Data Privacy Notice for Customers

This notice describes how "Hairdreams" Haarhandels GmbH, Floraquellweg 9, 8051 Graz, Austria ("we") processes your personal data in the scope of customer relations.

1. Purposes of Data Processing

We will process your personal data specified in Paragraph 2 for the following purposes:

• Initiation of business contacts regarding our range of delivery and services;
• Handling of sales processes and the performance of services;
• Operation of a web shop if you use it;
• Management of our customer relations, including cultivation of contacts and communication.

We obtain these data directly from you in the scope of sales processes and the operation of our web shop and salonfinder, respectively, or via our employees and sales agents who are in contact with you.

Personal data are provided on a voluntary basis. However, certain sales or communication processes will not be possible if you fail to provide your personal data.

1. Processed Data Categories and Legal Bases of Processing

We will process your personal data stated in Annex 1 including cookies (see Paragraph 3) either (i) on the basis of our predominant justified interest pursuant to Art. 6, Section 1, Subsection f, General Data Protection Regulation ("GDPR"), which consists in the efficient management of our customer relations, or (ii) on the basis of necessity for performance of a contract concluded with you (Art. 6, Section 1, Subsection b DSGVO).

In some cases, we will process the data mentioned above with your consent (Art. 6, Section 1, Subsection a) if you grant that to us in a separate process.

1. Cookies

So-called cookies are used on this website. A cookie is a small file which can be stored on your computer when you visit a website. Cookies are always used in order to offer users additional functions on a website. For example, they can be used in order to make navigation on a website easier for you, to make it possible for you to continue using a website where you left it, and/or store your preferences and settings for another visit to the website. Cookies can access, read or alter no other data on your computer.

Most of the cookies on this website are so-called session cookies. They are deleted automatically when you leave our website. However, permanent cookies will remain on your computer until you delete them manually in your browser. We use such permanent cookies to recognise you when you visit our website the next time.

When you want to control cookies on your computer, you can adjust your browser settings in such a way that you get a notification when a website wants to store cookies. You can also block cookies or delete them when they were already stored on your computer. If you want to find out more about how to take these steps, please use the "help" function of your browser.

Please note that the blocking or deleting of cookies could impair your online experience and hinder you from fully using this website.

1. Facebook Pixel

With your consent, we use the so-called “Facebook pixel” of the social network Facebook for the analysis and optimisation of our website. Facebook’s operating company is Facebook, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA and within the EU Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland.

With its help, we can track users’ actions after they’ve seen or clicked a Facebook ad (“Facebook ad”). This allows us to record the effectiveness of the Facebook ads for statistical and market research purposes. The data collected in this way is anonymous for us, i.e. we do not see the personal data of individual users. However, these data are stored and processed by Facebook, about which we inform you in accordance with our level of knowledge.

Facebook can connect this data to your Facebook account and also for its own advertising purposes (see Facebook’s data usage policy: https://www.facebook.com/about/privacy/). You can enable Facebook and its affiliates to display ads on and off Facebook. For these purposes, a cookie may also be stored on your computer.

This consent may only be declared by users older than 13 years old. If you are younger, we request you to ask your guardians for advice.

1. Google Analytics

This website uses Google Analystics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA („Google“). Google Analytics uses “cookies”, which are text files placed on your computer to help the website analyze how users use the site. We process your data on the basis of our overriding legitimate interest in cost-efficiently generating easy-to-use website access statistics.

The information generated by the cookie about your use of the website (including your IP address and the URLs of the accessed websites) will be transmitted to and stored by Google on servers in the United States. We do not store any of your personal data collected in connection with Google Analytics.

This website uses the IP anonymization feature provided by Google Analytics. Your IP address will therefore be truncated/anonymized by Google as soon as Google receives you IP address. On our behalf, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to us. Google will not associate your IP address with any other data held by Google.

You may refuse the use of cookies by selecting the appropriate settings on your browser. However, please note that if you do this, you may not be able to use the full functionality of this website. Furthermore, you can prevent Google’s collection and use of your data by downloading and installing the browser plug-in available under: https://tools.google.com/dlpage/gaoptout?hl=en-GB.

You can also refuse the use of Google Analytics on this website by clicking the following link. An opt-out cookie will be set on the computer, which prevents the future collection of your data when visiting this website: Deactivate Google Analytics

Further information concerning Google’s terms of use and privacy statement can be found at https://www.google.com/analytics/terms/gb.html or at https://policies.google.com/?hl=en&gl=uk.

