Datenschutz

1. General information

1.1 What is personal data?

Personal data is information that reveals or could reveal the identity of the user. We adhere to the principle of data avoidance. We refrain from collecting personal data as far as possible.

1.2 Handling of personal data

Personal data is used exclusively for the establishment, content, implementation or processing of the contractual relationship (Art. 6 I S. 1 b GDPR).

Beyond that, personal data is only processed if we have obtained your consent (Art. 6 I S. 1 a GDPR) or if the processing of the data is necessary for our legitimate interests and if the weighing of interests shows that there are no overriding interests, fundamental rights or fundamental freedoms on your part that conflict with this (Art. 6 I S. 1 f GDPR).

We may use processors to process your personal data, with whom we have concluded a contract for order processing where necessary, but we will not pass on personal data to third parties beyond this.

The data will only be passed on to the shipping company responsible for delivery to the extent necessary for the delivery of the goods ordered. For the purpose of processing payments, the necessary payment data will be passed on to the credit institution responsible for the payment and, if applicable, to the commissioned and selected payment service provider.

Your pesonal data will be processed in the EU and in countries classified by the EU as secure or adequate. If personal data is processed in the USA, we will endeavour to ensure that the services we use are certified under the Data Privacy Framework.

1.3 Usage data

When you visit the website, general technical information is collected. This includes the IP address used, the time, the duration of the visit, the browser type and, if applicable, the referring website. For technical reasons, this usage data is recorded in a log file and may be used and stored for the purpose of statistical analysis of this website. This usage data is not linked to your other personal data.

1.4 Registration data

Registration is required for the full use of the functions of our website. The registration data is collected through your corresponding entries and used for the specific purpose stated in accordance with your consent (Art. 6 I S. 1 a GDPR).

1.5 Duration of storage

Once the purpose for which the data was collected has been fulfilled, we will only store your personal data for as long as is required by law (in particular tax law).

This is currently 190 days.

The aforementioned data is stored as log files on the servers of our internet service provider. This is necessary in order to display the website on the device you are using and to ensure stability and security.

2. Your rights

2.1 Information

You can request information from us as to whether we process your personal data and, if so, you have the right to obtain information about this personal data and the further information specified in Art. 15 GDPR.

2.2 Right to rectification

You have the right to have inaccurate personal data concerning you rectified and, in accordance with Art. 16 GDPR, you may request the completion of incomplete personal data.

2.3 Right to erasure

You have the right to request that we erase personal data concerning you without delay. We are obliged to erase it without delay, in particular if one of the following reasons applies:

• Your personal data is no longer necessary for the purposes for which it was collected or otherwise processed.
• You withdraw your consent on which the processing of your data was based, and there is no other legal basis for the processing.
• Your data has been processed unlawfully.

The right to erasure does not apply if your personal data is required for the assertion, exercise or defence of our legal claims.

2.4 Right to restriction of processing

You have the right to request that we restrict the processing of your personal data if

• you dispute the accuracy of the data and we are therefore verifying its accuracy,
• the processing is unlawful and you refuse to have it erased and instead request that its use be restricted
• we no longer need the data, but you need it to assert, exercise or defend legal claims,
• you have objected to the processing of your data and it is not yet clear whether our legitimate reasons outweigh your reasons

2.5 Right to data portability

You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format, and you have the right to transmit this data to another controller without hindrance from us, provided that the processing is based on consent or a contract and the processing is carried out by us using automated means.

2.6 Right of withdrawal

If the processing of your personal data is based on consent, you have the right to withdraw this consent at any time.

2.7 General information and right of appeal

The exercise of your above rights is generally free of charge for you. You have the right to lodge complaints directly with the supervisory authority responsible for us, the state data protection officer.

3. Data security

3.1 Data security

All data on our website is secured against loss, destruction, access, modification and distribution by technical and organisational measures.

3.2 Sessions and cookies

We use cookies and server-side sessions in which data can be stored to operate our website. We ensure that no personal data from sessions or cookies is transferred without your express consent and that cookies are only used if this is technically necessary for the website (e.g. spam protection for contact forms, shopping basket function) and if, after weighing up the interests involved, there are no overriding interests on your part (Art. 6 I S. 1 f GDPR) or you have given your express consent.

With your express consent, we use cookies to personalise content and advertisements, to offer social media functions and to analyse traffic to our website. With your consent, we may share information about your use of our website with our social media, advertising and analytics partners. Our partners may combine this information with other data that the partners already have about you.

