Data protection

1. Name and contact details of the person responsible for processing and the company data protection officer

The following information on data protection applies to data processing by:

Responsible: SNS Commerce GmbH, Windmühlgasse 9/14, 1060 Vienna / Austria

Managing Directors: Lukas Schütz / Michael Serafin

Commercial register number: FN 477826 k

Commercial register court: Commercial Court of Vienna

UID: ATU72609518

Email: office@sns-corp.com

Phone: + 43 (0) 1512 / 18 62

A company data protection officer is not required.

 

2. Collection and storage of personal data as well as type and purpose of use

The legal basis for processing operations for which we obtain consent for a specific processing purpose is always Article 6 (1) sentence 1 lit. a GDPR. Insofar as the processing of personal data is required to fulfill a contract (shipping of goods, provision of services) to which you are a party, the processing is based on Article 6 (1) sentence 1 lit. b GDPR. The above legal basis also applies to the implementation of pre-contractual measures (e.g. inquiries about our products and services).

If our company is subject to a legal (statutory) obligation which requires the processing of personal data and which is based on Union law or the law of the member state to which we are subject, the processing is based on Article 6 (1) sentence 1 lit. c GDPR. Furthermore, processing can be based on Article 6 Paragraph 1 Sentence 1 Letter d GDPR if vital interests are affected (danger to life and limb and/or catastrophes). In addition, the legal basis for the processing of personal data can be Article 6 Paragraph 1 Sentence 1 lit. f GDPR. In this case, we will separately inform you of our legitimate interest in accordance with Article 6 Paragraph 1 Clause 1 Letter f GDPR.

a) Visiting our website

When you visit our website, your browser automatically sends information to our website server, which is temporarily stored in a so-called log file. This concerns the following information:

• IP address of the requesting computer,

• date and time of access,

• name and URL of the retrieved file,

• Website from which access is made (referrer URL),

• Browser used and, if applicable, the operating system of your computer and the name of your access provider.

It is stored until it is automatically deleted after seven days. We process this data for the following purposes:

• Ensuring a smooth connection establishment of the website,

• Ensuring comfortable use of our website,

• Evaluation of system security and stability as well

• for other administrative purposes.

The data processing we carry out is based on Art. 6 Para. 1 S. 1 lit. f GDPR as the legal basis. The purposes of data collection listed above justify our legitimate interest. We do not draw any conclusions about your person from the data collected.

In addition, we use cookies and analysis services on our website, which are explained in more detail in Sections 4 and 5 of this data protection declaration.

b) Newsletterdienst

According to Art. 6 Para. 1 S. 1 lit. a GDPR, express consent is required if you wish to receive our newsletter. For the regular sending of the newsletter, we use the e-mail address you have provided for this purpose. You do not have to provide any further information in order to receive the newsletter.

You can unsubscribe from our newsletter service at any time. At the end of each newsletter there is a link that you can use to unsubscribe. However, you do not have to use this, you can simply send us an e-mail office@sns-corp.com from you.

c) contact form

There is a contact form on our website which you can use for questions of any kind. This type of data processing is carried out in accordance with Art. 6 Para. 1 S. 1 lit. a GDPR with your voluntary consent. A valid e-mail address is required so that we can identify the sender of the request and respond to it. All other information is voluntary.

All personal data collected by us through the use of the contact form will be automatically deleted as soon as your request has been dealt with.

d) Business Transaction

If you conclude a distance contract with us, for example by shopping in our online shop, the data will be processed in accordance with Article 6 (1) sentence 1 lit. b GDPR. In addition, we have a legitimate interest in a credit check pursuant to Article 6 Paragraph 1 Clause 1 Letter f GDPR. The data you provide when concluding the contract or registering, in particular your name, address and e-mail address, are required for the fulfillment and processing of the contract. The contract cannot be carried out without them. You are expressly informed of this in accordance with Art. 13 Para. 2 lit e GDPR. The data will also be passed on to third parties (section 4) if this is absolutely necessary (e.g. shipping service provider).

As a registered so-called influencer, the information you provide during registration will be stored in our influencer database. You will be contacted by us for the purpose of cooperation. This is done via email or as a message via your social media platform. We use your postal address for the purpose of sending goods.

The registration data will be stored as long as the account exists. If this is deleted, the account data will also be deleted.

 

3. Storage of Data

Your data for the conclusion of the contract will be stored until the end of the limitation period. The storage of your data is based on Article 6 Paragraph 1 S.1 lit. b GDPR. The duration of the storage of your data is otherwise based on our commercial and tax retention obligations. In this case, the storage of your data is based on Art. 6 Para.1 S.2 lit. c GDPR. If they are no longer required for the above purposes, they will be deleted immediately.

