Privacy policy
Privacy policy of Verival Bio GmbH, Sportplatzweg 7, 6336 Langkampfen, Austria.
This privacy policy informs you in accordance with the statutory provisions on data protection (DSGVO, TKG) about the type, scope and purpose of the collection and use of personal data by the person responsible, i.e. Verival Bio GmbH, Sportplatzweg 7, 6336, Langkampfen, Austria, Tel.: +43 (0) 5332 75654-0, Fax: +43 (0) 5332 756-5480 (hereinafter referred to as "website operator" or "we").
General information
Our handling of personal data
We take data protection very seriously and treat your personal data confidentially and in accordance with the statutory provisions. Please bear in mind that data transmission on the Internet can always be subject to security vulnerabilities. Our employees are expressly subject to the confidentiality obligations of the current version of the Data Protection Act.
We only collect, use and pass on your personal data if this is permitted by law or if you consent to the collection of data. Personal data is all information that can be used to identify you personally and that can be traced back to you - for example, your name, your e-mail address and your telephone number.
We ensure that the personal information you store in the Verival Online Shop is in a controlled, secure environment where unauthorised access and disclosure is prevented. Access to your customer account is only possible after entering your personal password. Always treat access information to the Verival Online Shop confidentially and close the browser window when you have finished communicating with us, especially if you share a computer with other people.
Storage duration
We will only retain your personal data for as long as we reasonably deem necessary to fulfil the above-mentioned purposes and as permitted by applicable law. In any case, we store your personal data for as long as statutory retention obligations exist or limitation periods for potential legal claims have not yet expired. If you assert a justified request for deletion or revoke your consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data (e.g. retention periods under tax or commercial law); in the latter case, deletion will take place after these reasons no longer apply.
Your rights in connection with personal data
Under applicable law, you have the right (subject to applicable law) to (1) verify whether and which personal data we hold about you and obtain copies of such data, (2) request the rectification, completion or erasure of your personal data that is inaccurate or not processed in accordance with the law, (3) require us to to restrict the processing of your personal data, (4) to object to the processing of your personal data under certain circumstances or to revoke the consent previously given for the processing, (5) to request data portability, (6) to know the identity of third parties to whom your personal data is transmitted and (7) to lodge a complaint with the competent authority.
Contact information for data protection
If you have any questions about the collection, processing or use of your personal data, for information, correction, blocking or deletion of data as well as revocation of consents granted, you can reach us at the e-mail privacy@verival.at or you can write to Verival Bio GmbH, Sportplatzweg 7, 6336 Langkampfen, Austria.
Data collection when visiting this website
Server log files
We collect data about visits to our website and store these as server log files. The following data is logged:
Visited website
Time at the time of access
Amount of data sent in bytes
Source/reference from which you accessed the page
Browser used
Operating system used
IP address used
This data is analysed solely for the purpose of ensuring the trouble-free operation of our website and improving our offering. However, we reserve the right to check the server log files retrospectively if there are concrete indications of unlawful use. We cannot assign this data to specific persons. This data is not merged with other data sources.
The basis for data processing is Art. 6 para. 1 lit. f GDPR, which permits the processing of data to protect the legitimate interests of the controller. The website operator, i.e. Verival Bio GmbH, has a legitimate interest in the technically error-free display and optimisation of its websites - for this purpose, the server log files must be recorded.
SSL encryption (HTTPS protocol)
We use SSL encryption for our websites to provide the best possible protection for the data you transmit. You can recognise such encrypted connections by the prefix "https://" in the page link in the address bar of your browser. Thanks to SSL encryption, none of the data you transmit to our websites - for example when making enquiries or logging in - can be read by third parties.
Use of cookies
Our websites use "cookies". These are small text files that are stored on your device either temporarily for the duration of a session (session cookies) or permanently (permanent cookies). They do not cause any damage to your end device. Session cookies are automatically deleted at the end of your visit. Permanent cookies remain stored on your device until you delete them yourself or they are automatically deleted by your web browser.
Cookies have various functions. Many cookies are technically necessary, as certain websites would not work or would only work to a limited extent without these cookies (e.g. the shopping basket function or the display of videos). Other cookies are used to evaluate user behaviour or display advertising.
In some cases, cookies from third-party companies may also be stored on your device when you visit our website (third-party cookies). These enable us or you to use certain services of the third-party company (e.g. cookies for processing payment services).
Cookies that are required to carry out the electronic communication process (necessary cookies) or to provide certain functions that you have requested (functional cookies, e.g. for the shopping basket function) or to optimise the website (e.g. cookies to measure visitor behaviour) are stored on the basis of Art. 6 para. 1 lit. f GDPR, unless another legal basis is specified. The website operator has a legitimate interest in the storage of cookies for the technically error-free and optimised provision of its services. If consent to the storage of cookies has been requested, the cookies in question are stored exclusively on the basis of this consent (Art. 6 para. 1 lit. a GDPR); consent can be revoked at any time.
