Privacy Policy

Last updated on August 28th, 2022

Thank you for visiting our website / webshop. The protection of your privacy is very important to us. We take your privacy very seriously and treat your personal data confidentially and also in accordance with the mandatary laws.

Your personal data (hereinafter also referred to as only "data") will only be processed by us to the extent necessary and for the solely purpose of providing you a functional and user-friendly website and webshop, including its contents and the services offered.

Per Art. 4 No. 1 of Regulation (EU) 2016 / 679, i.e. the General Data Protection Regulation (hereinafter referred to as "GPDR"), "processing" refers to any operation on your personal data, whether by automated means or not.

This privacy policy is intended to inform you in particular about the type, scope, purpose, duration and legal basis for processing your personal data either under our own control or in conjunction with others. 

You have the right to:

• confirmation of whether your data is being processed, information about what data is being processed, how data is being processed and copies of the data (cf. also Art. 15 GDPR);

• correct / complete your incorrect / incomplete data (cf. also Art. 16 GPDR);

• to the immediate deletion of your data (cf. also Art. 17 GDPR), or, alternatively, if further processing is necessary as stipulated in Art. 17 Para 3 GDPR, to restrict said processing per Art. 18 GDPR
  

• to receive copies of data concerning you and/or provided by you (cf. also Art. 20 GDPR)

• to file complaints with the supervisory authority if you believe that data concerning you is being processed in breach of data protection (cf. also Art. 77 GDPR)

In addition, we as the "controller" are obliged to inform all recipients to whom we disclose data of any such corrections, deletions or restrictions placed per Art. 16, 17 Para 1, 18 GDPR. However this obligation does not apply if such notification is impossible or involves a disproportionate effort. Nevertheless you have a right to information about these recipients.

Likewise, under Art. 21 GDPR, you have the right to object to the controllers's further processing of your data pursuant to Art. 6 Para 1 lit. f GDPR. In particular, an objection to data processing for the purpose of direct advertising is permissible.

Information about us as controllers of your data

The party responsible for this website (the "controller") for purposes of data protection law is:

ANGATI NaturElement GmbH

Aurikelweg 54/2

1220 Vienna

Austria

 

e-Mail: naturelement@angati.at

Phone: + 43 650 2 831 831

The controller's data protection officer is: Mrs. Gerlinde Rattei

Since new technologies and the continuous development of this website may result in changes to this privacy policy, we recommend that you read through this privacy policy at regular intervals. 

 

Server data

Our website and webshop are hosted and operated by ourselves.  Content used in the webshop is retrieved exclusively from our own servers.  Your data never leaves our servers, with the exception of ...

• the passing on to the shipping company commissioned with the delivery;

• the use of Stripe online payment services described further below; 

• the use of Yumpu.com for displaying our product catalog described further below;

• the use of Google reCAPTCHA for preventing access from automated servers as decribed further below;

• sending e-Mails for your convenience as described further below;

• retrieving fonts for displaying Arabic language from Odoo content delivery network as decribed further below.

We do not use social media plugins and do not send newsletters. We do not use 3rd party analytics services such as Google Analytics. 

The data between your web browser and our servers is transmitted exclusively encrypted. We use the latest encryption technologies, use certificates with high encryption (4096 bit) and achieve - as of August 2022 - a rating of "A" in the Qualys SSL Labs Report:

 

For technical reasons data sent by your internet browser to us will be processed especially to ensure a secure and stable website / webshop. Type and version of your browser, operating system, the website from which you came (referrer URL), the webpages on our site visited, the date and time of your visit, the TCP and UDP ports accessed, as well as the IP address from which you visited our site will be processed. Under normal circumstances this data will not be permanently stored  on storage media, unless for logging abnormal usage, e.g. spam, misuse of contact function, denial of service attacks, hacking attempts, etc.

The data thus collected will be temporarily stored, but not in association with any other of your data.

The basis for this storage is Art. 6 Para. 1 lit. f) GDPR. Our legitimate interest lies in the improvement, stability, functionality, and security of our website and webshop.

The data will be deleted within no more than two weeks, unless continued storage is required for evidentiary purposes. In this case, all or part of the data will be excluded from deletion until the investigation of the relevant incident is finally resolved.


Cookies
Cookies are small text files or other storage technologies stored on your computer by your browser. These cookies process certain specific information (see below) about you.

This processing makes our website more user-friendly, efficient, and secure, allowing us, for example, to display our website in different languages.

