Free shipping worldwide

Privacy Policy

Privacy Policy

Modern Art Vienna – Handmade art from Austria

  1. Overwiew

 

If we may welcome you as a customer or business partner, please read from point III.

 

If you visit our website, please read from point II.

 

  1. What data do we process if you visit our website?

 

Welcome to the website https://modern-art-vienna.com! Please get an idea of how we process your personal data when you visit our website (Art 13, Art 14 GDPR; § 96 Abs 3 TKG („Austrian Telecommunication Act“)).

 

When you visit our website, the following data may be processed:

 

  • Browser type,
  • operating system,
  • country,
  • date,
  • time and duration of access,
  • IP[1] address and pages visited on our website including entry and exit pages,
  • contact page on website,
  • device data: We may store personal data from your device. Such data includes geolocation data, IP address, unique identifiers (e.g. MAC address),
  • data you enter via a contact form,
  • email address,
  • payment details,
  • telephone number.

 

The processing of this data is necessary to manage the security of the operation of the website and to ensure the functionality of the website from a technical point of view. The collection of this data is partly carried out via technical cookies. These technical cookies are only used to the extent necessary (§ 96 (3) TKG). The processing of this data is justified by our legitimate interest in the operation of our website (Art. 6 (1) lit f GDPR).

 

In order to operate our website, it may be necessary for us to disclose your information to the following recipients:

 

Recipients of the data

 

Purpose of the data processing

 

Legal justifiaction of data processing

 

Location

Basis for transfer to a third country [2]

ALL-INKL.COM

Website-Hosting

Legitimate interest (Art 6 Abs 1 lit f GDPR)

Germany

Within the EAA

WEB BASTLER

Website-Programmer

Legitimate interest (Art 6 Abs 1 lit f DSGVO)

Austria

Within the EAA

PayPal

Online-Payment-Provider

Contractual obligation (Art 6 Abs 1 lit b GDPR)

USA

Standard Contractual Clauses 46 Abs 2 lit c 
GDPR

 

Contractual obligations (Art 49 Abs 1 lit b GDPR)

 

Cloudflare, Inc

Content-Delivery-Network

 

For further information see: Cloudflare – Wikipedia

 

 

Legitimate interest (Art 6 Abs 1 lit f GDPR)

 

USA

Standard Contractual Clauses 46 Abs 2 lit c 
GDPR

 

Credit-Card-Supplier

Online-Payment-Provider

Contractual obligation (Art 6 Abs 1 lit b GDPR)

EAA/USA

If outside the EAA:

 

Standard Contractual Clauses 46 Abs 2 lit c 
GDPR

 

Contractual obligations (Art 49 Abs 1 lit b GDPR)

 

Alphabet Inc

(Google Analytics)

Statistical evaluation of website visitors

 

Consensus (Art 6 Abs 1 lit a GDPR)

USA

Standard Contrac-tual Clauses 46 Abs 2 lit c

GDPR

 

Consensus pursuant to Art 49 Abs 1 lit a GDPR

Facebook Inc

 

Social-Media-Service

 

Consensus (Art 6 Abs 1 lit a GDPR)

USA

Standard Contrac-tual Clauses 46 Abs 2 lit c

GDPR

 

Consensus pursuant to Art 49 Abs 1 lit a GDPR

 

II.1.     Overview of the technical cookies

 

The above data is stored via so-called "cookies". Cookies are text files that are stored on your computer and enable an analysis of the use of the website. They are used to recognise and store temporary data of the homepage visitor. We only use cookies to the extent necessary to communicate with you via the homepage.

 

These technical cookies are activated as soon as you visit our homepage.

 

The following cookies are used on our platform on the basis of our predominantly legitimate interest (Art 6 para 1 lit f GDPR):

 

No technically necessary cookies are currently used

 

II.2.     Overview of the „Commercial-Cookies“

 

In addition to the "technical cookies" described above, we also use so-called advertising cookies (including "statistical cookies"). These advertising cookies enable us to better understand and evaluate your interests. With the help of the advertising cookies, we can merge your "surfing behaviour" across the boundaries of our website with data from other websites. This is to enable us to better understand the interests of our homepage visitors and to target them more effectively.

 

We respect that not every visitor to the website wants this. Therefore, we only process your data in the course of advertising cookies if you consent to this (Art 6 para 1 lit a GDPR). You can revoke this consent at any time, whereby the data processing carried out up to the time of revocation remains justified.

 

The following advertising cookies are currently used:

 

 

Name of the cookie

Purpose

Remuneration periode

Seat of the recipient

Purpose of the data transfer

 

_ga

(Google)

Statistical purposes

2 years

USA

Registers a unique ID that is used to generate statistical data about how he or she uses the website.

_gat

(Google)

Statistical purposes

1 day

USA

Used by Google Analytics to limit the request rate

_gid

(Google)

Statistical purposes

1 day

USA

Registers a unique ID that is used to generate statistical data about how visitors use the website.

Collect

(Google)

Statistical purposes

Session

USA

Used to send data to Google Analytics about the visitor's device and behaviour.

send. Captures the visitor across devices and branding channels.

_fbp
fr

(Facebook)

Marketing purposes

3 months

USA

Used by Facebook to offer the visitor a customised product advertisement.

Tr

(Facebook)

Marketing purposes

Session

USA

Used by Facebook to offer the visitor a customised product advertisement.

 

 

  • For what purposes do we process your data if you are a customer of ours or have a business relationship with us?

