SZA BURNS

Privacy Policy

Preambel

We attach great importance to safeguarding your privacy and protecting your personal data. For this reason, we are informing you about the processing of your personal data with this privacy policy so that you can safely visit our website in the knowledge and confidence that we will only process your data in accordance with this privacy policy and the statutory provisions. The declaration sets out transparently for you which types of personal data are affected and in what way, to what extent and for what purpose they are processed by us. The privacy policy is comprehensive and therefore applies to all processing activities carried out by us. You are not obliged to provide us with personal data. However, if you do, we may not be able to assess and process your request in accordance with your interests.

Personal data is all information that relates to an identified or identifiable person.

1. Responsible Office

Below you will find information on the responsible body or the person responsible in accordance with the applicable data protection laws, as well as your contact options for data protection issues:

SZA BURNS
Rue Du N 152
2300 La Chaux-de-Fonds
Schweiz

represented by: Danny Burns

Phone:  +49151 11810192
EMail:  info@szaburns.com

This privacy policy informs data subjects about the purposes, scope and nature of the processing of personal data by the above-mentioned controller. The controller is the natural person who alone or jointly with others determines the purposes and means of the processing of personal data. The controller is the body to which you can turn if you have any questions or wish to assert your rights and to which you are entitled to a response.

We take the issue of data protection very seriously and therefore work together with certified data protection officers. However, we are not legally obliged to appoint a data protection officer and have therefore not appointed one. If you have any questions about data protection, we will be happy to answer them in detail using the contact details provided.

LEGAL BASIS FOR DATA PROCESSING

According to the GDPR, personal data may only be processed within the EU/EEA with a legal basis in accordance with Art. 6 GDPR. In most cases, this is a legitimate interest on our part (Art. 6 para. 1 sentence 1 lit. f) GDPR) or your consent (Art. 6 para. 1 sentence 1 lit. a) GDPR), as long as you give it. If you have a contractual relationship with us, or if such a relationship is in the offing, this also justifies the processing of personal data (Art. 6 para. 1 sentence 1 lit. b) GDPR). Furthermore, there is the possibility of compliance with a legal obligation for processing on our part (Art. 6 para. 1 sentence 1 lit. c) GDPR). The legal bases in individual cases are listed below in this privacy policy. Please also note that, depending on your place of residence or domicile, other data protection regulations, in particular national regulations, may apply.

2. Nature and purpose of the use of personal data and its collection and storage

General Information

Depending on your use of our website, we process different personal data for different purposes.

Various purposes may include, in particular, the provision of our website, the management of our IT infrastructure, security measures, office procedures, organizational management and marketing. Furthermore, the purpose of processing may be the fulfillment of contractual obligations, including the provision of a contractually owed service, as well as the communication, administration and answering of contact and other inquiries and/or the implementation of competitions.

For these purposes, we process different types of data, primarily inventory, usage, content and/or metadata, but also payment, contact, communication, location, other contractual and/or procedural data, as well as event data. The types of data processed are always limited depending on the corresponding purpose.

The following categories of persons may be affected by the processing of personal data by us: Users and interested parties; customers, applicants, business and other contractual partners; other communication partners, participants in competitions or similar contests and members.

The respective purposes, data types and data subjects are also listed in detail below.

2.1 WHEN VISITING “WWW.SZABURNS.COM” GENERAL DATA PROCESSING AND DATA PROCESSING BEYOND THE WEBSITE

SERVER-LOG-FILES

When you visit our website, the following data is automatically processed, which is required to establish a smooth connection between your device and our website and to display the website properly:

  • IP address
  • Name and address of the website and files visited
  • Access time
  • Notification of successful retrieval
  • Operating system and browser used
  • Referrer URL
  • Internet provider

The processed personal data is also used to optimize and ensure the security of the website and the information technology systems.

The legal basis for the processing of this data is our legitimate interest, which provides for the processing of personal data to safeguard the legitimate interests of the controller. The legitimate interests arise from the above reasons. The data is deleted as soon as it is no longer needed, which is the case when the session ends, unless there are legitimate interests in further storage (e.g. unlawful access).

  • Processed Data: Communication and process data (e.g. IP addresses), usage data (e.g. access times)
  • Affected persons: Users
  • Purposes of processing: Provision of an optimal online presence, IT infrastructure; security measures
  • Legal basis: legitimate interests (Art. 6 para. 1 sentence 1 lit. f GDPR) Consent (Art. 6 para. 1 sentence 1 lit. a GDPR)

Guarantees: Contract data processing agreement and, if data is transferred to third countries, the application of EU standard contractual clauses and, if applicable, additional certification of the hoster/provider in accordance with the EU-US Data Privacy Framework DPF.

According to Art. 45 GDPR, all EU Member States are safe countries for the export of personal data and currently (last accessed in June 2023) the following third countries: Andorra, Argentina, Canada, Faroe Islands, Guernsey, Israel, Isle of Man, Jersey, New Zealand, Switzerland, Uruguay, Japan, the United Kingdom and South Korea have been classified by the European Commission as compliant with data protection regulations, meaning that the export of personal data from the EU to these countries is permitted.

With regard to our website, we also refer to the privacy policy of the hosting provider Aut O’Mattic A8C Ireland Ltd, WooCommerce Ireland Ltd, Grand Canal Dock, 25 Herbert Pl, Dublin, D02 AY86, Ireland:

Klicken Sie auf den unteren Button, um den Inhalt von automattic.com zu laden.

Inhalt laden

REGISTRATION FUNCTION

You can register on our website and create a customer account in order to access additional content and use other functions. The personal data that you provide during the registration process will be stored.

Please note that it is necessary to provide certain minimum information to enable registration and the creation of a customer account. The minimum information required is marked. We use this data to create a customer account that allows you to log in repeatedly and store certain information. You can change or delete the personal data you have entered yourself at any time.

