PRIVACY POLICY

We take the protection of your personal data seriously. We will process your personal data in compliance with the applicable laws (General Data Protection Regulation No 2016/679 - hereinafter „GDPR“, as well as national data protection provisions). Amendments: We must reserve the right to amend the present privacy policy from time to time in order to adapt to legal developments in the area of data protection. For the future usage of our website, the amended /changed privacy policy will then apply. We therefore recommend that you consult the same from time to time.

I. Data protection: general information and rights

1. Controller

Controller pursuant to Art 4 (7) GDPR is the operator of this website, Theresienoil GmbH (FN 328527d), Niederfeldweg 9c, 6230 Brixlegg, Austria (hereinafter also „We“, „Us“), please see also further details provided in the imprint of the website, which you can also use to exercising your rights (see clause 6.).

2. Personal Data

We only process personal data that you provide Us with (through visiting Our website or the details you make available in a contact form or E-Mail or during the completion of a contract respectively). Depending on the services you are using, the following personal data will be processed: 

Visiting Our website

(i) log files such as IP-address, date and time of access, information on the operating system and internet browser used, website from which access is made (“referrer URL”) etc., (ii) cookies, (iii) location-related information and information on the terminal device used (depending on the corresponding settings of the terminal device);

 

Contact via E-Mail

forename, surname, address, E-Mail-address;

Contact via contact form

forename, surname, address, E-Mail-address;

making a purchase in the online-shop

forename, surname, company, VAT identification number, address, e-mail address, telephone number, birth date, sex, bank details / credit-card details;


Not in every case all of the aforementioned data categories might be affected or have to be provided. Special categories of personal data (sensitive data) within the meaning of Art 9 GDPR will not processed by Us in the context of this website.


3. Processing of Personal Data

Your personal data is processed predominantly for the purposes of performing a contract or for pre-contractual purposes respectively (Art 6 (1) (b) GDPR) – without such data, it would be impossible for Us to prepare, conclude or perform a contract with you (eg a purchase contract concluded in the online-shop). The processing is also carried out for the purposes of legitimate interests of Us or third parties respectively (Art 6 (1) (f) GDPR), including in particular for the purposes of maintaining the operational safety of this website, claims management, direct marketing by analogue and digital means, providing advertisements to existing customers, statistical evaluation and the enhancement of Our services and their quality (please see clause 6. for the right to object in this particular respect).

We will process your personal data only pursuant to the permissible scope of the GDPR. Under normal circumstances, We will not transfer your personal data to third parties. Where this is necessary - e.g. for the performance of a contract (eg to handle payment or shipping) - such transfer will be conducted in accordance with the provisions of the GDPR. In this case, We ask you to also consult the privacy policies of these third parties as they might become applicable

An exception to this general rule is the use for statistical and similar purposes. However, this will not involve any personal data but in such cases exclusively anonymized data will be transferred, which do not allow the identification of a natural person and which cannot be attributed to a specific natural person (see also clause 8.).

4. Data Security

The protection of your personal data is ensured through organizational and technical measures, including protection against unauthorized access and technical data protection precautions.

Please be aware, however, that notwithstanding these efforts, it cannot be completely excluded that data, which you make available through the internet can be perceived and potentially be used by others. We therefore assume no responsibility or liability for errors in the communication of data or unauthorized access by third parties (e.g. through hacker-attacks, spyware, malware etc).

5. Storage of Personal Data

Your personal data will be stored by Us only for the period necessary to fulfill contractual and/or legal obligations (respective obligations may arise, e.g. from fiscal or from product liability provisions). Where the storing is not necessary any longer, such data will be deleted. Notwithstanding the above, a deletion will also take place due to a deletion request made by you (clause 6.).

6. Right of Access, Right to Erasure, Right to Lodge a Complaint

Subject to the existence of statutory confidentiality obligations, you have the right to access your personal data and demand disclosure regarding the source of your personal data, the purpose for which it is being processed and - as the case may be - potential recipients. Furthermore, you have the right to have your personal data rectified, transmitted, their processing restricted or deleted, should the data be incorrect or should the basis for processing personal data cease to apply (Art 15, 16, 17, 18, 20 GDPR).