 

4. Sharing of Data

In principle, your personal data will not be forwarded to third parties. Forwarding only takes place in the following cases:

• You have given your express consent in accordance with Art. 6 Para. 1 S. 1 lit. a GDPR for forwarding to third parties;

• According to Art. 6 Para. 1 S. 1 lit. f GDPR, the transfer is necessary to safeguard our legitimate interests or those of a third party, in particular to assert, exercise or defend legal claims, and you have no overriding legitimate interest in not disclosing your data ;

• There is a legal obligation according to Art. 6 Para. 1 S. 1 lit. c GDPR;

• The data will be forwarded in accordance with Art. 6 Para. 1 S. 1 lit. b GDPR for the processing of contractual relationships with you. In this case, your personal data will be passed on to third parties exclusively to the service partners involved in the execution of the contract, such as the logistics company commissioned with the delivery, the bank commissioned with payment matters or the service company responsible for merchandise management and accounting, provided this is necessary for the fulfillment of the contract and processing is mandatory. In cases of transfer to third parties, the extent of the transferred data is limited to the minimum required for the execution of the contract.

 

5. Cookies

Our website uses cookies. Cookies are text files that are filed and saved on a computer system via an Internet browser. They enable websites and servers to recognize and identify your browser. We do not have direct knowledge of your identity as a result.

By using cookies, we can provide you, the user of our website, with special services that would not be possible without the use of cookies. The use of temporary cookies makes it easier to use the website, since you do not have to re-enter your access data or reload the shopping cart of an online shop every time you visit the website again. So-called session cookies enable us to see which individual pages of our website you have already visited. These are automatically deleted after leaving our website. We also use cookies for statistical purposes. They record the use of our website and so we can optimize our offer for you (see section 6). These cookies are automatically deleted after a defined period of time.

The data processed by cookies is required for the purposes mentioned and serves to protect our legitimate interests and those of third parties in accordance with Art. 6 Para. 1 S. 1 lit. f GDPR.

As the person concerned, you can counteract the setting of cookies by our website at any time by means of a corresponding setting in your Internet browser and thus permanently object to the setting of cookies. Cookies that have already been set can be deleted at any time via an Internet browser or other software programs. We would like to point out that deactivating the setting of cookies may result in you not being able to use all the functions of our website.

 

6. Analysis tools andTracking-Tools

The legal basis for the use of the following tools is Art. 6 Para. 1 S. 1 lit. f GDPR. Only with these measures can a needs-based design and continuous optimization of our website be ensured. In addition, we can create statistics on the use of our website and continuously optimize our offer. These interests are to be regarded as legitimate within the meaning of the aforementioned provision.

The purposes of data processing and the type of data can be found in the tracking tool described below.

We use Google Analytics, a web analytics service provided by Google Inc. (https://www.google.de/intl/de/about/)(1600 Amphitheater Parkway, Mountain View, CA 94043, USA; hereinafter "Google") to design our website to meet needs and to continuously optimize it. The tool creates pseudonymised usage profiles and uses cookies for this purpose (see Section 4), which generate the following information:

• Browser type/version

• operating system used

• Referrer URL (the previously visited page)

• Host name of the accessing computer (IP address)

• Time of server request

These are transmitted to a Google server in the USA and stored there. The information is used to evaluate the use of the website, to compile reports on the activities of the website and to provide other services related to the use of the website and the Internet for the purposes of market research and the needs-based design of these Internet pages. if applicable This information is also transferred to third parties if this is required by law or if third parties process this data on behalf of us.

By default, Analytics uses full IP addresses of website users to generate general geographic reports. When the use of IP masks is enabled, Analytics removes the last octet of the user's IP address before it is used and stored.

Google will not associate your IP address with any other data.

As shown in Section 4, the installation of cookies can be prevented by setting the browser software accordingly, which can, however, affect the use of the website. The data collection by this tool can also be done by a Browser add-on can be prevented, which you can find under the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

On mobile devices you can simply click on the link and thus prevent collection by Google Analytics. This sets an opt-out cookie on your device for our website. This exists until you delete it.

For more information on data protection in connection with Google Analytics, see the "Help" information, which you can find under the following link:https://support.google.com/analytics/answer/6004245?hl=de.

