General information

We take the protection of your personal data very seriously. In this privacy policy, we inform you about the most important aspects of data processing on our website. We process your personal data exclusively on the basis of the statutory provisions (General Data Protection Regulation - GDPR, Telecommunications Act 2021 - TKG 2021).

1. responsible person

bärnd KG
Kärntnerstrasse 35
9601 Arnoldstein, Austria
e-mail: info@baernd.at
Phone: +43 670 500 7700

2. hosting

Our website is hosted by World4You Internet Services GmbHHafenstraße 35, 4020 Linz (Austria). All data is stored on servers in Austria. There is a contract with the provider Data processing agreement in accordance with Art. 28 GDPR.

3. collection and processing of personal data when visiting the website

The following data is processed automatically when you visit our website:

• IP address

• Date and time of access

• Browser type and operating system

• Referrer URL

• visited pages

This processing takes place on the basis of our legitimate interest system security and for technical optimisation (Art. 6 para. 1 lit. f GDPR). This data is not analysed on a personal basis.

4. making contact

Contact form (Forminator Form)

If you send us enquiries via the contact form, your details from the form, including the contact data you provide there, will be stored by us for the purpose of processing the enquiry and in the event of follow-up questions. This data is processed on the basis of Art. 6 para. 1 lit. b GDPR (fulfilment of contract or pre-contractual measures) or Art. 6 para. 1 lit. f GDPR (legitimate interest in the efficient processing of your enquiry).
The data entered will not be passed on without your consent. The data is stored on our web server or via the "Forminator" plugin, which stores the form content in the website database.

Note: The transmission of data is encrypted (via HTTPS). However, we recommend that you do not transmit any sensitive personal data (e.g. health data) via the form.

5th Newsletter

If you register for our newsletter, we will process your e-mail address solely for the purpose of sending you information about our products. The dispatch takes place via the tool MailPoeta service provided by Wysija SARL (France). The subscription takes place in the Double opt-in procedure.

You can unsubscribe at any time using the unsubscribe link in the newsletter or by sending an e-mail to info@baernd.at log off.

Legal basis: Consent pursuant to Art. 6 para. 1 lit. a GDPR

6. webshop & order processing

As part of the webshop (WooCommerce) we process:

• Name

• address

• E-mail address

• Telephone number (optional)

• Order details

• Payment information (no storage of credit card data)

This data is required for the fulfilment of the contract (Art. 6 para. 1 lit. b GDPR). It is not possible to conclude a contract without this data.

The data will be forwarded to:

• Payment service provider (e.g. WooPayments, Stripe, Klarna, EPS)

• Shipping company

• Tax consultant for the fulfilment of legal obligations

Third country transfer: Some payment providers (e.g. Stripe, WooPayments, PayPal) are based in the USA. The data transfer takes place on the basis of EU standard contractual clauses pursuant to Art. 46 GDPR.

Retention period:

• 7 years: tax regulations

• 10 years: Product liability (Austria)

If the order process is cancelled, all data will be deleted.

7. use of WooCommerce and WooPayments

Our online shop is based on the plugin WooCommercedeveloped by Automattic Inc, USA. For payments we use WooPayments (also Automattic). Technical and personal data is processed for order processing.

Find out more at: https://automattic.com/privacy/

A Data processing agreement in accordance with Art. 28 GDPR with Automattic is available.

8. cookies

Our website uses cookies to enable basic functions (e.g. shopping basket, session management). We also use cookies to anonymously analyse and improve the website. Some cookies are set by third-party providers (e.g. Stripe).

On your first visit, we display a cookie banner where you can manage your consent.

Legal basis:

• Strictly necessary cookies: Art. 6 para. 1 lit. f GDPR

• all others: Art. 6 para. 1 lit. a GDPR in conjunction with. §165 TKG 2021

9. cookies & services used (extract)

10.Google reCAPTCHA (v2 and v3)

To protect our website and in particular the ordering process from misuse, fraud and automated access (bots), we use Google reCAPTCHA in the versions v2 and v3. The provider is the Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

reCAPTCHA is used to check whether data is entered on our website by a human or by an automated programme. This is particularly necessary for security-relevant processes such as card payments in the online shop.

Processed data

When using Google reCAPTCHA, the following data, among others, may be processed:

• IP address

• Date and duration of the visit

• Mouse movements and keystrokes

• Device and browser information

• Referrer URL

• possibly cookies from Google

With reCAPTCHA v3 this analysis is carried out in the background, without a visible query („I am not a robot“) being displayed. A risk value („score“) is calculated on the basis of various features in order to recognise abusive activities.
With reCAPTCHA v2 a visible query may be required.

Purpose and legal basis

The processing is carried out for the purpose of Fraud prevention, Prevention of abuse and to the Securing online payment transactions.

The integration of Google reCAPTCHA takes place only with your consent in accordance with Art. 6 para. 1 lit. a GDPR, which is requested via our cookie/consent banner. Without your consent, reCAPTCHA will not be loaded.

Data transfer to third countries

When using Google reCAPTCHA, personal data may be transmitted to servers of the Google parent company in the United States. USA be transferred. There is currently no level of data protection in the USA comparable to that in the EU. For this purpose, Google uses data protection standards approved by the EU Commission. Standard contractual clauses.

Revocation of consent

You can revoke or change your consent at any time via the settings of our cookie/consent banner. However, without your consent, certain functions, in particular card payment, may not be available.

Further information on data processing by Google can be found in Google's privacy policy.

11. google fonts (locally integrated)

For the visual design we use locally integrated Google Fonts. It will no connection to Google servers established. Therefore No transmission of personal data to Google.

12. your rights

You have the right to:

• Information (Art. 15 GDPR)

• Rectification (Art. 16 GDPR)

• Erasure (Art. 17 GDPR)

• Restriction of processing (Art. 18 GDPR)

• Data portability (Art. 20 GDPR)

• Objection to processing (Art. 21 GDPR)

• Revocation of a given consent (Art. 7 para. 3 GDPR)

If you have any complaints, please contact us or the:
Austrian Data Protection Authority
Barichgasse 40-42, 1030 Vienna
https://www.dsb.gv.at

13. contact

bärnd KG
Kärntnerstrasse 35
9601 Arnoldstein
e-mail: info@baernd.at
Phone: +43 670 500 7700