Privacy Policy
The data controller for the data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is
KRUDOR.OG
Grundsteingasse 60
1160 Vienna
e-mail: office@kruderdorfmeister.com
Tel.: +43 676 4381013
1) Data collection when you visit our website
If you use our website for informational purposes only, i.e. if you do not register or otherwise provide us with information, we only collect the data that your browser transmits to our server (so-called "server log files"). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:
Our visited website
the date and time of access
the amount of data sent in bytes
the source/reference from which you accessed the page
the browser used
Operating system used
IP address used (if applicable: in anonymized form)
The processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to subsequently check the server log files if there are concrete indications of illegal use.
2) Cookies
In order to make visiting our website more attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your device. Some of the cookies we use are deleted after the end of the browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your device and enable your browser to recognize you the next time you visit (so-called persistent cookies). When cookies are set, they collect and process certain user information, such as browser and location data and IP address values, to an individual extent. Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie. You can find the duration of the respective cookie storage in the overview of your web browser's cookie settings.
In some cases, cookies are used to simplify the ordering process by storing settings (e.g. remembering the contents of a virtual shopping cart for a later visit to the website). If personal data is also processed by individual cookies that we use, the processing is carried out in accordance with Art. 6 para. 1 lit. b GDPR either to fulfill the contract, in accordance with Art. 6 para. 1 lit. a GDPR in the event of consent being given or in accordance with Art. 6 para. 1 lit. f GDPR to safeguard our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the site visit.
Please note that you can set your browser to inform you when cookies are set and to decide individually whether to accept them or to exclude the acceptance of cookies for certain cases or in general. Each browser differs in the way it manages cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. You can find these for the respective browsers under the following links:
Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Chrome: https://support.google.com/chrome/answer/95647?hl=de&hlrm=en
Safari: https://support.apple.com/de-de/guide/safari/sfri11471/mac
Opera: https://help.opera.com/de/latest/web-preferences/#cookies
Please note that if you do not accept cookies, the functionality of our website may be limited.
3) Contacting us & hosting
When you contact us (e.g. via the contact form or by e-mail), personal data is collected. The data collected in the case of a contact form can be seen from the respective contact form. This data is stored and used exclusively for the purpose of answering your request or for contacting you and the associated technical administration. The legal basis for the processing of this data is Art. 6 para. 1 lit. b GDPR (necessary for the performance of pre-contractual measures). Your data will be deleted 3 years after your request has been processed.
Squarespace
We use the system of the following provider to host our website and display the page content: Squarespace, Le Pole House, Ship Street Great, Dublin 8, Ireland
All data collected on our website is processed on the provider's servers.
We have concluded a data processing agreement with the provider that ensures the protection of the data of our website visitors and prohibits unauthorized disclosure to third parties.
As part of the aforementioned services, data may also be transferred to Squarespace Inc. in the USA for further processing on their behalf.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European data protection level on the basis of an adequacy decision by the European Commission.
4) Data processing for contract fulfillment
Contract processing
In accordance with Art. 6 Para. 1 lit. b GDPR, personal data is collected and processed if you provide it to us for the purpose of executing a contract. The data collected can be seen from the respective order form. We store and use the data provided by you for the purpose of executing the contract. After the contract has been fully executed or your customer account has been deleted, your data will be deleted in accordance with the retention periods under tax and commercial law (currently 7 years).
5) Data processing for order processing
5.1 Insofar as necessary for the processing of the contract for delivery and payment purposes, the personal data collected by us will be passed on to the commissioned transport company and the commissioned credit institution in accordance with Art. 6 Para. 1 lit. b GDPR.
In order to process your order, we also work with the following service provider(s), who support us in the execution of contracts concluded with you, either in whole or in part. Certain personal data is transferred to these service providers in accordance with the following information.
5.2 Use of special service providers for order processing and fulfillment
In order to fulfill our contractual obligations to our customers, we also work with other external shipping partners.
We use the following providers as transportation service providers: DPD Deutschland GmbH, Wailandtstraße 1, 63741 Aschaffenburg, Germany; Österreichische Post Aktiengesellschaft, Rochusplatz 1, 1030 Vienna, Austria; Die Wein-Lagerlogistik GmbH
Heidehofweg 9, A-7111 Parndorf; DPD Direct Parcel Distribution Austria GmbH, Arbeitergasse 46, A-2333 Leopoldsdorf.
We will pass on your name and delivery address, and if necessary your e-mail address and telephone number for delivery purposes, exclusively for the purpose of delivering the goods in accordance with Art. 6 Para. 1 lit. b GDPR to the transport service provider.
