1. Contact details
Justin Rafael Orloff e.U.
A-1150 Wien, Braunhirschengasse 6/1
Privacy contact: Justin Rafael Orloff
E-Mail: office@orloffs.at
Website: www.orloffs.at
A-1150 Wien, Braunhirschengasse 6/1
Datenschutzkontaktperson: Justin Rafael Orloff
E-Mail: office@orloffs.at
Website: www.orloffs.at2. Data security
Data security is our highest concern. We aim to take all suitable and necessary technical and organizational measures to protect your data against accidental or intentional manipulation, loss, destruction or access by unauthorized persons.
Communication and data transfer on our website are carried out using SSL (Secure Socket Layer). As a result, all information is transmitted securely and encrypted. The measures taken are subject to regular review and are up to date with latest technology.
3. Definition of personal data
Personenbezogene Daten sind alle Informationen, die sich auf Personen beziehen, deren Identität identifiziert oder identifizierbar ist wie z.B. Name, Kontaktdaten, Rechnungsdaten oder IP-Adresse.
4. Personal data we collect and how we process it
Information we collect When you visit our website, we receive your personal data either from you providing it to us or via so-called cookies that automatically record data. For more information about how cookies are used on our website, see 6.
Beim Besuch unserer Website werden durch sogenannte Cookies Daten technisch automatisiert erfasst. Nähere Informationen über Cookies, die auf unserer Website zum Einsatz kommen, finden Sie unter Punkt 6.
Von Ihnen zur Verfügung gestellte Daten
Data provided by you Personal data that you transmit electronically on our website, e.g. in contact forms (name, e-mail address, postal address or other personal information) or when making a purchase transaction in our online shop (name, address, e-mail address, telephone number, payment method) is only used by us for the specified purpose, processed in accordance with the applicable data protection regulations, stored securely and will not be passed on to third parties - such as address publishers and direct advertising companies.
Personal data you provide us will be processed for the purposes described below. We will only send you information if you have registered for relevant services and we have your consent to do so.
Wir werden Ihnen nur Informationen zuschicken, sofern Sie sich für entsprechende Dienste angemeldet, und wir dafür Ihre Einwilligung haben.
Verarbeitung von personenbezogenen Daten durch Partner
Processing of personal data by partners Your personal data will only be passed on to third parties in regulation with the applicable law, i.e for the purpose of processing your order, fulfilling billing and payment, for marketing purposes or if you have given your prior consent. When processing your purchase we use partners such as banks, tax consultants, payment service etc that will receive the necessary data for order processing. The data passed on may only be used by our partners to fulfill their task.
These partners have been carefully selected and take appropriate technical and organizational measures to ensure that your data is processed in accordance with data protection regulations and that your rights are protected. The partners are not permitted to use the personal data provided for their own or advertising purposes or to pass it on to third parties.
5. Data processing not requiring consent
General contact form:
Contact form: When using the contact form, the following personal data will be processed: first and last name, address, e-mail, contact information and text of your request.
Purpose: Answering your query, contacting you in the course of initiating business, customer acquisition/customer care, efficient communication.
Justification: fulfillment of contract or implementing of pre-contractual measures in accordance with Article 6 (1) (b) GDPR
Storage period: 6 months. In case of fulfillment of a contract (purchase) the data will be deleted in compliance with the applicable tax retention periods of 7 years or 10 years depending on product liability.
- Kontaktformular: Bei Absenden des Kontaktformulars werden Ihre personenbezogenen Daten der Kontaktfelder (Vor- und Nachname, Adresse, E-Mail, Kontaktinformationen sowie der Text Ihrer Anfrage) verarbeitet.
- Zweck: Beantwortung Ihrer Anfrage, zur Kontaktaufnahme im Zuge der Geschäftsanbahnung, Kundengewinnung/Kundenbetreuung, zur effizienten Kommunikation.
- Rechtfertigung: zur Vertragserfüllung bzw. Durchführung vorvertraglicher Maßnahmen gemäß Art. 6 Abs. 1 lit. b DSGVO
-
Order and payment processing in our online shop and customer account
- Order processing: during the order process in the Woocommerce online shop, the following personal customer data is processed: first and last name, address, e-mail, payment method. Optionally, users can create a user account. Users are informed which mandatory information will need to be provided during the registration process.
- Payment processing: by using the online payment service Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland, the following personal data is processed: first and last name, address, e-mail address, telephone number, payment method
- Shipping processing: by linking the shipping platform Sendcloud GmbH, Fürstenrieder Str. 70, 80686 Munich, with the online shop, the shipping of the ordered products is processed automatically and personal data such as first and last name and address are processed. Parcels are delivered by General Logistics Systems Austria GmbH (GLS) Traunuferstraße 105a 4052 Ansfelden, where the following personal recipient data is processed: first and last name and address.
