Data protection
1000 Steine GesBR
1. General
The legally compliant handling of personal data, in particular with regard to data processing, security and confidentiality, has the highest priority at 1000 Steine. 1000 Steine always processes personal data in accordance with the applicable data protection regulations.
In this data protection declaration, 1000 Steine provides information about the handling of personal data and the rights of data subjects.
Personal data is any information relating to an identified or identifiable natural person.
2. Name and address of the person responsible for processing
1000 Steine GesbR (“1000 Steine ”)
Mürzsprungstrasse 3a, 2102 Bisamberg
Website: https://www.1000.steine.at/
Email: office@1000steine.at
3. Use of the 1000 Steine Website
In principle, the 1000 Steine website can be used without providing any personal data. In doing so, general data and information are recorded as standard (e.g. date and time of access, IP address) and stored in the server log files, without any conclusions being drawn about the person concerned
4. Contacting 1000 Steine
1000 Steine can be contacted in particular via email or a contact form on the 1000 Steine website.
If contact is made, 1000 Steine stores the data provided for processing the request for six months.
-
Data categories:
-
contact details
-
user data
-
-
Purpose of processing:
-
communication with users
-
processing of inquiries
-
Sending information about 1000 Steine products
-
-
Legal basis:
-
consent
-
Performance of Contract
-
5. Webshop Purchases
1000 Steine supports payment by credit and debit cards, Klarna and Apple Pay to process online shop purchases.
The data provided by the person concerned will be processed to process the respective process. If a contract is concluded, the data will be stored for seven years.
The data requested includes in particular your name, e-mail address, bank details, billing and delivery address.
-
Data categories:
-
user data
-
customer data
-
order data
-
contact details
-
bank details
-
-
Purpose of processing:
-
Provision of Products
-
processing of purchases
-
billing
-
-
Legal basis:
-
Performance of Contract
-
consent
-
Legal Obligation
-
6. Theme uploads
Users have the option of uploading motifs to the 1000 Steine website in order to subsequently have them displayed on 1000 Steine products.
For this process, 1000 Steine processes any personal data contained in such a motif in order to be able to offer the corresponding products.
By uploading a motif, the uploading customers declare that no (data protection) rights of third parties will be violated by the processing of this data.
-
Data categories:
-
Pictures/photographs of natural persons
-
-
Purpose of processing:
-
Provision of Products
-
processing of purchases
-
billing
-
-
Legal basis:
-
Performance of Contract
-
consent
-
7. Data Storage
If necessary, 1000 Steine processes personal data for the duration of the business relationship (contract initiation, processing and termination).
1000 Steine processes personal data beyond this period if there is a legal storage and/or documentation obligation, processing is necessary to assert, exercise or defend legal claims, further processing has been consented to or further processing is permitted by law.
8. Data Transfer
If 1000 Steine has commissioned processors to provide certain services (e.g. IT service providers), 1000 Steine will transmit to these processors the personal data that the processors need to provide the service. The processors are prohibited from processing the personal data for their own purposes.
1000 Steine only transmits personal data to third parties who are not processors if there is a valid legal basis for this and the purposes of the data transmission are specified in advance.
9. Rights of the data subject
9.1 Right to information
A data subject has the right to request confirmation from 1000 Steine as to whether personal data relating to them is being processed. If this is the case, the person concerned has a right to information about this personal data and the information specified in Art. 15 Para. 1 DSGVO.
9.2 Right to Rectification
A data subject has the right to request 1000 Steine to correct their inaccurate personal data.
9.3 Right to erasure
A data subject has the right to request 1000 Steine to delete their personal data, provided that the requirements of Art. 17 GDPR are met.
9.4 Right to Restriction of Processing
A data subject has the right to request that 1000 Steine restrict the processing if
-
the accuracy of the personal data is contested by the data subject, for a period enabling 1000 Steine to verify the accuracy of the personal data;
-
the processing is unlawful and the data subject refuses to have the personal data deleted and instead requests that the use of the personal data be restricted;
-
1000 Steine no longer needs the personal data for the purposes of processing, but the data subject needs them to assert, exercise or defend legal claims; or
-
the data subject has lodged an objection to the processing pursuant to Art. 21 (1) GDPR pending the verification whether 1000 Steine’s legitimate grounds override those of the data subject.
9.5 Right to Object
According to Art. 21 GDPR, a data subject has the right to object to the processing of their personal data if the processing of personal data
-
takes place to protect the legitimate interests of 1000 Steine. 1000 Steine will not process the data if the data subject has an overriding interest in protecting it.
-
for the purpose of direct advertising. You can object to this at any time without giving reasons.
-
by means of automated decision-making (profiling). You can object to this at any time without giving reasons.
9.6 Right to data portability
If 1000 Steine processes personal data on the basis of the consent of the person concerned or to fulfill a contract with 1000 Steine and the processing is carried out using automated procedures, the person concerned has the right to use this data
-
in a structured, commonly used and machine-readable format and
-
to transmit to another responsible person.
If technically feasible, the person concerned has the right to have the personal data transmitted directly from one person responsible to another person responsible.
9.7 Recourse to the Regulatory Authority
If a data subject believes that the processing of their personal data violates data protection law or that their data protection rights have been violated in any other way, they can complain to the supervisory authority. In Austria, the data protection authority is responsible for this:
Austrian Data Protection Authority
Barichgasse 40-42, 1030 Wien
Telefon: +43 1 52 152-0
Email: dsb@dsb.gv.at
[Status: October 2023]