Datenschutz | Beyondfluidart

Data Privacy Policy

Contents

1. Access data and hosting

• Hosting

2. Data processing for contract performance and for contacting me

• 2.1 Data processing for contract performance

• 2.2 Customer account

• 2.3 Contacting me

• 2.4 Withdrawal via the online form

3. Data processing for shipping

• Disclosure of data to shipping service providers for shipping notifications

4. Data processing for payment handling

• 4.1 Data processing for transaction handling

• 4.2 Data processing for fraud prevention and optimization of my payment processes

5. Email advertising

• 5.1 Email newsletter with registration and newsletter tracking

• 5.2 Newsletter dispatch

6. Cookies and other technologies

• 6.1 General information

• 6.2 Use of the Usercentrics Consent Management Platform to manage consents

7. Use of cookies and other technologies

• Use of Google services

• Use of Wix Analytics for web analysis

8. Social media

• My online presence on Facebook (by Meta), Instagram (by Meta) and LinkedIn

9. Contact options and your rights

• 9.1 Your rights

• 9.2 Contact options

The controller responsible for data processing is:

Melanie Deike

Seitenstettengasse 5/37

1010 Vienna

Austria

Email: mel@beyondfluidart.com

Phone: +43 677 64286507

Thank you for your interest in my online shop. Protecting your privacy is very important to me.

Below, I inform you in detail about how your data is handled. Your data is processed on the

basis of the GDPR and in accordance with Section 165(3) of the Austrian Telecommunications

Act (TKG).

1. Access data and hosting

You can visit my website without providing any personal information. Each time a web page is

accessed, the web server automatically stores only a so-called server log file. It contains, for

example, the name of the requested file, your IP address, the date and time of the request, the

volume of data transferred and the requesting provider (access data), and documents the

request. This access data is evaluated solely to ensure the smooth operation of the site and to

improve my offering. This serves to safeguard my legitimate interests, which prevail in the

context of a balancing of interests, in the correct presentation of my offering pursuant to Art.

6(1)(1)(f) GDPR. All access data is processed only for as long as necessary to achieve the

purposes stated above.

Hosting

The services for hosting and displaying the website are provided in part by my service providers

as processors acting on my behalf. Unless explained otherwise in this privacy policy, all access

data and all data collected in the forms provided for this purpose on this website are processed

on their servers. If you have questions about my service providers and the basis of my

cooperation with them, please use the contact option described in this privacy policy.

My service providers are located and/or use servers in the following countries, for which the

European Commission has determined by decision that an adequate level of data protection

exists: Israel, the United Kingdom, the USA.

The adequacy decision for the USA serves as the basis for the third-country transfer insofar as

the respective service provider is certified. Certification is in place.

My service providers are located and/or use servers in these countries: Brazil, Mexico, India,

Ukraine.

No adequacy decision of the European Commission exists for these countries. My cooperation

with them is based on these safeguards: Standard Contractual Clauses of the European

Commission.

2. Data processing for contract performance and for

contacting me

2.1 Data processing for contract performance

For the purpose of contract performance pursuant to Art. 6(1)(1)(b) GDPR (including inquiries

about and handling of any existing warranty and breach-of-performance claims, as well as any

statutory update obligations), I collect personal data when you voluntarily provide it to me as

part of your order. Mandatory fields are marked as such, because in these cases I need the data

in order to perform the contract, and without it I cannot ship the order. Which data is collected

can be seen from the respective input forms.

You can find further information on the processing of your data, in particular on its disclosure to

my service providers for order, payment and shipping handling, in the following sections of this

processing and deleted after the tax and commercial-law retention periods have expired

pursuant to Art. 6(1)(1)(c) GDPR, unless you have expressly consented to further use of your

data pursuant to Art. 6(1)(1)(a) GDPR, or I reserve the right to use the data beyond this in a

manner permitted by law, about which I inform you in this policy.

2.2 Customer account

Where you have given your consent pursuant to Art. 6(1)(1)(a) GDPR by choosing to open a

customer account, I use your data to open the customer account and to store your data for

future orders on my website. You can delete your customer account at any time, either bysending a message to the contact option described in this privacy policy or via a function

provided for this purpose in the customer account. After your customer account is deleted, your

data is erased, unless you have expressly consented to further use of your data pursuant to Art.

6(1)(1)(a) GDPR, or I reserve the right to use the data beyond this in a manner permitted by

law, about which I inform you in this policy.