1. Hotjar:

We use Hotjar in order to better understand our users’ needs and to optimize our service and the user experience. Hotjar is a technology service that helps us better understand our users experience (e.g. how much time they spend on which pages, which links they choose to click, what users do and don’t like, etc.) and this enables us to build and maintain our service with user feedback. Hotjar uses cookies and other technologies to collect data on our users’ behavior and their devices (in particular device's IP address (captured and stored only in anonymized form), device screen size, device type (unique device identifiers), browser information, geographic location (country only), preferred language used to display our website). Hotjar stores this information in a pseudonymized user profile. Neither Hotjar nor we will ever use this information to identify individual users or to match it with further data on an individual user. For further details, please see Hotjar’s privacy policy by clicking on this link.

You can opt-out of the creation of a user profile, Hotjar’s storing of data about your usage of our site and Hotjar’s use of tracking cookies on other websites by following this opt-out link.

1. Vimeo:

We present some videos on our website using services provided by Vimeo, LLC, 555 West 18th Street, New York, New York 10011, USA. When you visit a page which contains such Vimeo plugins, a connection is established with the Vimeo servers and the plugin is shown. This provides the Vimeo server with information about the pages you have visited on our website. If you are logged onto Vimeo as a member, then Vimeo will automatically assign this information to your personal user account. When you activate the plugin (e.g., by clicking the start button of a video), the corresponding information is also assigned to your user account. You can prevent the automatic assignment of this information to your Vimeo user account by logging out of your Vimeo account and deleting its respective cookies before logging onto our website. Vimeo may also place certain cookies on your computer – for more information on the cookies used by Vimeo, please visit https://vimeo.com/cookie_policy.

For more information about Vimeo’s data processing and their privacy policies, please visit https://vimeo.com/privacy.

1. Twitter

We have integrated functions of the social media platform Twitter into our website. These functions are provided by Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland. Twitter may place cookies on your computer - for more details, please consult Twitter’s Privacy Policy at https://twitter.com/en/privacy.

You have the option to configure your data protection settings on Twitter under the account settings at https://twitter.com/account/settings

1. YouTube

We present some videos on our website using services provided by the video platform YouTube which is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“YouTube”).

YouTube is providing us with statistics on visitors via aggregated demographic data on their location, age, gender, which videos are viewed for how long and from which device.

YouTube may place cookies on your computer – for details, please consult YouTube’s privacy statement at https://policies.google.com/privacy?hl=en

1. Instagram and Facebook

We have integrated functions of the social media platforms Instagram and Facebook which are operated by Facebook Ireland Limited, 4 Grand Canal Square Grand Canal Harbour Dublin 2 Ireland (“Facebook”), including the “Facebook-Pixel”.

Facebook is providing us with statistics on the activity, content and target group of visitors. Moreover, it can be assessed how many visitors watch our content (posts, stories and promotions) and where they found us.

With the help of the Facebook-Pixel, we can track users’ activities after they have seen or clicked a Facebook ad (“Facebook ad”). This allows us to record the effectiveness of the Facebook ads for statistical and market research purposes. The data collected in this way is anonymous for us, i.e. we do not see the personal data of individual users and cannot infer their identity. However, this data is stored and processed by Facebook. Facebook can connect this data to your Facebook account and also use it for its own advertising purposes (see Facebook’s data policy: https://en-gb.facebook.com/about/privacy/). This may enable Facebook and its affiliates to display ads on and off Facebook.

Facebook may place cookies on your computer – for details, you may also consult Instagram’s privacy statement at https://help.instagram.com/402411646841720 

1. Transfer of Your Personal Data

For the purposes indicated above, we will transfer your personal data to the following recipients:

• IT service providers employed by us;
• Associated companies;
• Banks for the handling of payment transactions;
• Legal representatives in the business case;
• Certified public accountants for the purposes of auditing;
• Courts;
• Administrative authorities in charge, in particular fiscal authorities;
• Collection agencies for the enforcement of payments;
• Outside financing firms such as leasing or factoring firms and assignees if the delivery or service is externally financed in that way;
• Contractual or business partners who contribute and/or are to contribute to the delivery or service;
• Insurance companies on the occasion of the conclusion of an insurance contract for the delivery/service or when an insured event occurs;
• Federal Institute "Statistik Österreich" for the drawing up of the (official) statistics required by law.
• Bitrix Inc. US Headquarters, 901 N. Pitt St, Suite 325, Alexandria VA 22314 USA