You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. Deactivating cookies may limit the functionality of this website and you can find the cookie settings for your browser under the following links: Microsoft Edge™ / Safari™ / Chrome™ / Firefox™/ Opera™
You can change your personal settings for the cookies used on this website under the link "Cookie settings" or change them at any time.
Contact details
If you contact us via the contact options offered, your details will be stored so that we can access them to process and respond to your enquiry. if you contact us by e-mail, telephone or fax, your enquiry, including all resulting personal data (name, enquiry) will be stored and processed by us for the purpose of processing your request. We will not pass on this data without your consent.
This data is processed on the basis of Art. 6 para. 1 lit. b GDPR if your enquiry is related to the fulfilment of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the enquiries addressed to us (Art. 6 para. 1 lit. f GDPR) or on your consent (Art. 6 para. 1 lit. a GDPR), if this has been requested.
The data you enter or otherwise transmit will remain with us until you ask us to delete it, revoke your consent to storage or the purpose for data storage no longer applies (e.g. after your enquiry has been processed). Mandatory statutory provisions - in particular retention periods - remain unaffected.
Registration on this website
You can register on this website in order to use additional functions of the site. We will only use the data you enter for the purpose of using the respective offer or service for which you have registered. The mandatory information requested during registration must be complete and correct. Otherwise we will refuse your registration.
For important changes, such as changes to the scope of the offer or technically necessary changes, we will use the e-mail address provided during registration to inform you in this way.
The data entered during registration is processed for the purpose of implementing the user relationship established by the registration and, if necessary, for the initiation of further contracts (Art. 6 para. 1 lit. b GDPR).
The data collected during registration will be stored by us for as long as you are registered on this website and will then be deleted. Statutory retention periods remain unaffected.
Comment function on this website
For the comment function on this page, in addition to your comment, the time the comment was created, your e-mail address and your IP address are also saved. We need this data in order to be able to take action against the author in the event of legal violations such as insults or propaganda.
Your comments and the associated data are stored and remain on this website until the content commented on has been completely deleted or the comments have to be deleted for legal reasons (e.g. offensive comments).
The comments are stored on the basis of your consent (Art. 6 para. 1 lit. a GDPR). You can revoke your consent at any time. All you need to do is send us an informal email. The legality of the data processing operations that have already taken place remains unaffected by the cancellation.
Contract processing (e.g. order process, payment, dispatch, contact)
Personal data is only collected if you provide it to us voluntarily when opening a customer account or when ordering goods. All data entered by customers during order processing is stored. This includes
Surname, first name
Addresses (billing and delivery address)
payment method
e-mail address
Telephone number
Date of birth
This is done on the basis of Art. 6 para. 1 lit. b GDPR, which permits the processing of data for the fulfilment of a contract or pre-contractual measures.
We use the data provided by you without separate consent exclusively for the fulfilment and processing of your order. The data contained in the contract is stored and processed for accounting purposes and for customer records and is used to fulfil legal obligations, to process payment transactions, for the purpose of delivery and for any customer queries and/or complaints. Only those data that are absolutely necessary for delivery or order processing are passed on to third-party service providers.
Your data will be passed on to our service providers, for example, for the purpose of order, payment and dispatch notification and processing.
Depending on the selected payment method, we will pass on the data necessary for processing the payment transaction to our payment service providers or to authorised credit institutions, insofar as this is necessary for processing the payment. This serves the fulfilment of the contract in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR. In some cases, payment service providers collect the data required for processing the payment themselves, e.g. on their own website or via a technical integration in the ordering process. In this respect, the privacy policy of the respective payment service provider applies.
Under no circumstances will the data collected be sold or passed on to third parties for other reasons. Contractual partners of Verival Bio GmbH are instructed and obligated accordingly with regard to the applicable data protection regulations. As soon as the storage of your data is no longer necessary or legally required, e.g. after expiry of tax and commercial law retention periods, it will be deleted.
Hosting and Content Delivery Network (CDN)
Shopify
This shop is hosted by Shopify International Limited, Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland (hereinafter "Shopify").
Shopify is an IT service for creating, managing and operating online shops. When you visit our website, Shopify collects your IP address and information about the device you are using and your browser. Shopify also records and analyses visitor numbers, visitor sources and visitor behaviour and creates user statistics. When you make a purchase on our website, Shopify collects your name, email address, delivery and billing addresses, payment details and other data related to the purchase (e.g. telephone number, amount of sales made, etc.). Shopify stores cookies in your browser to analyse usage.
Details can be found in Shopify's privacy policy: https://www.shopify.de/legal/datenschutz.
The use of Shopify is based on Art. 6 para. 1 lit. f GDPR. We have a legitimate interest in the most reliable and error-free presentation of our website. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR; the consent can be revoked at any time.
Transaction mails from the online shop
We use the SendGrid service from Twilio for the emails to interested parties and customers that are necessary for the use of the online shop (e.g. registration confirmation, order confirmation, emails to change passwords, dispatch confirmation, other notifications necessary for operations, etc.).
