Bieder & Maier
Privacy policy

We take the protection of your personal data very seriously. We want you to know when we collect which data and how we use it. We process your data exclusively on the basis of the statutory provisions (GDPR, Data Protection Adaptation Act, TKG 2003). In this privacy policy, we inform you about the most important aspects of data processing.

In the course of the further development of our website and the implementation of new technologies, there may also be changes to our privacy policy. We therefore recommend that you re-read this privacy policy from time to time.

Contact with us
If you contact us using the form on this website, by e-mail or by telephone, the data you provide will be stored by us for two years for the purpose of processing your inquiry and in the event of follow-up questions. We will not pass on this data without your consent.

We collect personal data for the following reasons:

Legal basis Contract fulfillment (Art. 6 para. 1 lit. b) GDPR
The data provided by you is required to fulfill the contract or to carry out pre-contractual measures. Without this data, we cannot conclude the contract with you.
Legal basis legitimate interest (Art. 6 para. 1 lit. f) GDPR)
We process data about you on the basis of our legitimate interests (e.g. CRM system for efficient and fast processing of user inquiries, website statistics function for analysis, optimization and economic operation of our online offer).
Data processing to fulfill a legal obligation (Art. 6 para. 1 lit. c) GDPR)
Legal basis consent (Art. 6 para. 1 lit. a) GDPR)
You have voluntarily provided us with data about yourself and we process this data on the basis of your consent.
You can withdraw this consent at any time. If you withdraw your consent, we will no longer process your data for the above-mentioned purposes from that point on. To withdraw your consent, please contact: office@biedermaier.com

Storage period/deletion period
We process the data for as long as this is necessary for the respective purpose.
Insofar as statutory retention obligations exist - e.g. under commercial law or tax law - the personal data concerned will be stored for the duration of the retention obligation. Once the retention obligation has expired, we will check whether there is any further need for processing. If it is no longer necessary, the data will be deleted.
Of course, you can request information about your personal data stored by us at any time and, if it is no longer necessary, request that the data be deleted or processing restricted.
Examples of the duration of storage of your data depending on legal provisions and the use case would be

Contact data based on offers and invoices: 7 years
Job applications: 6 months
Processors
We use processors for our data processing (e.g. email & web host, CRM system, website statistics). These processors are obliged to strictly protect your personal data and may not process your personal data for any purpose other than to provide our services.

Security measures
We take organizational, contractual and technical security measures in accordance with the state of the art to ensure that the provisions of data protection laws are complied with and to protect the data processed by us against accidental or intentional manipulation, loss, destruction or access by unauthorized persons.

Cookies
Cookies are small text files that are sent from our web server to your browser and stored on your device when you visit our website.

The following cookies are set on our website

YouTube
On our website, we use content (videos) from YouTube, LLC 901 Cherry Ave, 94066 San Bruno, CA, USA, a company of Google LLC, 1600 Amphitheatre Parkway, Mountain View, California 94043 USA.

We use the “extended data protection mode” option provided by YouTube.

When you visit a page that has an embedded video, a connection to the YouTube servers is only established when you click on a video and the video is loaded.

According to YouTube, in “extended data protection mode”, data is only transmitted to the YouTube server, in particular which of our websites you have visited when you watch the video. If you are logged in to YouTube at the same time, this information will be assigned to your YouTube member account. You can prevent this by logging out of your member account before visiting our website.
Privacy policy: https://www.google.com/policies/privacy/
Opt-out: https://www.google.com/settings/ads/

If you do not want cookies to be stored on your computer, we would ask you to deactivate the corresponding option in the default settings of your browser. Saved cookies can be deleted in the browser settings. The exclusion of cookies can lead to functional restrictions of this online offer.

Web analysis
This website uses:

1. website statistics
Provided automatically by our web host. The access statistics do not contain any personal data, as the IP addresses of website visitors are anonymized.

2. web host IP address
Our web host processes the following personal data in a server log file for the purpose of monitoring the technical function and increasing the operational security of the web server on the basis of the overriding legitimate interest of the controller (technical security measures):
Website accessed, date and time of the server request, browser type / browser version, operating system used, amount of data transferred, notification of successful retrieval, referrer URL, P address, host name.
Our web host stores this data of visitors to our website for 30 days.

Integration of third-party services and content
On the basis of our legitimate interests (i.e. interest in the analysis, optimization and economic operation of our online offer within the meaning of Art. 6 para. 1 lit. f. GDPR. GDPR) content or service offers from third-party providers in order to integrate their content and services, such as videos or fonts (hereinafter uniformly referred to as “content”). This always presupposes that the third-party providers of this content are aware of the IP address of the user, as they would not be able to send the content to their browser without the IP address. The IP address is therefore required to display this content. We endeavor to only use content whose respective providers only use the IP address to deliver the content.
The following presentation provides an overview of third-party providers and their content, together with links to their privacy policies, which contain further information on the processing of data and, in some cases already mentioned here, opt-out options:

Google Analytics
This website uses Google Analytics, a web analysis service of Google Inc, (1600 Amphitheatre Parkway Mountain View, CA 94043, USA; Google). Google will use this information on behalf of the operator of this website for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. This data protection notice is provided by Intersoft Consulting Services.

