Maison Image is particularly concerned about the protection of your personal data (hereinafter "data"). For the purposes of the General Data Protection Regulation (GDPR; Datenschutz-Grundverordnung - DSGVO), "personal data" means any information relating to an identified or identifiable natural person.
Your data will be processed by us as the responsible party and by the processors we commission with the processing of personal data (e.g. web space providers, newsletter service providers) exclusively on the basis of the applicable European and national legal provisions (in particular, these are the Data Protection Act, the General Data Protection Regulation and the Telecommunications Act).
In this data protection declaration (version of January 30th, 2022), we inform you about the most important aspects of data processing within the scope of our online information services (website, e-mail newsletter, social media) and about the rights to which you are entitled under data protection law. For all personal designations, the chosen form applies to both genders.
2. CONTACT DETAILS OF THE RESPONSIBLE PERSON
For questions regarding data protection, you will find below the contact details of the responsible persons within the meaning of the GDPR and other national data protection laws of the member states as well as other data protection regulations:
Kremsergasse 1, 1130 Wien
Phone: +43 (0) 664 397 52 49
Website imprint: maison-image.at/imprint
3. PURPOSE AND LEGAL BASES OF DATA PROCESSING
We process your data for the provision of our contractually agreed services or for the implementation of pre-contractual measures. These processing operations are carried out on the legal basis of Art 6 para 1 lit b DSGVO (contract performance). If the data is not provided or not provided in full, we may not be able to fulfill our contractual obligations in full or conclude the contract in the first place.
In addition, we process your data as part of our administration and business operations. These processing operations are carried out on the basis of our legitimate interest in proper and efficient business management and in managing and optimizing the selection of our contractual partners and thus on the legal basis of Art 6 para 1 lit f DSGVO.
4. CATEGORIES OF DATA AND PROCESSORS
As part of the operation of our website, which is carried out via a web server of our processor, server logs are created and analyzed and cookies are used, which ensure the technical operation of our website and allow us to improve our web services. The use of server logs (web analysis) and cookies for data processing purposes is described in detail below.
For purposes of hosting our website (operating a web server), we use the services of the Austrian processor easyname GmbH (Canettistraße 5/10, 1100 Vienna, Austria). The data hosted by easyname is located in Austria—it is processed in data centers in Vienna. On the basis of Art. 28 of the DSGVO, Maison Image has concluded a commission processing agreement with easyname GmbH. An order processing contract regulates which data is processed for which purpose, on which legal basis this is done, and how the protection of the data is ensured by the processor, especially in technical terms.
Transport encryption of data on the Internet
For data security on the web, our website uses the secure hypertext transfer protocol (HTTPS): By means of an SSL certificate, the data exchange between your web browser and our web server is encrypted and thus protected from third-party access. Our website is thus accessible via https:// (instead of via http://), which is also marked accordingly in the browser as a secure connection.
Data on the use of our website (server logs, web analysis)
Every time you visit our website, data and information from your end device (e.g. computer, tablet, smartphone) are automatically recorded on the server of our processor easyname GmbH as part of server logs. This data about the use of our website enables Maison Image to continuously improve the user-friendliness of our website and optimize our services. No cookies are stored on your terminal device for the collection of this data on the use of our website.
As a web analytics service, our processor easyname GmbH provides the software AWStats. AWStats is a free web analysis tool that evaluates and visualizes the logs that the web server of our order processor creates based on user calls to our website. Web statistics show, among other things, how many users have called up our web pages, which sub-pages have been opened most frequently or at what time this has happened more often. The data is not used to personally identify visitors to our website. In contrast to comparable tools, AWStats does not transmit any data to third-party servers. Visitors to our website agree to the use of the AWStats analysis tool by Maison Image.
The following data is collected on the server of our processor by means of a server log from the calling end device of the user and evaluated by means of AWStats (this data is not stored together with other personal data of the user):
- Browser type and browser version
- Operating system (including version)
- Unresolved IP address: In the course of recording your web activities, the IP address assigned to you is anonymized, which means that there is no possibility of assigning a user to an IP address (so-called unresolved IP addresses).
- Origin of the website call (external pages, search engines, social media)
- Entry and exit pages: Page of our website via which the user accessed our website, as well as page of our website via which the user left our website again
- Date and time of access as well as duration of stay
- Transferred file types (images, videos, HTML text, etc.) and data volume
- Downloads from our website
- CRAFT_CSRF_TOKEN: Used by the content management system to protect against cross-site request forgery (CSRF) attacks when a form is used; no personal data involved
If you wish to block or restrict cookies altogether, you can do so by making changes to your Internet browser settings. If cookies are disabled for our website, it may no longer be possible to use all the website's functions to their full extent. The procedures for managing and deleting cookies can be found in the help function integrated in the respective browser.
For the purposes of handling e-mails (hosting of e-mail mailboxes, e-mail addresses, etc.), we use the services of the Austrian processor easyname GmbH (Canettistraße 5/10, 1100 Vienna, Austria). Based on Art. 28 of the DSGVO, Maison Image has concluded a contract processing agreement with easyname GmbH. An order processing contract regulates which data is processed for which purpose, on which legal basis this is done, and how the protection of the data is ensured by the processor, especially also in technical terms.
