Privacy Policy

---

Table of Contents

1. About this privacy policy

We have written this privacy policy (version 06.04.2021-111714462) to provide you with information in accordance with the requirements of the General Data Protection Regulation (EU) 2016/679 (GDPR) as well as to explain what information we collect, how we use data and what choices you have as a visitor to this website.

Privacy policies usually sound very technical. However, this version should describe the most important things as simply and clearly as possible. Moreover, technical terms are explained in a reader-friendly manner whenever possible. We would also like to convey that we only collect and use information via this website if there is a corresponding legal basis for it. This is certainly not possible by giving very brief technical explanations, as are often standard on the Internet when it comes to data protection. We hope you find the following explanations interesting and informative. Maybe you will also find some information that you did not know yet.
Should you still have questions, we kindly ask you to follow the existing links to see further information on third-party websites, or to simply write us an email. You can find our contact information in our website’s contact page.

2. Scope of application

This privacy policy applies to all personal data processed by us in the company and to all personal data processed by companies commissioned by us (contract processors).

By personal data, we mean information within the meaning of Art. 4 No. 1 GDPR, such as the name, email address and postal address of a person. The processing of personal data ensures that we can offer and invoice our services and products, be it online or offline.

3. Legal basis

In the following data protection declaration, we provide you with transparent information on the legal principles and regulations of the GDPR, which enable us to process personal data. As far as EU law is concerned, we refer to REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of April 27, 2016. You can of course read this EU GDPR online on EUR-Lex, the access to EU law, at https://eur-lex.europa.eu/legal-content/DE/TXT/?uri=celex%3A32016R0679.

We only process your data if at least one of the following conditions applies:

1. Consent (Article 6 Paragraph 1 lit. a GDPR): You have given us your consent to process data for a specific purpose. An example would be the storage of the data you entered in a contact form.
2. Contract (Article 6 Paragraph 1 lit. b GDPR): We process your data in order to fulfill a contract or pre-contractual obligations with you. For example, if we conclude a sales contract with you, we need personal information in advance.
3. Legal obligation (Article 6 Paragraph 1 lit. c GDPR): If we are subject to a legal obligation, we will process your data. For example, we are legally required to keep invoices for bookkeeping. These usually contain personal data.
4. Legitimate interests (Article 6 Paragraph 1 lit. f GDPR): In the case of legitimate interests that do not restrict your basic rights, we reserve the right to process personal data. For example, we have to process certain data in order to be able to operate our website securely and economically efficiently. This processing is therefore a legitimate interest.

4. Rights in accordance with the General Data Protection Regulation

You are granted the following rights in accordance with the provisions of the GDPR:

• right to rectification (article 16 GDPR)
• right to erasure (“right to be forgotten“) (article 17 GDPR)
• right to restrict processing (article 18 GDPR)
• righ to notification – notification obligation regarding rectification or erasure of personal data or restriction of processing (article 19 GDPR)
• right to data portability (article 20 GDPR)
• right to object (article 21 GDPR)
• right not to be subject to a decision based solely on automated processing – including profiling – (article 22 GDPR)

If you think that the processing of your data violates the data protection law, or that your data protection rights have been infringed in any other way, you can lodge a complaint with your respective regulatory authority. For Austria this is the data protection authority, whose website you can access at https://www.data-protection-authority.gv.at/.

5. Contact details of the person responsible

If you have any questions about our privacy policy, please contact:

Armin Windhager
Margaretengürtel 76-80/4/15, 1050 Wien, Austria
Email: office@auravideoart.com

6. Webhosting

Every time you visit a website nowadays, certain information is automatically created and stored, just as it happens on this website. This data should be collected as sparingly as possible, and only with good reason. By website, we mean the entirety of all websites on a domain, i.e. everything from the homepage to the very last subpage (like this one here). By domain we mean example.uk or examplepage.com.

When you want to view a website on a screen, you use a program called a web browser. You probably know some web browsers by name: Google Chrome, Microsoft Edge, Mozilla Firefox, and Apple Safari.

