Privacy Policy
The protection of your personal data is very important to us. We therefore process your data exclusively on the basis of the statutory provisions (GDPR). In this privacy policy, we inform you about the most important aspects of data processing within our online shop.
Data Protection Officer
For data protection on the website www.tremos.at, in the sense of the General Data Protection Regulation, the responsible party is:
Mister
Konrad Adamsmair, BSc
Sportallee 36/4
4501 Neuhofen an der Krems
office@tremos.at
+43 650 33 51 884
If you contact us via email or through our contact form, the data you provide will be stored by us to process your request.
Update Cookie Settings
Would you like to change or edit your selection of allowed cookies? You can do so via the button below.
[borlabs-cookie type=“btn-cookie-preference“ title=“Customize cookies“ /]
Data storage
We would like to point out that for the purpose of the purchasing process and subsequent contract processing, the IP data of the owner of the internet connection, as well as the buyer's name, address, and credit card number, will be stored by the webshop operator within the scope of cookies.
The data you provide is necessary for the performance of the contract or for carrying out pre-contractual measures. Without this data, we cannot conclude the contract with you. This data will not be passed on to third parties, with the exception of passing on to our contractual partners for the production and delivery of the order, payment data (credit card number, etc.) to the processing banking institutions / payment service providers for the purpose of payment, and to our tax advisor for the fulfillment of our tax obligations.
After the purchase process is canceled, the data stored by us will be deleted unless you have created a user account. In the event of a contract, all data from the contractual relationship will be stored until the expiry of the statutory retention period (7 years).
The data names, addresses, purchased goods, and purchase dates will be stored for the duration of the product liability period (10 years). Data processing is carried out on the basis of the legal provisions of § 96 para. 3 TKG and Art. 6 para. 1 lit. a (consent) and/or lit. b (necessary for contract fulfillment) of the GDPR.
Cookies
Our website uses cookies. These are small text files that are stored on your end device with the help of your browser. They do not cause any harm.
We use cookies to make our website user-friendly. Some cookies remain stored on your device until you delete them. They allow us to recognize your browser on your next visit.
If you do not wish this to happen, you can configure your browser to inform you about the setting of cookies and allow this on a case-by-case basis.
Disabling cookies may limit the functionality of our website.
The following cookies are used:
- _ga
Google Analytics.
Used to distinguish the user. - _gid
Google Analytics.
Used to distinguish the user. - _gat
Google Analytics.
To throttle the access rate. - woocommerce_cart_hash, woocommerce_items_in_cart
WooCommerce Shop System.
Includes information about the shopping cart and helps the shop track changes. - wp_woocommerce_session_
Includes an identifiable unique code so that your shopping cart can be recognized on your next visit and loaded from the database. No personal information is stored beyond that. - __stripe_mid, __stripe_sid
This cookie is necessary to process credit card transactions on the website. The service is provided by Stripe.com, which enables online transactions without storing credit card information.
Payment processing
Stripe
We offer the option to process payments through the payment service provider Stripe, c/o Legal Process, 510 Townsend St., San Francisco, CA 94103 (Stripe). This corresponds to our legitimate interest in offering an efficient and secure payment method (Art. 6(1)(f) GDPR). In this context, we will share the following data with Stripe, as far as it is necessary for the fulfillment of the contract (Art. 6(1)(b) GDPR).
Cardholder Name
Email address
Customer number
Order number
Bank details
Credit card information
Credit card expiration date
Credit Card Verification Code (CVC)
Date and time of transaction
Transaction amount
Provider name
Ort
Processing the data provided under this section is neither legally nor contractually required. Without the transmission of your personal data, we cannot process a payment via Stripe. [You have the option to choose an alternative payment method.]
Stripe assumes a dual role as controller and processor in data processing activities. As the controller, Stripe uses your submitted data to fulfill regulatory obligations. This aligns with Stripe's legitimate interest (under Article 6(1)(f) GDPR) and serves the performance of a contract (under Article 6(1)(b) GDPR). We have no influence over this process.
