Privacy Policy

We process your data exclusively on the basis of the statutory provisions (General Data Protection Regulation No. 2016/679 – hereinafter "GDPR" – and the national data protection regulations in their currently applicable version – hereinafter "DSG").

Right to make changes: We must reserve the right to adapt this privacy policy if necessary, for example to reflect legal developments in the field of data protection. The adapted/amended data protection provisions will then apply to the future use of our website and data processing. We therefore recommend that you review them from time to time.

I. Data protection: general information and rights

1. Controller

The controller within the meaning of Art. 4 (7) GDPR is Julia Zingerle „JZ Webservices“, Haserbichl 12/24, 6200 Jenbach, Austria (also referred to as "we" or "us" in this privacy policy), as also stated in the imprint of the website. There you will also find all the information required to contact us and to assert your rights (section 6).

2. Personal data

We only process the personal data that you provide to us (by visiting our website, contacting us by e-mail or contact form, placing an order in our online shop or creating a customer account) as listed below; not all of the listed data types are affected or have to be provided in every case. We do not process special categories of personal data within the meaning of Art. 9 GDPR.

Depending on the type and scope of the contact or use of our website, the following personal data may be affected:

Visiting our website: (i) log files such as IP address, date and time of access, information about the operating system and internet browser used, the website from which the access is made ("referrer URL") etc., (ii) cookies, (iii) location-based information and information about the end device used (depending on the corresponding settings of the end device).

Contact by e-mail: first name, last name, e-mail address, address.

Contact request via contact form: first name, last name, e-mail address.

Orders in our online shop: first name, last name, company (optional), billing and delivery address, e-mail address, phone number (optional), ordered products, order and invoice data, payment method and payment status. Card details are entered directly with our payment provider and are not stored by us (see section II.5).

Customer account: name, e-mail address, password (stored encrypted), address data and your order history.

3. Processing of personal data

Your personal data is processed primarily for the performance of a contract or to carry out pre-contractual measures (Art. 6 (1) (b) GDPR), as we cannot prepare, conclude or perform a contract with you without this data. Furthermore, processing is carried out to safeguard our legitimate interests or the legitimate interests of third parties (Art. 6 (1) (f) GDPR), in particular for the purposes of the operational security of the website and the error-free and optimised provision of services, receivables management, direct marketing in analogue and digital form, advertising to existing customers, statistical evaluation and the improvement of our range of services and their quality (for the right to object, see section 6).

We will only process your personal data to the extent covered by the GDPR. As a rule, your personal data is not transferred to third parties. If a transfer to third parties should be necessary – for example to fulfil a contract – this transfer will take place in accordance with the provisions of the GDPR. In this case, please also note the privacy policies of these third parties, as they may apply.

An exception to this is use for statistical and similar purposes; however, no personal data is transferred for this, only anonymised data that does not allow the identification of a natural person and cannot be assigned to a specific natural person (see also section II.3).

4. Data security

We take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy. Your personal data is protected by organisational and technical measures, such as protection against unauthorised access and technical data security precautions.

Please note, however, that despite these efforts it cannot be completely ruled out that data you disclose via the internet / by e-mail may nevertheless be viewed and potentially used by other persons. We therefore cannot accept any liability or responsibility for errors in data transmission or unauthorised access by third parties (e.g. hacker attacks, spyware, malware etc.).

5. Retention of personal data

We only retain your personal data for as long as is necessary to fulfil contractual or legal obligations (corresponding retention obligations may arise in particular from tax law regulations – a legal basis for the processing and retention of data in this context also results from Art. 6 (1) (c) GDPR). Once this necessity no longer exists, the data will be deleted. Notwithstanding this, data will also be deleted on the basis of a request for erasure made by you (see section 6).

6. Information, erasure, right to lodge a complaint

• You have the right to obtain information free of charge at any time about the origin, purpose of data processing and, where applicable, recipients of your stored personal data (Art. 15 GDPR).
• You have the right to request the rectification, blocking or erasure of this data if it is incorrect or the basis for data processing no longer applies (Art. 16, 17, 18, 20 GDPR).
• You have the right to object to the processing of personal data on the basis of Art. 6 (1) (f) GDPR ("safeguarding legitimate interests") (Art. 21 GDPR). Please note, however, that any objection has no effect on the lawfulness of the processing of personal data on the basis of other legal grounds under Art. 6 (1) GDPR.
• Furthermore, you have the right to lodge a complaint with the competent supervisory authority (Art. 77 GDPR) if you believe that the processing of personal data violates applicable data protection regulations or that your rights have been violated in any other way.