This web browser has to connect to another computer where the website’s code is stored: the web server. The operation of a web server is a complicated and time-consuming task, which is why this is usually done by professional providers. These offer web hosting and thus ensure reliable and error-free storage of website data.

When the browser establishes a connection on your computer (desktop, laptop, smartphone) and while data is being transferred to and from the web server, personal data may be processed. On the one hand, your computer stores data, on the other hand, the web server must also store data for a period of time in order to ensure proper operation.

As an illustration:

Even while you are currently visiting our website, our web server – this is the computer this website is stored on, usually automatically retains data such as the below (for reasons such as operational security or for creating access statistics etc.)

• the full address (URL) of the accessed website (e. g. https://www.examplepage.uk/examplesubpage.html/)
• browser and browser version (e.g. Chrome 87)
• the operating system used (e.g. Windows 10)
• the address (URL) of the previously visited site (referrer URL) (e. g. https://www.examplepage.uk/icamefromhere.html/)
• the host name and the IP-address of the device the website is accessed from (e.g. COMPUTERNAME and 194.23.43.121)
• date and time
• so-called web server log files.

Generally, these files are stored for two weeks and are then automatically deleted. We do not pass these data to others, but we cannot exclude the possibility that this data may be looked at by the authorities in case of illegal conduct.

In short: your visit is logged by our provider (company that runs our website on servers), but we do not pass on your data!

Legal basis

The legality of the processing of personal data in the context of web hosting results from Art. 6 Para. 1 lit.f GDPR (safeguarding legitimate interests), because the use of professional hosting with a provider is necessary to keep the company on the Internet safe and user-friendly and to be able to track attacks and claims from them if necessary.

There is a contract between us and the hosting provider in accordance with Art. 28 f. GDPR, which guarantees compliance with data protection and guarantees data security.

World4you Privacy Policy

We use the web hosting provider World4You for our website. The service provider is the Austrian company World4You Internet Services GmbH, Hafenstrasse 35, 4020 Linz, Austria. You can find out more about the data processed through the use of World4You in the data protection declaration at https://www.world4you.com/de/unternehmen/datenschutzerklaerung.html.

7. Cookies

Our website uses HTTP-cookies to store user-specific data.
For your better understanding of the following Privacy Policy statement, we will explain to you below what cookies are and why they are in use.

What exactly are cookies?

Every time you surf the internet, you use a browser. Common browsers are for example Chrome, Safari, Firefox, Internet Explorer and Microsoft Edge. Most websites store small text-files in your browser. These files are called cookies.

What should not be dismissed, is that cookies are very useful little helpers. Nearly all websites use cookies. More accurately speaking these are HTTP-cookies, since there are also different cookies for other uses. Http-cookies are small files which our website stores on your computer. These cookie files are automatically put into the cookie-folder, which is like the “brain” of your browser. A cookie consists of a name and a value. Moreover, to define a cookie, one or multiple attributes must be specified.

Cookies save certain parts of your user data, such as e.g. language or personal page settings. When you re-open our website, your browser submits these “user specific” information back to our site. Thanks to cookies, our website knows who you are and offers you the settings you are familiar to. In some browsers every cookie has its own file, in others such as Firefox, all cookies are stored in one single file.

There are both first-party cookies and third-party cookies. First-party cookies are created directly by our site, while third-party cookies are created by partner-websites (e.g. Google Analytics). Every cookie is individual, since every cookie stores different data. The expiration time of a cookie also varies – it can be a few minutes, or up to a few years. Cookies are no software-programs and contain no computer viruses, trojans or any other malware. Cookies also cannot access your PC’s information.

This is an example of how cookie-files can look:

name: _ga
value: GA1.2.1326744211.152111714462-9
purpose: differentiation between website visitors
expiration date: after 2 years

A browser should support these minimum sizes:

• at least 4096 bytes per cookie
• at least 50 cookies per domain
• at least 3000 cookies in total

Which types of cookies are there?

What exact cookies we use, depends on the used services. We will explain this in the following sections of the Privacy Policy statement. Firstly, we will briefly focus on the different types of HTTP-cookies.

