Privacy policy

 

[njt_gdpr_privacy_settings]

 

The person responsible for data processing on this website in accordance with the basic data protection regulation (DSGVO) is

 

Heidemarie KRIZ
Spiegelgasse 13, 1010 Vienna
Tel.: +43 676 960 53 53
E-Mail: office@krizh.com

Date: 28.10.2020

1) Data collection when visiting our website

When using our website for information purposes only, i.e. if you do not register or provide us with information in any other way, we only collect the data that your browser sends to our server (so-called “server log files”). When you visit our website, we collect the following data, which is technically necessary for us to display the website:

  • Our visited website
  • Date and time of access
  • Quantity of data sent in bytes
  • Source/reference from which you accessed the site
  • Used Browser
  • Operating system used
  • IP address used (possibly: in anonymised form)

The processing is carried out in accordance with Art. 6 paragraph. 1 lit. f DSGVO on the basis of our justified interest in improving the stability and functionality of our website The data will not be passed on or used in any other way. However, we reserve the right to subsequently check the server log files if there are concrete indications of illegal use.

 

2) Cookies

In order to make visiting our website attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your end device. Some of the cookies we use are deleted again after the end of the browser session, i.e. after closing your browser (so-called session cookies). Other cookies remain on your end device and make it possible to recognise your browser on your next visit (so-called persistent cookies). If cookies are set, they collect and process certain user information to an individual extent, such as browser and location data and IP address values. Persistent cookies are automatically deleted after a preset period of time, which may vary depending on the cookie. You can see the duration of the respective cookie storage in the overview of the cookie settings of your web browser.

Sometimes cookies are used to simplify the ordering process by saving settings (e.g. remembering the contents of a virtual shopping basket for a later visit to the website). Insofar as personal data are also processed by individual cookies used by us, the processing is carried out in accordance with Art. 6 Para. 1 lit. b DSGVO either for the implementation of the contract, pursuant to Art. 6, para. 1 lit. a DSGVO in the case of a granted consent or pursuant to Art. 6 para. 1 lit. f DSGVO to safeguard our legitimate interests in the best possible functionality of the website as well as a customer-friendly and effective design of the site visit.

Please note that you can set your browser so that you are informed about the setting of cookies and can decide individually about their acceptance or exclude the acceptance of cookies for certain cases or generally. Each browser differs in the way it manages the cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. These can be found for the respective browser under the following links:

Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Chrome: https://support.google.com/chrome/answer/95647?hl=de&hlrm=en
Safari: https://support.apple.com/de-de/guide/safari/sfri11471/mac
Opera: https://help.opera.com/de/latest/web-preferences/#cookies

Please note that if cookies are not accepted, the functionality of our website may be limited.

 

3) Contact

3.1 When contacting us (e.g. via contact form or e-mail), personal data is collected. Which data is collected in case of a contact form can be seen from the respective contact form. These data are stored and used exclusively for the purpose of answering your request or for contacting you and the associated technical administration. Legal basis for the processing of these data the processing Art. 6 paragraph 1 lit. b DSGVO (required for the implementation of pre-contractual measures). Your data will be deleted after final processing of your request.

 

4) Data processing for contract processing

According to Art. 6 para. 1 lit. b DSGVO, personal data is collected and processed when you provide us with such data for the purpose of a consultation. Which data is collected can be seen from the respective input forms. We store and use the data provided by you for the purpose of contract processing. After complete processing of the contract or deletion of your customer account, your data will be deleted with regard to tax and commercial law retention periods (currently 7 years).

 

Microsoft
This website uses software from Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA, to provide an online appointment booking function.
For the purpose of appointment allocation, in accordance with Art. 6 para. 1 lit. b DSGVO first name, surname and e-mail address (and possibly the telephone number, if an appointment by telephone is desired) shall be collected and recorded in accordance with Art. 6 Para. 1 lit. f DSGVO on the basis of our justified interest in effective customer management and efficient appointment management is transmitted to Microsoft and stored there for appointment organisation. This may also involve data transmissions to Microsoft’s servers in the USA.
Your data will be deleted after the appointment has been held or after the agreed appointment period has expired. We have entered into a contract with Microsoft in which we require Microsoft to protect our customers’ information in accordance with legal requirements.
Details of Microsoft’s privacy policy can be found here: https://privacy.microsoft.com/de-de/privacystatement

5) Comment function

As part of the comment function on this website, in addition to your comment, information about the time the comment was created and the commentator name you selected will be saved and published on this website. Your IP address is also logged and saved. This storage of the IP address is done for security reasons and in the event that the person concerned violates the rights of third parties or posts illegal content through a comment submitted. We need your e-mail address in order to contact you if a third party objects to your published content as illegal. The legal basis for the storage of your data is article 6 paragraph. 1 lit. b und f DSGVO.

