Privacy Policy
A. Introduction
This privacy policy describes:
-
What information we collect and why we collect it
-
How we use this information
-
What choices you have to access, update, or delete your information
We have tried to make this privacy policy as simple as possible. If, after reviewing the privacy policy, you have any questions, please feel free to contact us at datenschutz@timeaffair.com.
B. What information do we collect and how do we collect it
Personal data provided by you
When you visit our websites, your IP address is transmitted to our servers and stored for a certain period. If you use certain parts of our websites, such as requesting information, contacting us through our web contact form, signing up for a newsletter, or downloading materials like eBooks, you may be required to provide your name and email address to identify you.
The following data is stored about your visit:
-
The website you visited
-
The date and time of your access
-
The amount of data transmitted in bytes
-
The source/referral from which you accessed the page
-
The browser used
-
The operating system used
-
The IP address used (if applicable, in anonymized form)
The processing is carried out in accordance with Art. 6 (1) lit. f GDPR based on our legitimate interest in improving the stability and functionality of our website. No transfer or other use of the data takes place. However, we reserve the right to check server log files retrospectively if there are specific indications of illegal use.
Non-personal data
When you visit our website, we may collect non-identifiable information from you, such as your interactions with the website and our services, the referral URL, browser, operating system, and cookie information.
Information collected by third parties
In addition to the personal data you provide, we use third-party services to gather additional data about your visit when you visit our websites or sign up for our services. The following list includes all third parties and the specific categories of data we share with them:
- Google LLC – 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States – https://www.google.com/analytics/ – IP address
To ensure compliance with the GDPR, we have carefully selected and reviewed all third parties with whom we share your information and have signed individual data processing agreements.
C. How we use the collected personal data
We will never sell, transfer, or disclose your personal data to third parties without your consent. However, you agree that we may use your information in the following ways:
-
To enhance and improve the user experience
-
To provide our services to you
-
To contact you and respond to inquiries via phone, email, or newsletter
-
To document any communication with you
Additionally, we may disclose your information to authorities for law enforcement if we are legally required to do so by a court order, if EU laws are violated, or if there is a breach of the terms of use or privacy policy.
D. Sharing personal data
The personal data you have sent to our website or that we collect through the mentioned third-party services will be shared with certain third-party services to provide and improve our service. We have carefully selected and reviewed all third parties with whom we share your information to ensure GDPR compliance, and we have signed individual data processing agreements with all of them.
E. Access and control of personal data
As a user, you have the right to access, rectify, transfer, delete your data, and revoke any consent given.
We have established processes to ensure transparency regarding the processing of information to affected individuals. All data is stored and processed in our own cloud infrastructure in Vienna.
Individuals wishing to exercise their rights can contact our team at datenschutz@timeaffair.com.
Every request received is passed to the responsible person in the company for handling affected rights. The requests are reviewed, and appropriate actions are taken. If no obligations require data retention, the data will be properly deleted. If some or all of the data to be deleted must be retained and its retention period is clearly defined, we will retain the necessary data. All irrelevant data will be deleted. In both cases, the affected individual who requested the removal will be contacted with the result of the process. The same procedure applies when the affected person requests a change in data.
All requests and their results will be documented.
F. Used technologies
Cookies and related technologies
We use tracking technology ("cookies") to recognize you across the website and our services, monitor the use of our services and traffic, and adjust and improve our services. By visiting our websites or using our services, you consent to the use of cookies in your browser and HTML-based emails. Cookies are small text files placed on your device when visiting a website to track the usage of the website and service and improve user-friendliness.
Session cookies
Our websites use "session cookies" that enhance your user experience by storing certain information from your current visit on your device, such as login details. This allows us to remember your login session so you can navigate our websites or services easily. Without these session cookies, we could not offer you our service. These session cookies have limited functions and expiration times. You will need to re-enter your login credentials after a certain time to protect your account contents and related personal information from accidental access. Other examples of session cookies include tracking the number of visits to a specific page or feature of the service.
Performance cookies
Partners who help us place ads on and off our websites, as well as analytics companies, may also place cookies on your device. We use several third parties to serve relevant product and service ads when you visit certain pages on our website. We may provide third-party advertising partners with a cryptographic hash of a general account ID (e.g., email address) to help us measure and adjust the ads and services provided to you. The third-party partners we currently use are listed below:
- Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
In most browsers, you can choose whether to accept cookies. If you do not want cookies on your computer, please set your browser to reject all cookies before accessing the page. Please note that some features of the page and services may not be available as a result.
To learn more about cookies, how to see which cookies have been set, and how to manage and delete them, please visit www.allaboutcookies.org.
The Network Advertising Initiative has also developed a tool to help you understand which third parties currently have cookies enabled for your browser and how to opt out of these cookies. For more information, visit http://www.networkadvertising.org/managing/opt_out.asp.
Meta Pixel
Within our online offering, we use the "Meta Pixel" service from the following provider: Meta Platforms Ireland Limited, 4 Grand Canal Quay, Dublin 2, Ireland ("Meta")
If a user clicks on one of our ads on Facebook and/or Instagram, "Meta Pixel" adds a parameter to the URL of our linked page. This URL parameter is then entered into the user's browser after redirection by a cookie set by our linked page.
This enables Meta to determine the visitors to our online offering as a target audience for displaying ads ("Ads"). Accordingly, we use the service to show our Facebook and/or Instagram Ads only to users who have shown interest in our online offering or have specific characteristics (e.g., interests in certain topics or products determined by visited websites) which we pass to Meta ("Custom Audiences").