There are 4 different types of cookies:

Essential Cookies
These cookies are necessary to ensure the basic function of a website. They are needed when a user for example puts a product into their shopping cart, then continues surfing on different websites and comes back later in order to proceed to the checkout. Even when the user closed their window priorly, these cookies ensure that the shopping cart does not get deleted.

Purposive Cookies
These cookies collect info about the user behaviour and record if the user potentially receives any error messages. Furthermore, these cookies record the website’s loading time as well as its behaviour within different browsers.

Target-orientated Cookies
These cookies care for an improved user-friendliness. Thus, information such as previously entered locations, fonts or data in forms stay saved.

Advertising Cookies
These cookies are also known as targeting-Cookies. They serve the purpose of delivering individually adapted advertisements to the user. This can be very practical, but also rather annoying.

Upon your first visit to a website you are usually asked which of these cookie-types you want to accept. Furthermore, this decision will of course also be saved in a cookie.

How can I delete cookies?

You yourself take the decision if and how you want to use cookies. Thus, no matter what service or website cookies are from, you always have the option to delete, deactivate or only partially allow them. Therefore, you can for example block cookies of third parties but allow any other cookies.

If you want change or delete cookie-settings and would like to determine which cookies have been saved to your browser, you can find this info in your browser-settings:

Chrome: Clear, enable and manage cookies in Chrome

Safari: Manage cookies and website data in Safari

Firefox: Clear cookies and site data in Firefox

Internet Explorer: Delete and manage cookies

Microsoft Edge: Delete cookies in Microsoft Edge

If you generally do not want to allow any cookies at all, you can set up your browser in a way, to notify you whenever a potential cookie is about to be set. This gives you the opportunity to manually decide to either permit or deny the placement of every single cookie. The settings for this differ from browser to browser. Therefore, it might be best for you to search for the instructions in Google. If you are using Chrome, you could for example put the search phrase “delete cookies Chrome” or “deactivate cookies Chrome” into Google.

How is my data protected?

There is a “cookie policy” that has been in place since 2009. It states that the storage of cookies requires the user’s consent. However, among the countries of the EU, these guidelines are often met with mixed reactions. In Austria the guidelines have been implemented in § 96 section 3 of the Telecommunications Act (TKG).

If you want to learn more about cookies and do not mind technical documentation, we recommend https://tools.ietf.org/html/rfc6265, the Request for Comments of the Internet Engineering Task Force (IETF) called “HTTP State Management Mechanism”.

8. TLS encryption with https

The terms TLS, encryption and https sound very technical, which they are indeed. We use HTTPS (Hypertext Transfer Protocol Secure) to securely transfer data on the Internet.
This means that the entire transmission of all data from your browser to our web server is secured – nobody can “listen in”.

We have thus introduced an additional layer of security and meet privacy requirements through technology design Article 25 Section 1 GDPR. With the use of TLS (Transport Layer Security), which is an encryption protocol for safe data transfer on the internet, we can ensure the protection of confidential information.
You can recognise the use of this safeguarding tool by the little lock-symbol, which is situated in your browser’s top left corner in the left of the internet address (e.g. examplepage.uk), as well as by the display of the letters https (instead of http) as a part of our web address.
If you want to know more about encryption, we recommend you to do a Google search for “Hypertext Transfer Protocol Secure wiki” to find good links to further information.

9. Email-Marketing

Of course, we want to stay in contact with you and keep you in the loop of the most important news about our company. For this, we use email marketing, which is an essential part of our online marketing. If you agree to this or if it is permitted by law, we will send you newsletters, emails or other notifications. When the term “newsletter” is used in the following text, it mainly refers to emails that are sent regularly.

How can you register for our Email-Marketing?

If you want to participate in our email marketing (usually via newsletter), you usually have to register with your email address only. You will simply have to fill an online form and submit it. However, we may also ask you to fill in your title and name so we will be able to address you more personally.

