Within the framework of this data protection declaration, we would like to inform you about the type, scope and purpose of the personal data collected, used and processed by us.
Personal data refers to all information that can be directly or indirectly related to you personally. This includes, for example, your name, your address, your e-mail address, online identification and your user behavior, if you are identified or could be identified by this information or action.
We use SSL encryption on our website to protect your personal data and other confidential content (e.g. in the case of enquiries via our contact form or in the context of order and payment processing).
If you have any questions regarding the collection, processing or use of your personal data, for information, correction, blocking or deletion of data as well as revocation of any consent given or objection to certain data processing, please contact the responsible person named below.
I. Name and contact details of the person responsible
The responsible person within the context of Art. 4 No. 7 of the General Data Protection Regulation (DS-GVO), other data protection laws applicable in the Member States of the European Union and other provisions of data protection law is:
Ludwig Reiter Schuhmanufaktur GmbH
II. Your rights
1. In the following, we inform you about your rights with regard to personal data concerning you:
- you have the right to request free of charge
- to request confirmation as to whether personal data relating to you is being processed by us (Art. 15 DS-GVO),
- to request information about your personal data processed by us (Art. 15 DS-GVO). In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data have been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of complaint, the origin of your data if it has not been collected by us, as well as the existence of automated decision-making, including profiling, and, if applicable, meaningful information about its details,
- demand the correction of incorrect or incomplete personal data stored by us without delay (Art. 16 DS-GVO),
- request the erasure of your personal data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the assertion, exercise or defense of legal claims (Art. 17 DS-GVO),
- to request the restriction of the processing of your personal data, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you object to its erasure and we no longer require the data, but you need it for the assertion, exercise or defense of legal claims or you have objected to the processing pursuant to Art. 21 DS-GVO (Art. 18 DS-GVO),
- to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request the transfer to another controller (Art. 20 DS-GVO),
- to revoke your consent once given to us at any time. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.
2. If you have asserted the right to rectification, erasure or restriction of processing against us, we are obliged to notify all recipients to whom the personal data concerning you have been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort. You also have the right to be informed about these recipients (Art. 19 DS-GVO).
3. You also have the right to complain about our processing of your personal data to the data protection supervisory authority responsible for us (https://www.dsb.gv.at/) (Art. 77 DS-GVO).
III. Provision of our website and creation of server log files
1. During the mere informational use of our website, i.e. if you do not register or otherwise transmit information to us, we only collect the personal data that your browser transmits to our server. When you access our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure the stability and security of our website:
- Date and time of access
- Time zone difference from Greenwich Mean Time (GMT)
- Content of the request (specific page)
- Access status/HTTP status code
- the amount of data transferred
- Website from which your request comes
- Web pages that you call up on our site
- Information about the type of browser and the version used
- Operating system and its interface
- Language and version of the browser software.
This general data and information is stored in the log files of our server only temporarily and separately from your personal data that you may voluntarily provide to us. The data and information collected anonymously in the log files are evaluated by us solely for statistical purposes with the aim of increasing data protection and data security in our company and ensuring an optimal level of protection for the personal data we process.
2. The legal basis for data processing in connection with server log files is Art. 6 para. 1 p. 1 lit. f DS-GVO. The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session is ended by you.
The collection of the data is absolutely necessary for the provision and storage of the data in log files for the operation of our website. There is therefore no possibility for you to object to this data processing.
- make it easier for you to use our website and to make our services more effective and user-friendly
- save your login details so that you do not have to re-enter them,
- temporarily store the goods you have placed in the virtual shopping basket.
2. We use two types of cookies on our website: session cookies and permanent cookies. Session cookies are temporary cookies that are stored on your computer system until you leave our website. Sitzungs-Cookies speichern eine sogenannte Session-ID, mit der sich verschiedene Anfragen Ihres Browsers einer gemeinsamen Sitzung zuordnen lassen. Die Sitzungs-Cookies werden gelöscht, wenn Sie sich ausloggen oder den Browser schließen. Permanent cookies are stored on your hard drive until you delete them or the cookies have reached their respective expiry date (maximum 12 months). We use these persistent cookies to store your preferred settings on the website and to recognize you when you return to our website.
