Privacy Policy

E.V.E. Textiles GmbH

  1. Introduction

 

If we may welcome you as a business partner or customer, please read from point III.

If you visit our website, please read from point II.

 

  1. What data do we process when you visit our website?

 

Welcome to the website: Edens Collective Official Online Shop! Please get a picture of how we process your personal data when you visit our website (Art 13, Art 14 DSGVO; § 96 Abs 3 TKG “Austrian Telecommunication Act”).

When visiting our website, the following data may be processed:

 

  • Browser type,

  • operating system,

  • country,

  • date,

  • Time and duration of access,

  • IP[1] address and pages visited on our website including entry and exit pages,

  • contact page on website,

  • registration in the course of the web store,

  • payment data in the course of the webshop,

  • Newsletter dispatch,

  • device data: We may store personal data from your device. Such data includes geolocation data, IP address, unique identifiers (e.g. MAC address);

  • Data you enter via a contact form,

  • e-mail address,

  • payment data.

 

The processing of this data is necessary to ensure the security of the operation of the website and to guarantee the functionality of the website from a technical point of view. The collection of this data is partly carried out via technical cookies. These technical cookies are only used to the extent necessary (§ 96 Abs 3 TKG). The processing of this data is justified by our legitimate interest in the operation of our website (Art 6 para. 1 lit f GDPR).

For the operation of our website and web stores it may be necessary to disclose your data to the following recipients:

 

Recipient of data

 

Purpose of data processing

 

Legal justification

 

Location

Transfer in third party country[2]

Shopify, Inc

E-Commerce-Provider

Contractual obligations (Art 6 Abs 1 lit b GDPR)

Canada

Adequacy decision pursuant to Art 45 GDPR

Klarna

Payment-Provider

Contractual obligations (Art 6 Abs 1 lit b GDPR)

Legitimate Interest
(Art 6 Abs 1 lit f GDPR)

Sweden

Within the EAA

Alphabet Inc

(Google Analytics)

Statistical Performance Evaluation

Consensus (Art 6 Abs 1 lit a GDPR)

USA

Consensus pursuant to Art 49 Abs 1 lit a GDPR

Visa

Payment-Provider

Contractual obligations (Art 6 Abs 1 lit b GDPR)

Legitimate Interest
(Art 6 Abs 1 lit f GDPR)

USA

Contractual obligations Art 49 Abs 1 lit b GDPR

Apple Pay

Payment-Provider

Contractual obligations (Art 6 Abs 1 lit b GDPR)

Legitimate Interest
(Art 6 Abs 1 lit f GDPR)

USA

Contractual obligations Art 49 Abs 1 lit b GDPR

MasterCard

Payment-Provider

Contractual obligations (Art 6 Abs 1 lit b GDPR)

Legitimate Interest
(Art 6 Abs 1 lit f GDPR)

USA

Contractual obligations Art 49 Abs 1 lit b GDPR

PayPal

Payment Provider

Contractual obligations (Art 6 Abs 1 lit b GDPR)

Legitimate Interest
(Art 6 Abs 1 lit f GDPR)

USA

Contractual obligations Art 49 Abs 1 lit b GDPR

Facebook, Inc

Instagram

Marketing-Reasions und presentation

Consensus (Art 6 Abs 1 lit a GDPR)

USA

Consensus pursuant to Art 49 Abs 1 lit a GDPR

 

II.1.     Currently used „technical“ cookies

The above mentioned data is stored via so-called "cookies"[3]. Cookies are text files that are stored on your computer and enable an analysis of the use of the website. They are used to recognize and store temporary data of the homepage visitor. We only use cookies to the extent necessary to communicate with you via the website.

These technical cookies are activated as soon as you visit our homepage.

