DATA PROTECTION

Privacy Policy

Controller for data processing is:

oeá J. u. A. Bader GbR
Seeufer 10
17209 Fincken

hello@oea-shop.com

The processing of your data is carried out on the basis of the General Data Protection Regulation (GDPR) and in accordance with § 96 Para. 3 of the Austrian Telecommunications Act (TKG).

1. ACCESS DATA AND HOSTING

You can visit our websites without providing any personal information. With each visit to a website, the web server automatically stores a so-called server log file, which contains, for example, the name of the requested file, your IP address, date and time of access, the amount of data transferred, and the requesting provider (access data), and logs the access. This access data is evaluated solely for the purpose of ensuring trouble-free operation of the site and improving our offering. This serves to safeguard our predominantly legitimate interests in a correct presentation of our offering in accordance with Art. 6 Para. 1 S. 1 lit. f GDPR. All access data is deleted no later than seven days after the end of your visit to the site.

2. DATA PROCESSING FOR CONTRACT PROCESSING AND CONTACTING

2.1 DATA PROCESSING FOR CONTRACT PROCESSING

For the purpose of contract processing pursuant to Art. 6 Para. 1 S. 1 lit. b GDPR, we collect personal data if you voluntarily provide it to us within the scope of your order. Mandatory fields are marked as such, as in these cases we require the data for contract processing and cannot send the order without this information. The data to be collected can be seen from the respective input forms.

Further information on the processing of your data, especially on the transfer to our service providers for the purpose of order processing, payment, and shipping, can be found in the following sections of this privacy policy. After the contract is fully processed, your data is restricted for further processing and deleted after the expiry of the tax and commercial retention periods pursuant to Art. 6 Para. 1 S. 1 lit. c GDPR, unless you have expressly consented to further use of your data pursuant to Art. 6 Para. 1 S. 1 lit. a GDPR or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this declaration.

2.2 CUSTOMER ACCOUNT

If you have given your consent in accordance with Art. 6 Para. 1 S. 1 lit. a GDPR by deciding to open a customer account, we will use your data for the purpose of opening the customer account and storing your data for future orders on our website. Deletion of your customer account is possible at any time and can be done either by sending a message to the contact option described in this privacy policy or via a function provided for this purpose in the customer account. After deletion of your customer account, your data will be deleted unless you have expressly consented to further use of your data in accordance with Art. 6 Para. 1 S. 1 lit. a GDPR or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this declaration.

2.3 CONTACT

In the context of customer communication, we collect personal data for the processing of your inquiries pursuant to Art. 6 Para. 1 S. 1 lit. b GDPR if you voluntarily provide it to us when contacting us (e.g., via contact form, live chat tool, or email). Mandatory fields are marked as such because in these cases, we require the data to process your contact and cannot process the contact without this information. The data to be collected can be seen from the respective input forms. After your inquiry has been fully processed, your data will be deleted unless you have expressly consented to further use of your data pursuant to Art. 6 Para. 1 S. 1 lit. a GDPR or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this declaration.

3. DATA PROCESSING FOR THE PURPOSE OF SHIPPING

For the purpose of contract fulfillment pursuant to Art. 6 Para. 1 S. 1 lit. b GDPR, we will pass on your data to the shipping service provider commissioned with the delivery, as far as this is necessary for the delivery of ordered goods.

DATA TRANSFER TO SHIPPING SERVICE PROVIDERS FOR THE PURPOSE OF DELIVERY NOTIFICATION

If you have given your express consent during or after your order, we will pass on your e-mail address to the selected shipping service provider in accordance with Art. 6 Para. 1 S. 1 lit. a GDPR so that the shipping service provider can contact you for the purpose of delivery notification or coordination. You can revoke your consent at any time by sending a message to the contact option described in this privacy policy or directly to the shipping service provider at the contact address listed below. After revocation, we will delete your data provided for this purpose, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this

DHL Paket GmbH Sträßchensweg 10 53113 Bonn Germany

DPD Deutschland GmbH Wailandtstraße 1 63741 Aschaffenburg Germany

4. DATA PROCESSING FOR PAYMENT PROCESSING

In the processing of payments on our online shop, we collaborate with the following partners: technical service providers, credit institutions, payment service providers.

