Data protection

PRIVACY POLICY

Data protection information for interested parties and customers
The protection of personal data is important to us and is also required by law. Your personal data is processed in accordance with data protection regulations. The following overview is intended to inform you about the most important aspects of the processing of personal data.

This privacy policy clarifies the nature, scope and purpose of the processing of personal data (hereinafter referred to as “data”) within our online offer and the associated websites, functions and content as well as external online presences, such as our social media profile (hereinafter collectively referred to as “online offer”). With regard to the terms used, such as “processing” or “controller”, we refer to the definitions in Art. 4 of the General Data Protection Regulation (GDPR).

Person responsible
Company wording: CC4U GmbH
Managing Director: Sabine Heiss

Address:
Watttmanngasse 21/9, 1130 Vienna, AT

E-mail: office@cc4u.at

Data Protection Officer
No data protection officer has been appointed as there is no legal requirement to do so

Types of data processed
Inventory data
Contact details
Content data
Usage data
Meta/communication data

Categories of affected persons
Visitors and users of the online offer (hereinafter we also refer to the data subjects collectively as “users”).

Purpose of the processing
Provision of the online offer, its functions and content.
Answering contact requests and communicating with users.
Safety measures.
Reach measurement/marketing

Legal basis
Legal basis and contract

Security measures
We take appropriate technical and organizational measures in accordance with Art. 32 GDPR, taking into account the state of the art, the costs of implementation and the nature, scope, context and purposes of processing as well as the risk of varying likelihood and severity for the rights and freedoms of natural persons, to ensure a level of security appropriate to the risk.

The measures include, in particular, safeguarding the confidentiality, integrity and availability of data by controlling physical access to the data, as well as the access, input, transfer, safeguarding of availability and its separation. We have also set up procedures to ensure that data subjects’ rights are exercised, data is deleted and we respond to data threats. Furthermore, we already take the protection of personal data into account during the development and selection of hardware, software and processes, in accordance with the principle of data protection through technology design and data protection-friendly default settings (Art. 25 GDPR).

Cooperation with processors and third parties
If we disclose data to other persons and companies (processors or third parties) as part of our processing, transfer it to them or otherwise grant them access to the data, this will only be done on the basis of legal permission (e.g. if the transfer of data to third parties, such as payment service providers, is required to fulfill the contract in accordance with Art. 6 para. 1 lit. b GDPR), you have consented, a legal obligation provides for this or on the basis of our legitimate interests (e.g. when using agents, web hosts, etc.).

If we commission third parties with the processing of data on the basis of a so-called “order processing contract”, this is done on the basis of Art. 28 GDPR.

Transfers to third countries
If we process data in a third country (i.e. outside the European Union (EU) or the European Economic Area (EEA)) or if this occurs in the context of the use of third-party services or disclosure or transfer of data to third parties, this will only take place if it is done to fulfill our (pre)contractual obligations, on the basis of your consent, on the basis of a legal obligation or on the basis of our legitimate interests. Subject to legal or contractual permissions, we process or have the data processed in a third country only if the special requirements of Art. 44 et seq. GDPR are met. This means that processing takes place, for example, on the basis of special guarantees, such as the officially recognized determination of a level of data protection corresponding to the EU (e.g. for the USA through the “Privacy Shield”) or compliance with officially recognized special contractual obligations (so-called “standard contractual clauses”).

Rights of the data subjects
You have the right to request confirmation as to whether the data in question is being processed and to request information about this data as well as further information and a copy of the data in accordance with Art. 15 GDPR.

You have accordingly. In accordance with Art. 16 GDPR, you have the right to request the completion of data concerning you or the correction of incorrect data concerning you.

In accordance with Art. 17 GDPR, you have the right to demand that the data in question be deleted immediately or, alternatively, to demand that the processing of the data be restricted in accordance with Art. 18 GDPR.

You have the right to request to receive the data concerning you that you have provided to us in accordance with Art. 20 GDPR and to request that it be transferred to other data controllers.

You also have acc. Art. 77 GDPR the right to lodge a complaint with the competent supervisory authority.

Right of withdrawal
You have the right to withdraw your consent in accordance with. Art. 7 para. 3 GDPR with effect for the future.

Right of objection
You can object to the future processing of data concerning you at any time in accordance with Art. 21 GDPR. The objection may be made in particular against processing for direct marketing purposes.

Cookies and right to object to direct advertising
Cookies” are small files that are stored on users’ computers. Different information can be stored within the cookies. A cookie is primarily used to store information about a user (or the device on which the cookie is stored) during or after their visit to an online service. Temporary cookies, or “session cookies” or “transient cookies”, are cookies that are deleted after a user leaves an online service and closes their browser. For example, the content of a shopping cart in an online store or a login status can be stored in such a cookie. Permanent” or “persistent” cookies are cookies that remain stored even after the browser is closed. For example, the login status can be saved if users visit it after several days. The interests of users can also be stored in such a cookie and used for reach measurement or marketing purposes. Third-party cookies” are cookies that are offered by providers other than the controller who operates the online service (otherwise, if they are only the controller’s cookies, they are referred to as “first-party cookies”).

We may use temporary and permanent cookies and provide information about this in our privacy policy.