We have concluded the necessary order data processing agreement with Google. The contract defines the object and duration of the processing, the type and purpose of the processing, the type of personal data, the categories of data subjects and the obligations and rights incumbent on us under the GDPR. The contract ensures that Google is correspondingly bound to us to comply with these obligations. The processing of your data by Google takes place exclusively on our instructions. We have made sure that Google offers sufficient guarantees that suitable technical and organizational measures are implemented in such a way that processing is carried out in accordance with the requirements of the GDPR and that the rights of the data subjects are protected. The Processor will not engage any other Processor without our prior separate or general written consent.

 

7. Social Media Plug-ins

On the basis of Art. 6 Para. 1 S. 1 lit. f GDPR, we use social media plug-ins from the social networks Facebook, Instagram, YouTube, Pinterest and Twitter to increase our awareness on our website. This advertising purpose is to be classified as a legitimate interest within the meaning of the GDPR. The respective providers of the plug-ins are responsible for data protection-compliant operation. We try to protect the visitor of our website as best as possible by integrating the plug-ins using the so-called two-click method.

a) Facebook

Social media plug-ins from Facebook Inc, Menlo Park, California, USA (hereinafter “Facebook”) are used on our website in the form of the “LIKE” or “SHARE” buttons.

If you call up a page on our website that contains such a plug-in, your browser establishes a direct connection with the Facebook servers. The content of the plug-in is transmitted directly to your browser by Facebook and integrated into the website by it.

By integrating the plug-ins, Facebook receives the information that your browser has accessed the corresponding page of our website, even if you do not have a Facebook account or are not currently logged in to Facebook. This information (including your IP address) is transmitted directly from your browser to a Facebook server in the USA and stored there.

If you are logged into Facebook, Facebook can directly assign your visit to our website to your Facebook account. If you interact with the plug-ins, for example by pressing the "LIKE" or "SHARE" button, the corresponding information is also transmitted directly to a Facebook server and stored there. The information is also published on Facebook and displayed to your Facebook friends.

Facebook can use this information for advertising, market research and needs-based design of the Facebook pages. For this purpose, usage, interest and relationship profiles are created by Facebook, e.g. B. to evaluate your use of our website with regard to the advertisements displayed to you on Facebook, to inform other Facebook users about your activities on our website and to provide other services related to the use of Facebook.

If you do not want Facebook to associate the data collected through our website with your Facebook account, you must log out of Facebook before visiting our website.

The purpose and scope of the data collection and the further processing and use of the data by Facebook as well as your rights in this regard and setting options for the protection of your privacy can be found in theprivacy noticesfrom Facebook, which you can find under the following link: https://www.facebook.com/about/privacy/.

b) Instagram

Our website also uses so-called social plug-ins ("plug-ins") from Instagram, which is operated by Instagram LLC., 1601 Willow Road, Menlo Park, CA 94025, USA ("Instagram").

The plug-ins are marked with an Instagram logo, for example in the form of an "Instagram camera".

If you call up a page on our website that contains such a plug-in, your browser establishes a direct connection to the Instagram servers. The content of the plug-in is sent directly to your browser by Instagram and integrated into the page. Through this integration, Instagram receives the information that your browser has accessed the corresponding page of our website, even if you do not have an Instagram profile or are not currently logged in to Instagram.

This information (including your IP address) is transmitted directly from your browser to an Instagram server in the USA and stored there. If you are logged in to Instagram, Instagram can immediately assign your visit to our website to your Instagram account. If you interact with the plug-ins, for example by pressing the "Instagram" button, this information is also transmitted directly to an Instagram server and stored there.

The information is also published on your Instagram account and displayed to your contacts there.

If you do not want Instagram to directly assign the data collected via our website to your Instagram account, you must log out of Instagram before visiting our website.

For more information, see the Data protectionfrom Instagram at:https://help.instagram.com/155833707900388.

c) YouTube

There is a link to the internet platform www.youtube.com on our website. YouTube LLC, headquartered at 901 Cherry Avenue, San Bruno, CA 94066, USA, is responsible for this website. (https://www.youtube.com/t/terms).

Information about the data made available to YouTube LLC:

As soon as you run the corresponding plug-in and visit the website www.youtube.com, YouTube LLC collects data from you. It is expressly pointed out that we only have the knowledge of data processing by YouTube presented below.

In principle, data is collected and transmitted every time you interact with www.youtube.com. First of all, the data that you provide to the platform operator yourself (in particular when registering for a user account) is stored.

