Privacy Policy

Verantwortlicher für die Datenverarbeitung ist:
Tyrolit Schleifmittelwerke Swarovski AG & Co K.G.
Swarovskistrasse 33
6130 Schwaz
Österreich

Email: consumergoods@tyrolitlife.com
Phone: +43 (0) 5242 / 606-0

We appreciate your interest in our online shop. Protecting your privacy is very important to us. Below we inform you in detail about the handling of your data. Your data will be processed on the basis of the GDPR and in accordance with § 165 para. 3 TKG.

1. Access data and hosting

Sie können unsere Webseiten besuchen, ohne Angaben zu Ihrer Person zu machen. Bei jedem Aufruf einer Webseite speichert der Webserver lediglich automatisch ein sogenanntes Server-Logfile, das z.B. den Namen der angeforderten Datei, Ihre IP-Adresse, Datum und Uhrzeit des Abrufs, übertragene Datenmenge und den anfragenden Provider (Zugriffsdaten) enthält und den Abruf dokumentiert. Diese Zugriffsdaten werden ausschließlich zum Zwecke der Sicherstellung eines störungsfreien Betriebs der Seite sowie der Verbesserung unseres Angebots ausgewertet. Dies dient der Wahrung unserer im Rahmen einer Interessensabwägung überwiegenden berechtigten Interessen an einer korrekten Darstellung unseres Angebots gemäß Art. 6 Abs. 1 S. 1 lit. f DSGVO. Alle Zugriffsdaten werden spätestens einen Monat nach Ende Ihres Seitenbesuchs gelöscht.

Hosting

Some of the services for hosting and displaying the website are provided by our service providers as part of processing on our behalf. Unless otherwise explained in this privacy policy, all access data as well as all data collected in the forms provided for this purpose on this website will be processed on their servers. If you have any questions about our service providers and the basis of our cooperation with them, please contact us as described in this privacy policy.

2. Data Processing for Contract Execution and Contacting

2.1 Data Processing for Contract Execution

For the purpose of processing contracts (including inquiries about and processing of any existing warranty claims and performance issues, as well as any statutory obligations to update), in accordance with Article 6(1) sentence 1 lit. b of the GDPR, we collect personal data when you voluntarily provide it to us as part of your order. Fields marked as mandatory are indicated as such because, in these instances, we require the data for contract execution, and we cannot dispatch the order without it. The data that is collected is evident from the respective input forms.

Further information on the processing of your data, particularly regarding the disclosure to our service providers for the purposes of order processing, payment, and dispatch, can be found in the subsequent sections of this privacy statement. After the contract has been fully processed, your data will be restricted for further processing and deleted upon expiry of the retention periods prescribed by tax and commercial law, pursuant to Art. 6 para. 1 s. 1 lit. c GDPR, unless you have explicitly consented to further use of your data in accordance with Art. 6 para. 1 s. 1 lit. a GDPR, or we reserve the right to further use your data within the bounds of legally permitted and outlined in this statement.

2.2 Customer account

If you have given your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR by choosing to open a customer account, we will use your data for the purpose of opening a customer account and storing your data for further future orders on our website. The deletion of your customer account is possible at any time and can be done either by sending a message to the contact option described in this privacy policy or via a function provided for this purpose in the customer account. After deletion of your customer account, your data will be deleted, unless you have expressly consented to further use of your data in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this statement.

2.3 Contact

In the context of customer communication, we collect personal data to process your inquiries in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR if you voluntarily provide us with this data when contacting us (e.g. via contact form or e-mail). Mandatory fields are marked as such, as in these cases we absolutely need the data to process your contact. The data collected can be seen from the respective input forms. After complete processing of your request, your data will be deleted, unless you have expressly consented to further use of your data in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this statement.

3. Data processing for the purpose of shipping processing

Zur Vertragserfüllung gemäß Art. 6 Abs. 1 S. 1 lit. b DSGVO geben wir Ihre Daten an den mit der Lieferung beauftragten Versanddienstleister weiter, soweit dies zur Lieferung bestellter Waren erforderlich ist. Bei Fragen zu unseren Dienstleistern und der Grundlage unserer Zusammenarbeit mit ihnen wenden Sie sich bitte an die in dieser Datenschutzerklärung beschriebene Kontaktmöglichkeit.