The legal basis for the processing of this data is consent, processing for the purpose of fulfilling a contract and processing to fulfill a legal obligation.

Data relating to concluded contracts will be stored for as long as claims arising from these contracts can be considered. The data will then be deleted. Data provided by you will be deleted at your request, unless its storage is necessary for contractual purposes from the previous sentences. All other data will be deleted as soon as the purpose for which it was stored no longer applies.

  • Processed data: Contact data (e.g. e-mail address), inventory data (e.g. name, address)
  • Data subjects: User
  • Purposes of processing: Guarantee of contractual services/obligations, provision of an optimal online presence, collection of feedback, administration; security measures
  • Legal bases: legitimate interests (Art. 6 para. 1 sentence 1 lit. f GDPR), legal obligations (Art. 6 para. 1 sentence 1 lit. c GDPR) consent (Art. 6 para. 1 sentence 1 lit. a GDPR)

BLOGS and Publications

We use blogs or other comparable publication media on this website. In this context, data is only collected to the extent necessary for proper presentation and for security reasons. Details can be found in this privacy policy. This processing is based on our legitimate interest in the appealing design of our website and communication with our users.

If you write posts yourself using a comment function or similar functions, further data processing may take place. In particular, this includes your IP address and all data that you enter when using the function. In this case, the data processing takes place on the basis of your consent, which you give when publishing your contribution. We also have a legitimate interest in data processing to enable the prosecution of unlawful posts.

  • Processed data: Communication and process data (e.g. IP addresses), usage data (e.g. access times), content data, contact data (e.g. e-mail address), inventory data (e.g. name, address)
  • Data subjects: User
  • Purposes of processing: Guarantee of contractual services/obligations, provision of an optimal online presence, collection of feedback, administration; security measures
  • Legal bases: legitimate interests (Art. 6 para. 1 sentence 1 lit. f GDPR), consent (Art. 6 para. 1 sentence 1 lit. a GDPR)

NEWSLETTER

On this website, you have the option of subscribing to our free newsletter, which is sent to the e-mail address you have provided at regular intervals or on special occasions. The newsletter mainly contains promotional information about the services and products we offer, special promotions (e.g. competitions), blog entries and job offers. To register for the newsletter, you must provide your name and e-mail address. You can register via :

Registration takes place via a so-called double opt-in procedure. After registering, you will receive an e-mail with a confirmation link. You are only registered for our newsletter once you have confirmed your registration. This ensures that no registrations can be made under other people’s e-mail addresses.

This personal data is processed by us exclusively for the purposes of the newsletter on the basis of consent. You can unsubscribe from the newsletter at any time. In this case, the data you have provided will be deleted.

All registrations are logged by us or the service provider commissioned by us so that we can prove compliance with the legal requirements for the registration process if necessary. In this context, your IP address and the time of registration and confirmation are stored. Data processing is carried out on the basis of our legitimate interest in the verifiability of a proper process. If we have commissioned a service provider for the dispatch, this is done on the basis of our legitimate interest in an efficient dispatch system.

The data to prove compliance with the legal requirements may be stored beyond the subscription to the newsletter. This storage serves exclusively to defend against possible claims. In this case, the data will be deleted as soon as it is no longer required for this purpose. This is the case as soon as the applicable limitation periods have expired. As a rule, the data of data subjects from the EU will be deleted after three years. The processing of this data serves exclusively to defend against possible claims. You can submit a request for erasure at any time. In this case, we will delete the stored data prematurely, provided that you also confirm that you have given your consent to receive the newsletter.

  • Processed data: Communication and process data (e.g. IP addresses), usage data (e.g. access times), contact data (e.g. e-mail address), inventory data (e.g. name, address)
  • Data subjects: Communication partner
  • Purposes of processing: Direct marketing
  • Legal basis: Consent Art. 6 para. 1 sentence 1 lit. a GDPR Art. 6 para. 1 lit. f) GDPR legitimate interest
  • Option to object: You have the option to stop receiving our newsletter at any time by withdrawing your consent or objecting to further receipt. You will find an unsubscribe link at the end of each newsletter or you can use one of the contact options listed above, preferably by email, to unsubscribe.

BUSINESS PERFORMANCE AND APPLICATIONS

If you are a business partner, applicant, customer or other contractual partner in a contractual or quasi-contractual legal relationship with us, we generally process your personal data to fulfill our obligations arising from this relationship – the provision of the service owed or pre-contractual measures. In addition, depending on the individual data, there may be legal obligations for processing, such as tax obligations. In addition, we regularly have a legitimate interest in the processing, in particular for the proper management and protection of business operations. Your data will only be passed on to third parties in accordance with legal requirements. The data processed in this context includes, in particular, inventory and contact data (name, address, telephone number, e-mail address) as well as payment data (bank details, invoices). If you use our website as part of the contractual relationship, corresponding usage and metadata (e.g. IP address, time and duration of access, any consents) may also be processed.

As a rule, we process this personal data after the end of the contractual relationship for as long as any statutory warranty or comparable obligations exist or as long as statutory retention periods exist.

We would like to point out that the terms and conditions and data protection notices of third parties may also apply if they become part of the contractual relationship. This may be the case if we use or commission third-party providers to fulfill our services and obligations.