V. Use of our online shop (order function), customer account
1. If you would like to order in our online shop, it is necessary for the conclusion of the contract that you enter your following personal data (mandatory data):
- First name, last name
- Delivery address (street, postcode, city, country), billing address (if different)
- E-mail address
Failure to provide your data would result in you not being able to use the order function of our online shop. You still have the option of registering a personal customer account with us as part of the ordering process or via the "Register" button by providing the aforementioned data. The customer account allows you to complete future orders more quickly, check the status of your orders, view previous orders, save alternative addresses and manage your catalogue and newsletter registration.
2. We process the data you provide to process your order and any selected catalogue and newsletter registrations, including our services in the event of revocations, claims for defects and to answer your enquiries. Third parties commissioned by us, such as shipping partners and payment service providers, only receive personal data if their transmission is necessary for the delivery of your order and the processing of payments.
3. If you decide to pay with "SOFORT Überweisung" during your order process, your personal data will be automatically transmitted to SOFORT Austria GmbH, Mayerhofgasse 1/20, A-1040 Vienna ("SOFORT"). SOFORT assumes the function of an online payment service provider that enables cashless payment of products and services.
The transmission of your data is necessary for the processing of payments via SOFORT and is aimed at confirming your identity and administering your payment order. SOFORT may pass on your personal data to affiliated companies and service providers or subcontractors, insofar as this is necessary for the fulfilment of contractual obligations or the data is processed on behalf.
The personal data transmitted by us to SOFORT may be transmitted by SOFORT to credit agencies. The purpose of this transmission is to check identity and creditworthiness and to prevent fraud.
The data protection principles on which SOFORT bases the processing of your data can be found in the data protection information displayed to you during the payment process via "SOFORT Überweisung".
4. If you decide to pay by "credit card" during your order process, your personal data will be automatically transmitted to our payment service provider Unzer Austria GmbH, Grüngasse 16, A-1050 Vienna.
The personal data transmitted to Unzer is regularly first name, last name, address, credit card number, invoice amount, currency and transaction data (such as number of items, item number, invoice amount and taxes and other invoice information).
The transmission of your data is necessary for the processing of payments through Unzer and is intended to confirm your identity and to administer your payment order.
5. The legal basis for processing your data in connection with the fulfilment of a contract or pre-contractual measures is Art. 6 para. 1 p. 1 lit. b DS-GVO.
6. We are obliged by commercial and tax law to store your address, payment and order data in connection with a purchase contract for a period of up to seven years. The period starts with the end of the calendar year for which the booking was made or to which the receipt relates.
VI. Communication by e-mail
1. You can contact us at any time via the e-mail address provided by us. In this case, only the personal data you send us by e-mail will be stored.
2. The legal basis for the processing of the data is Art. 6 para. 1 p. 1 lit. f DS-GVO. The legal basis for processing your data in connection with the fulfilment of a contract or pre-contractual measures is Art. 6 para. 1 p. 1 lit. b DS-GVO.
3. We use the data exclusively for responding to your request. We delete the data accruing in this context after the storage is no longer necessary or restrict the processing if there are legal retention obligations. You can object to the processing at any time. Please address your objection to the contact details given in section I.. However, the correspondence cannot then be continued.
VII. Newsletter registration
1. On our website, you have the possibility to subscribe to a free newsletter, with which we inform you about our current and interesting offers. To register for the newsletter, you only need to enter your e-mail address. In addition, the following data is collected for the purpose of logging your registration:
- Date and time of registration
2. We use the so-called double-opt-in procedure to register for our newsletter. This means that after your registration, we will send you an email to the email address you provided, in which we ask you to confirm that you agree to receive the newsletter. If you do not confirm your registration within 24 hours, your registration will be automatically deleted. Nach Ihrer Bestätigung speichern wir Ihre E-Mail-Adresse zum Zweck der Zusendung des Newsletters. Rechtsgrundlage ist Art. 6 Abs. 1 S. 1 lit. a DS-GVO. Ihre E-Mail-Adresse wird solange gespeichert, wie Ihr Abonnement des Newsletters aktiv ist.
3. You can revoke your consent to receive the newsletter and unsubscribe at any time. You can declare the revocation by clicking on the unsubscribe link provided in every newsletter e-mail, via the newsletter management in your customer account (if available) or by e-mail to the contact data stated in section I..
