Data protection declaration

Unless stated otherwise below, the provision of your personal data is neither legally nor contractually obligatory, nor required for conclusion of a contract. You are not obliged to provide your data. Not providing it will have no consequences. This only applies as long as the processing procedures below do not state otherwise.

“Personal data” is any information relating to an identified or identifiable natural person.

Server log files

You can use our websites without submitting personal data.

Every time our website is accessed, user data is transferred to us or our web hosts/IT service providers by your internet browser and stored in server log files. This stored data includes for example the name of the site called up, date and time of the request, the IP address, amount of data transferred and the provider making the request. The processing is carried out on the basis of Article 6(1) f) GDPR due to our legitimate interests in ensuring the smooth operation of our website as well as improving our services.

Your data will be transferred to Canada, among other countries. Data transfers to Canada are subject to an adequacy decision by the EU Commission.

Contact

Responsible person

Proactive contact of the customer by e-mail

If you make contact with us proactively via email, we shall collect your personal data (name, email address, message text) only to the extent provided by you. The purpose of the data processing is to handle and respond to your contact request.

If the initial contact serves to implement pre-contractual measures (e.g. consultation in the case of purchase interest, order creation) or concerns an agreement already concluded between you and us, this data processing takes place on the basis of Article 6(1)(b) GDPR.

If the initial contact occurs for other reasons, this data processing takes place on the basis of Article 6(1)(f) GDPR for the purposes of our overriding, legitimate interest in handling and responding to your request. In this case, on grounds relating to your particular situation, you have the right to object at any time to this processing of personal data concerning you and carried out on the basis of Article 6(1)(f) GDPR.

We will only use your email address to process your request. Your data will subsequently be deleted in compliance with statutory retention periods, unless you have agreed to further processing and use.

Collection and processing when using the contact form

When you use the contact form we will only collect your personal data (name, email address, message text) in the scope provided by you. The data processing is for the purpose of making contact.

We will only use your email address to process your request. Finally your data will be deleted, unless you have agreed to further processing and use.

Advertising

Use of your email address for mailing of newsletters

We use your email address outside of contractual processing exclusively to send you a newsletter for our own marketing purposes, if you have explicitly agreed to this. The processing will be carried out on the basis of art. 6 (1) lit. a GDPR with your consent. You can withdraw your consent at any time without affecting the legality of the processing carried out with your consent up to the withdrawal. You can unsubscribe from the newsletter at any time using the relevant link in the newsletter or by contacting us. Your email address will then be removed from the distributor.

Your data will be forwarded to a service provider for email marketing in the course of order processing. It will not be forwarded to other third parties.

Cookies

We use cookies on our website to make our internet presence more user-friendly and functional. Some cookies remain stored on your terminal device.

Cookies are small data packets that are exchanged between your browser and the/our web server when you visit our website. They do not cause any damage and only serve to recognize the website visitor. Cookies can only store information supplied by your browser, i.e. information that you yourself have entered into the browser or that is present on the website. Cookies cannot execute code and cannot be used to access your terminal device.

The next time you visit our website with the same terminal device, the information stored in cookies may subsequently be sent back either to us (“first-party cookie”) or to a third-party web application to which the cookie belongs (“third-party cookie”). Through the stored and returned information, the respective web application recognizes that you have already called up and visited the website with the browser of your end device.

Cookies contain the following information:

Cookie Name
Name of the server from which the cookie originated
Cookie ID number
A date on which the cookie is automatically deleted

Depending on their purpose and function, we divide cookies into the following categories:

Technically necessary cookies to ensure the technical operation and basic functions of our website. For example, this type of cookie is used to maintain your settings while you navigate the website; or they can ensure that important information is retained throughout the session (e.g. login, shopping cart).
Statistics cookies to understand how visitors interact with our website by collecting and analyzing information anonymously only. This provides us with valuable insights to optimize both the website and our products and services.
Marketing cookies to set targeted advertising activities for users on our website.
Unclassified cookies are cookies that we are currently trying to classify together with providers of individual cookies.

Depending on how long they are stored, we also divide cookies into session and persistent cookies. Session cookies store information used during your current browser session. These cookies are automatically deleted when you close the browser. This does not leave any information on your terminal device. Persistent cookies store information between two visits to the website. Based on this information, you will be recognized as a returning visitor on your next visit and the website will respond accordingly. The lifetime of a permanent cookie is determined by the provider of the cookie.