Generally, the registration for newsletters is carried out with the so-called “double opt-in procedure”. After registering for our newsletter on our website, you will receive an email for you to confirm the newsletter registration. This will ensure that you own your email address and that no one registers with an email address that is not owned by them. Every single registration is stored either by us or by a notification tool we use. This is necessary for us to ensure that registration processes are legally correct. Therefore, the time of your registration, the time of confirmation of your registration and your IP address are usually retained. It will also be logged if you make changes to your stored data.

How long can we store your email address?

If you unsubscribe from our email/newsletter distribution list, we may store your address for up to three years on the basis of our legitimate interests, so that we can still prove your consent at the time. We are only allowed to process this data if we have to defend ourselves against any claims.

However, if you confirm that you have given us your consent to subscribe to the newsletter, you can submit an individual request for deletion at any time. Should you object to your consent permanently, we reserve the right to save your email address in a blacklist. We will of course keep your email address for as long as you are voluntarily subscribed to our newsletter.

On what legal basis do we operate email marketing?

Our newsletter is sent on the basis of your consent. This means that we are only allowed to send you a newsletter if you have actively registered for it beforehand. If consent is not required, newsletters will be sent on the basis of the legitimate interest in direct marketing, provided it is legally permitted. We record your registration process for the purpose of using it as proof that it is in compliance with our laws.

What is in our newsletters?

Of course, we do not want to bother you with our newsletter in any way. Therefore, we really strive to offer only relevant and interesting content, such as more information about our company, our services or our products. Since we are continuously improving our offers, our newsletter will always update you on any news or special offers and lucrative promotions.

We commission a service provider with a professional mailing tool for our email marketing. We do this in order to be able to offer you our newsletter fast and securely.

Which data are retained?

If you subscribe to our newsletter via our website, you will confirm your membership in our email list via an email that we will send to you. In addition to your IP address and email address, your name, address and telephone number may also be saved. However, this will only be done if you agree to this data retention. Moreover, information about your device or the type of content you prefer on our website may also be stored. In the “Automatic data storage” section you can find out more about how your data is stored when you visit a website.

How can I cancel my subscription?

You have the option to cancel your newsletter subscription at any time. All you have to do is revoke your consent to the newsletter subscription. This usually only takes a few minutes or a few clicks. Most of the time you will find a link directly in our newsletter, with which you will be able to cancel the subscription. Should you not be able to find the link in the newsletter, you can contact us by email and we will cancel your newsletter subscription for you.

The Newsletter Plugin Privacy Policy

We use The Newsletter Plugin, a service for our e-mail marketing, on our website. The service provider is the Italian company Web Agile S.a.s. di Fietta Roberto. You can find out more about the data processed by using The Newsletter Plugin in the privacy policy at https://www.thenewsletterplugin.com/privacy.

10. Google Analytics privacy policy

We use the tracking and analysis tool Google Analytics (GA) of the US-American company Google LLC (1600 Amphitheatre Parkway Mountain View, CA 94043, USA). Google Analytics collects data on your actions on our website. Whenever you click a link for example, this action is saved in a cookie and transferred to Google Analytics. With the help of reports which we receive from Google Analytics, we can adapt our website and our services better to your wishes. In the following, we will explain the tracking tool in more detail, and most of all, we will inform you what data is saved and how you can prevent this.

What is Google Analytics?

Google Analytics is a tracking tool with the purpose of conducting data traffic analysis of our website. For Google Analytics to work, there is a tracking code integrated to our website. Upon your visit to our website, this code records various actions you perform on your website. As soon as you leave our website, this data is sent to the Google Analytics server, where it is stored.

Google processes this data and we then receive reports on your user behaviour. These reports can be one of the following:

• Target audience reports: With the help of target audience reports we can get to know our users better and can therefore better understand who is interested in our service.
• Advertising reports: Through advertising reports we can analyse our online advertising better and hence improve it.
• Acquisition reports: Acquisition reports provide us helpful information on how we can get more people enthusiastic about our service.
• Behaviour reports: With these reports, we can find out how you interact with our website. By the means of behaviour reports, we can understand what path you go on our website and what links you click.
• Conversion reports: A conversion is the process of leading you to carry out a desired action due to a marketing message. An example of this would be transforming you from a mere website visitor into a buyer or a newsletter subscriber. Hence, with the help of these reports we can see in more detail, if our marketing measures are successful with you. Our aim is to increase our conversion rate.
• Real time reports: With the help of these reports we can see in real time, what happens on our website. It makes us for example see, we can see how many users are reading this text right now.