SendGrid is an email delivery service operated by Twilio Inc, 375 Beale Street, Suite 300, San Francisco, CA 94105, USA. By using SendGrid, personal data such as IP address, geographical data or contact data (e.g. e-mail address) as well as technical usage information such as browser activity and clickstream activities can be collected, stored and processed. The legal basis for the processing of the data is Art. 6 para. 1 lit. f GDPR, whereby the legitimate interest lies in the optimisation of e-mail dispatch and communication with our users and customers, as well as Art. 6 para. 1 lit. b GDPR, which permits the processing of data for the fulfilment of a contract or pre-contractual measures, and the data transfer to the USA is based on the standard contractual clauses of the EU Commission.
There is an order processing contract with Twilio in accordance with Art. 28 GDPR to ensure that data processing complies with European data protection standards. Details can be found in Twilio's privacy policy: https://www.twilio.com/en-us/legal/privacy.
Payment provider
Processing of customer and contract data
We collect, process and use personal data only insofar as it is necessary for the establishment, content or amendment of the legal relationship (inventory data). This is done on the basis of Art. 6 para. 1 lit. b GDPR, which permits the processing of data for the fulfilment of a contract or pre-contractual measures. We collect, process and use personal data about the use of this website (usage data) only insofar as this is necessary to enable the user to use the service or to bill the user.
The customer data collected will be deleted after completion of the order or termination of the business relationship. Statutory retention periods remain unaffected.
Data transmission upon conclusion of a contract for online shops, retailers and dispatch of goods
When you order products from us, we pass on your personal data to the transport company responsible for delivery and to the payment service provider responsible for processing payments. Only the data required by the respective service provider to fulfil its task will be disclosed. The legal basis for this is Art. 6 para. 1 lit. b GDPR, which permits the processing of data for the fulfilment of a contract or pre-contractual measures. If you have given your consent in accordance with Art. 6 para. 1 lit. a GDPR, we will pass on your e-mail address to the transport company entrusted with the delivery so that it can inform you by e-mail about the dispatch status of your order; you can revoke your consent at any time.
Payment services
We offer our customers efficient and secure payment options and use other payment service providers in addition to banks and credit institutions (collectively referred to as "payment service providers"). When you make a purchase from us, your payment details (e.g. name, payment amount, account details, credit card number, TANs and verification numbers) are processed by the payment service provider for the purpose of payment processing. This information is required to carry out the transactions. However, the data entered is only processed by the payment service providers and stored by them. This means that we do not receive any account or credit card-related information, but only information confirming, authorising or rejecting your payment. Under certain circumstances, the data may be transmitted by the payment service providers to credit agencies. The purpose of this transmission is to check identity and creditworthiness. Please refer to the terms and conditions and data protection information of the payment service providers.
The contractual and data protection provisions of the respective providers apply to these transactions. The payment service providers are used on the basis of Art. 6 para. 1 lit. b GDPR (contract processing) and in the interest of the smoothest, most convenient and secure payment process possible (Art. 6 para. 1 lit. f GDPR). Insofar as your consent is requested for certain actions, Art. 6 para. 1 lit. a GDPR is the legal basis for data processing; consent can be revoked at any time for the future.
We use the following payment service providers on this website:
Shopify Pay (provider is Shopify International Limited, Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland). Details can be found in Shopify's privacy policy: https://www.shopify.com/de/legal/datenschutz
Mastercard (provider is Mastercard Europe SA, Chaussée de Tervuren 198A, B-1410 Waterloo, Belgium). Details can be found in Mastercard's privacy policy: https://www.mastercard.at/de-at/datenschutzbestimmungen.html
VISA (provider is Visa Europe Services Inc, London Branch, 1 Sheldon Square, London W2 6TT, United Kingdom). Details can be found in VISA's privacy policy: https://www.visa.de/nutzungsbedingungen/visa-privacy-center.html
PayPal (provider is PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg). Details can be found in PayPal's privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full.
Klarna (provider is Klarna Bank AB, Sveavägen 46, 111 34 Stockholm, Sweden). Details can be found in Klarna's privacy policy at the following link: https://cdn.klarna.com/1.0/shared/content/legal/terms/0/en_gb/privacy
Amazon Pay (provider is Amazon Payments Europe S.C.A., 38 avenue J.F. Kennedy, L-1855 Luxembourg. Details can be found in the Amazon Pay privacy policy: https://pay.amazon.de/help/201212490?ld=APDELPADirect.
