Private Policy

Privacy Policy

General Information

The following notes give a simple overview of what happens to your personal information when you visit our website. Personal data is all data that personally identifies you. For detailed information on the subject of data protection, see our privacy policy listed in this text.

Scope

This privacy policy informs the users about the nature, scope and purpose of the collection and use of personal data by the responsible provider of this website (hereafter called “offer”), Safersurfing, Eisgrubengasse 2-6 / Top B1, 2334 Vösendorf, Austria and Safersurfing e.V. Hinter Erlen 5, Hilzingen 78247, Germany.

Access data / server log files

The provider collects data about every access to the offer (so-called server log files). Access data includes:

Name of the retrieved web page, file, date and time of retrieval, amount of data transferred, notification of successful retrieval, browser type and version, the user’s operating system, referrer URL (the previously visited page), IP address and the requesting provider.

The provider uses the log data only for statistical evaluations for the purpose of operation, security and optimization of the offer. However, the provider reserves the right to subsequently review the log data if, based on concrete evidence, the legitimate suspicion of unlawful use exists.

SSL or TLS encryption

For security purposes and to protect the transmission of confidential content, such as orders or requests that you send to us as the site operator, this site uses an SSL or TLS encryption.

An encrypted connection can be recognized by the browser’s address bar changing from

“Http://” to “https://” and the lock icon in your browser bar.

If SSL or TLS encryption is enabled, the data you submit to us cannot be read by third parties.

Handling of personal data

Personal information is information by which a person can be identified, i.e. information that can be traced back to a person. This includes the name, e-mail address or phone number. But also data about preferences, hobbies, memberships or which websites were viewed by someone are part of personal data.

Personal data are only collected, used and passed on by the provider if law permits this or if the users consent to the data collection.

Contact

When contacting the provider (for example, by contact form or e-mail), the information of the user is stored for the purpose of processing the request as well as in the event that follow-up questions arise.

Comments and posts

When users leave comments in the blog or other posts, their IP addresses are saved. This is for the security of the provider, if someone posts illegal content (insults, prohibited political propaganda, etc.). In this case, the provider himself may be prosecuted for the comment or contribution and therefore has a legitimate interest in the identity of the author.

Newsletter

With the newsletter, we inform you about us and our services.

If you would like to receive the newsletter, we need a valid e-mail address from you as well as information that allows us to verify that you are the owner of the specified e-mail address or that the owner agrees to receive the newsletter. Further data is not collected. These data are used only for sending the newsletter and will not be given to third parties.

By registering for the newsletter, we save your IP address and the date of registration. The sole purpose of this storage is to serve as proof, in case a third party misuses an e-mail address and registers for newsletter reception without the knowledge of the person entitled.

You can revoke your consent to the storage of the data, the e-mail address and its use for sending the newsletter at any time. You can revoke your consent via a link in the newsletters themselves, in your profile area or by using the above contact options.

Integration of services and contents of third parties

It may happen that content from third parties, such as videos from YouTube, maps from Google Maps, RSS feeds or graphics from other websites are included in this online offer. This always presupposes that the providers of this content (hereinafter referred to as “third party provider”) have access to the IP address of the users. Because without the IP address, they could not send the content to the browser of each user. The IP address is therefore required for the presentation of this content. We endeavour to use only content whose respective providers use the IP address solely for the delivery of the content. However, we do not have any influence on this if the third party provider stores the IP address e.g. for statistical purposes. As far as we know this, we will inform users about it.

YouTube

Our website uses plugins from the Google-powered YouTube page. Site operator is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.

If you visit any of our sites equipped with a YouTube plug-in, you will be connected to the servers of YouTube. It tells the YouTube server which of our pages you have visited. Furthermore, YouTube can store various cookies on your device. With the help of these cookies, YouTube can receive information about visitors to our website. For instance, this information will be used to capture video statistics, improve usability, and prevent fraud. The cookies remain on your device until you delete them.

When you are logged in to your YouTube account, you allow YouTube to tie your browsing experience directly to your personal profile. You can prevent this by logging out of your YouTube account. The use of YouTube is in the interest of an attractive presentation of our online offers.

This constitutes a legitimate interest within the meaning of the GDPR. Further information on handling user data can be found in the privacy policy of YouTube

https://policies.google.com/privacy?hl=en.

Google Web Fonts

This site uses so-called web fonts, provided by Google, for the uniform presentation of fonts. The Google fonts are installed locally. There is no connection to Google servers.

Google Maps

This site uses the mapping service Google Maps via an API. Provider is Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA.

To use the features of Google Maps, it is necessary to save your IP address. This information is usually transmitted to and stored on a Google server in the United States. The provider of this site has no influence on this data transfer. The use of Google Maps is in the interest of an attractive presentation of our online offers and an easy findability of the places we specify on the site. This constitutes a legitimate interest within the meaning of the GDPR.