The legal basis for the use of technically necessary cookies is based on our legitimate interest in the technically flawless operation and smooth functionality of our website pursuant to Art 6 (1) lit. f DSGVO. Our website cannot function properly without these cookies. The use of statistics and marketing cookies requires your consent pursuant to Art 6 (1) lit. a DSGVO. You can revoke your consent to the use of cookies in accordance with Art 7 (3) DSGVO at any time for the future. The consent is voluntary. If it is not given, no disadvantages will arise. You can find more information about the cookies we actually use (in particular, their purpose and storage period) in this privacy policy and in the information about the cookies we use in our cookie banner.

You can also set your Internet browser to generally prevent cookies from being stored on your end device or to ask you each time whether you agree to cookies being set. Once cookies have been set, you can delete them at any time. You can find out how all this works in detail in the help function of your browser.

Please note that a general deactivation of cookies may lead to functional restrictions on our website.

On our website, we also use so-called local storage functions (also called “local storage”). In this case, data is stored locally in the cache of your browser, which continues to exist and can be read even after you close the browser – as long as you do not delete the cache or it is the session storage.

Third parties cannot access the data stored in the Local Storage. If special plug-ins or tools use the local storage functions, this is described with the respective plug-in or tool.

If you do not want plug-ins or tools to use local storage functions, you can control this in the settings of your respective browser. We would like to point out that this may result in functional restrictions.

Analysis | Advertising tracking

Use of Google Analytics

Our website uses the web analysis service Google Analytics from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”).

The processing of data serves to analyse this website and its visitors and for marketing and advertising purposes.

Google will use this information on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activity and to provide other services to the website operator relating to website and internet use. In this process the following information, inter alia, can be collected: IP address, date and time of the website access, click path, information on the browser and the device you are using, the pages visited, referrer URL (website via which you accessed our website), location data, purchasing activities. The IP address transmitted from your browser within the scope of Google Analytics is not associated with any other data held by Google.
Google Analytics uses technology such as cookies, web storage in the browser and tracking pixels which enable an analysis of your use of the website. The information generated by these regarding your use of this website is usually transferred to a Google server in the USA and stored there. Google relies on standard contractual clauses as suitable guarantees for the protection of personal data, available at: https://policies.google.com/privacy/frameworks and https://business.safety.google/adsprocessorterms/. Both Google and the US government authorities have access to your data. Google may combine your data with other data, such as your search history, personal accounts, usage data from other devices and any other information Google has about you.

IP anonymisation is activated on this website. Google uses this to shorten your IP address beforehand within Member States of the European Union or in other signatories to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there.

The use of cookies or comparable technologies is carried out with your consent on the basis of Art. 25 para. 1 p. 1 TTDSG in conjunction with Art. 6 para. 1 lit. a GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time without affecting the legality of the processing carried out with your consent up to the withdrawal.
You can find more detailed information on the terms and conditions of use and data protection at https://www.google.com/analytics/terms/de.html and/or at https://www.google.de/intl/de/policies/ and at https://policies.google.com/technologies/cookies?hl=de.

Use of Google Fonts

Purpose: External Media
Recipient country: USA

Our website uses so-called web fonts provided by Google for the uniform display of fonts. Google Fonts is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).

ATTENTION! As part of this service, data is transferred to the USA or such cannot be ruled out.

To display Google web fonts, the browser you are using must connect to the Google servers. This gives Google knowledge that our website was accessed via your IP address. The IP address of the browser of the end device of the visitor to our website is also stored by Google. If your browser does not support web fonts, a standard font will be used by your end device.

With each Google Font request, information such as language settings, screen resolution, version and name of the browser is automatically transmitted to the Google server in addition to the IP address. In any case, Google can use the collected usage data to determine the popularity of fonts. Google publishes the results on internal analysis pages (e.g. Google Analytics).

With Google Fonts we can use fonts on our own website and do not have to upload them to our server. Google Fonts is an important component in keeping the quality of our website high. All Google fonts are automatically optimized for the web, this saves data volume and is a great advantage, especially when using mobile devices. When you visit us, the small file size ensures a fast loading time. Furthermore, Google Fonts are secure web fonts and support all common browsers.

