Privacy policy

§ 1 INFORMATION ON THE COLLECTION OF PERSONAL DATA

(1) Below, we provide information about the collection of personal data when you use our website. Personal data is any data that can be related to you personally, e.g. name, address, email addresses, user behaviour.

(2) The controller pursuant to Art. 4(7) of the EU General Data Protection Regulation (GDPR) is SayCheeese GmbH. You can reach our data protection contact at datenschutz@saycheeese.at or at our postal address, marked “Datenschutz” (data protection).

(3) Contacting us:

When you contact us by email or via a contact form, we store the data you provide (your email address and, where applicable, your name and telephone number) in order to answer your questions. We delete the data arising in this context once storage is no longer necessary, or restrict processing if statutory retention obligations apply.

(4) As we use contracted service providers for individual functions of our services or would like to use your data for advertising purposes, we inform you in detail about the respective processes in §6, where you will also find information on the storage period.

§ 2 YOUR RIGHTS

(1) You have the following rights with respect to us regarding the personal data concerning you:

– Right of access,

– Right to rectification or erasure,

– Right to restriction of processing,

– Right to object to processing,

– Right to data portability.

(2) You also have the right to lodge a complaint with a data protection supervisory authority about our processing of your personal data.

§ 3 COLLECTION OF PERSONAL DATA WHEN YOU VISIT OUR WEBSITE

(1) If you use the website for information purposes only, i.e. if you do not register or otherwise send us

information, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure its stability and security (legal basis: Art. 6(1)(f) GDPR):

– IP address

– Date and time of the request

– Time zone difference from Greenwich Mean Time (GMT)

– Content of the request (specific page)

– Access status/HTTP status code

– Amount of data transferred in each case

– Website from which the request originates

– Browser

– Operating system and its interface

– Language and version of the browser software.

(2) In addition to the data mentioned above, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive, assigned to the browser you are using, and through which certain information flows to the party that sets the cookie (in this case, us). Cookies cannot run programs or transmit viruses to your computer. They serve to make our website more user-friendly and effective overall.

(3) Use of cookies:

a) This website uses the following types of cookies, the scope and functionality of which are explained below:

– Transient cookies (see b)

– Persistent cookies (see c).

b) Transient cookies are deleted automatically when you close your browser. These include, in particular, session cookies. These store a so-called session ID, which allows various requests from your browser to be assigned to the same session. This enables your computer to be recognised when you return to our website. Session cookies are deleted when you log out or close your browser.

c) Persistent cookies are deleted automatically after a specified period, which may vary depending on the cookie. You can delete cookies in your browser's security settings at any time.

d) You can configure your browser settings to suit your preferences and, for example, refuse to accept third-party cookies or all cookies. Please note that you may then not be able to use all the functions of this website.

Change cookie preferences

§ 4 FURTHER FUNCTIONS AND SERVICES OF OUR WEBSITE

(1) In addition to the purely informational use of our website, we offer various services that you can use if you are interested. To do so, you will usually have to provide further personal data, which we use to provide the respective service and to which the data processing principles set out above apply.

(2) In some cases, we use external service providers to process your data. They have been carefully selected and commissioned by us, are bound by our instructions and are regularly monitored.

(3) Where our service providers or partners are based in a country outside the European Economic Area (EEA), we inform you of the consequences of this in the description of the individual functions used.

§ 5 OBJECTION TO OR WITHDRAWAL OF CONSENT TO THE PROCESSING OF YOUR DATA

(1) If you have given consent to the processing of your data, you can withdraw it at any time. Such a withdrawal affects the permissibility of processing your personal data after you have communicated it to us.

(2) Where we base the processing of your personal data on a balancing of interests, you can object to the processing. This is the case in particular if the processing is not necessary for the performance of a contract with you, which we indicate in each case in the following description of the functions. When exercising such an objection, we ask you to explain the reasons why we should not process your personal data as we have done. In the event of a justified objection, we will examine the situation and either stop or adjust the data processing or show you our compelling legitimate grounds on the basis of which we will continue the processing.

(3) You can of course object to the processing of your personal data for advertising and data analysis purposes at any time. You can inform us of your objection to advertising using the following contact details: datenschutz@saycheeese.at

§ 6 EXTERNAL PARTNERS, SERVICE PROVIDERS & PLUGINS:

Contact form:

On our website, we offer you the option of getting in touch with us via a contact form. When you contact us, we will store your IP address and the date and time of your registration. This serves as a safeguard on our part in the event that a third party misuses your email address. We do not collect any further data. The data collected in this way is used exclusively to answer your enquiry or to contact you. It is not passed on to third parties. Nor is the data collected in this way compared with data that may be collected by other components of our website. We delete your data once the purpose of processing has been fulfilled.

