This privacy policy explains how Brandzup Österreich GmbH uses your personal data and the measures that are taken to protect your data and keep it safe.
This Privacy Policy applies to you when you purchase goods from us, use services from us, participate in our events or otherwise interact with us, such as by using one of our websites or contacting us via social media.
Please see these terms in detail. If you are already a customer of ours, the contract with us may contain further details about how we use your personal data. There may also be further information about how we intend to use your personal data, with the option for you to give your consent when we collect it for the selected uses, or to withhold consent when we collect personal data from you.
This Privacy Policy explains our privacy practices and covers the following areas:
We collect and process some or all of the following personal data from you:
We obtain personal data either directly from you, your interactions with us, our websites or social media pages. We may also receive personal data from sources such as business partners, suppliers of technology, payment and delivery services, advertising networks, analytics providers, search information providers, credit rating agencies, criminal records or third party databases, including sanctions lists and business information and search tools.
Under data protection laws, certain categories of personal data are considered particularly sensitive and therefore require additional protection. This includes, for example, information on health, racial or ethnic origin, political opinions, religious beliefs, trade union membership or sexual orientation, as well as genetic and biometric data. Information on convictions for criminal offences and offences is also considered sensitive under European data protection law.
In limited circumstances, we may collect and process such sensitive personal data when, for example, we process requests for certain medical assistance or barrier-free access or specific food requirements in connection with your participation in an event that provide indications of your faith, such as halal or kosher meal choices, or when we verify whether you have been convicted of criminal offenses in the past. We handle this sensitive personal data in accordance with applicable data protection laws, including as described below under "What we do with your personal data".
In accordance with European data protection law (European Data Protection Regulations), the use of your personal data must be based on a legal basis, of which we must inform you. For each use mentioned below, we will state the purpose for which we are using or disclosing the data and the basis on which our use is based.
Depending on your interaction with Brandzup, we may use your personal information for the following purposes:
Legal basis: performance of contract, legitimate interests (to enable us to fulfil our obligations and provide you with the products and services or to inform you of changes to our products and services).
Legal basis: Legitimate interests (to correspond with you and to provide you with products and services), legal rights
Legal basis: legitimate interests (to ensure the quality of our products and services).
Legal basis: consent, legitimate interests (to inform you about news related to our products and services).
Legal basis: legitimate interests (to ensure the quality of our products and services, to enable us to improve our products and services and to provide the content and services to you on our websites).
Legal basis: legal obligations, performance of contract, legitimate interests (for the successful implementation of our competitions and events).
Legal basis: legitimate interests (so that we can run our events and respond to your specific needs and requirements at our events), (if required) explicit consent.
Legal basis: legal obligations, legitimate interests (to ensure that you meet our profile for acceptable risks and that we can help prevent crime and fraud, significant public interest).
Legal basis: legal obligation, legal rights, substantial public interests, legitimate interests (assistance in the prevention of crime).
Legal basis: legitimate interests (so that we can manage our websites and provide you with the content and services on our websites), legal obligation.
Legal basis: legitimate interests (to enable us to reorganise our business), legal obligation.
Legal basis: legal obligations, legal rights, legitimate interests (for cooperation with law enforcement and regulatory authorities).
If you have any questions about the legal principles to which we refer, you can contact us using the information provided under "Contact".
In addition to the third parties mentioned above, we may also disclose your personal data to members of our group, i.e. our branches, our parent company and its subsidiaries, who may use it in connection with the purposes mentioned above. We will also share your personal data with third party service providers (such as marketing, IT or administrative service providers) who process it on our behalf for the purposes set out above.
Our websites use cookies to distinguish you from other users. You can find more details about our use of cookies in our Cookie Policy.
Where is your personal data stored?
The data we collect from you may be sent to and stored at a location outside the European Economic Area (EEA). The data may also be processed by staff working for us or one of our suppliers at a location outside the European Economic Area (EEA). Such personnel may be hired to, among other things, fulfill your order, process your payment information, or provide support services.
Disclosure of your information outside the EEA
If we transfer personal data outside the European Economic Area ( EEA ), we may need to take specific additional measures to protect the relevant personal data. Some countries outside the EEA have been recognised by the EU Commission as offering substantially equivalent protection to EEA data protection laws and therefore no additional safeguards are necessary for transfers of personal data to those countries. For countries without such recognition, we take appropriate safeguards such as model contractual clauses approved by the EU Commission or binding corporate rules.
Please contact us using the details provided in the "Contact Us" section if you would like a copy of the specific security measures that will be applied when we share your personal information.
How long will your personal data be stored?
The personal data we hold about you will be kept for no longer than is permitted by law and only for as long as is necessary to provide you with the products, services or information you have requested, as set out above under "What we do with your personal data".
For example, we may retain certain transaction and correspondence data until the expiration of the time limits for making a claim arising from a transaction or to comply with legal requirements for retaining such data.
How do we protect personal data?
We take all steps reasonably necessary to ensure that your personal data is treated securely and in accordance with the Privacy Policy.
All information you provide to us is stored on our secure servers. All payment transactions are encrypted using SSL technology.
If you have received a password from us (or selected one) that gives you access to certain parts of our websites, you are responsible for keeping it confidential. We encourage you not to share this password with anyone.
Unfortunately, the transmission of information over the Internet is not completely secure. We do our utmost to protect your personal information, but we cannot guarantee the security of your personal information transmitted to our websites - any transmission is at your own risk. Once we receive your information, we use strict procedures and security features to try to prevent unauthorized access.
What about links to other websites?
Our websites and social media pages may from time to time contain links to and from websites of our partner networks and other third parties. Note that if you follow a link to these websites, these websites have their own privacy policies and we are not responsible or liable for those policies. We encourage you to familiarize yourself with these policies before submitting any personal information to these websites.
You have the right to request that we do not process your personal data for marketing purposes. We will inform you and obtain your consent (before collecting your data) if we intend to use your data for such purposes or disclose your information to third parties for such purposes. You may exercise your right to prevent such action by checking the appropriate boxes on the forms we use to collect your information or by unsubscribing at the bottom of emails we send you for promotional purposes. You may also exercise the right by contacting us at any time at office@brandzup.at.
We will make reasonable efforts to ensure that your personal data is accurate. To help us do this, you should notify us of any changes to your personal data that you have provided to us by contacting us using the details in the "Contact Us" section.
If you are located in the EEA during interactions with us, you have the right to request the following from us in certain circumstances:
Also, under certain circumstances, you have the right..,
These rights are subject to certain exceptions to protect the public interest (such as the prevention or detection of crime) and our interests (such as the preservation of legal privilege) and may not exist in the country in which you reside.
If you have the right to do so, you can exercise these rights by contacting us using the details provided under "Contact".
If you are not happy with our use of your personal information or our response to you exercising these rights, you can complain to the Data Protection Officer (see below).
Questions, comments, and requests related to the Privacy Policy are welcome and should be sent to the Privacy Officer listed above.
Any changes to this Privacy Policy will be posted on this page. Please check this page periodically for updates to this Privacy Policy.
This privacy policy was last updated in May 2018.