- Purpose: Provision of contractual services as part of an online shop for order and purchase processing, billing, delivery and customer service.
- Justification: for the processing and fulfilling of the contract in accordance with Article 6 (1) (b) GDPR.
- Storage period: the data is stored for as long as it is necessary to fulfill the purpose for which it was collected or to execute the contract. After the purchase has been completed, there may be a need to store data in order to comply with contractual or legal obligations.
6. Data processing requiring consent:
Newsletter
- We use the service provider Zoho Corporation B.V. Beneluxlaan 4B, 3527 HT, Utrecht, Netherlands to send out newsletters. We use the data you provide (title, name, e-mail address) and need your consent that you, as the owner of the e-mail address, agree to receive mails via so-called double opt-in. You can unsubscribe from the newsletter at any time using the unsubscribe link in the newsletter.
- Purpose: Sending information about products, services and events.
- Justification: Consent in accordance with Art. 6 Para. 1 lit a GDPR
- Storage period: As long as the newsletter is sent and no objection is made.
Cookies
Cookies are small text files that are sent to your computer or mobile device from a website and are then stored by your web browser.There are two different types of cookies. So-called session cookies, which are deleted as soon as you close your browser, and permanent cookies, which remain on your data medium until you delete them manually in your browser.
We use permanent cookies to recognize you the next time you visit our website. This helps us to design our websites and optimize our offers for you and makes it easier for you to use our website, e.g.by storing certain of your entry information so that you do not have to repeat it next time you visit our website.
In addition to technically necessary cookies, we also use cookies on our website that enable an analysis of user behaviour and improve the performance and functionality of our website. Only these technically necessary cookies are set without consent. You can activate or deactivate all other cookies individually with our consent management solution and so give or revoke your consent. We would like to point out that our website and services may only have limited functionality if you disable cookies or revoke your consent.
Auf unserer Website verwenden wir neben technisch notwendigen Cookies auch Cookies, die eine Analyse des Surfverhaltens der Nutzer ermöglichen und die Leistung und Funktionalität unserer Website verbessern. Nur die technisch notwendigen Cookies werden ohne Einwilligung gesetzt. Alle anderen Cookies können Sie mit unserer Consent Management Lösung einzeln aktivieren oder deaktivieren und somit Ihre Einwilligung abgeben bzw. widerrufen. Jedoch weisen wir Sie darauf hin, dass unsere Website und Services möglicherweise nur eingeschränkte Funktionalitäten haben, wenn Sie Cookies deaktivieren bzw. Ihre Einwilligung widerrufen.
7. Embedded Social Media Elements
We integrate elements of social media services on our website in order to display images, videos and texts.
By visiting pages that display these elements, data is transferred from your browser to the respective social media service and stored there. We have no access to this data.
The following links will take you to the pages of the these social media services, where it is explained how they handle your data:
- Instagram-Datenschutzrichtlinie: https://privacycenter.instagram.com/
- Für YouTube gilt die Google Datenschutzinformation: http://policies.google.com/privacy?hl=de
- Facebook-Datenrichtline: https://www.facebook.com/about/privacy
- Vimeo-Datenrichtlinie: https://vimeo.com/privacy.
- Odoo data policy: https://digitalproductmastery1.odoo.com/privacy
Facebook (Meta)
On this website we use functions from Facebook, a social media network from Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland. You can read about the functions (social plug-ins) provided by Facebook at https://developers.facebook.com/docs/plugins.
Welche Funktionen (Soziale Plug-ins) Facebook bereitstellt, können Sie auf http://developers.facebook.com/docs/plugins/ nachlesen.
By visiting our website, information can be transmitted to Facebook. If you have a Facebook account, Facebook can associate this data with your personal account. If you do not want this, please log out of Facebook.
The privacy policy outlining information Facebook collects and how they use it can be found at http://www.facebook.com/policy.php. http://www.facebook.com/policy.php.
Instagram (Meta)
We use functions of the social media network Instagram from Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland on our website. Using Instagram content embedding features (embed function) allows us to display images and videos. Data (IP address, browser data, date, time, cookies) is transmitted to Instagram, stored and evaluated.
If you have an Instagram account and are logged in, this data will be assigned to your personal account and the data stored in it. If you do not want this, please log out of Instagram. The privacy policy, what information Instagram collects and how they use it can be found at https://privacycenter.instagram.com/.
Die Datenschutzrichtlinien, welche Informationen Instagram sammelt und wie sie diese verwenden, finden Sie auf https://privacycenter.instagram.com/.
Vimeo
Wir binden auf dieser Website Videos der Plattform “Vimeo” des Anbieters Vimeo Inc., 555 West 18th Street New York, New York 10011, USA, ein.
