Data protection

1 Responsible person and scope

The person responsible within the meaning of the EU General Data Protection Regulation (hereinafter: GDPR) and other national data protection laws of the member states as well as other data protection regulations is:

CREATIVE HOMEFASHION
PRODUCTION & TRADE GMBH
Schweizerstr. 35
6844 Altach
Austria
office@creative-homefashion.com
T +43 5576 799 -63

This data protection declaration applies to the CREA website which is available under the domain creative-homefashion.com/ and the various subdomains (hereinafter referred to as “our website”). A request for information, deletion, etc. can be sent at any time to the above address by email or post.

2 Principles of data processing

Personal data is all information that relates to an identified or identifiable natural person. This includes, for example, information such as your name, your age, your address, your telephone number, your date of birth, your e-mail address, your IP address or user behavior. Information with which we cannot (or only with a disproportionate effort) establish a reference to you, e.g. by anonymizing the information, no personal data are included. The processing of personal data (e.g. the collection, querying, use, storage or transmission) always requires a legal basis or your consent. Processed personal data will be deleted as soon as the purpose of the processing has been achieved and there are no longer any statutory retention requirements.

If we process your personal data for the provision of certain offers, we will inform you below about the specific processes, the scope and purpose of the data processing, the legal basis for the processing and the respective storage period.

3 Individual processing operations

1. Provision and use of the website

a. Type and scope of data processing

When you visit and use our website, we collect the personal data that your browser automatically transmits to our server. This information is temporarily stored in a so-called log file. When you use our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure stability and security:

IP address of the requesting computer
Date and time of access
Name and URL of the file accessed
Website from which access is made (referrer URL)
Browser used and possibly the operating system of your computer, as well as the name of your access provider

b. Legal basis

Art. 6 Para. 1 lit. f GDPR as the legal basis. The processing of the data mentioned is necessary for the provision of a website and thus serves to safeguard a legitimate interest of our company.

c. Storage period

As soon as the specified data is no longer required to display the website, it will be deleted. The collection of the data for the provision of the website and the storage of the data in log files is essential for the operation of the website. There is consequently no possibility of objection on the part of the user. Further storage can take place in individual cases if this is required by law.

2. Registration / user account

a. Type and scope of data processing

On our website we offer you the opportunity to register by providing personal data in order to be able to use our web shop. With the processed data, we create an individualized user account for you, with which you can use certain content and services, in particular our web shop on our website. We process your e-mail address so that we can send you new access data in case you should forget them.

The following overview shows you in detail which personal data we process from you when you register:

Surname
E-mail address
address
Date of birth
IP address
company
Phone number

b. Legal basis

The processing of the presented personal data (cf. § 4 2. a.) Serves according to Art. 6 Para. 1 lit. b GDPR the fulfillment of a contract between you and Präg GmbH or the implementation of pre-contractual measures.

c. Storage period

As soon as the specified data is no longer required to display the website, it will be deleted. The collection of the data for the provision of the website and the storage of the data in log files is essential for the operation of the website. There is consequently no possibility of objection on the part of the user. Further storage can take place in individual cases if this is required by law.

2. Registration / user account

a. Type and scope of data processing

On our website we offer you the opportunity to register by providing personal data in order to be able to use our web shop. With the processed data, we create an individualized user account for you, with which you can use certain content and services, in particular our web shop on our website. We process your e-mail address so that we can send you new access data in case you should forget them.

The following overview shows you in detail which personal data we process from you when you register:

Surname
E-mail address
address
Date of birth
IP address
company
Phone number

b. Legal basis

The processing of the presented personal data (cf. § 4 2. a.) Serves according to Art. 6 Para. 1 lit. b GDPR the fulfillment of a contract between you and Präg GmbH or the implementation of pre-contractual measures.

c. Storage period

As soon as the processed data is no longer required for the execution of the contract, it will be deleted. Even after the contract has been concluded, it may be necessary to save your personal data in order to meet contractual or legal obligations. Further storage can take place in individual cases if this is required by law.

d. Cancellation of registration

As a user, you can cancel your registration at any time. You can have the data stored about you changed at any time. To do this, proceed as follows: Send us an email with your change request to: office@creative-homefashion.com

However, if the processed data is required to fulfill a contract or to carry out pre-contractual measures, premature deletion of the data is only possible if this does not conflict with contractual or legal obligations.

