I. Person/Entity responsible and scope of application

The responsible person or entity within the definition of the EU General Data Protection Regulation (hereinafter: GDPR) and other national data protection laws of the member states as well as other data protection regulations is:

©2021

24sens GmbH (Ltd.)

Millennium Park 15

6890 Lustenau | Austria

office@24sens.com

This data protection declaration applies to the Internet offers provided by 24sens GmbH (Ltd.), which can be accessed under the domain www.24sens.com as well as the various subdomains (hereinafter referred to as “our website”). A request for information, deletion etc. can be made at any time to the above address by e-mail or post.

II. Principles of data processing

Personal data is any information relating to an identified or identifiable natural person. This includes, for example, information such as your name, age, postal address, telephone number, date of birth, e-mail address, IP address or user behaviour. Information for which we cannot (or can only with disproportionate effort) establish a link to your person, e.g., by anonymising the information, is not personal data.  The processing of personal data (e.g., collection, retrieval, use, storage or transmission) always requires a legal basis or your consent. Processed personal data will be deleted as soon as the purpose of the processing has been achieved and there are no longer any legally prescribed retention obligations to uphold.

If we process your personal data for the provision of certain offers, we will inform you below about the specific procedures, the scope and purpose of the data processing, the legal basis for the processing and the respective storage period.

III. Individual processing operations

1. Provision and use of the website

a. Type and scope of data processing

When you call up and use our website, we collect the personal data that your browser automatically transmits to our server. This information is temporarily stored in a so-called log file. When you use our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure stability and security:

•          IP address of the requesting computer

•          Date and time of access

•          Name and URL of the file retrieved

•          Website from which the access is made (Referrer URL)

•          Browser used and, if applicable, the operating system of your computer, as well as the name of your access provider.

b. Legal basis

Art. 6 para. 1 lit. GDPR serves as the legal basis for the aforementioned data processing. The processing of the aforementioned data is necessary for the provision of a website and thus serves to protect a legitimate interest of our company.

c. Storage period

The aforementioned data is deleted as soon as it is no longer required to display the website. The collection of data for the provision of the website and the storage of the data in log files is absolutely necessary for the operation of the website. Consequently, there is no possibility for the user to object. In individual cases further storage may take place if this is required by law. 

2. Registration / User account

a. Type and scope of data processing

On our website, we offer you the opportunity to register by providing personal data in order to be able to use our webshop. With the processed data, we create an individualised user account for you, with which you can use certain contents and services, in particular our webshop on our website. We process your e-mail address so that we can send you new access data if you should happen to forget it.

The following overview shows you in detail which personal data we process when you register:

•          Name

•          E-mail address

•          Postal address

•          Birthdate

•          IP address

•          Company/Firm

•          Telephone number

b. Legal basis

The processing of the personal data presented (cf. § 4 2.a.) serves the fulfilment of a contract between you and 24sens GmbH (Ltd.) or the implementation of pre-contractual measures in accordance with Art. 6 para. 1 lit.b GDPR.

c. Storage period

As soon as the processed data is no longer required for the performance of the contract, it will be deleted. Even after the conclusion of the contract, it may be necessary to store your personal data in order to fulfil contractual or legal obligations. Further storage may take place in individual cases if this is required by law.

d. Termination of registration

As a user, you have the option to terminate the registration at any time. You can change the data stored about you at any time. To do so, proceed as follows: Send us an e-mail with your change request to: office@24sens.com

However, if the processed data is required to fulfil a contract or for the implementation of pre-contractual measures, early deletion of the data is possible only insofar as this does not conflict with contractual or legal obligations.

3. Purchase of goods

a. Type and scope of data processing

On our website, we offer users the opportunity to purchase goods by providing personal data. The data required for this is transmitted to us via e-mail and subsequently stored. The data is not passed on to third parties. The following data is collected in the course of the ordering process:

•          Name

•          Postal address

•          Date of birth

•          E-mail address

•          Company

•          Telephone number

Your data will be passed on to the shipping company commissioned with the delivery, insofar as this is necessary for the delivery of goods. In order to process payments, we pass on your payment data to the credit institution commissioned with the payment. These companies may use your data only for processing and not for other purposes.

If you purchase goods on our website and enter your e-mail address, we can be used to send you newsletters with information regarding our own similar goods or services.

b. Legal basis

When processing your personal data (cf. § 4 3. a.), which is necessary for the fulfilment of a purchase contract concluded with us, Art. 6 para. 1 lit. b GDPR as the legal basis. This also applies to processing operations that are necessary to carry out pre-contractual measures.

