If you contact us using the form on the website or by e-mail, the data you provide will be stored by us for six months in order to process the request and in the event of follow-up questions. We do not pass on this data without your consent. If you fill out the contact form, HEROLD Business Data GmbH, as a processor, processes the data on the basis of the general terms and conditions (in particular the regulations on order data processing contained therein). HEROLD Business Data GmbH uses a sub-processor (SurveyMonkey Europe UC, 2 Shelbourne Buildings, 2nd Floore, Shelbourne Road, Ballsbridge, Dublin 4, Ireland) who has access to the data contained in the contact form and who stores the data in the USA. Every provision of data to the sub-processor is based on an adequacy decision by the European Commission (self-certification Privacy Shield).
In addition, data is collected and used for analysis purposes. This data processing is not personal (see information on cookies below).
For the purpose of simplifying the shopping process and for later contract processing – if this website offers a web shop – the following data is collected: title, name, address, telephone number, email address, company name, VAT number, order date, order number, payment method, shipping method , Product scope, cost. Session cookies can also be used to make the shopping process easier. The data processed in the session cookie do not contain any personal references.
The data you provide are required to fulfill the contract or to carry out pre-contractual measures. Without this data, we cannot conclude the contract with you. There is no data transfer to third parties, with the exception of the transfer of the credit card data to the processing bank / payment service provider for the purpose of debiting the purchase price, to the transport company / shipping company commissioned by us to deliver the goods and to our tax advisor to meet our tax obligations.
After canceling the shopping process, the data entered by the user will be stored for at least four weeks and then deleted. In the event of a contract being concluded, all data from the contractual relationship will be stored for the duration of the contractual relationship and beyond, as long as legal claims can be derived from it, and then deleted, unless there are additional retention obligations (e.g. tax law).
When registering, the user’s email address and a password are saved. If a purchase is subsequently made, the email address will be linked to the data determined during the purchase process. The data you have provided are required to set up the user account. The data processing takes place for the duration of the existence of the user account. When the user account is deleted, the email address and password as well as the link to the data of the purchase process are deleted.
When you visit this website, log files are also stored which contain the IP address and other data for accessing the website (e.g. date, time, user agent, referrer). The data processing takes place for a limited time (maximum seven days) and only to protect against DDOS attacks or other interventions in the functionality of the website and any underlying database systems.
Information on cookies
This website uses so-called cookies. These are small text files that are stored on your device with the help of the browser. They do no harm.
So-called session cookies are used on this page. These are generated when the website is accessed and automatically deleted. They are used to recognize you if you visit the same website again within a short period of time in order to take into account settings that have already been made. No personal data is saved or processed.
The purpose of cookies is to make the website offer user-friendly. Some cookies remain stored on your device until you delete them. They enable the website operator to recognize your browser the next time you visit. If you do not want this, you can set up your browser so that it informs you about the setting of cookies and you only allow this in individual cases. However, if cookies are deactivated, the functionality of the website may be restricted.
Web analysis service Google (Google Analytics)
This website uses functions of the web analysis service Google Analytics. The provider is Google Inc., 1600 Amphitheater Parkway Mountain View, CA 94043, USA. We use the “Activation of IP anonymization” function on this website. As a result, your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before processing / storage. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity, to measure the campaign performance of online advertising for analysis and optimization purposes.
The processed data includes, in particular, online identifiers (including cookie identifiers), Internet protocol addresses, device identifiers, location data, identifiers assigned by the customer and user data (in particular the time and duration of access, selection of certain offers, etc.). You can find more information on the handling of user data by Google Analytics in Google’s data protection declaration, available at
You can prevent Google from collecting the data generated by the cookie and relating to your use of the website and from processing this data by downloading and installing the browser plug-in available under the following link: https://tools.google.com/dlpage/gaoptout?hl=de
Click here to deactivate Google Analytics for this website on the browser you are currently using.
When using Google Analytics, the relationship with the web analysis provider is based on order data processing. The transmission of data to the processor is based on an adequacy decision by the European Commission (self-certification Privacy Shield). The data is deleted regularly (currently every 26 months).
Use of Google Adwords Conversion Tracking
When using Google Adwords conversion tracking, the relationship with the web analysis provider is based on order data processing. The transmission of data to the processor is based on an adequacy decision by the European Commission (self-certification Privacy Shield). Google is also obliged to delete the data regularly (currently every 39 months).
If Facebook social plugins are used on this website, they are operated by Facebook Inc. (1 Hacker Way, Menlo Park, California 94025, USA). The integration can be recognized by the Facebook logo or the terms “Like”, “Like”, “Share” in Facebook’s colors (blue and white). Information on all Facebook plugins can be found in the following link: https://developers.facebook.com/docs/plugins/
The plugins are only activated when you click on the corresponding buttons. If these are grayed out, the plugins are inactive. You have the option of activating the plugins every time you visit.
The plugins create a direct connection between your browser and the Facebook servers. This only takes place after the plugin has been activated. The website operator has no influence whatsoever on the nature and scope of the data that the plugin transmits to the Facebook Inc. server. Information can be found here:
The plug-in informs Facebook Inc. that you as a user have visited this website. There is a possibility that your IP address will be saved. If you are logged into your Facebook account while visiting this website, the information mentioned will be linked to it.
Legal basis for data processing:
On the website, data is processed exclusively on the basis of the statutory provisions (GDPR, TKG 2003).
The data processing (web shop, product reviews, booking tool and user account) takes place on the basis of Art 6 Paragraph 1 lit.b) (purposes of contract fulfillment) GDPR.
If analysis tools are used, the data will be used on the basis of Art 6 Para. 1 lit f) (legitimate interest) GDPR. The legitimate interest in the use of data is improving the website and measuring the success of online advertising.
The use of IT data security measures is also based on Art 6 Paragraph 1 lit f) (legitimate interest) GDPR. The legitimate interest in the use of data is to secure one’s own IT systems.
Social media plugins are only used with consent. The legal basis is therefore Art. 6 Para. 1 lit a) GDPR. The consent must be given each time the website is accessed.
In principle, you have the right to information, correction, deletion, restriction of processing, data portability, revocation and objection. If you believe that the processing of your data violates data protection law or your data protection claims have been violated in any other way, you can complain to the supervisory authority. In Austria this is the data protection authority.