Privacy Policy for the website www.cap-spinner.com
At the the Modern Wardrobe Solutions MMG GmbH, we take your privacy very seriously. But in order to improve your experience with our website and enable you to purchase our products or use our services, we may collect personal information from you. We do so strictly according to the applicable laws.
If you don’t want to provide the required personal information to us, you won’t be able to use certain features of this website. As such, your experience in using this website will be diminished, and you won’t be able to purchase our products or use our services.
Who we are
We who run this website are the Modern Wardrobe Solutions MMG GmbH. We are the controller of the personal data collected from you and are responsible for it. You can reach us at the following:
Modern Wardrobe Solutions MMG GmbH
Dorfstraße 23
8071 Hausmannstätten
Österreich
Purposes for which we will process your personal data
We will process your personal data for the following purposes:
For details on the purposes for which we collect your data, please take a look at the section “What data we collect and when we collect it”.
What data we collect and how we collect it
We collect your personal data either through your actions on our website or through automated technologies that don’t require any action on your end. In the following, we will provide you more details about it.
Contacting us
When you contact us through a contact form or via email, we collect and process your first name, second name, email address, your message (including all personal data it might contain), and date and time of your message. We are allowed to do so according to Art 6 sec 1 lit f GDPR because we have a legitimate interest in doing so in order to be able to reply to your request.
If you contact us because you want to receive information on our products and services or are already one of our customers, we are allowed to process and collect the data mentioned above according to Art 6 sec 1 lit b GDPR because it is necessary for the performance of a contract or to take steps prior to entering into a contract.
Any request to us by e-mail will be processed by our e-mail provider T-Mobile Austria GmbH. Therefore, any personal information you send to us will also be processed by the T-Mobile Austria GmbH email services we use. The Services may also collect and process other data that may be linked to the personal information you send to us. For more information about the data collected and its processing, see the T-Mobile Austria GmbH’s Privacy Policy.
Use of our online shop
If you use our online shop and place an order in it, we will collect and process your first name, surname, address, e-mail address, all the details of your purchase (what you have just purchased), an additional message you sent to us have (including all personal data contained therein), payment information, your consent to terms and conditions, privacy policy, cancellation policy, etc as well as the date and time of your order. We may process and collect the above-mentioned data in accordance with Art. 6 para. 1 lit. b GDPR, as this is necessary for the performance of a contract of which you are a party or for the performance of pre-contractual actions that are performed at your request.
In order to be able to offer this online shop, we use the VersaCommerce Entwicklungs- und Betriebsgesellschaft mbH as a processor of your personal data. They are the operator of the online shop system VersaCommerce. This service may also collect and process other data that may be linked to the personal information you send to us. This applies in particular to personal master data, communication data (telephone, e-mail, IP data), customer, supplier and service master data, customer history and contract billing and payment data. Further information on the data collected and the processing can be found in the privacy policy of VersaCommerce Entwicklungs- und Betriebsgesellschaft mbH.
If we use the service of VersaCommerce Entwicklungs- und Betriebsgesellschaft mbH, your personal data will normally not be transferred to or processed outside of the European Economic Area (EEA). However, there are situations where your personal information is transmitted to a destination outside the EEA, such as technical applications whose servers are not stationed in the EEA. If your personal data is to be transmitted to a destination outside the EEA, VersaCommerce Entwicklungs- und Betriebsgesellschaft mbH will ensure that the transfer is permitted under Article 45 (1) GDPR, since the destination is in a non-EEA country, which according to the decision of the European Commission, offers an adequate level of protection or is permissible under Article 46 (1) GDPR, because appropriate protective measures are taken, such as the use of standard contractual clauses approved by the EU Commission, submission to approved and legally binding codes of conduct or privacy Shield certification.
Cookies
Our website partly uses so-called cookies. Cookies do not cause any harm to your device and do not contain any viruses. Cookies serve the purpose of making our service more user-friendly, more effective, and safer. Cookies are small text files that are stored on your device and in your browser.
Most of the cookies we use are so-called session cookies. After the end of the session, these cookies will be deleted automatically. The session cookies are used in order to associate successive page requests with the individual users, who at the same time access our website. Other cookies will be stored on your device until you delete them. These cookies enable us to recognize your browser during your next visit.
You can adjust your browser to notify you before you receive a cookie, to decide whether to accept cookies on a case-by-case basis, to completely or partly exclude all incoming cookies, and to activate the deletion of cookies automatically when the browser is closed.
We would like to inform you that the usage of our website is more convenient by using cookies, and not using cookies will limit that convenience.