Google stores requests for CSS assets on its servers for one day. This enables us to use the fonts using a Google style sheet. The font files are stored by Google for one year. To delete data early, you must contact Google Support ( https://support.google.com ).

Your data will only be processed with your express consent in accordance with Article 6 (1) (a) GDPR.

Here you can find out exactly where Google data centers are located: https://www.google.com/about/datacenters/inside/locations/

You can find more information about Google Fonts at https://developers.google.com/fonts/faq and in Google’s privacy policy: https://policies.google.com/privacy

The data processing conditions for Google products and the standard contractual clauses for data transfer to third countries can be found at https://business.safety.google/adsprocessorterms/

Use of Facebook Pixel

Our website uses the remarketing function “Custom Audiences” by Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Irland “Facebook”).

Meta Platforms Ireland and we are jointly responsible for the collection of your data and the transfer of this data to Facebook when the service is integrated. The basis for this is an agreement between us and Meta Platforms Ireland on the joint processing of personal data, in which the respective responsibilities are defined. The agreement is available at https://www.facebook.com/legal/controller_addendum. According to this agreement, we are responsible in particular for the fulfilment of the information obligations in accordance with Art. 13, 14 GDPR, for compliance with the security requirements of Art. 32 GDPR with regard to the correct technical implementation and configuration of the service, and for compliance with the obligations in accordance with Art. 33, 34 GDPR, insofar as a violation of the protection of personal data affects our obligations under the agreement on joint processing. Meta Platforms Ireland is responsible for enabling the rights of the data subject in accordance with articles 15-20 of the GDPR, for complying with the security requirements of article 32 of the GDPR with regard to the security of the service, and for complying with the obligations of articles 33, 34 of the GDPR, insofar as a breach of personal data protection concerns Meta Platforms Ireland’s obligations under the joint processing agreement. This application serves to address the visitor to the website with interest-related advertising on the social network Facebook.

We have implemented Facebook’s remarketing tag on our website for this purpose. This tag sets up a direct connection to Facebook’s servers when you visit our website. This informs the Facebook server which of our web pages you have visited. Facebook assigns this information to your personal Facebook user account. When you visit the social network Facebook you will then be shown personalised, interest-related Facebook ads.
Your data may be transmitted to the USA. For the USA, no adequacy decision from the EU Commission is available.The data transfer takes place, among other things, on the basis of standard contractual clauses as suitable guarantees for the protection of personal data, which can be viewed at: https://www.facebook.com/legal/EU_data_transfer_addendum.

The use of cookies or comparable technologies is carried out with your consent on the basis of Art. 25 para. 1 p. 1 TTDSG in conjunction with Art. 6 para. 1 lit. a GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time without affecting the legality of the processing carried out with your consent up to the withdrawal.
You can find more detailed information on Facebook’s collection and use of data and your associated rights and options for protecting your privacy in Facebook’s privacy policy: https://www.facebook.com/about/privacy/.

Rights of persons affected and storage duration

Duration of storage

After contractual processing has been completed, the data is initially stored for the duration of the warranty period, then in accordance with the retention periods prescribed by law, especially tax and commercial law, and then deleted after the period has elapsed, unless you have agreed to further processing and use.

Rights of the affected person

If the legal requirements are fulfilled, you have the following rights according to art. 15 to 20 GDPR: Right to information, correction, deletion, restriction of processing, data portability. You also have a right of objection against processing based on art. 6 (1) GDPR, and to processing for the purposes of direct marketing, according to art. 21 (1) GDPR.

Right to complain to the regulatory authority

You have the right to complain to the regulatory authority according to art. 77 GDPR if you believe that your data is not being processed legally.

Contact possibility for data protection questions and complaints:

Österreichische Datenschutzbehörde (Austrian Data Protection Authority), Barichgasse 40-42, 1030 Vienna, phone: +43 1 52 152-0, e-mail, web.

BomDia Medien GmbH, Muchargasse 30, 8010 Graz, e-mail: hello@bomdia.media

Right to object

If the data processing outlined here is based on our legitimate interests in accordance with Article 6(1)f) GDPR, you have the right for reasons arising from your particular situation to object at any time to the processing of your data with future effect.

If the objection is successful, we will no longer process the personal data, unless we can demonstrate compelling legitimate grounds for the processing that outweigh your interests or rights and freedoms, or the processing is intended for the assertion, exercise or defence of legal claims.

last update: 27.01.2023

Privacy Policy