 

In the course of our business relationship with patients and business partners, we process data on the basis of contractual (processing of the contractual relationship with you, pre-contractual obligations, invoicing of services, dispatch of documents, communication for processing the contract) and legal obligations (legally required storage within the meaning of § 132 BAO) (Art 6 para 1 lit b and c GDPR) as well as on the basis of our legitimate interests or on the basis of the legitimate interests of third parties (Art 6 para 1 lit f GDPR), namely:

 

- for the purpose of internal administration and management of your business case to the extent necessary (e.g.: Processing your business case, forwarding your business case to various departments, filing, archiving purposes, correspondence with you);

 

- passing on data in the course of company transactions (e.g. du e diligence checks),

 

- for the purpose of direct advertising (e.g.: Mailing, e-mailing, satisfaction surveys, congratulatory letters, statistical evaluations);

 

We would like to expressly inform you that you can object to the processing of your data for the purpose of direct advertising.

 

- assertion and defence of legal claims

 

in each case to the extent necessary. The processing of your data serves the purpose of initiating, maintaining and handling our business relations. If you do not provide us with this data, we will unfortunately not be able to process your business case.

 

In addition, personal data may be transferred to our order processors (within the meaning of Art. 4 Z 8 GDPR).

 

If applicable, we process your data based on your voluntary, express consent (Art 6 para 1 lit a GDPR).

 

  1. How long do we store your data

 

We will only store your data for as long as is necessary for the purposes for which we collected your data. In this context, statutory retention obligations must be taken into account (for example, for reasons of tax law, contracts and other documents from our contractual relationship must generally be retained for a period of seven years (§ 132 BAO)). In justified individual cases, such as for the assertion and defence of legal claims, we may also store your data for up to 30 years after termination of the business relationship.

 

We store data of interested parties for up to three years from the time of the last contact by the interested party.

 

  1. Who probably receives your data

 

If applicable, we process your data based on your voluntary, express consent (Art 6 para 1 lit a GDPR).

 

Recipient


Purpose

 

Legal justification

Seat
(Location)

Basis for transfer to a third country [3]

Delivery Services

Transportation of services

Contractual obligation (Art 6 Abs 1 lit b 
GDPR)

Austria and Germany

Within the EAA

Tax advisor and auditor

Tax advisor and auditor

 

Contractual obligation (Art 6 Abs 1 lit b 
GDPR)

Austria

Within the EAA

Bank

Payment-Service

Contractual obligation (Art 6 Abs 1 lit b 
GDPR)

Within the EAA

Within the EAA

Attorney at law

Pursuit and defence of legal claims

Contractual obligation (Art 6 Abs 1 lit b 
GDPR)

 

Legitimate interest (Art 6 Abs 1 lit f GDPR)

Austria

Within the EAA

 

  1. Recipient of data from external sources (Art 14 GDPR)

 

In the course of a business relationship or the initiation thereof, it is naturally necessary to conduct research on the business partner. This is done exclusively to the extent necessary for this purpose. In this context, data may be retrieved and processed from the following sources:

 

Our company does not obtain data from external sources.

 

  • Automated decision-making or profiling takes (Art 13 Abs 2 lit f GDPR)?

 

No automated decision-making or profiling takes place in our company.

 

  • What rights do you have regarding the processing of your data?

 

We would like to inform you that, provided the legal requirements are met, you have the right to request information about your personal data:

 

  • You have the right to request information about which of your data is processed by us (see in detail Art 15 of the GDPR).
  • You have the right to request the correction or completion of incorrect or incomplete data relating to you (see in detail Art 16 of the GDPR).
  • Have the right to have your data deleted (see in detail Art 17 GDPR).
  • Have the right to object to processing of your data which is necessary to protect our legitimate interests or those of a third party. This applies in particular to the processing of your data for advertising purposes.
  • Have the right to obtain the transfer of the data you have provided in a structured, commonly used and machine-readable format.

 

If we process your data on the basis of your consent, you have the right to revoke this consent at any time by email. This does not affect the lawfulness of the data processing carried out up to this point (Art 7 (3) GDPR).

 

  1. What rights of appeal do you have?

 

If, contrary to expectations, there is a breach of your right to lawful processing of your data, please contact us by post or email. We will endeavour to deal with your concerns promptly. However, you also have the right to lodge a complaint with the supervisory authority for data protection matters responsible for you.

 

The address of the Austrian data protection authority is:

 

Austrian Data Protection Authority

Barichgasse 40-42,

1030 Vienna

 

  1. How can you get in contact with us?

 

If you have any further questions about the processing of your data, please do not hesitate to contact our data protection coordinator using the contact details below.

 

  1. Controller

 

The Controller in the sense of Art 4 Z 7 GDPR is:

 

Theresia Sommer

Brennleitenstrasse 29,

2202 Hagenbrunn,

Austria

 

Object of the company: Trade

UID number: ATU74004356

 

Tel.: + 43 06643016754

Fax: + 43 022672310

E-mail: theresia.sommer@aon.at

 

Member of: WKO Lower Austria

 

Author: Lawyer Dr. Tobias Tretzmüller, LL.M (IT-LAW);

https://www.digital-recht.at/

 

Any use of this privacy policy, or parts thereof, without the consent of the author constitutes a copyright infringement.

[1] An IP address is a number that is assigned to a device. With the help of this IP address, devices can communicate via the Internet. Each IP address contains information about the Internet service provider used and the physical location of the device used. In this way, information about the user of the device can be obtained.

[2] "Third country" includes all states other than (1) the Member States of the European Union and (2) the Member States of the European Economic Area, i.e. in addition to the EU Member States, Iceland, Liechtenstein and Norway.

[3] "Third country" includes all states other than (1) the Member States of the European Union and (2) the Member States of the European Economic Area, i.e. in addition to the EU Member States, Iceland, Liechtenstein and Norway.