Data transfer to shipping service providers for the purpose of shipping notification

Sofern Sie uns hierzu während oder nach Ihrer Bestellung Ihre ausdrückliche Einwilligung erteilt haben, geben wir aufgrund dieser gemäß Art. 6 Abs. 1 S. 1 lit. a DSGVO Ihre E-Mail-Adresse an den ausgewählten Versanddienstleister weiter, damit dieser vor Zustellung zum Zwecke der Lieferungsankündigung bzw. -abstimmung Kontakt mit Ihnen aufnehmen kann.
Die Einwilligung kann jederzeit durch eine Nachricht an die in dieser Datenschutzerklärung beschriebene Kontaktmöglichkeit oder direkt gegenüber dem Versanddienstleister unter im Folgenden aufgeführten Kontaktadresse widerrufen werden. Nach Widerruf löschen wir Ihre hierfür angegebenen Daten, soweit Sie nicht ausdrücklich in eine weitere Nutzung Ihrer Daten eingewilligt haben oder wir uns eine darüber hinausgehende Datenverwendung vorbehalten, die gesetzlich erlaubt ist und über die wir Sie in dieser Erklärung informieren. Bei Fragen zu unseren Dienstleistern und der Grundlage unserer Zusammenarbeit mit ihnen wenden Sie sich bitte an die in dieser Datenschutzerklärung beschriebene Kontaktmöglichkeit.

General Logistics Systems Austria GmbH
Traunuferstraße 105a
AT-4052 Ansfelden
Austria

DHL Paket (Austria) GmbH
Brunner Straße 65
1230 Wien
Österreich

4. Data processing for payment processing

When processing payments in our online shop, we work with these partners: technical service providers, credit institutions, payment service providers.

4.1 Data processing for transaction processing

Je nach ausgewählter Zahlungsart geben wir die für die Abwicklung der Zahlungstransaktion notwendigen Daten an unsere technischen Dienstleister, die im Rahmen einer Auftragsverarbeitung für uns tätig sind, oder an die beauftragten Kreditinstitute oder an den ausgewählten Zahlungsdienstleister weiter, soweit dies zur Abwicklung der Zahlung erforderlich ist. Dies dient der Vertragserfüllung gemäß Art. 6 Abs. 1 S. 1 lit. b DSGVO. Zum Teil erheben die Zahlungsdienstleister die für die Abwicklung der Zahlung erforderlichen Daten selbst, z. B. auf ihrer eigenen Webseite oder über eine technische Einbindung im Bestellprozess. Es gilt insoweit die Datenschutzerklärung des jeweiligen Zahlungsdienstleisters.
Bei Fragen zu unseren Partnern für die Zahlungsabwicklung und der Grundlage unserer Zusammenarbeit mit ihnen wenden Sie sich bitte an die in dieser Datenschutzerklärung beschriebenen Kontaktmöglichkeit.

4.2 Data processing for the purpose of fraud prevention and the optimisation of our payment processes

If necessary, we provide our service providers with further data that they use together with the data necessary for the processing of the payment as our processors for the purpose of fraud prevention and the optimization of our payment processes (e.g. invoicing, processing of contested payments, accounting support). In accordance with Art. 6 para. 1 sentence 1 lit. f GDPR, this serves to safeguard our overriding legitimate interests in our protection against fraud or in efficient payment management as part of a balance of interests.

Identity and credit check when selecting Klarna payment services

Klarna Pay now (Lastschrift), Klarna Pay later (Kauf auf Rechnung)
Wenn Sie sich für die Zahlungsdienstleistungen der Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Schweden (im Folgenden Klarna) entscheiden, bitten wir Sie um Ihre Einwilligung nach Art. 6 Abs. 1 S. 1 lit. a DSGVO, dass wir die für die Abwicklung der Zahlung und eine Identitäts- und Bonitätsprüfung notwendigen Daten an Klarna übermitteln dürfen. In Deutschland können für die Identitäts- und Bonitätsprüfung die in der Datenschutzerklärung von Klarna genannten Wirtschaftsauskunfteien eingesetzt werden. Die erhaltenen Informationen über die statistische Wahrscheinlichkeit eines Zahlungsausfalls verwendet Klarna für eine abgewogene Entscheidung über die Begründung, Durchführung oder Beendigung des Vertragsverhältnisses. Ihre Einwilligung können Sie jederzeit durch eine Nachricht an die in dieser Datenschutzerklärung genannten Kontaktmöglichkeit widerrufen. Dies kann zur Folge haben, dass wir Ihnen bestimmte Zahlungsoptionen nicht mehr anbieten können. Sie können Ihre Einwilligung zu dieser Verwendung der personenbezogenen Daten jederzeit auch gegenüber Klarna widerrufen.

