Privacy Policy

The controller responsible for data processing is:
Tyrolit Schleifmittelwerke Swarovski AG & Co K.G.
Swarovskistrasse 33
6130 Schwaz
Österreich

Email: consumergoods@tyrolitlife.com
Phone: +43 664 8220059

We appreciate your interest in our online shop. Protecting your privacy is very important to us. Below we inform you in detail about the handling of your data. Your data will be processed on the basis of the GDPR and in accordance with § 165 para. 3 TKG.

1. Access data and hosting

You can visit our websites without providing any personal information. Each time a webpage is accessed, the web server automatically stores a so-called server log file, which includes details such as the name of the requested file, your IP address, date and time of access, transmitted data volume, and the requesting provider (access data). This data is recorded solely for the purpose of ensuring the smooth operation of the website and improving our services. This processing serves to protect our legitimate interests in the proper presentation of our offerings, which outweigh other considerations under Article 6(1)(f) GDPR.

All access data is deleted no later than one month after your visit to the website.

Hosting

Some of the services for hosting and displaying the website are provided by our service providers as part of processing on our behalf. Unless otherwise explained in this privacy policy, all access data as well as all data collected in the forms provided for this purpose on this website will be processed on their servers. If you have any questions about our service providers and the basis of our cooperation with them, please contact us as described in this privacy policy.

2. Data Processing for Contract Execution and Contacting

2.1 Data Processing for Contract Execution

For the purpose of processing contracts (including inquiries about and processing of any existing warranty claims and performance issues, as well as any statutory obligations to update), in accordance with Article 6(1) sentence 1 lit. b of the GDPR, we collect personal data when you voluntarily provide it to us as part of your order. Fields marked as mandatory are indicated as such because, in these instances, we require the data for contract execution, and we cannot dispatch the order without it. The data that is collected is evident from the respective input forms.

Further information on the processing of your data, particularly regarding the disclosure to our service providers for the purposes of order processing, payment, and dispatch, can be found in the subsequent sections of this privacy statement. After the contract has been fully processed, your data will be restricted for further processing and deleted upon expiry of the retention periods prescribed by tax and commercial law, pursuant to Art. 6 para. 1 s. 1 lit. c GDPR, unless you have explicitly consented to further use of your data in accordance with Art. 6 para. 1 s. 1 lit. a GDPR, or we reserve the right to further use your data within the bounds of legally permitted and outlined in this statement.

2.2 Customer account

If you have given your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR by choosing to open a customer account, we will use your data for the purpose of opening a customer account and storing your data for further future orders on our website. The deletion of your customer account is possible at any time and can be done either by sending a message to the contact option described in this privacy policy or via a function provided for this purpose in the customer account. After deletion of your customer account, your data will be deleted, unless you have expressly consented to further use of your data in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this statement.

2.3 Contact

In the context of customer communication, we collect personal data to process your inquiries in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR if you voluntarily provide us with this data when contacting us (e.g. via contact form or e-mail). Mandatory fields are marked as such, as in these cases we absolutely need the data to process your contact. The data collected can be seen from the respective input forms. After complete processing of your request, your data will be deleted, unless you have expressly consented to further use of your data in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this statement.

3. Data processing for the purpose of shipping processing

To fulfill the contract in accordance with Article 6(1)(b) GDPR, we transmit your data to the shipping service provider responsible for delivery, insofar as this is necessary for the shipment of ordered goods.

If you have any questions regarding our service providers and the basis of our collaboration with them, please contact us using the details provided in this privacy policy.

Data transfer to shipping service providers for the purpose of shipping notification

If you have given us your explicit consent during or after your order, we will forward your email address to the selected shipping service provider based on this consent in accordance with Article 6(1)(a) GDPR. This allows the shipping provider to contact you before delivery for the purpose of delivery notification or coordination.