More information on how to handle user data can be found in the Google Privacy Policy: https://policies.google.com/privacy?hl=en.

Cookies

Cookies are small files that make it possible to store specific device-related information on users’ access devices (PCs, smartphones, etc.). They serve the user-friendliness of web pages and thus the users (for example storage of login data). On the other hand, they serve to record the statistical data of the website usage and to be able to analyze it for the purpose of improving the offer. Users can influence the use of cookies. Most browsers have an option to restrict or completely prevent the storage of cookies. However, the use and especially the comfort of use are limited without cookies.

Safersurfing uses/stores the following cookies:

  • woocommerce_cart_hash
  • woocommerce_items_in_cart
  • wp_woocommerce_session_
  • type-kit by Adobe
  • google analytics
  • facebook connect
  • doubleClick
  • wp_woocommerce_session_HASH
  • _stripe_mid
  • _stripe_sid

You can find many online ad cookies from companies through the US website

http://www.aboutads.info/choices/ or the EU page http://www.youronlinechoices.com/uk/your-ad-choices/ manage.

Registration

The data entered during registration will be used for the purpose of using the offer. Users may be informed by e-mail about offer or registration-related information, such as changes in the scope of the offer or technical circumstances. The collected data can be seen in the input mask during registration. This includes name, postal address, e-mail address, IP address to use for newsletters, support groups, visitor statistics or online courses.

Google Analytics

This offer uses Google Analytics, a web analytics service provided by Google Inc. (“Google”). Google Analytics uses so-called “cookies”, text files that are stored on users’ computers and that allow an analysis of the use of the website. The information generated by the cookie about the use of this website by the users is usually transmitted to a Google server in the USA and stored there.

However, if IP anonymization is activated on a website, the IP address of Google users within member states of the European Union or other parties to the Agreement on the European Economic Area will be shortened beforehand. Only in exceptional cases, will the full IP address be sent to a Google server in the US and shortened there. IP anonymization is active on this website. On behalf of the operator of this website, Google will use this information to evaluate users’ use of the website, to compile reports on website activity, and to provide other services related to website activity and internet usage to the website operator.

The IP address provided by Google Analytics as part of Google Analytics will not be merged with other Google data. Users can prevent the storage of cookies by setting their browser software accordingly. However, this we notify users that in this case they may not be able to use all features of this website in full. In addition, users may prevent the collection by Google of the data generated by the cookie and related to its use of the website (including your IP address) as well as the processing of this data by Google by using the browser plug-in available under the following link Download and install: https://tools.google.com/dlpage/gaoptout?hl=en.

As an alternative to the browser add-on or within browsers on mobile devices, Click here to opt out. click here [/ google_analytics_optout] to prevent Google Analytics from entering this website in the future. An opt-out cookie is stored on your device. If you delete your cookies, you have to click this link again. This cookie is only valid for this website and only this domain.

Use of Facebook Social Plugins

This offer uses social plugins (“plugins”) from the social network facebook.com, which is operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”). The plugins are recognizable by one of the Facebook logos (white “f” on a blue tile or a “thumbs up” sign) or are marked with the addition “Facebook Social Plugin”. The list and appearance of Facebook Social Plugins can be viewed here: https://developers.facebook.com/docs/plugins/.

When a user vews a web page of this offer that contains such a plugin, its browser establishes a direct connection to the Facebook servers. The content of the plugin is transmitted by Facebook directly to your browser and incorporated by the browser into the website. The provider therefore has no influence on the amount of data that Facebook collects with the help of this plugin and therefore informs users according to his level of knowledge:

By integrating the plugins, Facebook receives the information that a user has accessed the corresponding page of the offer. If the user is logged in to Facebook, Facebook can assign the visit to his Facebook account. If users interact with the plugins, for example, press the Like button or leave a comment, the corresponding information is transmitted from your browser directly to Facebook and stored there. If a user is not a member of Facebook, there is still the possibility that Facebook will find out and save their IP address. According to Facebook, only an anonymous IP address is stored in Germany.

The purpose and scope of the data collection and the further processing and use of the data by Facebook, as well as the related rights and setting options for protecting the privacy of users, can be found in privacy policy of Facebook: https://www.facebook.com/about/privacy/

If a user is a Facebook member and does not want Facebook to collect data about him via this offer and associate it with his member data stored on Facebook, he must log out of Facebook before visiting the website.

It is also possible to block Facebook social plugins with add-ons for your browser, for example with the “Facebook Blocker”.

+1 button from Google+

This offer uses the “+1” button of the Google Plus social network operated by Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, United States (“Google”). The button can be recognized by the “+1” sign on white or coloured background.