Use of Google Analytics:

(1) This website uses Google Analytics, a web analytics service provided by Google Inc. (“Google”). Google Analytics uses so-called “cookies”, text files that are stored on your computer and enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. If IP anonymisation is activated on this website, however, Google will first truncate your IP address within member states of the European Union or in other states party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with further services relating to website and internet use.

(2) The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

(3) You can prevent cookies from being stored by adjusting the settings of your browser software accordingly; however, please note that in this case you may not be able to use all the functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.

(4) We use Google Analytics to analyse the use of our website and to improve it regularly. The statistics obtained enable us to improve our services and make them more interesting for you as a user. For the exceptional cases in which personal data is transferred to the USA, Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/ EU-US-Framework. The legal basis for the use of Google Analytics is Art. 6(1)(f) GDPR.

(5) Third-party information: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. Terms of use: http://www.google.com/analytics/terms/de.html, privacy overview: http://www.google.com/intl/de/analytics/learn/privacy.html, and the privacy policy: http://www.google.de/intl/de/policies/privacy.

(6) This website also uses Google Analytics for a cross-device analysis of visitor flows, which is carried out using a user ID. You can deactivate the cross-device analysis of your use in your customer account under “My data”, “Personal data”.

(7) Deletion: Stored usage data is deleted after 7 months at the latest.

Integration of Google Maps:

(1) On this website we use Google Maps. This allows us to show you interactive maps directly on the website and enables you to use the map function conveniently.

(2) When you visit the website, Google receives the information that you have accessed the corresponding subpage of our website. In addition, the data mentioned under § 3 of this policy is transmitted. This happens regardless of whether Google provides a user account that you are logged in to or whether no user account exists. If you are logged in to Google, your data will be assigned directly to your account. If you do not want it to be associated with your Google profile, you must log out before activating the button. Google stores your data as usage profiles and uses them for the purposes of advertising, market research and/or needs-based design of its website. Such evaluation takes place in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, and you must contact Google to exercise this right.

(3) Further information on the purpose and scope of data collection and its processing by the plug-in provider can be found in the provider's privacy policies. There you will also find further information on your rights in this regard and settings options for protecting your privacy: http://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

Use of web fonts:

(1) This website uses external fonts, Google Fonts. Google Fonts is a service provided by Google Inc. (“Google”).

(2) These web fonts are integrated via a server call, usually to a Google server in the USA. This transmits to the server which of our web pages you have visited. Google also stores the IP address of the browser on the end device of the visitor to these web pages.

(3) Further information on the purpose and scope of data collection and its processing by the plug-in provider can be found in the provider's privacy policies. There you will also find further information on your rights in this regard and settings options for protecting your privacy: for more details, see Google's privacy notices, which you can access here: www.google.com/fonts#AboutPlace:about and at www.google.com/policies/privacy/ Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

Use of eTermin:

As part of this online appointment booking, personal data is collected and processed on our behalf by eTermin GmbH only to the extent necessary. Only the fields marked with an asterisk are mandatory; this information is essential for using the service (Art. 6(1)(b) GDPR). Providing further data can be helpful but is not required (voluntary information, Art. 6(1)(a) GDPR). We process and store your personal data for as long as is necessary to fulfil our contractual and legal obligations. If storing personal data is no longer necessary to fulfil these obligations, it will be deleted unless statutory retention obligations apply.

Online questionnaire:

(1) On our website, we offer you the option of completing an online pre-check. When you fill it in, we will store your IP address and the date and time of your registration. This serves as a safeguard on our part in the event that a third party misuses data. We do not collect any further data. The data collected in this way is used exclusively to answer the enquiry or to contact you. It is not passed on to third parties. Nor is the data collected in this way compared with data that may be collected by other components of our website. We delete your data once the purpose of processing has been fulfilled.

(2) To protect your data, it is transmitted in encrypted form via an https connection, and the company identity of the website is verified at the same time (128-bit SSL encryption). For more information on the security of the connection and the trustworthiness of the website, click on the padlock symbol in front of the web address.

(3) Typeform uses Amazon Web Services (AWS) to store data (http://aws.amazon.com/de/security/). This is a very secure cloud service that holds the following security certifications: AWS has received DIN ISO/IEC 27001 certification and has been confirmed as a Level 1 service provider under the credit card industry's data security standard (DSS/PCI). In annual SOC 1 audits, AWS was confirmed at the “Moderate” level for US government systems and at DIACAP Level 2 for DoD systems.

(4) Third-party information: TYPEFORM SL, C/Bac de Roda, 163 (Local), 08018 – Barcelona (Spain). Email: support@typeform.com . Privacy overview: https://admin.typeform.com/to/dwk6gt