The legal basis for such processing is Art. 6 Para 1 lit b GDPR, insofar as these cookies are used to collect data to initiate or process contractual relationships.

If the processing does not serve to initiate or process a contract, our legitimate interest lies in improving the functionality of our website / webshop. The legal basis in this case is Art. 6 Para. 1 lit. f GDPR.

The cookies that we use are:

Name	Purpose	Storage Duration	Category	Example value
tz	Used to store the timezone of the visitor	Session only	Session	Europe / Vienna
visitor_uuid	Used to store an anonymized id of the visitor	One year	Privacy / GDPR	bada-87b0-a646-465f-9a50-f38d-f0a4-6be9
cookieconsent_status	Used to store the status of the cookie consent	One year	Privacy / GDPR	dismiss
session_id	Used to identify the current session	Three months	Technical / Security	47f1-a633-f169-7583-9835-759c-1d5f-5315-0817-c262
frontend_lang	Used to store the selected language	Session	Session	de_DE

Session cookies are deleted as you close your internet browser. Other cookies remain on your device and allow us to recognize your browser on your next visit. 

You can also see the duration of storage from the overview in the cookie settings of your web browser. You can set your browser so that you are informed about the setting of cookies and decide individually about their acceptance or exclude the acceptance of cookies for certain cases or in general. If you do not accept cookies, the functionality of our website may be limited.

Each browser differs in the way it manages cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. You can find this for each browser at the following links:

 

Microsoft Edge™:  https://support.microsoft.com/de-de/help/4027947/microsoft-edge-delete-cookies

 

Safari™:  https://support.apple.com/de-de/guide/safari/sfri11471/12.0/mac/10.14

 

Chrome™:  https://support.google.com/chrome/answer/95647?hl=de&hlrm=en

 

Firefox™  https://support.mozilla.org/de/products/firefox/protect-your-privacy/cookies

 

Opera™ :  https://help.opera.com/de/latest/web-preferences/#cookies

 

 

Customer account / registration
If you create a customer account with us via our website / webshop, we will use the data you entered during registration (i.e. your name, your billing and shipping address, your telephone number, your e-mail address and the date/time of your registration) exclusively for services leading up to your potential placement of an order or entering some other contractual relationships with us, to fulfill such orders or contracts, and to provide customer care (e.g. to provide you with an overview of your previous orders). 

During the registration process, your consent will be obtained for this processing of your data, with reference made to this privacy policy. The data collected by us will be used exclusively to provide your customer account. 

If you give your consent to this processing, Art. 6 Para. 1 lit. a GDPR is the legal basis for this processing.

If the opening of the customer account is also intended to lead to the initiation of a contractual relationship with us or to fulfill an existing contract with us, the legal basis for this processing is also Art. 6 Para 1 lit. b GDPR.

You may revoke your prior consent to the processing of your personal data at any time under Art. 7 Para. 3 GDPR with future effect. All you have to do is to inform us that you are revoking your consent.

The data previously collected and stored will the be deleted as soon as processing is no longer necessary. However, we must observer any retention periods required under tax and commercial law.

If you create a user account with us, your password will be stored encrypted.



Shipping providers

In most cases we ship our products via Österreichische Post AG (Austrian Postal Services). Please consult the data protection policy located at https://www.post.at/en/co/c/data-protection to fully understand how your personal data will be processed.

We may in some cases use shipping service providers that may have their registered office in a country outside the European Union.

The transfer of personal data to these shipping providers only takes place within the scope of necessity for the fulfillment of the contract according to Art. 6 Para. 1 lit. b GDPR




Online payment processing via Stripe, Inc.
We use the service of Stripe, Inc. to process online payments in our webshop. Certain data like the order amount will be passed in this case to Stripe, Inc. in order to fulfill the online payment.

The transfer of personal data to these companies only takes place within the scope of necessity for the fulfillment of the contract according to Art. 6 Para. 1 lit. b GDPR


Please consult the privacy policy located at https://stripe.com/at/privacy to  fully understand how Stripe, Inc. processes your personal data. 

 

Contact
If you contact us as the website / webshop operator via the contact options offered (service desk, e-mail, telephone, post), your details (e.g. name, phone number, e-mail address, postal address, issue) will be stored so that they can be used to process and respond to your request. Without your consent, this data will not be passed on to third parties. 

The leal basis for this data processing is Art. 6 Para. 1 lit. b GDPR.

Your data will be deleted once we have fully answered your inquiry and there is no further legal obligation to store your data, such as if an order or contract resulted therefrom.

