DATA PROTECTION
1) Overview
If we are allowed to welcome you as a customer or business partner, please read from point 3 .
When you visit our website, please read from point 2 .
2) What data do we process when you visit our website?
Welcome to the website https://www.austrianairforce.at ! Please get a picture of how we process your personal data when you visit our website (Art 13, Art 14 GDPR; Section 96 Paragraph 3 TKG).
When you visit our website, the following data can be processed:
Browser type,
Operating system,
Country,
Date,
Time and duration of access,
IP address * and pages visited on our website including entry and exit pages,
Contact page on website,
Device data: We can store personal data from your device. Such data include geolocation data, IP address, unique identifiers (e.g. MAC address),
Data that you enter via a contact form,
E-mail address,
Payment details,
Phone number.
The processing of this data is necessary to ensure the security of the operation of the website and to ensure the functionality of the website from a technical point of view. Some of this data is collected using technical cookies. These technical cookies are only used to the extent necessary (Section 96 (3) TKG). The processing of this data is justified by our legitimate interest in operating our website (Art 6 Paragraph 1 lit f GDPR).
* An IP address is a number assigned to a device. Devices can use this IP address to communicate over the Internet. Each IP address contains information about the Internet service provider used and the physical location of the device used. In this way, information about the user of the device can be obtained.
For the operation of our website it may be necessary for us to disclose your data to the following recipients:
Austrian Air Air Force® Aeronautical Fashion
Registered office: Austria
Purpose of data processing: website operator and owner
Legal basis for data processing: predominantly legitimate interests (Art 6 Paragraph 1 lit f GDPR)
Basis for transfer to a third country: Within the EEA
DMorpheus GmbH
Registered office: Austria
Purpose of data processing: graphic & web design, web programming
Legal basis for data processing: predominantly legitimate interests (Art 6 Paragraph 1 lit f GDPR)
Basis for transfer to a third country: Within the EEA
Nordsteg OnlineMarketing eU
-
Place of business: Austria
-
Purpose of data processing: E-commerce agency
-
Legal basis for data processing: predominantly legitimate interests (Article 6 (1) (f) GDPR)
-
Basis for transfer to a third country: Within the EEA
WiX.com
Registered office: Israel
Purpose of data processing: Website operating platform ("SaaS" Software as a Service)
Legal basis for data processing: predominantly legitimate interests (Art 6 Paragraph 1 lit f GDPR)
Basis for transfer to a third country: Adequacy decision Art 45 GDPR
PayPal
Registered office: USA
Purpose of data processing: payment provider
Legal basis for data processing: contractual necessity (Art 6 Paragraph 1 lit b GDPR)
Basis for transmission to a third country: Standard data protection clauses according to Art 46 Paragraph 2 lit c GDPR
VISA
Registered office: USA
Purpose of data processing: payment provider
Legal basis for data processing: contractual necessity (Art 6 Paragraph 1 lit b GDPR)
Basis for transmission to a third country: Standard data protection clauses according to Art 46 Paragraph 2 lit c GDPR
MasterCard
Registered office: USA
Purpose of data processing: payment provider
Legal basis for data processing: contractual necessity (Art 6 Paragraph 1 lit b GDPR)
Basis for transmission to a third country: Standard data protection clauses according to Art 46 Paragraph 2 lit c GDPR
Instagram Inc.
Registered office: USA
Purpose of data processing: social media application
Legal basis for data processing: contractual necessity (Art 6 Paragraph 1 lit b GDPR)
Basis for transfer to a third country: Standard data protection clauses according to Art 46 Paragraph 2 lit c GDPR, consent according to Art 49 Paragraph 1 lit a GDPR.
Link to Instagram's privacy policy: https://de-de.facebook.com/help/instagram/155833707900388
Link to Facebook's privacy policy: https://www.facebook.com/about/privacy
Meta Inc.
-
Place of business: USA
-
Purpose of data processing: Social media application
-
Legal basis for data processing: Contractual necessity (Article 6 (1) (b) GDPR)
-
Basis for transfer to a third country: Standard data protection clauses in accordance with Art. 46 Para. 2 lit. c GDPR, consent in accordance with Art. 49 Para. 1 lit. a GDPR.
-
Link to Facebook's data protection declaration: https://www.facebook.com/about/privacy
Alphabet Inc. (Google)
Registered office: USA
Purpose of data processing: IT security (including preventing denial of service attacks) via Google reCaptcha
Legal basis for data processing: Consent (Art 6 Paragraph 1 lit a GDPR)
Basis for transfer to a third country: Standard data protection clauses according to Art 46 Paragraph 2 lit c GDPR, consent according to Art 49 Paragraph 1 lit a GDPR.
Link to Google's data protection declaration: https://policies.google.com/privacy?hl=de_AT
2.1) Overview of the technical cookies used
The above-mentioned data are stored using so-called "cookies". Cookies are text files that are stored on your computer and that enable an analysis of the use of the website. They are used to recognize and store temporary data from website visitors. In principle, we only use cookies to the extent necessary to communicate with you via the homepage.
