Privacy Policy
PREAMBLE
The protection of your privacy and your data is very important to us and is always taken into account in all business transactions.
By using this website, you consent to the use of your personal data (hereinafter referred to as "data") as described in this privacy policy. All personal designations are to be understood as gender-neutral.
In principle, you can use our website without providing any personal data. However, different regulations may apply to individual services, which we will inform you about separately below.
GENERAL INFORMATION
Purpose of processing your data (on this website) is to provide information on sustainable agricultural products and to present and offer related goods. In this privacy policy, we inform you about, among other things, the name and contact details of the data controller, all purposes for which your data is processed, the legal bases on which the processing activities are based, including, where applicable, our legitimate interest, all recipients of your data, any transfer of your data to a third country and the legal basis for this, the storage period of your data or the criteria for determining the duration, the categories of your data that are processed, the origin of your data, and the rights of data subjects.
THE DATA CONTROLLER IS
TRAKTRAK FlexCo (company in formation)
Address: Retzenwinklerstraße 9, 4407 Steyr, Austria
Managing Director: Stefan Bermadinger
A data protection officer has not been appointed, as this is not legally required.
YOUR RIGHTS
You You have the following rights with respect to your personal data:
Right of access
Right to rectification or erasure
Right to restriction of processing
Right to object to processing
Right to data portability
Right to withdraw your consent
You also have the right to lodge a complaint with a data protection supervisory authority regarding our processing of your personal data.
You can contact us at any time with any questions regarding this or other matters related to personal data.
RIGHT OF ACCESS
You have the right to obtain from us, at any time and free of charge, information about the personal data we hold about you and a copy of this information, including the purposes of the processing, the categories of personal data being processed, the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organizations, where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period, and the existence of the right to request rectification. or erasure of your personal data, or restriction of processing by us, or the right to object to such processing; the existence of a right to lodge a complaint with a supervisory authority; if the personal data are not collected from the data subject: all available information about the source of the data; the existence of automated decision-making, including profiling, pursuant to Article 22(1) and (4) GDPR and – at least in those cases – meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject. Furthermore, you have the right to be informed whether personal data have been transferred to a third country or to an international organization. Where this is the case, you also have the right to be informed of the appropriate safeguards relating to the transfer.
RIGHT TO RECORDING
You have the right to request the immediate rectification of inaccurate personal data concerning you. Furthermore, taking into account the purposes of the processing, you have the right to have incomplete personal data completed, including by means of providing a supplementary statement.
RECHT AUF WIDERSPRUCH
Sie haben das Recht, aus Gründen, die sich aus Ihrer besonderen Situation ergeben, jederzeit gegen die Verarbeitung Ihrer betreffenden personenbezogenen Daten, die aufgrund von Art. 6 Abs. 1 lit. e oder f DSGVO erfolgt, Widerspruch einzulegen. Dies gilt auch für ein auf diese Bestimmungen gestütztes Profiling.
Wir verarbeiten die personenbezogenen Daten im Falle des Widerspruchs nicht mehr, es sei denn, wir können zwingende schutzwürdige Gründe für die Verarbeitung nachweisen, die den Interessen, Rechten und Freiheiten von Ihnen überwiegen, oder die Verarbeitung dient der Geltendmachung, Ausübung oder Verteidigung von Rechtsansprüchen.
Verarbeiten wir personenbezogene Daten, um Direktwerbung zu betreiben, so haben Sie das Recht, jederzeit Widerspruch gegen die Verarbeitung Ihrer personenbezogenen Daten zum Zwecke derartiger Werbung einzulegen. Dies gilt auch für das Profiling, soweit es mit solcher Direktwerbung in Verbindung steht.
Widersprechen Sie uns, für Zwecke bei der Verarbeitung der Direktwerbung, so werden wir Ihre personenbezogenen Daten nicht mehr für diese Zwecke verarbeiten.
Zudem haben Sie das Recht, aus Gründen, die sich aus Ihrer besonderen Situation ergeben, gegen die Verarbeitung personenbezogener Daten, die bei uns zu wissenschaftlichen oder historischen Forschungszwecken oder zu statistischen Zwecken gemäß Art. 89 Abs. 1 DSGVO erfolgen, Widerspruch einzulegen, es sei denn, eine solche Verarbeitung ist zur Erfüllung einer im öffentlichen Interesse liegenden Aufgabe erforderlich.
