Privacy Policy
Whether you are a customer or a visitor to our website and online store, the protection and security of your data are of utmost importance to us. Therefore, we are committed to protecting your privacy and treating your personal data confidentially. We would like to inform you about the personal data we collect during your visit to this website and the purposes for which it is used.
I. Data controller
This website is operated by Farfalla Essentials AG, Leusbündtweg 49a, 6805 Feldkirch, Austria, FN 353959 d, which is also the controller as defined by the EU General Data Protection Regulation (hereinafter referred to as “GDPR”).
The controller has not appointed a data protection officer because the legal conditions requiring such an appointment are not met.
However, inquiries about data protection and the use of your personal data can be sent to the following email address and will be handled by us in accordance with the legal requirements: info@farfalla.eu.
II. Data used / processing purposes / storage duration
Below, we describe the categories of data we collect and the purposes for which this data is used. Where possible, you will also find information on the storage period of the respective data.
Each time this website is accessed, the server log stores the access data in a log file. The data record saved contains the following information: date and time of access, IP address, session ID, website accessed, name of the website from which the website was accessed and information about the browser used.
We only evaluate these log files in the event of misuse of our website. We reserve the right to review user log files at a later date if there is a specific suspicion of illegal or contractual violations in their use of our website. In general, we cannot attribute this data to a specific person. However, if such identification is possible, we only utilise this data in cases where there is an appropriate legal basis, such as a balance of interests in individual cases.
When you register on our website or for our online store, we collect the master data you provide (in particular your name, title, address, telephone or fax number, email address, correspondence language, online store login data) and use it on the basis of the agreement concluded with you. In addition, you will be assigned an internal customer number and one or more contact persons from our company. We use this data to enable your access to the online store and to support you as a customer or prospective client of our company. As a rule, such data is stored for nine months after the customer’s final use of the online store (deletion of the customer account).
If you place an order in the online store, we may collect additional delivery addresses and other data provided by you for the purpose of order processing. Such data is stored for six months after the customer relationship has ended. If personal master data or order data is incorporated into our accounting system, this informationis stored until the end of the prescribed periods (generally 7 years in Austria, 10 years in Germany) on the basis of the statutory retention obligations applicable to us.
If you have consented to receiving a newsletter, we will use your name and email address to send you the newsletter. This data is used for the duration of your subscription to the respective newsletter.
If you have consented to the processing of your personal data, you have the right to withdraw this consent at any time. You can declare your revocation in writing or via email to info@farfalla.eu.
III. Recipients and categories of data recipients
In connection with the operation of this website or our online store, the following processors work for the controller:
Website hosting provider: Amazon Web Services (AWS)
Online store provider: YOO - just digital.
Payment service provider: Six Payment Services
In addition to the specified recipients, future services related to this website and the online store may involve other processors, such as hosting providers, store operators, and payment service providers.
IV. General principles for the processing of personal data
1. We fully comply with the statutory data protection regulations.
The storage, processing, and use of personal data are governed by the GDPR and the relevant national laws that supplement it. The specific legal basis for processing the respective personal data is detailed in the list above.
2. Personal data will not be passed on to third parties without your consent
.
We will not disclose your personal data to third parties for advertising or marketing purposes or otherwise pass it on to third parties unless it is necessary to provide the service we owe you, or you have given your consent.
In some cases, personal data is transferred to processors if they offer sufficient guarantees for the lawful and secure use of data and contractually undertake to comply with the principles described in this privacy policy and the statutory regulations.3. We only use the personal data necessary for the stated purposes.
We will explain the reasons for its use when collecting this data.
In individual cases, we only ever collect personal data to the extent necessary to achieve these purposes. Personal data will be deleted if its further use becomes unnecessary.
V. Your rights in relation to the data used
If and insofar as we use personal data relating to you, you have the following rights in particular in relation to such data:
- Right of access (Art. 15 GDPR): You can request information at any time as to whether and which personal data concerning you is used by us, for what purposes the data is processed, where the data comes from, to which recipients the data may be transmitted and how long such data is stored by us.
- Right to rectification (Art 16 GDPR): If you discover that personal data concerning you is incorrect, you can request the correction of such data at any time. If you believe that data is incomplete, you can also request that data be completed.