You can revoke your consent at any time by sending a message to the contact details provided in this privacy policy or directly to the shipping service provider at the contact address listed below. Upon revocation, we will delete your data unless you have explicitly consented to further use of your data or we are legally permitted to retain it, in which case we will inform you accordingly in this policy.

If you have any questions regarding our service providers and the basis of our collaboration with them, please contact us using the details provided in this privacy policy.

General Logistics Systems Austria GmbH
Traunuferstraße 105a
AT-4052 Ansfelden
Austria

DHL Paket (Austria) GmbH
Brunner Straße 65
1230 Wien
Österreich

4. Data processing for payment processing

When processing payments in our online shop, we work with these partners: technical service providers, credit institutions, payment service providers.

4.1 Data processing for transaction processing

Depending on the selected payment method, we transmit the data necessary for processing the payment transaction to our technical service providers, who act as data processors on our behalf, or to the designated financial institutions or selected payment service providers, insofar as this is required for payment processing. This processing is carried out to fulfill the contract in accordance with Article 6(1)(b) GDPR.

In some cases, payment service providers collect the necessary payment data themselves, for example, on their own websites or via technical integration during the ordering process. In such cases, the privacy policy of the respective payment service provider applies.

If you have any questions regarding our payment processing partners and the basis of our collaboration with them, please contact us using the details provided in this privacy policy.

4.2 Data processing for the purpose of fraud prevention and the optimisation of our payment processes

If necessary, we provide our service providers with further data that they use together with the data necessary for the processing of the payment as our processors for the purpose of fraud prevention and the optimization of our payment processes (e.g. invoicing, processing of contested payments, accounting support). In accordance with Art. 6 para. 1 sentence 1 lit. f GDPR, this serves to safeguard our overriding legitimate interests in our protection against fraud or in efficient payment management as part of a balance of interests.

Identity and credit check when selecting Klarna payment services

Klarna Pay Now (Direct Debit), Klarna Pay Later (Invoice Purchase)

If you choose the payment services of Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden (hereinafter “Klarna”), we request your consent under Article 6(1)(a) GDPR to transmit the data necessary for payment processing, as well as identity and credit checks, to Klarna.

In Germany, Klarna may use credit agencies listed in Klarna’s privacy policy for identity and credit checks. The information obtained about the statistical probability of payment default is used by Klarna to make a balanced decision on the initiation, execution, or termination of the contractual relationship.

You can revoke your consent at any time by sending a message to the contact details provided in this privacy policy. This may result in us being unable to offer you certain payment options. You can also revoke your consent regarding the use of your personal data directly with Klarna at any time.

4.3 Identity and credit check when selecting purchase on account via PayPal and Ratepay

Purchase on Invoice (Ratepay & PayPal)

If you choose the payment method Purchase on Invoice (offered via Ratepay GmbH, Franklinstraße 28-29, 10587 Berlin, Germany, hereinafter “Ratepay,” and PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg, hereinafter “PayPal”)), we request your consent under Article 6(1)(a) GDPR to transmit the data necessary for payment processing, as well as identity and credit checks, to Ratepay.

In Germany, Ratepay may use credit agencies listed in its privacy policy for identity and credit checks. The information obtained regarding the statistical probability of payment default is used by Ratepay to make a balanced decision on the initiation, execution, or termination of the contractual relationship.

You can revoke your consent at any time by sending a message to the contact details provided in this privacy policy. This may result in us being unable to offer you certain payment options.

For additional information on PayPal’s data protection policies, please click here.

5. Advertising by email

5.1 Email newsletter with registration, newsletter tracking with separate consent

If you subscribe to our newsletter, we will use the data required for this purpose or provided separately by you in order to regularly send you our e-mail newsletter on the basis of your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR.

Unsubscribing from the Newsletter

You can unsubscribe from the newsletter at any time, either by sending a message to the contact details provided below or via the designated link in the newsletter. After unsubscribing, we will remove your email address from the recipient list unless you have expressly consented to further use of your data in accordance with Article 6(1)(a) GDPR or we reserve the right to use your data beyond this, as permitted by law and as outlined in this policy.