You also have the right to object to the processing of your personal data based on Art 6 (1) (f) GDPR („legitimate interests“).

We ask you to forward any such claim to office@theresienoil-tirol.at or any contact specified in the imprint of this website.

Please note that a possible objection does not affect the lawfulness of the processing of personal data on the basis of other legitimate grounds listed in Art 6 (1) GDPR. 


Should you be of the opinion that the processing of your personal data infringes applicable data protection laws or your claims pursuant to data protection laws or otherwise violated, you have the right to lodge a complaint with the competent supervisory authority (Art 77 GDPR).


II. Data collection, Cookies, Analysis tools and third-party tools

When visiting our website, your surfing behavior can be evaluated statistically. This is mainly done with cookies and with so-called analytical programs. The analysis of your surfing behavior is anonymous, and the surfing behavior cannot be traced back. You can object to this analysis or prevent it by not using certain tools. You will find detailed information about these tools and about your options for objection hereinafter.

7.Use of Cookies

In order to design this website according to your needs and to collect certain information, We use different technologies, including so called cookies. Cookies help to simplify internet-usage and communication.

Cookies are small text files that are sent to your browser by Our website and which will be saved on your Computer, where they are stored as anonymous identifier. The purpose of such cookies is to provide for a better control of the connection during your visit on Our website and a more effective support when you return to Our website. Without this temporary „caching“, entries already made would have to be repeated. A cookie only contains data which is released by the server and/or a user provides upon request (e.g. details about the domain, path, expiration date, cookie name and cookie value). Cookies therefore only contain technical information and no personal data. Furthermore, cookies are unable to spy out the hard disk drive of a user, cause damage or similar.

The following types of cookies may be used:

- Session Cookies: these will be deleted automatically once the internet-browser is closed;

- Persistent Cookies: these will be stored for a particular time on your computer. The duration is dependent on the expiration date assigned to the individual cookie;

- Third Party Cookies: these can in particular include cookies from social-media-platforms (like Facebook, Twitter, You Tube, Instagram, Pinterest, Flickr etc) or other internet-service-providers (like Google). Such cookies collect information like dwell time, page impressions, movement over links etc. The cookies are used for e.g. displaying certain advertising content which is generated out of search results, websites visited and similar information. Such cookies cannot be read by Us.

You have the possibility to generally decline the storing of cookies (or particular types of cookies) through your internet browser or to decide whether you want to allow the storing of cookies through separate indication. The non-acceptance of cookies may, however, result in websites not being displayed properly or their usability being constrained.

Cookies which are required to carry out the electronic communication process or to provide certain functions you have requested, are stored on the basis of Art 6 (1) (f) GDPR. We have a legitimate interest in the storage of cookies for a flawless performance and optimized provision of our services.

8. Analytics Tools

In case you merely visit Our website and do not use the other services specified in clause 2., no personal data will be processed by Us.

This website uses Google Analytics, a web analytics service provided by Google, Inc. (“Google”). Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyse how users use the site. The information generated by the cookie about your use of the website (including your IP address) will be transmitted to and stored by Google on servers in the United States. However, depending on whether the IP-anonymization is set on the website - with the extension “_anonymizeIp() - IP-addresses are shortened within the European Union / European Economic Area and are therefore transferred and processed only in a shortened manner to prevent a direct personal reference. Only in exceptional circumstances will the shortening be carried out by Google itself and processed thereafter. Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators, and providing other services relating to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google’s behalf. Google will not associate your IP address with any other data held by Google. You may refuse the use of cookies by selecting the appropriate settings on your browser; however, please note that if you do this, you may not be able to use the full functionality of this website. By using this website, you consent to Google processing your data in the manner and for the purposes set out above. You can prevent the installation of the Google cookies and thereby the obtaining and processing of the use data by downloading and installing this browser-plugin: https://tools.google.com/dlpage/gaoptout
Google also allows you to decline the compilation of data through Google Analytics. Please refer to the respective internet-presence of Google.