Below you will find the domain, name and duration of the cookies used only on the basis of your consent:

SourceNameValidityCoachycookie_accept2SessionCoachyckCsrfTokenSessionCoachywires_challengeSessionCoachywiresSession

4. Newsletter

If you subscribe to our newsletter, we will use the data required for this purpose or separately provided by you to send you our email newsletter on a regular basis. You can unsubscribe from the newsletter at any time, either by sending us a message using the contact details provided in the legal notice or by using the link provided for this purpose in the newsletter.

5. Comments

If you use the comment function on our website, the time of creation, your chosen pseudonym and, temporarily, your IP address will be stored in addition to these comments. This is done so that we can protect our rights in the event of illegal content.

7. Third-party services

7.1 Brevo
We use Brevo software to send our newsletters. Brevo is a service provided by Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin. The data you provide when registering for the newsletter (e-mail address, name, telephone number, IP address, date and time of registration) is transferred to a server belonging to Sendinblue GmbH and stored there. You can cancel or revoke your subscription to this newsletter and thus your consent to the storage of your data at any time for the future. Details can be found in the confirmation email and in each individual newsletter. Data processing is based on your consent (Art. 6 (1) (a) GDPR). You can revoke this consent at any time by unsubscribing from the newsletter. The legality of the data processing operations already carried out remains unaffected by the revocation. The data you provide us with for the purpose of receiving the newsletter will be stored by us until you unsubscribe from the newsletter and will be deleted from both our servers and Brevo's servers after you unsubscribe from the newsletter. Data stored by us for other purposes (e.g. email addresses for the member area) remains unaffected by this. For more details, please refer to Brevo's privacy policy at: 
 

 https://www.brevo.com/de/informationen-newsletter-empfaenger/.

The data transferred to Sendinblue GmbH may also be used in our customer relationship management system (‘CRM system’) from Brevo. Data processing is carried out on the basis of Art. 6(1)(b) GDPR and is independent of the newsletter.

7.2 Bunny

This website and the integrated offers contain so-called embeddings of videos on Bunny. These enable the connection to Bunny and the videos stored there. Bunny is operated by BunnyWay d.o.o., Dunajska cesta 165, 1000 Ljubljana, Slovenia. There are no user interests that outweigh this technical necessity of embedding the videos (Art. 6 I S. 1 f GDPR). For the purpose and scope of data collection and data use by Bunny, as well as your rights and setting options for protection as a Bunny customer, please refer to Bunny's privacy policy. This can be found at: https://bunny.net/privacy/

Bunny Fonts

We use the Bunny Fonts font from BunnyWay d.o.o., Dunajska cesta 165, 1000 Ljubljana, Slovenia, to display a uniform font on our website. These are automatically stored in your browser cache when you visit our pages to enable the desired display. If your browser does not support the web fonts used, a standard font from your computer may be used. No user interests are affected that outweigh this technical necessity (Art. 6 I S. 1 f GDPR). You can view the Bunny Fonts privacy policy here:

https://bunny.net/privacy/

Content Delivery Network (CDN)

We use Bunny CDN (operated by BunnyWay d.o.o., Dunajska cesta 165, 1000 Ljubljana, Slovenia) to ensure the proper delivery of our website content. This is a service that acts as a content delivery network (CDN) on our website. A CDN helps to deliver the content of our online offering more quickly with the aid of regionally or internationally distributed servers. When you access this content, you connect to servers belonging to BunnyWay d.o.o., whereby your IP address and, if applicable, browser data such as your user agent are transmitted. This data is processed exclusively for the above-mentioned purposes and to maintain security and functionality. The use of the CDN is based on our legitimate interests, i.e. our interest in the secure and efficient provision and optimisation of our online offering in accordance with Art. 6 I S. 1 f GDPR. You can view the Bunny CDN privacy policy here:

https://bunny.net/privacy/

7.3 Make

We use Make.com, a service provided by Make HQ a.s., Menclova 2538/2, 180 00 Prague 8, Czech Republic, to integrate different databases and web tools. When using Make.com, data may be transferred to third countries outside the European Union.

We have no knowledge of the content of the data transferred, the manner in which it is used, or the duration of its storage by Make.com. The data processing described above is carried out in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interests in the efficient organisation of our work processes.

Further information on data protection at Make.com can be found at https://www.make.com/en/privacy-and-gdpr.

8. Contact

If you have any questions regarding data protection, please feel free to contact us using the contact details below. Responsible person within the meaning of the GDPR:

Ali Mahlodji

Tuchlauben 7a

1010 Vienna

Email: hi@ali.do

Telephone: +43 699 12636324