If you have additionally given us your consent under Article 6(1)(a) GDPR to analyze our newsletters, we will also analyze your interactions with our newsletters by measuring, storing, and evaluating open and click rates for the purpose of optimizing future newsletter campaigns (“Newsletter Tracking”).

For this analysis, the emails we send contain one-pixel technologies (e.g., web beacons, tracking pixels) that are stored on our website. For these evaluations, we link the following “newsletter data” in particular:

and the one-pixel technologies with your e-mail address or your IP address and, if applicable, an individual ID. Links contained in the newsletter may also contain this ID.

Unsubscribing from newsletter tracking is possible at any time and can be done either by sending a message to the contact option described or via a link provided for this purpose in the newsletter.

The information is stored for as long as you remain subscribed to the newsletter.

5.2 Newsletter Distribution

The newsletter and the newsletter tracking shown above may also be sent by our service providers as part of processing on our behalf. If you have any questions about our service providers and the basis of our cooperation with them, please contact us as described in this privacy policy.

Our service providers are located and/or use servers in the following countries for which the European Commission has determined an adequate level of data protection by decision: USA

The adequacy decision for the USA serves as the basis for the transfer of data to third countries, provided that the respective service provider is certified. Certification is in place.

6. Cookies and other technologies

6.1 General information

To make your visit to our website more enjoyable and to enable the use of certain functions, we use various technologies, including cookies, on different pages.

Cookies are small text files that are automatically stored on your device. Some of the cookies we use are deleted at the end of your browser session when you close your browser (so-called session cookies). Other cookies remain on your device and allow us to recognize your browser on your next visit (persistent cookies). You can check the storage duration in your web browser’s cookie settings.

Protection of Privacy on Devices

When using our online services, we employ technologies that are strictly necessary to provide the explicitly requested telemedia service. The storage of information on your device or access to information already stored on your device does not require consent in such cases.If functions are not absolutely necessary, the storage of information in your device or access to information already stored in your device requires your consent. We would like to point out that if consent is not given, parts of the website may not be fully usable. Your consent will remain valid until you adjust or reset the respective settings in your device.

Subsequent Data Processing by Cookies and Other Technologies

We use technologies that are strictly necessary for the use of certain functions on our website (e.g., shopping cart functionality). These technologies collect and process data such as your IP address, the time of your visit, device and browser information, and details about your use of our website (e.g., shopping cart contents).

This processing serves our legitimate interest in optimizing the presentation of our services, which prevails in the context of a balancing of interests, in accordance with Article 6(1)(f) GDPR and is carried out in compliance with the legal provisions of § 96(3) TKG.

In addition, we use technologies to fulfil the legal obligations to which we are subject (e.g. to be able to prove consent to the processing of your personal data) as well as for web analysis and online marketing. Further information on this, including the respective legal basis for data processing, can be found in the following sections of this data protection declaration.

Types of Cookies Used

Cookie Settings

You can adjust your browser’s cookie settings using the following links: Microsoft Edge™ / Safari™ / Chrome™ / Firefox™ / Opera™

Alternatively, you can visit the following link: https://www.tyrolitlife.com/cookies/. If cookies are not accepted, the functionality of our website may be limited.

6.2 Use of the “Consentmanager” tool of consentmanager AB to manage consents

On our website, we use “Consentmanager” to inform you about the cookies and other technologies we use on our website, as well as to obtain, manage and document your consent, if necessary, to the processing of your personal data by these technologies. In accordance with Art. 6 para. 1 sentence 1 lit. c GDPR, this is necessary to fulfil our legal obligation under Art. 7 para. 1 GDPR to be able to prove your consent to the processing of your personal data, to which we are subject. “Consentmanager” is an offer of consentmanager AB, Håltegelvägen 1b, 72348 Västerås, Sweden.

