data protection
1. Data protection at a glance
General information
The following notes provide a simple overview of what we do with your personal data
happens when you visit this website. Personal data is all data with which you
can be personally identified. Detailed information on data protection
You can read our privacy policy below.
Data collection on this website
Who is responsible for the data collection on this website?
Data processing on this website is carried out by the website operator. Its contact details
can be found in the section “Notice to the responsible body” of this data protection declaration.
How do we collect your data?
On the one hand, your data is collected when you provide it to us. This may include, for example:
Trade data that you enter into a contact form.
Other data is collected automatically or with your consent when you visit the website by our ITSsysteme
recorded. These are mainly technical data (e. g. B. Internet browser, operating system or time
of the page view). This data is collected automatically as soon as you enter this website.
What do we use your data for?
Part of the data is collected to ensure error-free provision of the website. Other
Data may be used to analyse your user behaviour.
What rights do you have regarding your data?
You have the right at any time to obtain information free of charge about the origin, recipient and purpose of your
to receive stored personal data. You also have the right to request the correction or
to request the deletion of these data. If you have given consent to data processing,
you may revoke this consent at any time for the future. In addition, you have the right to:
to request the restriction of the processing of your personal data in certain circumstances.
You also have the right to lodge a complaint with the competent supervisory authority.
You can contact us at any time to find out more about this and other questions about data protection.
2. Hosting
We host the content of our website with the following provider:
Host Europe
Provider is Host Europe GmbH, Hansestraße 111, 51149, Cologne (hereinafter referred to as Host Europe)
When visiting our website, Host Europe collects various log files including your IP addresses.
Details can be found in the Host Europe privacy policy:
https://www. hosteurope. de/AGB/Datenschutzerklaerung/.
The use of Host Europe is based on Art. 6 para. 1 lit. f GDPR. We have a
legitimate interest in the most reliable presentation of our website. Provided that a
consent has been sought, the processing takes place solely on the basis of Art.
6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG, insofar as the consent to the storage of cookies or the
Access to information in the user‘s terminal device (e. g. for device fingerprinting) within the meaning of the TTDSG
includes. The consent can be revoked at any time.
3. General information and mandatory information
Data protection
The operators of these pages take the protection of your personal data very seriously. We treat your
personal data confidentially and in accordance with the statutory data protection regulations as well as
of this Privacy Policy.
When you use this website, various personal data are collected.
Personal data is data with which you can be personally identified. The present
Privacy Policy explains what data we collect and what we use it for. It also explains how:
and for what purpose it is done.
We would like to point out that data transmission on the Internet (e.g. when communicating by e-mail)
may have security vulnerabilities. A complete protection of the data against access by third parties is not
It’s possible.
Notice to the responsible body
The responsible party for data processing on this website is:
Villa Behrens
Johanna Erharter flower certificate
Reitlstraße 20
5640 Bad Gastein
Telephone: +43 6434 21350
E-mail: info@villa-excelsior.at
The responsible body is the natural or legal person who, alone or jointly with others,
the purposes and means of processing personal data (e.g. names, e-mail addresses, etc.)
decides.
Storage duration
Insofar as no more specific storage period has been mentioned within this data protection declaration,
Your personal data with us until the purpose for the data processing ceases to exist. If you have a
make a legitimate request for erasure or withdraw consent to data processing,
your data will be deleted, unless we have other legally permissible reasons for the storage of your
have personal data (e.g. tax or commercial retention periods);
in the latter case, erasure shall take place after those reasons have ceased to exist.
General information on the legal bases of data processing on this
Website
If you have consented to the data processing, we process your personal data on:
Basis of Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR, if special categories of data
pursuant to Art. 9 para. 1 GDPR. In the event of explicit consent to the transfer
The processing of personal data in third countries is also carried out on the basis of Art.
49 para. 1 lit. a GDPR. If you choose to store cookies or access information in
your terminal device (e.g. via device fingerprinting), the data processing takes place additionally
on the basis of § 25 para. 1 TTDSG. The consent can be revoked at any time. Are your data for
performance of a contract or to carry out pre-contractual measures, we process your
Data on the basis of Art. 6 para. 1 lit. b GDPR. Furthermore, we process your data if they
are required to fulfil a legal obligation on the basis of Art. 6 para. 1 lit. c GDPR.
The data processing may also be based on our legitimate interest pursuant to Art. 6 para. 1 lit. f
GDPR. The legal bases applicable in each individual case are discussed in the following paragraphs:
paragraphs of this privacy policy.