Please send all enquiries or claims to our e-mail address: info@jzwebservices.at

II. Hosting, cookies and services used on our website

1. Hosting

This website, including the online shop, the contact form and the customer accounts, is operated with the business software Odoo and hosted by Odoo S.A., Chaussée de Namur 40, 1367 Grand-Rosière, Belgium, on servers located in the European Union (Belgium). When you visit our website, the hosting provider processes the data listed in section I.2 (in particular log files and IP addresses) on our behalf in order to deliver the website. We have concluded a data processing agreement with Odoo S.A. within the meaning of Art. 28 GDPR. The legal basis is our legitimate interest in a secure and reliable provision of our website (Art. 6 (1) (f) GDPR) and, where you place an order or create an account, the performance of a contract (Art. 6 (1) (b) GDPR).

2. Cookies

Our website only uses cookies that are technically necessary for its operation. Cookies are small text files that are stored by your browser. They do not cause any damage to your computer and do not contain viruses.

• session_id: keeps your session (e.g. shopping cart, login, form submission) during your visit and for a limited time afterwards.
• frontend_lang: stores the language in which the website is displayed.
• odoo_utm_campaign, odoo_utm_source, odoo_utm_medium: only set if you reach our website via a tracked link (e.g. from a newsletter); they record from which campaign you came.

We do not use advertising or third-party tracking cookies. These cookies are stored on the basis of Art. 6 (1) (f) GDPR and § 165 (3) TKG 2021, as they are necessary for providing the services you have requested. You can delete cookies or block them via your browser settings at any time; however, some functions of the website (e.g. the shopping cart or login) may then no longer work.

3. Website statistics (Odoo)

We use the visitor statistics integrated in Odoo to see which pages of our website are visited. For this purpose, the pages visited, the time of the visit, the language and the country derived from the IP address are recorded on our own Odoo system. This data is not passed on to third parties and is not used to create advertising profiles. If you contact us via the contact form, place an order or log in, this information may be linked to your contact data. The legal basis is our legitimate interest in improving our website (Art. 6 (1) (f) GDPR).

4. Contact form

If you send us an enquiry via the contact form, the data you enter (name, e-mail address and optionally phone number, company name, subject, message and attachments) is stored in our Odoo system in order to process your enquiry and for possible follow-up questions. The legal basis is the implementation of pre-contractual measures (Art. 6 (1) (b) GDPR) or our legitimate interest in answering your enquiry (Art. 6 (1) (f) GDPR).

5. Online shop and payment

The data you provide when placing an order is processed to execute the purchase contract, i.e. for order processing, delivery, invoicing and payment (Art. 6 (1) (b) GDPR), as well as to fulfil our statutory retention obligations under tax and commercial law (Art. 6 (1) (c) GDPR). Where necessary for delivery, we pass on your address data to the commissioned shipping company.

The following payment methods are available:

• Stripe: card and online payments are processed by Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland. Your payment data (e.g. card details) is entered directly with Stripe and transmitted to Stripe together with your name, e-mail address, billing address and the order amount; we do not receive or store your full card details. Stripe may also transfer data to Stripe, Inc. in the USA; this is based on the EU-U.S. Data Privacy Framework and the EU standard contractual clauses. Further information can be found in Stripe's privacy policy: https://stripe.com/privacy.
• Bank transfer: if you pay by bank transfer, your payment is processed via our bank; we receive the payment information required to allocate your payment.

6. Customer account

You can create a customer account in order to view your orders, invoices and address data. The data you provide is stored until you delete the account or ask us to delete it, unless statutory retention obligations prevent deletion. The legal basis is the performance of a contract and your request (Art. 6 (1) (b) GDPR).

7. Links to social media

Our website contains simple links to our profiles on X (Twitter), Instagram and LinkedIn. These are not plugins: no data is transmitted to these platforms when you visit our website. Only when you click on a link will you be redirected to the respective platform, whose own privacy policy then applies.

8. Fonts

The fonts used on this website are hosted locally on our own server. No connection to servers of Google or other font providers is established when you visit our website.

9. Links to other websites

This website may contain links to other websites (for example to our project www.aipostgen.com) that are not controlled by us. We do not adopt the content of such third-party offers as our own and assume no responsibility in connection with them. Accessing and using third-party offers is solely at the responsibility and risk of the website user; the privacy policy of the respective provider applies there.