.

 

DATA PROTECTION DECLARATION ON THE PROCESSING OF PERSONAL DATA

Data controller

Zacher Johann & Co.OHG

Via Castello 2

39038 I-39038 San Candido

T. +39 0474 913535

zacher@haunold.info

Personal data will be processed only by employees and collaborators of the company who have been expressly designated as data processors in accordance with this Privacy Policy. The employees have been adequately trained in this respect and work under the direct supervision and responsibility of the data controller.

Privacy information - Website

Zacher Johann & Co.OHG

(hereinafter also referred to as the "Company") has drawn up this privacy policy to inform visitors to this website of the methods and purposes of data processing. In particular, the visitors or those persons who make use of the web services offered on the website are informed in accordance with article 13 of Regulation (EU) 679/2016 on the protection of personal data. Your personal data will be processed in accordance with the Legislative Decree no. 196/2003, the EU Regulation 2016/679 (General Data Protection Regulation) and the Legislative Decree 101/2018. The present privacy policy refers to the above-mentioned website and does not apply to linked websites and to websites that users may visit.

Your data is processed to provide our services based on your request, our legitimate interests and to fulfill our pre-contractual and contractual obligations to you.

We check links that we mention on our website very carefully. Nevertheless, we do not assume any responsibility or liability for the content on external websites linked to from this website.

The use of the website implies that you agree with this privacy information letter, otherwise we ask you not to use the website. This privacy information letter may be updated at any time.

Purpose of processing personal data:

In order to ensure the functionality of the website, statistical purposes, technical data with potential personal reference, such as the IP address, the time of requests, the name of the domain and similar data are processed (Art. 6f GDPR).

Furthermore, personal data are processed in order to offer various services:

Newsletter

Each visitor can register on the website for our newsletter by double opt in procedure. This voluntary registration and this data processing can be revoked by the user at any time.

Contact form

The website visitor can contact the company using the contact form. For this purpose, the personal data entered will be processed in order to respond to the request. An explicit consent to the processing of data in the contact form is available.

Transmission of personal data of special categories

We ask you not to transmit sensitive data (personal data of special categories - Art. 9 as well as Art. 10 GDPR) via the website, e.g. by using the contact form.

Shop' section

We process our customers' data to enable them to select, purchase or order the selected products, goods and associated services, as well as their payment and delivery or execution. If necessary for the execution of an order, we use service providers, in particular postal and forwarding companies, to carry out delivery or execution for our customers. For the processing of payment transactions, we use the services of banks and payment service providers. The required information is marked as such in the context of the order or comparable purchase process and includes information necessary for delivery and invoicing, as well as contact information so that we can consult with you if necessary.

·        Types of data processed: Anagraphic data, contact data, payment data, contract data (such as customer category, duration), usage data (such as access times), metadata (such as device information, IP addresses).

·        Data transfer: Your data will be transferred exclusively within the framework of the business relationship, for the fulfillment of pre-contractual/contractual obligations (e.g. for the processing of payment transactions). A data transfer to non-EU countries does not take place.

·       Affected persons: Customers, business partners, interested parties

·       Purposes of processing: provision of contractual services and customer service, contact inquiries and communication, administration and response to inquiries, security measures.

·        Legal grounds: contract performance and pre-contractual inquiries (Art. 6 para. 1 p. 1 lit. b. GDPR); Legitimate interests (Art. 6 para. 1 p. 1 lit. f. GDPR); Legal obligation (Art. 6 para. 1 p. 1 lit. c. GDPR).

·       Archiving period: Our archiving period is based on the statutory provisions.

Legal basis of data processing:

The main legal basis for the processing is Art. 6b) GDPR and Art. 6f) GDPR (functionality of the website).

Cookies

This website also collects personal data through the use of cookies.

There are four categories of cookies:

·         strictly necessary cookies - for the basic functionality of the website.

·         functional cookies - for ensuring the optimal performance of the website, including, for example, saving the language selection

·         Performance cookies - for improving the user experience, including, for example, measuring loading times

·       Marketing cookies - e.g., for targeting advertisements to the user - These cookies are deactivated by default on our websites and are only activated if you have given us your consent to do so.

The majority of cookies used are "session cookies" which are deleted after closing the browser. Other cookies are stored for example to display the correct language the next time you visit the website.

For all cookies that are not subject to a legitimate interest of the website operator (Art. 6f) GDPR), you will be explicitly asked for your consent.

Provision of the data

Apart from navigation data or processing requiring consent, only data provided voluntarily will be processed by the Company. If this information is not provided, it is possible that this will result in a restriction of the services offered.

Data transfer to third parties

Data will not be disseminated except where required by law. Your data may be passed on to third parties, if necessary, but only within the framework of our business relationship, e.g. for the fulfilment of services such as making payments via third parties. In principle, they will not be transferred to non-EU countries without your explicit consent. This also applies to the use of profiling and automated decisions. If Google Maps is used: It cannot be excluded that data is sent to non-EU countries, please consider this before using this application.

Hosting of the website

This website is hosted by an exterņal service provider.