 

6) Data processing for order processing

6.1 In order to process your order, we work together with the following service provider(s), who support us fully or partially in the execution of concluded contracts. Certain personal data is transmitted to these service providers in accordance with the following information.

The legal basis for the transfer of data is article 6 paragraph. 1 lit. b DSGVO.

6.2 Use of payment service providers (payment services)

at the following Internet address: https://support.apple.com/de-de/HT203027

– SOFORT
If the payment method “SOFORT” is selected, the payment is processed via the payment service provider SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany (hereinafter referred to as “IMMEDIATELY”), to whom we send your information provided during the ordering process together with the information about your order in accordance with Art. 6 Para. 1 lit. b Pass on DSGVO. Sofort GmbH is part of the Klarna Group (Klarna Bank AB (publ), Sveavägen 46, 11134 Stockholm, Sweden). Your data will only be forwarded for the purpose of payment processing with the payment service provider IMMEDIATELY and only insofar as it is necessary for this purpose. For more information on the privacy policy of SOFORT: https://www.klarna.com/sofort/datenschutz.
– Stripe
If you choose a payment method from the payment service provider Stripe, the payment will be processed via the payment service provider Stripe Payments Europe Ltd, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland, to whom we will pass on the information you provide during the ordering process together with the information about your order (name, address, account number, bank code, possibly credit card number, invoice amount, currency and transaction number) in accordance with Art. 6 Para. 1 lit. b DSGVO. Your data will only be passed on for the purpose of payment processing with the payment service provider Stripe Payments Europe Ltd. and only to the extent necessary for this purpose. You will find further information on data protection at Stripe under the URL https://stripe.com/de/privacy#translation.

– Klarna
If a Klarna payment service is selected, the payment will be processed by Klarna Bank AB (publ) [https://www .klarna.com/de], Sveavägen 46, 111 34 Stockholm, Sweden (hereinafter “Klarna”). In order to enable the processing of the payment, your personal data (first and last name, street, house number, postal code, city, gender, e-mail address, telephone number and IP address) as well as data related to the order (e.g. invoice amount, article, type of delivery) will be forwarded to Klarna for the purpose of identity and credit assessment, provided that you have given your consent in accordance with Art. 6 para. 1 lit. a DSGVO during the ordering process. Here you can see to which credit agencies your data can be forwarded:
https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies
The credit rating information can contain probability values (so-called score values). Insofar as score values are included in the result of the credit rating information, they are based on a scientifically recognised mathematical-statistical procedure. The calculation of the score values includes, but is not limited to, address data. Klarna uses the information received on the statistical probability of default to make a balanced decision on the establishment, implementation or termination of the contractual relationship.
You can withdraw your consent at any time by sending a message to the data controller or to Klarna. However, Klarna reserves the right to process your personal data as far as this is necessary for payment processing in accordance with the contract.
Your personal data will be processed in accordance with the applicable data protection regulations and in accordance with the information in Klarna’s data protection regulations for data subjects based in Germany https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy
or for affected persons based in Austria https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_at/privacy
treated.

 

7) Web analysis services

Google (Universal) Analytics
This website uses Google (Universal) Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). Google (Universal) Analytics uses so-called “cookies”, which are text files that are stored on your end device and enable an analysis of your use of the website. The information generated by the cookie about your use of the website (including the abbreviated IP address) will generally be transmitted to and stored by Google on servers in the United States. in the USA.
This website uses Google (Universal) Analytics exclusively with the extension “_anonymizeIp()”, which ensures anonymisation of the IP address by shortening it and excludes any direct personal reference. As a result of the extension, your IP address will be previously truncated by Google within Member States of the European Union or in other States party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a server of Google LLC.in the USA and shortened there. On our behalf, Google will use this information to evaluate your use of the website, to compile reports on website activities and to provide us with further services related to website and internet use. The IP address transmitted by your browser as part of Google (Universal) Analytics is not merged with other Google data.
All processing described above, in particular the setting of Google Analytics cookies for reading information on the end device used, will only be carried out if you provide us with the required information in accordance with Art. 6 para. 1 lit. a DSGVO has given their express consent to this. Without this consent, Google Analytics will not be used during your visit to the site.
You can revoke your given consent at any time with effect for the future. To exercise your right of withdrawal, please deactivate this service in the “Cookie Content Tool” provided on the website. We have concluded a contract with Google for the use of Google Analytics, which obliges Google to protect the data of our site visitors and not to pass it on to third parties.
For the transmission of data from the EU to the USA, Google relies on so-called standard data protection clauses of the European Commission, which are intended to guarantee compliance with the European level of data protection in the USA.
Further information on Google (Universal) Analytics can be found here: https://policies.google.com/privacy?hl=de&gl=de