4.3 Identity and credit check when selecting purchase on account via PayPal and Ratepay

Wenn Sie sich für die Zahlungsart Kauf auf Rechnung (angeboten über die Ratepay GmbH, Franklinstraße 28-29, 10587 Berlin (im Folgenden Ratepay) und PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg (im Folgenden PayPal)) entscheiden, bitten wir Sie um Ihre Einwilligung nach Art. 6 Abs. 1 S. 1 lit. a DSGVO, dass wir die für die Abwicklung der Zahlung und eine Identitäts- und Bonitätsprüfung notwendigen Daten an Ratepay übermitteln dürfen. In Deutschland können für die Identitäts- und Bonitätsprüfung die in der Datenschutzerklärung der Ratepay genannten Wirtschaftsauskunfteien eingesetzt werden. Die erhaltenen Informationen über die statistische Wahrscheinlichkeit eines Zahlungsausfalls verwendet Ratepay für eine abgewogene Entscheidung über die Begründung, Durchführung oder Beendigung des Vertragsverhältnisses. Ihre Einwilligung können Sie jederzeit durch eine Nachricht an die in dieser Datenschutzerklärung genannten Kontaktmöglichkeit widerrufen. Dies kann zur Folge haben, dass wir Ihnen bestimmte Zahlungsoptionen nicht mehr anbieten können. Zusätzliche Hinweise zum Datenschutz bei PayPal finden Sie hier.

5. Advertising by email

5.1 Email newsletter with registration, newsletter tracking with separate consent

If you subscribe to our newsletter, we will use the data required for this purpose or provided separately by you in order to regularly send you our e-mail newsletter on the basis of your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR.

Die Abmeldung vom Newsletter ist jederzeit möglich und kann entweder durch eine Nachricht an die unten beschriebene Kontaktmöglichkeit oder über einen dafür vorgesehenen Link im Newsletter erfolgen. Nach Abmeldung löschen wir Ihre E-Mail-Adresse aus der Empfängerliste, soweit Sie nicht ausdrücklich in eine weitere Nutzung Ihrer Daten gemäß Art. 6 Abs. 1 S. 1 lit. a DSGVO eingewilligt haben oder wir uns eine darüber hinausgehende Datenverwendung vorbehalten, die gesetzlich erlaubt ist und über die wir Sie in dieser Erklärung informieren.

Wenn Sie uns zusätzlich Ihre Einwilligung gemäß Art. 6 Abs. 1 S. 1 lit. a DSGVO zur Analyse unserer Newsletter erteilt haben, analysieren wir auch Ihren Umgang mit unserem Newsletter durch Messung, Speicherung und Auswertung von Öffnungsraten und der Klickraten zum Zweck der Gestaltung künftiger Newsletterkampagnen („Newsletter-Tracking“).

Für diese Auswertung beinhalten die versendeten E-Mails Ein-Pixel-Technologien (z.B. sog. Web-Beacons, Tracking-Pixel), die auf unserer Website gespeichert sind. Für die Auswertungen verknüpfen wir insbesondere die folgenden „Newsletterdaten“

and the one-pixel technologies with your e-mail address or your IP address and, if applicable, an individual ID. Links contained in the newsletter may also contain this ID.

Unsubscribing from newsletter tracking is possible at any time and can be done either by sending a message to the contact option described or via a link provided for this purpose in the newsletter.

Die Informationen werden solange gespeichert, wie Sie den Newsletter abonniert haben.

5.2 Newsletter Distribution

The newsletter and the newsletter tracking shown above may also be sent by our service providers as part of processing on our behalf. If you have any questions about our service providers and the basis of our cooperation with them, please contact us as described in this privacy policy.

Our service providers are located and/or use servers in the following countries for which the European Commission has determined an adequate level of data protection by decision: USA

Der Angemessenheitsbeschluss für die USA gilt als Grundlage für die Drittlandsübermittlung, soweit der jeweilige Dienstleister zertifiziert ist. Eine Zertifizierung liegt vor.

6. Cookies and other technologies

6.1 General information

Um den Besuch unserer Webseite attraktiv zu gestalten und die Nutzung bestimmter Funktionen zu ermöglichen, verwenden wir auf verschiedenen Seiten Technologien einschließlich sogenannter Cookies.
Cookies sind kleine Textdateien, die automatisch auf Ihrem Endgerät gespeichert werden. Einige der von uns verwendeten Cookies werden nach Ende der Browser-Sitzung, also nach Schließen Ihres Browsers, wieder gelöscht (sog. Sitzungs-Cookies). Andere Cookies verbleiben auf Ihrem Endgerät und ermöglichen uns, Ihren Browser beim nächsten Besuch wiederzuerkennen (persistente Cookies). Die Dauer der Speicherung können Sie der Übersicht in den Cookie-Einstellungen Ihres Webbrowsers entnehmen.

