INFORMATION
On this page we inform you about the processing of your personal data.
If you would like to change your privacy settings (grant or revoke consents already granted), you can change your settings at any time.
RESPONSIBLE
Responsible for the processing of your personal data on our website is:
WAW Internethandels GmbH
Bundesstraße 66
8740 Zeltweg
Österreich
Tel: +436644527328
E-mail: office@aquavital.at
CONSENT MANAGEMENT TOOL
LEGALWEB.IO
We use the Consent Management Tool of LEGALWEB.IO, legalweb GmbH, Fürbergstraße 42a, 5020 Salzburg, Austria on our website. This tool sets a cookie on your terminal device to store the services you have selected or not selected. This cookie is not assigned any user-related ID and does not store any other personal data. The content is stored for a maximum of 1095 days and then automatically deleted.
The legal basis for the storage of this data is § 165 para. 3 TKG 2021.
Data processing on your terminal device
The processing operations described in the following text use, among others, technologies such as scripts, cookies, WebSQL, LocalStorage, Session Storage, … . These technologies store or read data on your terminal device.
WEBHOST
Hetzner
We host our website with our order processor Hetzner, Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany.
Connection data is processed for the purpose of providing and delivering the website. For the mere purpose of delivery and provision of the website, the data is not stored beyond the call. However, connection data is stored by our order processor for security purposes. The duration of processing for security purposes is variable and ends with the necessity of the security measures. In addition, our order processor anonymizes the collected data immediately after collection and provides us with the anonymous data in the form of statistics for evaluation. We use these statistics to troubleshoot and further develop our website.
The legal basis for the data processing is the absolute technical necessity for the provision and delivery of the service “website” expressly requested by you by your call pursuant to § 165 para. 3 TKG 2021.
SERVER LOG FILES
For the purpose of monitoring the technical function and increasing the operational security of our web host, connection data is processed. The duration of processing is limited to 30 days.
The legal basis for the data processing is the absolute technical necessity of a server log file as a basic data basis for error analysis and for security measures within the scope of the service “website” expressly requested by your call pursuant to § 165 para. 3 TKG 2021.
CONTENT DELIVERY NETWORK
Cloudflare
We host parts of our website with our processor Cloudflare, Cloudflare Germany GmbH, Rosental 7, 80331 Munich, Germany.
Connection data is processed for the purpose of providing and delivering the website. For the mere purpose of delivery and provision of the website, the data is not stored beyond the call. However, connection data is stored by our order processor for security purposes. The duration of processing for security purposes is variable and ends with the necessity of the security measures. In addition, our order processor anonymizes the collected data immediately after collection and provides us with the anonymous data in the form of statistics for evaluation. We use these statistics to troubleshoot and further develop our website.
The legal basis for the data processing is the absolute technical necessity for the provision and delivery of the service “website” expressly requested by you by your call pursuant to § 165 para. 3 TKG 2021.
WEBFONTS
Local integration of fonts
We use web fonts. We embed these locally on our web space so that no personal data is processed in the process.
TAG MANAGER
Google Tag Manager
In case of granting your consent, we process your personal data with the service Google Tag Manager, Google LLC, Amphitheatre Parkway, Mountain View, CA 94043, USA as joint controller for the purpose of triggering, controlling and managing further services of our website. In the specific case, the above service is to be controlled via Google Tag Manager. Failure to give consent therefore has exactly the same effect as described for the service above. You can revoke consent you have already given by changing the privacy settings.
We allow Google Tag Manager to collect connection data and data from your web browser. These are used by Google to further develop the service.
The legal basis for the transfer of data to the USA is your consent pursuant to Art. 49 para 1 lit a in conjunction with Art. 6 para 1 lit a DSGVO. You have already been informed before giving your consent that the USA does not have a level of data protection equivalent to the standards of the EU. In particular, U.S. intelligence agencies can access your data without you being informed and without you being able to take legal action against them. For this reason, the European Court of Justice has declared the previous adequacy decision (Privacy Shield) invalid in a ruling.
WEBANALYSIS
Matomo
We process your personal data with the order processor Matomo, InnoCraft Ltd, 150 Willis St, 6011 Wellington, New Zealand for the purpose of error analysis and statistical evaluation of our website.
We enable the service to collect connection data, data from your web browser and data about the content accessed, as well as to run analytics software and store data on your terminal device. The service anonymizes the collected data immediately after collection and provides us with the anonymous data in the form of statistics for evaluation. We use these statistics to troubleshoot and further develop our website. The data on your terminal device is stored for a period of up to two years.
