Privacy policy
This privacy policy clarifies the nature, scope and purpose of the processing of personal data (hereinafter referred to as “data”) within our online offering and the associated websites, functions and content as well as external online presences, such as our social media profile. (hereinafter collectively referred to as the “Online Offer”). With regard to the terms used, such as “processing” or “controller”, we refer to the definitions in Article 4 of the General Data Protection Regulation (GDPR).
Responsible body
Zlatko Hamzic
Dorfstraße 4
8041 Graz
Austria
E-mail: info@hayuko.at
Here you can find our imprint.
Types of data processed:
- Personal data (e.g. names, addresses).
- Contact details (e.g. e-mail, telephone number).
- Content data (e.g. text input, photographs, videos).
- Usage data (e.g. websites visited, interest in content, access times).
- Meta/communication data (e.g. device information, IP addresses).
Categories of affected persons
Visitors and users of the online offer (hereinafter jointly referred to as “users”).
Purpose of the processing
- Provision of the online offer, its functions and content.
- Answering contact requests and communicating with users.
- Safety measures.
- Reach/marketing purposes.
Terms used
“Personal data” means any information relating to an identified or identifiable natural person (hereinafter “data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier (e.g. cookie) or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
“Processing” means any operation or set of operations which is performed on personal data, whether or not by automated means. The term is broadly defined and covers practically any handling of data.
The “controller” is the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.
Relevant legal bases and laws
In accordance with Art. 13 GDPR, we inform you about the legal basis of our data processing. If the legal basis is not stated in the privacy policy, the following applies: The legal basis for obtaining consent is Article 6(1)(a) and Article 7 GDPR, the legal basis for processing for the performance of our services and performance of contractual measures and responding to inquiries is Article 6(1)(b) GDPR, the legal basis for processing for compliance with our legal obligations is Article 6(1)(c) GDPR, and the legal basis for processing for the purposes of our legitimate interests is Article 6(1)(f) GDPR. In the case of vital interests of the data subject or another natural person, Article 6(1)(d) GDPR serves as the legal basis.
Cooperation with processors and third parties
If, as part of our processing, data is passed on to other persons and companies, transmitted or otherwise granted access to the data, this is only done on the basis of legal permission (e.g. if the data is transferred to third parties, such as payment service providers, in accordance with Art. 6 Para. 1 letter b GDPR is required to fulfill the contract), you have consented, a legal obligation provides for this or on the basis of our legitimate interests (e.g. when using agents, web hosts, etc.).
If we commission third parties with the processing of data on the basis of a so-called “order processing contract”, this is done on the basis of Art. 28 GDPR.
Transfers to third countries
If we process data in a third country (d. h. outside the European Union (EU) or the European Economic Area (EEA)) or in the context of the use of third-party services or disclosure or transfer of data to third parties, this will only take place if it is done to fulfill our (pre)contractual obligations, on the basis of your consent, on the basis of a legal obligation or on the basis of our legitimate interests. Subject to legal or contractual permissions, we process or have the data processed only in a third country with a recognized level of data protection, contractual obligations through so-called standard protection clauses of the EU or in the presence of certifications or binding internal data protection regulations (Art. 44 to 49 GDPR, information page of the EU Commission: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection_de).
Rights of the data subjects
In accordance with Art. 15 GDPR, you have the right to request information as to whether the data concerning you is being processed and to request information about this data as well as further information and a copy of the data.
In accordance with Art. 16 GDPR, you have the right to request the completion of data concerning you or the correction of incorrect data concerning you.
In accordance with Art. 17 GDPR, you have the right to demand that the data concerning you be deleted immediately or, alternatively, to demand a restriction on the processing of the data in accordance with Art. 18 GDPR.
You have the right to request to receive the data concerning you that you have provided to us in accordance with Art. 20 GDPR and to request that it be transferred to other data controllers.
In accordance with Art. 77 GDPR, you also have the right to lodge a complaint with the competent supervisory authority.
Right of withdrawal
You have the right to withdraw your consent in accordance with Art. 7 para. 3 GDPR with effect for the future.
Right of objection
You can object to the future processing of data concerning you at any time in accordance with Art. 21 GDPR. The objection may be made in particular against processing for direct marketing purposes.