When a user accesses a web page of this offer that includes such a button, the browser establishes a direct connection to Google servers. The content of the “+1” button will be sent by Google directly to its browser and incorporated into the website by Google. The provider therefore has no influence on the amount of data that Google collects with the button. According to Google, no personal data is collected without a click on the button. Such data, including the IP address, is only collected and processed from logged in members.

The purpose and scope of the data collection and the further processing and use of the data by Google, as well as the users rights and setting options to protect their privacy, can be found by users by clicking the button “Google privacy policy to the “+1″”: https://developers.google.com/ + / web / buttons-policy and the FAQ: https://developers.google.com/+/web/buttons-policy/.

Order processing in the online shop and customer account

We process the data of our customers as part of the ordering process in our online shop to allow you to choose and order the selected products and services, as well as allow for their payment and delivery.

The processed data includes inventory data, communication data, contract data, payment data. Persons affected by the processing are our customers, prospects and other business partners. Processing is for the purpose of providing contractual services in the context of the operation of an online shop, billing, delivery and customer service. Here we use session cookies for the storage of the shopping cart contents and permanent cookies for the storage of the login status.

Processing is based on Art. 6 para. 1 lit. b (execution of order transactions) and c (legally required archiving) DSGVO. The information marked as required for the establishment and fulfillment of the contract is required. We disclose the data to third parties only in the context of delivery, payment or in the context of legal permissions and obligations to legal advisors and authorities. The data will be processed in third countries only if necessary for the fulfillment of the contract (for example, on customer’s request upon delivery or payment).

Users can optionally create a user account, in particular in order to view their orders. As part of the registration, the necessary mandatory information will be communicated to the users. The user accounts are not public and cannot be indexed by search engines. If users have terminated their user account, their data will be deleted with regard to the user account, except the retention is required for commercial or tax law reasons according to Art. 6 para. 1 lit. c DSGVO. Information in the customer account remains until its deletion with subsequent archiving in case of a legal obligation. It is the responsibility of the users to secure their data upon termination before the end of the contract.

As part of the registration and re-registration and use of our online services, we store the IP address and the time of the respective user action. The storage is based on our legitimate interests, as well as the user’s protection against misuse and other unauthorized use. A transfer of this data to third parties does not take place, unless it is necessary for the prosecution of our claims or if there is a legal obligation in accordance with Art. 6 para. 1 lit. c DSGVO.

The deletion takes place after expiry of legal warranty and comparable obligations, the necessity of keeping the data is checked every three years; in the case of legal archiving obligations, the deletion takes place after its expiration (end of commercial law (6 years) and tax law (10 years) retention obligation).

Safersurfing uses WooCommerce as web shop.

External payment service providers

We use external payment service providers, through whose platforms the users and we can make payment transactions (for example, each with a link to the privacy policy, Paypal (https://www.paypal.com/webapps/mpp/ua/privacy-full), Sofort / Klarna (https://www.klarna.com/de/datenschutz/), Giropay (https://www.giropay.de/rechtliches/datenschutz-agb/), eps (https: //www.eps- ueberweisung.at/) Visa (https://www.visa.de/datenschutz), Mastercard (https://www.mastercard.de/de-de/datenschutz.html), American Express (https: // www .americanexpress.com / DE / content / privacy-policy-statement.html), stripe https://stripe.com/gb/privacy

As part of the fulfillment of contracts, we use the payment service providers on the basis of Art. 6 para. 1 lit. b. DSGVO. Additionally, we use external payment service providers on the basis of our legitimate interests according to Art. 6 para. 1 lit. b. DSGVO, in order to offer our users effective and secure payment options.

Amongst the data processed by the payment service providers is inventory data, e.g. the name and the address, bank data, such as account numbers or credit card numbers, passwords, TANs and checksums, as well as contract, summary and recipient-related information. The information is required to complete the transactions. However, the data entered will only be processed and stored by the payment service providers. That means, we do not receive any account or credit card information, but only information as to the confirmation or rejection of the payment. The data may be transmitted by the payment service providers to credit reporting agencies. This transmission is for the purpose of checking the identity and credit rating. In that respect, we refer to the terms and privacy policy of payment service providers.

For the payment transactions, the terms and conditions and the privacy notices of the respective payment service providers apply. These are available on the respective websites, or transaction applications. We also refer to these for further information and assertion of rights of withdrawal, information and other data subjects’ rights.

Revocation, changes, corrections and updates

The user has the right, upon request, to obtain free information about the personal data that has been stored about him. In addition, the user has the right to correction of incorrect data, blocking and deletion of his personal data, as far as there is no legal duty of storage.

Source: Safersurfing and some parts translated by Safersurfing from eRecht24