Privacy Policy
In the following privacy policy, we inform you about the most important aspects of data processing on our website. We collect and process personal data only on the basis of legal provisions (General Data Protection Regulation, Telecommunications Act 2003). As soon as you access or visit our website as a user, your IP address as well as the start and end of the session are recorded. This is technically necessary and therefore constitutes a legitimate interest within the meaning of Art. 6(1)(f) GDPR.
Contacting Us
If you contact us, either via our contact form on our website or by email, the data you transmit to us will be stored for six months for the purpose of processing your inquiry or in case of follow-up questions. Your transmitted data will not be shared without your consent.
Data Storage
To facilitate the purchasing process and subsequent contract processing, the webshop operator stores the IP address associated with the internet connection using cookies.
During the ordering process, personal data such as name, billing address, email address, and telephone number are collected and stored. Payment information is processed exclusively through the respective payment service provider; no credit card data is stored on our website.
As part of contract processing, we process personal data such as email address, telephone number, and order and booking information in order to provide the booked services and communicate with customers.
The data you provide is necessary for the performance of the contract and for taking steps prior to entering into a contract. It is not possible to conclude a contract without this data. The collected data is not disclosed to third parties, with the exception of payment data transmitted to the banks or payment service providers processing the payment, data transmitted to the shipping company commissioned by us to deliver the goods, and data transmitted to our tax adviser for the fulfilment of our tax obligations.
If you cancel the purchasing process, the data stored by us will be deleted. If a contract is concluded, all data arising from the contractual relationship will be stored until the expiry of the statutory tax retention period of seven years. Your name, address, the goods purchased and the date of purchase will also be stored until the expiry of the ten-year product liability period. Data processing is based on Section 96(3) TKG and Article 6(1)(a) GDPR (consent) and/or Article 6(1)(b) GDPR (necessary for the performance of a contract).
Cookies
Our website uses cookies. These are small text files that are stored on your device and enable user-friendly and secure provision of our website.
The use of cookies is based on legal provisions. Detailed information about the cookies used, their purpose, and your setting options can be found in our Cookie Policy.
Google Maps
Our website uses functions of the web mapping service “Google Maps.” The provider of this service is:
- Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
To use the functions of Google Maps, it is necessary to process your IP address. This information is usually transmitted to Google servers and stored there. This may also result in the transmission of data to servers of Google LLC in the USA.
Data processing is based on Article 6(1)(f) GDPR (legitimate interests), as the use of Google Maps enables an attractive presentation of our online services and makes it easier to locate the places specified by us.
For the transmission of personal data to third countries, Google relies on the standard contractual clauses approved by the European Commission in accordance with Art. 46 GDPR.
Further information on how Google handles user data can be found in Google’s Privacy Policy. Google’s privacy policy.
Google Fonts
Our website uses fonts from “Google Fonts,” a service of:
- Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
When you access our website, your browser loads the required fonts directly from Google in order to display text and fonts correctly. Your IP address may be transmitted to and stored on Google servers. In this context, data may also be transmitted to servers operated by Google LLC in the USA.
The use of Google Fonts is based on Art. 6(1)(f) GDPR (legitimate interest), as uniform and appealing fonts enable optimal presentation of our content.
To secure data transmission to third countries, Google uses the standard contractual clauses approved by the European Commission in accordance with Art. 46 GDPR.
Further information about Google Fonts
Further information can be found in Google’s Privacy Policy – privacy at Google.
Google reCAPTCHA
To protect our online forms from misuse, we use the “reCAPTCHA” service of:
- Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Through the use of reCAPTCHA, personal data, in particular the IP address and information about your usage behavior, is transmitted to Google and processed there.
Processing is based on Art. 6(1)(f) GDPR (legitimate interest), as we have a legitimate interest in protecting our website from automated attacks and spam.
Google may also transfer the collected data to servers of Google LLC in the USA. To secure data transmission to third countries, standard contractual clauses in accordance with Art. 46 GDPR are used.
Further information on data processing at Google.
Server Log Files
This website and the associated provider automatically collect information during website use in the form of so-called “server log files.” This particularly concerns:
- IP address or hostname
- Browser used
- Duration of the visit, including the date and time
- Pages accessed on the website
- Language settings and operating system
- Exit page (the URL from which the user left the website)
- ISP (Internet Service Provider)
This information is evaluated exclusively to ensure trouble-free operation of the website and to improve our offering, and is not permanently combined with other personal data.
The website operator reserves the right to evaluate this data exclusively on a case-by-case basis if this is necessary to investigate security incidents or to enforce legal claims.
Your Rights as a Data Subject
As a data subject, you have the following rights regarding your data stored with us:
- Right of access
- Right to erasure
- Right to rectification
- Right to data portability
- Withdrawal of consent and right to object to data processing
- Right to restriction of processing
If you believe that your personal data has been processed in violation of data protection law, you may lodge a complaint with us at (office@spiritissima.at) or with the competent data protection authority.
You can reach us at the following contact details:
Website operator: Spiritissima GmbH
Telephone number: +43 660 8747370
Email: office@spiritissima.at
