Privacy Policy

1. General

We attach great importance to the protection of your personal data and your privacy. This is why we would like to inform you about the way we handle your personal data, in particular the type, scope and purpose of the processing of personal data, as well as the data protection claims and rights you are entitled to.

We process your personal data in accordance with the provisions of data protection law, in particular the General Data Protection Regulation (GDPR) and the Data Protection Act (DPA). When we refer to data or personal data hereinafter, we mean any information through which you can be directly or indirectly identified as a person.

2. Responsible party and data protection officer

The responsible party in the sense of the GDPR is Tiroler Glashütte GmbH. We can be reached using the following contact details:

Weissachstrasse 28-34
6330 Kufstein/Austria
Telephone: +43-5372-64896
Email: info@riedel.com

The data protection officer within the meaning of the GDPR is Projekt 29 GmbH & Co. KG; you can get in touch with any concerns regarding data protection using the following contact details: Telephone: +49 9 41 29 86 93-0 email: info@projekt29.de

3. Purpose of processing, legal basis and data collected

3.1. Contract processing and personal customer account

We process your personal data so that we can fulfill orders when you purchase products via our webshop and, where applicable, to manage your personal customer account. You are free to place orders as a guest without a customer account, to register as a new customer or to log in as a customer in the personal customer account. The customer account lets you better manage your orders and create wish and gift lists, among other things.

The following personal data may be processed for this purpose: Title, first and last name, address, country, email address, telephone number, VAT ID, company, order number, order status, watch lists, purchase history, payment amounts, payee details, payment method, credit card details and payment details.

The legal foundation for the processing is fulfillment of a contract or the implementation of pre-contractual measures in accordance with Art. 6 para. 1 lit. b GDPR.

3.2. Contract processing and business account

We process your personal data in order to execute orders and manage your Riedel For Business - business account if you are a retailer, wholesaler or operator of a hospitality business or winery and purchase products via our webshop.  

The following personal data may be processed for this purpose: Title, first and last name, address, country, email address, telephone number, VAT ID, company, company type, order number, order status, watch lists, purchase history, payment amount, payee details, payment method, credit card details and payment details.

The legal foundation for the processing is fulfillment of a contract or the implementation of pre-contractual measures in accordance with Art. 6 para. 1 lit. b GDPR.

3.3. Newsletter

We process your personal data when you subscribe to our newsletter through our online store. By doing so, you will receive interesting information about our activities, products and offers by email. Following your initial registration, you will receive a confirmation email, through which you must reconfirm your subscription. You can unsubscribe from the newsletter at any time.

The following personal data may be processed for these purposes: Title, first and last name, email address, company type, date of birth, country and language.

The legal foundation for sending the newsletter is our legitimate interest in accordance with Art. 6 para. 1 lit. f GDPR. You have the right to object at any time to the processing of your personal data for the purpose of such advertising (see 7.4. second paragraph).

3.4. Accounting

We process your personal data in order to manage our internal accounting system.

The following personal data may be processed for this purpose: Title, first and last name, contact information, function, power of representation and processed business cases.

The legal foundation for the processing is fulfillment of a legal obligation in accordance with Art. 6 para. 1 lit. c GDPR.

3.5. Applications

We process your personal data within the scope of the application process if you send us the corresponding application documents, e.g. via email.

The following personal data may be processed for this purpose: Title, first and last name, address, email address, telephone number, date of birth, CV incl. submitted documents (certificates etc.)

The legal foundation for the processing is fulfillment of a contract or the implementation of pre-contractual measures in accordance with Art. 6 para. 1 lit. b GDPR or the protection of our legitimate interest in accordance with Art. 6 para. 1 lit. f GDPR.

If the processing is based on the protection of our legitimate interest, then you have the right to raise an objection to such processing of your personal data at any time (see point 7.4. first paragraph).

4. Transfer of data

4.1. Tiroler Glashütte GmbH and affiliated companies

Only those departments or employees within Tiroler Glashütte GmbH who require your personal data for processing for the relevant purposes will receive it.
Any data transfer within our affiliated companies, namely RSN Logistik GmbH and Nachtmann GmbH, will only take place based on an order processing agreement.