Automatisierte Entscheidungen im Einzelfall einschließlich Profiling
Sie haben das Recht, nicht einer ausschließlich auf einer automatisierten Verarbeitung — einschließlich Profiling — beruhenden Entscheidung unterworfen zu werden, die Ihnen gegenüber rechtliche Wirkung entfalten oder Sie in ähnlicher Weise erheblich beeinträchtigt, sofern die Entscheidung (1) nicht für den Abschluss oder die Erfüllung eines Vertrags zwischen Ihnen und uns erforderlich ist, oder (2) aufgrund von Rechtsvorschriften der Union oder der Mitgliedstaaten, denen wir unterliegen, zulässig ist und diese Rechtsvorschriften angemessene Maßnahmen zur Wahrung Ihrer Rechte und Freiheiten sowie Ihrer berechtigten Interessen enthalten oder (3) mit Ihrer ausdrücklicher Einwilligung erfolgt.
Recht auf Widerruf einer datenschutzrechtlichen Einwilligung
Sie haben das Recht, eine Einwilligung zur Verarbeitung personenbezogener Daten jederzeit zu widerrufen. Durch Ihren Widerruf wird die Rechtmäßigkeit der bis zum Widerruf erfolgten Datenverarbeitung aber nicht berührt.
MINDERJÄHRIGE
Unsere Website und unsere Services sind nicht zur Nutzung durch Minderjährige bestimmt, und wir wollen keine Daten von Minderjährigen erheben. Ist ein Elternteil oder ein Vormund eines Minderjährigen der Auffassung, dass sein Kind uns gegenüber personenbezogene Daten angegeben haben könnte, so schreiben Sie uns an die nachstehend angegebenen Kontaktmöglichkeiten, und wir werden diese personenbezogenen Daten dann vorbehaltlich geltendem Recht und dieser Policy löschen.
DATENSICHERHEIT
Wir verwenden angemessene technische und organisatorische Maßnahmen und Sicherheitsvorkehrungen (TOMs), die dazu dienen, den unberechtigten Zugriff, die rechtswidrige Verarbeitung und den unbefugten oder zufälligen Verlust Ihrer Daten zu verhindern.
Dazu gehört beispielsweise die Verschlüsselung Ihrer Kommunikation mit uns über diese Website basierend auf dem Verschlüsselungsprotokoll Secure Socket Layer (SSL).
Sie können die Qualität unserer Verschlüsselung hier prüfen: https://www.ssllabs.com/ssltest
Es ist uns wichtig darauf hinzuweisen, dass die Datenübertragung im Internet Sicherheitslücken aufweisen kann, da ein lückenloser Schutz vor dem Zugriff durch unbefugte Dritte nicht möglich ist.
RIGHT TO ERASURE
You have the right to request that we erase your personal data without undue delay if one of the following grounds applies and processing is not necessary:
The personal data are no longer necessary for the purposes for which they were collected or otherwise processed.
You withdraw your consent on which the processing was based according to Article 6(1)(a) GDPR or Article 9(2)(a) GDPR, and there is no other legal ground for the processing.
You object to the processing pursuant to Article 21(1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Article 21(2) GDPR.
The personal data have been unlawfully processed.
The erasure of the personal data is necessary for compliance with a legal obligation under Union or Member State law to which the controller is subject.
The personal data was collected in relation to information society services offered pursuant to Article 8(1) GDPR.
RIGHT TO BE FORGOTTEN
If we have made your personal data public and our company, as the controller, is obliged to erase the personal data pursuant to Article 17(1) GDPR, we will take reasonable steps, including technical measures, taking into account available technology and the cost of implementation, to inform other controllers processing the published personal data that you have requested the erasure of all links to, or copies or replications of, that personal data, insofar as processing is not necessary.
RIGHT TO RESTRICTION OF PROCESSING
You have the right to request that we restrict the processing of your personal data if one of the following applies:
You contest the accuracy of the personal data, for a period enabling us to verify the accuracy of the personal data.
The processing is unlawful, you object to the erasure of your personal data and request instead the restriction of its use.
We no longer need your personal data for the purposes of processing, but you require it for the establishment, exercise, or defense of legal claims.
You have objected to the processing pursuant to Article 21(1) GDPR, and it is not yet clear whether our legitimate grounds override yours.
RIGHT TO DATA PORTABILITY
You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used, and machine-readable format.
You also have the right to transmit this data to another controller without hindrance from us, provided that the processing is based on consent pursuant to Article 6(1)(a) GDPR or Article 9(2)(a) GDPR or on a contract pursuant to Article 6(1)(b) GDPR, and the processing is carried out by automated means, unless the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us.
