Here you will find information about how we handle your personal data when you visit our website. In order to provide the functions and services of our website it is necessary that we collect personal data about you. Below we explain what data we collect about you, what this is required for and what rights you have in relation to your data.
The operator is responsible for processing personal data on this website:
Bioblo Spielwaren GmbH, Kaplanstrasse 10, 3430 Tulln an der Donau, Austria.
Further information can be found in the site notice.
If you have any questions regarding data protection, you can contact our data protection officer at firstname.lastname@example.org at any time.
If you use this website without providing us with data in any other way (e.g. by completing a purchase in the web shop, registering or using the contact form), we only collect technically necessary data that is automatically transmitted to our server (e.g. IP address, date and time of the request, browser type and operating system). This is necessary in order to display our website. Insofar as personal data are concerned, Art. 6 para. 1 lit. f GDPR is the legal basis for the collection.
On our website you can enter personal data via a contact form. When you use the contact form, we collect and store the data you enter in the input mask (e.g. last name, first name, e-mail address). This data is not passed on to third parties.
You can subscribe to a newsletter on our website. If you subscribe to the newsletter, we collect and store the data you enter in the input mask (e.g. last name, first name, e-mail address). We do not pass this data on to third parties. Subscription to the newsletter is only possible with your consent. The legal basis for the processing is Art. 6 para. 1 lit. a GDPR. We use the data exclusively for sending newsletters. You can cancel the newsletter subscription at any time by clicking on the button at the end of the newsletter.
This website is based on a webshop system by the Canadian company Shopify Inc. Shopify protects personal data in accordance with the requirements of the GDPR when it is transferred to and stored in the USA and Canada. For more information on how personal data from the European Economic Area (EEA) is received and processed by Shopify in accordance with the GDPR standards and Shopify's best practices for information security, see Shopify's white paper on the GDPR.
Completing a purchase
We would like to point out that for the purpose of completing the online purchase process, the IP data of the subscriber is stored, as well as the name, address and email address of the buyer. The data provided is necessary for the processing of the online purchase. Data will not be transferred to third parties, with the exception of the transfer of the e-mail address to the processing payment service providers for the purpose of debiting the purchase price and to our tax advisor for the fulfillment of our tax obligations. In the case of a completed purchase transaction, all data from the contractual relationship will be stored until the expiry of product liability (10 years). The data processing is based on the legal provisions of § 96 para. 3 TCG and Art 6 para. 1 lit a (consent) and/or lit b (necessary for the performance of the contract) of the GDPR.
Most web browsers accept cookies automatically. Stored cookies can be deleted at any time via the settings of your web browser. You can also adjust the settings of your web browser so that no cookies are stored. In this case not all functions of our website may be available.
We use Google Analytics to analyse and improve the use of our website. Google Analytics is a web analysis service by Google Inc. ("Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. However, in the event that IP anonymisation is activated on this website, your IP address will first be truncated by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on the website activities and to provide further services to the website operator in connection with the use of the website and the Internet. The IP address transmitted by your browser within the scope of Google Analytics is not combined with other data from Google.
Google participates in the EU-US Privacy Shield. This means that even in the exceptional cases in which Google transfers personal data to the USA, there is an adequate level of data protection. The legal basis for processing data with the aid of Google Analytics is Art. 6 para. 1 sentence 1 lit. f GDPR. Information about the third-party provider: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001
Facebook, Google and Microsoft use the "pixels" set by us to store cookies on the user's device and to read existing cookies and other identifiers and to thus augment the profile created for the identifier or user. We do not have access to this data, but use it to display advertising to interested target groups.
Disclosure and transmission of data
Personal data will only be disclosed or transmitted by us to third parties if this is necessary for the purpose of processing the contract or for billing purposes, or if you as a user of the website and/or customer have given your prior consent. As a user of the website and/or customer, you have the right to revoke your consent with future effect at any time.
You are generally entitled to the rights of information, correction, deletion, restriction, data portability, revocation and opposition. If you believe that the processing of your data violates data protection law or your data protection rights have otherwise been violated in any way, you can complain to the supervisory authority. In Austria, this is the data protection authority.
Status: May 2020