1. IN GENERAL
1.1. We, the team of strategy sprints e.U., Inhaber Mag. Simon Severino, FN 466071z (the “Company“), e-mail address: firstname.lastname@example.org (the “E-Mail Address“), process your personal data when you use our website, www.strategysprints.com (the “Website”), download the tools provided on theWebsite or buy something in our webshop (the “Webshop”). We deal with your provided personal data in a confidential and responsible way. The processing of your personal data takes place in compliance with the General Data Protection Regulation (”GDPR“) and the Austrian data protection act in its current form.
1.3. To avoid unauthorized access to your personal data and generally secure such data, we and our partners apply the following safety measures: encrypted transmission, encrypted storage and an authorization concept. Those safety measures are constantly revised to comply with the latest technological developments.
1.4. The controller for the data processing within the meaning of the GDPR is the Company. You can contact us via mail under the address above or via e-mail to the E-Mail-Address.
2. DATAWhen you use our Website, we process certain of your personal data (“Data”).
2.1. Website Data. The Company processes the following personal data that your browser communicates to our server when you access our Website (“Website Data”): IP-address; date and time stamp; time difference to GMT; requested site; access status/HTTP status code; transmitted data volume; site from which the request was sent; browser; operating system and interface; and language and version of the browser software.2.2. Contact Data. The Company processes the following personal data that you make available to us when registering for the newsletter (“Contact Data”), registering for our tools-download or purchasing one of our products name e-mail address type of tool downloaded product downloaded product purchased2.3. Payment Data. In order to purchase a digital product in our Webshop, you have to additionally provide the following data (“Payment Data”) address, zip code, city, country; and payment informationWe use a payment provider (ThriveCart) to process payments. Although we do not store any payment credentials information ourselves, we store a payment ID number that is given out by ThriveCart and can be allocated to a person by that payment provider. Please see 4.2.3 below for more detailed information.
3. WHY WE PROCESS YOUR DATA
3.1. Purpose. The purposes (the “Purposes”) of the data processing are,3.1.1. with regards to 2.1 above, the technical necessity in order to display the Website correctly and guarantee the necessary stability and safety; and3.1.2. with regards to 2.2 above, to send out our topic-related newsletters.We limit the collection of Data to only that information which is necessary for the Purposes. We do not direct our site to, nor do we knowingly collect any Data from children under the age of fourteen.3.2. Lawfulness of Processing. The lawfulness of processing (Art. 6 GDPR) stems from,3.2.1. with regards to 2.1 above, Art. 6 sec 1 subsec f (legitimate interests, namely, to offer a secure and safe web experience and to learn from the general use of the Website);3.2.2. with regards to 2.2 above, Art 6 sec 1 subsec a (consent) and Art 6 sec 1 subsec b (fulfillment of contract).
4. TRANSFER OF DATA
5. STORAGE AND DELETION
Storage Period. We store your Data differently depending on the respective type of Data and respective Purpose of the processing of your Data.5.1.1. Website Data. We process your Website Data only as long as you are using the Website. After leaving the Website the Website Data is deleted automatically.5.1.2. Contact Data. We store your Contact Data as long as you are subscribed to the newsletter.5.1.3. Payment Data. We store any Payment Data only as long as we need them for the processing of your order. Beyond that, we only store personal data, if it is legally necessary (because of warranty, limitation or retention periods) or otherwise required.5.2. Deletion.5.2.1. Data will be deleted immediately if (a) you revoke your consent to the storage directly via e-mail to the E-Mail Address or via unsubscribe button in the newsletter, (b) Data is not needed for the Purposes anymore, or (d) the storage is or becomes legally impermissible.5.2.2. A deletion request does not affect Data, if the storage is legally necessary, for example for accounting purposes.
6. INFORMATION ABOUT RIGHTS
6.1. Exercise of Rights. Pursuant to Article 13 of the GDPR, you have certain rights regarding your Data. To exercise the rights defined in Section 6.2 to 6.8, please send a request via e-mail to the E-Mail Address or via mail to the postal address depicted in the legal notice on the Website. Please find the currentcontact details under http://www.strategysprints.com/impressum/.6.2. Revocation of Consent. You can revoke the consent for future data processing at any time. However, this does not affect the lawfulness of Data processing based on the consent before the revocation. Should the processing of Data be lawful due to another reason stated in 3.2 , we may continue toprocess your Data on these grounds.6.3. Right of Access. You have the right to obtain (i) confirmation as to whether or not your Data is being processed by us and, if so, (ii) more specific information on the Data. The more specific information concerns, among others, processing purposes, categories of Data, potential recipients or the duration of storage.6.4. Right to Rectification. You have the right to obtain from us the rectification of inaccurate Data concerning you. In case the Data processed by us is not correct, we will rectify these without undue delay and inform you of this rectification.6.5. Right to Erasure. Should you decide, you do not want us to process your data any further, please contact us under our current contact details http://www.strategysprints.com/impressum/. We will erase your Data immediately and inform you of this process. Should mandatory provisions of law prevent such erasure, we will inform you without undue delay thereof.6.6. Right to Restriction of Processing. You have the right to obtain from us a restriction of processing of your Data in the following cases:6.6.1. You make an inquiry pursuant para. 6.4 , if you so request;6.6.2. you are of the opinion, that the processing of your Data is unlawful, but are opposed to an erasure of Data;6.6.3. you still require the Data for the establishment, exercise or defense of legal claims; or6.6.4. you have objected to the processing pursuant para. 6.8 .6.7. Right to Data Portability. You have the right to (i) receive your Data in a structured, commonly used and machine-readable format and (ii) transmit those Data to another controller without hindrance from us.6.8. Right to Object. You have the right to object at any time to the processing of Data based on our legitimate interests, including profiling and direct marketing purposes.6.9. Right to Lodge a Complaint. You have the right to lodge a complaint with a supervisory authority (in Austria: Datenschutzbehörde), if you think that the processing of Data infringes applicable law, especially the GDPR.
7. COOKIES AND ANALYTICS