BURN-IN (Dolzer & Partner OG) takes data protection seriously and always endeavors to collect and use all personal data in accordance with the applicable data protection law.
This privacy policy clarifies the nature, scope and purpose of the processing of personal data within our homepages, webshop, newsletter, advertising & marketing and other external social media presences in relation to the terms "processing" and "controller" in accordance with Art. 4 of the General Data Protection Regulation (GDPR).
Data protection officer
Dolzer & Partner Agentur für strategische Markenentwicklung OG
Headquarters: 4020 Linz, Beutlmayrweg 3
www.burn-in.at
datenschutz@burn-in.at
I. General
The protection of your personal data is of particular concern to BURN-IN. We therefore process your personal data exclusively on the basis of the statutory provisions. Personal data is data that relates to an identified or identifiable data subject, such as name, date of birth, address, telephone number, etc.
In this data protection information, we inform you about the most important aspects of our data processing. We only process your data for the purposes of contract performance/contract initiation and contract processing or if you have expressly given us your consent to do so or if there is a legitimate interest and your interests do not conflict with this (e.g. IT security, customer loyalty, website maintenance) or if we are authorized to do so by law.
We process the personal data that is necessary for the individual purpose of use.
- Stammdaten: Contact person, company, address, contact details (such as telephone number, e-mail address, homepage), target group specifics
- Information about the type and content of the contractual relationship, Customer number, purchasing behavior
- Payment data: Bank details, payment methods, delivery data, receipt data
- Other personal data: such as identification or Passwords, date of birth, interests, photos
- Correspondence, contracts, Applications
- Cookies, access data, Google Analytics, social plug-ins
There is no obligation to actually provide the data that we ask you to provide. However, if you do not do this, you may not be able to use all the functions of our website or our services.
We store your data until the end of the business relationship, beyond that only as long as statutory retention periods exist (company and/or tax law retention obligations of currently 7 years) or as long as legal claims from the contractual relationship can be asserted against us or by us. This may be for a period of 30 years for reasons of tort law.
If we transfer your data to third parties for further processing, order processing contracts are in place. Your personal data will only be processed within the EU/EEA. Your personal data will only be used internally and will not be sold to third parties.
The BURN-IN backup guardian manages your data in the in-house BURN-IN data repository.
Our credo: Data security | transparency | discretion.
II. processing purposes
2.1 BURN-IN newsletter, advertising and information emails
We regularly inform you by email through our newsletter and information emails. This is only done on the basis of your express consent (legal basis for processing is Art. 6 para. 1 lit. a GDPR).
Your email address and your IP address are processed for the newsletter and the advertising and information emails.
We work with tracking pixels to optimize our online offering. A tracking pixel is a miniature graphic that is embedded in emails that are sent in HTML format to enable log file recording and log file analysis. This allows a statistical evaluation of the success or failure of online marketing campaigns to be carried out. Based on the embedded tracking pixel, we can recognize whether and when an e-mail was opened by a data subject and which links in the e-mail were accessed by the data subject. Such personal data collected via the tracking pixels contained in the newsletters and advertising or info mails are stored and evaluated in order to optimize the newsletter dispatch and advertising or info mail dispatch and to adapt the content of future newsletters even better to the interests of the customers. This processing is carried out on the basis of legitimate interests in accordance with Art. 6 para. 1 lit. f GDPR (improvement and attractiveness of service offer).
You can revoke your consent to receive the newsletter and the advertising or info mail at any time by sending a short written message to our contact details. In this case, it is unfortunately not possible for us to continue to provide you with newsletters and advertising or information emails. Your data will be deleted if you withdraw your consent. Only the absolutely necessary data will be stored on the basis of the applicable legal provisions or retention obligations for the purpose of proving consent or your revocation.