3. Purchase of goods

a. Type and scope of data processing

On our website we offer users the opportunity to purchase goods by providing personal data. The data required for this is entered in an input mask and transmitted to us and stored. A transfer of data to third parties does not take place. The following data is collected during the ordering process:

Surname
address
Date of birth
E-mail address
company
Phone number

Your data will be passed on to the shipping company commissioned with the delivery, insofar as this is necessary for the delivery of the goods. In order to process payments, we pass on your payment data to the credit institute commissioned with the payment. These companies may only use your data for order processing and not for other purposes.

If you purchase goods on our website and enter your email address, we can use this to send you a newsletter regarding our own similar goods or services.

b. Legal basis

When processing your personal data (cf. § 4 3. a.), Which are necessary for the fulfillment of a sales contract concluded with us, Art. 6 Para. 1 lit. b GDPR as the legal basis. This also applies to processing operations that are necessary to carry out pre-contractual measures.

The legal basis for sending the newsletter as a result of the purchase of goods is Art. 6 Para. 1 lit. f GDPR

c. Storage period

Once the contract has been fully processed and the purchase price has been paid in full, your data will be blocked for further use and deleted after the tax and commercial retention periods have expired, unless you have expressly consented to further use of your data. Further storage can take place in individual cases if this is required by law.

4. Newsletter and contact

a. Type and scope of data processing

You can subscribe to a free newsletter on our website. In order to be able to send you the newsletter regularly, we need the following information from you:

Surname
E-mail address
address
Phone number
Your request

Your data will not be passed on to third parties in connection with sending the newsletter.

We use the so-called double opt-in procedure for sending the newsletter, i.e. We will only send you the newsletter if you have previously confirmed your registration via the link included in a confirmation email sent to you for this purpose. We want to ensure that only you can register for the newsletter as the owner of the specified email address. Your confirmation must be made promptly after receiving the confirmation email, otherwise your newsletter registration will be automatically deleted from our database.

b. Legal basis for sending newsletters

The processing of your e-mail address by Präg GmbH for sending the newsletter is based on Art. 6 Para. 1 lit. a GDPR on the declaration of consent you voluntarily submit below:

Declaration of consent:
By entering my data and clicking the “Send message” button, I give my consent to the processing of my e-mail address, my name and my address for regular newsletter dispatch. I can unsubscribe from the newsletter service at any time by sending an email to office@creative-homefashion.com with the subject “Unsubscribe”.

I can give my consent to the collection of personal data collected during the registration process at any time at office@creative-homefashion.com or by post at CREATIVE HOMEFASHION PRODUCTION & TRADE GMBH, Schweizerstr. 35, 6844 Altach, Austria.

If you have not given your consent to the newsletter and you have provided Präg GmbH with your e-mail address, the processing is based on Art. 6 Paragraph 1 lit. f GDPR (legitimate interest). In this case, you can object to the sending of the newsletter at any time (see § 10).

a. Legal basis for establishing contact / customer file

The processing of your e-mail address by CREATIVE HOMEFASHION PRODUCTION & TRADE GMBH for sending the newsletter is based on Art. 6 Para. 1 lit. a GDPR on the declaration of consent you voluntarily submit below:

Declaration of consent:
By entering my data and clicking the “Send message” button, I give my consent to the processing of my email address, name, address, telephone number and the reason for my request for personal contact and storage in the customer file of CREATIVE HOMEFASHION PRODUCTION & TRADE GMBH,.

