Data Privacy Statement

The data controller within the meaning of the General Data Protection Regulation and other national data protection acts as well as other provisions of data protection law is:

DEWINE Labs GmbH
Inffeldgasse 33
8010 Graz
AUSTRIA
Phone: +43 660 149 28 38
Website: www.dewinelabs.com

The data controller’s data protection officer can be reached using the following information:

Phone: +43 660 149 28 38
Email: info@dewinelabs.com

We collect and use the personal data of our users only to the extent necessary to provide a functional website as well as our content and services. The collection and use of the personal data of our users takes place as a matter of course only with the consent of the user. An exception applies in those cases in which it is not possible to obtain prior consent for practical reasons and processing of the data is permitted by statutory provisions.

Inasmuch as we obtain the consent of the data subject for the processing of personal data, Art. 6(1) point (a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis for the processing of personal data.

The legal basis for the processing of personal data required for the performance of a contract to which the data subject is a party is provided by Art. 6(1) point (b) GDPR. This also applies to processing operations necessary for the implementation of pre-contractual measures.If the processing of personal data is necessary to fulfil a legal obligation to which our company is subject, Art. 6(1) point (c) GDPR serves as the legal basis.

In the event that vital interests of the data subject or another natural person necessitate the processing of personal data, Art. 6(1) point (d) GDPR serves as the legal basis.

If the processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and fundamental freedoms of the data subject do not override the first-mentioned interest, Art. 6(1) point (f) GDPR serves as the legal basis for the processing.

The personal data of the data subject will be erased or made unavailable as soon as the purpose of storage no longer applies. Beyond this, storage can take place if this has been provided for by European or national legislators in Union ordinances, laws or other regulations to which the data controller is subject. The data will also be made unavailable or erased if a storage period prescribed by the aforementioned standards expires, unless further storage of the data is necessary for the conclusion or performance of a contract.

Every time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer.

The following data are collected in this context:

(1) Information about the browser type and the version used (2) The user’s operating system (3) The user’s Internet service provider (4) The date and time of the access (5) Websites from which the user’s system accesses our Internet site (6) Websites that are accessed by the user’s system via our website

The legal basis for temporarily storing the data is Art. 6(1) point (f) GDPR.

We use the data to optimise the website and to ensure the security of our information technology systems. This is also our legitimate interest in the data processing pursuant to Art. 6(1) point (f) GDPR.

The data are erased as soon as they are no longer necessary to achieve the purpose for which they were collected. In the case of the collection of data to provide the website, this is the case when the respective session is terminated.

The collection of data for the provision of the website and the storage of data in log files is essential for the operation of the website. Consequently, the user has no option to object.

Our website uses cookies. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user’s computer system. When a user calls up a website, a cookie is stored on the user’s operating system after consent has been given. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is again accessed. Cookies that are already present on the computer can be deleted at any time. The procedure for doing so is described in the respective browser instructions (under “Help” in the browser menu). We use cookies to make our website more user-friendly. Some elements of our website require that the accessing browser be identifiable even after a page change is made.

A cookie is only stored on the user’s computer after the user has consented.

The legal basis for the processing of personal data using cookies is the user’s consent pursuant to Art. 6(1) point (a) GDPR.

We obtain the user’s consent before setting or saving a cookie, with the exception of strictly necessary first-party cookies. This consent is voluntary. This consent can be withdrawn at any time effective for the future via an email to info@dewinelabs.com. Moreover, users can delete cookies we have saved in their web browser at any time. Users can find more information for doing so in the browser instructions (under “Help” in the browser menu). When our website is accessed once again, the user is free to no longer grant consent.

If the user’s consent is not given, full use of all of the website’s functions will no longer be possible (identification of the user when changing pages, language selection). However, it is still possible to visit the website. If no consent is granted, no cookie will be set.

The purpose of using cookies that are necessary for technical reasons is to simplify the use of our website for the user.

The user data collected by means of cookies necessary for technical reasons are not used to create user profiles.

Cookies are stored on the user’s computer and information is transmitted from it to us. Therefore, as the user, you have complete control over the use of cookies. By changing the settings in your Internet browser, you can deactivate or restrict the setting/storage/transfer of cookies. Cookies that have already been stored can be deleted at any time. This can also be done on an automated basis. If cookies for our website are deactivated, it is possible that not all functions of the website will be usable to the full extent.

To increase efficiency on our website, we use the services of Google Analytics, a web analysis service of Google Inc. (“Google”). Google Analytics uses what are known as “Cookies”, or text files that are stored on the user’s computer and that enable analysis of the user’s use of the website. The information generated by the cookie about the use of the website (including the user’s IP address) is transmitted to a Google server in the USA where it is stored.