 

8) Use of your data for direct advertising

8.1 Registration for our e-mail newsletter

If you register for our e-mail newsletter, we will send you regular information about our offers. Only your e-mail address is required for sending the newsletter. By placing an order, you give us your consent for the use of your personal data in accordance with Art. 6 Par. 1 lit. a DSGVO. When you register for the newsletter, we save your IP address entered by your internet service provider (ISP) as well as the date and time of registration in order to be able to trace any possible misuse of your e-mail address at a later date. The data collected by us when registering for the newsletter is used exclusively for the purpose of sending information via the newsletter. You can unsubscribe from the newsletter at any time using the link provided for this purpose in the newsletter or by sending a message to the person responsible mentioned at the beginning. Once you have unsubscribed, your e-mail address will be immediately deleted from our newsletter distribution list.

 

8.2 Sending the e-mail newsletter to existing customers

If you have provided us with your e-mail address when purchasing goods or services, we reserve the right to send you regular offers by e-mail on similar goods or services from our range to those you have already purchased. In accordance with § 107 TKG, we do not need to obtain your separate consent for this. In this respect, data processing is carried out solely on the basis of our justified interest in personalised direct advertising in accordance with Art. 6 paragraph. 1 lit. f DSGVO. If you have initially objected to the use of your e-mail address for this purpose, no e-mail will be sent by us. You are entitled to object to the use of your e-mail address for the aforementioned advertising purpose at any time with effect for the future by notifying the person responsible named at the beginning. After receipt of your objection, the use of your e-mail address for advertising purposes will be stopped immediately.

 

9) Tools and Miscellaneous

9.1 Google AdSense

This website uses Google AdSense, a web advertising service Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). Google AdSense uses so-called cookies are text files that are stored on your computer and enable an analysis of your use of the website. In addition, Google AdSense also uses so-called “web beacons” (small invisible graphics) to collect information. By using these, simple actions such as visitor traffic on the website can be recorded, collected and evaluated. The information generated by the cookie and/or web beacon (including your IP address) about your use of this website is usually transferred to a Google server and stored there. This may also result in a transmission to the servers of Google LLC. in the USA.

Google uses the information thus obtained to evaluate your usage behaviour with regard to the AdSense ads. The IP address transmitted by your browser as part of Google AdSense is not combined with other data from Google. The information collected by Google may be transferred to third parties if this is required by law and/or if third parties process this data on behalf of Google.

The described processing of data is carried out in accordance with Art. 6 paragraph. 1 lit. f DSGVO for the purpose of targeting the user by advertising third parties whose advertisements are displayed on this website on the basis of the evaluated user behaviour This processing also serves our financial interest in exploiting the economic potential of our website by inserting personalised third-party advertising content against payment.

You can find more information about Google’s privacy policy at the following web address: https://www.google.de/policies/privacy/

You can permanently deactivate cookies for advertising preferences by making the appropriate setting in your browser software to prevent them from being used, or you can download and install the browser plug-in available under the following link:
https://www.google.com/settings/ads/plugin?hl=de

Please note that certain functions of this website may not be able to be used, or only to a limited extent if you have deactivated the use of cookies.

Insofar as legally required, we have obtained your consent to process your data as described above in accordance with Art. 6 Par. 1 lit. a DSGVO obtained. You can revoke your given consent at any time with effect for the future. In order to exercise your right of revocation, please follow the procedure described above for lodging an objection.

9.2 Use of Google Ads conversion tracking

This website uses the online advertising program “Google Ads” and, as part of Google Ads, the conversion tracking of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). We use the offer of Google Ads to draw attention to our attractive offers by means of advertising material (so-called Google Adwords) on external websites. In relation to the data of the advertising campaigns, we can determine how successful the individual advertising measures are. Our aim is to show you advertising that is of interest to you, to make our website more interesting for you and to achieve a fair calculation of the advertising costs incurred.