The legal basis for the data processing is the absolute technical necessity for the provision and delivery of the service “website” expressly requested by you by your call pursuant to § 165 para. 3 TKG 2021. The legal basis for the transfer to New Zealand is the EU Commission Implementing Decision 2013/65/EU.
Facebook Pixel
In case of granting your consent, we process with the service Facebook Pixel, Meta Platforms Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland as joint controllers your personal data for the purpose of error analysis and statistical evaluation of our website. Failure to provide consent will have no immediate effect on the function of the website, but without statistical data it will be more difficult for us to further develop the website. You can revoke consent you have already given by using the Change privacy settings.
We enable the service to collect connection data, data from your web browser and data about the content accessed, as well as to run analytics software and store data on your terminal device. The service anonymizes the collected data immediately after collection and provides us with the anonymous data in the form of statistics for evaluation. We use these statistics to troubleshoot and further develop our website. The data on your terminal device is stored for a period of up to two years.
The legal basis for the data processing is your consent pursuant to § 165 para. 3 TKG 2021. The Facebook Group transfers your personal data to the USA. The legal basis for the data transfer to the USA is your consent pursuant to Art. 49 para 1 lit a in conjunction with Art. 6 para 1 lit a DSGVO. You have already been informed before giving your consent that the USA does not have a level of data protection equivalent to the standards of the EU. In particular, U.S. intelligence agencies can access your data without you being informed and without you being able to take legal action against them. For this reason, the European Court of Justice has declared the previous adequacy decision (Privacy Shield) invalid in a ruling.
Metricool
In case of granting your consent, we process your personal data with the service METRICOOL SOFTWARE, SL, Téllez, nº 12, Entreplanta H, 28007 Madrid, Spain for the purpose of error analysis and statistical evaluation of our website. Failure to provide consent will have no immediate effect on the function of the website, but without statistical data, it will be more difficult for us to further develop the website. You can revoke consent you have already given by changing the privacy settings.
We enable the service to collect connection data, data from your web browser and data about the content accessed, as well as to run analytics software and store data on your terminal device. The service anonymizes the collected data immediately after collection and provides us with the anonymous data in the form of statistics for evaluation. We use these statistics to troubleshoot and further develop our website. The data on your terminal device is stored for a period of up to two years.
The legal basis for the data processing is your consent pursuant to § 165 para. 3 TKG 2021.
REMARKETING
Facebook Pixel
In case of granting your consent, we process your personal data with the service Facebook Pixel, Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland as joint controller for the purpose of serving personalized advertising and measuring our advertising success.
Failure to provide consent will have no immediate effect on the function of the website, but we will not be able to serve personalized advertising on your end devices if you do not provide consent. You can revoke consent you have already given by changing the privacy settings.
We allow the service to collect connection data, data from your web browser and data about the content accessed. In addition, we enable the Service to run tracking and recognition software and to store data on your terminal device. By means of the tracking and recognition software, it is then possible for the service to enrich its advertising network and to recognize you when you visit external websites or to play personalized advertising. In addition, we use the data collected to measure our advertising success. The data on your terminal device is stored for a period of up to two years.
The legal basis for the data processing is your consent pursuant to § 165 para. 3 TKG 2021. The Facebook Group transfers your personal data to the USA. The legal basis for the data transfer to the USA is your consent pursuant to Art. 49 para 1 lit a in conjunction with Art. 6 para 1 lit a DSGVO. You have already been informed before giving your consent that the USA does not have a level of data protection equivalent to the standards of the EU. In particular, U.S. intelligence agencies can access your data without you being informed and without you being able to take legal action against them. For this reason, the European Court of Justice has declared the previous adequacy decision (Privacy Shield) invalid in a ruling.
Google Ads
In case of granting your consent, we process your personal data with the service Google Ads, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland as joint controller for the purpose of placing personalized advertisements and measuring our advertising success.
Failure to provide consent will have no immediate effect on the function of the website, but we will not be able to serve personalized advertising on your end devices if you do not provide consent. You can revoke consent you have already given by changing the privacy settings.
We allow the service to collect connection data, data from your web browser and data about the content accessed. In addition, we enable the Service to run tracking and recognition software and to store data on your terminal device. By means of the tracking and recognition software, it is then possible for the service to enrich its advertising network and to recognize you when you visit external websites or to play personalized advertising. In addition, we use the data collected to measure our advertising success. The data on your terminal device is stored for a period of up to two years.