  • Processed data: Communication and process data (e.g. IP addresses), usage data (e.g. access times), contact data (e.g. e-mail address), payment data, inventory data (e.g. name, address)
  • Data subjects: Interested parties, applicants, customers, contractual and business partners
  • Processing purposes: Guarantee of contractual services/obligations, communication and contact requests, office and organizational procedures; security measures, administration, checking suitability for a position
  • Legal bases: Contractual claims (Art. 6 para. 1 sentence 1 lit. b GDPR), Legal obligations (Art. 6 para. 1 sentence 1 lit. c GDPR), Legitimate interests (Art. 6 para. 1 lit. f GDPR)

PERFORMANCE OF TASKS ACCORDING TO RULES OF PROCEDURE OR ARTICLES OF ASSOCIATION

If you are a member or have a comparable relationship with us, for example as a supporter or business partner, we process personal data in the performance of our tasks and the receipt of benefits or other services. This may also include a legitimate interest on our part, for example in organizational tasks. The exact data processed in this context depends on the corresponding membership or other contractual relationship. As a rule, this involves inventory and contact data (name, address, telephone number, e-mail address), payment data (bank details, invoices) and other contract data (term, subject matter of the contract).

We process this data as long as it is necessary for the corresponding statutory purposes. This also includes any warranty and liability obligations. Once these purposes no longer apply, we destroy the data with the exception of data for which there are statutory retention obligations.

  • Processed data: Contract data (e.g. subject matter of the contract), contact data (e.g. e-mail address), payment data, inventory data (e.g. name, address)
  • Data subjects: Users, members, contractual and business partners
  • Processing purposes: Guarantee of contractual services/obligations, communication and contact requests, administration
  • Legal bases: Contractual claims (Art. 6 para. 1 sentence 1 lit. b GDPR), Legitimate interests (Art. 6 para. 1 lit. f GDPR)

COOKIES

If we use so-called cookies – small text files – to operate this website, these are stored on your device and are intended, for example, to ensure the functionality of the website or to enable an analysis of website usage. In this case, personal data is processed. Details on individual cookies, such as the respective legal basis (e.g. consent or legitimate interest), the storage period, or revocation and objection options, are then listed in detail in the cookie management below. With regard to the use of cookies, data subjects generally have a right of objection or the option of deactivating them in the browser settings. However, we would like to point out that this may mean that the full functionality of the website can no longer be guaranteed.

If we use cookies, this is done either on the legal basis of your consent, or with a legitimate interest, for example to improve our website functions, or to fulfill contractual obligations, e.g. if a cookie is necessary to conclude a contract. Cookies are stored for different lengths of time. Some cookies are only temporary and are deleted at the latest when you close your browser or app. Other cookies are stored permanently on your device. You can delete the cookies permanently stored on your device yourself at any time. Alternatively, please refer to the cookie management tool to find out when cookies are automatically deleted.

The selection of cookies for analysis / statistics or advertising can be adjusted by you at any time via the cookie settings.

Opt-In and Opt-Out

When you access this website for the first time, you can generally consent to the use of cookies or give your user-defined consent to the use of different cookies or refuse them.

If you agree to the use of cookies that require consent, we will save your declaration of consent so that you do not have to obtain it again the next time you visit the website; please refer to our cookie consent management for the storage periods. In addition to the declaration, your IP address, the browser you are using and the model of the end device you are using may also be stored. You can revoke your declaration(s) of consent at any time.

If cookies are used, the storage of cookies in the terminal device you are using and access to the stored cookies is based on the fact that they are either absolutely necessary for the provision of the website or are carried out with your consent on the basis of clear and comprehensive information. Consent to cookies requiring consent can be revoked at any time. Data processing is based on the E-Privacy Directive 2002/58/EC of the European Union. It is transposed into national law in Germany in Section 25 (1) and (2) TTDSG. In Austria, the transposition into national law takes place in Section 165 (3) TKG 2021 AT.

  • Processed data: IP address, declaration of consent, browser, end device used
  • Data subjects: User
  • Purposes of processing: Guarantee of contractual services/obligations, functioning online offer, effective and targeted advertising measures
  • Legal basis: Consent (Art. 6 para. 1 lit. a) GDPR), legitimate interests (Art. 6 para. 1 lit. f) GDPR), fulfillment of contractual obligations (Art. 6 para. 1 lit. b) GDPR)

Cookie Consent Lösungen

Borlabs Cookie

  1. We have installed the Borlabs Cookie Consent Plugin for WordPress on our website (service provider: Borlabs – Benjamin A. Bornschein, Georg-Wilhelm-Str. 17, 21107 Hamburg, Germany) as a consent management service.
  2. Data categories and description of data processing: Cookies, date and time of visit, device information, browser information, anonymized IP address, opt-in and opt-out data. This service enables us to obtain and document your consent to the storage of cookies. In addition, a cookie is stored in your browser in order to be able to assign the consent given or its revocation to you. You can find further information in Borlabs’ privacy policy here: https://de.borlabs.io/kb/welche-daten-speichert-borlabs-cookie/.
  3. Purposes of data processing: Compliance with legal obligations, consent storage.
  4. Legal basis: The legal basis for the processing of personal data is our legitimate interest in the above purposes pursuant to Art. 6 para. 1 sentence 1 lit. f) GDPR and the fulfillment of legal obligations pursuant to Art. 6 para. 1 sentence 1 lit. c) GDPR.
  5. Storage period: Storage of the data until you delete the Borlabs cookie in your browser yourself or the purpose for data storage no longer applies. The proof of revocation of a previously granted consent will be kept for a period of three years. The retention is based on our accountability pursuant to Art. 5 para. 2 GDPR and the standard limitation period.
  6. Data transfer/recipient category: the data will not be transferred to Borlabs.

COMPETITIONS AND CONTESTS

We only process data from competition and contest participants in compliance with data protection requirements insofar as the processing is contractually necessary in the handling process of the competition, the participants have given their consent or legitimate interests are fulfilled (e.g. protection and security interests of the competition participants).