4.2. Shipping company

Once you have placed your order in the webshop, we will transfer your shipping data to the corresponding shipping service provider for the purpose of processing the contract. The corresponding shipping company will only process your shipping data for the purpose of fulfilling the contract.

4.3. PayPal

If you pay via PayPal, your payment data will be forwarded to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter referred to as "PayPal") within the framework of the payment procedure for the purpose of processing the contract. PayPal reserves the right to perform a credit check on some payment methods. To the extent that score values are incorporated into the result of the credit report, these may include, among other things, address data.

4.4. Sofort transfer (Klarna)

If you transfer payment via Sofort, your payment data will be transmitted to Sofort GmbH, Theresienhöhe 12, 80339 Munich, Germany, for the purpose of processing the contract. You will receive confirmation of the transaction immediately after completing the payment process. We will then receive the transfer credit directly.

4.5. Credit card

If you pay by credit card, your payment data will be transferred to your credit institution (e.g. American Express Company, Visa Inc. or Mastercard Inc.) for the purpose of processing the contract.  

4.6. Apple Pay

If you pay via Apple Pay, your payment data will be transferred to the service provider Apple Inc., Infinite Loop, Cupertino, CA, 95014, USA for the purpose of processing the contract. Apple Pay stores the payment and transaction data, including the approximate amount of the purchase, the approximate date and time, and whether the transaction was successfully completed.

4.7. Processors

Processors commissioned by us, i.e. the payment platform provider Adyen N.V., which we have commissioned to process the payment methods listed above, shall receive your data to the extent that they require it to fulfill their respective tasks. All processors have been carefully selected and take appropriate technical and organizational measures to ensure that your data is processed in accordance with the legal data protection obligations and that your rights are protected. Above all, the processors are not permitted to use your personal data for their own purposes.

5. Storage duration

We process your personal data to the extent reasonably necessary in order to achieve the corresponding purposes and, moreover, in accordance with the legal retention and documentation obligations that arise, inter alia, from the Austrian Commercial Code (UGB), the Austrian General Civil Code (ABGB) and the Austrian Federal Fiscal Code (BAO).

Your data will therefore be deleted in principle once the contract has been fully processed, your consent has been withdrawn or you have objected, insofar as the storage is not required for compliance with a legal obligation or to assert, exercise or defend legal claims. For instance, data in the form of application documents shall be deleted after seven months in the event that the application has not led to an employment relationship. Any further processing shall only occur if you have consented to the further use of your data or if we have retained the right to process data beyond this, as permitted by law.

6. Social Plugins

6.1. Provider and data processing

Social plugins ("plugins") from the following providers are integrated on our website:

  • (i) Facebook Inc. (operated by Meta Platforms), 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook");
  • (ii) Instagram LLC. (operated by von Meta Platforms), 1601 Willow Road, Menlo Park, CA 94025, USA ("Instagram");
  • (iii) WhatsApp Ireland Limited (operated by Meta Platforms), 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("WhatsApp");
  • (iv) Twitter Inc., 1355 Market St, Suite 900, San Francisco, CA 94103, USA ("Twitter");
  • (v) Pinterest Inc., 651 Brannan Street, San Francisco, CA 94107, USA ("Pinterest");
  • (vi) LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA ("LinkedIn").

The plugins are marked with the respective logo of the provider. When you access one of our websites where a plugin is integrated, your browser establishes a direct connection with the servers of the respective provider, irrespective of whether you have your own profile with this provider or not. In the process, browser names, preferred language and the IP address of your end device shall be transmitted to the respective provider, among other things.

In the event that you are logged in to one of the services, the providers may directly assign your visit to our website with your respective profile on Facebook, Instagram, WhatsApp, Twitter, Pinterest and LinkedIn. The information can or will be published in the respective social network, on your account and displayed there to your contacts.

6.2.    Purpose of data collection and further information

The privacy policy of the respective provider will give you information about the purpose and scope of the data collection and the further processing and use of the data by the respective provider, as well as your rights in this context and setting options for the protection of your privacy.