Schutz der Privatsphäre bei Endgeräten

Bei Nutzung unseres Online-Angebots setzen wir unbedingt notwendige Technologien ein, um den ausdrücklich gewünschten Telemediendienst zur Verfügung stellen zu können. Die Speicherung von Informationen in Ihrem Endgerät oder der Zugriff auf Informationen, die bereits in Ihrem Endgerät gespeichert sind, bedürfen insoweit keiner Einwilligung.

If functions are not absolutely necessary, the storage of information in your device or access to information already stored in your device requires your consent. We would like to point out that if consent is not given, parts of the website may not be fully usable. Your consent will remain valid until you adjust or reset the respective settings in your device.

Etwaig nachgelagerte Datenverarbeitung durch Cookies und weitere Technologien

Wir verwenden solche Technologien, die für die Nutzung bestimmter Funktionen unserer Webseite (z.B. Warenkorbfunktion) zwingend erforderlich sind. Durch diese Technologien werden IP-Adresse, Zeitpunkt des Besuchs, Geräte- und Browser-Informationen sowie Informationen zu Ihrer Nutzung unserer Webseite (z. B. Informationen zum Inhalt des Warenkorbs) erhoben und verarbeitet. Dies dient im Rahmen einer Interessensabwägung überwiegenden berechtigten Interessen an einer optimierten Darstellung unseres Angebots gemäß Art. 6 Abs. 1 S. 1 lit. f DSGVO und erfolgt gemäß den gesetzlichen Bestimmungen des § 96 Abs. 3 TKG.

In addition, we use technologies to fulfil the legal obligations to which we are subject (e.g. to be able to prove consent to the processing of your personal data) as well as for web analysis and online marketing. Further information on this, including the respective legal basis for data processing, can be found in the following sections of this data protection declaration.

Welche Arten von Cookies werden verwendet?

Cookie-Einstellungen

Die Cookie-Einstellungen für Ihren Browser finden Sie unter den folgenden Links: Microsoft Edge™ / Safari™ / Chrome™ / Firefox™ / Opera™

Alternatively, you can visit the following link: https://www.tyrolitlife.com/cookies/. If cookies are not accepted, the functionality of our website may be limited.

6.2 Use of the “Consentmanager” tool of consentmanager AB to manage consents

On our website, we use “Consentmanager” to inform you about the cookies and other technologies we use on our website, as well as to obtain, manage and document your consent, if necessary, to the processing of your personal data by these technologies. In accordance with Art. 6 para. 1 sentence 1 lit. c GDPR, this is necessary to fulfil our legal obligation under Art. 7 para. 1 GDPR to be able to prove your consent to the processing of your personal data, to which we are subject. “Consentmanager” is an offer of consentmanager AB, Håltegelvägen 1b, 72348 Västerås, Sweden.

After submitting your cookie statement on our website, Consentmanager’s web server stores your IP address, browser, language and website accessed. Furthermore, the IP is processed to determine the country of the visitor. In addition, cookies are used that contain information about your consent behaviour, in particular the status and date of consent.

The duration of data storage depends on your active user settings on our website and will be deleted after 2 years, unless you have expressly consented to further use of your data in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this statement.

Information on the third country transfer (data transfer to third countries)

There is a particular risk that local authorities in the third country might not have sufficiently restricted access rights to your personal data from the perspective of European data protection. This could occur without us, as the data exporter, or you, as the data subject, being aware of it. Additionally, there might not be adequate legal remedies available to you to prevent such access or to take action against it. Specifically, the following countries are currently identified as third countries without an adequacy decision from the EU Commission (example list):

The following countries are currently considered third countries without an adequacy decision from the EU Commission (for example):

You can find out which third countries we transfer data to in the data protection information for the respective tool and/or service we use for consent management/ Consent Manager Platform (CMP).

7. Use of cookies and other technologies

Insofar as you have given your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR, we use the following cookies and other third-party technologies on our website. After the loss of purpose and the end of the use of the respective technology by us, the data collected in this context will be deleted. You can revoke your consent at any time with effect for the future. You can find more information about your options for revocation in the “Cookies and other technologies” section. For more information, including the basis of our collaboration with each vendor, please refer to each technology. If you have any questions about the providers and the basis of our cooperation with them, please contact us as described in this privacy policy.