Why do we use Google Analytics on our website?

The objective of our website is clear: We want to offer you the best possible service. Google Analytics’ statistics and data help us with reaching this goal.

Statistically evaluated data give us a clear picture of the strengths and weaknesses of our website. On the one hand, we can optimise our page in a way, that makes it easier to be found by interested people on Google. On the other hand, the data helps us to get a better understanding of you as our visitor. Therefore, we can very accurately find out what we must improve on our website, in order to offer you the best possible service. The analysis of that data also enables us to carry out our advertising and marketing measures in a more individual and more cost-effective way. After all, it only makes sense to show our products and services exclusively to people who are interested in them.

What data gets stored by Google Analytics?

With the aid of a tracking code, Google Analytics creates a random, unique ID which is connected to your browser cookie. That way, Google Analytics recognises you as a new user. The next time you visit our site, you will be recognised as a “recurring” user. All data that is collected gets saved together with this very user ID. Only this is how it is made possible for us to evaluate and analyse pseudonymous user profiles.

Your interactions on our website are measures by tags such as cookies and app instance IDs. Interactions are all kinds of actions that you perform on our website. If you are also using other Google systems (such as a Google Account), data generated by Google Analytics can be linked with third-party cookies. Google does not pass on any Google Analytics data, unless we as the website owners authorise it. In case it is required by law, exceptions can occur.

The following cookies are used by Google Analytics:

Name: _ga
Value:2.1326744211.152111714462-5
Purpose: By deafault, analytics.js uses the cookie _ga, to save the user ID. It generally serves the purpose of differenciating between website visitors.
Expiration date: After 2 years

Name: _gid
Value:2.1687193234.152111714462-1
Purpose: This cookie also serves the purpose of differentiating between website users
Expiration date: After 24 hours

Name: _gat_gtag_UA_
Value: 1
Verwendungszweck: It is used for decreasing the demand rate. If Google Analytics is provided via Google Tag Manager, this cookie gets the name _dc_gtm_ .
Expiration date: After 1 minute

Name: AMP_TOKEN
Value: No information
Purpose: This cookie has a token which is used to retrieve the user ID by the AMP Client ID Service. Other possible values suggest a logoff, a request or an error.
Expiration date: After 30 seconds up to one year

Name: __utma
Value:1564498958.1564498958.1564498958.1
Purpose: With this cookie your behaviour on the website can be tracked and the site performance can be measured. The cookie is updated every time the information is sent to Google Analytics.
Expiration date: After 2 years

Name: __utmt
Value: 1
Purpose: Just like _gat_gtag_UA_ this cookie is used for keeping the requirement rate in check.
Expiration date: Afer 10 minutes

Name: __utmb
Value:3.10.1564498958
Purpose: This cookie is used to determine new sessions. It is updated every time new data or information gets sent to Google Analytics.
Expiration date: After 30 minutes

Name: __utmc
Value: 167421564
Purpose: This cookie is used to determine new sessions for recurring visitors. It is therefore a session cookie, and only stays saved until you close the browser again.
Expiration date: After closing the browser

Name: __utmz
Value: m|utmccn=(referral)|utmcmd=referral|utmcct=/
Purpose: This cookie is used to identify the source of our website’s visitor number. This means, that the cookie saves information on where you came to our website from. This could be another site or an advertisement.
Expiration date: After 6 months

Name: __utmv
Value: No information
Purpose: The cookie is used to store custom user data. It gets updated whenever information is sent to Google Analytics.
Expiration date: After 2 years

Note: This list is by no means exhaustive, since Google are repeatedly changing the use of their cookies.