4.1 DATA PROCESSING FOR TRANSACTION PROCESSING

Depending on the selected payment method, we disclose the data necessary for processing the payment transaction to our technical service providers, who work on our behalf as data processors, or to the designated credit institutions or selected payment service providers, as required for payment processing. This is done to fulfill the contract as per Art. 6(1) S. 1 lit. b GDPR. In some cases, the payment service providers collect the data required for payment processing themselves, for example, on their own website or through technical integration in the ordering process. In such cases, the privacy policy of the respective payment service provider applies. For questions regarding our payment processing partners and the basis of our cooperation with them, please refer to the contact information described in this privacy policy.

4.2 DATA PROCESSING FOR FRAUD PREVENTION AND OPTIMIZATION OF OUR PAYMENT PROCESSES

If necessary, we provide our service providers with additional data, which they use as our data processors, along with the data necessary for payment processing, for the purpose of fraud prevention and optimizing our payment processes (e.g., invoicing, handling disputed payments, assisting with accounting). This serves our legitimate interests in securing against fraud or efficient payment management, as per Art. 6(1) S. 1 lit. f GDPR, within the framework of a balance of interests.

5. EMAIL ADVERTISING

EMAIL NEWSLETTER WITH REGISTRATION

When you subscribe to our newsletter, we use the data required for this purpose, or data provided separately by you, to send you our email newsletter regularly, based on your consent as per Art. 6(1) S. 1 lit. a GDPR. You can unsubscribe from the newsletter at any time, either by sending a message to the contact information described below or by using a designated link in the newsletter. After unsubscribing, we will delete your email address from the recipient list, unless you have explicitly consented to further use of your data as per Art. 6(1) S. 1 lit. a GDPR, or we reserve the right to use your data further, in accordance with legal provisions, as described in this statement.

6. COOKIES AND OTHER TECHNOLOGIES

GENERAL INFORMATION

To make your visit to our website attractive and enable the use of certain features, we use various technologies, including so-called cookies, on various pages. Cookies are small text files that are automatically stored on your device. Some of the cookies we use are deleted after the end of the browser session, i.e., when you close your browser (session cookies). Other cookies remain on your device and allow us to recognize your browser on your next visit (persistent cookies). We use such technologies that are essential for using specific functions of our website (e.g., shopping cart function). These technologies collect and process IP addresses, visit times, device and browser information, as well as information about your use of our website (e.g., shopping cart contents), as part of a balance of interests aimed at optimizing our offerings as per Art. 6(1) S. 1 lit. f GDPR.

Additionally, we use technologies to fulfill legal obligations (e.g., to provide proof of your consent to the processing of your personal data) and for web analytics and online marketing. Further information, including the legal basis for data processing, can be found in the following sections of this privacy policy. You can find cookie settings for your browser at the following links: Microsoft Edge™, Safari™, Chrome™, Firefox™, Opera™. If you have consented to the use of technologies as per Art. 6(1) S. 1 lit. a GDPR, you can revoke your consent at any time by sending a message to the contact information described in the privacy policy.

7. USE OF COOKIES AND OTHER TECHNOLOGIES FOR WEB ANALYSIS AND ADVERTISING PURPOSES

If you have given your consent to this as per Art. 6(1) S. 1 lit. a GDPR, we use the following cookies and other technologies from third-party providers on our website. After the purpose has been fulfilled and the respective technology is no longer in use by us, the data collected in this context will be deleted. You can revoke your consent at any time with future effect. Further information on revocation options can be found in the "Cookies and Other Technologies" section. More information, including the basis of our cooperation with individual providers, can be found with the respective technologies. For questions about the providers and the basis of our cooperation with them, please contact the contact information described in this privacy policy.

USE OF WEB ANALYSIS AND ADVERTISING SERVICES

We use "log files" to record actions on the website and capture data such as IP address, browser type, internet service provider, referring/exit pages, and date/time stamps.

We also use "web beacons," "tags," and "pixels," which are electronic files for collecting information about how you navigate on the website.