Information on data transfer to the USA and other third countries
Among other things, we use tools from companies based in the USA or other
third countries which are not secure under data protection law. When these tools are active, your
personal data are transferred to those third countries and processed there. We point out that:
These countries cannot guarantee a level of data protection comparable to that of the EU.
For example, US companies are required to disclose personal data to security authorities
without you, as the person concerned, being able to take legal action against this. It cannot therefore:
prevent US authorities (e.g. intelligence agencies) from accessing your data on US servers.
Process, evaluate and permanently store for monitoring purposes. We have to look at these
Processing activities have no influence.
Recipients of personal data
As part of our business activities, we cooperate with various external bodies. In this context:
In some cases, the transfer of personal data to these external bodies is also required.
We only pass on personal data to external bodies if this is done in the context of a
Performance of the contract is required if we are legally obliged to do so (e.g. B. Transfer of data
to tax authorities), if we have a legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR at the transfer
or if another legal basis allows the transfer of data. When using:
We only provide personal data of our customers to processors on the basis of a valid
Contract on order processing. In the event of joint processing, a contract concerning:
joint processing.
Revocation of your consent to data processing
Many data processing operations are only possible with your explicit consent. You can use a
revoke consent already granted at any time. The legality of the measures taken up to the date of revocation
Data processing remains unaffected by the revocation.
Right to object to data collection in special cases as well as to
Direct advertising (Art. 21 GDPR)
IF DATA PROCESSING IS CARRIED OUT ON THE BASIS OF ART. 6 PARA. 1 LIT. E OR F GDPR
YOU HAVE THE RIGHT AT ANY TIME, FOR REASONS RELATING TO YOUR PARTICULAR
SITUATION ARISING AGAINST THE PROCESSING OF YOUR PERSONAL DATA
THE SAME APPLIES TO AN APPEAL BASED ON THESE PROVISIONS.
PROFILING. THE RESPECTIVE LEGAL BASIS ON WHICH THE PROCESSING IS BASED;
PLEASE REFER TO THIS PRIVACY POLICY. IF YOU OBJECT,
IF WE WILL NO LONGER PROCESS YOUR AFFECTED PERSONAL DATA, IT WILL
UNLESS WE CAN COMPELLING LEGITIMATE REASONS FOR THE PROCESSING
EVIDENCE THAT OUTWEIGHS THEIR INTERESTS, RIGHTS AND FREEDOMS OR THAT
PROCESSING SERVES THE ASSERTION, EXERCISE OR DEFENCE OF:
LEGAL CLAIMS (OPPOSITION PURSUANT TO ART. 21 PARA. 1 GDPR).
ARE YOUR PERSONAL DATA PROCESSED FOR DIRECT MARKETING PURPOSES,
SO YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING YOU
CONCERNING PERSONAL DATA FOR THE PURPOSE OF SUCH ADVERTISING
THIS ALSO APPLIES TO PROFILING, INSOFAR AS IT IS WITH SUCH DIRECT ADVERTISING IN
WE’RE CONNECTED. IF YOU OBJECT, YOUR PERSONAL DATA WILL BE
SUBSEQUENTLY NO LONGER USED FOR DIRECT MARKETING PURPOSES (OPPOSITION
ACCORDING TO ART. 21 PARA. 2 GDPR).
Right of appeal to the competent supervisory authority
In the event of violations of the GDPR, the data subject has a right to complain to a
supervisory authority, in particular in the Member State of their habitual residence, of their place of work
or the place of the alleged infringement. The right of appeal shall be without prejudice to other
administrative or judicial remedies.
Right to data portability
You have the right to disclose information that we hold on the basis of your consent or in performance of a contract
automated processing, by itself or to a third party in a commonly used, machine-readable format
to be handed over. If you wish to transfer the data directly to another controller
request, this shall only be done insofar as it is technically feasible.
Information, correction and deletion
You have the right to receive free of charge at any time within the scope of the applicable statutory provisions.
information about your stored personal data, its origin and recipients and the
Purpose of data processing and, where applicable, a right to rectification or deletion of this data. To this end, and
If you have any further questions about personal data, please contact us at any time.
Right to restriction of processing
You have the right to request the restriction of the processing of your personal data.
You can contact us at any time. The right to restriction of processing consists in:
the following cases:
If you dispute the accuracy of your personal data stored with us, we need
usually time to check this. For the duration of the examination, you have the right to
Restriction of the processing of your personal data.