2.2 BURN-IN online depot
We process the personal data you provide in the course of your purchase in our online depot (web store) (e.g. your master data such as name, address, contact details and your payment data such as bank details or credit card details, etc.). Some of this data (name, address, bank details or credit card details, number and type of goods purchased, password) is required to fulfill the contract (purchase contract, management contract, co-op contract, marketing and PR contract) or to carry out pre-contractual measures. Without this data, we cannot conclude the contracts with you or provide our services.
The correspondence we have with you and the contracts we have concluded are also processed to fulfill the contract. Any additional data collected is voluntary and is used to optimize our range of services and for statistical purposes or to optimize our website and product portfolio. This data processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR (contract performance/contract initiation) with regard to the data necessary for the performance of the contract, otherwise on the basis of our legitimate interest in optimizing our website and our product portfolio (Art. 6 para. 1 lit. f GDPR).
After the purchase process has been canceled, the data stored by us will be deleted. If a contract is concluded, we store your data until the end of the business relationship, beyond that only as long as statutory retention periods exist or as long as legal claims from the contractual relationship can be asserted against us or by us. This may be for a period of 30 years for reasons of tort law.
2.3 BURN-IN contract processing | customer relationship | delivery service
If you make purchases from us or conclude contracts with us, we need your personal data (invoice, delivery bill, contract) for contract processing, which we process to fulfill the contract.
We process the personal data provided by you (master data, payment data, other personal data, correspondence) for the purpose of your purchase or for the purpose of fulfilling our contractual obligations towards you.
The legal basis for the processing of your data is Art. 6 para. 1 lit. b GDPR (contract fulfillment).
Your data will be stored until we have fulfilled our obligation. In addition, as long as statutory retention periods exist (company and/or tax law retention obligations of currently 7 years) or as long as legal claims from the contractual relationship can be asserted against us or by us. However, data will be stored for a maximum period of 30 years if it is required to assert or defend against claims for damages.
We offer our customers a delivery service and transport your purchased goods conveniently to your home. For this service, we process the necessary data (name, address, telephone number and possibly a contact person).
The legal basis for the processing of your data is Art. 6 para. 1 lit. b GDPR (fulfillment of contract).
Your data will be stored until the fulfillment of our obligation. In addition, as long as statutory retention periods exist (company and/or tax law retention obligations of currently 7 years) or as long as legal claims from the contractual relationship can be asserted against us or by us. However, data will be stored for a maximum period of 30 years if it is required to assert or defend against claims for damages.
2.4 BURN-IN business relationship | supplier or business partner
If you have a business relationship with us as a supplier or other business partner, you provide us with your personal data to process a business transaction.
We process the personal data you provide (in particular your master data such as company, contact details including e-mail and telephone, contact person, your bank details, etc.) for the purpose of processing the contract.
We also process the other documents created and personal data disclosed in the course of the business transaction (such as in particular the number and type of goods purchased, payment amount, receipt data, delivery date, contracts, data on the inspection of goods, correspondence, etc.).
The legal basis for the processing of your personal data is Art. 6 para. 1 lit. b GDPR (contract fulfillment).
Your personal data will be stored for as long as statutory retention periods exist (company and/or tax law retention obligations of currently 7 years) or as long as legal claims arising from the contractual relationship can be asserted against us or by us. However, data will be stored for a maximum period of 30 years if it is required to assert or defend against claims for damages.
2.5 Business relationship | General contact with BURN-IN
When you contact us, we process the personal data you provide for the respective purpose, in any case name, address, contact details and correspondence.
Data processing takes place depending on the request for the necessary fulfillment of the contract / contract initiation within the meaning of Art. 6 para. 1 lit. b GDPR, on the basis of legitimate interests within the meaning of Art. 6 para. 1 lit. f GDPR or on the basis of a legal obligation within the meaning of Art. 6 para. 1 lit. c GDPR.
The data will be stored until the end of the business case and beyond that for as long as statutory retention periods exist or as long as legal claims can be asserted against us or by us arising from the business case, but for no longer than 30 years.
2.6 BURN-IN marketing purposes
We also use your data for our own marketing purposes within the scope of the statutory provisions. Your individual needs are important to us and we try to provide only information that is relevant to you. To do this, we use findings from our business relationship (including our internal database) and internal data analysis.
