Privacy policy

1         General information

In fulfilment of the information obligations under the General Data Protection Regulation (GDPR), we hereby inform you, as existing or future customers, about the most important aspects of data processing within the contractual relationship. The protection of your personal data is of particular concern to us. Your data is processed exclusively on the basis of the statutory provisions (GDPR, Telecommunications Act). In this privacy policy, we inform you about the most important aspects of data processing in connection with our website.

pro aqua Diamantelektroden Produktion GmbH, Parkring 1, 8712 Niklasdorf, Austria, hereinafter referred to as “pro aqua”, is the controller within the meaning of the GDPR for personal data collected and processed in connection with the website www.proaqua.at.

 

2         Purpose and Legal Basis of Data Processing

2.1 We store and process the data provided by you for the following purposes:

• Customer administration and support
• Answering your questions and contacting you
• Processing your orders
• Creating your customer account as a personal profile
• Issuing invoices
• Providing our content and services
• Electronic payments
• Marketing and advertising activities
• Managing and documenting sales enquiries (lead management) in the HubSpot CRM system
• Providing embedded video content via the Vimeo platform

2.2 The legal bases for the processing of your personal data are:

• Performance of a contract, including pre-contractual measures (Art. 6 (1) lit. b GDPR)
• Compliance with legal obligations (Art. 6 (1) lit. c GDPR)
• Legitimate interests (Art. 6 (1) lit. f GDPR)
• Your consent (Art. 6 (1) lit. a GDPR)

2.3 We will not process the data provided to us for any purposes other than the fulfilment and performance of our contractual or statutory duties and services, or the purposes covered by your consent. This does not apply to the use of data for statistical purposes, provided that the data made available has been anonymised.
 

3         Use and Management of Customer Data, Electronic Payment and Customer Account

3.1 In order to place orders via our product-related websites (www.aquariumfresher.com), customers may order as guests or create a password-protected customer account.

3.2 All data entered by customers as part of the order processing procedure is stored. This includes:

• First and last name, company
• Delivery and billing address (country, street/house number, postcode, VAT number)
• Email address
• Telephone number, if provided
• Data that is strictly necessary for delivery or order processing is passed on to commissioned third parties, for example shipping service providers (Austrian Post, DHL, GLS, freight forwarders) as well as payment and financial service providers for payment processing, such as banks, credit card providers including Visa or Mastercard, payment service providers such as PayPal, Klarna, Apple Pay or Google Pay, depending on the selected payment method.

3.3 Furthermore, we process the above-mentioned personal data that you have provided to us for organisational purposes, invoice management and payment processing.

3.4 If you make an electronic payment for a service, payment service providers and payment providers, such as credit card companies, PayPal, Klarna, Apple Pay, Google Pay, etc., may collect additional personal data.

3.5 A created customer account contains an overview of orders placed and active order processes, as well as the above-mentioned customer data. You can manage and change your customer account yourself. The website for managing your personal settings is available at the following address: www.aquariumfresher.com. You must authenticate yourself with your username and password.

 

4         Duration of Data Storage

4.1 We process your personal data insofar as this is necessary for the purposes stated, in any case for the duration of the contractual processing, starting with the initiation of the contract and ending with its termination. If you create a customer account, your personal data will be stored until your customer account is deactivated. After that, your personal data will generally be deleted.

4.2 In addition, required personal data such as name, address, purchased goods and purchase date will remain stored until the expiry of statutory retention periods, liability periods such as warranty and product liability periods, and until the conclusion of any legal dispute.

4.3 Personal data from contact enquiries or other enquiries from interested parties may additionally be stored in our HubSpot CRM system, provided this is necessary to process the enquiry or initiate a business relationship. This data will be deleted as soon as the purpose of processing no longer applies and no statutory retention obligations exist.

 

5         Data Security and Data Disclosure

5.1 Your personal data is protected by appropriate structural, infrastructural, organisational and technical measures. These measures particularly concern protection against unauthorised, unlawful or accidental access, processing, loss, use and manipulation.

5.2 Data disclosure or data transmission is carried out exclusively on the basis of applicable legal provisions.

5.3 As part of our activities, we regularly work with service providers or partner companies, in particular external IT service providers, banking institutions, payment service providers and payment providers, suppliers, printing companies and delivery services, which support us in order processing, supplying customers with information and providing services (processors). In the course of their activities, these processors may, where necessary, gain access to your personal data. Particularly strict data protection requirements apply to order data processing. In particular, these service providers or partner companies may only use the data to fulfil their tasks on our behalf. All processors engaged by us are contractually obliged by us to comply with data protection provisions before commencing their activities.

5.4 Despite our efforts to always comply with an appropriately high standard of care requirements, it cannot be ruled out that information you disclose to us via the internet may be viewed and used by other persons.