7.1 Use of Google services

YouTube is an offer of Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). The information automatically collected by Google about your use of our online presence on YouTube is usually transmitted to a server of Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA and stored there.

Our service providers are located and/or use servers in countries outside the EU and the EEA for which the European Commission has determined an adequate level of data protection by decision.

Our service providers are located and/or use servers in these countries: Australia, Hong Kong, India, Indonesia, Malaysia, Singapore, Thailand, Taiwan, Brazil, Mexico. There is no adequacy decision from the European Commission for these countries. Our cooperation with you is based on these guarantees: standard data protection clauses of the European Commission.

Google Analytics

For the purpose of website analysis, Google Analytics automatically collects and stores data (IP address, time of visit, device and browser information and information about your use of our website) from which usage profiles are created using pseudonyms. Cookies can be used for this purpose. If you visit our website from the EU, your IP address will be stored on a server located in the EU for the purpose of deriving location data and then deleted immediately before the traffic is forwarded to other Google servers for processing. Data processing is carried out on the basis of an agreement on order processing by Google.

For the purpose of optimised marketing of our website, we have activated the data sharing settings for “Google products and services”. This allows Google to access the data collected and processed by Google Analytics and then use it to improve Google’s services. The data is shared with Google within the framework of these data sharing settings on the basis of an additional agreement between data controllers. We have no influence on the subsequent data processing by Google.

For the purpose of optimizing our website’s marketing, we utilize the so-called User-ID function. With this function, we can assign a unique, permanent ID to your interaction data from one or multiple sessions on our online platforms, thus enabling us to analyze your user behavior across devices and sessions.

For web analysis, the Google Analytics Google Signals extension function enables so-called “cross-device tracking”. If your internet-enabled devices are linked to your Google account and you have activated the “personalised advertising” setting in your Google account, Google can generate reports on your usage behaviour (in particular the number of users across devices), even if you change your device. We do not process personal data in this respect, we only receive statistics based on Google Signals.

For web analysis and advertising purposes, the extension function of Google Analytics enables the so-called DoubleClick cookie to recognize your browser when you visit other websites. Google will use this information to compile reports on website activity and to provide other services related to website use.

Google AdSense

Our website uses Google AdSense to market space for third-party ads. These advertisements are displayed to you in various places on this website. The so-called DoubleClick cookie enables the display of interest-based advertising through the collection and processing of data (IP address, time of visit, device and browser information as well as information about your use of our website) and the automatic assignment of a pseudonymous user ID, with the help of which the interests are determined on the basis of visits to this and other websites.

YouTube Video Plugin

In order to integrate third-party content, data (IP address, time of visit, device and browser information) is collected via the YouTube Video Plugin in the extended data protection mode we use, transmitted to Google and then processed by Google only when you play a video.

Google Ads

For advertising purposes, both in Google search results and on third-party websites, our website places the so-called Google Remarketing cookie. This action automates interest-based advertising by collecting and processing data (such as your IP address, visit time, device, and browser information, along with details about your website usage) through a pseudonymous Cookie ID based on the pages you’ve visited. Additional data processing occurs only if you have enabled the “personalized advertising” option in your Google account. If you are logged into Google during your visit to our website, Google combines your data with Google Analytics data to create and define audience lists for cross-device remarketing purposes.

For website analysis and event tracking, we use Google Ads Conversion Tracking to measure your subsequent usage behaviour if you have come to our website via an advertisement from Google Ads. For this purpose, cookies can be used and data (IP address, time of visit, device and browser information as well as information about your use of our website based on events specified by us, such as a visit to a website or newsletter registration) can be collected, from which usage profiles are created using pseudonyms.

Google Tag Manager

Google Tag Manager allows us to manage various codes and services on our website. When implementing the individual tags, Google may also process personal data (e.g. IP address, online identifiers (including cookies)). Data processing is carried out on the basis of an agreement on order processing by Google.

If you do not wish to use individual tracking services and have therefore deactivated them, the deactivation will remain for all affected tracking tags that are integrated by the Google Tag Manager.

7.2 Use of Facebook services

 Use of Facebook Pixel

We use the Facebook pixel within the framework of the technologies of Meta Platforms Ireland Ltd., Block J, Serpentine Avenue, Dublin 4, Ireland (“Facebook (by Meta)” or “Meta Platforms Ireland”). The Facebook pixel automatically collects and stores data (IP address, time of visit, device and browser information as well as information about your use of our website on the basis of events specified by us, such as a visit to a website or newsletter registration), from which user profiles are created using pseudonyms. As part of the so-called extended data comparison, information is also collected and stored in a hashed form for comparison purposes, with which individuals can be identified (e.g. names, e-mail addresses and telephone numbers). For this purpose, a cookie is automatically set by the Facebook pixel when you visit our website, which automatically enables your browser to be recognised when you visit other websites by means of a pseudonymous cookie ID. Facebook (by Meta) will combine this information with other data from your Facebook account and use it to compile reports on website activity and to provide other services related to website use, in particular personalized and group-based advertising.

