GDPR – Hochzeit-Irvalda

DATA PROTECTION INFORMATION OF THE HOCHZEITSETELIER IRVALDA EU/ HOCHZEITSETELIER IRVALDA, AS OF: 13.04.2020
Since May 25, 2018, the uniform requirements of the EU General Data Protection Regulation (GDPR) have applied throughout Europe in the area of data protection. In the following data protection information, we inform you about the processing of personal data carried out by the wedding studio Irvalda eU in accordance with the GDPR and the Data Protection Act (DSG).

Please read our privacy policy carefully. If you have any questions or comments about our privacy policy, please contact us at kontakt@hochzeit-irvalda.at

1. Name and contact details of the controller

This privacy information applies to data processing by the

Wedding Studio Irvalda eU – Wedding Studio Irvalda
Müglendergasse 6/3
1170 Vienna
Austria

kontakt@irvalda.com
Owner: Iryna Domann
Website: www.hochzeit-irvalda.com

2. Purposes of data processing, legal bases and legitimate interests pursued by the controller or a third party as well as categories of recipients

2.1 Accessing our websites/applications

2.1.1. Log files

Every time you access websites/applications, information is sent to the server of our website/application through the respective Internet browser of your respective device and temporarily stored in log files. The data records stored in this way contain the following data, which is stored until it is automatically deleted: date and time of retrieval, name of the page accessed, IP address of the requesting device, referrer URL (origin URL from which you came to our website), the amount of data transferred, loading time, as well as product and version information of the browser used and the name of your access provider.

The legal basis for the processing of the IP address is Article 6 paragraph 1 letter f) GDPR. Our legitimate interest arises from the

Ensuring a smooth connection setup,
Ensuring comfortable use of our website/application,
Evaluation of system security and stability.
It is not possible to draw any direct conclusions about your identity based on this information and we will not do so.

The data is stored and automatically deleted once the aforementioned purposes have been achieved. The standard deletion periods depend on the criterion of necessity.

2.1.2. Cookies, tracking, social media plugins

We use cookies, tracking tools, targeting processes and social media plug-ins for our website/application. The exact processes involved and how your data is used for this purpose are explained in detail below.

2.1.3. Geo-localization

If you have agreed to so-called geolocation in your browser or in the operating system or other settings of your respective device, we use this function to be able to offer you individual services based on your current location (e.g. the location of the nearest branch). We process your location data processed in this way exclusively for this function. If you stop using the service, the data will be deleted.

2.2.Establishment, execution and/or termination of a contract

2.2.1. Data processing upon conclusion of the contract

If you register on one of our websites/applications and conclude a contract with us, we process the data required to conclude, execute or terminate a contract with you. This includes:

First name Last Name
billing and delivery address
E-mail address
billing and payment data
birth date
wedding date
phone number
The legal basis for this is Article 6 Paragraph 1 Letter b) GDPR, i.e. you provide us with the data on the basis of the respective contractual relationship (e.g. management of your customer account, processing of a purchase contract) between you and us. In order to process your email address in the event of a purchase via our websites/applications, we are also obliged to send an electronic order confirmation due to legal requirements in the General Civil Code (ABGB) (Article 6 Paragraph 1 Letter c) GDPR).

Unless we use your data for advertising purposes (see 3.3 below), we store the data collected for contract processing until the expiry of the statutory or possible contractual warranty and guarantee rights. After this period has expired, we store the information required by company and tax law for the contractual relationship for the periods specified by law. During this period, the data will only be processed again in the event of an audit by the tax authorities.

In order to process a purchase contract via our websites/applications, the following data processing is also required:

Your payment details will be passed on to payment service providers commissioned by us who process the payment(s). We pass on information about your delivery address to logistics companies and shipping partners commissioned by us. To ensure that the goods are delivered according to your wishes, we will send your email address and, if applicable, telephone number to the logistics company and/or shipping partner commissioned by us who will take care of the delivery. They will contact you in advance of delivery if necessary to coordinate the details of the delivery with you. The respective data will only be transmitted for the respective purposes and will be deleted again after delivery has taken place.

2.2.2. Use of data for fraud prevention purposes

The data you provide when placing an order can be used to check whether an atypical order process has taken place (e.g. ordering a large number of goods at the same time to the same address using different customer accounts). We generally have a legitimate interest in carrying out such a check. The legal basis for the processing is Art. 6 Paragraph 1 Letter f) GDPR.