Furthermore, when exercising your right to data portability, you have the right to have the personal data transmitted directly from us to another controller, where technically feasible and provided that this does not adversely affect the rights and freedoms of others.
WEB HOST
The server hosting this website is operated by Wix.com Ltd., with whom we have a data processing agreement.
SERVER LOG FILES
Our website automatically collects a range of general data and information each time you access it.
This general data and information is stored in the log files of our server at hostserv.eu.
...
CAN BE RECORDED
The browser types and versions used
The operating system used by the accessing system
The website from which an accessing system reached our website (so-called referrer)
The subpages accessed on our website by an accessing system
The date and time of access to the website
An internet protocol address (IP address)
The internet service provider of the accessing system
Other similar data and information that serves to prevent attacks on our IT systems.
We do not draw any conclusions about you from the use of this general data and information.
When using this general data and information, we do not draw any conclusions about you.
This information is required to:
deliver the content of our website correctly
optimize the content of our website and the advertising for it
ensure the continued functionality of our IT systems and the technology of our website
provide law enforcement agencies with the information necessary for prosecution in the event of a cyberattack.
We analyze this anonymously collected data and information statistically and also with the aim of increasing data protection and data security within our company, ultimately to ensure the highest possible level of protection for you. We are permitted to process this data based on our legitimate interest pursuant to Article 6(1)(f) GDPR.
The logs are stored separately from all personal data you provide and are deleted after a maximum of two months.
COOKIES
When you access and use this website, cookies (YouTube, Google Analytics, session cookies) are processed.
Cookies are small text files that are stored on your local computer.
Transient cookies are automatically deleted when you close your browser. These include session cookies, which store a session ID that allows different requests from your browser to be associated with the same session. This allows your computer to be recognized when you return to our website. Session cookies are deleted when you log out or close your browser.
Persistent cookies are automatically deleted after a predetermined period, which can vary depending on the cookie. You can delete cookies at any time in your browser's security settings.
First-party cookies are cookies that are stored by the website you are visiting. These include, for example, session cookies (to ensure the website's functionality), webshop cookies (to temporarily store information for the shopping cart), and Google Analytics cookies (to track website activity).
Third-party cookies are cookies that are set, for example, when iFrames are embedded, i.e., when a YouTube video is embedded or a doubleclick.net cookie is set for personalized advertising.
You can find more details about YouTube and Google Analytics cookies below.
HOW DO WE COLLECT YOUR DATA ONLINE?
Currently, you can enter data on our website and send us an email. Please note that unencrypted emails sent over the internet are not adequately protected against unauthorized access by third parties.
NEWSLETTER
With your consent, you can subscribe to our newsletter, which will keep you informed about our current special offers.
You can only receive our company's newsletter if (1) you have a valid email address and (2) you have registered to receive the newsletter.
A confirmation email will be sent to the email address you initially provided for newsletter registration. This confirmation email, sent via a double opt-in process, asks you to confirm that you wish to receive the newsletter.
This confirmation email serves to verify that you, as the owner of the email address, have authorized the receipt of the newsletter.
The purpose of this process is to document your registration and, if necessary, to investigate any potential misuse of your personal data.
WHY DO WE PROCESS YOUR DATA?
If you contact us, for example, simply to request information, we process your data for this purpose. If you contact us, for example, to conclude a contract, we process your data for this purpose.
For processing your order, including customer support
If you provide your order details via email, the data you provide, including your personal data, will be processed by us and the recipients listed below for the purpose of order processing within the framework of our business relationship with you, for (pre-)contract processing, to process and manage your order, and to provide you with customer support.
WHY ARE WE ALLOWED TO PROCESS YOUR DATA?
If you contact us, for example, simply to request information, we are permitted to process your data based on your consent pursuant to Article 6 Paragraph 1 Letter a GDPR or Article 6 Paragraph 1 Letter f GDPR. When you contact us, for example, to conclude a contract, we may process your data based on Article 6 Paragraph 1 Letter b GDPR and, if applicable, store it based on Article 6 Paragraph 1 Letter c GDPR.
MARKETING (GENERAL)
Legitimate interest: Article 6 Paragraph 1 Sentence 1 Letter f GDPR. The legitimate interest is our interest in initiating and intensifying business relationships with existing and potential customers.
WHAT DATA DO WE PROCESS?