The conversion tracking cookie is set when a user clicks on an ad displayed by Google. Cookies are small text files that are stored on your end device. These cookies usually expire after 30 days and are not used for personal identification. If the user visits certain pages of this website and the cookie has not expired, Google and we can recognise that the user has clicked on the ad and been redirected to that page. Each Google Ads customer receives a different cookie. Cookies cannot be tracked through the websites of Google Ads customers. The information collected through the conversion cookie is used to generate conversion statistics for Google Ads customers who have opted-in to conversion tracking. Customers know the total number of users who clicked on their ad and were directed to a page with a conversion tracking tag. However, you will not receive information that can be used to identify users personally. If you do not wish to participate in tracking, you can block this use by deactivating the Google Conversion Tracking cookie via your internet browser under the keyword “user settings”. They will then not be included in the conversion tracking statistics. We are using Google Ads because of our legitimate interest in targeted advertising in accordance with the German law. Art. 6 para. 1 lit. f DSGVO. The use of Google Ads may also involve the transmission of personal data to the servers of Google LLC. in the USA.

You can find more information about Google’s privacy policy at the following web address: https://www.google.de/policies/privacy/

You can permanently opt-out of the use of cookies by Google Ad Conversion Tracking by downloading and installing the Google browser plug-in available from the link below:
https://www.google.com/settings/ads/plugin?hl=de

Please note that certain functions of this website may not be able to be used, or only to a limited extent if you have deactivated the use of cookies.

Insofar as legally required, we have obtained your consent to process your data as described above in accordance with Art. 6 Par. 1 lit. a DSGVO obtained. You can revoke your given consent at any time with effect for the future. In order to exercise your right of withdrawal, deactivate this service in the “Cookie Content Tool” provided on the website or alternatively follow the procedure described above for making an objection.

9.3 Google Ads Remarketing
Our website uses the functions of Google Ads Remarketing, hereby we advertise this website in Google search results, as well as on third party websites. Provider ist the Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Irland (“Google”). For this purpose, Google sets a cookie in the browser of your end device, which automatically enables interest-based advertising by means of a pseudonymous cookie ID and based on the pages you visit. The processing is based on our legitimate interest in the optimal marketing of our website in accordance with article 6 paragraph. 1 lit. f DSGVO.
Any further data processing will only take place if you have consented to Google linking your internet and app browsing history to your Google Account and using information from your Google Account to personalise ads you view on the web. In this case, if you are logged into Google while visiting our website, Google will use your data together with Google Analytics data to create and define target group lists for cross-device remarketing. For this purpose, your personal data will be temporarily linked by Google with Google Analytics data to form target groups. The use of Google Ads Remarketing may also involve the transmission of personal data to the servers of Google LLC. in the USA.
You can permanently object to the setting of cookies by Google Ads Remarketing by downloading and installing the Google browser plug-in available under the following link:
https://www.google.com/settings/ads/onweb/
Further information and the privacy policy regarding advertising and Google can be found here:
https://www.google.com/policies/technologies/ads/
Insofar as legally required, we have obtained your consent to process your data as described above in accordance with Art. 6 Par. 1 lit. a DSGVO obtained. You can revoke your given consent at any time with effect for the future. In order to exercise your right of withdrawal, deactivate this service in the “Cookie Content Tool” provided on the website or alternatively follow the procedure described above for making an objection.

