Data Protection

Preamble

With this privacy policy, S&C Holding GmbH, registered in the Commercial Register of the Commercial Court of Vienna under FN 366123t (hereinafter ‘S&C’), explains which personal data is processed when you visit the website https://www.sonnenschilf.at/.

Personal data is all information that can be used to identify a person and which can be traced back to a person – e.g. name, e-mail address, telephone number and IP address. S&C treats personal data confidentially and in accordance with the provisions of the General Data Protection Regulation (GDPR), the Data Protection Act (DSG), the Telecommunications Act (TKG), the E-Commerce Act (ECG) and other applicable provisions.

It should be borne in mind that data transmission on the Internet can generally be subject to security vulnerabilities. Complete protection against access by third parties cannot be realised.

Legal basis

The legal basis for the processing of data is our business licences for commercial trades, with the exception of regulated commercial trades for which automatic data processing is required. S&C only collects, uses and passes on personal data if this is permitted by law, is necessary for the contractual purpose or if the data subject has consented to the data processing.

Further legal bases for data processing are

(i) Pre-contractual measures, contract acceptance and fulfilment in accordance with Art 6 para 1 lit b GDPR, so that we can process enquiries or orders, for example,

(ii) Consent pursuant to Art. 6 (1) (a) GDPR in the context of registration,

(iii) Legal obligation pursuant to Art 6 (1) (c) GDPR, e.g. for the storage of order documents or invoices (business correspondence)

(iv) Legitimate interest pursuant to Art. 6 (1) (f) GDPR, in particular for marketing and advertising.

Collection and processing of data

We process the personal data provided to us by visitors or registered users through the use of our website (including all subpages), either in the context of mere surfing, an advert placed, an enquiry or message, a contract or communication.

The purposes of the processing primarily include the provision of the services available at www.sonnenschilf.at. We offer the following services: Rental of holiday properties

Other purposes of data processing are:

(i). Provision, troubleshooting and improvement of the services,

(ii). Recommendations and personalisation of features, products and services,

(iii). Communication with visitors and profile owners,

(iv). Compliance with various legal requirements (such as in connection with billing and contract data),

(v). Verification of asserted rights or obligations,

(vi). Administration, maintenance of security, fraud prevention and the ongoing improvement of the services at www.sonnenschilf.at or in the mobile applications.

A company that processes data on behalf of S&C is referred to as a processor. When we work with processors, we ensure that we enter into data processing agreements that set out how data may be processed.

In general, such an agreement stipulates that the processor may only process personal data on behalf of S&C and for clearly defined purposes.

Person responsible for data processing

The controller responsible for data processing is S&C Holding GmbH, 1070 Vienna, Halbgasse 1a, registered in the commercial register of the Commercial Court of Vienna under FN 366123t, e-mail: info@sonnenschilf.at

Types of users

Our website is aimed at both registered users (“registered visitors”) and non-registered users of the website (“visitors”).

Registered visitors: In order to make purchases in the webshop, customers must enter their contact details, namely address, first name and surname and e-mail address, in order to process a distance selling transaction. The duration of the storage of the data is limited by the upright consent to the data processing. After revocation of consent (at any time), your personal data will be deleted immediately and completely, unless this is prohibited due to legal obligations.

Visitors: Certain visitor data is also processed via server log files (website visited, time of access, amount of data sent in bytes, source/reference from which you accessed the page, browser used, operating system used, IP address used). The data collected is only used for statistical analysis and to improve the website. All data is processed anonymously, which means that a natural person can no longer be identified.

Rights of the users

You can contact S&C at any time to exercise your legal rights under the General Data Protection Regulation. These are:

(i) Right to information about their stored personal data, its origin and recipients and the purpose of the data processing,

(ii) Right to rectification,

(iii) Right to erasure of incorrect or unlawfully processed data,

(iv) Right to object,

(v) Right to withdraw consent,

(vi) Right to restriction of processing and blocking,

(vii) right to data portability.

If there are any changes to your personal data, please inform us accordingly.

A request for information, deletion, correction, objection and data transfer, in the latter case, provided that this does not cause a disproportionate effort, should be sent to S&C by e-mail.

Please attach a clear and comprehensible proof of identification so that we can send the data protection-compliant reply to the person actually concerned. S&C will respond to the request within one month at the latest and give reasons for any rejection. In the event of a justified request for erasure or rectification, this will also be forwarded to the recipients of personal data for processing by automated means.

Right to lodge a complaint with the supervisory authority

If you are of the opinion that the processing of your personal data by us violates the applicable data protection law or your data protection claims have been violated in any other way, you have the option of complaining to the competent supervisory authority.