Google Pay (provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland). Details can be found in the Google Pay privacy policy: https://payments.google.com/payments/apis-secure/get_legal_document?ldo=0&ldt=privacynotice&ldl=de
Apple Pay (Anbieter ist Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Irland). Hinweise zum Datenschutz bei Apple Pay findest du unter der nachstehenden Internetadresse: https://support.apple.com/de-de/HT203027
EPS (Provider is PSA Payment Services Austria GmbH, Handelskai 92, Gate 2, 1200 Vienna in the role of processor pursuant to Art. 28 GDPR on behalf of your bank. Details can be found in the PSA privacy policy: https://eps-ueberweisung.at/de/datenschutzhinweis
Shipping service provider
We work together with the provider Österreichische Post Aktiengesellschaft, Rochusplatz 1, 1030 Vienna, Austria, as a shipping service provider and only pass on the name of the recipient and their delivery address to the provider for the purpose of delivery in accordance with Art. 6 Para. 1 lit. b GDPR. The information will only be passed on if this is necessary for the delivery of the goods and, if we have received your express consent when you place your order, we will pass on your e-mail address to the provider for delivery notification.
Newsletter-Services
If you would like to receive the newsletter offered on the website, we require an e-mail address from you as well as information that allows us to verify that you are the owner of the e-mail address provided and that you agree to receive the newsletter (double opt-in). Further data is not collected or is only collected on a voluntary basis. We use newsletter service providers, which are described below, to process the newsletter.
MailChimp
We use the services of MailChimp to send newsletters. The provider is Rocket Science Group LLC, 675 Ponce De Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA.
MailChimp is a service that can be used to organise and analyse the sending of newsletters, among other things. If you enter data for the purpose of subscribing to the newsletter (e.g. email address), it will be stored on MailChimp's servers in the USA.
With the help of MailChimp, we can analyse our newsletter campaigns. When you open an email sent with MailChimp, a file contained in the email (known as a web beacon) connects to MailChimp's servers in the USA. This makes it possible to determine whether a newsletter message has been opened and which links, if any, have been clicked on. Technical information is also collected (e.g. time of access, IP address, browser type and operating system). This information cannot be assigned to the respective newsletter recipient. It is used exclusively for the statistical analysis of newsletter campaigns. We use the results of these analyses to better adapt future newsletters to the interests of the recipients.
If you do not wish to be analysed by MailChimp, you must unsubscribe from the newsletter. We provide a corresponding link for this purpose in every newsletter message.
The data processing takes place on the basis of your consent (Art. 6 para. 1 lit. a GDPR). You can revoke this consent at any time by unsubscribing from the newsletter. The legality of the data processing operations that have already taken place remains unaffected by the cancellation.
The data you provide us with for the purpose of subscribing to the newsletter will be stored by the newsletter service provider for the purpose of unsubscribing from the newsletter and deleted from the distribution list after you unsubscribe from the newsletter. Data stored by us for other purposes remains unaffected by this.
Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://mailchimp.com/eu-us-data-transfer-statement/ and https://mailchimp.com/legal/data-processing-addendum/#Annex_C_-_Standard_Contractual_Clauses.
After unsubscribing from the distribution list, your email address may be stored in a blacklist by the newsletter service provider if this is necessary to prevent future mailings. The data from the blacklist will only be used for this purpose and will not be merged with other data. This serves both your interest and our interest in complying with the legal requirements when sending newsletters (legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR). Storage in the blacklist is not limited in time. You can object to the storage if your interests outweigh our legitimate interest.
For more information, please refer to MailChimp's privacy policy at: https://mailchimp.com/legal/terms/.
Direct advertising
Unless you have objected, we will use the email address and telephone number that you have provided when purchasing goods or services to send you electronic advertising for our own goods or services that are similar to those that you have already purchased or used from us. The legal basis for data processing is Art. 6 para. 1 lit. F GDPR and Section 7 para. 3 UWG.
You can object to this processing at any time in accordance with Art. 21 para. 2 GDPR, for example by contacting us via the corresponding link in the email you receive or by sending an email to privacy@verival.at.
Applicant data
We offer you the opportunity to apply to us (e.g. by email, post or online application form). In the following, we inform you about the scope, purpose and use of the personal data collected as part of the application process. We assure you that your data will be collected, processed and used in accordance with applicable data protection law and all other statutory provisions and that your data will be treated in strict confidence.
Scope and purpose of data collection
If you send us an application, we will process your associated personal data (e.g. contact and communication data, application documents, notes taken during job interviews, etc.) insofar as this is necessary to decide on the establishment of an employment relationship. The legal basis for this is § 26 BDSG under German law (initiation of an employment relationship), Art. 6 para. 1 lit. b GDPR (general contract initiation) and - if you have given your consent - Art. 6 para. 1 lit. a GDPR. Consent can be revoked at any time. Your personal data will only be passed on within our company to persons who are involved in processing the application.
If the application is successful, the data submitted by you will be stored in our data processing systems on the basis of § 26 BDSG and Art. 6 para. 1 lit. b GDPR for the purpose of implementing the employment relationship.
Data retention period
If we are unable to make you a job offer, or if you reject a job offer or withdraw your application, we reserve the right to retain the data you have submitted on the basis of our legitimate interests (Art. 6 para. 1 lit. f GDPR) for up to 6 months from the end of the application process (rejection or withdrawal of the application). The data will then be deleted and the physical application documents destroyed. The retention serves in particular as evidence in the event of a legal dispute. If it is evident that the data will be required after the 6-month period has expired (e.g. due to an impending or pending legal dispute), the data will only be deleted when the purpose for further storage no longer applies.