If entries are published as part of the competitions (e.g. as part of reporting on the winners), we inform you that the names of participants may also be made accessible to the public. Participants can object to the publication of their name at any time. If the competition takes place within an online platform or a social network, the data protection and usage provisions of these platforms also apply. In such cases, we are responsible for the information provided by participants as part of the competition and requests should be directed to us.

The participants’ personal data will be deleted after the end of the competition if the data no longer needs to be available for the participants’ information purposes. As a rule, participant data will be deleted no later than 6 months after the end of the respective competition. However, winners’ information may be retained beyond this period, in particular to process possible warranty claims or to ensure the payment of prizes.

However, winners’ information may be retained beyond this period, in particular to process any warranty claims or to ensure payment of the prizes. The exact retention period depends on the type of prize and ends as soon as all possible claims are time-barred. In addition, we refer to 4 (Storage period and deletion of personal data) of this privacy policy.

In the context of reporting on the competition, the data may also be stored for longer than this period.

If personal data is also collected for other purposes in the course of the competition, its storage and processing is subject to the data protection guidelines that apply to this specific use.

  • Processed data types: Content data, inventory data (e.g. name, address), communication and process data (e.g. willingness to consent, IP addresses)
  • Data subjects: Competition participants
  • Processing purposes: Implementation of the competitions
  • Legal bases: Contractual claims (Art. 6 para. 1 sentence 1 lit. b) GDPR), consent of the participants (Art. 6 para. 1 lit. a) GDPR), legitimate interests (Art. 6 para. 1 lit. f) GDPR)

PLUGINS AND EMBEDDED FUNCTIONS

We integrate functions and content from external providers, hereinafter referred to as “third-party providers”, into our online platform. These are, for example, graphics, videos or interactive maps, which are referred to as “content”.

In order to display this content or functions, it is necessary for the third-party providers to process the user’s IP address. The transmission of this content to the user’s browser is not possible without the use of the IP address. We endeavor to only integrate content from providers that use the IP address exclusively for the delivery of content. The third-party providers may also use “pixel tags” (invisible graphics or “web beacons”) for statistical or marketing purposes. These “pixel tags” can be used to analyze information such as visitor traffic on our pages.

The pseudonymous information collected can be stored in cookies on the user’s device. These cookies contain technical information about the browser, the operating system, referring websites, visit times and other information about the use of our platform.

  • Processed data: Communication and process data (e.g. IP addresses), usage data (e.g. access times), content data, contact data, inventory data (e.g. names, address), location data; event data (e.g. via Facebook Pixel, which can be transmitted by us to Facebook, these are processed due to target group formation and do not contain any actual content, no contact information, no login information), the event data will be deleted by Facebook after a maximum storage period of 2 years
  • Data subjects: Users
  • Processing purposes: Guarantee of contractual services/obligations, provision of the online presence, creation of user profiles, collection of feedback, marketing measures
  • Legal basis: Consent (Art. 6 para. 1 lit. a GDPR), Legitimate interests (Art. 6 para. 1 lit. f GDPR)

WEBANALYSis

Web analytics as a sub-area of digital analytics comprises various methods for collecting and analyzing data about companies’ online presences. This data is used by the website operator to optimize the customer experience. Furthermore, test procedures can also be used to test different versions of the online offering.

For these purposes, we can create usage profiles that contain pseudonymized data about usage processes. The information is stored in the end device or browser and retrieved from there. The data collected includes websites visited, functions used and technical details (e.g. the browser used). If users have consented to the collection of their location data by us or the service providers we use, this data may be collected.

Users’ IP addresses are also stored, but we use a process called IP masking. This pseudonymizes the IP address to protect the user’s identity. In general, we do not store any personal data (such as email addresses or names) for web analysis, A/B tests and optimization processes, but only pseudonymized data. Neither the providers nor we therefore know the identity of the users.

  • Processed data: Communication and process data (e.g. IP addresses), usage data (e.g. access times)
  • Data subjects: Users
  • Purposes of processing: Generation of user profiles, reach measurement (e.g. determining the frequency of visits to a website)
  • Legal bases: Consent (Art. 6 para. 1 lit. a GDPR) legitimate interest (Art. 6 para. 1 lit. f) GDPR)
  • Security measures: IP masking
  • Guarantees: Contract data processing agreement and, if data is transferred to third countries, the application of EU standard contractual clauses and, if applicable, additional certification of the hoster/provider in accordance with the EU-US Data Privacy Framework DPF

CUSTOMER REVIEWS AND EVALUATION PROCESS

We participate in rating and review processes to evaluate, promote and improve our services. If users rate us or provide feedback via the platforms or processes, the general terms and conditions or terms of use and the data protection guidelines of the respective providers apply. Normally, an account with the respective provider is required for the evaluation.

In order to ensure that the reviewers have actually used our services, we transmit the necessary data, such as the customer’s name, email address and order or item number, to the relevant platform with the customer’s consent. This information is used exclusively to verify the ratings; for further information, please refer to the information on the rating and review procedures we use in this privacy policy.

  • Processed data types: Content data, inventory data (e.g. name, address), communication and process data (e.g. willingness to consent, IP addresses)
  • Data subjects: Users, more specifically: customers
  • Processing purposes: Feedback for marketing purposes
  • Legal bases: Consent (Art. 6 para. 1 lit. a GDPR), Legitimate interests (Art. 6 para. 1 lit. f GDPR)

SOCIAL MEDIA Presentation

We have online presences in social networks. In this context, we process data of the respective users for information purposes and for communication with them. Data processing may take place in third countries, which may make it more difficult to enforce the rights of data subjects. Details can be found in the relevant section of this privacy policy and in the privacy policies of the social networks used.

Data processing in the social network by the respective operator is primarily carried out to evaluate user data and for advertising purposes. The information collected can be used to form clusters in order to display interest-based ads to users. To enable this user tracking, cookies (small text files) are stored on users’ end devices, for example, which are used to assign and record the data. Data collection also takes place independently of the end device used after logging into the respective social network.