- Right to erasure (Art. 17 GDPR) If you believe that the use of your personal data is no longer necessary, lacks sufficient legal basis, or is unlawful for other reasons, you can request the erasure of this data.
- Right to restriction of processing (Art. 18 GDPR): Instead of requesting data deletion, you may opt for restricting its use if you believe the data is being used unlawfully. This restriction can also be requested if you dispute the data's accuracy or have objected to its use.
- Right to data portability (Art. 20 GDPR): You may request that any personal data that you have provided yourself and that is used on the basis of a contract or consent be made available to you in a structured, commonly used and machine-readable format. You can also request that this data be transmitted directly to another controller.
- Right to lodge a complaint with a supervisory authority (Art. 77 GDPR): If you believe that your rights in relation to the personal data concerning you have been violated, you have the right to lodge a complaint with a supervisory authority. In particular, you can contact the supervisory authority responsible for your place of residence, your place of work or the place of the suspected infringement. In Austria, the competent supervisory authority is the Data Protection Authority, Wickenburggasse 8, 1080 Vienna.
We specifically highlight your right to object (Art. 21 GDPR): If your specific circumstances render the use of your personal data—based on our balancing of interests—inappropriate, you have the right to object to this use. You have the right to object to the use of your personal data for direct advertising at any time. For any questions or concerns regarding your rights related to your personal data, you can contact us via email at info@farfalla.eu.
VI. Cookies
We use cookies on our website to enable certain functionalities and to analyse user activity.
Cookies are small text files that are stored on your computer. Most of the cookies we use are deleted from your hard drive at the end of your browser session (session cookies). If you select the “stay logged in” option, the cookies will be deleted after two weeks. Other cookies remain on your computer and enable us to recognise your computer upon your next visit (persistent cookies).
You can prevent the storage of cookies by setting your browser accordingly. However, we would like to point out that, in this case, you may not be able to use all the functions of this website to their full extent. Please disable cookie storage in your browser for our website if you do not want our cookies stored on your computer, or
adjust your browser settings to prevent cookies from being stored on your device in general. You can also delete any cookies that have already been saved directly through your browser settings.
Disabling cookies may result in the placement of a persistent cookie on your computer to remember your choice. If you delete this persistent cookie, you will need to disable cookies again. The following categories of cookies are used on our website:
I. Session cookies
We use a session ID (session identifier) to make it easier for you to browse our website. This is assigned to each visitor of our website at the beginning of each user session. This session ID is used by our server to recognise you or your computer/browser as the same visitor despite a possible change of IP address since your last visit. This session ID makes it possible to collate several related requests from a user to one session. The session ID cookie we use is only valid until the end of the respective session. It is automatically deleted when you close your browser.
II. Persistent cookies
Google Analytics
This website uses Google Analytics, a web analysis service provided by Google LLC (“Google”). Google Analytics uses cookies, which are text files that are stored on your computer and allow your use of the website to be analysed. The information generated by the cookie about your use of the website is typically transmitted to a Google server in the USA and stored there. However, if IP anonymisation is activated on this website, your IP address will be truncated by Google beforehand within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. The full IP address is only transmitted to a Google server in the USA and truncated there in exceptional cases.
On behalf of the controller of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and Internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics is not merged with other Google data. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.
You can further prevent Google from collecting the data generated by the cookie relating to your use of the website (including your IP address) and from processing such data by downloading and installing the browser plug-in available via the following link: https://tools.google.com/dlpage/gaoptout?hl=en-GB For more information about Google Analytics and data protection, please visit http://tools.google.com/dlpage/gaoptout or http://www.google.com/intl/de/analytics/privacyoverview.html
Please note that the code “gat._anonymizeIp()” has been added to Google Analytics on this website to ensure that IP addresses are collected in anonymised form (IP masking).
VII. Security measures to protect your data
To protect your data, we have taken technical and organisational data security measures that are regularly reviewed and adapted to technological progress.
However, we would like to point out that due to the technical nature of the Internet, it cannot be ruled out that the rules of data protection and data security may not be observed by other persons or organisations whose actions are not within our area of responsibility.
VIII. Changes to the data protection provisions
We reserve the right to modify our data protection provisions, should this become necessary due to changes in the law or our internal company processes. We therefore ask that you read this privacy policy regularly to check for any changes.
Last updated: May 2018