Longer storage may also take place if you have given your consent (Art. 6 para. 1 lit. a GDPR) or if statutory retention obligations prevent deletion.
Inclusion in the applicant pool
If we do not make you a job offer, you may have the opportunity to join our applicant pool. If you are accepted, all documents and details from your application will be transferred to the applicant pool so that you can be contacted in the event of suitable vacancies.
Inclusion in the applicant pool is based exclusively on your express consent (Art. 6 para. 1 lit. a GDPR). Giving your consent is voluntary and is not related to the current application process. You can withdraw your consent at any time. In this case, your data will be irrevocably deleted from the applicant pool, provided there are no legal reasons for retention.
The data from the applicant pool will be irrevocably deleted no later than two years after consent has been granted.
Tools für Analyse und Werbung
Google Tag Manager
We use the Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Tag Manager is a tool that enables us to integrate tracking or statistical tools and other technologies on our website. The Google Tag Manager itself does not create any user profiles, does not store any cookies and does not carry out any independent analyses. It is only used to manage and display the tools integrated via it. However, Google Tag Manager records your IP address, which may also be transmitted to Google's parent company in the United States.
The Google Tag Manager is used on the basis of Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the fast and uncomplicated integration and management of various tools on its website. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR; the consent can be revoked at any time.
Google Analytics
This website uses functions of the web analysis service Google Analytics. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics enables the website operator to analyse the behaviour of website visitors. In doing so, the website operator receives various usage data, such as the number of page views, the length of visit, the operating system used and the origin of the user. This data may be summarised by Google in a profile that is assigned to the respective user or their end device.
We can also use Google Analytics to record your mouse and scroll movements and clicks, among other things. Google Analytics also uses various modelling approaches to supplement the collected data records and uses machine learning technologies for data analysis.
Google Analytics uses technologies that enable the recognition of the user for the purpose of analysing user behaviour (e.g. cookies or device fingerprinting). The information collected by Google about the use of this website is generally transmitted to a Google server in the USA and stored there.
The use of this analysis tool is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in analysing user behaviour in order to optimise both its website and its advertising. If a corresponding consent has been requested (e.g. consent to the storage of cookies), the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR; the consent can be revoked at any time.
Data transfer to the USA is based on the standard contractual clauses of the EU Commission. You can find details here: https://privacy.google.com/businesses/controllerterms/mccs/.
IP anonymisation
We have activated the IP anonymisation function on this website. This means that your IP address will be truncated by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to analyse your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
Browser Plugin
You can prevent the collection and processing of your data by Google by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.
You can find more information on how Google Analytics handles user data in Google's privacy policy: https://support.google.com/analytics/answer/6004245?hl=de.
Google-Signale
We use Google signals. When you visit our website, Google Analytics records your location, search history, YouTube history and demographic data (visitor data), among other things. This data can be used for personalised advertising with the help of Google Signal. If you have a Google account, the visitor data from Google Signal will be linked to your Google account and used for personalised advertising messages. The data is also used to compile anonymised statistics on the user behaviour of our users.
Demographic characteristics in Google Analytics
This website uses the "demographic characteristics" function of Google Analytics to display suitable adverts to website visitors within the Google advertising network. This allows reports to be created that contain statements about the age, gender and interests of the website visitors. This data comes from interest-based advertising from Google and from visitor data from third-party providers. This data cannot be assigned to a specific person. You can deactivate this function at any time via the ad settings in your Google account or prohibit the collection of your data by Google Analytics.
Google Analytics e-commerce measurement
This website uses the "e-commerce measurement" function of Google Analytics. With the help of e-commerce measurement, the website operator can analyse the purchasing behaviour of website visitors to improve its online marketing campaigns. Information such as orders placed, average order values, shipping costs and the time from viewing to purchasing a product is recorded. This data can be summarised by Google under a transaction ID that is assigned to the respective user or their device.
Storage duration
Data stored by Google at user and event level that is linked to cookies, user IDs or advertising IDs (e.g. DoubleClick cookies, Android advertising ID) will be anonymised or deleted after 14 months. You can find details on this under the following link: https://support.google.com/analytics/answer/7667196?hl=de
Microsoft Clarity
We work with Microsoft Clarity and Microsoft Advertising to track how you use and interact with our websites using behavioural metrics, heatmaps and session replays to improve and market our products/services. Clarity records user interactions on this website, e.g. how the page is rendered, user interactions such as mouse movements, clicks, scrolling and so on.
The provider is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland.
Website usage data is collected using first- and third-party cookies and other tracking technologies to determine the popularity of products/services and online activity. We also use this information to optimise the website, for fraud/security purposes and for advertising. For more information on how Microsoft collects and uses your data, please refer to the Microsoft Privacy Policy.