2.2.3. Transmission of data to transport service providers

For the purpose of delivering ordered goods, we work with logistics service providers/transport companies and/or shipping partners: The following data may be transmitted to them for the purpose of delivering the ordered goods or to announce them: first name, last name, postal address, telephone number and, if applicable, email address.

The legal basis for the processing is Art. 6 paragraph 1 letter b) GDPR.

2.3. Data processing for advertising purposes

2.3.1. Postal advertising

We generally have a legitimate interest in using your data for marketing purposes. We collect the following data for our own marketing purposes and for the marketing purposes of third parties: first name, last name, postal address, year of birth.

The data mentioned may also be transmitted to third parties for this purpose. We are also entitled to store additional personal data about you collected in compliance with legal requirements for our own marketing purposes and for the marketing purposes of third parties. The aim is to send you advertising that is geared solely to your actual or perceived needs and not to bother you with unnecessary advertising.

The data stored will not be transmitted to third parties. In addition, the controller pseudonymises personal data collected about you for the purpose of using the pseudonymised data for its own marketing purposes and for the marketing purposes of third parties (advertisers). The pseudonymised data can also be used to advertise to you individually online, whereby the advertising can be controlled by a service provider/agency. The legal basis for the use of personal data for marketing purposes is Art. 6 Paragraph 1 Letter f) GDPR.

reference to the right of objection

You can object to the use of your personal data for the aforementioned advertising purposes at any time free of charge with effect for the future by sending an email to kontakt@hochzeit-irvalda.at .

If you object, your data will be blocked for further advertising data processing. We would like to point out that in exceptional cases, advertising material may still be sent temporarily even after receipt of your objection. This is due to the technical lead time required for selection and does not mean that we have not implemented your objection.

2.3.2. Newsletter

On our websites/applications we offer you the opportunity to sign up for our newsletter. To ensure that no errors have been made when entering the email address, we use the so-called double opt-in procedure (DOI procedure): After you have entered your email address in the registration field, we will send you a confirmation link to the address provided. Only when you click on this confirmation link will your email address be added to our mailing list for sending our newsletter. The legal basis for this data processing is Article 6 paragraph 1 letter a) GDPR.

Notice of Right of Withdrawal

You can revoke your consent at any time with effect for the future by sending a message to kontakt@hochzeit-irvalda.at or by using the unsubscribe option at the end of each newsletter.

2.3.3. Product recommendations by email

As an existing customer of our online shop, you will regularly receive product recommendations from us by email. You will receive these product recommendations from us regardless of whether you have subscribed to a newsletter. We use the email address you provided during the purchase to advertise our own goods and/or services that are similar to those you have purchased from us based on an order you have already placed. The legal basis for this data processing is Art. 6 Para. 1 Letter f) GDPR.

Notice Right of Objection

You can object to our product recommendations at any time with future effect by sending a message to kontakt@hochzeit-irvalda.at or at the end of each product recommendation email, without incurring any costs other than the transmission costs according to the basic rates.

2.3.4. Competitions

If you register for competitions organized by us, we will use the data you provided during registration for the purpose of executing the participation contract, in particular to notify you of your win and, if applicable, to advertise our offers and/or offers from our competition partners. You can find detailed information in the respective terms and conditions of participation for each competition. The legal basis for this data processing is Article 6 paragraph 1 letter a) GDPR, Article 6 paragraph 1 letter b) GDPR and Article 6 paragraph 1 letter f) GDPR.

2.4. Online presence and website optimization

2.4.1. Cookies General Information

We use cookies on various pages to make visiting our website more attractive, to enable the use of certain functions and to statistically record the use of our website. Cookies are small text files that your browser automatically creates and that are stored on your device (laptop, tablet, smartphone, etc.) when you visit our site. Cookies do not cause any damage to your device and do not contain viruses, Trojans or other malware. Information is stored in the cookie that is related to the specific device used. However, this does not mean that we thereby receive immediate knowledge of your identity.

Most of the cookies we use are deleted at the end of the browser session (so-called session cookies). These allow us to offer you, for example, the cross-page shopping cart display, in which you can see how many items are currently in your shopping cart and what your current purchase value is. Other cookies remain on your computer and enable us to recognize your computer the next time you visit (so-called permanent or cross-session cookies). These cookies in particular serve to make our offering more user-friendly, effective and secure. Thanks to these files, it is possible, for example, for you to see information on the site that is specifically tailored to your interests.