As a processor, Stripe acts to complete transactions within payment networks. Within the scope of the processor relationship, Stripe acts exclusively on our instructions and has been contractually obligated to comply with data protection regulations in accordance with Art. 28 GDPR.
Stripe has implemented compliance measures for international data transfers. These apply to all worldwide activities where Stripe processes personal data of individuals in the EU. These measures are based on the EU Standard Contractual Clauses (SCCs).
For more information on how to object to and remove data from Stripe, see: https://stripe.com/privacy-center/legal
Your data will be stored by us until the payment processing is complete. This includes the period required for processing refunds, debt collection, and fraud prevention. [We are subject to a statutory retention period of [X] years for the following documents according to [§ 147 AO / § 257 HGB]: [ ]]
Legal Notice
Address
Stripe Payments Europe Limited 1 Grand Canal Street Lower Grand Canal Dock Dublin, D02 H210 Ireland Attn: Stripe Legal
Hosting
Unless you register or log in as a visitor, we collect the following data in so-called log files, which your browser transmits:
IP address, date and time of request, time zone difference to Greenwich Mean Time, content of the request, HTTP status code, amount of data transferred, website from which the request originates, and information about the browser and operating system.
This is required to display our website and ensure its stability and security. This is in accordance with our legitimate interest within the meaning of Art. 6(1)(f) GDPR.
We use the following host for the provision of our website.
domainfactory GmbH, Oskar-Messter-Str. 33, 85737 Ismaning
This party is the recipient of your personal data and acts as a processor for us. This corresponds to our legitimate interest within the meaning of Art. 6 (1) sentence 1 lit. f GDPR, not to have to maintain a server on our premises ourselves.
Further information on objection and remedial options against domainfactory GmbH can be found at: https://www.df.eu/de/datenschutz/
You have the right to object to processing. Whether the objection is successful will be determined within the framework of a balancing of interests.
The data will be deleted after 14 days.
Processing of the data provided in this section is neither legally nor contractually required. The website's functionality is not guaranteed without processing.
Google Analytics
We use Google Analytics, a web analytics service provided by Google Inc. („Google“). Google uses cookies. The information generated by the cookie about users' use of the online offering is usually transferred to a Google server in the USA and stored there.
Google will use this information on our behalf to evaluate users' use of our online services, to compile reports on activities within these online services, and to provide us with further services related to the use of these online services and internet usage. Pseudonymous user profiles can be created from the processed data.
We use Google Analytics with IP anonymization enabled. This means that Google will truncate users' IP addresses within member states of the European Union or other parties to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there.
The IP address transmitted by the user's browser will not be merged with other Google data. Users can prevent the storage of cookies by adjusting their browser software settings; furthermore, users can prevent the collection of data generated by the cookie and related to their use of the online service, as well as the processing of this data by Google, by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.
For more information about Google's use of data for advertising purposes, as well as your settings and opt-out options, please visit Google's websites: https://www.google.com/intl/de/policies/privacy/partners („Google’s Use of Data When You Use Our Partners“ Websites or Apps“), http://www.google.com/policies/technologies/ads („Data usage for advertising purposes“), http://www.google.de/settings/ads (Manage information Google uses to show you ads) and http://www.google.com/ads/preferences Determine which ads Google shows you.
Contact Form
We are providing you with a contact form that allows us to collect the following personal data:
Name
Email address
possibly phone number
Required fields are marked with an *.
In addition, we are charging:
Timestamp
IP Address
The data will be stored exclusively for the purpose of submitting inquiries and responding to them. The mandatory fields are used for assignment and to address your request. This aligns with our legitimate interest (Art. 6(1)(f) GDPR). [If you are inquiring about an offered product or service, the processing is carried out for the performance of pre-contractual measures (Art. 6(1)(b) GDPR).]
We use the following third party for the provision of the form.