Google Ads
The website operator uses Google Ads. Google Ads is an online advertising programme of Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Ads enables us to display adverts in the Google search engine or on third-party websites when the user enters certain search terms in Google (keyword targeting). Furthermore, targeted adverts can be displayed based on the user data available at Google (e.g. location data and interests) (target group targeting). As the website operator, we can evaluate this data quantitatively by analysing, for example, which search terms led to the display of our advertisements and how many advertisements led to corresponding clicks.
The use of Google Ads is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in marketing its service products as effectively as possible.
Data transfer to the USA is based on the standard contractual clauses of the EU Commission. You can find details here: https://policies.google.com/privacy/frameworks and https://privacy.google.com/businesses/controllerterms/mccs/.
Google Remarketing
This website uses the functions of Google Analytics Remarketing. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Remarketing analyses user behaviour on our website (e.g. clicks on certain products) in order to categorise them into certain advertising target groups and then display suitable advertising messages to them when they visit other online offers (remarketing or retargeting).
Furthermore, the advertising target groups created with Google Remarketing can be linked to Google's cross-device functions. In this way, interest-based, personalised advertising messages that have been adapted to you depending on your previous usage and surfing behaviour on one end device (e.g. mobile phone) can also be displayed on another of your end devices (e.g. tablet or PC).
If you have a Google account, you can object to personalised advertising by clicking on the following link: https://www.google.com/settings/ads/onweb/.
The use of Google Remarketing is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in marketing its products as effectively as possible. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR; the consent can be revoked at any time.
Further information and the privacy policy can be found in Google's privacy policy at: https://policies.google.com/technologies/ads?hl=en.
Target group formation with customer matching
Among other things, we use Google Remarketing customer matching to create target groups. Here we transfer certain customer data (e.g. email addresses) from our customer lists to Google. If the customers in question are Google users and are logged into their Google account, they are shown suitable advertising messages within the Google network (e.g. on YouTube, Gmail or in the search engine).
Google Conversion-Tracking
This website uses Google Conversion Tracking. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.
With the help of Google conversion tracking, Google and we can recognise whether users have carried out certain actions. For example, we can analyse which buttons on our website were clicked how often and which products were viewed or purchased particularly frequently. This information is used to create conversion statistics. We find out the total number of users who have clicked on our adverts and what actions they have taken. We do not receive any information with which we can personally identify users. Google itself uses cookies or comparable recognition technologies for identification purposes.
The use of Google Conversion Tracking is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in analysing user behaviour in order to optimise both its website and its advertising. If a corresponding consent has been requested (e.g. consent to the storage of cookies), the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR; the consent can be revoked at any time.
You can find more information about Google Conversion Tracking in Google's privacy policy: https://policies.google.com/privacy?hl=en.
Facebook Pixel
This website uses Facebook action pixels to measure the conversion of visitors. The provider of this service is Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. However, according to Facebook, the data collected is also transferred to the USA and other third countries.
This allows the behaviour of site visitors to be tracked after they have been redirected to the provider's website by clicking on a Facebook ad. This allows the effectiveness of Facebook ads to be evaluated for statistical and market research purposes and future advertising measures to be optimised.
The data collected is anonymous for us as the operator of this website; we cannot draw any conclusions about the identity of the user. However, the data is stored and processed by Facebook so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes in accordance with the Facebook Data Usage Policy. This enables Facebook to place adverts on Facebook pages and outside of Facebook. This use of the data cannot be influenced by us as the site operator.
Facebook Pixel is used on the basis of Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in effective advertising measures including social media. If a corresponding consent has been requested (e.g. consent to the storage of cookies), the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR; the consent can be revoked at any time.
Data transfer to the USA is based on the standard contractual clauses of the EU Commission. You can find details here: https://www.facebook.com/legal/EU_data_transfer_addendum and https://de-de.facebook.com/help/566994660333381.
Insofar as personal data is collected on our website with the help of the tool described here and forwarded to Facebook, we and Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland are jointly responsible for this data processing (Art. 26 GDPR). The joint responsibility is limited exclusively to the collection of the data and its transfer to Facebook. The processing carried out by Facebook after forwarding is not part of the joint responsibility. The obligations incumbent on us jointly have been set out in an agreement on joint processing.
You can find the wording of the agreement at: https://www.facebook.com/legal/controller_addendum. According to this agreement, we are responsible for providing data protection information when using the Facebook tool and for the secure implementation of the tool on our website in accordance with data protection law. Facebook is responsible for the data security of Facebook products. You can assert data subject rights (e.g. requests for information) regarding the data processed by Facebook directly with Facebook. You can find further information on protecting your privacy in Facebook's privacy policy: https://de-de.facebook.com/about/privacy/.
You can also deactivate the "Custom Audiences" remarketing function in the ad settings section under https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. You must be logged in to Facebook to do this.
If you do not have a Facebook account, you can deactivate usage-based advertising from Facebook on the website of the European Interactive Digital Advertising Alliance: http://www.youronlinechoices.com/de/praferenzmanagement/.