The legal basis for sending the newsletter as a result of the purchase of goods is Art. 6 para. 1 lit. f GDPR

c. Storage period

Once the contract has been completed and the purchase price has been paid in full, your data will be blocked for further use and deleted after the retention periods under tax and commercial law have expired, unless you have expressly consented to the further use of your data. Further storage can take place in individual case if this is required by law.

IV. Newsletter and establishing contact

a. Type and scope of data processing

You can subscribe to a free newsletter on our website. To be able to send you the newsletter regularly, we need the following information from you:

•          Name

•          E-mail address

•          Postal address

•          Telephone number

•          Your request

Your data will not be passed on to third parties in connection with the sending of the newsletter.

For sending the newsletter, we use the so-called double opt-in procedure, i.e., we will send you the newsletter only if you confirm your registration first via a confirmation e-mail sent to you for this purpose by means of the link contained therein.  In this way, we wish to ensure that only you yourself, as the owner of the specific e-mail address provided, can register for the newsletter. Your confirmation must be made promptly after the receipt of the confirmation e-mail, otherwise your newsletter registration will be automatically deleted from our database.

b. Legal basis newsletter distribution

The processing of your e-mail address by 24sens GmbH (Ltd.) for newsletter distribution is based on the declaration of voluntary consent provided by you below in accordance with Art. 6 para. 1 lit. a GDPR:

Declaration of consent:

By entering my data and pressing the “Send message” button, I declare my consent to the processing of my e-mail address, my name, my postal address, for regular newsletter distribution.  I can unsubscribe from the newsletter service at any time by sending an e-mail with the subject “Unsubscribe” to office@24sens.com.

I can revoke my consent to the collection of personal data collected during the registration process at any time at office@24sens.com or by post at 24sens GmbH (Ltd.), Millennium Park 6, Lustenau, Austria.

If no consent to receiving the newsletter has been given and you have nevertheless provided your e-mail address to 24sens GmbH (Ltd.), the processing is based on Art. 6 para. 1 lit. f GDPR (legitimate interest). In this case, you can object to the distribution of the newsletter at any time (see § 10).

a. Legal basis establishing contact/customer file

The processing of your e-mail by 24sens GmbH KG (CC. Ltd.)  for newsletter distribution is based on the declaration of consent voluntarily submitted by you in accordance with Art. 6 para. 1 lit. a GDPR:

Declaration of consent:

By entering my data and pressing the “Send message” button, I declare my consent to the processing of my e-mail address, name, postal address, telephone number and my request for the establishment of personal contact and storage in the 24sens GmbH (Ltd.)  customer file.

I can revoke my consent to the collection of personal data collected during the registration process at any time by writing an e-mail to office@24sens.com or via post to 24sens GmbH (Ltd.), Millennium Park 6, 6890 Lustenau, Austria.

b. Storage period

Your e-mail address, first and last name, postal address, telephone number and the reason for your enquiry will be stored for the duration of your subscription to the newsletter and/or for as long as you wish for your data to be included in the customer file. After you unsubscribe from the newsletter distribution, your e-mail will be used only to contact you personally. If you revoke the processing of your personal data in the customer file, all personal data will be deleted.

Further storage can take place in individual cases if this is required by law.

V. Contact form

a. Type and scope of data processing

On our website, we offer you the opportunity to contact us using a form provided. As part of the process of sending your request via the contact form, reference is made to this data protection declaration in order to obtain your consent. If you make use of the contact form, the following personal data will be processed:

•          E-mail address

•          Form of address/title

•          Name

•          Telephone number

•          Postal address

The purpose of providing your e-mail address is to be able to allocate your enquiry and reply to you. When using the contact form, your personal data will not be passed on to third parties.

b. Legal basis

The data processing for the purpose of establishing contact described above (cf. § 4 5. a.) is carried out in accordance with Art. 6 Para. 1 lit. a GDPR on the basis of the declaration of consent voluntarily submitted by you below:

Declaration of consent:

By entering my data and pressing the “Send” button, I declare my consent to the processing of my e-mail address, my name, my telephone number and my postal address for the purpose of responding to my contact request.

I can revoke my consent to the collection of personal data during the use of the contact form at any time by sending an e-mail to office@24sens.com or a letter via post to 24sens GmbH (Ltd.), Millennium Park 6, 6890 Lustenau, Austria.

c. Storage period

As soon as the enquiry you have made has been dealt with and the relevant matter has been conclusively clarified, the personal data processed by you via the contact form will be deleted. Further storage may take place in individual cases if this is required by law.

