This website is operated by Rupp Austria GmbH, 6912 Hörbranz, Krüzastraße 8 (“WE” or “US” or “OUR”). This Data Privacy Statement describes how WE, as the responsible data controller in terms of data protection regulations, process your personal data in the context of this website.
1. Which personal data WE process of you
In the course of your visit to this website, the following information is gathered: the date and time of your access a page of OUR website, your IP address, name and version of your browser, the webpage (URL) from which your access to this website was referred, certain cookies (see Section 2) and the information that you provide personally by filling out the form for subscribing to OUR newsletter, completing the application form, a participant form for raffles or the order form if you make a purchase as a guest in the online shop or when registering at OUR online shop.
There is no obligation to actually enter the data WE ask you to provide on OUR website. If you decline to do so, however, you will not be able to use all features of the website.
This website uses so-called cookies. A cookie is a small file that can be stored on your computer when you visit a website. Cookies are generally used to offer users additional features on a website. They can be used, e.g., to make navigating a website easier for you, enable you to continue the use of a website where you left off and/or store your preferences and settings for when you return to the website. Cookies cannot access any other data on your computer nor read or modify it.
In the following Sections “Technically Required Cookies,” “Cookies for the Analysis of Browsing Behavior” and “Cookies for Advertising Purposes,” WE explain which types of cookies WE use and which data is processed by means of each of these cookies.
Where no special deletion periods are specified for cookies in the sections below, the following applies in general regarding the storage period: You have control about whether and which cookies are set by making the corresponding browser settings. Most browsers are configured by default so that they permit the unrestricted setting of cookies. You can change and restrict this or block the setting of cookies. And you can delete set cookies at any time from your browser; the deletion can also be made automatically by means of a corresponding browser setting. If you want to find out more about how you can take these steps, please use the “Help” feature in your browser.
Please note that blocking or deleting cookies restricts your online experience and might prevent you from the full use of this website
2.1 Technically Required Cookies
Some features of this website require cookies. Cookies are technically required for these features. This includes login, product selection, shopping cart, order process or remembering search terms on OUR website. The cookies serve the purpose of offering and executing this function. The legal basis for setting technically required cookies and the processing related to them is OUR legitimate interest in implementing these purposes.
2.2 Cookies for the Analysis of Browsing Behavior
2.3 Cookies for Advertising Purposes
For advertising purposes and conversion measurement, OUR website uses the visitor action pixel of Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”) and the LinkedIn Insight Tag of LinkedIn Ireland Unlimited Company (Wilton Plaza, Wilton Place, Dublin 2 Ireland; “LinkedIn”). You can find out more about this in Sections 11 and 12 of this Data Privacy Statement.
3. Purposes of the Data Processing
We will process your personal data for the following purposes:
a) to make this website available to you and to improve and advance the development of this website;
b) to be able to create usage statistics;
c) to be able to detect, prevent and investigate attacks on OUR website;
d) to respond to your inquiries;
e) to process your applications;
f) to create and manage your customer account in the online shop;
g) to process your orders in the online shop;
h) to send you OUR newsletter and conduct surveys about the satisfaction with OUR products and services;
4. Legal Bases for the Processing
The legal basis for the processing of your personal data
- according to Sections 3 a-d above, OUR overriding legitimate interest, which is to reach the purposes named above under Sections 3 a-d;
- according to Sections 3 e and g above, necessity for the performance of pre-contractual measures on your request (application) and necessity for the performance of the contract concluded with you in the online shop;
- according to Section 3 f above, your consent;
- according to Section 3 h above, Sec. 107 (3) Austrian TKG [Telecommunications Act] or Sec. 7 (3) German UWG [Act against Unfair Competition], provided that WE have received your email address in connection with the sale of merchandise to you; otherwise, your consent.
Consents once given can be revoked independently from each other at any time, without affecting the legitimacy of the processing up until the revocation.
5. Transmission of Your Personal Data
We will transmit your personal data for the aforementioned purposes to the following recipients:
- IT service providers contracted by US, namely Baschnegger Ammann Partner Werbeagentur GmbH in A-6850 Dornbirn;
- Advertising service providers contracted by US;
- Forwarding, warehousing and transport service providers hired by US for delivery of the merchandise you have ordered, to the extent this is required for the delivery of the merchandise;
- The involved bank or credit institution to the extent this is required for payment processing;
- The involved payment service providers, currently PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxemburg (hereinafter: “PayPal”), Sofort GmbH with registered office in Munich (for Klarna instant transfer), Hobex AG with registered office in 5020 Salzburg and QENTA with registered office in 1020 Vienna, to the extent this is required for payment processing;
- Google Inc., 1600 Amphitheatre Parkway Mountain View, CA 94043, USA in accordance with Section 8 (Google Analytics);
- Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA, in accordance with Section 11 (Facebook visitor pixel)
- For the newsletter, to the subcontracted data processor Inxmail GmbH with its registered office in D-79106 Freiburg;
- We use payment service providers for the processing of payments via the online shop. For this purpose, the payment service provider receives data relating to the order (products/services, prices), the invoice and payment data (name, address, email address, bank details, card number, validity date and CVC code) and the IP address.