The legal basis for the data processing is your consent pursuant to § 165 para. 3 TKG 2021. The Google Group transfers your personal data to the USA. The legal basis for the data transfer to the USA is your consent pursuant to Art. 49 para 1 lit a in conjunction with Art. 6 para 1 lit a DSGVO. You have already been informed before giving your consent that the USA does not have a level of data protection equivalent to the standards of the EU. In particular, U.S. intelligence agencies can access your data without you being informed and without you being able to take legal action against them. For this reason, the European Court of Justice has declared the previous adequacy decision (Privacy Shield) invalid in a ruling.
For more information about Google’s privacy policy and terms of use, please see the following link: Privacy Policy and Terms of Use
Google Analytics with Google Signals
In the event that your consent is granted, we process your personal data with the service Google Signals, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland as joint controllers for the purpose of placing personalized advertising including consideration of demographic characteristics and cross-device measurement of our advertising success.
Failure to provide consent has no immediate effect on the function of the website, but we are unable to display personal advertising on your end devices if you do not provide consent. You can revoke consent you have already given by changing the privacy settings.
We allow the service to collect connection data, data from your web browser and data about the content accessed. In addition, we enable the Service to run tracking and recognition software and to store data on your terminal device. By means of the tracking and recognition software, it is then possible for the service to enrich its advertising network and to recognize you when you visit external websites or to play personalized advertising. In addition, we use the data collected to measure our advertising success. The data on your terminal device is stored for a period of up to two years.
The legal basis for the data processing is your consent pursuant to § 165 para. 3 TKG 2021. The Google Group transfers your personal data to the USA. The legal basis for the data transfer to the USA is your consent pursuant to Art. 49 para 1 lit a in conjunction with Art. 6 para 1 lit a DSGVO. You have already been informed before giving your consent that the USA does not have a level of data protection equivalent to the standards of the EU. In particular, U.S. intelligence agencies can access your data without you being informed and without you being able to take legal action against them. For this reason, the European Court of Justice has declared the previous adequacy decision (Privacy Shield) invalid in a ruling.
For more information about Google’s privacy policy and terms of use, please see the following link: Privacy Policy and Terms of Use
WEBSHOP
We offer you the possibility to purchase products directly from our webshop. Within the framework of the webshop, the data entered by you as well as data relating to products selected by you will be processed by the controller for the purpose of making offers, concluding contracts, fulfilling contracts, shipping goods and fulfilling any post-contractual obligations prior to the conclusion of the contract on the basis of the pre-contractual relationship initiated by you and after the conclusion of the contract on the basis of the contract pursuant to. Art. 6 par. 1 lit. b GDPR.
If the purchase of our products was made via an existing customer account or a customer account was created to process the purchase, your personal data will be processed until your customer account is deleted.
For customers who have purchased our products via a guest profile, the processing of their personal data is carried out until the expiry of the statutory retention obligations.
Further processing of your data for the purpose of direct marketing in forms not subject to consent, such as the addressed postal dispatch of advertising, will be carried out in a manner compatible with the purpose of fulfilling the contract until you object.
There is no legal or contractual obligation to provide the personal data. However, the provision is necessary for the conclusion of the contract. Failure to provide will result in the inability to enter into a contract.
Shopping carts of non-registered users will be deleted after 14 days at the latest. The user accounts of registered users remain in existence until the account is deleted by the user. Contractual data is processed until the statute of limitations for possible post-contractual obligations expires.
Payments are processed with:
Service: PayPal
Operator: PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg
Service: Stripe
Operator: Stripe,Inc. 185 Berry Street, Suite 550, San Francisco, CA 94107, USA
To ship our goods we use:
Service: German Post
Operator: Deutsche Post AG, Charles-de-Gaulle-Strasse 20, 53113 Bonn, Germany
Service: Austrian Post
Operator: Österreichische Post Aktiengesellschaft, Rochusplatz 1, 1030 Vienna, Austria
Service: Sendcloud
Operator: Sendcloud Global, Stadhuisplein 10, 5611 Eindhoven, Netherlands.
CONTACT FORM
On our website there is the possibility to contact us directly through a contact form. After sending the contact form, the personal data entered by you will be processed by the responsible party for the purpose of processing your inquiry on the basis of the consent granted by you by sending the form in accordance with. Art. 6 par. 1 lit. a DSGVO until revoked. There is no legal or contractual obligation to provide the personal data. Failure to do so will only result in you not submitting your request and us not being able to process it.
