Data protection

Status: 01.04.2024

The protection of your personal data is of particular concern to us. We therefore process your data exclusively on the basis of the statutory provisions (GDPR, TKG 2003). In this data protection information, we inform you about the most important aspects of data processing on our website.

1. Contact with us

If you contact us using the form on the website or by e-mail, the data you provide will be stored by us for six months for the purpose of processing the enquiry and in the event of follow-up questions. We will not pass on this data without your consent.

2. Cookies

In order to make visiting our website attractive and to enable the use of certain functions, we use technologies on various pages, including so-called cookies. Cookies are small text files that are automatically stored on your end device. Some of the cookies we use are deleted again at the end of the browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your end device and enable us to recognise your browser on your next visit (persistent cookies).

We use such technologies that are absolutely necessary for the use of certain functions of our website (e.g. shopping basket function). These technologies are used to collect and process the IP address, time of visit, device and browser information as well as information about your use of our website (e.g. information about the contents of the shopping basket). In the context of a balancing of interests, this serves overriding legitimate interests in an optimised presentation of our offer in accordance with Art. 6 Para. 1 S. 1 lit. f GDPR.

2.1 Technical and functional cookies

We only use the following technical or functional cookies for basic functions and to ensure the proper functioning of the website. These cookies are automatically deleted when you close the website and are not stored on your computer!

We use the following cookies for this purpose:

_GoogleMaps
Saves your activation of Google Maps for the entire homepage.
Cookie duration: Session

modalShown
Saves your selection in the CookieBar for the entire homepage.
Cookie duration: 365 days

3. Hosting

We use an external web host to operate our website.

Hosting provider
We process personal connection data with the help of the following processors for the purpose of data and failure security for a maximum period of 7 days.

The legal basis for the processing is our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR (technical security measures).

Dienst: Web- u. Mail Hosting
Betreiber: WDW WerbeDesign Wanger e.U.
Datenschutzerklärung: https://www.wdw.at/datenschutz/

Access data
In the context of hosting, we process the following personal user data in a server log file for a maximum period of 7 days for the purpose of monitoring the technical function and increasing the operational security of the web host on the legal basis of legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR (technical security measures):

•  Website visited
• Time at the time of access
• Amount of data sent in bytes
• Source/reference from which you reached the page
• Browser used
• Operating system used
• IP address used

The data collected is only used for statistical analyses and to improve the website. However, the website operator reserves the right to check the server log files retrospectively if there are concrete indications of unlawful use.

4. Map services

On this website, we use the services of map service providers in the form of an iFrame embedding. This allows us to display interactive maps directly on the website and enables convenient use of the map functions.

Google Maps
As joint controllers with Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, we process connection data and browser data for the purpose of displaying an interactive map for the duration of the map display. In doing so, we enable Google Maps to place cookies on the user's PC and to calculate a user ID to uniquely identify the user as part of the advertising network operated by Google.

The legal basis for the processing is the consent given by you in accordance with § 96 para. 3 TKG ivm. in accordance with Art. 6 para. 1 lit. a GDPR.

Insofar as Google Maps carries out further independent processing of the data, in particular within the framework of Google's advertising network, Google Maps is solely responsible for this. Details can be found in the Google Maps privacy policy.

5. Facebook-Page

When you visit our Facebook page, personal data (documentation of user behaviour) is processed by Facebook using cookies. This information is used to create anonymised, statistical data about page activity and is automatically provided to us (Insights). We are jointly responsible with Facebook for this data processing in accordance with Article 26 of the General Data Protection Regulation. We base this on our legitimate interests. Without the processing of this data, we would not be able to maintain and optimise our presence on Facebook. You can find more information on the Facebook information page.

No personal data is made available to us in the process. At the same time, the data is also stored and processed by Facebook itself so that Facebook can connect it to the respective Facebook user profile. Facebook may use this data for its own advertising purposes in accordance with the Facebook Data Usage Policy. Consent to this is the responsibility of Facebook and cannot be influenced by us. For more information on the collection and use of data by Facebook and your rights and options for protecting your privacy in this regard, please refer to Facebook's privacy policy.

6. Data storage

We offer you the opportunity to purchase products directly via our webshop. In the context of the web shop, the data entered by you as well as data on products selected by you are processed by the person responsible for the purpose of making the offer, concluding the contract, fulfilling the contract and fulfilling any post-contractual obligations prior to conclusion of the contract on the basis of the pre-contractual relationship initiated by you and after conclusion of the contract on the basis of the contract pursuant to Art. 6 para. 1 lit. b GDPR.