9. Facebook-Plugins

This website uses plugins of the social network Facebook, which are provided by Facebook Inc. (1 Hacker Way, Menlo Park, California 94025, USA; “Facebook”). The Facebook logo indicates the integration of plugins. Plugins are only activated when you click on the corresponding buttons. You can choose between activating the plugins once or permanently. The plugins establish a direct connection between your browser and the Facebook servers. We have no influence whatsoever on the type and scope of the data which is transmitted to the Facebook servers. The plugin informs Facebook that you as a user have visited this website. It is possible that your IP-address will be saved. If you are logged in to your Facebook account while visiting this website, the aforementioned information is linked to your account. If you use the functions of the plugin, e.g. by sharing a post or clicking the “Like” button – the corresponding information will also be transmitted to Facebook and, possibly, linked to your Facebook account. You may prevent this by logging out before using the plugin. You may find more detailed information on the collection and use of data by Facebook, on your rights in that respect, and on ways to protect your privacy in Facebook’s privacy policy.


10. Instagram-Plugins

This website contains plugins of Instagram, operated by Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA. These plugins can be recognized by the Instagram logo. The plugins are only activated when you click on the corresponding button. You can choose between activating the plugins once or permanently. These plugins establish a direct connection between your browser and Instagram and data is transmitted to Instagram. We have no influence whatsoever on the type and scope of the data which is transmitted to the Instagram servers. Instagram is informed that you (as a user) have visited the website. It is possible that your IP-address is saved. If you are logged in to your Instagram account, data will be associated with your personal account and the data stored. You can only prevent this by logging out before using the plugin. For more information about the collection and use of data by Instagram, please refer to Instagram’s Privacy Policy.

11. PayPal

On this website you will find plugins of the online payment service provider PayPal (Europe) S.a.r.l. & Cie. S.C.A., 22-24 Boulevard Royal, 2449 Louxembourg, Louxembourg. Payments can be processed via PayPal, provided an account has been created. When clicking on the button “Pay with PayPal” you will be redirected to the website of the online payment service provider and have the possibility to log in with an existing PayPal account or to create a new PayPal account. PayPal offers payment by credit card or direct withdrawal, purchase on account or deferred payment. Subsequently, the data necessary to process the payment (e.g. price, forename, surname, address, E-Mail-address, IP-address) are transmitted to PayPal. Please find further information about the collection and use of your personal data, in particular about the possibility to obtain a credit rating information through a credit agency, about your rights in this regard and possibilities to protect your privacy in PayPal’s privacy policy (https://www.paypal.com/de/webapps/mpp/ua/privacy-full)

12. Klarna

When placing an order in our web shop it is possible to select immediate bank transfer using the payment service provider Klarna AB, Sveavägen 46, 11134 Stockholm, Sweden. In this case, personal data, such as forename, surname, address, e-mail-address, date of birth, sex, IP-address, as well as data related to your order (e.g. item number, price, shipping method) will be transmitted to Klarna. Your data will only be passed on for the purpose of payment processing and only if necessary. Further information on the collection (e.g. telephone number, credit card information, account number etc.) and use of your personal data by Klarna, especially the possibility of obtaining a credit rating information through a credit agency, on your rights in this regard and possibilities for protecting your data can be found in Klarna’s privacy policy (https://www.klarna.com/pay-now/privacy-policy/).

13. Further Web-Tools

This website may also use other Google web tools (e.g. “Google AdWords”, “Google AdSense”, “Google AdExchange” or “Google Double Klick for Publishers”) – We will be happy to provide information on whether and to that extend these tools are actually used and would like to request you to contact Us if you have any questions using one of the contact options provided in the imprint of the website. We do not process any personal data when using these tools, however, data processing may be carried out by Google itself – please refer to the corresponding data protection information of Google to obtain further details on the use of your personal data.