We are embedding videos from the “Vimeo” platform of the provider Vimeo Inc., 555 West 18th Street New York, New York 10011, USA, on this website. The privacy policy outlining what information Vimeo collects and how they use it can be found here: https://vimeo.com/privacy. https://vimeo.com/privacy.
8. Analysis and marketing measures
Google Analytics
Diese Website nutzt den Dienst „Google Analytics“, welcher von Google Ireland Limited
This website uses Google Analytics, a service of Google Ireland Limited Gordon House, Barrow Street Dublin 4, Ireland, to analyze how users use our website. Google Analytics uses "cookies" - text files that are stored on your end device. The information automatically collected by cookies about your use of the website is usually transmitted to a Google server in its global infrastructure and stored there. IP anonymization takes effect on this website. The IP address of the user is shortened within the member states of the EU and the European Economic Area and there is no personal reference. Only in exceptional cases will the full IP address be sent to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage to the website operator.
You have the option of preventing the storage of cookies on your device by changing the relevant settings in your browser. There is no guarantee that you will be able to access all functions of this website without restrictions if your browser does not accept cookies.
You can also use a browser plug-in to prevent the information collected by cookies (including your IP address) from being sent to Google and used by Google. The following link takes you to the corresponding plugin: https://tools.google.com/dlpage/gaoptout?hl=en https://tools.google.com/dlpage/gaoptout?hl=de
Here you find further information on the use of data by Google: https://support.google.com/analytics/answer/6004245?hl=en https://support.google.com/analytics/answer/6004245?hl=de
Google AdWords
We use Google AdWords Conversion Tracking to measure the success of our advertising measures. After certain goals have been achieved on our website ("conversions") - such as completing a purchase or registering for our newsletter - this conversion is recorded by Google. Google can use this to measure the number of conversions. In addition, Google will use previously set cookies to match which advertisements were previously clicked on and were therefore decisive for the conversion.
For the placement of Google Ads in the Google advertising network, we use the plugin of the shop system WooCommerce Ireland Ltd., Grand Canal Dock, 25 Herbert Pl, Dublin, D02 AY86, Ireland. The use of advertising cookies can be deactivated here: https://myadcenter.google.com/?sasb=true https://myadcenter.google.com/?sasb=true
9. Tools we use
If we collect and process your personal data as stated, we use the following service providers and tools which - as recipients in terms of the GDPR - could have access to your data. As processors, these service providers are contractually obliged to comply with the data protection regulations:
Odoo S.A. - Data Protection
Chaussée de Namur, 40
1367 Grand Rosière
Belgium
https://www.odoo.com/privacy#part_16
Sendcloud GmbH
Fürstenrieder Str. 70
80686 München
https://www.sendcloud.com/privacy-policy
General Logistics Systems Austria GmbH (GLS)
Traunuferstraße 105a
4052 Ansfeldenwerden
https://gls-group.com/AT/de/datenschutz
Google Ireland Limited
Gordon House, Barrow Street Dublin 4, Ireland
EWR
Google LLC
1600 Amphitheatre Parkway Mountain View, CA 94043, USA
Privacy:
https://policies.google.com/privacy?hl=en-US
Stripe Payments Europe Limited
1 Grand Canal Street Lower
Grand Canal Dock
Dublin, D02 H210, Ireland
Stripe, Inc.
354 Oyster Point Boulevard
South San Francisco, California, 94080, USA
https://stripe.com/en-at/privacy
We would like to point out that the services mentioned above may result in the processing of personal data and this may be carried out in the USA or other third countries. The European Court of Justice does not see an adequate level of data protection in the USA since the fall of the Privacy Shield. There is therefore a theoretical risk that US authorities may have access to your data for control and monitoring purposes. However, all of our third-party providers have the applicable standard contractual clauses in place. If data is accessed outside of the European Economic Area (EEA), an appropriate level of data protection is guaranteed by using the applicable version of the EU standard contractual clauses.
In the consent banner you can actively agree to the use of the technologies mentioned and the transmission of data to third parties in third countries (including the USA). You can revoke this consent at any time. Please note that based on the settings you have made yourself, it is possible that not all the functions of the site will be available.
10. Your rights and choices
You have the legal right to information, correction, deletion, restriction of processing, objection to processing and data portability.
You can claim these rights by sending a message to the e-mail address office@orloffs.at
We will notify you immediately of any personal data breach if such breach is likely to result in a high risk to your rights and freedoms.
You also have the right to lodge a complaint with the supervisory authority. In Austria the data protection authority is responsible.
11. Updates
We reserve the right to change the data protection policy from time to time to reflect changes of relevant laws, new services or data processing.