2.3 Contacting me

As part of customer communication, I collect personal data to process your inquiries pursuant to

Art. 6(1)(1)(b) GDPR when you voluntarily provide it to me while contacting me (e.g. via contact

form or email). Mandatory fields are marked as such, because in these cases I need the data to

process your inquiry. Which data is collected can be seen from the respective input forms. After

your inquiry has been fully processed, your data is deleted, unless you have expressly

consented to further use of your data pursuant to Art. 6(1)(1)(a) GDPR, or I reserve the right to

use the data beyond this in a manner permitted by law, about which I inform you in this policy.

2.4 Withdrawal via the online form

At beyondfluidart.com/vertragwiderrufen I provide you with a function that allows you to withdraw electronically from a purchase contract concluded with me. For the purpose of processing your withdrawal and reversing the contract pursuant to Art. 6 (1) sentence 1 lit. b GDPR, I collect personal data where you provide it to me in this form. Mandatory fields are marked as such, since in these cases I necessarily require the data in order to identify and process your withdrawal. Which data is collected is apparent from the respective input form.

In addition, I automatically record the date and time at which your declaration reaches me, and I confirm its receipt to you without delay by email, stating the content of your declaration and the time of receipt. This confirmation of receipt is sent automatically. Pursuant to Art. 6 (1) sentence 1 lit. c GDPR, this serves to fulfil my legal obligation under § 13a of the Austrian Distance and Off-Premises Contracts Act (FAGG), to which I am subject. No consent is required for this and none is obtained.

Use of this form is voluntary. You may equally declare your withdrawal by email, by post, or by using the model withdrawal form; your withdrawal is effective in any case. If you choose another route, I process only the data that you provide to me in doing so.

Once the contract has been fully reversed, your data will be restricted from further processing and deleted upon expiry of the retention periods under tax and commercial law pursuant to Art. 6 (1) sentence 1 lit. c GDPR, unless you have expressly consented to further use of your data pursuant to Art. 6 (1) sentence 1 lit. a GDPR, or I reserve the right to use the data beyond this in a manner permitted by law and about which I inform you in this declaration.

3. Data processing for shipping

For the performance of the contract pursuant to Art. 6 (1) sentence 1 lit. b GDPR, I pass your data on to the shipping service provider commissioned with the delivery, insofar as this is necessary for the delivery of the goods ordered. If you have any questions about my service providers and the basis on which I work with them, please contact me using the contact option described in this privacy policy.

Transfer of data to the shipping service provider for the purpose of shipping notification

If you have given me your express consent to this during or after placing your order, I will, on the basis of that consent and pursuant to Art. 6 (1) sentence 1 lit. a GDPR, pass your email address on to the selected shipping service provider so that it can contact you prior to delivery in order to announce or arrange the delivery.

This consent may be withdrawn at any time by sending a message to the contact option described in this privacy policy, or directly to the shipping service provider at the contact address given below. Following withdrawal, I will delete the data you provided for this purpose, unless you have expressly consented to further use of your data, or I reserve the right to use the data beyond this in a manner permitted by law and about which I inform you in this declaration. If you have any questions about my service providers and the basis on which I work with them, please contact me using the contact option described in this privacy policy.

Österreichische Post AG
Rochusplatz 1
1030 Vienna
Austria

For deliveries outside Austria, delivery is carried out by partner companies of the Austrian Post in the respective destination country, to which your delivery data is passed on for this purpose.

For deliveries to countries outside the EU and the EEA, I am additionally required to complete a customs declaration containing your recipient details and a description of the contents, which is made available to the customs authorities of the destination country. The transfer of your delivery data to those countries is necessary for the performance of the contract concluded with you pursuant to Art. 49 (1) lit. b GDPR.

4. Data processing for payment handling

When processing payments in my online shop, I work with these partners: technical service

providers, credit institutions, payment service providers.

4.1 Data processing for transaction handling

Depending on the payment method selected, I pass on the data necessary for processing the

payment transaction to my technical service providers, to the commissioned credit institutions

or to the selected payment service provider, insofar as this is necessary to process the

payment. This serves the performance of the contract pursuant to Art. 6(1)(1)(b) GDPR. In some

cases, the payment service providers collect the data required for processing the payment

themselves, e.g. on their own website or through a technical integration in the order process. In

that respect, the privacy policy of the respective payment service provider applies.