The information automatically collected by Facebook (by Meta) technologies regarding your use of our website is generally transmitted to and stored on a server of Meta Platforms, Inc., located at 1601 Willow Road, Menlo Park, California 94025, USA. For further details on data processing by Facebook, please refer to Facebook’s privacy notices (by Meta). Our service providers are based and/or utilize servers in the following countries, which the European Commission has deemed to have an adequate level of data protection: the USA, Canada, Japan, South Korea, New Zealand, the United Kingdom, and Argentina. There is an adequacy decision from the European Commission regarding an adequate level of data protection for the USA, provided that the respective service provider is certified. Certification has been obtained. Our service providers are located and/or use servers in these countries: Australia, Hong Kong, India, Indonesia, Malaysia, Singapore, Thailand, Taiwan, Brazil, Mexico.

There is no adequacy decision from the European Commission for these countries. Our cooperation with you is based on these guarantees: standard data protection clauses of the European Commission.

Facebook Analytics

As part of Facebook Analytics, statistics on visitor activities on our website are generated from the data collected with the Facebook pixel about your use of our website. Data processing takes place on the basis of an agreement on order processing by Facebook. Your analysis serves the optimal presentation and marketing of our website.

 Facebook Ads

We use Facebook Ads to advertise this website on Facebook and other platforms. We determine the parameters of the respective advertising campaign. Facebook is responsible for the exact implementation, in particular the decision on the placement of the ads with individual users. Unless otherwise specified for the individual technologies, data processing is carried out on the basis of an agreement between joint controllers in accordance with Art. 26 GDPR. The joint responsibility is limited to the collection of the data and its transmission to Facebook Ireland. Subsequent data processing by Facebook Ireland is not covered by this.

Based on the statistics on visitor activity on our website generated via Facebook pixels, we use Facebook Custom Audience to run group-based advertising on Facebook by determining the characteristics of the respective target group. As part of the extended data comparison (see above) that takes place to determine the respective target group, Facebook (by Meta) acts as our processor.

Based on the pseudonymous cookie ID set by Facebook Pixel and the data collected about your usage behaviour on our website, we use Facebook Pixel Remarketing to carry out personalised advertising.

For web analysis and event tracking, we use Facebook Pixel Conversions to measure your subsequent usage behaviour if you have reached our website via an advertisement from Facebook Ads. Data processing takes place on the basis of an agreement on order processing by Facebook.

7.3 Other providers of web analytics and online marketing services

Use of AdRoll Retargeting for Online Marketing

Via the advertising partner NextRoll Ltd., Level 6, 1, Burlington Plaza, Burlington Road, Dublin 4, Ireland (“AdRoll”), we advertise this website in search results as well as on the websites of third parties. When you visit our website, a retargeting cookie is automatically set by AdRoll or its partners, which enables interest-based advertising using a pseudonymous cookie ID and based on the pages you visit. Data processing takes place on the basis of an agreement between joint controllers in accordance with Art. 26 GDPR. We determine the parameters of the respective advertising campaign. AdRoll is responsible for the exact implementation (e.g. the decision on the placement of the individual ads). The data automatically collected by AdRoll (IP address, time of visit, device and browser information and information about your use of our website) may be combined by AdRoll with information from other sources and transmitted to AdRoll advertising partners. In addition, they are usually transferred to a server of NextRoll, Inc.201 California Street, 5th Floor, Suite 500, San Francisco, CA 94111, USA.

Our service providers are located and/or use servers in the following countries for which the European Commission has determined an adequate level of data protection by decision: USA.

There is a decision of the European Commission on an adequate level of data protection for the USA as the basis for a third country transfer, insofar as the respective service provider is certified. Until certified by our service providers, the data transfer will continue to be based on this basis: standard data protection clauses of the European Commission.