 

Comments, Reviews, Ratings
We do not offer a comment, review or rating function at present. Except for rating the usefulness (yes/no) of our FAQ entries. We do not process any personal data and we do associate your FAQ rating with any other of your data.


Google reCAPTCHA
Our website / webshop uses Google reCAPTCHA to check and prevent automated servers ("bots") from accessing and interacting with our website. This is a service provided by Google Ireland Ltd (hereinafter "Google")

This service allows Google to determine from which website your request has been sent and from which IP address the reCAPTCHA bos has been used. In addition to your IP address, Google may collect other information necessary to provide and guarantee this service.

The legal basis is Art. 6 Para. 1 lit. f GDPR. Our legitimate interest lies in the security of our website and in the prevention of unwanted, automated access in the form of spam or similar.

Google offers detailed information at https://policies.google.com/privacy concerning the general handling of your user data.


Google Fonts
Our website / webshop uses Google Fonts - a service provided by Google. To enable the display of certain fonts on our website, a server-to-server connection from our website / webshop to the Google server is established whenever our website / webshop is accessed. No access from your browser to Google will take place, thus no IP address or other personal data will be transferred to Google.

The legal basis for using Google Fonts is Art. 6 Para. 1 lit. f GDPR. Our legitimate interest lies in the optimization and economic operation of our site.


FontAwesome
In order to be able to display fonts and visual elements of our website, we use FontAwesome's fonts. FontAwesome is a service of Fonticons Inc., USA.

The used fonts are stored locally at our servers. No access from your browser to FontAwesome's servers will take place, this no IP address or other personal data will be transferred to Google.

The legal basis for using FontAwesome is Art. 6 Para. 1 lit. f GDPR. Our legitimate interest lies in the optimization and economic operation of our site and webshop


YUMPU product catalog
In order to display our product catalog, we use YUMPU - a service provided by i-magazine AG located in Switzerland.

If you decide to view our product catalog, an embedded YUMPU viewer will be startet and your browser will retrieve the contents of our product catalog from the servers of i-magazine AG.

The YUMPU viewer uses the Google Fonts service from Google. If you decide to view our product catalog, your browser may download a Google Font from the Google servers, in which case your (devices) IP address will be used.

As of the time of writing this privacy policy YUMPU does not use any cookies to provide their service.

The legal basis for using YUMPU is Art. 6 Para. 1 lit. f GDPR. Our legitimate interest lies in the optimization and economic operation of our site.

i-magazine AG offers detailed information at https://www.yumpu.com/en/info/privacy_policy concerning the handling of your user data.


Electronic Mail dispatch
At certain events automatically generated electronic e-mails will be sent to the e-mail address provided by you. These events include placing an webshop order, dispatching an order, creation of a customer account, sending payment information / invoice and payment reminders.

Due to technical limitations we cannot electronically sign our outgoing e-mails for now, please examine e-mails from us very carefully. Outgoing e-mails are sent via our provider One.com.

The legal basis for sending automated e-mails is Art. 6 Para. 1 lit. f GDPR. Our legitimate interest lies in the optimization and economic operation of our site and webshop.


Plausible Website Analytics
We use a software called Plausible in order to analyze web requests to our website / webshop. Plausible is a 100% open source web analytics tool. 

We use a self-hosted installation of the tool, thus no personal data is sent to 3rd parties for the purpose of web analytics. 

The legal basis for using Plausible is Art. 6 Para. 1 lit. f GDPR. Our legitimate interest lies in the optimization and economic operation of our site and webshop.


Odoo content delivery network
We use Odoo for serving our website and our webshop. Odoo is a 100% ERP Software. 

Odoo uses the Odoo CDN (content delivery network) in certain situations in order to reduce network traffic.

For the purpose of displaying our website and webshop in arabic langauge, we use the font NotoSansArabic-reg which is loaded from the servers of the Odoo content delivery network. Depending on your geographical location of the IP address of your browser (or VPN if used) this font may be loaded from a server located outside of the EU.  In addition to your IP address, Odoo CDN may collect and store other information necessary to provide and guarantee this service.

The legal basis for is Art. 6 Para. 1 lit. f GDPR. Our legitimate interest lies in the optimization and economic operation of our site and webshop.


Other
Thank you for using our products and services. Please contact us if you have any questions, concerns, feedback, etc.


---
(Some parts of this privacy policy have been copied from Anwaltskanzlei Weiß & Partner's Data Protection Statement Template provided at https://www.ratgeberrecht.eu - thank you!)