Even without your own information, data is collected when using the services: In particular, information about the services you use and the type of use is collected, for example when you watch a video on YouTube, visit a website on which our advertising services used, or when you view and interact with our advertising and content.

d) Pinterest

Our website also uses plugins from the "pinterest.com" service, which is operated by Pinterest Inc., 808 Brannan Street, San Francisco, CA 94103, USA ("Pinterest"). The plug-in can be recognized by the Pinterest logo. As with the other social media plug-ins, a direct connection to the Pinterest servers is established when you visit our site and log data is transmitted to the Pinterest servers. These are located in the United States, among other places. The log data may contain your IP address, the address of the websites visited that also contain Pinterest functions, type and settings of the browser, date and time of the request, how you use Pinterest and cookies (see Section 6). Pinterest can assign your visit to our website to your Pinterest account if you are logged into it. When you click the Pinterest button, the relevant information is forwarded directly from your browser to Pinterest.

Further information on the purpose, scope and further processing and use of the data by Pinterest as well as your rights in this regard and options for protecting your privacy can be found in Pinterest's data protection information: https://about.pinterest.com/de/privacy-policyWe have no further knowledge of the use of data.

e) Twitter

Plug-ins from the short message network of Twitter Inc., One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland (hereinafter “Twitter”) are integrated on our website. You can recognize the Twitter plug-ins (tweet button) by the Twitter logo on our site. You can find an overview of tweet buttons here here:https://about.twitter.com/resources/buttons.

If you call up a page on our website that contains such a plug-in, a direct connection is established between your browser and the Twitter server. Twitter receives the information that you have visited our site with your IP address. If you click the Twitter "tweet button" while you are logged into your Twitter account, you can link the content of our pages to your Twitter profile. This allows Twitter to associate your visit to our site with your user account. We would like to point out that we, as the provider of the pages, have no knowledge of the content of the data transmitted or how it is used by Twitter.

If you do not want Twitter to be able to assign your visit to our pages, please log out of your Twitter user account.

You can find more information on this in the privacy policy of Twitterunder: https://twitter.com/privacy.

 

8. Data subject rights

The new General Data Protection Regulation has significantly expanded your rights. These are listed below and briefly explained with reference to the legal basis.

• Information, Art. 15 GDPR: You have the right to request information about your personal data processed by us. This includes, for example, information about processing purposes, the category of personal data, the categories of recipients to whom your data was or will be disclosed, the planned storage period, the existence of a right to correction, deletion, restriction of processing or objection, the existence of a right of appeal , the origin of their data, if they were not collected from us, as well as the existence of automated decision-making including profiling and, if necessary, meaningful information on their details;

• Right to rectification, Art. 16 GDPR: You can immediately request the correction of incorrect or incomplete personal data stored by us;

• Right to erasure ("right to be forgotten"), Art. 17 GDPR: You have the right to erasure of your personal data stored by us, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation is necessary for reasons of public interest or to assert, exercise or defend legal claims;

• Right to restriction of processing, Art. 18 GDPR: You can request that the processing of your personal data be restricted. The prerequisite is that the correctness of the data is disputed by you, the processing is unlawful, but you refuse to delete it and we no longer need the data, but you need them to assert, exercise or defend legal claims or you pursuant to Art. 21 GDPR have lodged an objection (section 9) against the processing;

• Right to data transfer, Art. 20 GDPR: You can request that you receive your personal data that you have provided to us in a structured, common and machine-readable format or that it is transmitted to another person responsible;

• Revocation of consent, Art. 7 Para. 3 GDPR: You can revoke the consent you have given us at any time. As a result, we are no longer allowed to continue the data processing based on this consent for the future. However, this does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation;

• Right of appeal, Art. 77 GDPR: You have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data violates data protection regulations. As a rule, you can contact the supervisory authority of your usual place of residence or work or our headquarters.

 

9. Right to Object

You also have a right of objection under Art. 21 GDPR. This applies to your personal data that is processed on the basis of legitimate interests in accordance with Art. 6 Para. 1 S. 1 lit. e or f GDPR, and insofar as there are reasons for an objection to the processing resulting from your particular situation . If the objection is directed against direct advertising, you have an unrestricted right of objection, even without specifying a particular situation.

You can assert your right of objection and your other rights, for example, by sending an email to datenschutz@sns-corp.com.

 

10. Data Security

We use the widespread SSL (Secure Socket Layer) method for our website in conjunction with the highest level of encryption supported by your browser. This is usually a 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can tell whether an individual page of our website is transmitted in encrypted form by the closed representation of the key or lock symbol in the lower status bar of your browser.

It is important to us to protect your data. We therefore take appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.

 

11. Existence of automated decision-making

There is no automatic decision-making or profiling.

 

12. Updating and changing this data protection declaration

It may also be necessary to adapt this data protection declaration to the further development of our website or to update it due to changed legal requirements. The current data protection declaration can be found for the purposes of retrieval and printing under the following link: https://panthrix.com/pages/datenschutz

 

Current status: 26. June 2018