Some of the recipients stated above are located outside your country and process your personal data there. The data privacy level in other countries does not equal the one of your country in some circumstances. However, we will transfer your personal data only into countries for which the European Commission has decided that they dispose of an adequate level of data privacy, and we take measures to ensure that all recipients dispose of an adequate level of data privacy. For that purpose, we agree standard contact clauses (2010/87/EC and/or 2004/915/EC), for example. These are available on request at LD-M@hairdreams.com.

1. Duration of Storage

Your personal data will only be stored by us as long as we reasonably deem that necessary in order to effect the purposes stated in Paragraph 1 and that is admissible under applicable law. At any rate, we will store your personal data as long as the business relationship exists, there are statutory obligations to preserve records, or periods of limitation of potential legal claims have not expired yet.

1. Your Rights in Connection with Personal Data

Under current law, you have among others the right (according to the requirements of applicable law), (i) to verify which and whether we stored personal data about you and obtain copies of these data, (ii) to request correction, amendment or deletion of your personal data which are incorrect or are processed not in conformity with the law, (iii) to require us to restrict the processing of your personal data, (iv) to object to the processing of your personal data under certain circumstances or to revoke a consent previously given for processing, (v) to request data portability, (vi) to find out about the identity of third parties to whom your personal data are transmitted, and (vii) to file a complaint with the authority in charge.

1. Our Contact Data

Should you have any questions or concerns regarding the processing of your personal data, please contact us:

"Hairdreams" Haarhandels GmbH

Floraquellweg 9

8051 Graz, Austria

LD-M@hairdreams.com

Last updated on 17 March 2020

 

Annex 1 – Categories of Personal Data

• Serial number
• Name and designation, respectively
• Title/Sex
• Address
• Telephone and fax numbers and other information required for addressing resulting from modern means of communication (e.g. email)
• Date of birth
• Commercial register data
• Credit-worthiness data
• Stop indicators (e.g. contact stop, invoice stop, delivery stop, posting stop, payment stop)
• Assignment to a certain customer or supplier category
• Identification numbers for the purposes of official statistics, such as VAT ID number and Intrastat identification number
• Affiliation with a certain purchasing association, group
• Languages of correspondence, other agreements and code for data exchange
• Subject of delivery or service
• Bonus, commission data, and the like
• Contact of the data subject for the handling of the delivery or service
• Third parties involved in service provision including information about the type of involvement
• Terms of delivery and service (including information about the place of delivery or performance, packaging, etc.)
• Data regarding customs clearance (e.g. country of origin, customs tariff number) and export control
• Data regarding the insurance of the delivery or service and regarding the financing of it
• Data regarding tax liability and tax calculation
• Terms of financing and payment
• Bank accounts
• Credit card numbers and firms
• Credit management data (e.g. credit limit, bill of exchange limit)
• Data regarding the payment or performance behaviour of the data subject
• Dunning data/lawsuit data
• Account and supporting document data
• Service-specific expenses and returns
• Special general ledger items (e.g. bad debt provision, note receivable, deposit, bank guarantee)
• Associated customer, supplier or third party
• Additional data regarding addressing at the customer's, supplier's or third party's
• Languages of correspondence, other agreements and code for data exchange
• Capacity of the data subject with the recipient of performance or provider of the service
• Scope of the power to represent
• Prohibition of a transfer of the data to address publishers
• Description of profession, line of industry and business
• Civil status
• Inquiry interests (on the basis of the former inquiry behaviour or information given by the customer himself/herself vis-à-vis the controller)
• Purchasing power classification
• Customer service data (such as: advertising material sent, intervals between visits, etc.)
• Buying behaviour (frequency and volume)
• Other response behaviour in connection with advertising activities of the controller
• Data regarding bonus and perquisites resulting from the capacity of customer or prospective customer
• Capacity or area of responsibility taken care of at the customer's or the prospective customer's
• Deadline management data
• IP address, cookies, information about the browser used by you, the websites visited by you, the website visited by you before visiting the web shop (if you use our web shop)
• Date and time salonfinder-query
• Land from which the salonfinder query was issued