Data protection

This website and online shop are operated by Picturized eU (FN 539611x), hereinafter referred to as "we," "us," and "Picturized," located at Masurewaldstrasse 1, 3033 Altlengbach, Austria. In this privacy policy, we, as the data controller pursuant to Article 4(7) of the GDPR, describe which data we collect when you visit our website or online shop and for what purpose we process it. We also inform you about the rights and safeguards we offer in connection with data processing. All relevant contact details can be found in section 9 of this privacy policy.

Since the protection of your personal data is of particular importance to us, we strictly adhere to the legal requirements of the DSG and the GDPR when collecting and processing your personal data.

Below, we provide detailed information about the scope and purpose of our data processing, as well as your rights as a data subject. Please read our privacy policy carefully before continuing to use our website and, if necessary, giving your consent to data processing.

A. Processing of personal data on our website

1. Personal data

The use of our website is generally possible without providing personal data. However, different regulations may apply to the use of individual services, which we will inform you about separately.

Apart from the cookies described in detail below, we generally only collect and store data that you provide to us yourself by entering it into our input forms or by actively interacting with our website in other ways.

Personal data is any information relating to an identified or identifiable natural person. This includes, for example, your name, address, telephone number, or date of birth, but also your IP address or geolocation data that allows conclusions to be drawn about you.

2. Use of cookies

a. If you use our website solely for informational purposes, i.e., if you do not register for a service or otherwise provide us with information – for example, via a contact form – we only collect the personal data that your browser transmits to our server. Therefore, if you wish to visit our website, we collect the following data, which is technically necessary for us to display the website to you and to ensure its stability and security in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR:

IP address
Date and time of the request
Time zone difference to Greenwich Mean Time (GMT)
Content of the requirement
Access status / HTTP status code
Amount of data transferred in each case
Website from which the request originates
Browser used
Operating system and its interface
Language and version of the browser software

b. In addition to the data mentioned above, first- and third-party cookies are stored on your computer when you use our website; these are small text files that are stored on your hard drive by the browser you are using. The entity that sets a cookie (in this case, us and the third parties listed below) receives certain information as a result. We need these cookies, on the one hand, to recognize you as a user of the website and, on the other hand, to be able to track the use of our services. Finally, we use cookies for marketing purposes to analyze your usage behavior and, if necessary, to send you targeted advertising.

Basically, one can distinguish between first-party cookies, third-party cookies, and third-party requests.

First Party Cookies

First-party cookies are stored in your browser by us or our website itself to provide you with the best possible user experience. These are primarily functional cookies, such as shopping cart cookies. We use the following first-party cookies on our website:

- tarteaucitron (storage duration 1 year)
This cookie allows us to track whether you have given your consent to cookie storage for the services Google Analytics, Google Maps and Facebook when you enter our website.

- session_id (storage duration during the session)
- visitor_uuid (storage duration 1 year)
This cookie allows us to track your movements and selections on the page. This is necessary to display the shopping cart correctly.

- tz (storage duration during the session)
This cookie allows us to recognize which time zone you are in and thus, among other things, to ensure correct processing steps for payment services.

- frontend_lang (storage duration during the session)
We use this cookie to record your language preference for displaying our website.

Third-party cookies

Third-party cookies are stored in your browser by a third-party provider. These are usually tracking or marketing tools that, on the one hand, analyze your user behavior and, on the other hand, allow the third-party provider to recognize you on other websites you visit. Retargeting marketing, for example, is fundamentally based on the function of such cookies.

To fully inform you about the cookies we use, we have designed a cookie banner, in accordance with the ruling of the European Court of Justice (ECJ) of October 1, 2019, C-673/17 (Planet 49), and other relevant decisions. This banner is displayed when you first visit our website. It shows all the cookies we use, including their function, storage duration, and origin. We only store cookies if you consent to their use; an exception may be made for technically essential cookies, without which our website could not be displayed correctly.

You can change your browser settings at any time to, for example, reject third-party cookies or all cookies. However, please note that in this case you may no longer be able to use all the features of our website.

Third Party Requests

Third-party requests are all requests that you, as a website user, make to third parties via our site – for example, when you interact with social network plugins or use a payment provider's service. While no cookies are stored in your browser in this case, it cannot be ruled out that personal data is sent to this third-party provider through the interaction. For this reason, we also provide you with detailed information about the tools and applications we use in our privacy policy.

3. Collection and processing of personal data

We only process personal data beyond the information stored by cookies if you voluntarily provide it to us, for example, when you register with us, enter into a contractual relationship with us, or otherwise contact us. This data consists exclusively of contact details and information about the matters you raise with us.

We use the personal data you provide only to the extent necessary for fulfilling the respective purpose of the processing (e.g., registering an account, processing an order, sending information and advertising, answering a question, enabling access to certain information) and where this is legally permissible (in particular according to Art. 6 EU GDPR) (e.g., sending advertising and information material to existing customers).

The purpose of processing your data is to operate our website and to provide you with targeted, company-specific information, including the presentation of our goods and services (marketing). Any further use of your data will only occur if you have given your explicit consent beforehand. You can withdraw your consent at any time for the future, as explained in detail below.

Each time you access our website, we collect the technical information about your computer described in section 1. Your computer's IP address is stored for only up to 7 days after you use our online service and is then deleted or anonymized by truncation. We use all of this data for the operation of our website, in particular to identify and correct errors, to determine the load on the web server, and to make adjustments or improvements. These purposes also constitute our legitimate interest in data processing pursuant to Article 6(1)(f) GDPR.