I currently offer the following payment methods:

• Wix Payments, provided by Wix.com Ltd., 40 Namal Tel Aviv St., Tel Aviv 6350671, Israel

• PayPal, provided by PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg

Depending on the payment method selected, data may be transferred to third countries outside

the EU/EEA for which the European Commission has determined by decision that an adequate

level of data protection exists. Where data is transferred to third countries outside the EU/EEA

for which the European Commission has not issued an adequacy decision, the cooperation is

based on Standard Contractual Clauses of the European Commission.

If you have questions about my payment processing partners or the basis of my cooperation

with them, please use the contact option stated in this privacy policy.

4.2 Data processing for fraud prevention and optimization of my payment

processes

Where applicable, I pass on further data to the service providers mentioned above, which they

use together with the data necessary for processing the payment for the purpose of fraud

prevention and optimization of my payment processes (e.g. invoicing, handling of disputed

payments, accounting support). Pursuant to Art. 6(1)(1)(f) GDPR, this serves to safeguard my

legitimate interests, which prevail in the context of a balancing of interests, in protection

against fraud and in efficient payment management.

5. Email advertising

5.1 Email newsletter with registration and newsletter tracking

If you subscribe to my newsletter, I use the data required for this purpose, or data you provide

separately, to send you my email newsletter regularly on the basis of your consent pursuant to

Art. 6(1)(1)(a) GDPR.

You can unsubscribe from the newsletter at any time, either by sending a message to the

contact option described below or via a link provided in the newsletter. After you unsubscribe, I

delete your email address from the recipient list, unless you have expressly consented to

further use of your data pursuant to Art. 6(1)(1)(a) GDPR, or I reserve the right to use the data

beyond this in a manner permitted by law, about which I inform you in this policy.

Please note that I evaluate your user behavior when sending the newsletter. For this purpose, I

also analyze how you interact with my newsletter by measuring, storing and evaluating open

rates and click rates, in order to design future newsletter campaigns ("newsletter tracking").

For this evaluation, the emails sent contain one-pixel technologies (e.g. so-called web beacons,

tracking pixels) that are stored on my website. For the evaluations, I link in particular the

following "newsletter data":

• the page from which the page was requested (so-called referrer URL),

• the date and time of the request,

• a description of the type of web browser used,

• the IP address of the requesting computer,

• the email address,

• the date and time of registration and confirmation

and the one-pixel technologies with your email address or your IP address and, where

applicable, an individual ID. Links contained in the newsletter may also include this ID.

If you do not want newsletter tracking, you can unsubscribe from the newsletter at any time, as

described above.

The information is stored for as long as you are subscribed to the newsletter.

5.2 Newsletter dispatch

The newsletter and the newsletter tracking described above may also be carried out by my

service providers as processors acting on my behalf. If you have questions about my service

providers and the basis of my cooperation with them, please use the contact option described

in this privacy policy.

My service providers are located and/or use servers in the following countries, for which the

European Commission has determined by decision that an adequate level of data protection

exists: USA.

The adequacy decision for the USA serves as the basis for the third-country transfer insofar as

the respective service provider is certified. Certification is in place.

6. Cookies and other technologies

6.1 General information

To make visiting my website attractive and to enable the use of certain functions, I use

technologies on various pages, including so-called cookies.

Cookies are small text files that are automatically stored on your device. Some of the cookies I

use are deleted again at the end of the browser session, i.e. when you close your browser

(so-called session cookies). Other cookies remain on your device and enable me to recognize

your browser on your next visit (persistent cookies). You can find the storage duration in theoverview in the cookie settings of your web browser.

Privacy protection on end devices

When you use my online offering, I use technologies that are strictly necessary in order to

provide the telemedia service you have expressly requested. Storing information on your

device, or accessing information already stored on your device, does not require consent in this

respect.

For functions that are not strictly necessary, storing information on your device or accessing

information already stored on your device requires your consent. Please note that if you do not

give consent, parts of the website may not be fully usable. Any consent you have given remains

valid until you adjust or reset the relevant settings on your device.

Possible downstream data processing through cookies and other technologies

I use technologies that are mandatory for the use of certain functions of my website (e.g. the

shopping cart function). These technologies collect and process your IP address, time of visit,

device and browser information, and information about your use of my website (e.g. information

about the contents of your shopping cart). This serves my legitimate interests, which prevail in

the context of a balancing of interests, in an optimized presentation of my offering pursuant to

Art. 6(1)(1)(f) GDPR and takes place in accordance with the statutory provisions of Section

165(3) TKG (Austria).

I also use technologies to fulfill the legal obligations to which I am subject (e.g. to be able to

prove consent to the processing of your personal data), as well as for web analytics and online

marketing. You can find further information on this, including the respective legal basis for data

processing, in the following sections of this privacy policy.

