 Willis St, 6011 Wellington, New Zealand)

You can prevent Matomo from collecting your data. This option for visitors to revoke their consent is provided by inserting a code into the page. You can disable tracking by ticking a box (known as opting out).

This website also uses Google Analytics, a web analytics service provided by Google Inc. (‘Google’). Google Analytics uses ‘cookies’, which are text files placed on your computer, to help the website analyse how users use the site. The information generated by the cookie about your use of the website will generally be transmitted to and stored by Google on servers in the United States. However, if IP anonymisation is activated on this website, your IP address will be truncated by Google within member states of the European Union or in other states party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. 

You can prevent cookies from being stored by adjusting your browser software settings accordingly; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by downloading and installing the browser plug-in available under the following link (http://tools.google.com/dlpage/gaoptout?hl=de).

Further information on terms of use and data protection can be found at http://www.google.com/analytics/terms/de.html or at https://support.google.com/analytics/answer/6004245?hl=de. Please note that on this website, Google Analytics has been extended by the code ‘gat._anonymizeIp();’ to ensure anonymous collection of IP addresses (known as IP masking).

 

Web fonts from Adobe Typekit

Our website uses web fonts to ensure consistent font display. These are provided by Adobe Typekit. For further clarification, we would like to inform you of the following: In order to display text and fonts correctly, your browser loads the required web fonts into your browser cache. To do this, the browser you are using must connect to the Adobe Typekit servers. Through this connection, Adobe Typekit becomes aware that our website has been accessed via the IP address assigned to you.

At this point, we would like to point out that the use of Adobe Typekit web fonts is in the interest of a uniform and appealing presentation of our online offerings. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.

If your browser does not support web fonts, your device will use a standard font.

Further information on Adobe Typekit web fonts can be found at https://typekit.com/ and in the Adobe Typekit privacy policy: https://www.adobe.com/de/privacy/policies/typekit.html.

Use of IP addresses on the legal basis of ‘legitimate interest’:

Your IP address will be pseudonymised. The data will be deleted after 180 days. Data processing is carried out on the basis of the legal provisions of Section 96 (3) TKG and Article 6 (1) (a) (consent) and/or (f) (legitimate interest) of the GDPR.

 

Your rights

You have the right to access, rectify, erase, restrict, transfer, withdraw and object to the data we hold about you. If you believe that the processing of your data violates data protection law or that your data protection rights have been violated in any other way, you can complain to us at office@220grad.com or to the data protection authority.

You can reach us at the following contact details:

220GRAD Macheiner GmbH
Maxglaner Hauptstraße 29
5020 Salzburg

Telephone: +43 (0)664 1953873

Email: office@220grad.com