Specific information on the forms of data processing by social networks and the respective objection options can be found in the individual data protection declarations of the companies and in our clauses. The most effective way to assert the rights of data subjects is to contact the operator directly. However, you can also contact us for this purpose.

  • Processed data: Communication and process data (e.g. IP addresses), content data, contact data (name, e-mail address)
  • Data subjects: Users
  • Purposes of processing: Collecting feedback, communication, marketing measures
  • Legal bases: Legitimate interests (Art. 6 para. 1 sentence 1 lit. f GDPR)

ADVERTISING COMMUNICATION

We process your contact data for the purposes of advertising communication if you have given us your consent to do so. You can revoke this consent at any time. In this case, the data will be deleted and you will no longer be contacted by us for advertising purposes.

On the basis of our legitimate interest, the data may be stored by us as proof of compliance with legal requirements even after you have withdrawn your consent. This storage serves exclusively to defend against possible claims. In this case, the data will be deleted as soon as it is no longer required for this purpose. This is the case as soon as the applicable limitation periods have expired. As a rule, the data of data subjects from the EU will be deleted after three years. In addition, we refer to 4 (Storage period and deletion of personal data) of this privacy policy.

The processing of this data serves exclusively to defend against possible claims. You can submit a request for deletion at any time. In this case, we will delete the stored data prematurely, provided that you also confirm that consent was given for the advertising communication that took place.

  • Processed data: Contact data (e.g. e-mail address), inventory data (e.g. name, address)
  • Data subjects: Communication partner
  • Purposes of processing: Direct marketing
  • Legal basis: Consent (Art. 6 para. 1 sentence 1 lit. a GDPR), legitimate interests (Art. 6 para. 1 sentence 1 lit. f GDPR)

CONTACT BY TELEPHONE, FAX, E-MAIL AND/OR LETTER POST

If you contact us by telephone, fax, e-mail and/or post, the personal data you provide in this context will be processed and stored by us to enable us to evaluate the communication. The data collected is limited to:

  • First and last name
  • Telephone number / e-mail address / postal address
  • Content of the message or other voluntarily transmitted data

When contacting us via a contact form or our presence on social media, additional data may be collected. The additional data collected includes:

  • IP address
  • Websites visited
  • Time of access

The personal data collected by us in this context will not be passed on to third parties unless this is necessary for the proper processing of the matter on the basis of legitimate interests. Personal data may then be transferred to the affected customers, freelancers, cooperation partners and authorities. The legal basis for data processing is legitimate interests. In the case of contact aimed at concluding a contract, the legal basis for processing is.

  • Processed data: Communication and process data (e.g. IP addresses), content data, contact data (e.g. e-mail address)
  • Data subjects: Communication partner
  • Purposes of processing: Collecting feedback, providing an optimal online presence, communication and contact requests
  • Legal bases: Contractual claims (Art. 6 para. 1 sentence 1 lit. b GDPR), legitimate interests (Art. 6 para. 1 sentence 1 lit. f GDPR)
  • Guarantees: If data is transferred to third countries, EU standard contractual clauses apply and, if applicable, the provider is also certified in accordance with the EU-US Data Privacy Framework DPF. According to Art. 45 GDPR, all EU Member States are a safe data export country for personal data and currently (last access in June 2023) the following third countries: Andorra, Argentina, Canada, Faroe Islands, Guernsey, Israel, Isle of Man, Jersey, New Zealand, Switzerland, Uruguay, Japan, the United Kingdom and South Korea have been classified by the European Commission as compliant with data protection regulations, meaning that the export of personal data from the EU to these countries is permitted.

With regard to our telephone numbers, we also refer to the privacy policy of the telephone provider Telekom Deutschland GmbH, Landgrabenweg 151, 53227 Bonn, Germany: https://www.telekom.de/ueber-das-unternehmen/datenschutz#fragen-und-antworten

2.2 SPECIAL DATA PROCESSING ON WWW.SZABURNS.COM

PAYPAL

This website uses the online payment service provider PayPal of PayPal Holdings Inc, San Jose California USA. PayPal (Europe) S.a.r.l. et Cie , S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (“PayPal”) is responsible for the European region. For payment methods such as credit card via PayPal, direct debit via PayPal or, if available, “purchase on account” or “payment by installments” via PayPal, PayPal reserves the right to carry out a credit check. The result of this credit check is used by PayPal to decide whether to provide the corresponding payment method. The credit report may contain so-called score values. If score values are included in the credit report, they are based on a scientifically recognized mathematical-statistical procedure.

Data transfer to the USA is based on the standard contractual clauses of the EU Commission.

The legal basis for data processing is your consent pursuant to Art. 6 para. 1 lit. a) GDPR. Your data will be passed on in accordance with Article 6(1)(b) GDPR and only to the extent necessary to process the payment. For this purpose, your payment data may be passed on to credit agencies in accordance with Article 6(1)(f) GDPR on the basis of PayPal’s legitimate interest in determining your solvency.

If personal data is transferred to third countries worldwide, outside the EU/EEA, then only with prior consent, contractual (AV contract) or legal obligation and in compliance with the standard data protection clauses of the EU Commission.

