Data protection

Privacy Policy

What do we do?

Sebastian Bruckner-Hrubesch (Pyrkergasse 2C/13, 1190 Vienna) operates the website www.jugend-stil.at (hereinafter referred to as “we”).

The protection of your personal data is very important to us. In this privacy policy, we provide you with transparent and understandable information about what data we collect through our website and how we handle it.

For this reason, we use the icons of the PRIVACY ICONS association. They are intended to help you quickly gain an overview of how we process your data.

What do we inform about?

• Who is responsible for data processing;
• What data is collected;
• For what purpose this data is collected;
• On what legal basis we collect this data;
• Who we share this information with;
• How you can object to data processing;
• What rights you have and how you can assert them.

Definitions of terms

What are personal data?

Personal data (synonymous with the term "personal data") is all information relating to an identified or identifiable natural person. This includes, for example, name, address, date of birth, email address, telephone number, and IP address. Data about personal preferences such as leisure activities or memberships also counts as personal data.

What are special categories of personal data?

Special categories of personal data (synonymous with the term “sensitive data”) are:

• Data concerning religious, ideological, political or trade union views or activities;
• Data concerning health, privacy, racial or ethnic origin, sex life and sexual orientation;
• Data on administrative or criminal prosecutions and sanctions, as well as data on social assistance measures;
• Genetic data and biometric data that uniquely identify a person.

To the extent necessary and if you provide this information to us yourself, we may process data that belongs to a special category of personal data. In this case, such processing will be subject to stricter confidentiality.

What is the processing of personal data?

Processing (synonymous with the term “processing”) means any handling of personal data, regardless of the means and procedures used, in particular the acquisition, storage, retention, use, modification, disclosure, archiving, deletion or destruction of personal data.

What is the disclosure of personal data?

This is the transmission or making available of personal data, e.g. publication or disclosure to a third party.

contact

If you have any questions or concerns about how we protect your data, please contact our data protection officer:

Sebastian Bruckner-Hrubesch
Sebastian Bruckner-Hrubesch
Pyrkergasse 2C/13
1190 Vienna
sbrucknerh@gmail.com

Data security

We will keep your information secure and take all reasonable steps to protect it from loss, access, misuse, or alteration.

Our contractual partners and employees who have access to your data are obligated to comply with data protection regulations. In some cases, it may be necessary for us to forward your inquiries to affiliated companies as part of our order processing. Even in these cases, your data will be treated confidentially.

On our website we use the SSL (Secure Socket Layer) method in conjunction with the highest level of encryption supported by your browser.

Rights of those affected

Right to information

You can request information about the data we have stored about you at any time. Please send your request for information along with credible proof of identity to sbrucknerh@gmail.com.

The information will be provided in writing or in another form, including electronically if necessary. If you request this, we can also provide you with the information verbally, provided you provide proof of your identity in another form. If you submit the information request electronically, we will provide the information in a common electronic format unless you specify otherwise.

The information is generally provided free of charge. If additional copies are requested, a reasonable fee may be charged.

The right to obtain a copy of the data processed must not adversely affect the rights and freedoms of other persons.

In the case of manifestly unfounded or excessive requests for information, we reserve the right to refuse to provide the information within the limits permitted by law or to demand an appropriate fee for doing so.

Your request is subject to the statutory deadline of one month. Due to the complexity and high volume of requests, we may extend this deadline by a further two months if necessary. You will be notified of the extension within one month of submitting your request for information. At the same time, you will be informed of the reasons for the extension.

Deletion and rectification

You have the right to request the deletion, correction or completion of your data at any time, provided that there are no statutory retention periods or legal grounds for permission to do so.

Please note that the exercise of your rights may conflict with contractual agreements and may have corresponding effects on the implementation of the contract (e.g. early termination of the contract or cost consequences).

Restriction of processing

You also have the right to request restriction of processing if you contest the accuracy of the data, the processing is unlawful, the data is no longer required or you have objected to the processing.

If the processing of data is restricted, it may only be stored for the time being. Further processing may only take place with your consent, for the establishment, exercise, or defense of legal claims, to protect the rights of another person, or for reasons of important public interest. You will be notified if the restriction is lifted.

Right to data portability

You have the right to receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format and to transmit this data to another controller without hindrance from us to whom the personal data was provided, provided that the processing is based on consent pursuant to Article 6 (1) (a) or Article 9 (2) (a) GDPR or on a contract pursuant to Article 6 (1) (b) GDPR and the processing is carried out using automated procedures. You also have the right to request that the personal data be transmitted directly from us to another controller, where technically feasible.

Right of objection

If you have given your consent to the processing of your data, you can revoke it at any time. Such revocation will affect the legality of the processing of your personal data after you have expressed your objection to us.