LinkedIn Insight Tag
This website uses the LinkedIn Insight tag. The provider of this service is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland.
With the help of the LinkedIn Insight Tag, we receive information about the visitors to our website. If a website visitor is registered with LinkedIn, we can, among other things, analyse the key professional data (e.g. career level, company size, country, location, industry and job title) of our website visitors and thus better tailor our site to the respective target groups. We can also use LinkedIn Insight Tags to measure whether visitors to our websites make a purchase or take another action (conversion measurement). Conversion measurement can also be carried out across devices (e.g. from PC to tablet). LinkedIn Insight Tag also offers a retargeting function that we can use to display targeted advertising to visitors to our website outside the website, whereby, according to LinkedIn, no identification of the advertising addressee takes place.
LinkedIn itself also collects log files (URL, referrer URL, IP address, device and browser properties and time of access). The IP addresses are shortened or (if they are used to reach LinkedIn members across devices) hashed (pseudonymised). The direct identifiers of LinkedIn members are deleted by LinkedIn after seven days. The remaining pseudonymised data is then deleted within 180 days.
The data collected by LinkedIn cannot be assigned to specific individuals by us as the website operator. LinkedIn will store the personal data collected from website visitors on its servers in the USA and use it for its own advertising purposes. Details can be found in LinkedIn's privacy policy at https://www.linkedin.com/legal/privacy-policy#choices-oblig
The use of LinkedIn Insight is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in effective advertising measures including social media. If a corresponding consent has been requested (e.g. consent to the storage of cookies), the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR; the consent can be revoked at any time.
Data transfer to the USA is based on the standard contractual clauses of the EU Commission. You can find details here: https://www.linkedin.com/legal/l/dpa and https://www.linkedin.com/legal/l/eu-sccs.
The analysis of user behaviour and targeted advertising by LinkedIn can be objected to under the following link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.
Furthermore, LinkedIn members can control the use of their personal data for advertising purposes in the account settings. To prevent LinkedIn from linking data collected on our website to your LinkedIn account, you must log out of your LinkedIn account before visiting our website.
TikTok Pixel
We use the TikTok pixel on our website, a tracking plugin of the social media platform TikTok, operated by TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland.
The TikTok pixel sets a cookie in your browser to collect various personal data. The data collected includes usage data (e.g. pages visited, clicks on elements), information about completed transactions, leads and search queries on the website or views of product pages. The data collected is used for the following purposes: Analysing user behaviour on our website, tracking the effectiveness of advertisements on TikTok, optimising our online marketing measures and compiling statistics to improve our offering.
The TikTok pixel is only used with your express consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke this consent at any time with effect for the future by changing the corresponding settings in our cookie consent tool.
The data collected by the TikTok pixel is transmitted to TikTok Technology Limited, which acts as an independent controller. TikTok generally transfers this data outside the European Economic Area (EEA) and relies on standard data protection clauses of the European Commission to ensure an adequate level of data protection, details of which can be found in TikTok's privacy policy: https://www.tiktok.com/legal/page/eea/privacy-policy/de.
Other plugins and tools
YouTube with extended data protection
This website embeds videos from YouTube. YouTube is operated by Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.
We use YouTube in extended data protection mode. According to YouTube, this mode means that YouTube does not store any information about visitors to this website before they watch the video. However, the transfer of data to YouTube partners is not necessarily excluded by the extended data protection mode. For example, YouTube establishes a connection to the Google DoubleClick network regardless of whether you watch a video.
As soon as you start a YouTube video on this website, a connection to the YouTube servers is established. This tells the YouTube server which of our pages you have visited. If you are logged into your YouTube account, you allow YouTube to associate your surfing behaviour directly with your personal profile. You can prevent this by logging out of your YouTube account.
Furthermore, YouTube can store various cookies on your end device after starting a video or use comparable recognition technologies (e.g. device fingerprinting). In this way, YouTube can obtain information about visitors to this website. This information is used, among other things, to record video statistics, improve user-friendliness and prevent attempts at fraud.
If necessary, further data processing operations may be triggered after the start of a YouTube video, over which we have no influence.
The use of YouTube is in the interest of an appealing presentation of our online offers. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR; the consent can be revoked at any time.
You can find more information about data protection at YouTube in their privacy policy at: https://policies.google.com/privacy?hl=en.
Google reCAPTCHA
We use "Google reCAPTCHA" (hereinafter "reCAPTCHA") on this website. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.
The purpose of reCAPTCHA is to check whether data is entered on this website (e.g. in a contact form) by a human or by an automated programme. For this purpose, reCAPTCHA analyses the behaviour of the website visitor based on various characteristics. This analysis begins automatically as soon as the website visitor enters the website. To analyse this, reCAPTCHA evaluates various pieces of information (e.g. IP address, length of visit or mouse movements made by the user). The data collected during the analysis is forwarded to Google.