Below we will give you an overview of the most important data that can be evaluated by Google Analytics:

Heatmaps: Google creates so-called Heatmaps an. These Heatmaps make it possible to see the exact areas you click on, so we can get information on what routes you make on our website.

Session duration: Google calls the time you spend on our website without leaving it session duration. Whenever you are inactive for 20 minutes, the session ends automatically.

Bounce rate If you only look at one page of our website and then leave our website again, it is called a bounce.

Account creation: If you create an account or make an order on our website, Google Analytics collects this data.

IP-Address: The IP address is only shown in a shortened form, to make it impossible to clearly allocate it.

Location: Your approximate location and the country you are in can be defined by the IP address. This process is called IP location determination.

Technical information: Information about your browser type, your internet provider and your screen resolution are called technical information.

Source: Both, Google Analytics as well as ourselves, are interested what website or what advertisement led you to our site.

Further possibly stored data includes contact data, potential reviews, playing media (e.g. when you play a video on our site), sharing of contents via social media or adding our site to your favourites. This list is not exhaustive and only serves as general guidance on Google Analytics’ data retention.

How long and where is the data saved?

Google has servers across the globe. Most of them are in America and therefore your data is mainly saved on American servers. Here you can read detailed information on where Google’s data centres are located: https://www.google.com/about/datacenters/inside/locations/?hl=en

Your data is allocated to various physical data mediums. This has the advantage of allowing to retrieve the data faster, and of protecting it better from manipulation. Every Google data centre has respective emergency programs for your data. Hence, in case of a hardware failure at Google or a server error due to natural disasters, the risk for a service interruption stays relatively low.

Google Analytics has a 26 months standardised period of retaining your user data. After this time, your user data is deleted. However, we have the possibility to choose the retention period of user data ourselves. There are the following five options:

• Deletion after 14 months
• Deletion after 26 months
• Deletion after 38 months
• Deletion after 50 months
• No automatical deletion

As soon as the chosen period is expired, the data is deleted once a month. This retention period applies to any of your data which is linked to cookies, user identification and advertisement IDs (e.g. cookies of the DoubleClick domain). Any report results are based on aggregated information and are stored independently of any user data. Aggregated information is a merge of individual data into a single and bigger unit.

How can I delete my data or prevent data retention?

Under the provisions of the European Union’s data protection law, you have the right to obtain information on your data and to update, delete or restrict it. With the help of a browser add on that can deactivate Google Analytics’ JavaScript (ga.js, analytics.js, dc.js), you can prevent Google Analytics from using your data. You can download this add on at https://tools.google.com/dlpage/gaoptout?hl=en-GB. Please consider that this add on can only deactivate any data collection by Google Analytics.

Should you generally want to deactivate, delete or manage all cookies (independently of Google Analytics), you can use one of the guides that are available for any browser:

Chrome: Clear, enable and manage cookies in Chrome

Safari: Manage cookies and website data in Safari

Firefox: Clear cookies and site data in Firefox

Internet Explorer: Delete and manage cookies

Microsoft Edge: Delete cookies in Microsoft Edge

Google Analytics is an active participant of the EU-U.S. Privacy Shield Framework, which regulates correct and save transfer of personal data.
You can find more information on this at https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&. We hope we were able to make you more familiar with the most important information on Google Analytics’ data processing. If you want to learn more about the tracking service, we recommend both of the following links: https://marketingplatform.google.com/about/analytics/terms/gb/ and https://support.google.com/analytics/answer/6004245?hl=en.

11. WooCommerce privacy policy

We have integrated the open-source shop system WooCommerce to our website as a plugin. This WooCommerce plugin is based on the content management system WordPress, which is a subsidiary company of Automattic Inc. (60 29th Street #343, San Francisco, CA 94110, USA). Through the implemented functions, data are stored and sent to Automattic Inc where they are processed. In this privacy policy we want to inform you on what data this is, how the network uses this data and how you can manage or prevent data retention.

What is WooCommerce?