I can give my consent to the collection of personal data collected during the registration process at any time at office@creative-homefashion.com or by post at CREATIVE HOMEFASHION PRODUCTION & TRADE GMBH, Schweizerstr. 35, 6844 Altach, Austria.

b. Storage period

Your e-mail address, first and last name, postal address, telephone number and the reason for your request will be stored for as long as you have subscribed to the newsletter and / or want your data in the customer profile. After you have unsubscribed from the newsletter, your email will only be used for personal contact. If you revoke the processing of your personal data in the customer profile, all personal data will be deleted.

Further storage can take place in individual cases if this is required by law.

5. Contact form

a. Type and scope of data processing

On our website we offer you to contact us using a form provided. As part of the process of sending your request via the contact form, reference is made to this data protection declaration to obtain your consent. If you use the contact form, the following personal data will be processed about you:

E-mail address
Salutation
Surname
Phone number
address

The purpose of providing your e-mail address is to be able to assign your request and respond to you. When using the contact form, your personal data will not be passed on to third parties.

b. Legal basis

The data processing described above (cf. § 4 5. a.) For the purpose of establishing contact is carried out in accordance with Art. 6 Paragraph 1 lit. a GDPR on the declaration of consent you voluntarily submit below:

Declaration of consent:
By entering my data and clicking the “Submit” button, I declare my consent to the processing of my email address, my name, my telephone number and my address in order to answer my contact request.

I can give my consent to the collection of personal data collected during the registration process at any time at office@creative-homefashion.com or by post at CREATIVE HOMEFASHION PRODUCTION & TRADE GMBH, Schweizerstr. 35, 6844 Altach, Austria.

c. Storage period

As soon as the request you have made has been dealt with and the relevant issue has been finally clarified, the personal data processed via the contact form will be deleted from you. Further storage can take place in individual cases if this is required by law.

 

8 Tracking and analysis tools

We use tracking and analysis tools to ensure ongoing optimization and needs-based design of our website. With the help of tracking measures, it is also possible for us to statistically record the use of our website by visitors and to further develop our online offer for you with the help of the knowledge gained. Due to these interests, the use of the tracking and analysis tools described below is in accordance with Art. f GDPR justified. If you have given us your consent to the use of cookies on the basis of a notice given by us on the website (“cookie banner”), the legality of the use is also based on Art. 6 Para. 1 lit. a GDPR. The following description of the tracking and analysis tools also shows the respective processing purposes and the processed data.

1. Google Analytics

This website uses Google Analytics, a web analysis service from Google Inc., 1600 Amphitheater Parkway, Mountainview, CA 94043 USA (“Google”). Google Analytics uses so-called “cookies”, text files that are stored on your computer and that enable your use of the website to be analyzed.

The information generated by these cookies, for example about the time, place and frequency of your use of this website, is usually transmitted to a Google server in the USA and stored there. When using Google Analytics, it cannot be ruled out that the cookies set by Google Analytics can collect other personal data in addition to the IP address. We would like to point out that Google may transfer this information to third parties if this is required by law or if third parties process this data on behalf of Google.

Google will use the information generated by cookies on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website activity and internet usage. According to Google, the IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

You can generally prevent the storage of cookies by setting your browser software accordingly. However, we would like to point out that in this case you may not be able to use all functions of this website to their full extent.

It cannot be ruled out that the cookies set by Google Analytics can collect other personal data in addition to the IP address. To prevent information about your use of the website from being recorded by Google Analytics and transmitted to Google Analytics, you can download and install a plug-in for your browser under the following link: tools.google.com/dlpage/gaoptout.

This plugin prevents information about your visit to the website from being transmitted to Google Analytics. Any other analysis is not prevented by this plugin.

We would like to point out that you cannot use the browser plug-in described above when visiting our website via the browser of a mobile device (smartphone or tablet). When using a mobile device, you can prevent Google Analytics from collecting your usage data by clicking on the following link: Deactivate Google Analytics.