The competent authority in Austria is the Data Protection Authority, Barichgasse 40-42, 1030 Vienna; telephone: +43 1 531 15-202525; fax: +43 1 531 15-202690; e-mail: dsb@dsb.gv.at; https://www.dsb.gv.at/.

Transmission to third parties / recipients in third countries

In order to fulfill the business purpose, we will also forward your data to third parties (account-holding credit institution, shipping companies for purchases in the web store, authorities, courts, tax consultants, IT service providers, tax authorities, providers, website hosting companies, insurance companies that we use and to whom we make data available), insofar as we need this data to fulfill our services. A lawful transfer of your data takes place exclusively on the basis of the GDPR.

S&C customers are entitled to withdraw a registration or delete an account at any time. In this case, S&C will delete all data of the respective customer immediately.

S&C does not request any sensitive data pursuant to Art. 9 (1) EU GDPR.

Consent to the use of data in accordance with the privacy policy

By giving their consent during the registration process, the customer agrees to the use of their personal data in accordance with the Privacy Policy.

Newsletter

If you subscribe to our newsletter and give us your consent (Art. 6 (1) (a) GDPR), we will process your name and email address for the purpose of sending you our newsletter. Your personal data will be stored until you unsubscribe from the newsletter or withdraw your consent. S&C does not currently publish a newsletter, so no periodic period of receipt is specified. You can revoke your consent or unsubscribe from the newsletter at any time by sending us a message to the e-mail address info@sonnenschilf.at.

Use of social media plug-ins

We use plugins from the following social networks (Instagram, Twitter, Youtube, Facebook), which are operated by the companies (Meta Platforms Inc., Youtube LLC, Twitter Inc.). You will find the exact address of the companies at the end of the paragraph. For this purpose, we use a two-stage procedure in which you can give your consent to the processing of data by the operator of the social network in accordance with Art. 6 para. 1 lit. a GDPR. Data is only transferred to the operator of the social network when users click on one of the icons displayed and thus consent to the transfer of data to the operator of the social network. A connection from your browser to the respective social network is only established after such consent has been given. The social network receives information about your visit to our websites via the plugin. If you are logged in to Instagram, Twitter, YouTube or Facebook, your visit can be assigned to your social network account. Any interactions with the plugin may be saved by the operator of the network. Information on the use of the data collected by the respective social network can be found on the company’s website in the “Data protection” or “Privacy” section at the URL given below:

Meta Platforms Inc, 1601 Willow Road, Menlo Park, CA 94304, USA, www.facebook.com / Data protection: https://www.facebook.com/privacy/policy

YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA, www.youtube.com / Data protection: https://policies.google.com/privacy?hl=en-US

Twitter, Inc, 795 Folsom St., Suite 600, San Francisco, CA 94107, USA, www.twitter.com / Data protection: https://twitter.com/de/privacy

Use of cookies

When you visit our website, we collect personal data to the extent technically necessary (name of the file accessed, date and time of access, amount of data transferred, notification of successful access, browser type and version, the user’s operating system, referrer URL and the requesting provider). This data cannot be assigned by us to specific persons and is not combined with data from other data sources.

We would like to point out that cookies are used when you visit our website. Cookies are small files or other types of information storage that are transferred from our web server or third-party web servers to the user’s web browser and stored there for later retrieval. The cookies used when visiting our website only serve the purpose of simplifying the shopping process (e.g.

by storing the items placed in a shopping cart) and to enable the use of certain functions of our web store. The cookies we use are deleted from your hard disk after you close your browser (session cookies). This data is collected on the basis of § 96 para. 3 TKG.

We also use cookies to statistically analyze the use of our website as part of the web analysis service Google Analytics (see below). This data is collected on the basis of Article 6(1)(f) GDPR. If you have previously consented to this in accordance with Art. 6 para. 1 lit. a GDPR, cookies from third-party providers are used during your visit to our website for the purpose of collecting and evaluating your usage behavior. Consent to this use of cookies is given by displaying a banner explaining the nature and scope of the use of these cookies and allowing you to consent to or reject the use of cookies. In any case, no such cookies will be used without your consent. If you do not accept cookies, the functionality of our website may be restricted.

Use of Google Analytics

We use Google Analytics, a web analytics service provided by Google LLC (“Google”), 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. As part of “Google Analytics”, cookies are placed on your computer to statistically analyze your use of our website. We have concluded a corresponding contract with Google for order data processing. The information generated by these cookies about your use of this website (including your IP address) is anonymized before it is stored on Google servers so that it can no longer be assigned to a computer. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. Google uses this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. You can find more information on how Google Analytics handles user data in Google’s privacy policy:

https://support.google.com/analytics/answer/6004245?hl=de.

You can prevent the collection of data generated by cookies and related to your use of the website and the processing of anonymized data by Google by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

However, we would like to point out that in this case you may not be able to use all functions of this website to their full extent.