If you have a customer account and are logged in or activate the “stay logged in” function, the information stored in cookies will be assigned a pseudonym under a cookie ID.

Of course, you can configure your browser so that it does not store our cookies on your hard disk. The Help function in the menu bar of most web browsers will tell you how to prevent your browser from accepting new cookies, how to have your browser notify you when you receive a new cookie, or how to delete all cookies you have already received and block all future cookies.

To do so, please proceed as follows:

In Internet Explorer

In the “Tools” menu, select “Internet Options”.
Click on the “Privacy” tab.
Now you can make the security settings for the Internet zone. Here you can specify whether and which cookies should be accepted or rejected.
Click “OK” to confirm your setting.

In Firefox:

In the “Tools” menu, select Settings.
Click on “Privacy”.
In the drop-down menu, select “create according to custom settings”.
Now you can set whether cookies should be accepted, how long you want to keep these cookies and add exceptions for which websites you always or never want to allow to use cookies.
Click “OK” to confirm your setting.

In Google Chrome:

Click the Chrome menu in the browser toolbar.
Now select “Settings”.
Click on “Show advanced settings”.
Under “Privacy,” click “Content Settings.”
Under “Cookies” you can make the following settings for cookies:
delete cookies
Block cookies by default
Delete cookies and website data by default after closing the browser
Allow exceptions for cookies from certain websites or domains

You can deactivate the data collection and storage in this browser at any time with effect for the future.

However, we would like to point out that in this case you may not be able to use all functions of this website to their full extent.

If these cookies and/or the information they contain are personal data, the legal basis for data processing is Art. 6 Paragraph 1 Letter f) GDPR. Our interest in optimizing our website is to be regarded as legitimate within the meaning of the aforementioned provision.

2.4.2. Google Analytics

For the purpose of needs-based design and continuous optimization of our website, we use Google Analytics, a web analysis service of Google Inc. (“Google”), based on Article 6 Paragraph 1 Letter f) of the GDPR. Google Analytics uses so-called “cookies”, text files that are stored on your computer and that enable an analysis of your use of the website. In this context, pseudonymized user profiles are created and cookies are used. The information generated by the cookie about your use of this website, such as

browser type/version,
• operating system used,
• Referrer URL (the previously visited page),
• Hostname of the accessing computer (IP address),
• Time of the server request
On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website activity and Internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. You can prevent cookies from being saved by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all of the functions of this website to their full extent. In addition, you can prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl=de .

As an alternative to the browser add-on, especially for browsers on mobile devices, you can also prevent Google Analytics from collecting data by clicking on this link. An opt-out cookie will be set that prevents your data from being collected in the future when you visit this website. The opt-out cookie is only valid in this browser and only for our website and is stored on your device. If you delete the cookies in this browser, you must set the opt-out cookie again. You can find more information about data protection in connection with Google Analytics on the Google Analytics website.

2.4.3. Advertising partners/third-party cookies

We work with advertising partners to make the online offering on our site even more interesting for you. For this purpose, cookies are also set by our advertising partners when you visit our site (so-called third-party cookies). Our advertising partners’ cookies also store information using pseudonyms about your user behavior and your interests when you visit our site. In some cases, information that was found on other sites before you visited our site is also recorded. This information is used to show you interest-based advertisements from our advertising partners. No personal data is stored and no user profiles are combined with personal data about you.

You can prevent interest-based advertising from our advertising partners by setting the appropriate cookies in your browser (see also 2.4.1 above).

2.4.4. Google Adwords

Our website uses the Google Adwords service. Google AdWords is an online advertising program from Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”).

On the one hand, we use the remarketing function within the Google AdWords service. With the remarketing function, we can present users of our website with advertisements based on their interests on other websites within the Google Display Network (on Google itself, so-called “Google Ads” or on other websites). For this purpose, the interaction of users on our website is analyzed, e.g. which offers the user was interested in, in order to be able to show users targeted advertising on other sites even after they have visited our website. For this purpose, Google stores a number in the browsers of users who visit certain Google services or websites in the Google Display Network. This number, known as a “cookie,” is used to record the visits of these users. This number is used to uniquely identify a web browser on a specific computer and not to identify a person; personal data is not stored. The legal basis for this data processing is Article 6 Paragraph 1 Letter f) GDPR.