Contact Form 7
You have the right to object to processing. Whether the objection is successful will be determined as part of a balancing of interests. You can find more information under the section „Data Subject Rights.“.
Your data will be deleted upon completion of the collaboration or at your request.
Newsletter
The following information will clarify the content of our newsletter, as well as the registration, dispatch, and statistical analysis procedures, and your rights of objection. By subscribing to our newsletter, you agree to receive it and the described procedures.
Newsletter content: We send newsletters, emails, and other electronic notifications with advertising information (hereinafter „Newsletters“) only with the consent of the recipients or a legal permission. If the content of the newsletter is specifically described in the scope of a subscription, it is decisive for the users„ consent. Otherwise, our newsletters contain the following information: “our products, offers, promotions and recipes, motivational emails, current dates.".
Double Opt-in and Logging: Subscribing to our newsletter uses a double opt-in procedure. This means that after you register, you’ll receive an email asking you to confirm your subscription. This confirmation is necessary so that no one can register with someone else's email address. Newsletter subscriptions are logged to document the subscription process in accordance with legal requirements. This includes storing the registration and confirmation timestamps, as well as the IP address. Changes to your data stored with the shipping service provider are also logged.
Shipping service provider: Newsletters are sent using „Mailchimp“ (hereinafter referred to as „shipping service provider“). You can view the shipping service provider's privacy policy here: https://mailchimp.com/legal/privacy/.
The email addresses of our newsletter recipients, as well as their further data described in these notices, are stored on the servers of the shipping service provider. The shipping service provider uses this information to send and evaluate the newsletters on our behalf. Furthermore, according to its own information, the shipping service provider may use this data to optimize or improve its own services, e.g., for the technical optimization of the dispatch and presentation of the newsletters or for economic purposes, to determine which countries the recipients come from. However, the shipping service provider does not use the data of our newsletter recipients to contact them itself or pass it on to third parties.
Login details: To subscribe to the newsletter, you only need to provide your email address and a name.
Statistical Survey and Analysis – The newsletters contain a so-called „web beacon,“ meaning a pixel-sized file that is retrieved from the shipping service provider's server when the newsletter is opened. As part of this retrieval, technical information such as information about the browser and your system, as well as your IP address and the time of retrieval, are collected. This information is used for the technical improvement of the services based on the technical data or the target groups and their reading behavior based on their retrieval locations (which can be determined using the IP address) or access times. Statistical surveys also include determining whether the newsletters are opened, when they are opened, and which links are clicked. While this information can be associated with individual newsletter recipients for technical reasons, neither our intention nor that of the shipping service provider is to monitor individual users. The evaluations primarily serve to understand our users' reading habits and to adapt our content accordingly or to send different content based on our users' interests.
Cancellation/Revocation – You can cancel the receipt of our newsletter at any time, i.e. revoke your consent. This simultaneously revokes your consent to its dispatch by the shipping service provider and statistical analysis. Unfortunately, separate revocation of dispatch by the shipping service provider or statistical analysis is not possible. You will find a link to cancel the newsletter at the end of each newsletter or as a button on the homepage.
User Rights and Data Deletion
You fundamentally have the rights to access, rectification, erasure, restriction, data portability, revocation, and objection.
If you believe that the processing of your data violates data protection law or that your data protection rights have otherwise been infringed, you can lodge a complaint with the supervisory authority. In Austria, this is the Data Protection Authority.
The data stored with us will be deleted as soon as it is no longer required for its intended purpose and no statutory retention obligations prevent its deletion.
Privacy Policy Changes
We reserve the right to amend the privacy policy to adapt it to changed legal situations, or in the event of changes to the service and data processing. However, this only applies with regard to declarations on data processing. To the extent that user consent is required or components of the privacy policy contain provisions of the contractual relationship with the users, changes will only be made with the consent of the users.
Users are requested to regularly inform themselves about the content of the privacy policy.
Status July 2022