Data Protection Declaration

DATA PROTECTION DECLARATION / INFORMATION OBLIGATION

1. General information and responsible party
We, Durstmüller GmbH, Salzburger Str. 59, 4650 Lambach, are responsible for the processing of your data within the meaning of the applicable data protection regulations, in particular the European General Data Protection Regulation (DSGVO) and the DSG. This privacy policy and information obligation relates exclusively to our website and webshop.

As we are not legally obliged to do so, we have not appointed a data protection officer/notified the data protection authority.
Below you will find more detailed information about the data processing we carry out:

2. rights of data subjects/right of objection and cancellation/right to lodge a complaint
2.1. 2.1 You have the following rights with regard to your personal data:
– Right of access (Art 15 GDPR),
– Right to rectification (Art 16 GDPR) or erasure (Art 17 GDPR),
– Restriction of processing (Art 18 GDPR),
– Right to data portability (Art 20 GDPR),
– Right to object to processing (Art 21 GDPR).

Right to object: If the processing of your personal data is based on a balancing of interests (Art 6 para 1 lit f GDPR: legitimate interests), you have the right to object to the processing at any time for reasons arising from your particular situation. When exercising your right to object, we ask you to explain to us your reasons why we should not process your personal data as we have done. We will examine the situation and either discontinue or adapt the data processing or show you our compelling reasons worthy of protection and continue the data processing. We will also continue the data processing if it serves the assertion, exercise or defence of legal claims.
You can object to data processing for the purposes of direct advertising and data analysis at any time. In this case, we will cease data processing.

Right of revocation: If you have given us your consent to process your personal data, you can also revoke this consent at any time. Your revocation does not affect the legality of the data processing carried out until the revocation.
To exercise these rights, you must inform us in person, by telephone or in writing:

Durstmüller GmbH
Salzburger Str. 59, 4650 Lambach
Telephone: +43 7245 28250
e-Mail: office@dula.at

Please note that we can only provide you with information if you can identify yourself.

2.2. If you believe that the data processing violates applicable data protection law or that we are violating your data protection rights, you also have the right to lodge a complaint with the supervisory authority in the member state of your place of residence, your place of work or the place of the alleged violation.
If you would like to submit your complaint to the supervisory authority in Austria, please send it to:

Austrian data protection authority
Barichgasse 40-42
1030 Wien

3. Information about the processing of your personal data

3.1. Visit the website or the Webshops

Purpose: If our website or web shop is only used for informational purposes (no registration and no transmission of other information), personal data is collected, which is transmitted to our server by your browser. This is technically necessary to display our website to you and to ensure the stability and security of the website.
Legal basis: legitimate interest (Article 6 Paragraph 1 Letter f GDPR), Section 96 Paragraph 3 TKG 2003
The following data is processed: IP address, date and time of the request, time zone difference to GMT, content of the request (specific page), access status/HTTP status code, amount of data transferred, requesting website, browser, operating system and interface, language and version of the Browser software
Storage period: As long as you use our website.
Recipient/recipient categories: Processor

3.2. Electronic contact requests via the website

Purpose: Processing contact requests via email or the website contact form.
Legal basis: Fulfillment of a contract, necessary to carry out pre-contractual measures (Article 6 Paragraph 1 lit b GDPR), legitimate interest (Article 6 Paragraph 1 lit f GDPR), Section 96 Paragraph 3 TKG 2003
The following data is processed: master data, content data of the request
Storage period: Until the request is answered. If there are statutory retention requirements, processing will be restricted until then.
Recipient/recipient categories: Processor

3.3. Cookies/web analysis service

Purpose: Improvement of the range of services, website and direct advertising
Legal basis: consent (Article 6 Paragraph 1 lit a GDPR), fulfillment of a contract, necessary to carry out pre-contractual measures (Article 6 Paragraph 1 lit b GDPR), legitimate interest, in particular to improve one’s own services for the benefit of users (Article 6 Paragraph 1 lit f GDPR), Section 96 Paragraph 3 TKG 2003, express consent (Article 49 Paragraph 1 lit a GDPR), fulfillment of a contract, necessary to carry out pre-contractual measures (Article 49 Paragraph 1 lit b GDPR), necessary to fulfill an interest of the data subject (Article 49 Paragraph 1 Letter c GDPR), assertion, exercise and defense of legal claims (Article 49 Paragraph 1 Letter e GDPR)
The following data is processed: IP address
Recipient/recipient categories: Analysis service company/service provider

3.3.1. Use of Google services
This website uses various services from Google Inc, 1600 Amphitheater Parkway, Mountain View, CA 94043, United States (“Google”), if you are a resident of the European Union, the European Economic Area and Switzerland, Google Ireland Limited (registration number: 368047 ), Gordon House, Barrow Street, Dublin 4, Ireland. We will explain to you below exactly which services are used on this website.
You can view further information about Google’s services and the data protection declaration at: https://policies.google.com/privacy?hl=de.

3.3.1.1. Use of Google Analytics
This service uses “cookies” to analyze how the website is used.
Purpose: We use user behavior analysis to optimize both our website and our advertising. We have activated the IP anonymization function on this website. This means that your IP address will be shortened by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area before it is transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. A transfer of the collected information to a third country without an adequate level of security cannot be ruled out.
With your express consent to the processing of cookies, you also agree to the possible processing of your data in the USA.
The information may also be passed on to Google’s contractual partners.