For this purpose, the external hoster receives personal data collected on the website. The legal basis is Art. 6b) GDPR - pre-contractual measures as well as Art. 6f) (Smooth guarantee of the tools on our website). The hoster processes this data exclusively for the fulfillment of its service obligations.

With given consent: Web analysis with Google Analytics

Our website uses functions of the web analysis service Google Analytics. The provider is Google Inc, 1600 Amphitheatre Parkway Mountain View, CA 94043, U S A. Google Analytics.

The information obtained through the cookies about your use of the website (including your IP address) will be transmitted to and stored by Google on servers in the U SA. The full information letter can be found in Google's privacy policy:

https://support.google.com/analytics/answer/6004245?hl=en.

We use Google Analytics as an analysis tool to monitor the performance of our website, analyse customer behaviour and take appropriate action.

You can also prevent the described collection and processing of data by Google by downloading and installing the browser plugin available under the following link: https://tools.google.com/dlpage/gaoptout?hl=en.

The legal basis is Art. 6a) GDPR.

With given consent: Facebook Pixel

Our website uses the so-called "Facebook Pixel" of the social network Facebook, which is operated by Facebook Inc. or, if you are a resident of the EU, by Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

With the help of the Facebook Pixel, it is possible for Facebook to determine website visitors as a target group for the display of advertisements, so-called "Facebook Ads". By using Facebook Pixel, we want to make sure that our Facebook Ads correspond to the interest of the users.

It also allows us to track the impact of advertising campaigns.

If you give consent to the Facebook Pixel, it will be integrated by Facebook and a cookie will be placed on your device as described above. When you log in to Facebook, the offers you have visited are recorded in your profile. The data is anonymized for us, but Facebook processes this data. The full information letter from Facebook on this can be found at: https://www.facebook.com/business/m/privacy-and-data

The legal basis is art. 6a) GDPR.

Google Maps

In our internet presence we use Google Maps to show our location and to provide directions. This is a service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereinafter only "Google".

If you access the Google Maps component of our website, Google will store a cookie on your device via your internet browser. In order to display our location and to create a route description, your user settings and data are processed. We cannot exclude the possibility that Google uses servers in the USA. The legal basis is Art. 6 para. 1 lit. f) GDPR. Our legitimate interest lies in the optimization of the functionality of our Internet presence.

Through the connection to Google established in this way, Google can determine from which website your request has been sent and to which IP address the directions are to be sent. If you do not agree with this processing, you have the possibility to prevent the installation of cookies by the appropriate settings in your internet browser.

In addition, the use of Google Maps and the information obtained via Google Maps is subject to the Google Terms of Use, policies.google.com/terms and the Terms and Conditions for Google Maps.

In addition, Google offers further information at adssettings.google.com/authenticated , policies.google.com/privacy.

SSL Encryption

This site uses SSL encryption for security reasons and to protect the transmission of confidential content, such as the requests you send to us as site operator. You can recognize an encrypted connection by the fact that the address line of your browser changes from "http://" to "https://" and by the lock symbol in your browser line.

If SSL encryption is activated, the data you transmit to us cannot be read by third parties.

Underage visitors

This website is not intended for use by minors. We therefore do not collect and store data of underage visitors (except involuntarily)

The duration of data retention is measured according to the statutory retention obligations and legal obligations applicable to us.

Information on the rights of the data subjects
The data subject has the right to obtain confirmation from the controller as to whether or not personal data concerning him/her are being processed; if this is the case, he/she has the right to be informed of such personal data and to receive the information specified in Art. 15 GDPR.
The person concerned has the right to request the person responsible to correct incorrect personal data concerning him/her and, if necessary, to complete incomplete personal data (Art. 16 GDPR).
The data subject has the right to request the controller to delete personal data concerning him/her immediately if one of the reasons listed in Art. 17 GDPR applies, e.g. if the data is no longer needed for the purposes for which it was collected (right to erasure).
The data subject has the right to request the controller to restrict processing if one of the conditions listed in Art. 18 GDPR is met, e.g. if the data subject has lodged an objection to processing, for the duration of the controller's examination.
The data subject has the right to receive the personal data concerning him/her that he/she has provided to a controller in a structured, common and machine-readable format and has the right to transfer this data to another controller without hindrance from the controller to whom the personal data has been provided, under certain circumstances, e.g. if the processing is based on consent and the processing is carried out with the aid of automated procedures (right to data transferability Art. 20 GDPR).
The data subject shall have the right to object at any time, on grounds relating to his particular situation, to the processing of personal data concerning him. The data controller will then no longer process the personal data unless he can demonstrate compelling reasons for processing that are worthy of protection, which outweigh the interests, rights and freedoms of the data subject, or if the processing serves to assert, exercise or defend legal claims (Art. 21 GDPR).
Without prejudice to any other administrative or judicial remedy, every data subject has the right to lodge a complaint with a supervisory authority if the data subject considers that the processing of personal data relating to him or her is in breach of the data protection regulation (GDPR) (Art. 77 GDPR). The data subject may assert this right with a supervisory authority in the Member State in which he or she is resident, at his or her place of work or at the place where the alleged infringement is committed. In Italy the competent supervisory authority is: Garante della privacy

You can exercise your rights at the above addresses (data controller).