We therefore analyze and process:
- data from the business relationship with customers to select target groups for marketing activities
- evaluate our marketing activities, to measure and evaluate the effectiveness and relevance of our advertising
- Information that we collect when you visit the website in order to further improve and develop the content of the website and our product portfolio and to inform you about the products that are of interest to you
Your data is anonymized for processing for marketing purposes. For marketing purposes we process: Name, address, head office/branch, subject of service, demand interest, purchase classification, historical marketing data.
Your data is collected to analyze purchasing behavior in order to ideally present you with advertising content that is of interest to you and to improve our product offering. The processing of your anonymized data is based on our legitimate interest (Art. 6 para. 1 lit. f GDPR) in presenting you with interesting products and improving our product portfolio. Under no circumstances does the data processing have any legal effect on you or affect you in any other similar way.
You can object to the analysis or use of your personal data for the aforementioned purposes at any time.
We do not store your data for longer than we need it for the aforementioned processing purposes. In any case, we will delete this data when you unsubscribe from the newsletter and email correspondence.
2.7 Image rights
By registering for our events, you agree that you may be included in photo and video recordings. These will be used exclusively for reporting purposes and to promote BURN-IN events. Excluded from this are images or videos that depict you in a discriminatory manner.
III. Disclosure of data
The protection of your data is very important to us.
Within our company, those persons/offices that require the data for operational or organizational reasons or to fulfil our contractual and legal obligations will have access to your data.
Data security
Transparency
Discretion
It may be necessary to forward your data to external bodies due to legal obligations or for operational reasons. These include public bodies and authorities, courts, lawyers, tax consultants, auditors, logistics companies, media companies, printers, trade fair organizers, sales and marketing.
When we pass on your data, order processing contracts are concluded with the service providers. Your personal data will only be processed within the EU/EEA.
No sale of your personal data to third parties.
IV. Cookies, access data, Google Analytics
4.1 Basic information on the use of cookies
Our website uses cookies. These are small text files that do not cause any damage and are stored on your end device with the help of the browser.
We use cookies to optimize the design of our website. Cookies store the IP data of the connection owner, as well as the name, address, account, number and type of goods purchased, price, date of purchase, e-mail address, password and telephone number. The data processing is based on our legitimate interest (online service offer - Art. 6 para. 1 lit. f GDPR).
They enable us to recognize your browser on your next visit. If you do not want this, you can set up your browser so that it informs you about the setting of cookies and you only allow this in individual cases. If cookies are deactivated, the functionality of our website may be limited.
Which cookies are stored?
A brief overview of which cookies are stored.
- ga cookie: To distinguish users, expires every two years
- gat cookie: To throttle the request rate, expires every 10 minutes
- Session cookies: Websites have no memory of their own. Session cookies allow your movements to be tracked across pages so that you do not have to re-enter information that you have already entered (shopping cart).
We use session cookies to ensure that you are recognized when you move from one page to the next and that all data you enter during your visit is cached. The data is stored for 3 months.
The cookies remain stored on your end device until you delete them.
4.2 Processing of access data
We store the following data in order to optimize our offer for you:
- Browsertyp/-version
- verwendetes Betriebssystem
- Referrer URL (last visited page)
- Hostname of the accessing computer (IP-Adresse)
- Uhrzeit der Serveranfrage
- Transaktionsdaten
- Segmentation
This data is statistically analyzed (increasing user-friendliness, error minimization, server optimization).
The legal basis for the processing of access data is the legitimate interest (online service offer and data security; Art. 6 para. 1 lit. f GDPR). The data is stored for a maximum of 3 months.
4.3 Use of Google Analytics
We use Google Analytics, a web analytics service provided by Google Inc. based in Mountain View, Santa Clara County (California, USA) ("Google"). Google uses cookies. The information generated by the cookie about the use of the online offer by users is usually transmitted to a Google server in the USA and stored there.