You can deactivate the use of cookies by Google by following the link below and downloading and installing the plug-in provided there: www.google.com/settings/ads/plugin.

Further information about Google Remarketing and Google’s privacy policy can be found at: www.google.com/privacy/ads/ .

2.4.5. Social media plug-ins

Based on Article 6 Paragraph 1 Letter f of the GDPR, we use social plug-ins from the social networks Facebook, Google+ and Twitter on our website to make our company better known. The advertising purpose behind this is to be regarded as a legitimate interest within the meaning of the GDPR. The responsibility for data protection-compliant operation must be ensured by the respective providers.

The purpose and scope of data collection and the further processing and use of the data by the respective provider as well as your rights and setting options for protecting your privacy can be found in the respective data protection information of the provider, which we link to below.

By logging out of social network pages beforehand and deleting cookies, you can prevent social networks from assigning the information collected about you to your user account on the respective social network during your visit. If you do not want social networks to assign the data collected via our website directly to your profile, you must log out of the relevant social networks before visiting our website. You can also completely prevent the loading of the plug-ins using add-ons for your browser, e.g. with the script blocker “NoScript”, which can be found at: http://noscript.net.

2.4.6. Facebook, Google+ and YouTube

This website uses social plugins from Facebook and Google (Google+ and YouTube). These are services provided by the US companies Facebook and Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”)).

If you visit a page that contains such a plugin, your browser establishes a connection to Facebook or Google and the content is loaded from these pages. Your visit to this website may therefore be tracked by Facebook and Google, even if you do not actively use the social plugin function. If you have an account with Facebook or Google, you can use such a social plugin and share information with your friends. OTTO has no influence on the content of the plugin or the transmission of information.

On their websites, Facebook and Google provide detailed information on the scope, type, purpose and further processing of your data. Here you will also find further information on your rights and setting options for protecting your privacy.

Facebook’s privacy policy: https://www.facebook.com/about/privacy .

Google’s privacy policy: http://www.google.com/intl/de/policies/privacy .

2.4.7. Pinterest

This website contains plug-ins from the social network Pinterest Inc., 635 High Street, Palo Alto, CA, 94301, USA (“Pinterest”). You can recognise the Pinterest plug-in by the “Pin it button” on our site.

If you click the Pinterest “Pin it button” while you are logged into your Pinterest account, you can link the content of our pages to your Pinterest profile. This allows Pinterest to assign the visit to our pages to your user account. We would like to point out that we have no knowledge of the content of the data transmitted or its use by Pinterest. You can find more information in Pinterest’s privacy policy: http://about.pinterest.com/de/privacy.

2.4.8. Instagram

This website also contains plug-ins from the social network Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA (“Instagram”). You can recognise the Instagram plug-in by the “Instagram button” on our site.

If you click the “Instagram button” while you are logged into your Instagram account, you can link the content of our pages to your Instagram profile. This allows Instagram to assign the visit to our pages to your user account. We would like to point out that we have no knowledge of the content of the data transmitted or its use by Instagram. You can find further information in Instagram’s privacy policy: http://instagram.com/about/legal/privacy/ .

2.5. Customer account/user account

In order to provide you with the greatest possible convenience, we offer you the permanent storage of your personal data in a password-protected customer account/user account.

Creating a customer account is generally voluntary and is based on your consent in accordance with Article 6 Paragraph 1 Letter b) of the GDPR. Once a customer account has been set up, you do not need to enter any data again. You can also view and partially change the data stored about you in your customer account at any time.

Only if you wish to place orders via our website/application is it necessary to open a customer account to process the contract. In this case, the legal basis for data processing is (additionally) Art. 6 Para. 1 Letter a) GDPR.

In addition to the data requested when placing an order, you must provide a password of your choice to set up a customer account. This, together with your email address, is used to access your customer account. Please treat your personal access data confidentially and, in particular, do not make it accessible to any unauthorized third parties. Please note that you will automatically remain logged in even after you leave our website unless you actively log out. You have the option of having your customer account deleted at any time. Please note, however, that this does not simultaneously delete the data visible in the customer account once you have ordered from us. Your data will be deleted automatically after the retention periods applicable to us under commercial and tax law have expired. The legal basis for this data processing is Art. 6 Paragraph 1 Letter c) GDPR and Art. 6 Paragraph 1 Letter f) GDPR.

