Privacy policy

This is a courtesy translation. Only the German version is legally binding.

Privacy policy and consents. Contents: 1. Purpose and controller 2. General information on data processing 3. Processing of personal data 4. Collection of access data 5. Cookies & audience measurement 6. Google Analytics 7. Google re/marketing services 8. Facebook social plugins 9. Facebook remarketing 10. Newsletter 11. Integration of third-party services and content 12. User rights and deletion 13. Changes to the privacy policy

 

1. Purpose and controller
   This privacy policy explains the nature, scope and purpose of the processing (including collection, processing and use, and obtaining consent) of personal data within our website and the related web pages, functions and content (hereafter together “website”). The privacy policy applies regardless of the domains, systems, platforms and devices (e.g. desktop or mobile) on which the website is used.

The provider of this website and the controller under data protection law is Buttondesign by Ulli Taferner, Ischlerstrasse 91a, 8990 Bad Aussee, Austria (hereafter “provider”, “we” or “us”). For contact details, please see our legal notice. The term “user” covers all customers and visitors of our website. Terms such as “user” are meant to be gender neutral.

 

2. General information on data processing
   We only process users’ personal data in compliance with the relevant data protection provisions and the principles of data minimisation and data avoidance. This means users’ data is only processed where there is a legal permission, in particular where the data is necessary to provide our contractual services and online services or is required by law, or where consent has been given.

We take organisational, contractual and technical security measures in line with the state of the art to ensure that data protection laws are complied with and to protect the data we process against accidental or intentional manipulation, loss, destruction or access by unauthorised persons. Where content, tools or other means from other providers (hereafter “third parties”) with a registered office abroad are used within the scope of this privacy policy, it can be assumed that data is transferred to the countries where these third parties are based. Data is transferred to third countries either on the basis of a legal permission, the users’ consent or special contractual clauses that guarantee the security of the data required by law.

 

3. Handling of personal information

Users’ personal data is processed in accordance with the conditions explicitly stated in this privacy policy and for the following purposes, based on legal permissions or the users’ consent: providing, running and improving our services and offers; ensuring effective customer service and technical support. Users’ data is only passed on to third parties if this is necessary, for example, for billing (e.g. to a payment service provider) or to fulfil our contractual obligations towards users (such as passing addresses to shipping companies). If you contact us (via the contact form or by email), your data is stored to process the enquiry and in case further questions arise. Personal information is deleted as soon as it has served its purpose and no statutory retention obligations prevent deletion. 4. Collection of access data

We collect data each time our server is accessed (so-called server log files). Access data includes the name of the page visited, the file, date and time of access, amount of data transferred, notification of successful access, browser type and version, the user’s operating system, the previously visited page (referrer URL), the IP address and the requesting provider. This log data is used only for statistical evaluation, without being linked to the user’s person or used to create user profiles, and in compliance with legal requirements, to ensure the operation, security and improvement of our website. However, we reserve the right to check the log data afterwards if there are concrete indications of possible unlawful use.

 

5. Use of cookies & audience measurement

Cookies are small data records sent by our web server or third-party servers to the user’s browser and stored for later access. In this privacy policy we inform our users about the use of cookies for pseudonymous audience measurement. Our website can be viewed without cookies. Users who do not want cookies stored on their device can switch this off in their browser settings. Cookies already stored can also be removed in the browser settings. Please note that this may limit the functionality of our website.

 

Cookies used

Change cookie settings

6. Use of Google Analytics

Our website uses Google Analytics, an analytics service of Google Inc. (“Google”) that uses cookies. Information about the use of our website generated by cookies is usually sent to and stored on a Google server in the USA. Google uses this information on our behalf to evaluate how visitors use our online content, to compile reports on activity and to provide further services related to the use of our website and the internet in general. Pseudonymous user profiles may be created in the process. We only use Google Analytics with IP anonymisation, which means users’ IP addresses are shortened by Google within the EU or EEA. Only rarely is the full IP address sent to a Google server in the USA and shortened there. The IP address sent by the browser is not combined with other Google data. Users can prevent cookies from being stored through their browser settings and can prevent Google from collecting and processing cookie data (including the IP address) by installing the browser plugin available at this link: http://tools.google.com/dlpage/gaoptout?hl=en. Details on how Google uses data for advertising and on settings and opt-out options can be found on the following Google pages:

• https://www.google.com/intl/en/policies/privacy/partners (“How Google uses information from sites or apps that use its services”),
• http://www.google.com/policies/technologies/ads (“How Google uses data for advertising”),
• http://www.google.de/settings/ads (“Manage the information Google uses to show you ads”),
• http://www.google.com/ads/preferences (“Control which ads Google shows you”).