Google will use this information on our behalf to evaluate the use of our online offer by users, to compile reports on the activities within this online offer and to provide us with further services associated with the use of this online offer and the use of the Internet. Pseudonymous user profiles of the users can be created from the processed data.
We only use Google Analytics with activated IP anonymization. This means that the IP address of users is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. The IP address transmitted by the user's browser is not merged with other Google data.
Users can prevent the storage of cookies by setting their browser software accordingly; users can also prevent Google from collecting the data generated by the cookie and relating to their use of the online offer and from processing this data by Google by downloading and installing the browser plug-in available under the following link: tools.google.com/dlpage/gaoptout.
For more information on the use of data for advertising purposes by Google, setting and objection options, please visit Google's websites: "Data use by Google when you use our partners' websites or apps", "Data use for advertising purposes", "Manage information Google uses to show you ads" and "Control what ads Google shows you".
The legal basis for the use of Google Analytics is the legitimate interest (improvement of online services) pursuant to Art. 6 para. 1 lit. f GDPR.
V. Social plugins
Our website uses the following social plugins:
- facebook.com, Facebook Inc, 1601 S. California Ave, Palo Alto, CA 94304, USA (short: "Facebook")
- youtube.com, YouTube LLC, 901 Cherry Ave, San Bruno, CA 94066, USA (short: "YouTube")
- instagram.com, Instagram LLC, 1601 Willow Rd, Menlo Park, CA 94025, USA (short: "Instagram")
The plugins are marked with a Facebook, YouTube and Instagram logo. When you visit a page on our website that contains such a plugin, your browser establishes a direct connection with the Facebook, YouTube or Instagram servers. The content of the plugin is transmitted by Facebook, YouTube or Instagram directly to your browser, which integrates it into the website. By integrating the plugins, Facebook, YouTube or Instagram receive the information that you have accessed the corresponding page of our website. If you are logged in to Facebook, YouTube or Instagram, they can assign the visit to your respective account. If you interact with the plugins, the corresponding information is transmitted directly from your browser to Facebook, YouTube or Instagram and stored there. The purpose and scope of the data collection and the further processing and use of the data by Facebook, YouTube or Instagram as well as your rights in this regard and setting options to protect your privacy can be found in the data protection information of the respective operators. If you do not want Facebook, YouTube or Instagram to collect data about you via our website, you must log out of them before visiting our website.
VI. Your rights
Compliance with data protection regulations is very important to us. Provided the legal requirements are met, you have the right to
- to obtain information about whether and what personal data we have stored about you
- to request that we rectify and complete your personal data, which is inaccurate or not processed in accordance with the law
- to obtain from us the erasure of personal data concerning you
- to obtain from us the erasure of personal data concerning you to restrict the processing of your personal data
- in the case of data processing that is based on Art. 6 para. 1 lit. e or f GDPR, for reasons arising from your particular situation, to object
- to withdraw the consent previously given for the processing
- to request data portability
- the identity of third parties, to whom your personal data is transferred
- to lodge a complaint with the competent authority (Austrian Data Protection Authority, Barichgasse 40-42, 1030 Vienna)
Please contact our address below to enforce your rights.
We are also happy to answer your questions about the protection of your data in person.
Dolzer & Partner Agentur für strategische Markenentwicklung OG
Head office: 4020 Linz, Beutlmayrweg 3
Vienna branch: BURN-IN Galerie und Denkfabrik, 1040 Vienna, Argentinierstraße 53
www.dolzer.at
www.burn-in.at
datenschutz@burn-in.at
VII. Links to other homepages
Our homepage contains links to homepages of third parties. The inclusion of external links does not mean that we adopt the content behind the reference or link as our own. The respective homepages are subject to the liability of the respective operators. We have no influence whatsoever on the current and future design and content of the linked pages or on compliance with data protection regulations by the operators of the external websites.
Enable newsletter subscription
VIII. Further links
Artwork: Eva Pisa | BURN-IN security guard from the Wertpapier series