Further information on data protection by PayPal and data collection can be found at: https://www.paypal.com/webapps/mpp/ua/privacy-full?tid=331692960964

Further information on standard contractual clauses can be found at: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc/standard-contractual-clauses-international-transfers_de

FACEBOOK (Social Media PLUGINS)

This website uses the facebook.com of Meta Platforms Inc, 1601 Willow Road, Menlo Park, CA 94025, USA. In Europe, Meta Platforms Irlenad Limited, Serpentine Avenue, Dublin, D04 N9T7, Ireland is responsible. Facebook social plugins are software tools that help you to share your experiences on other websites with your friends on Facebook. You can integrate Facebook social plugins on your website with a web widget and show your visitors functions such as the “Like” button, the “Share” button, comments or embedded videos. If you use Facebook social plugins, your personal data such as your email address, name and website will be requested and processed. In addition, your Facebook activities such as creating, changing or deleting likes, shares or comments are recorded and stored on the Facebook servers. Data about your use of Facebook (e.g. whether you use live videos or other social plugins) may also be processed.

Legal basis: legitimate interests in effective and targeted advertising measures (Art. 6 para. 1 sentence 1 lit. f GDPR), consent (Art. 6 para. 1 sentence 1 lit. a GDPR)

Standard contractual clauses of the EU Commission (Art. 46 GDPR): https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc/standard-contractual-clauses-international-transfers_de

GOOGLE ANALYTICS

This website uses the web analysis service Google Analytics from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). In Europe, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland is responsible.

We use Google Analytics to analyze website usage. For this purpose, cookies are used to collect user data such as your IP address. Further information on the use of cookies can be found in our Cookie Consent Management. Data processing by Google also takes place on servers in the USA.

Google is committed to complying with the EU-US Data Privacy Framework (DPF), which ensures GDPR-compliant data processing in the USA as well. Further information can be found at https://www.dataprivacyframework.gov/s/participant-search/participant-detail?id=a2zt000000001L5AAI&status=Active (last accessed on 13.08.2023).

Data is transferred to the USA on the basis of the standard contractual clauses of the EU Commission. The information collected is used by Google to evaluate website usage, to compile reports on website usage and to provide the website operator with other services relating to website and Internet usage. In accordance with the settings of Google Analytics, the data is generally deleted within 14 months of its creation.

It is used in accordance with Art. 6 para. 1 lit. f) GDPR. The required legitimate interest consists of effective and targeted advertising measures. If a corresponding consent has been requested (e.g. consent to the storage of cookies), the legal basis is this consent, which can be revoked at any time, in accordance with Art. 6 para. 1 lit. a) GDPR.

If personal data is transferred to third countries worldwide, outside the EU/EEA, then only with prior consent, contractual (data processing agreement) or legal obligation and in compliance with the standard data protection clauses of the EU Commission.

For the (server) locations to which your data is exported, please refer to the current privacy policy of the service provider, or see also https://www.google.com/intl/de/about/datacenters/locations/ . If the service provider does not provide a complete list of third countries to which data is exported, please contact the provider. We recommend that you contact the service provider directly, e.g. by email, to find out the locations.

The setting of cookies for Google Analytics can be prevented by setting the browser to refuse all cookies, although this may affect the usability of this website. The collection of data by Google can also be restricted or prevented by installing the following browser plug-in: https://tools.google.com/dlpage/gaoptout?hl=de .

Further information on data protection and Google’s terms of use can be found at: https://policies.google.com/privacy?hl=de , https://support.google.com/analytics/answer/7667196?hl=de and https://www.google.de/intl/de/policies/terms/regional.html .

Further information on standard contractual clauses can be found at: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc/standard-contractual-clauses-international-transfers_de.

GOOGLE FONTS

This website uses Google Fonts (formerly Google Web Fonts) from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States (“Google”). In Europe, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland is responsible. This is an interactive directory of over 800 fonts that Google makes freely available and which are already automatically optimized for the web. This makes it possible to use fonts on this website without having to upload them to your own server.

When you access this website, the data required to use the fonts, such as your IP address, the requested URL and the browser type and operating system you are using, are transmitted to a Google server. The data transfer to the USA is based on the standard contractual clauses provided by the EU Commission.

Google is also committed to complying with the EU-US Data Privacy Framework (DPF), which ensures GDPR-compliant data processing in the USA as well. Further information on this can be found at https://www.dataprivacyframework.gov/s/participant-search/participant-detail?id=a2zt000000001L5AAI&status=Active  (last accessed on 13.08.2023).

The data is processed in accordance with Art. 6 para. 1 lit. f) GDPR. The required legitimate interest consists in the most uniform and visually appealing presentation of the service. If a corresponding consent has been requested (e.g. consent to the storage of cookies), the legal basis is this consent, which can be revoked at any time, in accordance with Art. 6 para. 1 lit. a) GDPR.

Further information on data protection by Google and the terms of use can be found at: http://www.google.de/policies/privacy/  and https://www.google.de/intl/de/policies/terms/regional.html .

Further information on standard contractual clauses can be found at: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc/standard-contractual-clauses-international-transfers_de.

GOOGLE MAPS

This website uses the interactive (land) map service Google Maps from Google LLC , 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). In Europe, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland is responsible. The purpose of the use is to display geographical data visually and thus to show you the location and make it easier for you to find us.

When you access the website or the subpage in which the map displayed by Google Maps is integrated, user data such as your IP address, browser information and location data are transmitted to a Google server. Data processing by Google may also take place in the USA; the associated data transfer takes place on the basis of the standard contractual clauses provided by the EU Commission. It is possible to prevent future transmission by completely deactivating the Google Maps web service. To do this, the JavaScript application must be deactivated in the user’s browser. As a result, Google Maps and the map display based on it cannot be used.

Google is committed to complying with the EU-US Data Privacy Framework (DPF), which also ensures GDPR-compliant data processing in the USA. Further information can be found at https://www.dataprivacyframework.gov/s/participant-search/participant-detail?id=a2zt000000001L5AAI&status=Active  (last accessed on 13.08.2023).