You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal will remain authorized nonetheless to process your personal data, provided this is required for the payment processing in accordance with the contract.
Some of the aforementioned recipients are located or process your personal data outside of the European Economic Area (EEA). The data protection level outside of the EEA may potentially not conform to the standard of your country. However, WE transfer your personal data only to countries, which have been evaluated by the EU Commission as having an appropriate level of protection, or we transfer it to Google Inc., Facebook Inc. and LinkedIn Corporation in the USA.
Even though Google Inc., Facebook Inc. and LinkedIn Corporation are each certified under the U.S.-EU Privacy Shield Convention and are therefore obligated to comply with the requirements of the European data protection regulations, WE point out that the European Court has repealed and declared invalid the resolution by which the EU Commission declared that the data protection standard guaranteed under this convention was appropriate.
The data is transmitted to Google Inc., Facebook Inc. and LinkedIn Corporation to the USA without suitable guarantees in accordance with the GDPR. You run the risk that these recipients cannot satisfy the requirements of the European data protection regulations. The U.S. data protection law does not guarantee the same protection of your data as the GDPR does; in particular, you have only very limited rights as data subject. There is furthermore the right that the U.S. authorities can access your data for purposes of monitoring and surveillance.
6. Storage Period
The data processed according to Sections 3 a-c will be stored by US for a period of two years. Data will be stored for a longer time only as far as this is required to investigate discovered attacks on OUR website. If you apply for a job with US, WE will store your data for seven months beyond the application deadline. Data that WE process on the basis of your consent will be stored until WE receive your revocation and beyond this, for as long as legal obligations require. We will store data relating to the processing of orders for as long as legal obligations require. If you register in OUR online shop or otherwise on OUR website, WE will store your data in each case for as long as your account exists and thereafter, for as long as legal obligations require.
7. Your Rights Relating to Personal Data
In accordance with the applicable data protection regulations, you have the right to receive confirmation, a right of rectification, erasure, restriction of the processing, objection and portability of the data. To contact US for this purpose, please see the contact details listed in Section 10.
You have the right of revocation in particular as regards data processing activities for which WE claim a legitimate interest.
You have the right to lodge complaint with a supervisory authority in the EU or with the Austrian Data Protection Authority in Vienna if you believe that a violation of European or Austrian data protection law has occurred.
8. Google Analytics
This website uses Google Analytics, a web analysis service of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). Google Analytics uses so-called “cookies”, which are text files that are stored on your computer and enable an analysis of your usage of the website. We process yourdata based on your consent. You can revoke this consent at any time as described in Section 2 with effect for the future.
The information generated by the cookie about your use of this website (including your IP address and the URLs of the retrieved webpages) will usually be transmitted to and stored by Google on servers in the USA. We do not store any of your data that is gathered in the context of Google Analytics. This website uses the possibility provided by Google Analytics for IP anonymization. Therefore, your IP address will be truncated/anonymized by Google as soon as Google receives your IP address. Google will use this information on OUR behalf to analyze your use of the website, compile reports about website activities, and perform additional services for US, which relate to the use of the website and the internet. Google will not combine the IP address transmitted by your browser in the context of Google Analytics with other data. You can prevent the storing of cookies by means of corresponding settings in your browser software. We point out, however, that you might then not be able to use all features of this website to the full extent. You can furthermore prevent Google from gathering your data in connection with Google Analytics by downloading and installing the browser plug-in available at the following link: tools.google.com/dlpage/gaoptout. You can also prevent Google Analytics from gathering your data on this website by clicking on the following link. This will set an opt-out cookie, so that your data will not be gathered going forward when you visit this website: Deactivate Google Analytics
9. Use of Social Media Share Links
We use social media share links for Facebook, Instagram and Pinterest on OUR website. You can recognize them by the icons showing the logo of these social media services.
If you actually want to use a share link and its functionalities, you need to click on the relevant icon. You will then be directed to OUR page at the relevant social media service and it can happen that your IP address will be transferred to the social media service, whereby it will get the information that OUR website has been visited from this IP address. If you then log into your user account with the relevant social media service, this service can attribute your visit to OUR website to your social media user account.
