PRIVACY POLICY
1) INFORMATION ON THE COLLECTION OF PERSONAL DATA AND CONTACT DETAILS OF THE CONTROLLER
1.1 We are pleased that you are visiting our website and thank you for your interest. In the following, we inform you about how we handle your personal data when using our website. Personal data is any data with which you can be personally identified.
1.2 The person responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Karin Reisecker, Ba.binaa Patterns, Andrichsfurt 16, 4754 Andrichsfurt, Austria, Tel.: +43 68184171684, E-Mail: ba.binaa.patterns@gmail.com. The controller for processing personal data is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data.
1.3 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the controller). You can recognize an encrypted connection by the string “https://” and the lock symbol in your browser’s address bar.
2) DATA COLLECTION WHEN VISITING OUR WEBSITE
When you use our website for informational purposes only, i.e., if you do not register or otherwise transmit information to us, we only collect data that your browser transmits to our server (so-called "server log files"). When you access our website, we collect the following data, which is technically necessary for us to display the website:
Our visited website
Date and time of access
Amount of data sent in bytes
Source/referral from which you came to the page
Browser used
Operating system used
IP address used (if applicable: anonymized)
Processing is carried out according to Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to check the server log files retrospectively if there are concrete indications of illegal use.
3) HOSTING & CONTENT DELIVERY NETWORK
Hosting by Shopify
We use the shop system of the service provider Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify"), for hosting and displaying the online shop based on processing on our behalf. All data collected on our website is processed on Shopify's servers. In the context of Shopify's aforementioned services, data may also be transferred to Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada, Shopify Data Processing (USA) Inc., Shopify Payments (USA) Inc., or Shopify (USA) Inc. In the event of data being transferred to Shopify Inc. in Canada, an adequate level of data protection is guaranteed by a decision of the European Commission. Further information on Shopify's data protection can be found at the following website: https://www.shopify.com/legal/privacy.
Any further processing on servers other than those mentioned above by Shopify will only take place within the framework specified below.
4) COOKIES
To make your visit to our website attractive and to enable the use of certain functions, we use cookies, i.e., small text files that are stored on your device. Some of these cookies are automatically deleted after you close your browser (so-called "session cookies"), while others remain on your device for a longer period and allow you to save page settings (so-called "persistent cookies"). You can find out the exact storage duration from the overview in your web browser's cookie settings.
If personal data is processed by individual cookies used by us, the processing is carried out in accordance with Art. 6 para. 1 lit. b GDPR for the performance of the contract, in accordance with Art. 6 para. 1 lit. a GDPR in the case of consent granted, or in accordance with Art. 6 para. 1 lit. f GDPR to safeguard our legitimate interests in ensuring the best possible functionality of the website and a customer-friendly and effective design of the site visit.
You can configure your browser to inform you about the setting of cookies and decide individually whether to accept them or to exclude the acceptance of cookies for certain cases or in general. Please note that if you do not accept cookies, the functionality of our website may be limited.
5) CONTACTING US
When you contact us (e.g., via contact form or e-mail), personal data is processed – solely for the purpose of handling and responding to your inquiry – only to the extent necessary. The legal basis for processing this data is our legitimate interest in responding to your inquiry in accordance with Art. 6 para. 1 lit. f GDPR. If your inquiry is aimed at concluding a contract, the additional legal basis for processing is Art. 6 para. 1 lit. b GDPR. Your data will be deleted when the relevant matter has been fully clarified, and there are no statutory retention obligations.
6) DATA PROCESSING WHEN OPENING A CUSTOMER ACCOUNT
Personal data will continue to be collected and processed as required when you provide it to us when opening a customer account in accordance with Art. 6 para. 1 lit. b GDPR. The data required for the account opening can be found in the input form on our website. You can delete your customer account at any time by sending a message to the above-mentioned responsible party. After deletion of your customer account, your data will be deleted unless all contracts concluded via it have been fully settled, no statutory retention periods stand in the way, and we have no legitimate interest in further storage.
7) USE OF CUSTOMER DATA FOR DIRECT ADVERTISING
7.1 Subscription to our e-mail newsletter
If you subscribe to our e-mail newsletter, we will send you regular information about our offers. The only required information for sending the newsletter is your e-mail address. Additional data may be provided voluntarily and is used to address you personally. We use the double opt-in procedure to ensure that you only receive newsletters if you have expressly confirmed your consent by clicking on a verification link sent to the provided e-mail address.
By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6 para. 1 lit. a GDPR. When you subscribe to the newsletter, we store the IP address entered by your Internet service provider (ISP), as well as the date and time of the subscription, to trace any possible misuse of your e-mail address at a later time. The data collected when subscribing to the newsletter will be used solely for the intended purpose. You can unsubscribe from the newsletter at any time via the link provided in the newsletter or by sending a corresponding message to the controller. After unsubscribing, your e-mail address will be deleted unless you have expressly consented to the further use of your data or we reserve the right to use the data for other purposes as permitted by law and about which we inform you in this policy.