The data is processed in accordance with Art. 6 para. 1 lit. f) GDPR. The required legitimate interest lies in the needs-based design of Google websites and, where applicable, market research. If a corresponding consent has been requested (e.g. consent to the storage of cookies), the legal basis is this consent, which can be revoked at any time, in accordance with Art. 6 para. 1 lit. a) GDPR.

Further information on Google’s data protection, terms of use and Google Maps can be found at: https://www.google.de/intl/de/policies/privacy/ , https://www.google.de/intl/de/policies/terms/regional.html  and https://www.google.com/intl/de_US/help/terms_maps.html .

Further information on standard contractual clauses can be found at: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc/standard-contractual-clauses-international-transfers_de.

GOOGLE RECAPTCHA

This website uses the Google reCaptcha service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). In Europe, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland is responsible. reCaptcha can be used to check whether data entered on the website, for example when filling out a contact form, has actually been entered by a human and not by an automated program. For this purpose, the behavior of the website user is analyzed using various features of reCaptcha and the information found, in particular IP address and length of stay, is examined. This process begins automatically when the user enters the website. The data collected in the course of the analysis is transmitted to a Google server in the USA. The data transfer to the USA is based on the standard contractual clauses provided by the EU Commission.

Google is also committed to complying with the EU-US Data Privacy Framework (DPF), which ensures GDPR-compliant data processing in the USA as well. Further information can be found at https://www.dataprivacyframework.gov/s/participant-search/participant-detail?id=a2zt000000001L5AAI&status=Active  (last accessed on 13.08.2023).

The data is processed in accordance with Art. 6 para. 1 lit. f) GDPR. The necessary legitimate interest is to protect the website from abusive automated use or spying and spam.

Further information on Google’s data protection and reCaptcha and the terms of use can be found at: https://www.google.com/intl/de/policies/privacy/ , https://www.google.com/intl/de/policies/privacy/  and https://www.google.de/intl/de/policies/terms/regional.html .

Further information on standard contractual clauses can be found at: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc/standard-contractual-clauses-international-transfers_de.

INSTAGRAM

External content from Instagram, Meta Platforms Inc, 1601 Willow Road, Menlo Park, CA-94025, USA is embedded on this website. In Europe, Meta Platforms Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland is responsible. In this case, when you visit this website, your browser establishes a connection to Instagram’s servers, which tells Meta which pages you visit. Instagram uses the available data to provide products, to personalize content (e.g. in the Instagram feed) and to make suggestions to users outside the platform.

This includes, among other things, images, videos or buttons with which users of the website can share content with Instagram. There is joint responsibility with Meta Platforms Ireland Ltd. for the display of content and advertising that serves the interests of users, for the delivery of transactional and commercial notifications and for the optimization of ad placement and personalization of content and features.

Facebook declares that it is responsible for fulfilling the rights of data subjects. For this purpose, a corresponding agreement has been concluded with Facebook in accordance with the requirements: https://www.facebook.com/legal/controller_addendum

Meta undertakes to comply with the EU-US Data Privacy Framework (DPF), which also ensures GDPR-compliant data processing in the USA. You can find further information on this at: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?id=a2zt0000000GnywAAC&status=Active

The data is processed in accordance with Art. 6 para. 1 lit. f) GDPR. The required legitimate interest lies in the needs-based design of Facebook services. If a corresponding consent has been requested (e.g. consent to the storage of cookies), the legal basis is this consent, which can be revoked at any time, in accordance with Art. 6 para. 1 lit. a) GDPR.

Further information on data protection by Instagram, data collection and special requirements from Facebook can be found at: https://privacycenter.instagram.com  , https://www.facebook.com/legal/terms/dataprocessing , https://www.facebook.com/legal/terms/data_security_terms  and https://www.facebook.com/legal/EU_data_transfer_addendum

Further information on standard contractual clauses can be found at: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc/standard-contractual-clauses-international-transfers_de .

WORDPRESS.COM

This website uses the WordPress.com content management system from Automattic Inc, 60 29th Street No. 343, San Francisco, CA 94110, USA. WordPress serves as a platform for the design of our website and enables us to display content in the form of text, audio and video. During this use, certain personal data may be processed and stored. This includes information such as the browser type used, the operating system, the screen resolution, the hosting provider, the IP address, geographical location data and contact details.

Legal basis: legitimate interests (Art. 6 para. 1 sentence 1 lit. f GDPR)

YOUTUBE VIDEOS

YouTube videos may be embedded on this website (so-called plug-ins) – i.e. videos uploaded to the YouTube video portal of YouTube LLC, 901 Cherry Ave, San Bruno, CA 94066, USA (“YouTube”). Google Ireland Limited, Gordon House, Barrow Street Dublin 4 Ireland, is responsible for the European region. This enables interesting video material to be displayed directly on this website. In this case, when you visit this website, your browser establishes a connection to the YouTube servers. YouTube then becomes aware that you have visited our website. Data transmission to the USA is based on the standard contractual clauses provided by the EU Commission.

When you start a YouTube video, YouTube uses cookies to collect information about user behavior. This can be prevented by setting your browser to refuse all cookies, although this may affect your ability to use this website. Further information on the use of cookies can be found in the cookie consent management.

The processing and storage of data by integrated video elements is carried out in accordance with Art. 6 para. 1 lit. f) GDPR. The required legitimate interest consists in fast and effective communication with users and an appealing design of the website. If a corresponding consent has been requested, the legal basis is this consent, which can be revoked at any time, in accordance with Art. 6 para. 1 lit. a) GDPR.

Further information on data protection at “YouTube” can be found at: https://www.google.de/intl/de/policies/privacy/ .

Further information on standard contractual clauses can be found at: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc/standard-contractual-clauses-international-transfers_de.