VI. Transfer of data

We will share your personal information with third parties only under the following conditions:

•          You have given your express consent to this in accordance with Art. 6 para. 1 lit. a GDPR

•          This is legally permissible and necessary in accordance with Art. 6 para. 1 lit. b GDPR for the fulfilment of a contractual relationship with you

•          There is a legal obligation for the disclosure according to Art. 6 para. 1 lit. c GDPR

•          The disclosure is necessary in accordance with Art. 6 para. 1 lit. f GDPR for the protection of legitimate business interests, as well as for the assertion, exercise or defence of legal claims and there is no reason to assume that you have an overriding interest worthy of protection in the non-disclosure of your data.

VII. Use of cookies

a. Type and scope of data processing

We use cookies on our website. Cookies are small files that are sent by us to browser of your end device when you visit our website and are stored there. Some of our website’s functions cannot be offered without the use of technically necessary cookies. However, other cookies allow us to perform various analyses. For example, some cookies are able to recognise the browser you are using when you revisit our website and to transmit various information to us. With the help of cookies, we can, among other things, make our website more user-friendly and effective for you by tracking your use of our website and determining your preferred settings (e.g., country and language settings). If third parties process information via cookies, they collect the information directly via your browser. Cookies do not cause any damage to your end device. They cannot run programs and do not contain viruses.

Various types of cookies are used on our website, the type and function of which are explained in more detail below.

Our website uses transient cookies, which are automatically deleted as soon as you close your browser. This type of cookie makes it possible to record your session ID. This allows various requests from your browser to be assigned to a common session and it is possible for us to recognize your end device when you revisit the website.

These cookies enable us to analyse website usage and improve the performance and functionality of our website. For example, information is collected about how visitors use our website, which pages are accessed most frequently, or whether error messages are displayed on certain pages.

b. Legal basis

Based on the purposes described (cf. § 6. a.), the legal basis for the processing of personal data using cookies can be found in Art. 6 para. 1 lit. f GDPR. If you have given us your consent to the use of cookies on the basis of a notice (“cookie banner”) issued by us on the website, the legality of the use is also based on Art. 6 para. 1 lit. a GDPR.

c. Storage period

As soon as the data transmitted to us via the cookies is no longer necessary for the purposes described above, this information is deleted. Further storage may take place in individual cases if this is required by law.

d. Configuration of browser settings

Most browsers are pre-set to accept cookies by default. However, you can configure your browser in such a way that it accepts only certain cookies or no cookies at all. However, we would like to point out that you may no longer be able to use all the functions of our website if cookies are deactivated on our website through your browser settings. You can also delete cookies already stored in your browser by using your browser settings. It is also possible to set your browser to notify you before cookies are saved. As the various browsers may differ in their respective modes of operation, please refer to the respective help menu of your browser for configuration options.

If you would like a comprehensive overview of all third-party access to your Internet browser, we recommend installing specially developed plug-ins for this purpose.

VIII. Tracking and analysis tools

We use tracking and analysis tools to ensure the continuous optimisation and needs-based design of our website. With the help of tracking measures, it is also possible for us to statistically record the use of our website by visitors and to further develop our online offer for you with the help of the knowledge gained. Based on these interests, the use of tracking and analysis tools described below is permitted in accordance with Art. 6 para. 1 lit. f GDPR. If you have given us your consent to the use of cookies on the basis of a notice (“cookie banner”) issued by us on the website, the legality of the use is also based on Art. 6 para. 1 lit. a GDPR. The following description of the tracking and analysis tools also shows the respective processing purposes and the processed data.

1. Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Inc., 1600 Amphitheatre Parkway, Mountainview, CA 94043 USA (“Google”). Google Analytics uses so-called “cookies”, which are text files placed on your computer, to help the website analyse how users use the site.

The information generated by these cookies, for example about the time, place and frequency of your use of this website, is usually transmitted to a Google server in the USA and stored there. When using Google Analytics, it cannot be ruled out that the cookies set by Google Analytics can also collect other personal data in addition to the IP address. Please note that Google may transfer this information to third parties where required to do so by law, or where such third parties process the information on Google’s behalf.

Google will use the information generated by cookies on behalf of the operator of this website in order to evaluate your use of the website, compile reports on website activity and provide other services relating to website activity and Internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics is not merged with other Google data.

You can generally prevent the storage of cookies by selecting the appropriate settings on your browser. However, we advise you to note that if you do this you may not be able to use all the functions of this website to their full extent.

It cannot be ruled out that the cookies set by Google Analytics can collect other personal data in addition to the IP address. To prevent information about your use of the website from being recorded by and transmitted to Google Analytics, you can download and install a plug-in for your browser with the following link: tools.google.com/dlpage/gaoptout.

