PRIVACY POLICY
PREAMBLE
The protection of your privacy and data is very important to us and is always taken into account in all business transactions. By using this website, you consent to the use of your personal data (i.e. "data") as described in this privacy policy. All personal designations are to be understood in a gender-neutral manner. In principle, you can use our website without providing any personal data. However, other regulations may apply to individual services, which we will refer to separately below.
GENERAL
The purpose of the processing of your data (on this website is the provision of information on products of sustainable agriculture and the presentation and offer of goods on this topic. In this privacy policy, we inform you, among other things, about the name and contact details of the controller, all the purposes for which your data is processed, the legal bases on which the processing activities are based, including, if applicable, our legitimate interest, all recipients of your data, a possible transfer of your data to a third country and the presentation of the legal basis for this, the storage period of your data or the criteria for determining the duration of the data Categories of your data that are processed, the origin of your data, the rights of the data subjects.
THE PERSON RESPONSIBLE FOR DATA PROTECTION IS
TRAKTRAK FlexCo
Adress:
Retzenwinklerstraße 9
4407 Steyr, Austria
Management:
DI Stefan Bermadinger
Ing. Philipp Schübl, MSc.
No data protection officer has been appointed, as this is not required by law.
YOUR RIGHTS
You have the following rights vis-à-vis us in relation to personal data concerning you: Right to information Right to rectification or erasure Right to restriction of processing Right to object to processing Right to data portability Right to withdraw your consent You also have the right to complain to a data protection supervisory authority about the processing of your personal data by us. You can contact us at any time for this and other questions on the subject of personal data.
RECHT AUF AUSKUNFT
Sie haben das Recht, jederzeit von uns unentgeltliche Auskunft über die zu Ihrer Person gespeicherten personenbezogenen Daten und eine Kopie dieser Auskunft zu erhalten, dabei über die Verarbeitungszwecke die Kategorien personenbezogener Daten, die verarbeitet werden die Empfänger oder Kategorien von Empfängern, gegenüber denen die personenbezogenen Daten offengelegt worden sind oder noch offengelegt werden, insbesondere bei Empfängern in Drittländern oder bei internationalen Organisationen falls möglich die geplante Dauer, für die die personenbezogenen Daten gespeichert werden, oder, falls dies nicht möglich ist, die Kriterien für die Festlegung dieser Dauer das Bestehen eines Rechts auf Berichtigung oder Löschung der Sie betreffenden personenbezogenen Daten oder auf Einschränkung der Verarbeitung durch uns oder eines Widerspruchsrechts gegen diese Verarbeitung das Bestehen eines Beschwerderechts bei einer Aufsichtsbehörde wenn die personenbezogenen Daten nicht bei der betroffenen Person erhoben werden: Alle verfügbaren Informationen über die Herkunft der Daten das Bestehen einer automatisierten Entscheidungsfindung einschließlich Profiling gemäß Artikel 22 Abs.1 und 4 DSGVO und — zumindest in diesen Fällen — aussagekräftige Informationen über die involvierte Logik sowie die Tragweite und die angestrebten Auswirkungen einer derartigen Verarbeitung für die betroffene Person. Ferner steht Ihnen ein Auskunftsrecht darüber zu, ob personenbezogene Daten an ein Drittland oder an eine internationale Organisation übermittelt wurden. Sofern dies der Fall ist, so steht Ihnen im Übrigen das Recht zu, Auskunft über die geeigneten Garantien im Zusammenhang mit der Übermittlung zu erhalten.
RIGHT TO ENTITLEMENT
You have the right to request the immediate rectification of any inaccurate personal data concerned. You also have the right to request the completion of incomplete personal data, including by means of a supplementary statement, taking into account the purposes of the processing.
RIGHT TO ERASURE
You have the right to request that we delete your personal data without delay if any of the following grounds apply and provided that the processing is not necessary:
The personal data was collected or otherwise processed for purposes for which it is no longer necessary.
You withdraw your consent on which the processing was based pursuant to Article 6(1)(a) of the GDPR or Article 9(2)(a) of the GDPR, and there is no other legal basis for the processing.
You object to the processing pursuant to Article 21(1) of the GDPR, and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Article 21(2) of the GDPR.
The personal data has been processed unlawfully.
The erasure of the personal data is necessary to comply with a legal obligation under Union law or the law of the Member States to which the controller is subject.
The personal data was collected in connection with information society services offered pursuant to Article 8(1) of the GDPR.
RIGHT TO BE FORGOTTEN
If we have made the personal data public and our company, as the controller, is obligated under Article 17(1) of the GDPR to erase the personal data, we will take appropriate measures—including technical measures—taking into account the available technology and the costs of implementation, to inform other controllers who process the published personal data that you have requested that these other controllers delete all links to this personal data or any copies or replicas of this personal data, provided that the processing is not necessary.