USE OF FACEBOOK SERVICES FOR WEB ANALYSIS AND ADVERTISING PURPOSES

USE OF FACEBOOK PIXEL

We use the Facebook Pixel as part of the technologies provided by Facebook Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland ("Facebook"). With the Facebook Pixel, data (IP address, visit time, device and browser information, as well as information about your use of our website based on events defined by us, such as visiting a webpage or signing up for a newsletter) is automatically collected and stored, from which usage profiles are created using pseudonyms. When you visit our website, the Facebook Pixel automatically sets a cookie that enables the recognition of your browser for subsequent visits to other websites. Facebook will merge this information with other data from your Facebook account to compile reports on website activities and provide other services related to website usage, especially personalized and group-based advertising. The information collected automatically by Facebook technologies about your use of our website is typically transferred to a server of Facebook, Inc., 1601 Willow Road, Menlo Park, California 94025, USA, and stored there. There is no adequacy decision by the European Commission for the USA. If data transfer to the USA is our responsibility, our cooperation is based on the European Commission's standard data protection clauses. For more information on data processing by Facebook, please refer to Facebook's privacy policy.

FACEBOOK ANALYTICS

Within the framework of Facebook Analytics, statistics on visitor activities on our website are created based on data collected with the Facebook Pixel. Data processing is based on an agreement for data processing with Facebook. This analysis is used for optimizing the presentation and marketing of our website.

8. SOCIAL MEDIA

8.1 SOCIAL PLUGINS FROM FACEBOOK, INSTAGRAM, PINTEREST

Social buttons from social networks are used on our website. These are merely embedded as HTML links on the page, so no connection is established with the servers of the respective provider when you access our website. 

Clicking on one of the buttons will open the website of the respective social network in a new window of your browser. There, you can, for example, click the "Like" or "Share" button.

8.2 OUR ONLINE PRESENCE ON FACEBOOK, INSTAGRAM, YOUTUBE, PINTEREST

If you have given your consent to this as per Art. 6(1) S. 1 lit. a GDPR, your data is automatically collected and stored when you visit our online presences on the social media platforms mentioned above, for market research and advertising purposes, from which usage profiles are created using pseudonyms. These profiles can be used to display advertisements both within and outside the platforms that are likely to match your interests. In most cases, cookies are used for this purpose. For detailed information on data processing and use by the respective social media operator, as well as your rights and settings options for protecting your privacy, please refer to the privacy policies linked below. If you still require assistance in this regard, you can contact us.

Facebook Privacy Policy Instagram Privacy Policy YouTube Privacy Policy Pinterest Privacy Policy

9. CONTACT OPTIONS AND YOUR RIGHTS

9.1 YOUR RIGHTS

As a data subject, you have the following rights:

  • In accordance with Art. 15 GDPR, the right to obtain information about the personal data we process concerning you, to the extent specified there;
  • In accordance with Art. 16 GDPR, the right to demand without delay the rectification of inaccurate or completion of your personal data stored by us;
  • In accordance with Art. 17 GDPR, the right to demand the erasure of your personal data stored by us, unless further processing
    • to exercise the right to freedom of expression and information;
    • to comply with a legal obligation;
    • for reasons of public interest, or
    • to assert, exercise, or defend legal claims is necessary;
  • In accordance with Art. 18 GDPR, the right to demand the restriction of the processing of your personal data, to the extent that
    • the accuracy of the data is disputed by you;
    • the processing is unlawful, but you oppose its erasure;
    • we no longer need the data, but you need it to assert, exercise, or defend legal claims, or
    • you have objected to processing pursuant to Art. 21 GDPR;
  • In accordance with Art. 20 GDPR, the right to receive your personal data that you have provided to us in a structured, commonly used, and machine-readable format, or to request its transmission to another controller;
  • In accordance with Art. 77 GDPR, the right to lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority at your usual place of residence or work or at our company headquarters.

Right to Object

To the extent that we process personal data as explained above in order to safeguard our legitimate interests, which are predominant within the context of a balance of interests, you can object to this processing with future effect. If the processing is carried out for purposes of direct marketing, you can exercise this right at any time as described above. If the processing is carried out for other purposes, you have the right to object only on grounds relating to your particular situation.

After you have exercised your right to object, we will no longer process your personal data for these purposes unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights, and freedoms, or if the processing serves to assert, exercise, or defend legal claims.

This does not apply if the processing is for direct marketing purposes. In this case, we will not process your personal data for this purpose any further.

9.2 CONTACT OPTIONS

For questions regarding the collection, processing, or use of your personal data, for information, correction, restriction, or deletion of data, as well as for the revocation of granted consents or objections to a particular data use, please contact us directly via the contact details provided in our imprint.

10. CHANGES

We may occasionally update this privacy policy to reflect changes in our practices or for other operational, legal, or regulatory reasons.