Cookies and the right to object to direct advertising
“Cookies” are small files that are stored on the user’s computer. Various information can be stored in cookies. A cookie is primarily used to store information about a user (or the device on which the cookie is stored) during or after their visit to an online offering. Temporary cookies or “session cookies” or “transient cookies” are cookies that are deleted after a user leaves an online service and closes their browser. For example, the contents of a shopping cart in an online store or a login status can be stored in such a cookie. “Permanent” or “persistent” refers to cookies that remain stored even after the browser is closed. For example, the login status can be saved if users visit it again after several days. Such a cookie can also store the user’s interests, which are used for measurement or marketing purposes. “Third-party cookies” are cookies that are offered by providers who are not responsible for the operation of the online offer (otherwise they are referred to as “first-party cookies” if they are only their cookies).
We may use temporary and permanent cookies and explain this in our privacy policy.
If users do not want cookies to be stored on their computer, they are asked to deactivate the corresponding option in the browser settings. Saved cookies can be deleted in the browser settings. The exclusion of cookies can lead to functional limitations of this online offer.
A general objection to the use of cookies for online marketing purposes can be declared for a large number of services, particularly in the case of tracking, via the US website http://www.aboutads.info/choices/ or the EU website http://www.youronlinechoices.com/. Furthermore, the storage of cookies can be achieved by deactivating them in the browser settings. Please note that in this case not all functions of this online offer can be used.
Deletion of data
The data processed by us will be deleted or its processing restricted in accordance with Art. 17 and 18 GDPR. Unless expressly stated in this privacy policy, the data stored by us will be deleted as soon as it is no longer required for its intended purpose and the deletion does not conflict with any statutory retention obligations. If deletion is not possible because the data is required for other and legally permissible purposes, its processing will be restricted. This means that the data is blocked and not processed for other purposes. This applies, for example, to data that must be retained for commercial or tax law reasons.
In accordance with the legal requirements in Germany, the data is stored for 6 years in accordance with § 257 para. 1 HGB (trading books, inventories, opening balance sheets, annual financial statements, commercial letters, accounting vouchers, etc.) and for 10 years in accordance with § 147 para. 1 AO (books, records, management reports, accounting vouchers, commercial and business letters, documents relevant for taxation, etc.).
In accordance with the legal requirements in Austria, the data is stored for 7 years in accordance with § 132 para. 1 BAO (accounting documents, receipts/invoices, accounts, receipts, business papers, statement of income and expenditure, etc.), for 22 years in connection with real estate and for 10 years for documents in connection with electronically provided services, telecommunications, radio and television services that are provided to non-entrepreneurs in EU Member States and for which the Mini-One-Stop-Shop (MOSS) is used.
Business-related processing
We also process
- Contract data (e.g. subject matter, duration, customer category).
- Payment data (e.g. bank details, payment history)
from our customers, interested parties and business partners for the purpose of providing contractual services, service and customer care, marketing, advertising and market research.
Hosting
The hosting services we use serve to provide the following services: Infrastructure and platform services, computing capacity, storage space and database services, security services and technical maintenance services that we use to operate this online offering.
We or our hosting provider process inventory data, contact data, content data, contract data, usage data, meta and communication data of customers, interested parties and visitors to this online offer on the basis of our legitimate interests in the efficient and secure provision of this online offer in accordance with Art. 6 para. 1 lit. a GDPR. 1 lit. f GDPR in conjunction with Art. 28 GDPR (conclusion of an order processing contract).
Order processing in the online store and customer account
We process our customers’ data as part of the ordering process in our online store to enable them to select and order the selected products and services, as well as their payment and delivery or execution.
The data processed includes inventory data, communication data, contract data, payment data, and the data subjects affected by the processing are our customers, interested parties and other business partners. Processing is carried out for the purpose of providing contractual services in the context of operating an online store, billing, delivery and customer service. We use session cookies to save the contents of the shopping cart and persistent cookies to save the login status.
The processing is carried out on the basis of Art. 6 para. 1 lit. b (execution of order processes) and c (legally required archiving) GDPR. The information marked as required is necessary for the conclusion and fulfillment of the contract. We only pass on the data to lawyers and authorities within the scope of delivery, payment or within the scope of legal permissions and obligations. The data will only be processed in third countries if this is necessary to fulfill the contract (e.g. at the customer’s request for delivery or payment).