If we base the processing of your personal data on a balance of interests, you may object to the processing. This is the case, in particular, if the processing is not necessary to fulfill a contract with you, which we will explain in the following description of the functions. If you exercise such an objection, we ask you to explain the reasons why we should not process your personal data as we do. If your objection is justified, we will examine the situation and either stop or adapt the data processing or explain our compelling legitimate reasons for continuing the processing.

You can object to the processing of your personal data for advertising and data analysis purposes at any time. You can contact us about your objection to advertising using the contact details provided in this privacy policy.

Right to complain

You also have the right to complain to a data protection supervisory authority about our processing of your personal data.

General principles

What data do we process from you and from whom do we receive this data?

We primarily process personal data that you provide to us or that we collect when operating our website. We may also receive personal data about you from third parties. This may include the following categories:

• Personal master data (name, address, date of birth, etc.);
• Contact details (mobile phone number, email address, etc.);
• Financial data (e.g. account details);
• Online identifiers (e.g. cookie identifiers, IP addresses);

This data may come from the following sources:

• Information from publicly accessible sources (e.g. media, internet);
• Information from public registers (e.g. commercial register, debt collection register, land register);
• Information in connection with administrative or judicial proceedings;
• Information regarding your professional functions and activities (e.g. professional networks);
• Information about you in correspondence and meetings with third parties;
• Credit information (if we conduct personal business with you);
• Information about you that people in your circle give us so that we can enter into or perform contracts with you;
• Data related to the use of the website.

Under what conditions do we process your data?

We process your data in accordance with applicable data protection laws, in particular the GDPR. Processing is carried out for the purposes set out in this privacy policy. We ensure transparency and proportionality in doing so.

The processing of your data is lawful provided that one of the GDPR's legal grounds is met. The following are examples of legal grounds:

• Your consent (Art. 6 (1) (a) GDPR);
• The fulfillment of a contract or pre-contractual measures (Art. 6 para. 1 lit. b GDPR);
• The fulfillment of legal obligations to which we are subject (Art. 6 (1) (c) GDPR);
• The protection of the vital interests of the data subject or of another natural person (Article 6 (1) (d) GDPR);
• The performance of a task carried out in the public interest or in the exercise of official authority vested in the controller (Article 6 (1) (e) GDPR);
• Our legitimate interests, unless your interests prevail (Art. 6 (1) (f) GDPR).

In certain circumstances, it may be necessary for you to provide us with certain personal data in order to fulfill contractual obligations. Without such data, we are normally unable to process a contract.

The website cannot normally be used if certain information required to secure data traffic, such as your IP address, is not disclosed.

In which cases can we pass on your data to third parties?

a. Principle

We may rely on the services of third parties or affiliated companies and commission them to process your data (so-called processors). The recipient categories include:

• Accounting, trust and auditing companies;
• Consulting firms (legal advice, taxes, etc.);
• IT service providers (web hosting, support, cloud services, website design, etc.);
• Payment service providers;
• Providers of tracking, conversion and advertising services.

We ensure that these third parties and our affiliates comply with data protection requirements and treat your personal data confidentially.

We may also be required to disclose your personal data to authorities.

b. Disclosure to partners and cooperation companies

We sometimes work with various companies and partners who post their offers on our website. You will be able to recognize that these are third-party offers (marked as "advertising").

If you take advantage of such an offer, we will transmit your personal data (e.g., name, function, communication, etc.) to the relevant partner or cooperation company whose offer you wish to use. These partners and cooperation companies are independently responsible for the personal data they receive. After the data has been transmitted, the data protection regulations of the respective partner apply.

c. Transfer abroad

Under certain circumstances, your personal data may be transferred to companies abroad as part of order processing. These companies are subject to the same data protection obligations as we are. The transfer may take place worldwide.

If the data protection level does not correspond to that of the EEA, we will conduct a prior risk assessment and contractually ensure that the same level of protection is guaranteed as in the EEA (e.g., through the EU Commission's standard contractual clauses or other legally prescribed measures). If our risk assessment is negative, we will implement additional technical measures to protect your data. You can access the EU Commission's standard contractual clauses at the following link.

How long do we keep your data?

We only retain personal data for as long as necessary to fulfill the individual purposes for which the data was collected.

We store contract data for longer periods because we are legally obligated to do so. In particular, we must retain business communications, concluded contracts, and accounting documents for up to 10 years. If we no longer need such data from you to provide our services, we restrict further processing and use it only for accounting and tax purposes.

Individual data processing operations

Providing the website and creating log files

By simply visiting www.jugend-stil.at, without registering or otherwise disclosing information, only the data that your browser automatically transmits to our server is collected. This data is technically necessary for the operation of the website.

What data do we process?

To provide the website and to create log files, the following data is processed in particular:

• Name of the Internet service provider
• IP address
• Technical information such as browser, operating system or screen resolution
• the date and time of access
• Referrer URL

This data cannot be assigned to a specific person and is not merged with other data sources.

For what purpose do we process the data?