Storage period: 24 months
Order data processing: We have concluded a contract with Google for order data processing.

3.3.1.2. Google Maps
This site uses the map service Google Maps. In order to use the functions of Google Maps, it is necessary to save your IP address. This information is usually transferred to a Google server in the USA and stored there. The operator of this online presence has no influence on this data transfer.
With your express consent to the processing of cookies, you also agree to the possible processing of your data in the USA. The collected information is transferred to a third country without an adequate level of security.

Purpose: The use of Google Maps is in the interest of an attractive presentation of our online offerings and to make it easy to find the places we indicate on the website.

3.3.1.3. Google Fonts
This website uses external fonts, so-called “Google Fonts”. These web fonts are integrated via a server call, which is usually a Google server in the USA.

Purpose: Uniform presentation of our web content across platforms
The following data is processed: IP address

With your express consent to the processing of cookies, you also agree to the possible processing of your data in the USA. The collected information is transferred to a third country without an adequate level of security.

3.3.1.4. YouTube
This website uses plugins from the YouTube site operated by Google. When you visit one of our websites equipped with a YouTube plugin, a connection to YouTube’s servers is established. The YouTube server is informed which of our pages you have visited. This information is usually transferred to a Google server in the USA and stored there. The operator of this website has no influence on this data transfer.

Purpose: The use of plug-ins is in the interest of an attractive presentation and expansion of the level of awareness of our online offerings and our company.
The following data is processed: IP address, location of the dial-in server

3.3.2. WooCommerce
This website uses WooCommerce, a functional cookie from Automattic Inc., 60 29th Street #343, San Francisco, CA 94110, USA.

Purpose: Web shop management, memory function to remember goods in the shopping cart
Recipient/recipient categories: Company of the service provider.

3.3.3. MailChimp
We use the services of the newsletter company MailChimp on our website. The operator of MailChimp is The Rocket Science Group, LLC, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308 USA. Using MailChimp we can easily send you interesting news via newsletter and stay in touch with you. With your express consent, you also agree to any possible processing of your data in the USA.

Sometimes it may happen that you open our newsletter via a link provided for a better display. This is the case, for example, if your email program does not work or the newsletter is not displayed properly. The newsletter is then displayed via a MailChimp website.

Details about the specific data collection and processing by the operator can be found in the following link: https://mailchimp.com/legal/cookies/.

MailChimp is an American company and all data collected is stored on American servers with inadequate levels of security.

In principle, the data remains permanently stored on Mailchimp’s servers and is only deleted when you request it. You can have your contact deleted by us. Das entfernt für uns dauerhaft all Ihre persönlichen Daten und anonymisiert Sie in den Mailchimp-Berichten.

3.3.4. RapidMail
We use the services of the newsletter company RapidMail on our website. The operator of RapidMail is rapidmail GmbH, Wentzingerstraße 21, 79106 Freiburg im Breisgau. Using RapidMail we can easily send you interesting news via newsletter and stay in touch with you. With your express consent, you also agree to possible processing of your data in Germany and the USA.

Details about the specific data collection and processing by the operator can be found in the following link: https://www.rapidmail.de/datenschutz.

RapidMail is a German company and all data collected is stored on German servers.

In principle, the data remains permanently stored on RapidMail’s servers and is only deleted when you request it. You can have your contact deleted by us. This permanently removes all of your personal data for us and anonymizes you in the RapidMail reports.

3.3.5. Facebook
This website uses “Facebook pixels” from Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA, or for residents of the European Union, the European Economic Area and Switzerland, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”). When you visit our pages, a direct connection is established between your browser and the Facebook server via the Facebook pixel. Facebook thereby receives the information that you have visited our site with your IP address. This allows Facebook to assign your visit to our pages to your user account.

The collected information is transferred to a third country without an adequate level of security.

Purpose: We use the data received to display Facebook Ads or for tracking functionalities.

The data collected is anonymous for us as the operator.

Further information can be found in Facebook’s privacy policy at https://www.facebook.com/about/privacy/.

3.4. Customer management, accounting, logistics and bookkeeping

Purpose: Processing of personal data as part of any business relationships with customers and suppliers as part of a commercial activity, including systematic recording of all business transactions relating to income and expenses.
Legal basis: consent (Article 6 Paragraph 1 lit a GDPR), fulfillment of a contract, necessary to carry out pre-contractual measures (Article 6 Paragraph 1 lit b GDPR), fulfillment of a legal obligation (Article 6 Paragraph 1 lit c GDPR), legitimate interest, in particular Defense, exercise and assertion of legal claims (Article 6 Paragraph 1 lit f GDPR), express consent (Article 9 Paragraph 2 lit a GDPR).
Storage period: Until the end of the business relationship or until the expiry of the guarantee, warranty, statute of limitations and statutory retention periods applicable to the client (especially BAO); Furthermore, until the end of any legal disputes in which the data is required as evidence.
Recipient/recipient categories: tax office, courts and authorities, suppliers, debt collection companies for debt collection, banks involved in paying out to the person concerned or to third parties, legal representatives, chartered accountants, wage calculators.

The provision of your personal data is necessary to fulfill the contract or carry out pre-contractual measures. Without this data we cannot conclude a contract with you.

4. Information about data transfers to third countries or to international organizations
As part of the processing activities described in point 3.2 (cookies, web analysis), personal data is also transmitted to third countries. Detailed descriptions can be found in the services listed above.

Data Protection Declaration

Information

Legal

Contact