WooCommerce is an online shop system that has been part of the WordPress directory since 2011 and was specially developed for WordPress websites. It is a customisable, open source eCommerce platform that is based on WordPress. It has been integrated into our website as a WordPress plugin.

Why do we use WooCommerce on our website?

We use this practical online shop system, to be able to offer you our physical or digital products or services in the best possible way on our website. The aim is to give you easy access to our offer, so that you can quickly and easily navigate to the products you want. With WooCommerce we have found a good plugin that meets our requirements for an online shop.

What data is stored by WooCommerce?

Information that you actively enter to a text field in our online shop can be collected and stored by WooCommerce or Automattic. Hence, if you register with us or order a product, Automattic may collect, process and save this data. In addition to email address, name or address, this can also be your credit card or billing information. Subsequently, Automattic can also use this information for their own marketing campaigns.

There is also evidence that Automattic automatically collects information on you in so-called server log files:

• IP-address
• Browser information
• Pre-set language settings
• Date and time of the web access

Moreover, WooCommerce sets cookies in your browser and uses technologies such as pixel tags (web beacons), to for example clearly identify you as a user and to be able to offer interest-based advertising. WooCommerce uses several different cookies, which are placed depending on the user action. This means that if you for example add a product to the shopping cart, a cookie is set so that the product remains in the shopping cart when you leave our website and come back later.

Below we want to show you an example list of possible cookies that may be set by WooCommerce:

Name: woocommerce_items_in_cart
Value: 1
Purpose:This cookie helps WooCommerce to determine when the contents of the shopping cart change.
Expiry date: after end of session

Name: woocommerce_cart_hash
Value: 447c84f810834056ab37cfe5ed27f204111714462-7
Purpose:This cookie is also used to recognise and save the changes in your shopping cart.
Expiry date: after end of session

Name: wp_woocommerce_session_d9e29d251cf8a108a6482d9fe2ef34b6
Value: 1146%7C%7C1589034207%7C%7C95f8053ce0cea135bbce671043e740111714462-4aa
Purpose:This cookie contains a unique identifier for you to allow the shopping cart data to be found in the database.
Expiry date: after 2 days

How long and where is the data stored?

Unless there is a legal obligation to keep data for a longer period, WooCommerce will delete your data if it is no longer needed for the purposes it was saved for. Server log files for example, the technical data for your browser and your IP address will be deleted after about 30 days. This is how long Automattic use the data to analyse the traffic on their own websites (for example all WordPress websites) and to fix possible problems. The data is stored on Automattic’s American servers.

How can I delete my data and prevent data retention?

You have the right to access your personal data anytime, as well as to object to it being used and processed. You can also lodge a complaint with a state supervisory authority anytime.

You can also manage, delete or deactivate cookies individually in your browser. However, please note that deactivated or deleted cookies may have a negative impact on the functions of our WooCommerce online shop. Depending on the browser you use, managing cookies differs slightly. Below you will find links to the instructions for the most common browsers:

Chrome: Clear, enable and manage cookies in Chrome

Safari: Manage cookies and website data in Safari

Firefox: Clear cookies and site data in Firefox

Internet Explorer: Delete and manage cookies

Microsoft Edge: Delete cookies in Microsoft Edge

Automattic is an active participant in the EU-U.S. Privacy Shield Framework, which regulates the correct and secure transfer of personal data. More information can be found at https://www.privacyshield.gov/participant?id=a2zt0000000CbqcAAC.
You can find more details on the privacy policy, as well as on which data is collected by WooCommerce in what way at https://automattic.com/privacy/ . Moreover, you can find general information on WooCommerce at https://woocommerce.com/.

12. Stripe privacy policy

We use a payment tool from the American technology company and online payment service Stripe on our website. Stripe Payments Europe (Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland) is responsible for customers within the EU.

What is Stripe?

The technology company Stripe offers payment solutions for online payments. With Stripe it is possible to accept credit and debit card payments in our webshop. Stripe takes care of the entire payment process. A big advantage of Stripe is that you never have to leave our website or shop during the payment process and payment is processed very quickly. If you pay with the conventional payment methods on this page, the data required for the payment process will be forwarded to Stripe and saved.