If you allow us to use cookies, your personal data is processed according to Art 6 sec 1 lit f GDPR because we have the legitimate interest in quality assurance of our service.
Newsletter
When you subscribe to our newsletter, we collect and process your first name and email address. We also keep a record of the fact that you have agreed to receive our newsletter and have agreed to this privacy policy.
After you subscribe, we send an email to the email address provided to us in which we ask you to confirm your subscription. This is called a “Double Opt-In.” We use this procedure to make sure that other people can’t subscribe to our newsletter with your email address without your consent.
You can unsubscribe from our newsletter at any time. In order to do so, you can either send an email to marketing@cap-spinner.com or simply click on the unsubscribe link in the footer of our newsletter.
When we send out a newsletter, we may also collect data concerning the date and time when the message was viewed by you, as well as when you interacted with it, such as by clicking on links included in the message.
We are allowed to collect and process the data you provide when subscribing to our newsletter according to Art 6 sec 1 lit a GDPR because you give us your consent to do so. For the same reason, we are also allowed to send you our newsletter. Furthermore, we are allowed to collect and process data about the fact that you agreed to receive our newsletter and to this privacy policy according to Art 6 sec 1 lit f GDPR because we have a legitimate interest to be able to prove that we only send our newsletter to people who gave us consent to do so. We are also allowed to collect data concerning the date and time when our newsletter was viewed by you, as well as when you interacted with it according to Art 6 sec 1 lit f GDPR because we have a legitimate interest in improving our marketing strategy and the product and service range of our website.
In order to manage the personal data retrieved when you subscribe to our newsletter and to send out the newsletter, we use MailChimp as a processor of your personal data. It is an email address management and message sending service provided by The Rocket Science Group, LLC. These services may also collect and process other data that can be linked to the personal data you send us. For more details on the collected data and the processing, please take a look at theirPrivacy Policy.
When we use The Rocket Science Group, LLC’s service, your personal data is transferred and processed outside the European Union in the United States of America. This data transfer is permissible according to Art 46 sec 1 GDPR, since The Rocket Science Group, LLC participates in the Privacy Shield Framework.
Interaction with external social media platforms
We use services that allow interaction with social networks or other external platforms directly from the pages of this website. The interaction and information obtained through this website are always subject to your privacy settings for each social network. This type of service might still collect traffic data for the pages where the service is installed, even when you do not use it. We are allowed to collect and process this data according to Art 6 sec 1 lit f GDPR because we have a legitimate interest in marketing our website’s content, products, and services through social networks.
In the following, please find more detailed information on the services we use as processors of your personal data for interaction with external social media platforms on this website.
Facebook Like button and social widgets (Facebook, Inc.)
The Facebook Like button and social widgets are services allowing interaction with the Facebook social network provided by Facebook, Inc. The personal data it collects and processes are:
cookies and
further information on about you and how you use our website, which can include the IP addresses or domain names of the computers utilized by the Users who use this Application, the URI addresses (Uniform Resource Identifier), the time of the request, the method utilized to submit the request to the server, the size of the file received in response, the numerical code indicating the status of the server's answer (successful outcome, error, etc.), the country of origin, the features of the browser and the operating system utilized by the User, the various time details per visit (e.g., the time spent on each page within the Application) and the details about the path followed within the Application with special reference to the sequence of pages visited, and other parameters about the device operating system and/or the User's IT environment (hereinafter referred to as “Usage Data”).
For more details on the collected data and the processing, please take a look at Facebook Inc.’s Privacy Policy.
When we use Facebook Inc.’s service, your personal data is transferred and processed outside the European Union in the United States of America. This data transfer is permissible according to Art 46 sec 1 GDPR, since Facebook, Inc. participates in the Privacy Shield Framework.
Instagram Like button and social widgets (Facebook, Inc.)
The Instagram Like button and social widgets are services allowing interaction with the Instagram social network provided by Facebook, Inc. The Personal Data it collects and processes are Cookies and Usage Data.
For more details on the collected data and the processing, please take a look at Instagram’s, Privacy Policy.
When we use Facebook Inc’s service your personal data is transferred and processed outside the European Union in the United States of America. This data transfer is permissible according to Art 46 sec 1 GDPR since Facebook Inc participates in the Privacy Shield Framework.
Twitter Tweet button and social widgets (Twitter, Inc.)
The Twitter Tweet button and social widgets are services allowing interaction with the Twitter social network provided by Twitter, Inc. The Personal Data it collects and processes are Cookies and Usage Data.
