I. Data protection: general information and rights
Controller pursuant to Art 4 (7) GDPR is the operator of this website, Theresienoil GmbH (FN 328527d), Niederfeldweg 9c, 6230 Brixlegg, Austria (hereinafter also „We“, „Us“), please see also further details provided in the imprint of the website, which you can also use to exercising your rights (see clause 6.).
2. Personal Data
We only process personal data that you provide Us with (through visiting Our website or the details you make available in a contact form or E-Mail or during the completion of a contract respectively). Depending on the services you are using, the following personal data will be processed:
Not in every case all of the aforementioned data categories might be affected or have to be provided. Special categories of personal data (sensitive data) within the meaning of Art 9 GDPR will not processed by Us in the context of this website.
3. Processing of Personal Data
Your personal data is processed predominantly for the purposes of performing a contract or for pre-contractual purposes respectively (Art 6 (1) (b) GDPR) – without such data, it would be impossible for Us to prepare, conclude or perform a contract with you (eg a purchase contract concluded in the online-shop). The processing is also carried out for the purposes of legitimate interests of Us or third parties respectively (Art 6 (1) (f) GDPR), including in particular for the purposes of maintaining the operational safety of this website, claims management, direct marketing by analogue and digital means, providing advertisements to existing customers, statistical evaluation and the enhancement of Our services and their quality (please see clause 6. for the right to object in this particular respect).
We will process your personal data only pursuant to the permissible scope of the GDPR. Under normal circumstances, We will not transfer your personal data to third parties. Where this is necessary - e.g. for the performance of a contract (eg to handle payment or shipping) - such transfer will be conducted in accordance with the provisions of the GDPR. In this case, We ask you to also consult the privacy policies of these third parties as they might become applicable
An exception to this general rule is the use for statistical and similar purposes. However, this will not involve any personal data but in such cases exclusively anonymized data will be transferred, which do not allow the identification of a natural person and which cannot be attributed to a specific natural person (see also clause 8.).
4. Data Security
The protection of your personal data is ensured through organizational and technical measures, including protection against unauthorized access and technical data protection precautions.
Please be aware, however, that notwithstanding these efforts, it cannot be completely excluded that data, which you make available through the internet can be perceived and potentially be used by others. We therefore assume no responsibility or liability for errors in the communication of data or unauthorized access by third parties (e.g. through hacker-attacks, spyware, malware etc).
5. Storage of Personal Data
Your personal data will be stored by Us only for the period necessary to fulfill contractual and/or legal obligations (respective obligations may arise, e.g. from fiscal or from product liability provisions). Where the storing is not necessary any longer, such data will be deleted. Notwithstanding the above, a deletion will also take place due to a deletion request made by you (clause 6.).
6. Right of Access, Right to Erasure, Right to Lodge a Complaint
Subject to the existence of statutory confidentiality obligations, you have the right to access your personal data and demand disclosure regarding the source of your personal data, the purpose for which it is being processed and - as the case may be - potential recipients. Furthermore, you have the right to have your personal data rectified, transmitted, their processing restricted or deleted, should the data be incorrect or should the basis for processing personal data cease to apply (Art 15, 16, 17, 18, 20 GDPR).
You also have the right to object to the processing of your personal data based on Art 6 (1) (f) GDPR („legitimate interests“).
We ask you to forward any such claim to firstname.lastname@example.org or any contact specified in the imprint of this website.
Please note that a possible objection does not affect the lawfulness of the processing of personal data on the basis of other legitimate grounds listed in Art 6 (1) GDPR.
Should you be of the opinion that the processing of your personal data infringes applicable data protection laws or your claims pursuant to data protection laws or otherwise violated, you have the right to lodge a complaint with the competent supervisory authority (Art 77 GDPR).
II. Data collection, Cookies, Analysis tools and third-party tools
When visiting our website, your surfing behavior can be evaluated statistically. This is mainly done with cookies and with so-called analytical programs. The analysis of your surfing behavior is anonymous, and the surfing behavior cannot be traced back. You can object to this analysis or prevent it by not using certain tools. You will find detailed information about these tools and about your options for objection hereinafter.
In order to design this website according to your needs and to collect certain information, We use different technologies, including so called cookies. Cookies help to simplify internet-usage and communication.
Cookies are small text files that are sent to your browser by Our website and which will be saved on your Computer, where they are stored as anonymous identifier. The purpose of such cookies is to provide for a better control of the connection during your visit on Our website and a more effective support when you return to Our website. Without this temporary „caching“, entries already made would have to be repeated. A cookie only contains data which is released by the server and/or a user provides upon request (e.g. details about the domain, path, expiration date, cookie name and cookie value). Cookies therefore only contain technical information and no personal data. Furthermore, cookies are unable to spy out the hard disk drive of a user, cause damage or similar.
The following types of cookies may be used:
- Session Cookies: these will be deleted automatically once the internet-browser is closed;
- Persistent Cookies: these will be stored for a particular time on your computer. The duration is dependent on the expiration date assigned to the individual cookie;
- Third Party Cookies: these can in particular include cookies from social-media-platforms (like Facebook, Twitter, You Tube, Instagram, Pinterest, Flickr etc) or other internet-service-providers (like Google). Such cookies collect information like dwell time, page impressions, movement over links etc. The cookies are used for e.g. displaying certain advertising content which is generated out of search results, websites visited and similar information. Such cookies cannot be read by Us.
You have the possibility to generally decline the storing of cookies (or particular types of cookies) through your internet browser or to decide whether you want to allow the storing of cookies through separate indication. The non-acceptance of cookies may, however, result in websites not being displayed properly or their usability being constrained.
Cookies which are required to carry out the electronic communication process or to provide certain functions you have requested, are stored on the basis of Art 6 (1) (f) GDPR. We have a legitimate interest in the storage of cookies for a flawless performance and optimized provision of our services.
8. Analytics Tools
In case you merely visit Our website and do not use the other services specified in clause 2., no personal data will be processed by Us.
Google also allows you to decline the compilation of data through Google Analytics. Please refer to the respective internet-presence of Google.
13. Further Web-Tools
This website may also use other Google web tools (e.g. “Google AdWords”, “Google AdSense”, “Google AdExchange” or “Google Double Klick for Publishers”) – We will be happy to provide information on whether and to that extend these tools are actually used and would like to request you to contact Us if you have any questions using one of the contact options provided in the imprint of the website. We do not process any personal data when using these tools, however, data processing may be carried out by Google itself – please refer to the corresponding data protection information of Google to obtain further details on the use of your personal data.