The following cookies are used on our platform on the basis of our legitimate interest (Art 6 para 1 lit f GDPR):

 

Name of the Cookies

Purpose of the Cookies

Duration of Storage

Location of the recipient

_shopify_d

This cookie is required for the login functionalities in the area of payment processing

Session

GBR

_shopify_m
_shopify_tm

Save the Cookie-Consent with the current ID

1 day

Canada

_shopify_tw

Save the Cookie-Consent with the current ID

13 days

Canada

_tracking_consent

Save the Cookie-Consent with the current ID

1 year

Canada

Cookietest

This cookie is used to evaluate, if the Cookie-Box has been accepted

Session

GBR

Cart_currency

This cookie is used for a save payment procedure

13 days

Canada

Secure_customer_sig

This cookies saves the customer-ID when shopping in the webshop

1 Jahr

Canada

 

II.2.     Currently used „advertising-Cookies“

In addition to the "technical cookies" described above, we also use so-called advertising cookies (including "statistical cookies"). These advertising cookies enable us to better understand and evaluate your interests. With the help of the advertising cookies, we can combine your "surfing behavior" across the boundaries of our website with data from other websites. This enables us to better understand the interests of our homepage visitors and to address them more specifically.

We respect that not every visitor to the website wants this. For this reason, we only process your data in the course of advertising cookies if you agree to this (Art 6 para 1 lit a GDPR). You can revoke this consent at any time, whereby the data processing carried out up to the time of revocation remains justified.

Currently the following advertising cookies are used:

 

Name of the cookie

Purpose

Storage periode

Country of the recipient

Purpose for the data transfer

 

_landing_page

Marketing purposes

Session

Canada

Stores visitor navigation by registering landing pages - This allows the

website to present relevant products and/or measure its advertising effectiveness on other websites.

_orig_referrer

Marketing purposes

13 days

Canada

This cookie is used to collect information about a visitor. This information becomes an ID string with information about a specific visitor - ID information strings can be used to target groups with similar preferences or can be used by third-party domains or ad exchange services.

_s

Marketing purposes

1 day

Canada

Collects data about visitor behavior and interaction - this is used to optimize the

website and to make advertising on the website more relevant.

_shg_session_id

Marketing purposes

1 day

Canada

Collects data about visitor behavior and interaction - this is used to optimize the

website and to make advertising on the website more relevant.

_shopify_user_id

Marketing purposes

5 years

Canada

Collects data on visitor behavior and interaction - This is used to optimize the website and

website and to make advertising on the website more relevant.

_shopify_s
_shopify_y

_shopify_sa_p
_shopify_sa_t
_shopify_fs

 

Marketing purposes

Session

Canada/GBR

Collects data on visitor behavior and interaction - This is used to optimize the website and

website and to make advertising on the website more relevant.

_y

Marketing purposes

Session

Canada

Collects data on visitor behavior and interaction - This is used to optimize the website and

website and to make advertising on the website more relevant.

_fbp

fr

Marketing purposes

3 months

USA/GBR

Used by Facebook to offer targeted third-party advertising.


 
  1. Why do we process your data if we are in a business relationship?

 

In the course of our business relationship with customers or suppliers, we process data on the basis of contractual (handling of the contractual relationship with you, pre-contractual obligations, invoicing of services, dispatch of documents, communication for handling the contract) and legal obligations (legally required storage within the meaning of § 132 BAO) (Art 6 para. 1 lit b and c GDPR) as well as on the basis of our legitimate interests or on the basis of legitimate interests of third parties (Art 6 para. 1 lit f GDPR), namely

- for the purpose of internal administration and management of your business case to the extent necessary (e.g: processing of your business case, transfer of your business case to different departments, filing, archiving purposes, correspondence with you);

- the processing of data in case of an merger and acquisition (e.g: Due-Diligence);

- for the purpose of direct advertising (e.g: mailing, e-mailing, satisfaction surveys, letters of congratulations, statistical evaluations);

 

We would like to expressly inform you that you can object to the processing of your data for the purpose of direct advertising.

 

- Assertion and defence of legal claims

in each case to the required extent. The processing of your data serves the initiation, maintenance and handling of our business relations. If you do not provide us with this data, we will unfortunately not be able to process your business case.

Furthermore it is possible that data is transferred to our data processors (pursuant to Art 4 number 8 GDPR). These processors are listed in point V.

The processing of your data for the purpose of Newsletters may be processed on the basis of your consent (Art 6 para 1 lit a GDPR).

 

  1. How long do we store your data?

 

We will only store your data for as long as it is necessary for the purposes for which we have collected your data. In this context, legal storage obligations must be taken into account (e.g. for tax reasons, contracts and other documents from our contractual relationship must always be stored for a period of seven years (§ 132 BAO)). In justified individual cases, such as for the assertion and defense of legal claims, we can also store your data for up to 30 years after the end of the business relationship.