5.5 When using our website, external IT service providers, hosting providers and CRM systems, in particular HubSpot Inc., USA, may also be used as processors. Data transfer to third countries takes place exclusively on the basis of appropriate safeguards pursuant to Art. 46 GDPR, namely the European Commission’s Standard Contractual Clauses.

 

6         Notification of Data Breaches

We endeavour to ensure that data breaches are detected at an early stage, remedied and, where applicable, reported to you and/or the competent supervisory authority without undue delay, including the relevant affected categories of data.

 

7         Contact by Interested Parties

When using the contact form, your personal data (name, email address, message text) is stored by us to the extent provided by you for the purpose of processing and answering the enquiry as well as any follow-up questions for a period of six months, so that it can be accessed for processing and answering your enquiry. This data will not be passed on to third parties without your consent.

In addition, we reserve the right to store this data in our Customer Relationship Management system HubSpot (HubSpot Inc., 25 First Street, Cambridge, MA 02141, USA) and process it as a sales enquiry (lead), provided this is necessary to process your enquiry or initiate a business relationship.

The processing is carried out on the basis of Art. 6 (1) lit. b GDPR (pre-contractual measures) and Art. 6 (1) lit. f GDPR (legitimate interest in structured customer communication and sales organisation).

 

8         Accessing Our Website

8.1 When our websites are accessed, the web servers temporarily store each access in a log file. The following data is collected and stored until automated deletion:

• IP address of the requesting computer
• Date and time of access
• Name and URL of the retrieved data
• Amount of data transferred
• Notification as to whether the retrieval was successful
• Identification data of the browser and operating system used
• Website from which access takes place
• Name of your internet access provider

8.2 The processing of this data serves the purpose of ensuring the use of the website (establishing a connection), system security and technical administration of the network infrastructure. In addition, the processing serves to optimise pro aqua’s online offering. The IP address is only evaluated in the event of attacks on our network infrastructure.

 

9         Cookies and Website Analytics Services

9.1 Our pro aqua website was created using the WordPress content management system and uses so-called cookies. These are small text files that are stored on your device by means of your browser for later retrieval. We use technically necessary cookies on the one hand and technically non-necessary cookies on the other.

Technically necessary cookies are required for the operation and functionality of the website, for example website navigation and correct display of the website, in order to provide a technically optimised, user-friendly and needs-based website. These cookies are usually deleted after the browser session ends.

In addition, we use technically non-necessary cookies. These enable analytics or convenience functions. These cookies are only set on the basis of your consent pursuant to Art. 6 (1) lit. a GDPR and can be withdrawn at any time via the cookie settings.

To manage the cookies and similar technologies used, as well as the related consent, we use the consent tool Real Cookie Banner by devowl.io GmbH, Tannet 12, 94539 Grafling, Germany.

For technically necessary cookies, we base our legal basis on our legitimate interest (Art. 6 (1) lit. f GDPR) in designing the website in a user-friendly way and making it technically functional. For technically non-necessary cookies, we request your consent in the cookie window, which you can withdraw at any time (Art. 6 (1) lit. a GDPR).

You have the option of configuring your browser so that cookies are either not received or so that you are notified when cookies are received. This allows you to decide whether and which cookies you wish to accept or reject. If you reject the use/storage of cookies, visiting our website may be associated with limited functionality. In order to use the full functionality of our website, you should allow the storage of cookies on your system.

After you have finished visiting our website, you can delete cookies from your device at any time. The procedures for managing and deleting cookies can be found in the help function integrated into the respective browser.

9.2 Our product-related websites are hosted via the platform Wix.com Ltd., 40 Namal Tel Aviv St., Tel Aviv 6350671, Israel. When these websites are accessed, Wix processes technical access data, such as IP address, date and time of access, browser type, operating system, referrer URL and accessed pages, in server log files to ensure the operation, stability and security of the website on the basis of Art. 6 (1) lit. f GDPR. Wix stores data on servers within the EU as well as in third countries, particularly Israel and the USA. For Israel, an adequacy decision by the European Commission exists pursuant to Art. 45 GDPR. In addition, any data transfers are carried out on the basis of Standard Contractual Clauses pursuant to Art. 46 GDPR. A data processing agreement pursuant to Art. 28 GDPR exists with Wix. A transfer of personal data to countries outside the EU cannot be completely ruled out.

On our product-related websites, there is also the option to register a user account and use login functions and webshop services. In this context, personal data such as name, address, email address, payment information, order data and technically necessary identification data may be processed and stored, insofar as this is necessary to provide the respective functions (Art. 6 (1) lit. b GDPR). Technically necessary cookies are also used for the technical implementation of these functions, in particular for session management, authentication and storage of user settings.