9.4 Facebook Pixel
Within our online offer the so-called “Facebook pixel” of the social network Facebook is used, which is operated by Facebook Ireland Limited, 4 Grand Canal Quare, Dublin 2, Ireland (“Facebook”).
If a user clicks on an advertisement placed by us, which is played on Facebook, an addition is added to the URL of our linked page by Facebook pixels. If our site allows the sharing of data with Facebook via pixels, this URL parameter is written into the user’s browser via cookie, which sets our linked site itself. This cookie is then read by Facebook Pixel and enables the data to be forwarded to Facebook.
With the help of the Facebook pixel, Facebook is, on the one hand, able to determine the visitors of our online offer as a target group for the presentation of ads (so-called “Facebook ads”). Accordingly, we use the Facebook pixel to display the Facebook ads placed by us only to those Facebook users who have also shown an interest in our online offering or who exhibit certain characteristics (e.g. interests in certain topics or products determined on the basis of the websites visited) which we transmit to Facebook (so-called “custom audiences”). With the help of the Facebook pixel, we also want to make sure that our Facebook ads match the potential interest of the users and are not annoying. This allows us to further evaluate the effectiveness of Facebook Ads for statistical and market research purposes by tracking whether users were redirected to our website after clicking on a Facebook Ad (so-called “conversion”).
The data collected is anonymous to us, so we cannot draw conclusions about the identity of the users. However, the data is stored and processed by Facebook so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes in accordance with the Facebook Data Usage Guidelines (https://www.facebook.com/about/privacy/). The data may enable Facebook and its partners to place advertisements on and outside Facebook.
The data processing associated with the use of the Facebook Pixel is based on our predominantly justified interest in the evaluation, optimisation and economic operation of our online offer as well as our advertising measures in accordance with Art. 6 Para. 1 lit. f DSGVO.
The information generated by Facebook is usually transferred to a Facebook server and stored there. This can also result in a transfer to the servers of Facebook Inc. in the USA. Insofar as legally required, we have obtained your consent to process your data as described above in accordance with Art. 6 Par. 1 lit. a DSGVO obtained. You can revoke your given consent at any time with effect for the future.

 

10) Rights of the data subject

10.1 The applicable data protection law grants you comprehensive data protection rights vis-à-vis the person responsible for processing your personal data, about which we inform you below:

  • Right of access in accordance with Art. 15 DSGVO: In particular, you have a right of access to your personal data processed by us, the processing purposes, the categories of personal data processed, the recipients or categories of recipients to whom your data have been or will be disclosed, the planned storage period or the criteria for determining the storage period, the existence of a right of rectification, erasure, restriction of processing, opposition to processing, a complaint to a supervisory authority, the origin of your data if it was not collected from you by us, the existence of automated decision making including profiling and, where applicable, meaningful information on the logic involved and the scope and intended effects of such processing on you, as well as your right to be informed of the guarantees provided under Art. 46 DPA when your data is transferred to third countries;
  • Right to correction in accordance with Art. 16 DSGVO: You have a right to immediate correction of incorrect data concerning you and/or completion of your incomplete data stored by us;
  • Right to deletion pursuant to Art. 17 DSGVO: You have the right to request the deletion of your personal data if the conditions of Art. 17 para. 1 DSGVO. However, this right does not apply in particular if the processing is necessary for the exercise of the right to freedom of expression and information, for the fulfilment of a legal obligation, for reasons of public interest or for the assertion, exercise or defence of legal claims;
  • Right to limit processing in accordance with Art. 18 DSGVO: You have the right to demand limitation of the processing of your personal data for as long as the accuracy of your data which you dispute is verified, if you refuse to have your data deleted due to unauthorised data processing and instead demand limitation of the processing of your data, if you require your data for the assertion, exercise or defence of legal claims, after we no longer require these data after the purpose has been achieved, or if you have lodged an objection for reasons relating to your particular situation, as long as it is not yet clear whether our justified reasons outweigh the objection;
  • Right to information in accordance with Art. 19 DSGVO: If you have asserted the right to rectification, erasure or limitation of processing vis-à-vis the controller, the controller is obliged to notify all recipients to whom the personal data concerning you have been disclosed of this rectification, erasure or limitation of processing unless this proves impossible or involves a disproportionate effort. They have the right to be informed about these recipients.
  • Right to data transfer in accordance with Art. 20 DSGVO: You have the right to receive the personal data you have provided us with in a structured, common and machine-readable format or to request that it be transferred to another responsible party, insofar as this is technically feasible;
  • Right to revoke consents granted under Art. 7 para. 3 DSGVO: You have the right to revoke your consent to the processing of data at any time with effect for the future. In the event of revocation, we will immediately delete the data concerned, unless further processing cannot be based on a legal basis for processing without consent. Revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until revocation;
  • Right of appeal under Art. 77 DSGVO: If you believe that the processing of personal data concerning you is in breach of the DSGVO, you have the right – without prejudice to any other administrative or judicial remedy – to lodge a complaint with a supervisory authority, in Austria the data protection authority

 

10.2 Right of objection

If your personal data is processed because of our overriding interest, you have the right to object to this processing at any time with effect for the future. Further processing is, however, reserved if there are compelling reasons for further processing.

Would you like us to delete your cookies? You can request this anytime here.