RIGHT TO RESTRICTION OF PROCESSING
You have the right to request that we restrict the processing of your personal data if any of the following conditions apply:
You contest the accuracy of the personal data, for a period that allows us to verify the accuracy of the personal data.
The processing is unlawful, you object to the erasure of the personal data, and instead request that the use of the personal data be restricted.
We no longer need the personal data for the purposes of processing, but you need it to assert, exercise, or defend legal claims.
You have objected to the processing pursuant to Article 21(1) of the GDPR, and it has not yet been determined whether our legitimate grounds override yours.
RIGHT TO DATA PORTABILITY
You have the right to receive your personal data, as provided by us, in a structured, commonly used, and machine-readable format.
You also have the right to transmit this data to another controller without hindrance from us, provided that the processing is based on consent pursuant to Article 6(1)(a) of the GDPR or Article 9(2)(a) of the GDPR or on a contract pursuant to Article 6(1)(b) of the GDPR, and the processing is carried out by automated means, provided that the processing is not necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us.
Furthermore, when exercising your right to data portability, you have the right to have the personal data transferred directly from us to another controller, provided this is technically feasible and does not infringe upon the rights and freedoms of others.
RIGHT TO OBJECT
You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data that is carried out pursuant to Article 6(1)(e) or (f) of the GDPR. This also applies to profiling based on these provisions.
In the event of an objection, we will no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defense of legal claims.
If we process personal data for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing purposes. This also applies to profiling to the extent that it is related to such direct marketing.
If you object to our processing of your personal data for direct marketing purposes, we will no longer process your personal data for those purposes.
In addition, you have the right to object, on grounds relating to your particular situation, to the processing of personal data that we carry out for scientific or historical research purposes or for statistical purposes pursuant to Article 89(1) of the GDPR, unless such processing is necessary for the performance of a task carried out in the public interest.
Automated Individual Decision-Making, Including Profiling
You have the right not to be subject to a decision based solely on automated processing—including profiling—that produces legal effects concerning you or similarly significantly affects you, provided that the decision (1) is not necessary for entering into or performing a contract between you and us, or (2) is authorized by Union or Member State law to which we are subject, and that law provides for appropriate measures to safeguard your rights and freedoms as well as your legitimate interests; or (3) is based on your explicit consent.
Right to Withdraw Consent Under Data Protection Law
You have the right to withdraw your consent to the processing of personal data at any time. However, your withdrawal does not affect the lawfulness of the data processing that took place prior to the withdrawal.
MINORS
Our website and services are not intended for use by minors, and we do not intend to collect data from minors. If a parent or guardian of a minor believes that their child may have provided personal data to us, please contact us using the contact information provided below, and we will delete that personal data subject to applicable law and this Policy.
DATA SECURITY
We use appropriate technical and organizational measures and security precautions (TOMs) designed to prevent unauthorized access, unlawful processing, and the unauthorized or accidental loss of your data.
This includes, for example, encrypting your communications with us via this website using the Secure Socket Layer (SSL) encryption protocol.
You can verify the quality of our encryption here: https://www.ssllabs.com/ssltest
It is important to note that data transmission over the Internet may have security vulnerabilities, as it is not possible to provide complete protection against access by unauthorized third parties.
WEBHOST
The server on which this website is hosted is operated by Wix.com Ltd., with whom we have entered into a data processing agreement.
SERVER-LOG-FILES
Every time you visit our website, an automated system collects a range of general data and information.
This general data and information is stored in the log files of our server hosted by hostserv.eu.
THE FOLLOWING MAY BE COLLECTED
the types and versions of browsers used
the operating system used by the accessing system
the website from which an accessing system reaches our website (known as a referrer)
the subpages on our website accessed via an accessing system
the date and time of access to the website
an Internet Protocol (IP) address
the Internet service provider of the accessing system other similar data and information used for security purposes in the event of attacks on our information technology systems.
B
We do not draw any conclusions about you based on the use of this general data and information.
This information is required to:
correctly deliver the content of our website
optimize the content of our website as well as the advertising on it
ensure the ongoing functionality of our information technology systems and the technology behind our website
provide law enforcement agencies with the information necessary for criminal prosecution in the event of a cyberattack.
We analyze this anonymously collected data and information both statistically and with the aim of enhancing data protection and data security within our company, ultimately to ensure an optimal level of protection for you. In any case, we are permitted to process this data based on our legitimate interest pursuant to Article 6(1)(f) of the GDPR.