Furthermore, "Meta Pixel" allows us to track whether users have been redirected to our website after clicking an ad and what actions they take there ("Conversion Tracking").
The collected data is anonymous to us, meaning we cannot draw conclusions about the identity of users. However, the data is stored and processed by Meta, so a connection to the respective user profile is possible, and Meta can use the data for its own advertising purposes.
All the processing described above, particularly setting cookies to read information on the device used, will only occur if you have explicitly consented to this under Art. 6 (1) lit. a GDPR. You can withdraw your consent at any time with effect for the future by disabling this service in the "Cookie Consent Tool" provided on the website.
We have signed a data processing agreement with the provider to ensure the protection of the data of our site visitors and prevent unauthorized disclosure to third parties.
Google Ads Remarketing
This website uses retargeting technology from the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland
To do this, Google places a cookie in your browser, which automatically enables interest-based advertising based on the pages you have visited via a pseudonymous cookie ID. Further data processing takes place only if you have agreed with Google that your web and app browsing history will be linked to your Google account, and information from your Google account will be used to personalize ads you view on the web. If you are logged into Google during your visit to our website, Google uses your data together with Google Analytics data to create and define audience lists for cross-device remarketing. This may also involve the transfer of personal data to Google's servers in the USA.
All the processing described above, particularly setting cookies to read information on the device used, will only occur if you have explicitly consented to this under Art. 6 (1) lit. a GDPR. Without this consent, retargeting technology will not be used during your visit to the site.
You can withdraw your consent at any time with effect for the future. To exercise your withdrawal, please disable this service in the "Cookie Consent Tool" provided on the website.
Youtube
This website uses plugins to display and play videos from the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland
Data may also be transmitted to: Google LLC., USA
When you visit a page on our website that contains such a plugin, your browser establishes a direct connection to the provider’s servers to load the plugin. Certain information, including your IP address, is transmitted to the provider.
When embedded videos are played via the plugin, the provider also uses cookies to collect information about user behavior, create playback statistics, and prevent abuse.
If you are logged into a user account with the provider during your visit, your data will be directly associated with your account when you click on a video. If you do not want this association with your account, you must log out before clicking the play button.
All of the above-mentioned processing, particularly setting cookies to read information on the device used, will only occur if you have explicitly consented to this under Art. 6 (1) lit. a GDPR. You can withdraw your consent at any time with effect for the future by disabling this service in the "Cookie Consent Tool" provided on the website.
Google Maps API
To enable real-time verification of certain inputs in the address form of the order process on our webshop for input errors, we use the services of the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland
Data may also be transmitted to: Google LLC., USA
The provider validates the entered address, verifies the spelling, and adds any missing data. For ambiguous addresses, correct alternative suggestions are displayed. The entered address data is transmitted to the provider, stored, and evaluated.
This processing is carried out in accordance with Art. 6 (1) lit. f GDPR based on our legitimate interest in correctly recording customer address data to fulfill our contractual delivery obligations and to prevent contract execution issues.
The provider processes the affected data separately and does not merge it with other data records, deleting it once its status or correctness has been confirmed, but no later than 30 days.
Cookie Consent Tool
This website uses a "Cookie Consent Tool" to obtain effective user consent for cookies and cookie-based applications requiring consent. The "Cookie Consent Tool" is displayed to users upon page visit as an interactive user interface where consent for certain cookies and/or cookie-based applications can be given by ticking checkboxes. Through this tool, only consented cookies/services are loaded when the user gives their consent.
The tool sets technically necessary cookies to store your cookie preferences. Personal user data is generally not processed here.
If personal data is processed for storage, association, or logging of cookie settings (such as the IP address), it is done according to Art. 6 (1) lit. f GDPR based on our legitimate interest in a legally compliant, user-specific, and user-friendly consent management for cookies and thus in a legally compliant design of our online presence.
Further legal grounds for the processing include Art. 6 (1) lit. c GDPR. As the data controller, we are legally obligated to make the use of technically unnecessary cookies dependent on user consent.
Where necessary, we have entered into a data processing agreement with the provider to ensure the protection of the data of our site visitors and to prevent unauthorized disclosure to third parties.
More information on the operator and the settings options of the Cookie Consent Tool can be found directly in the corresponding user interface on our website.
G. Information Security Statement
We work hard to protect our users from unauthorized access to data, as well as unauthorized modification, disclosure, or destruction of data, by implementing various policies and procedures:
-
Encryption of our services with SSL certificates
-
Review of our procedures for collecting, storing, and processing information, including physical security measures, to protect it from unauthorized access to systems
-
Access to personal data is restricted to our employees, contractors, and authorized agents who need the information for processing on our behalf and who are bound by strict contractual confidentiality obligations and can be penalized if they fail to meet these obligations.
Our privacy policy applies to all services we offer, except those services that have separate privacy policies which do not include this one.
We regularly review our compliance with this privacy policy. We also adhere to various self-regulatory frameworks, including the GDPR. If we receive formal written complaints, we will contact the person who filed the complaint to address their request. We collaborate with the competent supervisory authorities, including the local data protection authority, to address complaints regarding the transmission of personal data that we cannot resolve directly with our users.
Our privacy policy may change from time to time. We will not reduce your rights without your explicit consent. We will publish all changes to the privacy policy on this page, and if the changes are significant, we will notify you (including an email notification for certain services).
I. Contact Us!
If you have any further questions regarding this privacy policy or the handling of your data, you can contact us at the following address:
MS SPIRIT HANDELS GmbH & Co. KG
Liechtensteinstraße 130/2
1090 Vienna
Austria
Email: datenschutz@timeaffair.com
Phone: +43 (1) 348 0370