 

7. Use of Google marketing services

Our website uses the Google marketing and remarketing services of Google Inc. (“Google”) to target our ads efficiently and to make sure that users only see ads relevant to them. With “remarketing”, users are shown ads based on websites they visited before. When you visit our website and other websites that use these services, Google embeds a specific code and so-called (re)marketing tags (invisible graphics or code known as “web beacons”) that store a unique cookie on the user’s device (similar technologies may be used instead). These cookies are set by various domains such as google.com or doubleclick.net. They store which pages were visited, which content was of interest and which offers were clicked, as well as technical information about the browser and operating system, referring websites, time of visit and other usage information. The IP address is also recorded; within the EU or EEA it is shortened, and only in exceptional cases is the full address sent to Google servers in the USA and shortened there. The IP address is not combined with other Google data. This information may also be combined with data from other sources. Based on the data collected, targeted ads are shown to the user on other websites. Google processes data pseudonymously, which means that names or email addresses are not directly linked to the data; pseudonymous user profiles are created instead, unless users have explicitly allowed Google to process data without pseudonymisation. Information collected by “DoubleClick” is sent to Google and stored on servers in the USA. The Google marketing services we use include “Google AdWords”. With “Google AdWords”, each customer receives its own “conversion cookie”, so behaviour on the website cannot be tracked across different AdWords customers. The information from cookies is used to create conversion statistics for customers who opt for conversion tracking. We also use “DoubleClick” to integrate third-party ads and “AdSense” to embed ads. Both services use cookies that enable ads to be shown based on users’ visits to this or other websites. We use “Google Tag Manager” to organise and embed other Google analytics and marketing services into our website. More information on how Google uses data for marketing can be found here: https://www.google.com/policies/technologies/ads. You can find Google’s privacy policy at: https://www.google.com/policies/privacy. If you do not want tracking by Google marketing services, you can object through the settings and opt-out options Google provides: http://www.google.com/ads/preferences.

 

8. Integration of Facebook features

Our website uses features of the social network Facebook, provided by Facebook Ireland Ltd. The interactive elements are marked either with Facebook logos (a white “f” on a blue background or a “thumbs up” sign) or as “Facebook Social Plugin”. An overview of Facebook plugins and how they look can be found here: https://developers.facebook.com/docs/plugins/. As soon as you visit parts of our website that contain such plugins, your device connects directly to the Facebook servers. The content of the plugin is delivered by Facebook directly to your device and embedded into our website. This makes it possible to create user profiles; we have no influence on the amount of data Facebook collects, and our level of knowledge is shared here. The plugin tells Facebook that you have visited the corresponding page of our website. If you are logged in to your Facebook account, Facebook can assign the visit to your profile. If you interact with the plugins, for example by using the “Like” button or leaving a comment, the information is sent directly to Facebook and stored there. Even if you are not a Facebook member, Facebook can still learn and store your IP address, which according to Facebook is anonymised in Germany. Details on the scope of collection, the processing and use of the data by Facebook, your rights and your privacy settings can be found in Facebook’s privacy policy: https://www.facebook.com/about/privacy/. Facebook members who do not want data to be collected during their visit and linked to their Facebook account should log out of Facebook and delete their cookies before using our website.