7.2 - Newsletter delivery via Omnisend
The delivery of our e-mail newsletter is carried out by the technical service provider Omnisend (Soundest Ltd., Unit A3, Gateway Tower, 32 Western Gateway, London E16 1YL, United Kingdom), to whom we pass on the data provided by you when subscribing to the newsletter. This transfer is carried out in accordance with Art. 6 para. 1 lit. f GDPR and serves our legitimate interest in using a secure, user-friendly newsletter system. The data provided for the newsletter subscription (e.g., e-mail address) will be stored on Omnisend’s servers in the EU.
Omnisend uses this information to send and statistically evaluate the newsletters on our behalf. For evaluation purposes, the newsletters contain so-called web beacons or tracking pixels, which are one-pixel image files stored on our website. This allows us to determine whether a newsletter has been opened and which links have been clicked. Technical information (e.g., time of access, IP address, browser type, and operating system) is also recorded. The data is collected anonymously and is not linked to your other personal data, so it cannot be traced back to a specific individual. This data is used solely for statistical analysis of newsletter campaigns. The results of these analyses can be used to tailor future newsletters to the interests of recipients better.
Omnisend may use this data based on its legitimate interest in improving the service but will not contact newsletter recipients directly or pass on their data to third parties.
We have entered into a data processing agreement with Omnisend to protect our customers' data and not pass it on to third parties. Omnisend's privacy policy can be found here: https://www.omnisend.com/privacy.
7.3 Product Availability Notification via Email
For items that are temporarily unavailable, you can sign up to receive email notifications when the product becomes available. We will send you a one-time email notification about the availability of the item you selected. The only mandatory information required for sending this notification is your email address. Providing additional information is optional and may be used to address you personally. We use the double opt-in process to ensure that you only receive notifications after explicitly confirming your consent by clicking on a verification link sent to your provided email address.
By activating the confirmation link, you consent to the use of your personal data in accordance with Art. 6 para. 1 lit. a GDPR. In this process, we store your IP address provided by your Internet Service Provider (ISP), as well as the date and time of registration, to be able to track any possible misuse of your email address. The data collected during the sign-up process for product availability notifications will be used strictly for the intended purpose. You can unsubscribe from the availability notifications at any time by sending a message to the responsible party mentioned above. Upon unsubscribing, your email address will be promptly removed from our notification list unless you have expressly consented to further use of your data, or we are legally allowed to use it for other purposes, about which we inform you in this policy.
8) DATA PROCESSING FOR ORDER PROCESSING
8.1 Insofar as necessary for the performance of the contract for delivery and payment purposes, we pass on the personal data collected by us to the commissioned transport company and the commissioned credit institution in accordance with Art. 6 para. 1 lit. b GDPR.
If we are obliged to provide updates for goods with digital elements or for digital products based on a contract, we process the contact details you provided during the order (name, address, email address) to personally inform you about upcoming updates within the legally mandated time period via the appropriate communication channel (e.g., mail or email). Your contact details will be strictly used for notifications about updates owed by us and will only be processed to the extent necessary for such information.
To process your order, we work with the service provider(s) listed below who assist us, wholly or partially, in the execution of concluded contracts. Certain personal data will be transferred to these service providers as required.
Thank you for your patience! Here is the continuation of the translation, completing the remaining sections:
8.2 Use of Payment Service Providers (Payment Services)
Apple Pay
If you choose the "Apple Pay" payment method offered by Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland, the payment processing will be carried out via the "Apple Pay" feature of your device running iOS, watchOS, or macOS, by charging a payment card stored in "Apple Pay." Apple Pay uses security features that are integrated into your device’s hardware and software to protect your transactions. To authorize a payment, the input of a code you previously defined, as well as verification using the "Face ID" or "Touch ID" feature of your device, is required.
For the purpose of payment processing, the information you provide during the order process, along with the information about your order, is encrypted and transmitted to Apple. Apple then re-encrypts this data with a developer-specific key before transmitting the data to the payment service provider of the payment card stored in Apple Pay for completing the transaction. The encryption ensures that only the website from which the purchase was made can access the payment data. After the payment is completed, Apple sends your device account number and a transaction-specific, dynamic security code to the originating website as a confirmation of the payment’s success.
If personal data is processed during these transmissions, it is done solely for the purpose of payment processing in accordance with Art. 6 para. 1 lit. b GDPR.
Apple stores anonymized transaction data, including the approximate purchase amount, the approximate date and time, and whether the transaction was completed successfully. This anonymization ensures that a personal reference is entirely excluded. Apple uses this anonymized data to improve "Apple Pay" and other Apple products and services.
If you use Apple Pay on your iPhone or Apple Watch to complete a purchase made via Safari on your Mac, the Mac and the authorization device communicate over an encrypted channel on Apple servers. Apple neither processes nor stores any of this information in a form that can identify you personally. You can disable the ability to use Apple Pay on your Mac by going to "Wallet & Apple Pay" in your iPhone settings and turning off "Allow Payments on Mac." For more information about Apple Pay’s privacy policy, visit: https://support.apple.com/en-us/HT203027