Use of Vimeo Video Plugin to integrate third-party content

To integrate third-party content, data such as IP address, visit time, device, and browser information are collected via the video plugin by Vimeo Inc., 330 West 34th Street, 5th Floor, New York 10011, USA (“Vimeo”), transmitted to Vimeo, and then processed by them. This data processing is based on an agreement between joint controllers according to Article 26 of the GDPR. The Vimeo Video plugin automatically integrates Google Analytics. For website analytics, Google Analytics automatically collects and saves data including IP address, time of visit, device and browser information, and details of your website usage, from which usage profiles are created using pseudonyms. Cookies may be utilized for this. Google Analytics is provided by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). The information auto-collected by Google about your website usage is usually sent to and stored on a server of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. When accessing our website from the EU, your IP address is recorded on a server located within the EU for location data determination and immediately deleted before the traffic is rerouted to Google’s other servers for further processing. We do not have control over or access to the data processing conducted by Vimeo, including the configurations and outcomes related to Google Analytics.

Our service providers are located and/or use servers in countries outside the EU and the EEA for which the European Commission has determined an adequate level of data protection by decision.

Our service providers are located and/or use servers in these countries: Australia, Hong Kong, India, Indonesia, Malaysia, Singapore, Thailand, Taiwan, Brazil, Mexico. There is no adequacy decision from the European Commission for these countries. Our cooperation with you is based on these guarantees: standard data protection clauses of the European Commission.

8. Integration of the Trusted Shops Trustbadge/ Other Widgets

If you have given your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR, Trusted Shops widgets are integrated on this website to display the Trusted Shops services (e.g. quality seal, collected reviews) as well as to offer the Trusted Shops products to buyers after an order.

The Trustbadge and the services advertised with it are an offer of Trusted Shops AG, Subbelrather Str. 15C, 50823 Cologne (“Trusted Shops”), with which we are jointly responsible for data protection in accordance with Art. 26 GDPR. Within the framework of this data protection notice, we will inform you below about the essential contents of the contract in accordance with Art. 26 para. 2 GDPR.

As part of the joint responsibility between us and Trusted Shops AG, please contact Trusted Shops with any data protection questions and to assert your rights, preferably using the contact options specified in the data protection information. Regardless, you can always contact the person responsible of your choice. If necessary, your request will then be forwarded to the other person responsible for answering.

8.1 Data processing when integrating the trust badge/ other widgets

Trusted Shops uses service providers in the areas of hosting, monitoring and logging. The legal basis is Art. 6 (1) (f) GDPR for the purpose of ensuring trouble-free operation. Processing may take place in third countries (USA and Israel). An adequate level of data protection is ensured in each case by an adequacy decision of the EU Commission, which is available here for the USA and here for Israel. Service providers from the USA are usually certified under the EU-U.S. Data Privacy Framework (DPF). More information can be found here. If service providers used are not certified under the DPF, standard contractual clauses have been concluded as a suitable guarantee.

When the trust badge is called up, the web server automatically stores a so-called server log file, which also contains your IP address, date and time of the call, amount of data transmitted and the requesting provider (access data) and documents the call. The IP address is anonymised immediately after collection, so that the stored data cannot be assigned to your person. The anonymised data is used in particular for statistical purposes and for error analysis.

8.2 Data processing after order completion

If you have given your consent, the Trustbadge accesses order information stored on your device (order amount, order number, and any purchased product) as well as your email address after the completion of an order. Your email address is then hashed using a cryptographic one-way function. The resulting hash value, along with the order information, is transmitted to Trusted Shops pursuant to Art. 6 (1) (a) of the GDPR. This process checks whether you are already registered for services with Trusted Shops. If this is the case, further processing will be carried out in accordance with the contractual agreement made between you and Trusted Shops. If you are not yet registered for the services, or if you have not consented to automated detection via the Trustbadge, you will subsequently be offered the opportunity to manually register for the services or complete the protection as part of your possibly existing usage agreement.

For this purpose, the trust badge accesses the following information after completing your order, which is stored in the terminal device you use: order amount, order number and e-mail address. This is necessary so that we can offer you buyer protection. The data will only be transmitted to Trusted Shops if you actively decide to conclude the buyer protection by clicking on the corresponding button in the so-called trust card. If you decide to use the services, further processing is governed by the contractual agreement with Trusted Shops in accordance with Art. 6 (1) (b) GDPR in order to complete your registration for buyer protection and to be able to secure the order and, if necessary, subsequently send you evaluation invitations by e-mail.

Trusted Shops employs service providers in the areas of hosting, monitoring, and logging. The legal basis for this is Article 6(1)(f) GDPR, aimed at ensuring smooth operation. Processing may occur in third countries (USA and Israel). An adequate level of data protection is ensured by an adequacy decision from the EU Commission, available for the USA here and for Israel here. Service providers from the USA are typically certified under the EU-U.S. Data Privacy Framework (DPF). Further information can be found here. If the service providers are not certified under the DPF, Standard Contractual Clauses have been used as appropriate safeguards.