The reCAPTCHA analyses run completely in the background. Visitors are not informed that an analysis is taking place.
The data is stored and analysed on the basis of Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in protecting its website from abusive automated spying and SPAM. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR; the consent can be revoked at any time.
Further information about Google reCAPTCHA can be found in the Google Privacy Policy and the Google Terms of Use at the following links: https://policies.google.com/privacy?hl=en and https://policies.google.com/terms?hl=en.
OneSignal Pushnachrichten
We use OneSignal from OnseSignal Inc. to send push notifications to users.
When you visit our websites, we ask you with a screen message whether we may draw your attention to news in the future with messages that are received by your browser (push notification). By clicking on it, you will be taken directly to the advertised website and/or promotion. Consent is given for the browser in which you are logged in. If you consent, you will occasionally receive push notifications from us. By providing the notification function, we want to enable you to stay up to date.
The data is processed on the basis of consent (pursuant to Art. 6 para. 1 lit. a GDPR) through the browser window. Furthermore, the dispatch service provider is used on the basis of our legitimate interests pursuant to Art. 6 para. 1 lit. f GDPR.
In order to be able to send you the push notifications, it is necessary that non-personal data, such as a message, is transmitted to the OneSignal server. It is necessary that a non-personal ID is assigned for the unique assignment of the device, which does not allow OneSignal to draw any conclusions about the person of the user. The recipient of the data is OneSignal, 201 San Antonio Circle Suite #140, Mountain View, CA, USA. You can find the provider's data protection information here: https://onesignal.com/privacy_policy
You can unsubscribe from the push notifications at any time. This is possible directly with every push notification sent (depending on the browser) or on our website and in the general browser/system settings (depending on the browser/system).
Typeform
We use Typeform from the provider TYPEFORM S.L., Carrer Bac de Roda, 163, 08018 Barcelona, Spain. Typeform enables us to create online forms and integrate them into our website. The data you enter in a Typeform form will be stored on Typeform's servers until you ask us to delete it, revoke your consent to storage or the purpose for data storage no longer applies (e.g. after your enquiry has been processed).
The use of Typeform is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in functioning online forms. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR. Consent can be revoked at any time.
Summary of the recipients of your personal data
Your personal data will be transmitted to the following recipients for the above-mentioned purposes
- External tax advisors, auditors and business consultants;
- as part of the enforcement of our rights or for legal defence to legal representatives appointed by us
- affiliated companies;
- IT service providers used by us;
- our commercial, advertising and marketing agencies;
- within the scope of contract fulfilment to vicarious agents and subcontractors commissioned by us, e.g. logistics companies
- Payment data to credit institutions or payment intermediaries for the processing of payments;
- to the competent courts, law enforcement and supervisory authorities within the scope of legal obligations
- to the certifying organisations as part of our recurring quality certifications
We may use processors for data processing. We have concluded data processing agreements (DPAs) with the providers listed below. These are contracts prescribed by data protection law, which ensure that these providers only process the personal data of our website visitors in accordance with our instructions and in compliance with the GDPR.
Your personal data will be transmitted to the following recipients for the above-mentioned purposes
- Shopify International Limited, Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland
- Österreichische Post Aktiengesellschaft, Rochusplatz 1, 1030 Vienna, Austria
- Klarna AB, Sveavägen 46, 111 34 Stockholm, Sweden
- PayPal (Europe) S.à.r.l. & Cie. S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg
- Amazon Payments Europe s.c.a., 5 Rue Plaetis, 2338 Luxembourg
- Amazon Web Services EMEA SARL, 38 avenue John F. Kennedy, L-1855, Luxembourg
- The Rocket Science Group, LLC, 512 Means Street, Suite 404, Atlanta, GA 30318, USA
- Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA
- Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
- Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland
- LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland.
- Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland
- OneSignal, 201 San Antonio Circle Suite #140, Mountain View, CA, USA
- Twilio Inc, 375 Beale Street, Suite 300, San Francisco, CA 94105, USA
- TYPEFORM S.L., Carrer Bac de Roda, 163, 08018 Barcelona, Spain.
- Mastercard Europe SA, Chaussée de Tervuren 198A, B-1410 Waterloo, Belgium
- Visa Europe Services Inc, London Branch, 1 Sheldon Square, London W2 6TT, United Kingdom
- TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland
- Dopamin Marketing GmbH, Gewerbeweg 4, 6263 Fügen, Austria
- Hubspot Inc. 25 Street, Cambridge, MA 02141 USA
Data processing contracts
We have concluded data processing agreements (DPAs) with the aforementioned service providers. These are contracts prescribed by data protection law, which ensure that these service providers only process the personal data of our website visitors in accordance with our instructions and in compliance with the GDPR.
Changes
We may change this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal or regulatory reasons.
Any questions?
Your trust is important to us, which is why we are happy to answer any further questions you may have about data protection. Simply contact us using the contact details provided in the legal notice, the contact form or via our email address for data protection privacy@verival.at .