After submitting your cookie statement on our website, Consentmanager’s web server stores your IP address, browser, language and website accessed. Furthermore, the IP is processed to determine the country of the visitor. In addition, cookies are used that contain information about your consent behaviour, in particular the status and date of consent.

The duration of data storage depends on your active user settings on our website and will be deleted after 2 years, unless you have expressly consented to further use of your data in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this statement.

Information on the third country transfer (data transfer to third countries)

There is a particular risk that local authorities in the third country might not have sufficiently restricted access rights to your personal data from the perspective of European data protection. This could occur without us, as the data exporter, or you, as the data subject, being aware of it. Additionally, there might not be adequate legal remedies available to you to prevent such access or to take action against it. Specifically, the following countries are currently identified as third countries without an adequacy decision from the EU Commission (example list):

The following countries are currently considered third countries without an adequacy decision from the EU Commission (for example):

You can find out which third countries we transfer data to in the data protection information for the respective tool and/or service we use for consent management/ Consent Manager Platform (CMP).

7. Use of cookies and other technologies

Insofar as you have given your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR, we use the following cookies and other third-party technologies on our website. After the loss of purpose and the end of the use of the respective technology by us, the data collected in this context will be deleted. You can revoke your consent at any time with effect for the future. You can find more information about your options for revocation in the “Cookies and other technologies” section. For more information, including the basis of our collaboration with each vendor, please refer to each technology. If you have any questions about the providers and the basis of our cooperation with them, please contact us as described in this privacy policy.

7.1 Use of Google services

YouTube is an offer of Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). The information automatically collected by Google about your use of our online presence on YouTube is usually transmitted to a server of Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA and stored there.

Our service providers are located and/or use servers in countries outside the EU and the EEA for which the European Commission has determined an adequate level of data protection by decision.

Our service providers are located and/or use servers in these countries: Australia, Hong Kong, India, Indonesia, Malaysia, Singapore, Thailand, Taiwan, Brazil, Mexico. There is no adequacy decision from the European Commission for these countries. Our cooperation with you is based on these guarantees: standard data protection clauses of the European Commission.

Google Analytics

For the purpose of website analysis, Google Analytics automatically collects and stores data (IP address, time of visit, device and browser information and information about your use of our website) from which usage profiles are created using pseudonyms. Cookies can be used for this purpose. If you visit our website from the EU, your IP address will be stored on a server located in the EU for the purpose of deriving location data and then deleted immediately before the traffic is forwarded to other Google servers for processing. Data processing is carried out on the basis of an agreement on order processing by Google.

For the purpose of optimised marketing of our website, we have activated the data sharing settings for “Google products and services”. This allows Google to access the data collected and processed by Google Analytics and then use it to improve Google’s services. The data is shared with Google within the framework of these data sharing settings on the basis of an additional agreement between data controllers. We have no influence on the subsequent data processing by Google.

For the purpose of optimizing our website’s marketing, we utilize the so-called User-ID function. With this function, we can assign a unique, permanent ID to your interaction data from one or multiple sessions on our online platforms, thus enabling us to analyze your user behavior across devices and sessions.

For web analysis, the Google Analytics Google Signals extension function enables so-called “cross-device tracking”. If your internet-enabled devices are linked to your Google account and you have activated the “personalised advertising” setting in your Google account, Google can generate reports on your usage behaviour (in particular the number of users across devices), even if you change your device. We do not process personal data in this respect, we only receive statistics based on Google Signals.

For web analysis and advertising purposes, the extension function of Google Analytics enables the so-called DoubleClick cookie to recognize your browser when you visit other websites. Google will use this information to compile reports on website activity and to provide other services related to website use.

Google AdSense

Our website uses Google AdSense to market space for third-party ads. These advertisements are displayed to you in various places on this website. The so-called DoubleClick cookie enables the display of interest-based advertising through the collection and processing of data (IP address, time of visit, device and browser information as well as information about your use of our website) and the automatic assignment of a pseudonymous user ID, with the help of which the interests are determined on the basis of visits to this and other websites.