You can prevent the storage of cookies by setting your browser software accordingly. However, we would like to point out that in this case you may not be able to use all functions of this website to their full extent.
The following technical cookies are activated as soon as you visit our homepage and are based on our predominantly legitimate interest (Art 6 Paragraph 1 lit f GDPR) used on our platform:
Designation: Hs
Purpose of the cookie: Ensures browsing security for visitors by preventing cross-site request forgery. This cookie is essential for the security of website visitors.
Duration of storage: browser session (session)
Country of residence of the recipient: USA
Designation: Rc :: a; rc :: c
Purpose of the cookie: This cookie is used to distinguish between humans and bots.
Duration of storage: permanent (persistent), until explicit deletion.
Country of residence of the recipient: USA
Name: ssr caching
Purpose of the cookie: This cookie is required for the cache function. A cache is used by the website to optimize the response time between visitors and the website.
Storage duration: 1 day
Country of residence of the recipient: USA
Name: bSession (WiX)
Purpose of the cookie: registers which server cluster serves the visitor. This is used in the context of load balancing to optimize the user experience.
Storage duration: 1 day
Country of residence of the recipient: USA
Designation: XSRF token
Purpose of the cookie: Ensures browsing security for visitors by preventing cross-site request forgery. This cookie is essential for the security of website visitors.
Duration of storage: browser session (session)
Country of residence of the recipient: USA
2.1) Overview of the advertising cookies used
In addition to the "technical cookies" described above, we also use so-called advertising cookies (including "statistical cookies"). These advertising cookies make it possible to better understand and evaluate your interests. With the help of advertising cookies, we can combine your "surfing behavior" beyond the boundaries of our website with data from other websites. This enables us to be able to better understand the interests of our website visitors and to address them in a more targeted manner.
We respect that not every visitor to the website would like this. Therefore, we only process your data in the course of advertising cookies if you agree to this (Art 6 Paragraph 1 lit a GDPR). You can revoke this consent at any time, whereby the data processing carried out up to the time of revocation remains justified.
The following advertising cookies are currently used:
Name: svSession
Purpose of the cookie: marketing
Purpose of disclosure to recipient: Tracks visitors across all wix.com websites. The information collected can be used to make advertising more relevant to the visitor.
Storage duration: 2 years
Country of residence of the recipient: USA
Name: f edops.logger.sessionId
Purpose of the cookie: statistics
Purpose of disclosure to the recipient: Registers statistical data on the behavior of website visitors. Used by the webmaster for internal analysis.
Duration of storage: permanent (persistent), until explicit deletion.
Country of residence of the recipient: USA
Designation: _wixAB3
Purpose of the cookie: statistics
Purpose of passing on to the recipient: This cookie is used by the operator of the website in connection with tests with several variations. This is a tool that can be used to combine or change content on the website. This allows the website to evaluate the best edition of the website.
Storage duration: 6 months
Country of residence of the recipient: USA
Name: ecwix
Purpose of the cookie: marketing
Purpose of disclosure to the recipient: Registers data about visitors from multiple visitors and on multiple websites. This information is used to measure the effectiveness of advertising on websites.
Duration of storage: browser session (session)
Country of residence of the recipient: USA
Name:_ga:_ga_*(Google)
-
Statistical purposes
-
Storage period: 730 days
-
Country USA
-
Function: Registers a unique ID that is used to create statistical data about who reuses the platform.
Name:_gat (Google)
-
Statistical purposes
-
Duration of storage: 1 day
-
Third country: USA
-
Function: Registers a unique ID that is used to create statistical data about who reuses the platform.
Name:_gat (Google)
-
Statistical purposes
-
Storage period: 1 day
-
Country: USA
-
Function: Used by Google Analytics to regulate requests.
Name:_gid (Google)
-
Statistical purposes
-
Duration of storage: 1 day
-
Third country: USA
-
Function: Registers a unique ID that is used to create statistical data about who reuses the platform.
Name:_collect (Google)
-
Statistical purposes
-
Duration of storage: session
-
Third country: USA
-
Function: Used to send data about the visitor's device and behavior to Google Analytics.[TT1]
-
[TT1] [TT1]These must be filled out first; Frank (Webhikers) should know, if not – please just let me know.
Description:_fbp Fr (Facebook)
-
marketing
-
Storage period: 3 months
-
Third country: USA
-
Function: Used by Facebook to target third-party advertising.
Name: TR (Facebook)
-
marketing
-
Duration of storage: session
-
Third country: USA
-
Function: Used by Facebook to display advertisements from third-party providers.
3) For what purposes do we process your data if you are a customer of or have a business relationship with us?