6.3. Two-click solution

All plugins on our website have been implemented using a two-click solution in order to protect your data. This means that when you access one of our websites that contains plugins, no immediate connection is established to the servers of the respective providers. A connection and the associated data transfer is only established once you activate the corresponding plugin from Facebook, Instagram, WhatsApp, Twitter, Pinterest or LinkedIn. The data transfer and processing already described above then takes place to and by the corresponding provider.

7. Your rights

7.1. Right to information

You have the right at any time, within the framework of the applicable legal provisions, to request confirmation as to whether personal data pertaining to yourself is being processed. Should this be the case, you are entitled to receive information about this personal data (e.g. the purposes of processing, the categories of personal data and recipients) without charge.

7.2. Right to rectification

You have the right to request that we rectify any incorrect personal data about you without undue delay.

7.3. Right to deletion

You have the right to request the immediate deletion of your personal data if certain conditions are met. Such a right to deletion exists, for example, if (i) your data is no longer necessary for the purposes for which it was collected or otherwise processed, (ii) your data was processed in an unlawful manner, (iii) the data processing is based on your declaration of consent and you withdraw your consent, or (iv) you object to the processing in accordance with Art. 21 para. 1 GDPR and there are no overriding legitimate reasons for the processing of your personal data. You also have a right to deletion if you object to processing for the purpose of direct marketing.

The right to deletion shall not be applicable if one of the exceptions of Art. 17 para. 3 GDPR applies. This is the case, for instance, if processing is necessary for compliance with a legal obligation under EU or Austrian law (e.g. statutory retention obligations) or in order to assert, exercise or defend legal claims.

7.4. Right to object to data processing

If the data processing is performed to safeguard our legitimate interests, you have the right at any time to object to the processing of your personal data on the grounds arising from your particular situation. The respective legal foundation on which processing is based can be found in this privacy policy. Should you lodge an objection, we will no longer process your personal data in question unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing is used to assert, exercise or defend legal claims.

In the event that we process your personal data in order to carry out direct advertising, you have the right of objection to such processing of your personal data for the purpose of this type of advertising at any time.

7.5. Right to withdraw consent

If the data is processed with your consent in accordance with Art. 6 para. 1 lit. a GDPR, you have the right to withdraw your consent at any time. The legality of the processing based on the consent shall remain unaffected until the withdrawal.

7.6. Right to data portability

You have the right to request that personal data pertaining to you, which we process automatically based on your consent or in fulfillment of a contract, be handed over to you or to a third party in a commonly used, machine-readable format. Insofar as you request the direct transfer of the data to another responsible party, we will only do so to the extent that this is technically feasible.

7.7. Right to restrict data processing

You have the right to request that we restrict the processing of your personal data. This right to restrict processing will apply in the following cases:
If you contest the accuracy of the personal data we hold about you, we generally require time to verify this. You are entitled to request that the processing of your personal data be restricted for the duration of the check.

In the event that your personal data was/is processed unlawfully, you may request that data processing be restricted instead of deleted.

If we no longer require your personal data for the purposes of processing, but you require it to exercise, defend or enforce legal claims, you are entitled to request that we restrict the processing of your personal data instead of deletion.

If you have raised an objection in accordance with Art. 21 para. 1 GDPR, then a balancing of your interests and ours must be carried out. Pending a determination of whose interests prevail, you have the right to request that we restrict the processing of your personal data.

Where you have placed restrictions on the processing of your personal data, with the exception of its storage, this data may only be processed with your consent or to assert, exercise or defend legal claims or to protect the rights of another natural or legal person or for reasons relating to an important public interest of the European Union or a Member State.

7.8. Right to file a complaint with the competent supervisory authority

If you believe that we have violated data protection law by processing your personal data or that your data protection rights have been infringed in any other way, you may file a complaint with the competent supervisory authority. The Austrian Data Protection Authority (Österreichische Datenschutzbehörde - DSB) is responsible in Austria.

You can reach the DSB using the following contact details:

Barichgasse 40-42
1030 Vienna
Telephone: +43 1 52 152-0
Email: dsb@dsb.gv.at

 

Cookie Policy