We store data of interested parties for up to three years from the time of the last contact by the interested party.

 

  1. Who might receives your data?

 

In the course of our business relationship, it may be necessary for us to transfer your data to the following recipients:

Recipient

Prupose

 

Legal reasoning

Location

Transfer in third-party country[4]

Delivery services

Processing of orders

Contractual obligations (Art 6 para 1 lit b
GDPR)

Austria

Within the EAA

Attorney at law

Operation of claims

Contractual obligations (Art 6 para 1 lit b
GDPR)

In most cases Austria – sometimes also third countries

If outside the EAA – Art 49 Abs 1 b and e GDPR

 

Tax advisors

Tax advisoring

Contractual obligations (Art 6 para 1 lit b
GDPR)

Austria

Within the EAA

Banks

Payment obligations

Contractual obligations (Art 6 para 1 lit b
GDPR)

Within the EAA

Within the EAA

 

  1. Gathering of data from external sources (Art 14 GDPR)

 

In the course of a business relationship, or an initiation thereof, it is naturally necessary to conduct research about the business partner. This is done exclusively to the extent necessary for this purpose. In this context data can be retrieved and processed from the following sources:

Facebook Inc

Please see the data policy of faceebook:

https://www.facebook.com/policy.php

We would like to inform you that the ECJ has ruled (ECJ C-210/16 of 5.6.2018) that the operator of a Facebook fan page and Facebook have a joint responsibility with regard to data processing.

Sales of products and processing of business cases

Contractual obligations (Art 6 Abs 1 lit b GDPR)

Legitimate Interest
(Art 6 Abs 1 lit f GDPR)


 
  1. Do we process data via Profiling (in terms of Art 13 para 2 lit f GDPR)?

 

No automated decision making or profiling takes place in our company.

 

  1. Information about your data subject rights

 

We would like to inform you that, provided the legal requirements are met:

 

  • You have the right to request information about which data are processed by us (see in detail Art 15 of the GDPR).

  • You have the right to ask for the correction or completion of incorrect or incomplete data concerning you (see in detail Art 16 of the GDPR).

  • The right to have your data deleted (see in detail Art 17 of the GDPR).

  • You have the right to object to the processing of your data that is necessary to meet our legitimate interests or those of a third party. This applies in particular to the processing of your data for advertising purposes.

  • You have the right to obtain the transmission of the data you have provided in a structured, common and machine-readable format.

 

If we process your data based on your consent, you have the right to revoke this consent at any time by post or e-mail. This does not affect the lawfulness of the data processing carried out up to this point in time (Art 7 para 3 of the GDPR).

 

  1. Do you have a right to appeal?

 

If, contrary to expectations, your right to lawful processing of your data is violated, please contact us by post or e-mail. We will make every effort to process your request immediately. You also have the right to lodge a complaint with the supervisory authority for data protection matters responsible for you.

The current adress of the Austrian Data protection Authority is:

Österreichische Datenschutzbehörde

Barichgasse 40-42,

1030 Wien

 

  1. How can you get in contact with us?

 

If you have any further questions about the processing of your data, you are welcome to contact our data protection coordinator by e-mail or by post (see address below).

 

  1. Controller

 

Controller in terms of Art 4 number 7 GDPR

E. V. E. Textiles GmbH,

Koppstraße 15/18, 1160 Wien, Österreich

studio@edenscollective.com

___________

Author: Attorney at law Dr. Tobias Tretzmüller, LL.M (IT-LAW);

https://www.digital-recht.at/

Any use of this privacy policy, or parts thereof, without the consent of the author constitutes an infringement of copyright.

 


[1] An IP address is a number that is assigned to a device. Devices can communicate over the Internet using this IP address. Each IP address contains information about the Internet service provider used and the physical location of the device used. In this way, information about the user of the device can be obtained.

[2] "Third Country" includes all countries other than (1) the Member States of the European Union and (2) the Member States of the European Economic Area, which means, in addition to the EU Member States, Iceland, Liechtenstein and Norway.

[3] You may refuse the use of cookies by selecting the appropriate settings on your browser. However, we would like to point out that in this case you may not be able to use all functions of this homepage to their full extent.

[4]   "Third Country" includes all countries other than (1) the Member States of the European Union and (2) the Member States of the European Economic Area, which means, in addition to the EU Member States, Iceland, Liechtenstein and Norway.