In addition, this website uses cookies with the purpose of addressing users via remarketing campaigns (Google Adwords and Google Remarketing) with online advertising at a later time in the Google advertising network. To place remarketing advertisements, cookies are set/stored – with the consent of the user – on the basis of a visit to our website.

A cookie is only stored on the user’s computer after the user has consented. As a user, you can also prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address) as well as Google from processing this data by downloading and installing the browser plug-in available under the following link: tools.google.com/dlpage/gaoptout.

The following data are collected in this context:

(1) The IP address of the user (2) The date and time of the access (3) The frequency with which pages are opened (4) Use of website functions (5) The user’s operating system (6) The user’s Internet service provider (7) The date and time of the access (8) Websites from which the user’s system accesses our Internet site (9) Websites that are accessed by the user’s system via our website (10) Operating systems used by end devices (11) Age, gender, languages, interests, country of origin

The legal basis for the processing of personal data using cookies is the user’s consent pursuant to Art. 6(1) point (a) GDPR.

We obtain the user’s consent before setting or saving a cookie. This consent is voluntary. This consent can be withdrawn at any time effective for the future via an email to info@dewinelabs.com. Moreover, users can delete cookies we have saved in their web browser at any time. Users can find more information for doing so in the browser instructions (under “Help” in the browser menu). When our website is accessed once again, the user is free to no longer grant consent.

If the user’s consent is not given, full use of all of the website’s functions will no longer be possible (identification of the user when changing pages, language selection). However, it is still possible to visit the website. If no consent is granted, no cookie will be set.

The transfer of data to Google serves to increase the efficiency of our website and to evaluate user behaviour in this regard as well as to fund this website. The processing of the data enables us to analyse the surfing behaviour of our users. By evaluating the data obtained, we are in a position to compile information on the use of the individual components of our website. This helps us to constantly improve our website and its user-friendliness.

By using Google Analytics, Google Adwords and Google Remarketing from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA to increase efficiency, the user’s data is transferred to Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google LLC is a company that is listed in the Privacy Shield list in accordance with the Privacy Shield Framework. The EU-US Privacy Shield was adopted by the European Commission by means of an Adequacy Decision C(2016) 4176 final of 2016-07-12. Accordingly, Google LLC provides reasonable safeguards for the transfer of data to the United States. More detailed information can be found on the official Privacy Shield website www.privacyshield.gov.

Cookies are stored on the user’s computer and information is transmitted from it to us. Therefore, as the user, you have complete control over the use of cookies. By changing the settings in your Internet browser, you can deactivate or restrict the setting/storage/transfer of cookies. Cookies that have already been stored can be deleted at any time. This can also be done on an automated basis. If cookies for our website are deactivated, it is possible that not all functions of the website will be usable to the full extent.

Our website uses the “Facebook Pixel”, a service provided by Facebook Inc. (“Facebook”). This allows personalised adverts (“Facebook Ads”) to be shown to the users of our website when they visit the social network Facebook, or other websites which also use this service. Facebook Pixel establishes a direct connection between your browser and the Facebook server. As we have no influence on the scope or further use of the data collected by Facebook through the use of this tool, the following information is correct to the best of our knowledge. When the Facebook Pixel is integrated, Facebook receives the information that you have clicked on one of our adverts or have accessed the respective page on our website. If you have signed up for a Facebook service, Facebook can assign the visit to your account. Even if you have not signed up for Facebook or are not logged in, the provider may become aware of, and store, your IP address and other identifiers.

We use the Facebook Pixel in order to display Facebook Ads we have enabled only to those Facebook users who have shown an interest in our website. Our aim with the Facebook Pixel is therefore to ensure that our Facebook Ads suit the potential interests of the users rather than being annoying. The Facebook Pixel also allows us to assess the effectiveness of Facebook Ads for statistical purposes, as we can see whether users were redirected to our website after clicking on a Facebook Ad. The legal basis for use of the Facebook Pixel is your consent, which you can withdraw at any time.

Third-party provider information: Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA; http://www.facebook.com/policy.php; more information on data collection: http://www.facebook.com/help/186325668085084, http://www.face-book.com/about/privacy/your-info-on-other#applicationssowie http://www.face-book.com/about/privacy/your-info#everyoneinfo.

If your personal data is processed, you are the data subject and have the following rights vis-à-vis the data controller:

You can request confirmation from the data controller as to whether we process personal data relating to you.In the event of such processing, you can request the following information from the data controller:

(1) the purposes for which the personal data is processed; (2) the categories of personal data that are processed; (3) the recipients or categories of recipients to whom the personal data about you has been or will be disclosed; (4) the planned period of storage of the personal data concerning you or, if it is not possible to provide specific information in this regard, the criteria for determining the period of storage; (5) the existence of the right to the rectification or erasure of the personal data concerning you, and the right to the restriction of the data controller’s processing, or the right to object to such processing; (6) the existence of the right to lodge a complaint with a supervisory authority; (7) all available information on the origin of the data, if the personal data are not collected from the data subject; (8) the existence of automated decision-making including profiling in accordance with Article 22(1) and (4) GDPR and – at least in these cases – meaningful information about the logic involved and the significance and the intended consequences of such processing for the data subject.