9.3 Our product-related websites (www.wcd2.at, www.surfacecleaner.at, www.aquariumfresher.com, www.rainfresher.at, www.oxy3.at) use Google Analytics, a web analytics service provided by Google Inc. (“Google”), 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Analytics uses cookies that enable an analysis of your use of the website. The information generated by the cookie about your use of our website, including your IP address, is transmitted to Google servers in the USA and stored there. We do not store any of your data collected in connection with Google Analytics.

These websites use the IP anonymisation option offered by Google Analytics. Your IP address is therefore shortened/anonymised by Google upon receipt. The IP address transmitted by your browser as part of Google Analytics is not merged by Google with other data.

On our behalf, Google uses this information to evaluate your use of the website, to compile reports on website activity for us as website operators and to provide us with other services related to website use and internet use. Google may also transfer this information to third parties where required by law or where such third parties process the data on Google’s behalf.

You can prevent the collection of your data by Google Analytics on this website. The procedures for managing and disabling this can be found in the help function integrated into the respective browser.

 

10     Use of ALTCHA

To protect our contact forms against abusive automated use (spam), we use the ALTCHA service.

ALTCHA is a privacy-friendly anti-spam solution that works without tracking, cookies or the transmission of personal data to external servers. Processing takes place exclusively locally in the user’s browser. No personal data is transmitted to third parties when using ALTCHA. Processing takes place for the purpose of ensuring the functionality of our website and protecting it against abusive automated access. The use is based on Art. 6 (1) lit. f GDPR (legitimate interest in the security of our website and protection against spam and automated attacks).

Further information:
https://altcha.org/

 

11     Integration of LinkedIn & Vimeo

11.1 Functions of the LinkedIn network are integrated into our website. The provider is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland.

When a page with integrated LinkedIn elements is accessed, a connection to LinkedIn servers is established. In this process, personal data, in particular your IP address and technical information about your browser and device, may be transmitted to LinkedIn.

If you are logged into your LinkedIn user account at the same time, LinkedIn may assign your visit to our website to your user account.

The use is based on our legitimate interest in a professional external presentation of our company and improved communication with interested parties pursuant to Art. 6 (1) lit. f GDPR.

LinkedIn may also process data in countries outside the European Union.

Data transfer takes place on the basis of appropriate safeguards pursuant to Art. 46 GDPR, in particular the European Commission’s Standard Contractual Clauses.

Further information:
https://www.linkedin.com/legal/privacy-policy

11.2 Videos from the Vimeo platform are embedded on our website. The provider is Vimeo Inc., 555 West 18th Street, New York, New York 10011, USA.

When a page with an embedded Vimeo video is accessed, a connection to Vimeo servers is established. In this process, personal data such as IP address, browser information and device information in particular may be transmitted.

If you are logged into Vimeo, Vimeo may assign your browsing behaviour to your user account.

The use is in the interest of an appealing presentation of our online offerings on the basis of Art. 6 (1) lit. f GDPR.

Further information:
https://vimeo.com/privacy

 

12     Use of Matomo

The Matomo web analytics service is used on our website to analyse the use of our website and improve our online offering.

Information such as accessed pages, access times, anonymised IP addresses and technical information about the browser and device used is processed. Processing is carried out on the basis of our legitimate interest pursuant to Art. 6 (1) lit. f GDPR in the statistical evaluation of user behaviour and the optimisation of our website.

If Matomo is used without cookies, no information is stored on the user’s device.

Further information:
https://matomo.org/privacy-policy/

 

13     Links to Other Websites

This privacy information does not apply to websites that can be accessed via links on our website. The operators of the linked websites are solely responsible for their content. Liability for the content of linked pages is excluded, especially since pro aqua has no influence on their content.

 

14     Your Rights

14.1 As a data subject, you have the right at any time to obtain information about your stored personal data, its origin and recipients and the purpose of data processing, as well as the right to rectification, data portability, objection, restriction of processing and blocking or deletion of incorrect or unlawfully processed data.

14.2 You have the right at any time to withdraw any consent you have given for the use of your personal data. The withdrawal of consent does not affect the lawfulness of data processing carried out on the basis of consent before its withdrawal. Withdrawal means that from that point onwards we will no longer process your data for the purposes stated above.

14.3 Your request for information, deletion, correction, objection or data transfer must be made in writing. You therefore have the right to request immediate processing of the request, including written feedback on the implementation of the request.

14.4 If you believe that our processing of your personal data violates applicable data protection law or that your data protection rights have otherwise been infringed, you have the option of lodging a complaint with the competent supervisory authority. In Austria, the competent authority is the Data Protection Authority (https://www.dsb.gv.at).

 

15     Our Contact Details

You can reach us using the following contact details:

pro aqua Diamantelektroden Produktion GmbH
Parkring 1
8712 Niklasdorf
Austria

Email: info@proaqua.at
Web: www.proaqua.at