VIII. Unsolicited applications and application procedures
We collect and process the personal data you send us for the purpose of processing the application procedure. Processing may also take place electronically if you send us your application documents by e-mail.
The legal basis for the processing of your data is Art. 6 para. 1 p. 1 lit. b DS-GVO. You can object to the storage of your data for applications and in the application process at any time by sending an e-mail to the contact details provided in section I. above.
If we conclude an employment contract with you, the transmitted data will be stored for the purpose of processing the employment relationship in compliance with the statutory provisions. If no employment contract is concluded with you, the application documents will be automatically deleted no later than eight months after notification of the rejection decision, provided that no other legitimate interests prevent deletion.
IX. Routine deletion and blocking of your personal data
We process and store your personal data in each case only for the period of time required to achieve the purpose for which it is stored or insofar as this has been provided for by the European Directive and Regulation Maker or another legislator in laws or regulations to which we are subject. If the purpose of storage no longer applies or if a storage period prescribed by the European Directive and Regulation Maker or another competent legislator expires, the personal data will be routinely blocked or deleted in accordance with the statutory provisions, unless you have consented to any further use of your data.
X. Right of appeal (Art. 21 DS-GVO)
If we process your personal data on the basis of our overriding legitimate interest within the framework of a balancing of interests pursuant to Art. 6 (1) sentence 1 lit. f DS-GVO, you have the right to object to this processing with effect for the future free of charge at any time for reasons arising from your particular situation.
If we process your personal data for the purpose of direct marketing, you also have the right to object free of charge at any time to processing for the purpose of such marketing with effect for the future; this also applies to profiling insofar as it is associated with such direct marketing.
Please address your objection to the responsible person named in point I. (e.g. by e-mail).
1. In addition to our website, we also operate an online presence on the social network of Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (Facebook).
When you visit our Facebook website, Facebook automatically stores personal data about you, such as your IP address and the web pages you visit. Facebook processes this data, among other things, to create user profiles and for advertising and analysis purposes.
2. Facebook provides us with aggregate statistics for our Facebook website to help us understand how visitors interact with our posts or other content (called "Page Insights").
For example, Facebook provides us with information about the number of people or accounts who have viewed, reacted to or commented on our posts on Facebook, as well as aggregate demographic and other information that allows us to learn about interactions with our Facebook website.
You can see an example of how the statistics are prepared for us by Facebook here. The statistics are provided to us by Facebook in anonymized form. It is not possible for us to draw conclusions about your person and your individual user behavior when evaluating the statistics (however, we may be able to associate your profile picture with a "Like" for our Facebook website if you have set your "Like" for Facebook websites to "public").
We use https://www.facebook.com/help/156148547407the statistics provided to us by Facebook to analyze visitor behavior for the purpose of market research on our Facebook website and, if necessary, for the placement of targeted advertisements.
3. If personal data is also or exclusively processed by Facebook via our Facebook website for the creation of aggregated statistics, we are jointly responsible with Facebook for this data processing.
We have therefore concluded an agreement with Facebook for processing operations subject to joint responsibility in accordance with Art. 26 DS-GVO (General Data Protection Regulation).
This agreement essentially stipulates that Facebook is primarily responsible for providing you with further information about the joint processing and for enabling you to exercise your rights under the DS-GVO (right to information, rectification, portability and deletion of your data as well as to object to the processing of your data and to restrict processing and your right to lodge a complaint with a supervisory authority).
You can access the content of the agreement with further information on your rights, objection options and settings for the protection of your data here.
You can contact Facebook's data protection officer via the online contact form provided by Facebook. Facebook also processes your personal data on servers in the USA.
4. With our Facebook website, we protect our legitimate interests in a presentation of our offers and services that is as customer-oriented as possible within the framework of a balancing of interests. We also collect personal data ourselves within the framework of our Facebook website when you contact us via Facebook Messenger, for example. This data, which you provide voluntarily, is processed solely for the purpose of responding to your query.
The legal basis for data processing in connection with our Facebook website and the statistical evaluations we receive from Facebook is Art. 6 para. 1 p. 1 lit. f DS-GVO.
If your contact is aimed at concluding a contract or taking pre-contractual measures, Art. 6 para. 1 p. 1 lit. b DS-GVO is the additional legal basis.