What data does Stripe store?

If you choose Stripe as your payment method, your personal data will also be transmitted to Stripe and stored there. These data include the payment method (i.e. credit card, debit cards or account number), bank code, currency, the amount and the date of payment. In the case of a transaction, your name, your e-mail address, your billing or shipping address and sometimes your transaction history can also be transmitted. These data are necessary for authentication. Furthermore, Stripe can also record your name, address, telephone number and your country in addition to technical data about your device (such as IP address) for fraud prevention, financial reporting and in order to be able to offer its own services in full.

Stripe does not sell any of your information to independent third parties, such as marketing agencies or other companies that have nothing to do with the Stripe company. However, the data can be forwarded to internal departments, a limited number of external Stripe partners or to comply with legal regulations. Stripe also uses cookies to collect data. Here is a selection of cookies that Stripe can set during the payment process:

Name: m
Purpose: This cookie appears when you select the payment method. It saves and recognizes whether you are accessing our website via a PC, tablet or smartphone.
Expiry Date: after 2 years

Name: __stripe_mid
Purpose: This cookie is required to carry out a credit card transaction. To do this, the cookie saves your session ID.
Expiry Date: after 1 year

Name: __stripe_sid
Purpose: This cookie also saves your ID and is used by Stripe for the payment process on our website.
Expiry Date: after end of session

How long and where is the data stored?

Personal data are generally stored for the duration of the service provision. This means that the data will be stored until we terminate the cooperation with Stripe. However, in order to fulfill the legal and official obligations, Stripe can also store personal data for the duration of the service provision. Since Stripe is a global company, the data can also be stored in every country where Stripe offers services. In this way, data can also be stored outside of your country, for example in the USA.

How can I delete my data and prevent data retention?

You always have the right to information, correction and deletion of your personal data. If you have any questions, you can always contact the Stripe team at https://support.stripe.com/contact/email.

Cookies that Stripe use for their functions can be deleted, deactivated or managed in your browser. This works in different ways depending on which browser you are using. Please note, however, that the payment process may then no longer work. The following instructions show how to manage cookies in your browser:

Chrome: Clear, enable and manage cookies in Chrome

Safari: Manage cookies and website data in Safari

Firefox: Clear cookies and site data in Firefox

Internet Explorer: Delete and manage cookies

Microsoft Edge: Delete cookies in Microsoft Edge

Legal basis

Successful use of the Stripe service requires your consent (Art. 6 Para. 1 lit. a GDPR), insofar as the use of cookies is necessary.

Stripe processes your data among others in the USA. We would like to point out that, in the opinion of the European Court of Justice, there is currently no adequate level of protection for data transfer to the USA. This can be associated with various risks to the legality and security of the data processing.

Stripe uses so-called standard contractual clauses (= Art. 46, Paragraphs 2 and 3 GDPR) as the basis for data processing by recipients based in third countries (outside the European Union, Iceland, Liechtenstein, Norway, especially in the USA) or transfer there. Standard Contractual Clauses are templates provided by the EU Commission and are intended to ensure that your data comply with European data protection standards even if they are transferred to third countries (such as the USA) and stored there. With these clauses, Stripe undertakes to comply with the European level of data protection when processing your relevant data, even if the data is stored, processed and managed in the USA. These clauses are based on an implementation decision of the EU Commission. You can find the decision and the corresponding standard contractual clauses here: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de

You can find more information about the standard contractual clauses and the data that are processed through the use of Stripe in the privacy policy at https://stripe.com/at/privacy.

13. Apple Pay privacy policy

We use Apple Pay, an online payment service, on our website. The service provider is the American company Apple Inc., Infinite Loop, Cupertino, CA 95014, USA. You can find out more about the data processed through the use of Apple Pay in the privacy policy at https://www.apple.com/legal/privacy/de-ww/.

14. Privacy preferences

Change privacy settings

Privacy settings history

All texts are copyrighted.

Source: Created with the Datenschutz Generator by AdSimple