The logs are stored separately from any personal data you provide and are deleted after a maximum of 2 months.
COOKIES
When you access and use this website, cookies (YouTube, Google Analytics, session cookies) are processed.
Cookies are small text files that are stored on your local computer.
Transient cookies are automatically deleted when you close your browser. These include, in particular, session cookies. These store a so-called session ID, which allows various requests from your browser to be assigned to the same session. This enables your computer to be recognized when you return to our website. Session cookies are deleted when you log out or close your browser.
Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie. You can delete these cookies at any time in your browser’s security settings.
First-party cookies are cookies stored by the website you are visiting. These include, for example, session cookies (to ensure the website functions properly), online store cookies (to store temporary information for the shopping cart), or Google Analytics cookies (to track website activity).
Third-party cookies are cookies that are set, for example, when iFrames are embedded—such as when a YouTube video is embedded or a doubleclick.net cookie is set for personalized advertising.
You can find more details about YouTube and Google Analytics cookies below.
HOW DO WE COLLECT YOUR DATA ONLINE?
Currently, you can enter data on our website and send us an email. Please note that unencrypted emails sent over the Internet are not adequately protected against unauthorized access by third parties.
NEWSLETTER
With your consent, you can subscribe to our newsletter, through which we will inform you about our current special offers.
You can generally only receive our company’s newsletter if (1) you have a valid email address and (2) you have registered to receive the newsletter.
A confirmation email will be sent to the email address you initially provided for the newsletter using the double opt-in procedure, in which we ask you to confirm that you wish to receive the newsletter.
This confirmation email serves to verify that you, as the owner of the email address, have authorized receipt of the newsletter.
The purpose of this process is to verify your registration and, if necessary, to investigate any potential misuse of your personal data.
V
Processing of Personal Data via BREVO (Sendinblue).
We use the BREVO (Sendinblue) service, operated by Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin, to manage and send emails and to process form submissions. BREVO handles the technical storage, management, and processing of the data you enter. Processing takes place exclusively within the European Union.
Purpose of Processing
The personal data collected via BREVO is processed exclusively for the following purposes:
Subscription to and distribution of our newsletter,
Management of advance ticket sales registrations,
Management of investment interests,
Management of combo offers, and
Related communication.
Participation in the aforementioned offers is not possible without providing the required data.
Double-Opt-In Procedure
We use the legally recommended double-opt-in procedure for newsletter sign-ups. After submitting the form, you will receive a confirmation email. Your registration will take effect only after you confirm the link.
For advance ticket sales, investments, and combo offers, the double-opt-in may be disabled. In this case, your registration takes effect immediately upon submission of the form, and you expressly consent to being contacted.
Legal Basis
Data processing is based on Article 6(1)(a) of the GDPR (consent) for the newsletter, and on Article 6(1)(b) of the GDPR (performance of a contract or pre-contractual measures) for presales, investments, and combo offers.
Data Transfer to BREVO
The data entered in the form is automatically transmitted to BREVO via a secure interface (API) and stored there. BREVO processes the data exclusively in accordance with our instructions (data processing on our behalf pursuant to Art. 28 of the GDPR). A corresponding data processing agreement is in place.
Unsubscription and Withdrawal of Consent
You may withdraw your consent at any time with future effect. Every email sent via BREVO contains an automated unsubscribe link. Withdrawal does not affect the lawfulness of processing carried out up to that point.
Tracking and Analysis
BREVO uses a so-called tracking pixel to track email opens and clicks. This data is used for technical analysis and to improve our communication. You can restrict tracking by adjusting the settings in your email client.
BREVO Forms and Cookies
When using embedded BREVO forms, technically necessary cookies may be set to ensure the form functions properly. These cookies are required to process your registration correctly and are not used for advertising purposes.
WHY DO WE PROCESS YOUR DATA?
If you contact us, for example, simply to request information from us, we process your data for that purpose. If you contact us, for example, to enter into a contract, we process your data for that purpose.
To process your order, including customer service
If you provide your order details via email, the information you provide—including your personal data—will be processed by us and the recipients listed below for the purpose of (pre-)contractual processing within the scope of our business relationship with you, in order to process and manage your order and to provide you with customer service.
WHY ARE WE ALLOWED TO PROCESS YOUR DATA?
If you contact us, for example, simply to request information from us, we are permitted to process your data based on your consent pursuant to Article 6(1)(a) of the GDPR or Article 6(1)(f) of the GDPR. If you contact us, for example, to enter into a contract, we are permitted to process your data based on Article 6(1)(b) of the GDPR and, if necessary, to store it based on Article 6(1)(c) of the GDPR.