You have the right to request information as to whether the personal data concerning you will be transferred to a third country or to an international organisation. In this context, you can request to be informed of the appropriate guarantees pursuant to Art. 46 GDPR in connection with the transfer.

You have the right to rectification and/or completion of your personal data by the data controller if the personal data processed concerning you are inaccurate or incomplete. The data controller must carry out the rectification immediately.

Under the following conditions, you can request that the processing of your personal data be restricted:

(1) if you dispute the accuracy of the personal data concerning you for a period of time that allows the data controller to verify the accuracy of the personal data; (2) the processing is unlawful and you oppose the option of erasure of the personal data and instead request the restriction of their use; (3) the data controller no longer needs the personal data for the purposes of the processing, but you need them to establish, exercise or defend legal claims, or (4) if you have objected to the processing pursuant to Art. 21(1) GDPR pending verification of whether the legitimate grounds of the data controller override your own.

If the processing of personal data concerning you has been restricted, such data must not be processed, with the exception of their storage, without your consent or for the purpose of establishing, exercising or defending legal claims or protecting the rights of another natural or legal person or for reasons of an important public interest of the Union or of a Member State.

If the processing restriction has been restricted in accordance with the above conditions, you will be informed by the data controller before the restriction is lifted.

You can request that the data controller erase the personal data concerning you immediately and the data controller is obliged to erase this data immediately provided one of the following reasons applies:

(1) The personal data concerning you are no longer necessary for the purposes for which they were collected or otherwise processed. (2) You withdraw your consent upon which the processing pursuant to Art. 6(1) point (a) or Art. 9(2) point (a) GDPR was based and there is no other legal basis for the processing. (3) You object to the processing pursuant to Art. 21(1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21(2) GDPR. (4) The personal data concerning you have been processed unlawfully. (5) The erasure of the personal data concerning you is necessary to fulfil a legal obligation under Union law or the law of the Member States to which the data controller is subject. (6) The personal data concerning you have been collected in relation to information society services offered pursuant to Art. 8(1) GDPR.

If the data controller has made the personal data concerning you public and is obliged to erase them in accordance with Art. 17(1) GDPR, he shall take appropriate measures, including technical measures, taking into account the available technology and the implementation costs, to inform the data controllers responsible for data processing who process the personal data, that you, as the data subject, have requested them to delete all links to these personal data or copies or replications of these personal data.

The right to erasure does not exist inasmuch as the processing is necessary:

(1) for exercising the right of freedom of expression and information; (2) for compliance with a legal obligation which requires processing by Union or Member State law to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller; (3) for reasons of public interest in the area of public health pursuant to Art. 9(2) points (h) and (i) and Art. 9(3) GDPR; (4) for archival purposes in the public interest, scientific or historical research purposes or for statistical purposes pursuant to Art. 89(1) GDPR, insofar as the right referred to under section a) presumably will make the attainment of the objectives of such processing impossible or seriously impair said attainment, or (5) to establish, exercise or defend legal claims.

If you have exercised your right to rectification, erasure or restriction of the processing of your personal data with respect to the data controller, the controller is obliged to notify all recipients to whom the personal data concerning you have been disclosed of such rectification, erasure or restriction of processing, unless this proves to be impossible or involves a disproportionate effort.

You have the right to be informed of these recipients by the data controller.

You have the right, for reasons arising from your particular situation, to object at any time to the processing of personal data concerning you conducted on the basis of Art. 6(1) points (e) or (f) GDPR.The data controller will no longer process the personal data concerning you unless he can demonstrate compelling grounds for processing that are worthy of protection and which override your interests, rights and freedoms, or the processing serves to establish, exercise or defend legal claims.

If the personal data concerning you are processed for the purpose of direct advertising, you have the right to object at any time to the processing of the personal data concerning you for the purpose of such advertising; this also applies to profiling to the extent that it is connected with such direct advertising.

If you object to processing for direct advertising purposes, the personal data concerning you will no longer be processed for these purposes.

You have the option of exercising your right of objection in the context of the use of information society services – notwithstanding Directive 2002/58/EC – by automated means which employ technical specifications.

You have the right to withdraw your declaration of consent under data protection law at any time. The withdrawal of consent has no effect on the lawfulness of the processing carried out on the basis of the consent up to the withdrawal.

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, place of work or place of the alleged infringement, if you consider that the processing of your personal data infringes the GDPR.

The supervisory authority to which the complaint has been submitted shall inform the complainant of the progress and outcome of the complaint, including the possibility of a judicial remedy pursuant to Article 78 GDPR.