Where applicable, I also use technologies that are not individually listed in this privacy policy.

You can find more detailed information on these technologies, including the respective legal

basis for data processing, on the Usercentrics platform. You can access it by clicking the

fingerprint button in the lower right or left corner of the page.

What types of cookies are used?

• Necessary cookies: These cookies are necessary to enable the operation of my website.

They include, for example, cookies that allow you to log in to the customer area or add items

to your shopping cart.

• Analytical / performance cookies: These cookies make it possible to collect anonymized

data about the usage behavior of my visitors. I evaluate this data, for example, to improve

the functionality of the website.

• Functional cookies: These cookies are used for certain functionalities of my website, e.g.

to suggest a better navigation flow on my website or to show you personalized and relevant

information.

• Marketing cookies: These cookies record your visit to my website, the pages you have

visited and the links you have followed. I use this information to tailor my website and the

advertising shown to you to your interests.

Cookie settings

You can find the cookie settings for your browser at the following links: Microsoft Edge™ /

Safari™ / Chrome™ / Firefox™ / Opera™

Where you have consented to the use of the technologies pursuant to Art. 6(1)(1)(a) GDPR, you

can withdraw your consent at any time by sending a message to the contact option described in

the privacy policy. Alternatively, you can click the fingerprint button in the lower right or left

corner of the page. If you do not accept cookies, the functionality of my website may be limited.

6.2 Use of the Usercentrics Consent Management Platform to manage consents

On my website, I use the Usercentrics Consent Management Platform ("Usercentrics") to inform

you about the cookies and other technologies I use on my website, and to obtain, manage and

document any legally required consent to the processing of your personal data through these

technologies. This is necessary pursuant to Art. 6(1)(1)(c) GDPR to fulfill my legal obligation

under Art. 7(1) GDPR to be able to prove your consent to the processing of your personal data.

Usercentrics is an offering of Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich, Germany,

which processes your data on my behalf. When you visit my website, the Usercentrics web

server stores a so-called server log file, which also contains your anonymized IP address, the

date and time of the visit, device and browser information, and information about your consent

behavior. Your data is deleted after three years, unless you have expressly consented to further

use of your data pursuant to Art. 6(1)(1)(a) GDPR, or I reserve the right to use the data beyond

this in a manner permitted by law, about which I inform you in this policy.

My service providers are located and/or use servers in the following countries, for which the

European Commission has determined by decision that an adequate level of data protection

exists: USA.

The adequacy decision for the USA serves as the basis for the third-country transfer insofar as

the respective service provider is certified. Certification is in place.

7. Use of cookies and other technologies

On my website, I use the following cookies and other technologies from third-party providers.

Unless stated otherwise for individual technologies, this is done on the basis of your consent

pursuant to Art. 6(1)(1)(a) GDPR. Once the purpose no longer applies and I stop using the

respective technology, the data collected in this context is deleted. You can withdraw your

consent at any time with effect for the future. You can find further information on your

withdrawal options in the section "Cookies and other technologies". Further information,

including the basis of my cooperation with the individual providers, can be found under the

individual technologies. If you have questions about the providers and the basis of my

cooperation with them, please use the contact option described in this privacy policy.

Use of Google services

I use the technologies described below from Google Ireland Ltd., Gordon House, Barrow Street,

Dublin 4, Ireland ("Google"). The information about your use of my website that is automatically

collected by Google technologies is generally transferred to and stored on a server of Google

LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Unless stated otherwise for

individual technologies, data processing takes place on the basis of an agreement between joint

controllers pursuant to Art. 26 GDPR, concluded for the respective technology. Further

information on data processing by Google can be found in Google's privacy notices.

My service providers are located and/or use servers in countries outside the EU and the EEA for

which the European Commission has determined by decision that an adequate level of data

protection exists.

My service providers are located and/or use servers in countries outside the EU and the EEA. No

adequacy decision of the European Commission exists for these countries. My cooperation with

them is based on Standard Contractual Clauses of the European Commission.

Google AnalyticsFor the purpose of website analysis, Google Analytics automatically collects and stores data (IP

address, time of visit, device and browser information, and information about your use of my

website), from which usage profiles are created using pseudonyms. Cookies may be used for

this purpose. If you visit my website from the EU, your IP address is stored on a server located

in the EU to derive location data and is then deleted immediately, before the traffic is forwarded

to other Google servers for processing. Data processing takes place on the basis of a data

processing agreement with Google.