 

9. Use of Facebook remarketing

Our website integrates the “Facebook pixel” of the social network Facebook, operated either by Facebook Inc. (USA) or, if you live in the EU, by Facebook Ireland Ltd. The Facebook pixel allows us to identify visitors to our site as a target group for Facebook ads. We use the pixel to show our Facebook ads specifically to people who have shown interest in our products or services, so that ads are as relevant and unobtrusive as possible. The pixel also helps us evaluate the effectiveness of ads by tracking whether users were directed to our website after clicking an ad. When you open our website, Facebook embeds the pixel, which can store a cookie on your device. This cookie registers whether you later log in to Facebook or are already logged in, and links your visit to our website to your profile. The data we collect via the pixel remains anonymous and does not allow us to identify individual users, but it is stored and processed by Facebook and can therefore be linked to your user profile. More information on data processing by Facebook can be found in Facebook’s data policy at https://www.facebook.com/policy.php . If you do not want data-based advertising via Facebook, you can change the settings in your Facebook account at https://www.facebook.com/settings?tab=ads .

 

10. Newsletter

By subscribing to our newsletter you consent to receiving it and to the processes described below.

Newsletter content: We send newsletters, emails and other electronic notifications with promotional information (hereafter “newsletter”) only with the recipient’s consent or where permitted by law. To obtain this consent we explain the content of the newsletter and use the details provided only to send the newsletter.

Double opt-in and documentation: Subscription to our newsletter uses a double opt-in process. After subscribing you receive an email asking you to confirm, so that nobody can subscribe with someone else’s email address. The subscription is logged so that the process can be proven in line with legal requirements. This includes logging the time of subscription and confirmation as well as your IP address. We also log changes to your data stored with the mailing service provider.

Mailing service provider: The newsletter is sent by …, a mailing service provider whose privacy policy can be viewed at ….. Your email address and the other data described in this statement are stored on the servers of Mailchimp. ….. uses this information to send and evaluate the newsletter on our behalf and may use the data to improve its own services, but not to contact you directly or to pass the data on to third parties.

Registration data: To subscribe to the newsletter, your email address is all that is needed.

Statistics and performance measurement: Newsletters contain a “web beacon”, a file loaded from ….. when the newsletter is opened in order to collect technical information such as browser data, your system, your IP address and the time of access. This information helps us improve technical performance and analyse user behaviour based on location (which can be determined via the IP address) and time of access. We also measure whether newsletters are opened, when they are opened and which links are clicked. Linking this data to individual recipients is technically possible but is not our aim; it serves to adapt and improve our content.

Cancellation/withdrawal: You have the right to withdraw your consent to receive the newsletter at any time, which also withdraws consent to sending via …. and to the statistical analysis. It is not possible to withdraw only from sending via Mailchimp or only from the analysis. Every newsletter contains a link to unsubscribe.

 

11. Integration of third-party services and content

Our website may occasionally integrate content or services from third parties, such as maps or external fonts. This requires the respective content providers (hereafter “third parties”) to see the users’ IP address in order to send their content to the browser. The IP address is therefore necessary to display this content. We try to use content that is loaded directly from the provider without further communication. However, third parties may also store cookies on users’ devices and process their own data for their purposes, which may be used to create user profiles. We choose our third parties carefully and make sure to use services that respect our users’ privacy. Overview of third parties and their content:

• Google Fonts by Google, Inc., available at https://www.google.com/fonts (“Google Fonts”), embedded through server requests to Google (often in the USA). Privacy policy: https://www.google.com/policies/privacy/, opt-out: https://www.google.com/settings/ads/.

• Maps from “Google Maps” provided by Google Inc., privacy policy: https://www.google.com/policies/privacy/, opt-out: https://www.google.com/settings/ads/.

• Videos from the “YouTube” platform provided by Google Inc., privacy policy: https://www.google.com/policies/privacy/, opt-out: https://www.google.com/settings/ads/.

 

12. User rights and data deletion

Users have the right to obtain information free of charge about the data stored about them. They also have the right to have incorrect data corrected, to withdraw consent, to have their personal data blocked and deleted and, where applicable, to lodge a complaint with the competent supervisory authority if they suspect unlawful processing. Personal data stored by us is deleted when it is no longer needed for its intended purpose, unless statutory retention obligations prevent deletion.

 

13. Updates to this privacy policy

Buttondesign by Ulli Taferner reserves the right to update this privacy policy. Changes may become necessary to adapt to new legislation or if our services or data processing change. If such updates affect the processing of personal data based on user consent, or if the update affects relevant parts of our contractual relationship with users, we will ask for your consent to these changes. We recommend that all users check the current version of our privacy policy regularly. As of January 2024