COMPETITION FORM
For the purpose of conducting the sweepstakes, we process the data entered by you on the basis of the sweepstakes contract concluded with them pursuant to. Art. 6 par. 1 lit. b DSGVO until the conclusion of the sweepstakes. There is no legal or contractual obligation to provide the personal data. However, the provision is required to participate in the sweepstakes. Failure to do so will only result in you not being able to enter the competition.
NEWSLETTER
Cleverreach
Once you have given your consent, your personal data will be processed for the purpose of sending direct electronic advertising (e.g. newsletter dispatch) until you revoke it.
For the purpose of sending newsletters, we use the order processor CleverReach, CleverReach GmbH & Co. KG, Schafjückenweg 2, 26180 Rastede, Germany.
The legal basis for the processing is the consent provided by you pursuant to § 174 TKG 2021 in conjunction with Art. 6 para. 1 lit. a DSGVO granted consent. There is no legal or contractual obligation to provide consent. Failure to provide consent will only result in you not receiving a newsletter from us.
EMBEDDINGS
Vimeo
In case of granting your consent, we process your personal data with the service Vimeo, Vimeo Inc, 555 West 18th Street, New York, New York 10011, USA as joint controllers for the purpose of playing videos on our website.
We allow the service to collect connection data, collect data from your web browser and place an advertising cookie. By placing advertising cookies, Vimeo is able to calculate an individual user ID for each user. This personal data, which is suitable for unique identification, is then processed within the advertising network operated by Vimeo.
Insofar as Vimeo carries out further independent processing of the data, in particular within the framework of the Vimeo advertising network, Vimeo is the sole responsible party for this. Details can be found in Vimeo’s privacy policy.
Failure to provide consent will only result in the Vimeo service not being made available to you. You can revoke consent you have already given by changing the privacy settings.
The legal basis for the data processing is your consent pursuant to § 165 para. 3 TKG 2021. The legal basis for the data transfer to the USA is your consent pursuant to Art. 49 para 1 lit a in conjunction with Art. 6 para 1 lit a DSGVO. You have already been informed before giving your consent that the USA does not have a level of data protection equivalent to the standards of the EU. In particular, U.S. intelligence agencies can access your data without you being informed and without you being able to take legal action against them. For this reason, the European Court of Justice has declared the previous adequacy decision (Privacy Shield) invalid in a ruling.
Google reCaptcha
In case of granting your consent, we process your personal data with the service Google reCaptcha, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland as joint controller for the purpose of avoiding non-human and automated input. In doing so, we enable the service to set cookies, collect connection data and data from your web browser. In addition, we enable the service to calculate a user ID to uniquely identify the user within the advertising network operated by Google. Data is stored on your device for up to two years.
The legal basis for data processing is your consent pursuant to Art. 6 para. 1 lit. a GDPR. The Google Group transfers your personal data to the USA. The legal basis for the data transfer to the USA is your consent pursuant to Art. 49 para 1 lit a in conjunction with Art. 6 para 1 lit a DSGVO. You have already been informed before giving your consent that the USA does not have a level of data protection equivalent to the standards of the EU. In particular, U.S. intelligence agencies can access your data without you being informed and without you being able to take legal action against them. For this reason, the European Court of Justice has declared the previous adequacy decision (Privacy Shield) invalid in a ruling. Failure to provide consent will result in the inability to use reCaptcha and related forms.
You can revoke consent you have already given by changing the privacy settings.
Right of objection
If the processing of your personal data is based on the legitimate interest, you have the right to object to this processing. Unless there are compelling legitimate grounds for processing on our part, the processing of your data will be stopped on the basis of this legal basis. In addition, you have the right to object to the processing of your personal data for the purpose of direct marketing. In case of objection, your personal data will no longer be processed for the purpose of direct marketing. The lawfulness of the data processed until the objection is not affected by the objection.
Right of withdrawal
You have the right to revoke consent you have already given at any time by changing the privacy settings. In the case of consent to receive electronic advertising, revocation of your consent can be done by clicking on the unsubscribe link. In this case, processing will cease unless there is another legal basis. The legality of the data processed until the revocation is not affected by the revocation.
Other data subject rights
You also have the right to information, correction, deletion and restriction of processing of personal data. If the legal basis for processing your personal data is your consent or a contract concluded with you, you also have the right to data portability. Furthermore, you have the right to complain to the supervisory authority. You can find more information about the supervisory authorities in the European Union here.