YouTube Video Plugin

In order to integrate third-party content, data (IP address, time of visit, device and browser information) is collected via the YouTube Video Plugin in the extended data protection mode we use, transmitted to Google and then processed by Google only when you play a video.

Google Ads

For advertising purposes, both in Google search results and on third-party websites, our website places the so-called Google Remarketing cookie. This action automates interest-based advertising by collecting and processing data (such as your IP address, visit time, device, and browser information, along with details about your website usage) through a pseudonymous Cookie ID based on the pages you’ve visited. Additional data processing occurs only if you have enabled the “personalized advertising” option in your Google account. If you are logged into Google during your visit to our website, Google combines your data with Google Analytics data to create and define audience lists for cross-device remarketing purposes.

For website analysis and event tracking, we use Google Ads Conversion Tracking to measure your subsequent usage behaviour if you have come to our website via an advertisement from Google Ads. For this purpose, cookies can be used and data (IP address, time of visit, device and browser information as well as information about your use of our website based on events specified by us, such as a visit to a website or newsletter registration) can be collected, from which usage profiles are created using pseudonyms.

Google Tag Manager

Google Tag Manager allows us to manage various codes and services on our website. When implementing the individual tags, Google may also process personal data (e.g. IP address, online identifiers (including cookies)). Data processing is carried out on the basis of an agreement on order processing by Google.

If you do not wish to use individual tracking services and have therefore deactivated them, the deactivation will remain for all affected tracking tags that are integrated by the Google Tag Manager.

7.2 Use of Facebook services

 Use of Facebook Pixel

We use the Facebook pixel within the framework of the technologies of Meta Platforms Ireland Ltd., Block J, Serpentine Avenue, Dublin 4, Ireland (“Facebook (by Meta)” or “Meta Platforms Ireland”). The Facebook pixel automatically collects and stores data (IP address, time of visit, device and browser information as well as information about your use of our website on the basis of events specified by us, such as a visit to a website or newsletter registration), from which user profiles are created using pseudonyms. As part of the so-called extended data comparison, information is also collected and stored in a hashed form for comparison purposes, with which individuals can be identified (e.g. names, e-mail addresses and telephone numbers). For this purpose, a cookie is automatically set by the Facebook pixel when you visit our website, which automatically enables your browser to be recognised when you visit other websites by means of a pseudonymous cookie ID. Facebook (by Meta) will combine this information with other data from your Facebook account and use it to compile reports on website activity and to provide other services related to website use, in particular personalized and group-based advertising.

The information automatically collected by Facebook (by Meta) technologies regarding your use of our website is generally transmitted to and stored on a server of Meta Platforms, Inc., located at 1601 Willow Road, Menlo Park, California 94025, USA. For further details on data processing by Facebook, please refer to Facebook’s privacy notices (by Meta). Our service providers are based and/or utilize servers in the following countries, which the European Commission has deemed to have an adequate level of data protection: the USA, Canada, Japan, South Korea, New Zealand, the United Kingdom, and Argentina. There is an adequacy decision from the European Commission regarding an adequate level of data protection for the USA, provided that the respective service provider is certified. Certification has been obtained. Our service providers are located and/or use servers in these countries: Australia, Hong Kong, India, Indonesia, Malaysia, Singapore, Thailand, Taiwan, Brazil, Mexico.

There is no adequacy decision from the European Commission for these countries. Our cooperation with you is based on these guarantees: standard data protection clauses of the European Commission.

Facebook Analytics

As part of Facebook Analytics, statistics on visitor activities on our website are generated from the data collected with the Facebook pixel about your use of our website. Data processing takes place on the basis of an agreement on order processing by Facebook. Your analysis serves the optimal presentation and marketing of our website.