When you contact Maison Image by e-mail, we collect and process your e-mail address and the request you have communicated and, if applicable, any additional data you provide or which you make available to us by uploading or attaching documents. The purpose of the data processing is to respond to your contact request. The data processing is based on Maison Image's legitimate interest in communicating with existing and potential customers as well as business partners.
With your consent, you can subscribe to our newsletter, the "Maison Image Journal", with which we inform you about interesting news from our house. For this purpose, we exclusively process the e-mail address you have provided. We base the processing and analysis of your data on the legitimate interests of Maison Image.
For the purposes of creating and sending our newsletter, we use the free services of the processor Sendinblue GmbH (Köpenicker Straße 126, 10179 Berlin, Germany). On the basis of Art. 28 of the DSGVO, Maison Image has concluded an order processing agreement with Sendinblue GmbH. An order processing contract regulates which data is processed for which purpose, on which legal basis this is done, and how the protection of the data is ensured by the order processor, especially in technical terms.
Your registration to receive our newsletter "Maison Image Journal" takes place via the website of our processor after you have clicked on the corresponding registration link on our website.
On the registration page for our newsletter "Maison Image Journal", the service reCAPTCHA of the company Google Inc. is used. The query is used to distinguish whether the entry is made by a human or abusively by automated, machine processing by a so-called spambot.
To check whether the applicant is a human, the query includes the sending of the IP address and possibly other data required by Google for the service reCAPTCHA to Google. For this purpose, your input is transmitted to Google and used there. However, your IP address will be shortened beforehand by Google within Member States of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of this service. The IP address transmitted by your browser as part of reCAPTCHA will not be merged with other data from Google. The deviating data protection regulations of Google apply to this data.
For the smooth use of reCAPTCHA, Google sets necessary site cookies on the server of our order processor Sendinblue GmbH, which use a unique identifier for tracking purposes.
Analysis and processing of newsletter data, revocation
An analysis of the newsletter is carried out at our processor Sendinblue by processing the opening of the newsletter (yes/no) as well as information about the technical deliverability (e.g. undeliverability due to an incorrect e-mail address). This data is generated by the system and hosted exclusively and explicitly on servers in Germany. The remaining hosting servers on which Sendinblue processes and stores databases are located exclusively within the European Union.
The processing of your e-mail address provided for newsletter receipt is based on your given consent pursuant to Section 107 of the Telecommunications Act and Art 6 para 1 lit a DSGVO. In principle, the data will remain permanently stored on Sendinblue's servers. Deletion will only take place after a request from the user. For this, you have the right to revoke your consent to receive the newsletter at any time free of charge. To declare your revocation, please click on the unsubscribe link in the respective newsletter or contact Maison Image at email@example.com. Your unsubscription from the newsletter will automatically be noted in the newsletter database of our processor. This note has the effect that you will no longer receive any further newsletters from Maison Image from the time of your unsubscription.
5. DATA RECIPIENTS
Your data will only be passed on by us if there is a valid legal basis for the transfer. In any case, we will only disclose your data to the extent required for the respective purpose, required by the respective legal provision, covered by any legitimate interest or, in the case of consent, specified by you.
Possible recipients of data in case of need are in particular: tax advisors and auditors, legal representatives, financial authorities, banks, insurance companies, courts and authorities, service and IT companies, internal accounting.
6. DURATION OF DATA STORAGE
In principle, your data will only be used for as long as is necessary for the purpose for which it was collected. If a contractual relationship exists between you and Maison Image, Maison Image will retain your data exclusively for the duration or fulfillment of the contractual relationship.
In addition, we are obliged to retain data beyond the contractual relationship, as required by tax law, for example.
Furthermore, we may retain your data as long as legal claims can be asserted in connection with your contract. In the event of pending official or judicial proceedings, your data will be retained in any case until the end of the respective proceedings.
7. TRANSFER OF DATA TO A THIRD COUNTRY
Third countries are countries outside the European Economic Area. Maison Image itself only transfers or processes data in EU countries. As the only processor contracted by Maison Image, Sendinblue GmbH uses the services of a company located in a third country, where the data processing also takes place. This exclusively concerns the use of Google reCAPTCHA to increase security in the context of the registration for our newsletter "Maison Image Journal". Within the scope of the registration to our newsletter including the reCAPTCHA function, you agree to the processing of the necessary data by Google in the USA.
8. YOUR RIGHTS
As we process your data in our legitimate interests and also for direct marketing purposes, you generally have the right to object to such processing if you have grounds for objecting to such processing.
You are generally entitled to the rights of information, correction, deletion, restriction, data portability, objection, and revocation. To do so, please contact us, for example, by e-mail at firstname.lastname@example.org. In the event of a revocation, the lawfulness of the data processing up to the time of the revocation will not be affected.
If you believe that the processing of your data violates data protection law or your data protection rights have otherwise been violated in any way, you can complain to the supervisory authority. In Austria, the data protection authority is responsible; contact information can be found on their www.data-protection-authority.gv.at/siteinfo/contact.html.