MARKETING (GENERELL)
Berechtigtes Interesse Art. 6 Abs. 1 S. 1 lit. f DSGVO. Das berechtigte Interesse ist unser Interesse an der Geschäftsanbahnung und Intensivierung der Geschäftsbeziehung mit bestehenden und potentiellen Kunden.
WHAT DATA DO WE PROCESS?
INFORMATION
If you contact us solely to request information from us, we will process the data you provide.
The provision of information on your part is entirely voluntary. However, we expressly ask that you not disclose any data that is likely to be of little or no relevance to your intended purpose; this applies in particular to special categories of personal (“sensitive”) data.
NEWSLETTER
The personal data transmitted to us when you subscribe to the newsletter is determined by the form used for this purpose.
The only required information for receiving the newsletter is your email address.
Providing any additional, separately marked data is voluntary and is used to address you personally.
When you subscribe to the newsletter, we also store the IP address assigned by your Internet service provider (ISP), the computer system you used at the time of registration, and the date and time of registration.
The collection of this data is necessary to enable us to trace any (potential) misuse of your email address at a later date and therefore serves as a legal safeguard for us.
TO WHOM IS YOUR DATA DISCLOSED?
Your data may be disclosed, in whole or in part—but always only to the extent and to the degree necessary—to the following data controllers:
Banks (payment transactions – Austria)
Tax advisors (accounting – Austria)
Collection agencies (debt collection – Austria)
Legal representatives (enforcement of legal claims – Austria)
Courts (enforcement of legal claims – Austria)
Administrative authorities (Austria)
HOW LONG DO WE PROCESS YOUR DATA?
Your data is stored in a form that allows for your identification only for as long as is necessary for the purpose for which it is processed.
INFORMATION REQUEST
By providing us with your data via email, you expressly consent to the processing of your data—including the personal data you have provided, as well as any special categories of personal data you may have provided unsolicited and voluntarily—by us and the recipients listed above for the duration of the processing of the information request in question.
If you contact us solely to request information from us, your data will therefore be deleted either immediately or after a reasonable period of time appropriate to the content of the communication, depending on the nature of the communication.
If you revoke your declaration of consent, we will delete (or have deleted) all of your data—including aggregated data—from all databases.
MISSION Due to commercial and tax regulations, we are obliged to store your address, payment and order data for a period of 7 years. If you contact us to conclude a contract, the data will be deleted at the end of the 7th year after the last receipt has been posted (§ 132 BAO). In the event of a contract being concluded, all data from the contractual relationship will therefore be stored until the expiry of this period. Legal/legal retention obligations or contractual obligations, e.g. to customers due to warranty or compensation or to contractual partners, are another basis for continuing to store your data. (Art. 6 para. 1 sentence 1 lit. c GDPR; Art. 17 para. 3 lit. e GDPR). The data categories name, address, purchased goods and date of purchase will also be stored until the expiry of product liability (10 years).
COOKIES Cookies do not cause any damage to your computer and do not contain viruses. Cookies are used to make my offer more user-friendly, effective and secure. Cookies are small text files that are stored on your computer and stored by your browser. Most of the cookies used are so-called "session cookies". They are automatically deleted at the end of your visit. Other cookies remain stored on your device until you delete them. These cookies allow me to recognize your browser the next time I visit. You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general, and activate the automatic deletion of cookies when you close the browser. If you disable cookies, the functionality of this website may be limited.
USE OF SOCIAL MEDIA PLUG-INS We only put a link to the Facebook, Twitter, Instagram page. YOUTUBE We have integrated YouTube videos into our online offering, which are stored on https://www.YouTube.com and can be played directly from our website. As a legal basis for the use of YouTube, we use our legitimate interest in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR in optimising and expanding the online offer for the economic operation of our website and creating an attractive offer for users by embedding our content and service offerings. You have the right to object to this at any time. In addition, our YouTube videos on this website are integrated in "extended data protection mode", i.e. no data about you as a user is transmitted to YouTube if you do not play the videos. Only when you play the videos will data be transferred. We have no influence on this data transfer.
If you are logged in to Google, your data will be assigned directly to your account. If you do not want to be associated with your YouTube profile, you must log out before playing the video. You have the right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this. Further information on the purpose and scope of data collection and its processing by YouTube can be found in the privacy policy. There you will also find further information about your rights and setting options to protect your privacy: https://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
The integration of YouTube usually also activates DoubleClick by Google. General information about DoubleClick by Google can be found under https://www.google.de/doubleclick and http://support.google.com/adsense/answer/2839090, as well as data protection at Google in general: https://www.google.de/intl/de/policies/privacy. https://www.google.com/policies/privacy/