 Facebook Ads

We use Facebook Ads to advertise this website on Facebook and other platforms. We determine the parameters of the respective advertising campaign. Facebook is responsible for the exact implementation, in particular the decision on the placement of the ads with individual users. Unless otherwise specified for the individual technologies, data processing is carried out on the basis of an agreement between joint controllers in accordance with Art. 26 GDPR. The joint responsibility is limited to the collection of the data and its transmission to Facebook Ireland. Subsequent data processing by Facebook Ireland is not covered by this.

Based on the statistics on visitor activity on our website generated via Facebook pixels, we use Facebook Custom Audience to run group-based advertising on Facebook by determining the characteristics of the respective target group. As part of the extended data comparison (see above) that takes place to determine the respective target group, Facebook (by Meta) acts as our processor.

Based on the pseudonymous cookie ID set by Facebook Pixel and the data collected about your usage behaviour on our website, we use Facebook Pixel Remarketing to carry out personalised advertising.

For web analysis and event tracking, we use Facebook Pixel Conversions to measure your subsequent usage behaviour if you have reached our website via an advertisement from Facebook Ads. Data processing takes place on the basis of an agreement on order processing by Facebook.

7.3 Other providers of web analytics and online marketing services

Use of AdRoll Retargeting for Online Marketing

Via the advertising partner NextRoll Ltd., Level 6, 1, Burlington Plaza, Burlington Road, Dublin 4, Ireland (“AdRoll”), we advertise this website in search results as well as on the websites of third parties. When you visit our website, a retargeting cookie is automatically set by AdRoll or its partners, which enables interest-based advertising using a pseudonymous cookie ID and based on the pages you visit. Data processing takes place on the basis of an agreement between joint controllers in accordance with Art. 26 GDPR. We determine the parameters of the respective advertising campaign. AdRoll is responsible for the exact implementation (e.g. the decision on the placement of the individual ads). The data automatically collected by AdRoll (IP address, time of visit, device and browser information and information about your use of our website) may be combined by AdRoll with information from other sources and transmitted to AdRoll advertising partners. In addition, they are usually transferred to a server of NextRoll, Inc.201 California Street, 5th Floor, Suite 500, San Francisco, CA 94111, USA.

Our service providers are located and/or use servers in the following countries for which the European Commission has determined an adequate level of data protection by decision: USA.

There is a decision of the European Commission on an adequate level of data protection for the USA as the basis for a third country transfer, insofar as the respective service provider is certified. Until certified by our service providers, the data transfer will continue to be based on this basis: standard data protection clauses of the European Commission.

Use of Vimeo Video Plugin to integrate third-party content

To integrate third-party content, data such as IP address, visit time, device, and browser information are collected via the video plugin by Vimeo Inc., 330 West 34th Street, 5th Floor, New York 10011, USA (“Vimeo”), transmitted to Vimeo, and then processed by them. This data processing is based on an agreement between joint controllers according to Article 26 of the GDPR. The Vimeo Video plugin automatically integrates Google Analytics. For website analytics, Google Analytics automatically collects and saves data including IP address, time of visit, device and browser information, and details of your website usage, from which usage profiles are created using pseudonyms. Cookies may be utilized for this. Google Analytics is provided by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). The information auto-collected by Google about your website usage is usually sent to and stored on a server of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. When accessing our website from the EU, your IP address is recorded on a server located within the EU for location data determination and immediately deleted before the traffic is rerouted to Google’s other servers for further processing. We do not have control over or access to the data processing conducted by Vimeo, including the configurations and outcomes related to Google Analytics.

Our service providers are located and/or use servers in countries outside the EU and the EEA for which the European Commission has determined an adequate level of data protection by decision.

Our service providers are located and/or use servers in these countries: Australia, Hong Kong, India, Indonesia, Malaysia, Singapore, Thailand, Taiwan, Brazil, Mexico. There is no adequacy decision from the European Commission for these countries. Our cooperation with you is based on these guarantees: standard data protection clauses of the European Commission.

