DATA PROTECTION

Privacy policy and consent to data usage for the website of Dr. Tonar Cosmetics GmbH (dr.tonar-cosmetics.com)

1 Introduction

The protection of your privacy is important to us. Dr. Tonar Cosmetics GmbH, FN 480632 m, Stadiongasse 6-8/2, 1010 Vienna (hereinafter "Dr. Tonar Cosmetics") strictly adheres to the statutory data protection regulations when processing your personal data. In addition, we have taken technical and organizational precautions to protect your data from loss, manipulation or unauthorized access.

The following privacy policy applies to any use of the website of Dr. Tonar Cosmetics GmbH (dr.tonar-cosmetics.com). In this privacy policy we inform you about the most important aspects of the processing of your personal data.

2. Responsible body and contact

Dr. Tonar Cosmetics GmbH, FN 480632 m, Stadiongasse 6-8/2, 1010 Vienna is responsible for processing your personal data. If you have any questions about the processing of your personal data or data protection, please contact contact@tonar-cosmetics.com or send us your request by post.

3. Collection, processing and use of your personal data and legal bases

  • We process the following personal data:

    Sites

    When you visit our website, the following personal data is processed: your IP address, log-in data, location data and information about your operating system or browser. We also store access data on our websites in server log files, such as the name of the requested file, the date and time of access, the duration of the visit, the amount of data transferred and the requesting provider. The data is collected using various technologies, primarily so-called "cookies" (see point 7).

    If you register on our websites, we process the personal data that you voluntarily provide during registration.

    We process the personal data listed on the basis of our overriding legitimate interest (Article 6 (1) (f) GDPR), which consists in achieving the purposes listed under 4.1. The processing may be necessary with regard to the initiation or performance of a contract (Article 6 (1) (b) GDPR).

    contact form

    If you contact us via the contact form on our website or by email, we will process your personal data that you voluntarily provide to us when contacting us. The data collected can be seen from the respective input forms. This may include in particular your name, email address, telephone number and address.

    We process the personal data listed on the basis of our overriding legitimate interest (Article 6 (1) (f) GDPR), which consists in achieving the purposes listed under 4.2. The processing may be necessary with regard to the initiation or performance of a contract (Article 6 (1) (b) GDPR).

    We process the personal data mentioned exclusively on the basis of your consent (Art 6 Para 1 lit a GDPR).

  • There is no obligation to actually provide the information we ask you to provide on our websites. However, if you do not do so, you will not be able to use all the features of the website.

4. Purpose of data processing

  • We will process your personal data for the following purposes:
    Website
    • to provide you with a user-friendly experience on our websites and to further develop and improve them;
    • to create usage statistics;
    • to detect, prevent and investigate attacks on our websites.
    contact form
    • to process your request
    • to be able to contact you for a possible business transaction.

5. Transmission of your personal data

For the purposes stated above, your personal data will be transmitted to the following recipients:

  • IT service providers commissioned by us;
  • Tax consultants commissioned by us to fulfill our tax obligations.

6. Storage period

  • We will only store your personal data for as long as we reasonably consider necessary to achieve the purposes set out in point 4 and as permitted by applicable law. In any case, we will store your personal data as long as statutory retention periods exist or limitation periods for potential legal claims have not yet expired.
  • In detail, we store your personal data as follows:
    Website
    We store your data for a period of three months. We store it for a longer period if this is necessary to investigate any attacks on our websites.
    The cookies for Google Analytics are deleted after two years. Further information on terms of use and data protection can be found at http://www.google.com/analytics/terms/de.html or at https://www.google.de/intl/de/policies/ .
    If you register on our websites, we will store your data for as long as your account exists and thereafter for as long as legal obligations require.
    contact form
    We store your personal data for six months in case you have further questions. We only store your data for a longer period if this is necessary to process your request.

7. Use of cookies

In order to make visiting our website attractive and to enable the use of certain functions, as well as for the purpose of evaluating your use of our website, compiling reports on website activities for website operators and providing other services relating to website activity and internet usage, we use so-called “cookies” on various pages. These are small text files that are stored on your device. Some of the cookies we use are deleted at the end of the browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your device and enable us to recognize your browser the next time you visit (persistent cookies). You can set your browser so that you are informed when cookies are set and decide individually whether to accept them or to exclude the acceptance of cookies in certain cases or in general. If you do not accept cookies, the functionality of our website may be restricted.

We also use third-party cookies to collect data in aggregate form with analytics tools such as Google Analytics. These are both persistent and temporary cookies.

For more information about the use of cookies on our website, please see our Cookie Policy.

8. Web Analysis

This website uses Google Analytics, a web analysis service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (www.google.de). Google Analytics uses so-called "cookies", text files that are stored on your computer and that enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. In connection with the transfer of data to the USA, there is an adequacy decision by the EU Commission (EU-US Privacy Shield), which determines that the USA guarantees an appropriate level of data protection for the transfer of data from the EU to US companies.

However, if IP anonymization is activated on this website, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.

On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. You can prevent cookies from being saved by setting your browser software accordingly; however, we would like to point out that if you do this, you may not be able to use all of the functions of this website to their full extent.

You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by downloading and installing the browser plug-in available under the following link:

http://tools.google.com/dlpage/gaoptout?hl=de .

As an alternative to the browser add-on, especially for browsers on mobile devices, you can also prevent Google Analytics from collecting data by clicking on this link. An opt-out cookie will be set that prevents your data from being collected in the future when you visit this website. The opt-out cookie is only valid in this browser and only for our website and is stored on your device. If you delete the cookies in this browser, you must set the opt-out cookie again.

Further information on data protection and terms of use can be found at http://www.google.com/analytics/terms/de.html or at https://support.google.com/analytics/answer/6004245?hl=de .

9. Use of social media plugins

We use so-called social plugins from facebook.com and instragram.com on our website. These are links embedded in our websites to our channels on the respective social media platforms. If, for example, you click on a social plugin or leave a comment, the corresponding information is transmitted from your browser directly to the respective social media provider and stored there. If you have a user account on the respective social media platform and are logged in at the same time, this can assign the visit to our page to your account. Even if you are not logged in or do not have a user account at all, your browser transmits information (e.g. your IP address, which websites you have visited) which is stored by the social media provider. Please refer to the privacy policies of the respective social media providers for details on how your personal data is handled and your rights in this regard. If you do not want the data generated about you via our websites to be assigned to your respective user account, you must log out of the social media provider before visiting our websites.

10. Your rights

You have the right to request information about your personal data stored by us. If your data is incorrect, incomplete or irrelevant, you have the right to have this data corrected or deleted. You also have the right to restrict the processing of your data and the right to data portability. If you have legitimate interests, you also have the right to object to certain data processing.

Please contact us via the contact form or by email.

If you believe that your rights have been violated in the processing of your personal data, you have the right to lodge a complaint with the responsible supervisory authority in addition to the rights listed above. The Austrian Data Protection Authority is the supervisory authority within the meaning of the GDPR and is responsible for examining the complaint you have submitted.