9. Social Media

Our Online Presence on Facebook (by Meta), Instagram (by Meta), YouTube

Should you have granted your consent under Art. 6 para. 1 sentence 1 lit. a DSGVO to the respective social media operator, your data will be automatically gathered and saved for market research and advertising purposes upon visiting our online presences within the aforementioned social media. From this data, usage profiles are created using pseudonyms. These profiles may be utilized to, for example, display advertisements within and outside of the platforms that likely align with your interests. Normally, cookies are employed for this purpose. For detailed information on the processing and utilization of data by the social media operator, alongside contact options, your pertinent rights, and privacy settings, please refer to the privacy statements of the providers listed below. Should you require further assistance regarding this matter, feel free to reach out to us.

Instagram (by Meta) is a service provided by Meta Platforms Ireland Ltd., Block J, Serpentine Avenue, Dublin 4, Ireland (“Meta Platforms Ireland”). The information automatically collected by Meta Platforms Ireland about your use of our online presence on Instagram is generally transmitted to a server of Meta Platforms, Inc., 1601 Willow Road, Menlo Park, CA 94025, USA, and stored there. Data processing in the context of visiting an Instagram (by Meta) fan page is conducted based on an agreement between joint controllers in accordance with Article 26 GDPR. For more information (including details on insights data), please find it here.

Our service providers are located and/or use servers in the following countries for which the European Commission has determined an adequate level of data protection by decision: USA, Canada, Japan, South Korea, New Zealand, United Kingdom, Argentina.

Der Angemessenheitsbeschluss für die USA gilt als Grundlage für die Drittlandsübermittlung, soweit der jeweilige Dienstleister zertifiziert ist. Eine Zertifizierung liegt vor.

Our service providers are based in and/or use servers located in the following countries: Australia, Hong Kong, India, Indonesia, Malaysia, Singapore, Thailand, Taiwan, Brazil, and Mexico.
There is no adequacy decision from the European Commission for these countries. Our collaboration with them is based on these safeguards: Standard Contractual Clauses of the European Commission.

Instagram (by Meta) is a service offered by Meta Platforms Ireland Ltd., Block J, Serpentine Avenue, Dublin 4, Ireland (“Meta Platforms Ireland”). The information automatically collected by Meta Platforms Ireland about your use of our online presence on Instagram is generally transmitted to and stored on a server of Meta Platforms, Inc., 1601 Willow Road, Menlo Park, CA 94025, USA. Data processing in connection with visiting an Instagram (by Meta) fan page is based on an agreement between joint controllers in accordance with Article 26 of the GDPR. For more information (including information about insights data), please find details here.

Our service providers are located and/or use servers in the following countries for which the European Commission has determined an adequate level of data protection by decision: USA, Canada, Japan, South Korea, New Zealand, United Kingdom, Argentina.

Der Angemessenheitsbeschluss für die USA gilt als Grundlage für die Drittlandsübermittlung, soweit der jeweilige Dienstleister zertifiziert ist. Eine Zertifizierung liegt vor.

Our service providers are based in and/or use servers located in the following countries: Australia, Hong Kong, India, Indonesia, Malaysia, Singapore, Thailand, Taiwan, Brazil, and Mexico.
There is no adequacy decision from the European Commission for these countries. Our collaboration with you is based on these safeguards: Standard Contractual Clauses of the European Commission.

YouTube is a service offered by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). The information automatically collected by Google about your use of our online presence on YouTube is generally transmitted to and stored on a server of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Our service providers are located and/or use servers in countries outside the EU and the EEA for which the European Commission has determined an adequate level of data protection by decision.

Our service providers are located and/or use servers in these countries: Australia, Hong Kong, India, Indonesia, Malaysia, Singapore, Thailand, Taiwan, Brazil, Mexico. There is no adequacy decision from the European Commission for these countries. Our cooperation with you is based on these guarantees: standard data protection clauses of the European Commission.

10. Contact Options and Your Rights

10.1 Your rights

As a data subject, you have the following rights:

10.2 Contact options

Data protection officer:

Swarovskistr. 33
6133 Schwaz
Österreich
privacy@tyrolit.com

If you have any questions about the collection, processing or use of your personal data, information, correction, restriction or deletion of data as well as revocation of consent given or objection to a specific data use, please contact us directly via the contact details in our imprint.

Privacy Policy created with the Trusted Shops legal text generator.