4. Storage duration

Unless we have already specifically informed you about the duration of the storage of personal data, the following general principles apply to data processing:

Data that you have provided to us solely for customer service, marketing, and informational purposes is generally stored for up to three years after our last contact. However, if you wish, we will delete your data before this period expires, provided there are no legal obstacles to doing so.

In the event of contract negotiations or conclusion, we process your personal data after complete contract fulfillment until the expiry of the warranty, guarantee, limitation and statutory retention periods applicable to us, and beyond that until the conclusion of any legal disputes in which the data is required as evidence.

5. Tools and applications used

a. We use Google Analytics, a web analytics service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. This service uses cookies, the functionality of which has already been explained in detail. The information generated by these cookies about your use of this website is generally transmitted to and stored on a Google server.

On our behalf, Google uses this information to evaluate your use of our website, to compile reports on website activity, and to provide other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

You can prevent the storage of cookies required by Google Analytics by rejecting cookies when entering our website or by adjusting your browser settings accordingly. However, this may prevent you from fully utilizing all the functions of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) and its transmission and processing by Google by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de .

Should you wish to obtain further information on the type, scope and purpose of the data collected by Google, we recommend that you read their privacy policy: https://support.google.com/analytics/answer/6004245?hl=de .

Google also processes your data in the USA. Before you consent to the storage of cookies through the use of Google Analytics, please read the relevant information in our privacy policy.

b. Our website also contains links to other websites; these are provided for informational purposes only. These websites are not under our control and are therefore not subject to the provisions of this privacy policy. However, if you click on a link, the operator of that website may collect data about you and process it in accordance with their own privacy policy, which may differ from ours. Please always check the privacy policies of the websites we link to for the most up-to-date information.

c. We use Klarna as our payment service provider for our webshop, which is provided by Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden.

When you pay via this payment service provider on our website, a connection is established to the respective Klarna server and the payment data is transmitted.

Further information about Klarna and the data protection measures taken by Klarna can be found at https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_at/privacy .

d. Our website also offers the option to interact with various social networks via plugins. These are:

Facebook and Instagram are operated by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland

When you click on a plugin from one of these social networks, it is activated and a connection to the respective network's server is established as described above. We have no control over the scope and content of the data transmitted to the respective operator of this social network when you click on the plugin.

By activating these plugins, you consent to the use of your data collected through these plugins, potentially also in the USA. Before giving your consent to the storage of cookies through the use of Google Analytics, please read the relevant information in our privacy policy.

We have no influence on the scope and content of the data that is transmitted to the respective operator of this social network by clicking on the plugin, or which may subsequently be subject to access by US authorities.

Should you wish to learn more about the type, scope and purpose of the data collected by the operators of these social networks, we recommend that you read the privacy policy of the respective social network.

6. Safety

We implement numerous technical and organizational security measures to protect your data against manipulation, loss, destruction, and unauthorized access. Our security measures are continuously improved in line with technological developments on the internet. Should you require further information regarding the nature and scope of the technical and organizational measures we have implemented, we are happy to answer any written inquiries you may have.

7. Your rights

According to the General Data Protection Regulation (GDPR) and the Data Protection Act, you as a data subject of our data processing have the following rights and remedies:

Right of access (Art. 15 GDPR)

As a data subject of the data processing described above and elsewhere, you have the right to request information about whether, and if so, which personal data concerning you is being processed. For your own protection – to ensure that no unauthorized person receives information about your data – we will verify your identity in an appropriate manner before disclosing any information.

Right to rectification (Art. 16) and erasure (Art. 17 GDPR)

You have the right to request the immediate rectification of inaccurate personal data concerning you or – taking into account the purposes of the data processing – the completion of incomplete personal data and the erasure of your data, provided that the criteria of Article 17 of the EU GDPR are met.

Right to restriction of processing (Art. 18 GDPR)

Under the legal conditions, you have the right to restrict the processing of all collected personal data. From the time of your restriction request, this data will only be processed with your individual consent or for the establishment, exercise, or defense of legal claims.

Right to data portability (Art. 20 GDPR)

You can request the unhindered and unrestricted transfer of personal data that you have provided to us to you or a third party.

Right to object (Art. 21 GDPR)

You may object at any time, on grounds relating to your particular situation, to the processing of your personal data which is necessary for the purposes of our legitimate interests or those of a third party. Following your objection, your data will no longer be processed unless there are compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the purpose of establishing, exercising or defending legal claims. You may object at any time to the processing of your data for direct marketing purposes with effect for the future.

Revocation of consent

If you have separately given your consent to the processing of your data, you can revoke it at any time. Such a revocation affects the lawfulness of processing your personal data after you have communicated it to us.

If you take action to enforce your rights under the GDPR listed above, Picturized must respond to the requested action or comply with the request without undue delay, but no later than one month after receiving your request.

We will respond to all reasonable requests within the legal framework free of charge and as promptly as possible.

The data protection authority is responsible for applications concerning violations of the right to information, the right to confidentiality, the right to rectification, or the right to erasure. Their contact details are:

Austrian Data Protection Authority
Barichgasse 40-42
1030 Vienna
dsb@dsb.gv.at

9. Contact information / contact person

a. Contact information of the responsible party

Picturized eU
Masurewaldstrasse 1
3033 Altlengbach, Austria

FN 539611x
Info@heldenshop.at

b. Contact information of the contact person for data protection matters

Markus Kasbauer
A-3033 Altlegbach
Masurewaldstraße 1
markus.kasbauer@picturized.at

As of November 2023