We therefore store the following data for the purpose of contract processing Salutation (Mr, Mrs, company), company, VAT number, name, street, postcode, city, country, telephone, fax, email. The data provided by you is required to fulfil the contract or to carry out pre-contractual measures. We cannot conclude the contract with you without this data. Data will not be transferred to third parties, with the exception of the transfer of credit card data to the processing bank/payment service provider for the purpose of debiting the purchase price, to the transport company/shipping company commissioned by us to deliver the goods and to our tax advisor to fulfil our tax obligations.

After cancellation of the purchase process, the data stored by us will be deleted. If a contract is concluded, all data from the contractual relationship will be stored until the expiry of the retention period under tax law (10 years).

7. Data processing when opening a customer account and for contract processing

In accordance with Art. 6 para. 1 lit. b GDPR, personal data will continue to be collected and processed if you provide it to us for the fulfilment of a contract or when opening a customer account. Which data is collected can be seen from the respective input forms. It is possible to delete your customer account at any time and can be done by sending a message to the controller's address below. We store and use the data provided by you to fulfil the contract. After completion of the contract or deletion of your customer account, your data will be blocked with regard to retention periods under tax and commercial law and deleted after expiry of these periods, unless you have expressly consented to further use of your data or we have reserved the right to further use of your data as permitted by law, about which we will inform you accordingly below.

8. Data processing for order processing

8.1 Disclosure of personal data

In order to process your order, we work together with the following service provider(s), who support us in whole or in part in the fulfilment of concluded contracts. Certain personal data is transmitted to these service providers in accordance with the following information.

The personal data collected by us will be passed on to the transport company commissioned with the delivery as part of the contract processing, insofar as this is necessary for the delivery of the goods. We pass on your payment data to the commissioned credit institution within the scope of payment processing, insofar as this is necessary for payment processing. If payment service providers are used, we provide explicit information about this below. The legal basis for the transfer of data is Art. 6 para. 1 lit. b GDPR.

8.2 Use of payment service providers (payment service providers)

For payments via Paypal, MasterCard, VISA Card, direct debit, instant bank transfer and purchase on account
We use the payment gateway from Nets to use the payment methods Paypal, MasterCard, VISA Card, direct debit, instant bank transfer and purchase on account.

In principle, there is no direct contractual relationship between Nets Branch Sweden (hereinafter referred to as "Nets") and you as a cardholder or user of payment services.

Nets therefore recommends that you contact your direct contractual partner, i.e. the merchant where you have made a payment transaction, the card institution from which your payment card originates (usually your bank) or the company that issued the invoice, with any requests regarding the processing of your personal data as a cardholder or user of payment services.

However, Nets reserves the right to process your personal data in accordance with contracts with the merchant in the form of transaction data. The legal basis for our processing of personal data is that it is necessary for the fulfilment of various legal obligations and requirements to which we are subject by law or contract. In addition, the processing is necessary for the purposes of our legitimate interests or the legitimate interests of a third party, which do not override the interests or fundamental rights and freedoms of the data subject. Our legitimate interests include our contractual obligation to process your payment transactions, handling complaints, feedback and questions, investigating, detecting and preventing unlawful activities and ensuring network and data security.

By way of derogation from the basic regulation, a direct contractual relationship exists between Nets and you as a cardholder or user of payment services when you use the service operated by Nets under the name "Save my Details".

https://cdn.dibspayment.com/terms/easy/Nutzungsbedingungen_Cookie-Hinweis.pdf

9. Your rights

In principle, you are entitled to the rights regarding your data stored by us:

• Information
• Correction
• cancellation
• Restriction
• Data portability
• Revocation and objection

Please contact us for this (info@lux-presents.com).

If you believe that the processing of your data violates data protection law or that your data protection rights have been violated in any other way, you can lodge a complaint with the competent supervisory authority. In Austria, this is the data protection authority (dsb@dsb.gv.at).

10. You can reach us under the following contact details:

Sehnsuchtsorte GmbH | Grünauerstraße 28 | 5071 Wals bei Salzburg / Austria
T.: +43 664 4202788 | E.:  info@lux-presents.com