8. Integration of the Trusted Shops Trustbadge/ Other Widgets

If you have given your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR, Trusted Shops widgets are integrated on this website to display the Trusted Shops services (e.g. quality seal, collected reviews) as well as to offer the Trusted Shops products to buyers after an order.

The Trustbadge and the services advertised with it are an offer of Trusted Shops AG, Subbelrather Str. 15C, 50823 Cologne (“Trusted Shops”), with which we are jointly responsible for data protection in accordance with Art. 26 GDPR. Within the framework of this data protection notice, we will inform you below about the essential contents of the contract in accordance with Art. 26 para. 2 GDPR.

As part of the joint responsibility between us and Trusted Shops AG, please contact Trusted Shops with any data protection questions and to assert your rights, preferably using the contact options specified in the data protection information. Regardless, you can always contact the person responsible of your choice. If necessary, your request will then be forwarded to the other person responsible for answering.

8.1 Data processing when integrating the trust badge/ other widgets

Trusted Shops uses service providers in the areas of hosting, monitoring and logging. The legal basis is Art. 6 (1) (f) GDPR for the purpose of ensuring trouble-free operation. Processing may take place in third countries (USA and Israel). An adequate level of data protection is ensured in each case by an adequacy decision of the EU Commission, which is available here for the USA and here for Israel. Service providers from the USA are usually certified under the EU-U.S. Data Privacy Framework (DPF). More information can be found here. If service providers used are not certified under the DPF, standard contractual clauses have been concluded as a suitable guarantee.

When the trust badge is called up, the web server automatically stores a so-called server log file, which also contains your IP address, date and time of the call, amount of data transmitted and the requesting provider (access data) and documents the call. The IP address is anonymised immediately after collection, so that the stored data cannot be assigned to your person. The anonymised data is used in particular for statistical purposes and for error analysis.

8.2 Data processing after order completion

If you have given your consent, the Trustbadge accesses order information stored on your device (order amount, order number, and any purchased product) as well as your email address after the completion of an order. Your email address is then hashed using a cryptographic one-way function. The resulting hash value, along with the order information, is transmitted to Trusted Shops pursuant to Art. 6 (1) (a) of the GDPR. This process checks whether you are already registered for services with Trusted Shops. If this is the case, further processing will be carried out in accordance with the contractual agreement made between you and Trusted Shops. If you are not yet registered for the services, or if you have not consented to automated detection via the Trustbadge, you will subsequently be offered the opportunity to manually register for the services or complete the protection as part of your possibly existing usage agreement.

For this purpose, the trust badge accesses the following information after completing your order, which is stored in the terminal device you use: order amount, order number and e-mail address. This is necessary so that we can offer you buyer protection. The data will only be transmitted to Trusted Shops if you actively decide to conclude the buyer protection by clicking on the corresponding button in the so-called trust card. If you decide to use the services, further processing is governed by the contractual agreement with Trusted Shops in accordance with Art. 6 (1) (b) GDPR in order to complete your registration for buyer protection and to be able to secure the order and, if necessary, subsequently send you evaluation invitations by e-mail.

Trusted Shops employs service providers in the areas of hosting, monitoring, and logging. The legal basis for this is Article 6(1)(f) GDPR, aimed at ensuring smooth operation. Processing may occur in third countries (USA and Israel). An adequate level of data protection is ensured by an adequacy decision from the EU Commission, available for the USA here and for Israel here. Service providers from the USA are typically certified under the EU-U.S. Data Privacy Framework (DPF). Further information can be found here. If the service providers are not certified under the DPF, Standard Contractual Clauses have been used as appropriate safeguards.