If users do not want cookies to be stored on their computer, they are asked to deactivate the corresponding option in the system settings of their browser. Saved cookies can be deleted in the system settings of the browser. The exclusion of cookies can lead to functional restrictions of this online offer.

A general objection to the use of cookies used for online marketing purposes can be declared for a large number of services, especially in the case of tracking, via the US website http://www.aboutads.info/choices/ or the EU website http://www.youronlinechoices.com/. Furthermore, the storage of cookies can be disabled in the browser settings. Please note that you may then not be able to use all the functions of this website.

Use of social media plugins
This website uses Facebook social plugins, which are provided by Facebook Inc. (1 Hacker Way, Menlo Park, California 94025, USA). The integrations are recognizable by the Facebook logo or the terms “Like”, “Like”, “Share” in the Facebook colors (blue and white). Information on all Facebook plugins can be found in the following link: https://developers.facebook.com/docs/plugins/

The plugin establishes a direct connection between your browser and the Facebook servers. The website operator has no influence whatsoever on the nature and scope of the data that the plugin sends to the servers of Facebook Inc. transmitted. You can find more information here: https://www.facebook.com/help/186325668085084

The plugin informs Facebook Inc. that you have visited this website. There is a possibility that your IP address will be stored. If you are logged into your Facebook account during your visit to this website, this information will be linked to it.

If you use the functions of the plugin – for example by sharing or “liking” a post – the corresponding information is also transmitted to Facebook Inc. transmitted.

Do you want to prevent the Facebook. Inc. This data is linked to your Facebook account, please log out of Facebook before visiting this website.

We use the pinterest.com service on our website. Pinterest.com is a service of Pinterest, Inc, 808 Brannan St, San Francisco, CA 94103, USA. Through the integrated “Pin it” button on our site, Pinterest receives the information that you have accessed the corresponding page of our website. If you are logged in to Pinterest, Pinterest can assign this visit to our site to your Pinterest account and thus link the data. The data transmitted by clicking on the “Pin it” button is stored by Pinterest. For more information on the purpose and scope of data collection, its processing and use as well as your rights in this regard and setting options to protect your privacy, please refer to the Pinterest privacy policy, which you can access at http://pinterest.com/about/privacy/.

To prevent Pinterest from associating your visit to our site with your Pinterest account, you must log out of your Pinterest account before visiting our site.

Deletion of data
The data processed by us will be deleted or its processing restricted in accordance with Art. 17 and 18 GDPR. Unless expressly stated in this privacy policy, the data stored by us will be deleted as soon as it is no longer required for its intended purpose and the deletion does not conflict with any statutory retention obligations. If the data are not deleted because they are required for other and legally permissible purposes, their processing will be restricted. This means that the data is blocked and not processed for other purposes. This applies, for example, to data that must be retained for commercial or tax law reasons.

According to legal requirements in Austria, storage is carried out in particular for 7 years in accordance with § 132 para. 1 BAO (accounting documents, receipts/invoices, accounts, receipts, business papers, statement of income and expenditure, etc.), for 22 years in connection with real estate and for 10 years for documents in connection with electronically provided services, telecommunications, radio and television services that are provided to non-entrepreneurs in EU member states and for which the Mini-One-Stop-Shop (MOSS) is used.

Information on data processing in connection with Google Analytics
This website uses Google Analytics, a web analytics service provided by Google Ireland Limited. If the controller responsible for data processing on this website is located outside the European Economic Area or Switzerland, Google Analytics data processing is carried out by Google LLC. Google LLC and Google Ireland Limited are hereinafter referred to as “Google”.

Google Analytics uses so-called “cookies”, text files that are stored on the website visitor’s computer and enable the website visitor’s use of the website to be analyzed. The information generated by the cookie about the use of this website by the site visitor (including the shortened IP address) is usually transmitted to a Google server and stored there.

Google Analytics is used exclusively with the extension “_anonymizeIp()” on this website. This extension ensures anonymization of the IP address by shortening it and excludes the possibility of direct personal references. By extension, Google’s IP address will be shortened beforehand within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. The IP address transmitted by the corresponding browser as part of Google Analytics is not merged with other Google data.

On behalf of the website operator, Google will use the information collected to evaluate the use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage to the website operator (Art. 6 para. 1 lit. f GDPR). The legitimate interest in data processing lies in the optimization of this website, the analysis of the use of the website and the adaptation of the content. The interests of users are adequately protected by pseudonymization.

Google LLC. offers a guarantee of compliance with an appropriate level of data protection on the basis of the standard contractual clauses. The data sent and linked to cookies, user identifiers (e.g. user ID) or advertising IDs are automatically deleted after 50 months. Data that has reached the end of its retention period is automatically deleted once a month.

The collection by Google Analytics can be prevented by the site visitor adjusting the cookie settings for this website. The collection and storage of the IP address and the data generated by cookies can also be objected to at any time with effect for the future. The corresponding browser plugin can be downloaded and installed at the following link: https://tools.google.com/dlpage/gaoptout.

The website visitor can prevent Google Analytics from collecting data on this website by clicking on the following link. An opt-out cookie is set to prevent the future collection of data when visiting this website.

Further information on the use of data by Google, setting and objection options, can be found in Google’s privacy policy (https://policies.google.com/privacy) and in the settings for the display of advertisements by Google (https://adssettings.google.com/authenticated).