INQUIRY
If you contact us simply to obtain information from us, we process the data you provide.
Providing information is entirely voluntary. However, we expressly ask you not to disclose any data that is likely to have little or no relevance to your intended purpose; this applies in particular to special categories of personal data (“sensitive”).
NEWSLETTER
The personal data transmitted to us when you subscribe to our newsletter is determined by the input form used for this purpose.
The only mandatory information required to send you the newsletter is your email address.
Providing other, separately marked data is voluntary and is used to personalize our communications with you.
When you subscribe to the newsletter, we also store the IP address assigned to you by your internet service provider (ISP), the computer system you used at the time of registration, and the date and time of registration.
Collecting this data is necessary to be able to trace any (potential) misuse of your email address at a later date and therefore serves as legal protection for us.
WHO WILL YOUR DATA BE SHARED WITH?
Your data may be shared in whole or in part, but always only to the extent and to the extent necessary, with the following controllers:
Banks (payment processing – Austria)
Tax advisors (accounting – Austria)
Debt collection agencies (debt recovery – Austria)
Legal representatives (enforcement of rights – Austria)
Courts (enforcement of rights – Austria)
Administrative authorities (Austria)
HOW LONG DO WE PROCESS YOUR DATA?
Your data will be stored in a form that permits your identification only for as long as is necessary for the purpose for which it is processed.
INFORMATION REQUEST
By providing us with your data via email, you expressly consent to the processing of your data, including the personal data you provide and any special categories of personal data you may voluntarily and unsolicited, by us and the recipients listed above for the duration of the processing of this inquiry.
If you contact us solely to obtain information, your data will therefore be deleted either immediately or after a reasonable period of time, depending on the content of the communication.
If you revoke your consent, we will delete all of your data – including any accumulated data – from all databases.
ORDER
Due to commercial and tax law requirements, we are obligated to store your address, payment, and order data for a period of 7 years. If you contact us to conclude a contract, the data will be deleted at the end of the 7th year after the last invoice has been processed (§ 132 BAO). In the event of a contract being concluded, all data from the contractual relationship will therefore be stored until the expiry of this period.
Legal retention obligations or contractual obligations, e.g., towards customers regarding warranty or compensation claims, or towards contractual partners, constitute a further basis for continuing to store your data (Art. 6 para. 1 sentence 1 lit. c GDPR; Art. 17 para. 3 lit. e GDPR).
The data categories name, address, purchased goods, and date of purchase will be stored beyond this period until the expiry of the product liability period (10 years).
COOKIES
Cookies do not harm your computer and do not contain viruses. Cookies are used to make my website more user-friendly, effective, and secure. Cookies are small text files that are stored on your computer and saved by your browser. Most of the cookies used are so-called "session cookies." They are automatically deleted after your visit ends. Other cookies remain stored on your device until you delete them. These cookies allow me to recognize your browser on your next visit. You can configure your browser to notify you when cookies are set and to allow cookies only in individual cases, to block cookies in certain cases or entirely, or to automatically delete cookies when you close your browser. Disabling cookies may limit the functionality of this website.
Use of Social Media Plug-ins
We only include links to our Facebook, Twitter, and Instagram pages.
YouTube
We have embedded YouTube videos in our online content. These videos are stored on https://www.YouTube.com and can be played directly from our website.
The legal basis for using YouTube is our legitimate interest, pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR, in optimizing and expanding our online services for the economic operation of our website and creating an attractive offering for users by embedding our content and services. You have the right to object to this at any time.
Furthermore, our YouTube videos on this website are embedded in "enhanced privacy mode," meaning that no data about you as a user is transmitted to YouTube unless you play the videos. Data is only transmitted when you play the videos. We have no control over this data transmission.
If you are logged into Google, your data will be directly associated with your account.
If you do not want this association with your YouTube profile, you must log out before playing the video.
You have the right to object to the creation of these user profiles, and to exercise this right, you must contact YouTube.
Further information on the purpose and scope of data collection and processing by YouTube can be found in their privacy policy. There you will also find further information on your rights and settings options to protect your privacy: https://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA and has committed to the EU-US Privacy Shield: https://www.privacyshield.gov/EU-US-Framework.
Embedded YouTube videos typically also activates DoubleClick by Google. General information about DoubleClick by Google can be found at https://www.google.de/doubleclick and http://support.google.com/adsense/answer/2839090, as well as general information about Google's privacy practices: https://www.google.de/intl/de/policies/privacy.