9. Social Media

Our Online Presence on Facebook (by Meta), Instagram (by Meta), YouTube

Should you have granted your consent under Art. 6 para. 1 sentence 1 lit. a DSGVO to the respective social media operator, your data will be automatically gathered and saved for market research and advertising purposes upon visiting our online presences within the aforementioned social media. From this data, usage profiles are created using pseudonyms. These profiles may be utilized to, for example, display advertisements within and outside of the platforms that likely align with your interests. Normally, cookies are employed for this purpose. For detailed information on the processing and utilization of data by the social media operator, alongside contact options, your pertinent rights, and privacy settings, please refer to the privacy statements of the providers listed below. Should you require further assistance regarding this matter, feel free to reach out to us.

Instagram (by Meta) is a service provided by Meta Platforms Ireland Ltd., Block J, Serpentine Avenue, Dublin 4, Ireland (“Meta Platforms Ireland”). The information automatically collected by Meta Platforms Ireland about your use of our online presence on Instagram is generally transmitted to a server of Meta Platforms, Inc., 1601 Willow Road, Menlo Park, CA 94025, USA, and stored there. Data processing in the context of visiting an Instagram (by Meta) fan page is conducted based on an agreement between joint controllers in accordance with Article 26 GDPR. For more information (including details on insights data), please find it here.

Our service providers are located and/or use servers in the following countries for which the European Commission has determined an adequate level of data protection by decision: USA, Canada, Japan, South Korea, New Zealand, United Kingdom, Argentina.

The adequacy decision for the USA serves as the legal basis for data transfers to third countries, provided that the respective service provider is certified. Certification is in place.

Our service providers are based in and/or use servers located in the following countries: Australia, Hong Kong, India, Indonesia, Malaysia, Singapore, Thailand, Taiwan, Brazil, and Mexico.
There is no adequacy decision from the European Commission for these countries. Our collaboration with them is based on these safeguards: Standard Contractual Clauses of the European Commission.

Instagram (by Meta) is a service offered by Meta Platforms Ireland Ltd., Block J, Serpentine Avenue, Dublin 4, Ireland (“Meta Platforms Ireland”). The information automatically collected by Meta Platforms Ireland about your use of our online presence on Instagram is generally transmitted to and stored on a server of Meta Platforms, Inc., 1601 Willow Road, Menlo Park, CA 94025, USA. Data processing in connection with visiting an Instagram (by Meta) fan page is based on an agreement between joint controllers in accordance with Article 26 of the GDPR. For more information (including information about insights data), please find details here.

Our service providers are located and/or use servers in the following countries for which the European Commission has determined an adequate level of data protection by decision: USA, Canada, Japan, South Korea, New Zealand, United Kingdom, Argentina.

The adequacy decision for the USA serves as the basis for data transfers to third countries, provided that the respective service provider is certified. Certification is in place.

Our service providers are based in and/or use servers located in the following countries: Australia, Hong Kong, India, Indonesia, Malaysia, Singapore, Thailand, Taiwan, Brazil, and Mexico.
There is no adequacy decision from the European Commission for these countries. Our collaboration with you is based on these safeguards: Standard Contractual Clauses of the European Commission.

YouTube is a service offered by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). The information automatically collected by Google about your use of our online presence on YouTube is generally transmitted to and stored on a server of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Our service providers are located and/or use servers in countries outside the EU and the EEA for which the European Commission has determined an adequate level of data protection by decision.

Our service providers are located and/or use servers in these countries: Australia, Hong Kong, India, Indonesia, Malaysia, Singapore, Thailand, Taiwan, Brazil, Mexico. There is no adequacy decision from the European Commission for these countries. Our cooperation with you is based on these guarantees: standard data protection clauses of the European Commission.

10. Contact Options and Your Rights

10.1 Your rights

As a data subject, you have the following rights:

10.2 Contact options

Data protection officer:

Swarovskistr. 33
6133 Schwaz
Österreich
privacy@tyrolit.com

If you have any questions about the collection, processing or use of your personal data, information, correction, restriction or deletion of data as well as revocation of consent given or objection to a specific data use, please contact us directly via the contact details in our imprint.

Privacy Policy created with the Trusted Shops legal text generator.