For the purpose of optimized marketing of my website, I have activated the data sharing

settings for "Google products and services". This allows Google to access the data collected and

processed by Google Analytics and subsequently use it to improve Google services. Data is

shared with Google under these data sharing settings on the basis of an additional agreement

between controllers. I have no influence on the subsequent data processing by Google.

Google Tag Manager

Google Tag Manager allows me to manage various codes and services on my website. When

individual tags are implemented, Google may also process personal data (e.g. IP address, online

identifiers (including cookies)). Data processing takes place on the basis of a data processing

agreement with Google.

The use of Google Tag Manager makes it possible to integrate various services/technologies. If

you do not want individual tracking services to be used and have therefore deactivated them,

the deactivation remains in place for all affected tracking tags integrated via Google Tag

Manager.

Use of Wix Analytics for web analysis

For the purpose of website analysis, technologies of Wix.com Ltd., 40 Namal Tel Aviv St., Tel

Aviv 6350671, Israel ("Wix") automatically collect and store data (IP address, time of visit,

device and browser information, location information, and information about your use of my

website), from which usage profiles are created using pseudonyms. Cookies may be used for

this purpose. The pseudonymized usage profiles are not merged with personal data about the

bearer of the pseudonym without a separately granted, express consent. Wix acts on my

behalf.

My service providers are located and/or use servers in the following countries, for which the

European Commission has determined by decision that an adequate level of data protection

exists: Israel, the United Kingdom, the USA.

The adequacy decision for the USA serves as the basis for the third-country transfer insofar as

the respective service provider is certified. Certification is in place.

My service providers are located and/or use servers in these countries: Brazil, Mexico, India,

Ukraine.

No adequacy decision of the European Commission exists for these countries. My cooperation

with them is based on these safeguards: Standard Contractual Clauses of the European

Commission.

8. Social media

My online presence on Facebook (by Meta), Instagram (by Meta) and LinkedIn

Where you have given your consent pursuant to Art. 6(1)(1)(a) GDPR to the respective social

media operator, your data is automatically collected and stored for market research and

advertising purposes when you visit my online presences on the social media platforms

mentioned above, and usage profiles are created from it using pseudonyms. These can be used,for example, to display advertisements within and outside the platforms that presumably match

your interests. Cookies are generally used for this purpose. For detailed information on the

processing and use of data by the respective social media operator, as well as a contact option

and your rights and settings options for protecting your privacy, please refer to the operators'

privacy notices linked below. If you still need help in this regard, you can contact me.

On my website, I only link to my profiles on the social networks mentioned. No social media

plugins are integrated; data is therefore transferred to the operators only when you actively

click one of these links.

Facebook (by Meta) is an offering of Meta Platforms Ireland Ltd., Block J, Serpentine Avenue,

Dublin 4, Ireland ("Meta Platforms Ireland"). The information about your use of my online

presence on Facebook (by Meta) that is automatically collected by Meta Platforms Ireland is

generally transferred to and stored on a server of Meta Platforms, Inc., 1601 Willow Road, Menlo

Park, California 94025, USA. Data processing in connection with a visit to a Facebook (by Meta)

fan page takes place on the basis of an agreement between joint controllers pursuant to Art. 26

GDPR. You can find further information (information on Insights data) here.

My service providers are located and/or use servers in the following countries, for which the

European Commission has determined by decision that an adequate level of data protection

exists: USA, Canada, Japan, South Korea, New Zealand, the United Kingdom, Argentina.

The adequacy decision for the USA serves as the basis for the third-country transfer insofar as

the respective service provider is certified. Certification is in place.

My service providers are located and/or use servers in these countries: Australia, Hong Kong,

India, Indonesia, Malaysia, Singapore, Thailand, Taiwan, Brazil, Mexico.

No adequacy decision of the European Commission exists for these countries. My cooperation

with them is based on these safeguards: Standard Contractual Clauses of the European

Commission.

Instagram (by Meta) is an offering of Meta Platforms Ireland Ltd., Block J, Serpentine Avenue,

Dublin 4, Ireland ("Meta Platforms Ireland"). The information about your use of my online

presence on Instagram that is automatically collected by Meta Platforms Ireland is generally

transferred to and stored on a server of Meta Platforms, Inc., 1601 Willow Road, Menlo Park,

California 94025, USA. Data processing in connection with a visit to an Instagram (by Meta) fan

page takes place on the basis of an agreement between joint controllers pursuant to Art. 26