For more details on the collected data and the processing, please take a look at Twitter, Inc.’s Privacy Policy.
When we use Twitter Inc’s service your personal data is transferred and processed outside the European Union in the United States of America. This data transfer is permissible according to Art 46 sec 1 GDPR since Twitter Inc participates in the Privacy Shield Framework.
Google Analytics (Google LLC)
Google Analytics is a web analysis service provided by Google LLC (“Google”). It enables us to monitor and analyze web traffic and can be used to keep track of your behavior in connection to our website. The service places Cookies on your computer and is therefore able to collect data about your usage of your website. Google utilizes the personal data collected to track and examine the use of this website, to prepare reports on its activities and share them with other Google services. Google may use the Data collected to contextualize and personalize the ads of its own advertising network.
Adjusting the settings of your browser Platform can prevent the use of Cookies. In this case, it may be possible that the functions of the service offered here cannot be used in its entirety. Furthermore, it is possible to prevent the acquisition and processing of data generated by the Cookies in relation to the use of this website, by downloading and installing the browser plugin available at the following link:https://tools.google.com/dlpage/gaoptout?hl=en.
We point out that an automated decision making (“profiling”) can take place when integrating Google and an existing Google account. You can opt-out from this profiling activity under the following link: https://adssettings.google.com/authenticated.
If you allow us to use cookies, we are allowed to collect and process the data necessary for Google Analytics according to Art 6 sec 1 lit f GDPR because we have a legitimate interest in monitoring and analyzing web traffic and keeping track of your behavior in connection to our website in order to improve our services and marketing strategies.
For more details on the collected data and the processing, please take a look at Google LLC’s Privacy Policy.
When we use Google LLC’s service your personal data is transferred and processed outside the European Union in the United States of America. This data transfer is permissible according to Art 46 sec 1 GDPR since Google LLC participates in the Privacy Shield Framework.
Who we share your personal data with
We will only share your data with relevant parties where required such as our staff members, authorized contractors, services used on our website, etc., where necessary to provide you with a service or information.
In the section “What data we collect and how we collect it,” you will find more information about what personal data we share with third party service providers.
How long we store the data
We will store your personal data for as long as necessary:
The following are guidelines for how long information is stored:
It is possible that the processors we use store (part of) your data for different time periods that we can’t influence. Please read their Privacy Policies, which you will find links to in the section “What data we collect and how we collect it” for more details.
Your Rights
If your personal data is subject to the regulations of the GDPR, you may exercise certain rights regarding your personal data processed by us.
In particular, you have the right to do the following:
Details about the right to object to processing
Where personal data is processed for a public interest, in the exercise of an official authority vested in us or for the purposes of the legitimate interests pursued by us, you may object to such processing by providing a ground related to your particular situation to justify the objection.
Should your personal data be processed for direct marketing purposes, you can object to that processing at any time without providing any justification. To learn whether we are processing personal data for direct marketing purposes, please go to the section “Purposes for which we will process your personal data.”
How to exercise these rights
Any requests to exercise your rights can be directed to us through the contact details provided in this document. These requests can be exercised free of charge and will be addressed by us as early as possible and always within one month.
However, we may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive. Alternatively, we may refuse to comply with your request in these circumstances.
Transfer of your data outside the European Union
We use the services of data processors located outside the European Union for the purposes named in this Privacy Policy. When doing so, we make sure that the data protection standards applicable in the EU are ensured. For more details, please review the section “What data we collect and how we collect it,”
A list of the data processors processing data outside the EU and corresponding information is also available by request via email to marketing@cap-spinner.com.
Data Security
To secure your data, we implement appropriate technical and organizational measures according to Art 23 GDPR.
In particular, for the best possible security of your data, our service through the website is provided via a secured SSL connection between your server and the browser. This means that the data shall be transferred in encrypted form. However, please note that when data is transferred over the internet, the possibility of security breaches cannot be entirely excluded. Complete protection of your data from access by unauthorized parties is therefore technically impossible.
Profiling and automated decision-making
You have the right not to be subject to a decision based solely on automated processing, including profiling, which has legal effect on you or substantially impairs you in a similar manner.
Profiling means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular, to analyze or predict aspects concerning that natural person's performance at work, economic situation, health, personal preferences, interests, reliability, behavior, location, or movements.
We do not use automated decision-making, including profiling, when processing data. However, our third party providers may carry out such profiling in individual cases. We will inform you about such facts if possible.
Questions?
For further information, you may contact us any time via email at marketing@cap-spinner.com.