3. Rights of data subjects

RIGHTS AS A DATA SUBJECT ACCORDING TO DSGV

As a data subject, you have the following rights under the GDPR:

RIGHT TO INFORMATION ON DATA PROCESSING AND DATA SUBJECTS’ RIGHTS

You have the right to obtain confirmation from us as to whether we are processing personal data concerning you. If this is the case, you also have the following rights. You have the right to receive information from us about your rights under Art. 13-22, 34 GDPR.

RIGHT TO REVOKE CONSENTS GRANTED

You have the right to withdraw your consent to the processing of personal data from the controller at any time with effect for the future (Art. 7 para. 3, Art. 8 GDPR) without any disadvantages for you. The processing of the data originally covered by the consent may then no longer be processed by us. The lawfulness of the processing carried out on the basis of the consent until revocation remains unaffected.

RIGHT TO INFORMATION

In accordance with Art. 15 GDPR, you have the right to request information about the personal data we have stored about you. You are entitled to the following information:

1. purposes of processing

2. categories of personal data that are processed

3. recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organizations. In the case of third countries and international organizations, you also have the right to be informed of the appropriate safeguards pursuant to Art. 46 GDPR

4. if possible, the planned duration for which the personal data will be stored or, if this is not possible, the criteria for determining this duration

5. the existence of a right to rectification or erasure of personal data concerning you or to restriction of processing by the controller or a right to object to such processing

6. the existence of a right to lodge a complaint with a supervisory authority

7. if the personal data is not collected from you, all available information about the origin of the data

8. the existence of automated decision-making, including profiling, referred to in Art. 22 (1) and (4) GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and envisaged consequences of such processing for you

RIGHT TO RECTIFICATION OR COMPLETION

In accordance with Art. 16 GDPR, you have the right to obtain from us the rectification of inaccurate personal data concerning you and the completion of incomplete personal data. We are obliged to comply with this immediately.

RIGHT TO ERASURE (BEING FORGOTTEN) OR DESTRUCTION

In accordance with Art. 17 GDPR, you have the right to demand the immediate deletion of the personal data concerned.

We are obliged to erase personal data if one of the reasons listed in Art. 17 (1) applies. This does not apply to personal data that is subject to a statutory retention and security period, which we must observe, and to the following exceptions regulated in Art. 17 para. 3 GDPR:

1. for exercising the right of freedom of expression and information

2. for compliance with a legal obligation which requires processing by Union or Member State law to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller

3. for reasons of public interest in the area of public health in accordance with Article 9(2)(h) and (i) and Article 9(3)

4. for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes pursuant to Article 89(1) in so far as the right referred to in paragraph 1 is likely to render impossible or seriously impair the achievement of the objectives of that processing

5. for the establishment, exercise or defense of legal claims

RIGHT TO RESTRICTION OF PROCESSING

You have the right to demand that we restrict processing if one of the requirements of Art. 18 (1) GDPR is met.

RIGHT TO NOTIFICATION

You have the right to request information from us as to which recipients have been notified that personal data concerning you has been erased, rectified or restricted.

RIGHT TO DATA DISCLOSURE OR TRANSFER

In accordance with Art. 20 GDPR, you have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from us.

RIGHT TO OBJECT

In accordance with Art. 21 GDPR, you have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on legitimate interests (Art. 6 para. 1 lit. f GDPR). We may then no longer process the personal data unless we can prove compelling reasons that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

RIGHT TO LODGE A COMPLAINT WITH A SUPERVISORY AUTHORITY

In accordance with Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority. The competent supervisory authority is the State Commissioner for Data Protection and Freedom of Information of the federal state in which our company is based. You can find a list of data protection authorities at: https://www.bfdi.bund.de/DE/Service/Anschriften/anschriften_table.html

4. Storage period and deletion of personal data

Unless expressly stated in this privacy policy, we will delete your processed personal data when the reason for processing no longer applies. Statutory retention and storage periods remain unaffected in all cases (e.g. in Germany § 14b UStG, § 257 para. 1 no. 2 and 3 HGB, § 147 AO or in Austria § 1478 ff. ABGB) In these and other cases, the storage period and deletion are carried out in accordance with the legal requirements.

5. Changes to this privacy policy

We reserve the right to adapt and amend this privacy policy so that it complies with current legal requirements and our services. The new privacy policy will then apply from your next visit to our website.

6. Principle of data minimization and SSL encryption

Your personal data will only be processed if this is necessary in order to provide you with a functioning website on which all our content and services are presented in a technically correct manner. Other processing operations are only carried out regularly on the basis of your consent in accordance with Art. 6 para. 1 lit. a) GDPR, unless data processing is permitted by other statutory provisions.

For security reasons and to protect the transmission of personal data, we use SSL encryption.

We also take appropriate technical and organizational measures (TOMs) to ensure an appropriate level of protection. The state of the art, implementation costs, type, scope, circumstances and purposes of the processing as well as the different probability of occurrence and severity of the risks associated with the processing for the rights and freedoms of natural persons are taken into account.

7. Third party data

If, in addition to your personal data, you have also provided us with the data of other persons, please inform these persons about the processing of their personal data with the help of this data protection declaration.

8. Personal data transfer and third country transfers

In some cases, we work with third parties to process personal data, for example with service providers in the context of embedded content such as videos or statistical analyses. Personal data may be passed on in the process. These third parties are in a contract processing relationship or as joint controllers with us. In each case, we use appropriate agreements to ensure that the protection of your personal data required by law and guaranteed by us is fully complied with. These agreements include, in particular, contracts (order processing contracts, standard contractual clauses, etc.).

Some of our contractual partners are based in third countries, which means that data may also be transferred abroad.

If we process personal data in third countries outside the EU or the EEA, lawful processing is ensured by one or more of the following methods:

9. Contact option for data protection questions

If you have any questions or comments about this privacy policy, please contact us by e-mail at info@szaburns.com .