By clicking on this link, a so-called opt-out cookie is set in your browser. This prevents information about your visit to the website from being transmitted to Google Analytics. Please note that the opt-out cookie is only valid for this browser and only for this domain. If you delete the cookies in this browser, the opt-out cookie will also be deleted. To continue to prevent Google Analytics from collecting data, you must click the link again. The use of the opt-out cookie is also possible as an alternative to the above plug-in when using the browser on your computer.

In order to ensure the best possible protection of your personal data, Google Analytics has been expanded to include the code “anonymizeIp” on this website. This code causes the last 8 bits of the IP address to be deleted and your IP address to be recorded anonymously (so-called IP masking). Your IP address will be shortened by Google before it is transmitted within member states of the European Union or in other contracting states of the Agreement on the European Economic Area and thereby anonymized. The full IP address is only transmitted to a Google server in the USA and shortened there in exceptional cases.

9 Hyperlinks

Our website contains so-called hyperlinks to websites from other providers. If you activate these hyperlinks, you will be redirected from our website directly to the website of the other provider. You recognize this u. a. on changing the URL. We cannot assume any responsibility for the confidential handling of your data on these third party websites, as we have no influence on whether these companies comply with data protection regulations. Please refer to these websites for information about how these companies handle your personal data.

10 Rights of data subjects

As a person affected by the processing of personal data, the GDPR gives you the following rights:

According to Art. 15 GDPR you can request information about your personal data processed by us. In particular, you can obtain information about the processing purposes, the categories of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to correction, deletion, restriction of processing or objection, the existence of a Right to lodge a complaint, the origin of your data, if we have not collected it, via a transfer to third countries or to international organizations as well as the existence of automated decision-making including profiling and, if necessary, meaningful information on their details.
According to Art. 16 GDPR you can immediately request the correction of incorrect or the completion of your personal data stored by us.
According to Art. 17 GDPR, you can request the deletion of your personal data stored by us, insofar as the processing is not to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend Legal claims is required.
According to Art. 18 GDPR, you can request the restriction of the processing of your personal data if you dispute the correctness of the data, the processing is unlawful, we no longer need the data and you refuse to delete it because you want to assert or exercise it or need defense of legal claims. You also have the right under Art. 18 GDPR if you have objected to processing in accordance with Art. 21 GDPR.
According to Art. 20 GDPR, you can request to receive your personal data that you have provided to us in a structured, common and machine-readable format, or you can request that it be transmitted to another person responsible.
According to Art. 7 Para. 3 GDPR, you can revoke your once given consent to us at any time. As a result, we are no longer allowed to continue the data processing based on this consent in the future.
According to Art. 77 GDPR, you have the right to complain to a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence, your place of work or our company headquarters. In Austria, the supervisory authority is the data protection authority, Wickenburggasse 8, 1080 Vienna, phone: +43 1 52 152-0, email: dsb@dsb.gv.at, web: www.dsb.gv.at.

11 Right of objection

When processing your personal data on the basis of legitimate interests in accordance with Art. 6 Paragraph 1 lit. f GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR, provided there are reasons for this that arise from your particular situation or the objection is directed against direct mail. In the case of direct mail, you have a general right of objection, which we will implement without specifying a particular situation.

12 Data security and security measures

We are committed to protecting your privacy and treating your personal data confidentially. In order to avoid manipulation, loss or misuse of your data stored by us, we take extensive technical and organizational security precautions, which are regularly checked and adapted to technological progress. This includes the use of recognized encryption methods (TLS 1.2). However, we would like to point out that due to the structure of the Internet it is possible that the rules of data protection and the above. Security measures are not observed by other persons or institutions not within our area of ​​responsibility. In particular, data disclosed in unencrypted form – e.g. B. if this is done by email – be read by third parties. We have no technical influence on this. It is the responsibility of the user to protect the data provided by him against misuse by encryption or in any other way.