We have a Facebook share link for OUR recipes. You can use it to share content of OUR website with the share link on your Facebook profile, provided that you sign in there with your user account. This way, Facebook Inc. in California, USA, is able to attribute the shared content to your user account. We point out that WE, as the operator of OUR website, do not obtain knowledge of the content of the transmitted data nor of its use by the social media service. If you do not want the social media service to be able attribute the visit to OUR website to your user account, please log out of your user account before you visit OUR website.
You can find more information about data privacy at the social media services linked on OUR website at the following links: From Facebook at the link: https://www.facebook.com/about/privacy/
10. Our Contact Details
If you have any questions or concerns relating to the processing of your personal data, please contact US:
Rupp Austria GmbH, 6912 Hörbranz, Krüzastraße 8
T 0043 (0)5573 8080; F 0043 (0)5573 8080-150; E firstname.lastname@example.org
11. Facebook Pixel
For the conversion measurement, OUR website uses the visitor action pixel of Facebook, Facebook Inc. 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”). This helps track the actions of website visitors after they are referred to the provider’s website by clicking on a Facebook ad. It can also happen that page visitors who are logged into Facebook will receive ads from the provider there. The effectiveness of the Facebook ads can thereby be analyzed for the purposes of statistics and market research, and be optimized for future advertising measures. The gathered data are anonymous to US as the operator of this website; WE cannot draw any conclusions as to the identity of the users.
12. LinkedIn Insight Tag
We use the website analysis function LinkedIn Insight Tag of LinkedIn Ireland Unlimited Company (Wilton Plaza, Wilton Place, Dublin 2 Ireland; “LinkedIn”). The LinkedIn Insight Tag enables the gathering of data from your visit to OUR website, including the URL, referrer URL, IP address, device and browser characteristics (user agent) as well as a time stamp. The IP addresses are truncated or hashed. LinkedIn does not share personal data with US but uses the data gathered on OUR website for reports (in which you are not identified) about website visitors and ad performance. LinkedIn further offers a retargeting service for website visitors on LinkedIn, allowing US to display targeted advertising by means of this data outside of OUR website and without identifying you in the process. LinkedIn also uses the data not identifying you for the purpose of improving the relevance of ads and reaching members across devices. If you do not want that, you can object to the retargeting here. You can find more information on data privacy in the context of LinkedIn here. The use of the LinkedIn Insight Tag and the related tracking takes place on the basis of your consent. You can revoke this consent at any time with effect for the future.
13. Facebook Fanpage
Our company operates a fan page on Facebook. If you visit this fan page, Facebook sets cookies on your end device, notably regardless of whether or not you are yourself a Facebook user. You can see which cookies these are above in Section 2 of this Data Privacy Statement.
Facebook uses these cookies to analyze your actions on OUR fan page based on certain criteria and to make this analysis available to US in anonymized form. Facebook calls this service “Facebook Insights.” You can find more information on the processing of the Insight data at www.facebook.com/legal/terms/information_about_page_insights_data
As regards the data processing for Facebook Insights, Facebook Ireland and WE are joint data controllers according to Art. 26 GDPR. Facebook Ireland has the primary responsibility for the processing of the Insight data. We do not make any decisions regarding the processing of the Insight data, in particular not as relates to the further recipients of this data or the length of time for which the cookies that are used for it are stored on the end devices.
You can claim your rights as a data subject either against Facebook Ireland or US.
We have concluded an agreement with Facebook Ireland on the joint responsibility, the relevant contents of which Facebook Ireland are available here: https://www.facebook.com/legal/terms/page_controller_addendum
The legal basis for the processing of the Insight data is your consent, which you can give in the cookie information that appears when OUR website is called up. Like any other consent, you can also revoke this consent at any time with effect for the future.
14. Google Tag Manager
We use Google Tag Manager on this website. Google Tag Manager is a solution offered by Google by means of which the operator of a website can manage website tags via an interface. Tag Manager itself (which implements the tags) is a cookie-free domain and it does not gather any personal data. It ensures the triggering of other tags, which on their part might gather Data under certain circumstances. If this is the case on this website (Google Analytics, Facebook visitor action pixel), you can find information about it in this Data Privacy Statement. Google Tag Manager does not access these data. If deactivation was chosen at the domain or cookie level, it will stay in effect for all tracking tags that are implemented with Google Tag Manager. Google Tag Manager does not alter your cookie settings. You can find more information at http://www.google.de/tagmanager/use-policy.html.