5.3 Use of payment service providers (payment services)
Apple Pay
If you choose the payment method "Apple Pay" from Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland, the payment will be processed via the "Apple Pay" function of your iOS, watchOS or macOS-based device by debiting a payment card stored with "Apple Pay". Apple Pay uses security features that are integrated into the hardware and software of your device to protect your transactions. To authorize a payment, you must enter a code that you have previously defined and verify it using the "Face ID" or "Touch ID" function on your device.
For the purpose of payment processing, the information you provide during the ordering process, along with information about your order, is transmitted to Apple in encrypted form. Apple then encrypts this data again with a developer-specific key before the data is transmitted to the payment service provider of the payment card stored in Apple Pay to complete the payment. The encryption ensures that only the website through which the purchase was made can access the payment data. After the payment has been made, Apple sends your device account number and a transaction-specific, dynamic security code to the originating website to confirm that the payment has been successful.
If personal data is processed in the course of the described transmissions, this is done exclusively for the purpose of payment processing in accordance with Art. 6 Para. 1 lit. b GDPR.
Apple stores anonymized transaction data, including the approximate purchase amount, the approximate date and time, and whether the transaction was successfully completed. The anonymization completely excludes any personal reference. Apple uses the anonymized data to improve "Apple Pay" and other Apple products and services.
When you use Apple Pay on your iPhone or Apple Watch to complete a purchase you made on Safari on your Mac, your Mac and the authorization device communicate over an encrypted channel on Apple's servers. Apple does not process or store any of this information in a format that can be used to identify you. You can disable the ability to use Apple Pay on your Mac in your iPhone settings. Go to "Wallet & Apple Pay" and disable "Allow payments on Mac".
For more information on Apple Pay privacy, please visit https://support.apple.com/de-de/HT203027
Stripe
This website offers one or more online payment methods from the following provider: Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland
If you select a payment method from the provider that requires you to pay in advance (e.g. credit card payment), the payment data you provide during the ordering process (including name, address, bank and payment card information, currency and transaction number) and information about the content of your order will be passed on to the provider in accordance with Art. 6 para. 1 lit. b GDPR. In this case, your data will be passed on exclusively for the purpose of payment processing with the provider and only to the extent necessary for this purpose.
If you select a payment method in which the provider makes advance payments (e.g. purchase on account or installment purchase or direct debit), you will also be asked to provide certain personal data (first and last name, street, house number, postcode, city, date of birth, e-mail address, telephone number, and, if applicable, data on an alternative means of payment) during the order process.
In order to safeguard our legitimate interest in determining the solvency of our customers, we will forward this data to the provider for the purpose of a credit check in accordance with Art. 6 Para. 1 lit. f GDPR. The provider will use the personal data you have provided and other data (such as shopping cart, invoice amount, order history, payment experiences) to determine whether the payment option you have selected can be granted with regard to payment and/or default risks.
The credit report may contain probability values (so-called score values). Insofar as score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. Address data, among other things, but not exclusively, are included in the calculation of the score values.
You can object to this processing of your data at any time by sending us a message or by contacting the provider. However, the provider may still be entitled to process your personal data if this is necessary for the contractual payment processing.
6) Use of your data for direct marketing
6.1 Subscription to our e-mail newsletter
If you register for our e-mail newsletter, we will send you regular information about our offers. The only mandatory information for sending the newsletter is your e-mail address.
By registering, you give us your consent to use your personal data in accordance with Art. 6 para. 1 lit. a GDPR. When you register for the newsletter, we store your IP address as registered by your Internet service provider (ISP) as well as the date and time of registration in order to be able to trace any possible misuse of your e-mail address at a later date. The data collected by us when you register for the newsletter will be used exclusively for the purpose of advertising in the newsletter. You can unsubscribe from the newsletter at any time using the link provided in the newsletter or by sending us a message to that effect. After you have unsubscribed, your e-mail address will be deleted from our newsletter distribution list immediately.
6.2 Sending the e-mail newsletter to existing customers
If you have provided us with your e-mail address when purchasing goods or services, we reserve the right to send you regular offers by e-mail for similar goods or services to those already purchased from our range. We do not need to obtain your separate consent for this in accordance with § 174 TKG. The data processing is carried out solely on the basis of our legitimate interest in personalized direct advertising in accordance with Art. 6 para. 1 lit. f GDPR and § 174 TKG. If you initially objected to the use of your e-mail address for this purpose, we will not send you any e-mails. You are entitled to object to the use of your e-mail address for the aforementioned advertising purposes at any time with effect for the future by notifying us.