If the processing of your personal data took place unlawfully, you may:
request the restriction of data processing instead of deletion.
If we no longer need your personal data, but you use it to exercise it,
defense or assertion of legal claims, you have the right, instead of the
erasure to request the restriction of the processing of your personal data.
If you file an objection pursuant to Art. 21 para. 1 GDPR, a balance must be struck between
their interests and ours. As long as it is not yet clear whose interests
override, you have the right to restrict the processing of your personal data
to demand.
If you have restricted the processing of your personal data, such data may – from
except for their storage – only with your consent or for the assertion, exercise or
defence of legal claims or protection of the rights of another natural or
a legal person or for reasons of important public interest of the European Union; or
be processed in a Member State.
4. Data collection on this website
Cookies
Our websites use so-called “cookies”. Cookies are small data packets and set up
No damage to your device. They shall be either temporarily for the duration of a meeting:
(session cookies) or permanently (permanent cookies) stored on your device. Session cookies
are automatically deleted at the end of your visit. Permanent cookies remain on your device
stored until you delete it yourself or an automatic deletion takes place by your web browser.
Cookies may come from us (first-party cookies) or from third parties (so-called cookies). Third-Party-
Cookies). Third-party cookies enable the integration of certain services of
Third party companies within websites (e.g. cookies used to process payment services).
Cookies have different functions. Many cookies are technically necessary because certain
Website functions would not work without them (e.g. B. the shopping cart function or the display
of videos). Other cookies may be used to evaluate user behaviour or for advertising purposes
be used.
Cookies used to carry out the electronic communication process, to provide
certain functions requested by you (e.g. for the shopping cart function) or to optimize the
website (e.g. cookies to measure web audience) are required (necessary cookies), are stored on
Basis of Art. 6 para. 1 lit. f GDPR, unless another legal basis is specified.
The website operator has a legitimate interest in the storage of cookies necessary for
technically error-free and optimised provision of its services. Insofar as a consent to the
storage of cookies and similar recognition technologies, the
Processing solely on the basis of this consent (Art. 6 para. 1 lit. a GDPR and § 25 para. 1
TTDSG); the consent can be revoked at any time.
You can set your browser so that you are informed about the setting of cookies and
Allow cookies only in individual cases, exclude the acceptance of cookies for certain cases or generally
and activate the automatic deletion of cookies when closing the browser. In the case of
Disabling cookies may limit the functionality of this website.
Which cookies and services are used on this website, you can
Please refer to the privacy policy.
Contact form
If you send us enquiries via the contact form, your information from the
Enquiry form including the contact details provided by you in order to process the enquiry
and stored with us in case of follow-up questions. We do not give this data without your
Consent continues.
The processing of these data takes place on the basis of Art. 6 para. 1 lit. b GDPR, if your request with
related to the performance of a contract or to the implementation of pre-contractual measures
is necessary. In all other cases, the processing is based on our legitimate interest in the
effective processing of requests addressed to us (Art. 6 para. 1 lit. f GDPR) or on your
consent (Art. 6 para. 1 lit. a GDPR) insofar as this has been requested; the consent is at any time
revocable.
The data entered by you in the contact form will remain with us until you request us to delete it.
request, revoke your consent to the storage or the purpose for the data storage no longer applies
(e.g. after processing your request). Mandatory legal provisions –
in particular retention periods – remain unaffected.
5. Plugins and Tools
Google Fonts
This site uses so-called Google Fonts for the uniform display of fonts, which are produced by Google
be made available. When accessing a page, your browser loads the required fonts into its browser cache,
to display texts and fonts correctly.
For this purpose, the browser you are using must be connected to the Google servers
record. As a result, Google becomes aware that via your IP address this website
has been called. The use of Google Fonts is based on Art. 6 para. 1 lit. f GDPR. The
Website operator has a legitimate interest in the uniform representation of the font image on its
Website. If a corresponding consent has been requested, the processing takes place exclusively
on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG, insofar as the consent to the storage
cookies or access to information on the user’s terminal device (e.g. device fingerprinting) in the
meaning of the TTDSG. The consent can be revoked at any time.
If your browser does not support Google Fonts, a default font is used by your computer.
More information about Google Fonts can be found at
https://developers.google.com/fonts/faq and in the privacy policy of Google:
https://policies.google.com/privacy?hl=de.
Source:
https://www.e-recht24.de