The log files are processed to guarantee the functionality of the website and to ensure the security of our information technology systems.

On what basis do we process the data?

The legal basis for this data processing is our legitimate interest pursuant to Art. 6 (1) (f) GDPR. Our legitimate interests are determined by the purpose of the data processing.

Who do we share the data with?

The transfer of data by us is governed by our statements on data transfer.

How can you prevent data processing?

The data is stored only for as long as necessary to achieve the purpose for which it was collected. Accordingly, the data is deleted after each session. The storage of log files is absolutely necessary for the operation of the website; therefore, you have no option to object to this unless you visit our website.

contact

You can contact us in several ways. When you contact us and provide personal data, we will process your data. This includes any oral, written, or other form of contact with us.

What data do we process?

When you contact us, we process all data you provide to us. This includes, in particular:

• name
• E-mail address
• Content and time of your contact
• Contact details

It may happen that you are required to provide certain information in order to contact us, for example when contacting us via a contact form or when you request a callback.

For what purpose do we process the data?

The purpose for which we use the data depends on the nature of the contact. However, we never use the data for unforeseeable or unexpected purposes. The most common purposes are communication and feedback, customer service, and processing business inquiries.

On what basis do we process the data?

The legal basis for this data processing is our legitimate interest pursuant to Art. 6 (1) (f) GDPR. Our legitimate interests are determined by the purpose of the data processing.

Who do we share the data with?

The transfer of data by us is governed by our statements on data transfer. If the purpose of your contact requires the transfer of your data to third parties, we will transfer the data to the extent necessary.

How can you prevent data processing?

If you contact us, data processing cannot be prevented. Therefore, you must refrain from contacting us if you do not wish your data to be processed.

Cookies

Our website uses cookies. Cookies are text files that are stored on your device's operating system with the help of your browser when you visit our website. Cookies do not harm your computer and do not contain viruses. Some cookies are technically necessary for the website to function. Most of the cookies we use are so-called "session cookies." They are automatically deleted after your visit. Other cookies remain stored on your device until you delete them or their expiration date.

For what purpose do we process the data?

We use cookies to make our website more user-friendly, effective, and secure based on the data we collect. In particular, we use cookies to save your preferences (such as language and location settings), to quickly deliver and attractively display website content (such as through the use of fonts and content delivery networks), and to analyze website usage for statistical evaluation and continuous improvement (usually using third-party cookies). The specific purposes for which we use the (technically unnecessary) cookies are explained in the following sections of this privacy policy.

On what legal basis do we process the data?

The legal basis for this processing is your consent pursuant to Art. 6 (1) (a) GDPR. For technically necessary cookies, our legitimate interest pursuant to Art. 6 (1) (f) GDPR forms the legal basis.

Who do we share the data with?

The transfer of data by us is governed by our statements on data transfer. In addition, the following statements on the individual data processing in this privacy policy must be observed.

How can you prevent data processing?

When you visit the website, a cookie banner is displayed. Cookies that require your consent in accordance with Art. 6 (1) (a) GDPR will only be activated if you give your consent. If you refuse consent, no data will be collected by the cookies requiring consent.

You cannot prevent the collection of data through cookies, which we use on the basis of our legitimate interest in accordance with Art. 6 (1) (f) GDPR, by using the cookie banner. These cookies, which are technically necessary for the operation of the website, are stored on your computer. You can delete them completely or deactivate or restrict the transmission by changing the settings in your browser. If you deactivate these cookies,

Instructions for the most common browsers can be found here:

• For Chrome by Google
• For Apple Safari
• For Edge from Microsoft
• For Firefox from Mozilla

For cookies used for success and reach measurement or for advertising, a general objection ("opt-out") is possible for numerous services via the Network Advertising Initiative (NAI), YourAdChoices (Digital Advertising Alliance) or Your Online Choices (European Interactive Digital Advertising Alliance, EDAA).

Web analysis

Our website uses functions of the web analysis service Google Analytics. Cookies are used to analyze how users use the website. The information generated is transferred to the provider's server and stored there. You can prevent this by configuring your browser to prevent cookies from being saved.

We have concluded a corresponding contract for order data processing with the provider.

Your IP address is recorded but immediately pseudonymized (e.g., by deleting the last 8 bits). This allows only a rough localization. The relationship with the web analytics provider is based on an adequacy decision of the European Commission, the so-called "Privacy Shield."

Data processing is carried out on the basis of the legal provisions of Section 96 Paragraph 3 of the Telecommunications Act (TKG) and Article 6 Paragraph 1 Letter a (consent) and/or f (legitimate interest) of the GDPR.

Our aim, as defined by the GDPR (legitimate interest), is to improve our offering and our website. Because the privacy of our users is important to us, user data is pseudonymized.

User data will be stored for a period of 14 months.

Newsletter

You have the opportunity to subscribe to our newsletter via our website.