2.6. Contact

You have the option of contacting us in several ways. By email, by phone, by chat or by post. If you contact us, we will use the personal data that you voluntarily provide to us for the sole purpose of contacting you and processing your request.
The legal basis for this data processing is Art. 6 Paragraph 1 Letter a), Art. 6 Paragraph 1 Letter b), Art. 6 Paragraph 1 Letter c) GDPR and Art. 6 Paragraph 1 Letter f) GDPR.

2.7. Customer reviews/comments

When users leave comments or other contributions on www.irvalda.com, their IP addresses are stored for 7 days based on our legitimate interests within the meaning of Art. 6 Paragraph 1 Letter f) GDPR. This is done for our security in case someone leaves illegal content in comments and contributions (insults, prohibited political propaganda, etc.).

Users can subscribe to comments with their consent in accordance with Art. 6 Paragraph 1 Letter a) GDPR and cancel ongoing comment subscriptions at any time. For the purposes of proving the user’s consent, we save the time of registration along with the user’s IP address and delete this information when users unsubscribe from the subscription.

2.8. Other User Content

You have the opportunity to publish your own content on www.irvalda.com in various places (e.g. product reviews, comments, etc.). If you make a comment, a recommendation or a review of products, brands and styles, we process the personal data that you voluntarily enter as part of the comment or review. The legal basis for this data processing(s) is Art. 6 Paragraph 1 Letter a), Art. 6 Paragraph 1 Letter b) and Art. 6 Paragraph 1 Letter f) GDPR. In addition, our terms of use apply to the settings of your own content, which you can access here.

2.9. Payments

We process your payment information for the purpose of payment processing, e.g. when you purchase or use a product and/or service via www.irvalda.com. Depending on the payment method, we will forward your payment information to third parties (e.g. to your credit card provider in the case of credit card payments).

The legal basis for this data processing is Art. 6 paragraph 1 letter a), Art. 6 paragraph 1 letter b), GDPR and Art. 6 paragraph 1 letter f) GDPR.

2.9.1.Paypal

When paying via PayPal, your payment details will be forwarded to PayPal (Europe) S.à rl et Cie, SCA, 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter “PayPal”) as part of the payment processing. PayPal reserves the right to use the following payment methods: credit card via PayPal. Address details are used to calculate the score values.

For further information on data protection, including information on the credit agencies used, please refer to PayPal’s privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full

3. Your rights

3.1. Overview

In addition to the right to revoke your consent given to us, you have the following additional rights if the respective legal requirements are met:

the right to information about your personal data stored by us (Article 15 GDPR), in particular you can request information about the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the origin of your data, if it was not collected directly from you;
the right to rectification of inaccurate data or to completion of correct data (Art. 16 GDPR),
the right to delete your data stored by us (Article 17 GDPR), provided that there are no statutory or contractual retention periods or other legal obligations or rights to further storage that we must comply with,
the right to restrict the processing of your data (Article 18 GDPR) if you contest the accuracy of the data, the processing is unlawful but you refuse to delete it; the controller no longer needs the data but you need it to assert, exercise or defend legal claims or you have objected to the processing in accordance with Article 21 GDPR,
the right to data portability pursuant to Art. 20 GDPR, i.e. the right to have selected data stored about you transferred to us in a common, machine-readable format or to request that it be transferred to another responsible party
the right to lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or work or of our company headquarters.
3.2. Right of objection

Under the conditions of Art. 21 Para. 1 GDPR, data processing can be objected to for reasons arising from the particular situation of the data subject.

The above general right of objection applies to all processing purposes described in this data protection information that are processed on the basis of Article 6 paragraph 1 letter f) GDPR. Unlike the specific right of objection aimed at data processing for advertising purposes, under the GDPR we are only obliged to implement such a general objection if you give us reasons of overriding importance (e.g. a possible threat to life or health).

3.3. Right of withdrawal

If we process data on the basis of consent you have given, you have the right to revoke your consent at any time. The revocation of your consent does not mean that the data processing carried out up to the time of revocation based on your consent becomes ineffective.