In the course of our business relationship with customers and business partners, we process data on the basis of contractual (processing of the contractual relationship with you, pre-contractual obligations, billing of services, dispatch of documents, communication for the execution of the contract) and legal obligations (legally required storage within the meaning of § 132 BAO ;) (Art 6 para 1 lit b and c GDPR) as well as based on our legitimate interests or on the basis of the legitimate interests of third parties (Art 6 para 1 lit f GDPR), namely:
for the purpose of internal administration and management of your business case to the extent necessary (e.g. processing your business case, forwarding your business case to various departments, filing files, archiving purposes, correspondence with you);
Transfer of data by way of corporate transactions (e.g. due diligence reviews),
for the purpose of direct advertising (e.g. mailing, e-mailing, satisfaction surveys, letters of congratulation, statistical evaluations);
We would like to expressly inform you that you can object to the processing of your data for the purpose of direct advertising!Assertion and defense of legal claims
in each case to the required extent. The processing of your data serves to initiate, maintain and process our business relationships. If you do not provide us with this data, we will unfortunately not be able to process your business case.
In addition, personal data can be transmitted to our contract processors (within the meaning of Art 4 Z 8 GDPR). These processors are listed under point 5 .
If necessary, we process your data based on your voluntary, express consent (Art 6 Paragraph 1 lit a GDPR).
4) How long will your data be stored?
We will only store your data for as long as is necessary for the purposes for which we collected your data. In this context, statutory retention requirements must be taken into account (for example, for tax reasons, contracts and other documents from our contractual relationship must generally be kept for a period of seven years (Section 132 BAO)). In justified individual cases, for example to assert and defend against legal claims, we can store your data for up to 30 years after the end of the business relationship.
We store data from interested parties for up to three years from the last time the interested party contacted us.
5) who may receive your data?
In the course of our business relationship, it may be necessary for us to transmit your data to the following recipients:
Shipping service provider
Place of business: Usually in Austria
Purpose of data processing: Processing of the legal transaction
Legal basis for data processing: fulfillment of the contract (Art 6 para 1 lit b GDPR)
Basis for transfer to a third country: Within the EEA
WiX.com
Registered office: Israel
Purpose of data processing: webshop
Legal basis for data processing: predominantly legitimate interests (Art 6 Paragraph 1 lit f GDPR)
Basis for transmission to a third country: Adequacy decision according to Art 45 GDPR
Accountants and tax advisers
Registered office: Austria
Purpose of data processing: tax advice and auditing
Legal basis for data processing: contractual obligation (Art 6 Paragraph 1 lit b GDPR)
Basis for transfer to a third country: Within the EEA
Banks
Place of business: Within the EEA
Purpose of data processing: payment processing
Legal basis for data processing: contractual obligation (Art 6 Paragraph 1 lit b GDPR)
Basis for transfer to a third country: Within the EEA
Lawyers
Registered office: Austria
Purpose of data processing: pursuing and defending against legal claims
Legal basis for data processing: contractual obligation (Art 6 Para 1 lit b GDPR), predominantly legitimate interests (Art 6 Paragraph 1 lit f GDPR).
Basis for transfer to a third country: Within the EEA
Courts, authorities, online arbitration board
Place of business: Usually in Austria
Purpose of data processing: law enforcement
Legal basis for data processing: predominantly legitimate interests (Art 6 Paragraph 1 lit f GDPR)
Basis for transfer to a third country: Within the EEA
6) Collection of data from other sources
In the course of a business relationship, or an initiation into this, it is of course necessary to research the business partner. This is done only to the extent necessary. In this context, data can be accessed and processed from the following sources:
7) Does automated decision-making or profiling take place (Art 13 Paragraph 2 lit f GDPR)?
There is no automated decision-making and no profiling in our company.
8) What rights do you have with regard to data processing?
We would like to inform you that, provided that the legal requirements are met:
Have the right to request information about which of your data is processed by us (see in detail Art 15 GDPR).
Have the right to request the correction or completion of incorrect or incomplete data concerning you (see in detail Art 16 GDPR).
Have the right to have your data deleted (see in detail Art 17 GDPR).
Have the right to object to the processing of your data that is necessary to safeguard our legitimate interests or that of a third party. This applies in particular to the processing of your data for advertising purposes.
Have the right to receive the transfer of the data you have provided in a structured, common and machine-readable format.
If we process your data on the basis of your consent, you have the right to revoke this consent at any time by email. This does not affect the legality of the data processing that has taken place up to this point in time (Art 7 (3) GDPR).
9) What are your right to lodge a complaint?
If, contrary to expectations, your right to lawful processing of your data is violated, please contact us by post or email. We will do our best to deal with your concerns immediately. However, you also have the right to lodge a complaint with the supervisory authority responsible for data protection matters.
The address of the Austrian data protection authority is:
Austrian data protection authority
Barichgasse 40-42
1030 Vienna
10) How can you contact us?
If you have any further questions about the processing of your data, please feel free to contact our data protection coordinator using the contact details below.
The person responsible within the meaning of Art 4 Z 7 GDPR is:
AUSTRIAN AIR FORCE® Aeronautical Fashion
Owner: Stefan Auer
Registered office: Bundesstrasse 68, 8740 Zeltweg N 47 ° 11´57´´ E14 ° 44´25´´, Austria
Phone: +43 676 4411060
Email: office@austrianairforce.at
Website: www.austrianairforce.at