This plug-in prevents information about your visit to the website from being transmitted to Google Analytics. This plug-in does not prevent any other analysis.

We would like to point out that you cannot use the browser plug-in described above when visiting our website via the browser of a mobile end device (smartphone or tablet). When using a mobile device, you can prevent Google Analytics from collecting your usage data by clicking on the following link: Disable Google Analytics.

By clicking on this link, a so-called opt-out cookie is set in your browser. This prevents information about your visit to the website from being sent to Google Analytics. Please note that the opt-out cookie is valid only for this browser and this domain. If you delete the cookies in this browser, the opt-out cookie will also be deleted. To continue to prevent Google Analytics from collecting data, you must click the link again. The use of the opt-out cookie is also possible as an alternative to the above-mentioned plug-in when using the browser on your computer.

In order to ensure the best possible protection of your personal data, the code “anonymizelp” has been added to Google Analytics on this website. This code causes the last 8 bits of the IP addresses to be deleted, thus recording your IP address anonymously (so-called IP masking). In general, your IP address is shortened by Google before transmission within member states of the European Union or in other contracting states of the Agreement on European Economic Area and is thus anonymised . Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.

IX. Hyperlinks

Our website contains so-called hyperlinks to websites of other providers. When activating these hyperlinks, you will be redirected from our website directly to the website of the other providers. This can be seen, among other things, through the change of the URL. We cannot assume any responsibility for the confidential handling of your data on these third-party websites, as we have no influence on whether these companies comply with data protection regulations. Please refer to these websites directly for information on how these companies handle your personal data.

X.  Data subjects’ rights

As an individual affected by the processing of personal data, the GDPR gives you the following rights:

•          In accordance with Art. 15 GDPR, you can request information about the personal data which we process.  In particular, you can obtain information about the purposes of processing, the categories of the personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to correction, deletion, restriction of processing or objection, the existence of a right of appeal, the origin of their data, if it was not collected from us, about transfers to third countries or to international organisations and the existence of automated decision-making including profiling and, if applicable, meaningful information on their details. 

•          In accordance with Art. 16 GDPR, you can request the immediate correction of incorrect data or the completion of your personal data which we have stored.  

•          In accordance with Art. 17 GDPR, you can request the deletion of your personal data stored by us, provided that the processing is not necessary to exercise the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest or to assert, exercise or defend against legal claims.

•          In accordance with Art. 18 GDPR, you can request the restriction of the processing of your personal data if you dispute the accuracy of the data, if the processing is unlawful, or if we no longer need the data and you refuse to delete it because you need it to assert, exercise or defend legal claims. You also have the right under Art. 18 GDPR if you have objected to the processing in accordance with Art. 21 GDPR.

•          In accordance with Art. 20 GDPR, you can request to receive the personal data that you have provided to us in a structured, commonly used, and machine-readable format or you can request that it be transferred to another responsible party.

•          In accordance with Art. 7 para. 3 GDPR, you can revoke the consent you have given us at any time. As a result, we are no longer allowed to continue the data processing based on this consent in the future.

•          In accordance with Art. 77 GDPR, you have the right to make a complaint to a supervisory authority. Generally, you can contact the supervisory authority of your usual place of residence, your place of work or our company headquarters. In Austria, the supervisory authority is the Data Protection Authority (Datenschutzbehörde), Wickenburggasse 8, 1080 Vienna, Telephone: +43 1 52 152-0, E-mail: dsb@dsb.gv.at, Website: www.dsb.gv.at.

XI. Right of objection

When processing your personal data on the basis of legitimate interests in accordance with Art. 6 para. 1 lit. f GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR, provided that there are grounds for doing so that arise from your particular situation or the objection is directed against direct advertising. In the case of direct advertising, you have a general right of objection, which we implement without specifying a particular situation.

XII. Data security and protective measures

We are committed to protecting your privacy and keeping your personal data confidential. In order to avoid manipulation, loss or misuse of your data stored by us, we take extensive technical and organisational security precautions which are regularly checked and adapted to technological progress. This includes, among other things, the use of recognized encryption methods (TLS 1.2). However, we would like to point out that, due to the structure of the Internet, it is possible that the rules of data protection and the above-mentioned security measures are not observed by other persons or institutions that are not within the realm of our responsibility. In particular, data which is disclosed unencrypted – e.g., if this is disclosed via e-mail – can be read by third parties.  We have no technical influence on this. It is the user’s responsibility to protect the data they provide against misuse by encrypting it or in some other way.