7) Consent tool
This website uses a so-called "cookie consent tool" to obtain effective user consent for cookies and cookie-based applications that require consent. The "cookie consent tool" is displayed to users when they visit the site in the form of an interactive user interface, where they can give their consent to certain cookies and/or cookie-based applications by ticking the appropriate boxes. When the tool is used, all cookies/services requiring consent are only loaded if the respective user grants the corresponding consent by ticking the box. This ensures that such cookies are only set on the user's device if consent has been granted.
The tool sets technically necessary cookies to store your cookie preferences. Personal user data is not processed in this process.
If, in individual cases, personal data (such as the IP address) is processed for the purpose of storing, assigning or logging cookie settings, this is done in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in a legally compliant, user-specific and user-friendly consent management for cookies and thus in a legally compliant design of our website.
A further legal basis for the processing is Art. 6 para. 1 lit. c GDPR. As the controller, we are legally obliged to make the use of technically unnecessary cookies dependent on the respective user's consent.
Where necessary, we have concluded a data processing agreement with the provider that ensures the protection of the data of our website visitors and prohibits unauthorized disclosure to third parties.
Further information about the operator and the settings options for the cookie consent tool can be found directly in the corresponding user interface on our website.
8) Rights of the data subject
8.1 The applicable data protection law grants you extensive rights as a data subject vis-à-vis the controller with regard to the processing of your personal data, which we will inform you about below:
Right of access pursuant to Art. 15 GDPR: In particular, you have the right to access your personal data processed by us, the purposes of processing, the categories of personal data processed, the recipients or categories of recipients to whom your data has been or will be disclosed, the planned storage period or the criteria for determining the storage period, the existence of a right to rectification, erasure, restriction of processing, objection to the processing, complaint to a supervisory authority, the origin of your data if it was not collected by us from you, the existence of automated decision-making including profiling and, if applicable, meaningful information about the logic involved and the scope and intended impact of such processing on you, as well as your right to be informed of the guarantees in accordance with Art. 46 GDPR when your data is transferred to third countries;
Right to rectification pursuant to Art. 16 GDPR: You have the right to have inaccurate data concerning you rectified without undue delay and/or incomplete data stored by us completed;
Right to erasure pursuant to Art. 17 GDPR: You have the right to request the erasure of your personal data if the conditions of Art. 17 (1) GDPR are met. However, this right does not apply if the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defense of legal claims;
Right to restriction of processing in accordance with Art. 18 GDPR: You have the right to request the restriction of the processing of your personal data as long as the accuracy of your data, which you have contested, is being verified, if you refuse to delete your data due to inadmissible data processing and instead request the restriction of the processing of your data if you need your data to assert, exercise or defend legal claims, after we no longer need this data after the purpose has been achieved, or if you have objected for reasons of your particular situation, as long as it is not yet clear whether our legitimate reasons prevail;
Right to be informed in accordance with Art. 19 GDPR: If you have asserted your right to rectification, erasure or restriction of processing against the controller, the controller is obliged to notify all recipients to whom your personal data has been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort. You have the right to be informed about these recipients.
Right to data portability in accordance with Art. 20 GDPR: You have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format or to request that it be transferred to another controller, provided that this is technically feasible;
Right to withdraw consent pursuant to Art. 7 (3) GDPR: You have the right to withdraw consent to the processing of data at any time with effect for the future. In the event of withdrawal, we will delete the data concerned without delay, provided that further processing cannot be based on a legal basis for processing without consent. The withdrawal of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the withdrawal;
Right to lodge a complaint pursuant to Art. 77 GDPR: If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with a supervisory authority, in Austria the data protection authority
8.2 Right of objection
If your personal data is processed on the basis of our overriding interest, you have the right to object to this processing at any time with effect for the future. However, further processing remains reserved if there are compelling reasons for further processing.
9) Duration of storage of personal data
The duration of the storage of personal data is determined by the respective legal basis, the purpose of the processing and – if applicable – additionally by the respective statutory retention period (e.g. retention periods under company and tax law).
When personal data is processed on the basis of explicit consent in accordance with Art. 6 (1) (a) GDPR, this data is stored until the data subject withdraws their consent.
If there are statutory retention periods for data that is processed in the context of legal or similar obligations on the basis of Art. 6 para. 1 lit. b GDPR, this data will be routinely deleted after the retention periods have expired, provided that it is no longer required for the fulfillment or initiation of the contract and/or we have no legitimate interest in further storage.
When processing personal data for the purpose of direct marketing on the basis of Art. 6 para. 1 lit. f GDPR, this data will be stored until the data subject exercises his right of objection in accordance with Art. 21 para. 2 GDPR.
Unless otherwise stated in the other information in this declaration regarding specific processing situations, stored personal data will otherwise be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.