Users can optionally create a user account, in particular to view their orders. As part of the registration process, users are provided with the required mandatory information. The user accounts are not public and cannot be indexed by search engines. If users have terminated their user account, their data relating to the user account will be deleted, subject to their retention for reasons of commercial or tax law in accordance with Article 6 para. 1 letter c GDPR. Information in the customer account is retained until it is deleted with subsequent archiving in the event of a legal obligation. It is the user’s responsibility to back up their data before the end of the contract.
We store the IP address and the time of the respective user action as part of the registration and renewed registrations as well as the use of our online services. The storage is based on our legitimate interests and the protection of users against misuse and other unauthorized use. In principle, this data will not be passed on to third parties unless it is necessary to assert our claims or there is a legal obligation in accordance with Article 6 para. 1 letter c GDPR.
The deletion takes place after expiry of the statutory warranty and comparable obligations; the necessity of storing the data is reviewed every three years; in the case of statutory archiving obligations, the deletion takes place after their expiry (end of commercial and tax law retention obligation (6 years) and tax law retention obligation (10 years)).
Online presence in social media
We maintain online presences in social networks and platforms in order to communicate with customers, interested parties and users who are active there and to inform them about our services. When accessing the respective networks and platforms, the general terms and conditions and data protection guidelines of the respective operators apply.
Unless otherwise stated in our privacy policy, we process user data when they communicate with us within social networks and platforms, e.g. write posts on our online presence or send us messages.
Integration of third-party services and content
On the basis of our legitimate interests (i.e. interest in the analysis, optimization and economic operation of our online offer within the meaning of Art. 6 para. 1 lit. f GDPR), we use content or service offers from third-party providers within our online offer in order to integrate their content and services, such as videos or fonts (hereinafter uniformly referred to as “content”).
This always presupposes that the third-party providers of this content are aware of the IP address of the user, as they would not be able to send the content to their browser without the IP address. The IP address is therefore required to display this content. We endeavor to only use content whose respective providers only use the IP address to deliver the content. Third-party providers may also use so-called pixel tags (invisible graphics, also known as “web beacons”) for statistical or marketing purposes. The “pixel tags” can be used to evaluate information such as visitor traffic on the pages of this website. The pseudonymous information may also be stored in cookies on the user’s device and may contain, among other things, technical information about the browser and operating system, referring websites, time of visit and other information about the use of our online offer, as well as being linked to such information from other sources.
YouTube
We integrate the videos of the platform “YouTube” of the provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy Policy: https://www.google.com/policies/privacy/, Opt-Out: https://adssettings.google.com/authenticated.
Google Maps
We integrate the maps of the “Google Maps” service of the provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy Policy: https://www.google.com/policies/privacy/, Opt-Out: https://adssettings.google.com/authenticated.
Google Fonts
We integrate the fonts (“Google Fonts”) of the provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy Policy: https://www.google.com/policies/privacy/, Opt-Out: https://adssettings.google.com/authenticated.
Google ReCaptcha
We integrate the function for recognizing bots, e.g. for entries in online forms (“ReCaptcha”) of the provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy Policy: https://www.google.com/policies/privacy/, Opt-Out: https://adssettings.google.com/authenticated.
Facebook Pixel privacy policy
We use the Facebook pixel from Facebook on our website. We have implemented code on our website for this purpose. The Facebook pixel is a snippet of JavaScript code that loads a series of functions with which Facebook can track your user actions if you have come to our website via Facebook ads. For example, when you purchase a product on our website, the Facebook pixel is triggered and stores your actions on our website in one or more cookies. These cookies enable Facebook to match your user data (customer data such as IP address, user ID) with the data in your Facebook account. Facebook then deletes this data again. The data collected is anonymous and cannot be viewed by us and can only be used in the context of advertisements. If you are a Facebook user and are logged in, your visit to our website is automatically assigned to your Facebook user account.
We only want to show our services and products to people who are really interested in them. With the help of Facebook pixels, our advertising measures can be better tailored to your wishes and interests. In this way, Facebook users (if they have allowed personalized advertising) see appropriate advertising. Facebook also uses the collected data for analysis purposes and its own advertisements.
Below we show you the cookies that were set by integrating Facebook pixels on a test page. Please note that these are only sample cookies. Different cookies are set depending on the interaction on our website.