Data protection-compliant and complaint-free use of Google Analytics is possible under certain conditions. We naturally comply with these conditions. We would like to point out that on this website Google Analytics has been extended by the code anonymizeIp in order to ensure an anonymized collection of IP addresses (so-called IP masking). Your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. The legal basis for the use of Google Analytics is § 15 para. 3 TMG or Art. 6 para. 1 lit. f GDPR. Sessions and campaigns are terminated after a certain period of time. By default, sessions are terminated after 30 minutes without activity and campaigns after six months. The time limit for campaigns can be a maximum of two years. You can find more information on terms of use and data protection under Google Analytics Terms or under Google Policies

We have concluded a corresponding contract with the provider for commissioned data processing in accordance with the GDPR.

Google Analytics uses cookies, which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser add-on to deactivate Google Analytics.

eMail-Newsletter.
You have the option of subscribing to our newsletter via our website. By subscribing to our newsletter, you agree to receive it and to the procedures described.

To subscribe to the newsletter, we need your e-mail address.

Our newsletter is distributed by e-mail and on the homepage. The usual content is reporting on current projects relating to our services.
Subscription is free of charge. Subscription/unsubscription: directly in each newsletter.

The newsletter is sent using the mailing service provider “MailChimp”, a newsletter mailing platform of the US provider Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA. You can view the privacy policy of the mailing service provider here: https://mailchimp.com/legal/privacy/. The Rocket Science Group LLC d/b/a MailChimp is certified under the Privacy Shield Agreement and thus offers a guarantee to comply with the European level of data protection (https://www.privacyshield.gov/participantid?=a2zt0000000TO6hAAG&status=Active).

The shipping service provider is used on the basis of our legitimate interests pursuant to Art. 6 para. 1 lit. f GDPR and an order processing contract pursuant to Art. 28 para. 3 sentence 1 GDPR. The mailing service provider may use the data of the recipients in pseudonymous form, i.e. without assignment to a user, to optimize or improve its own services, e.g. to technically optimize the mailing and presentation of the newsletter or for statistical purposes. However, the mailing service provider does not use the data of our newsletter recipients to write to them itself or to pass the data on to third parties.

Changes to your data stored by the mailing service provider are also logged.

Statistical survey and analyses - The newsletters contain a so-called “web-beacon”, i.e. a pixel-sized file that is retrieved from the server of the mailing service provider when the newsletter is opened. As part of this retrieval, technical information, such as information about the browser and your system, as well as your IP address and time of retrieval, is initially collected. This information is used for the technical improvement of the services based on the technical data or the target groups and their reading behavior based on their retrieval locations (which can be determined with the help of the IP address) or the access times. The statistical surveys also include determining whether the newsletters are opened, when they are opened and which links are clicked. For technical reasons, this information can be assigned to individual newsletter recipients. However, it is neither our intention nor that of the mailing service provider to observe individual users. The evaluations serve us much more to recognize the reading habits of our users and to adapt our content to them or to send different content according to the interests of our users.

The statistical surveys and analyses as well as the logging of the registration process are carried out on the basis of our legitimate interests in accordance with Art. 6 para. 1 lit. f GDPR. We are interested in using a user-friendly and secure newsletter system that serves our business interests and meets the expectations of users.

Cancellation/revocation - You can cancel the receipt of our newsletter at any time, i.e. revoke your consent. At the same time, your consent to its dispatch [by the dispatch service provider] and the statistical analyses will expire. Unfortunately, it is not possible to withdraw your consent to the newsletter being sent by the newsletter service provider or to the statistical analysis separately. You will find a link to unsubscribe from the newsletter at the end of each newsletter.

Use of web fonts
Our website uses external fonts from Google LLC, 1600 Amphitheatre Parkway, Mountain View, California 94043 USA, hereinafter referred to as “Google”. These web fonts are integrated by accessing our website, whereby a Google server in the USA also stores the IP address of your browser. No cookies are sent from the website visitor to the Google Fonts API and are not exchanged with other Google services (e.g. Google Search, Gmail). For performance reasons, the website visitor's browser cache stores parts of the fonts used locally and are automatically deleted after one year.
Google is certified under the Privacy Shield Agreement and thus offers a guarantee of compliance with European data protection law - see https://www.privacyshield.gov/
Privacy policy: https://www.google.com/policies/privacy/
Opt-out: https://www.google.com/settings/ads/

Online presence in social media
We maintain online presences within social networks and platforms in order to communicate with the customers, interested parties and users active there and to inform them about our services. When accessing the respective networks and platforms, the terms and conditions and data processing guidelines of their respective operators apply.
Unless otherwise stated in our privacy policy, we process users' data if they communicate with us within the social networks and platforms, e.g. write posts on our online presences or send us messages.
Data protection provisions of the platforms:
Facebook: https://www.facebook.com/business/gdpr
Instagram: https://help.instagram.com/519522125107875?helpref=page_content
YouTube: https://policies.google.com/privacy?hl=de&gl=de

Your rights
In principle, you have the rights to information, correction, deletion, restriction, data portability, revocation and objection. If you believe that the processing of your data violates data protection law or your data protection rights have been violated in any other way, you can lodge a complaint with the supervisory authority. In Austria, this is the data protection authority:

Austrian Data Protection Authority
Wickenburggasse 8-10
1080 Vienna
Telephone: +43 1 531 15-202525
eMail: dsb@dsb.gv.at
Homepage: https://www.dsb.gv.at/

You can reach us under the following contact details:

Bieder & Maier
m2 Kaffeemanufaktur und Vertriebsges.m.b.H.
Lehargasse 7
A-1060 Vienna

Phone:+43 676 725 00 69
eMail: office@biedermaier.com
Homepage: http://www.biedermaier.com

You can reach our data protection coordinator at
Phone:+43 676 725 00 69
eMail: office@biedermaier.com