Name: _fbp
Wert: fb.1.1568287647279.257405483-6231580130920-7
Purpose: This cookie is used by Facebook to display advertising products.
Expiration date: after 3 months
Name: fr
Value: 0aPf312HOS5Pboo2r..Bdeiuf…1.0.Bdeiuf.
Purpose: This cookie is used to ensure that the Facebook pixel works properly.
Expiration date: after 3 months
Name: comment_author_50ae8267e2bdf1253ec1a5769f48e062231580130920-3
Value: Name of the author
Purpose: This cookie stores the text and name of a user who leaves a comment, for example.
Expiration date: after 12 months
Name: comment_author_url_50ae8267e2bdf1253ec1a5769f48e062
Value: https%3A%2F%2Fwww.testseite…%2F (URL of the author)
Purpose: This cookie stores the URL of the web page that the user enters in a text field on our website.
Expiration date: after 12 months
Name: comment_author_email_50ae8267e2bdf1253ec1a5769f48e062
Value: Author’s e-mail address
Purpose: This cookie stores the user’s e-mail address if they have provided it on the website.
Expiration date: after 12 months
Note: The cookies mentioned above relate to individual user behavior. Changes to Facebook can never be ruled out, especially when cookies are used.
If you are logged in to Facebook, you can change your settings for ads yourself at https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. If you are not a Facebook user, you can generally manage your usage-based online advertising at http://www.youronlinechoices.com/de/praferenzmanagement/. There you have the option of deactivating or activating providers.
If you would like to learn more about Facebook’s privacy policy, we recommend the company’s privacy policy at https://www.facebook.com/policy.php.
Source: Created with the data protection generator of firmenwebseiten.at in cooperation with meinhaushalt.at, manually translated for correct translations.
Data processing of subscribers to our newsletter:
If you register for our newsletter via our website, the following data will be collected
Data processed:
name, your e-mail address, the time of registration and your IP address.
We also store which newsletters we have sent you, whether and when you opened them
or blocked or marked as spam, whether they are temporarily or permanently unavailable.
whether you subscribe to or unsubscribe from the newsletter and which and how
many links you click on in the newsletters.
The processing of this data is dependent on the consent given when registering for our newsletter.
includes. If you do not wish to provide this information, please do not register for the
Newsletter.
Our newsletters are sent by IT service providers for automated processing.
Communication solutions (technical implementation) based in Austria, occasionally also in other countries.
countries within the EU as a service provider.
Our website uses MailPoet to send newsletters; the provider is Wysija SARL, 6 rue Dieudé, 13006, Marseille, France. MailPoet is a service that can be used to organize and analyze the sending of newsletters. The data transmitted by you for the purpose of subscribing to the newsletter is stored on our server, but sent via MailPoet’s servers so that MailPoet processes your newsletter-related data (MailPoet Sending Service). Details can be found at https://account.mailpoet.com/. With the help of MailPoet, we are able to analyze our newsletter campaigns, which allows us to see whether a newsletter message has been opened and which links have been clicked on, for example to determine which links have been accessed particularly often. We can also evaluate whether certain predefined actions were carried out after opening or clicking. For example, we can track whether you have placed an order after opening it. MailPoet also allows us to cluster the newsletter recipients according to various categories, such as age, gender and place of residence, in order to better adapt the newsletter to the respective target groups. If you do not wish to be analyzed by MailPoet, you must unsubscribe from the newsletter. We provide a link for this purpose in every newsletter message.
Detailed information on the functions of MailPoet can be found at https://account.mailpoet.com/ and https://www.mailpoet.com/mailpoet-features/. MailPoet’s privacy policy can be found at: https://www.mailpoet.com/privacy-notice/.
Data processing of applicants Applicants are persons who contact us via the contact form. We process your personal data in order to be able to process various suggestions or concerns that are transmitted to us. (Art 6 para 1 lit a and f GDPR). If you do not wish to provide us with your data, we will not be able to process your requests and suggestions. In order to achieve the above-mentioned purposes, it may be necessary in some cases for us to disclose your data to the following recipients based in Austria, and in some cases also in other countries within the EU.
IT service companies and their service providers in the context of maintenance, support of the
Information technology and communication systems IT service provider for website hosting and as an Internet service provider IT service provider for the technical implementation of the website. This disclosure may be made by transmission, dissemination or any other form of provision.
