1. Privacy at a glance
General information
The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to identify you personally. For detailed information on data protection, please see the privacy notice below.
Data collection on this website
Who is responsible for collecting data on this website?
The website operator processes data on this website. You can find the operator’s contact details in the “Data controller” section of this notice.
How do we collect your data?
We collect data that you provide to us, for example by email or telephone.
Our IT systems collect other data automatically or with your consent when you visit the website. This is primarily technical data, such as your browser, operating system or the time you accessed the page. This data is collected automatically as soon as you visit the website.
What do we use your data for?
Some data is collected to ensure that the website operates correctly. Other data may be used to analyse your browsing behaviour. Where contracts can be concluded or initiated through the website, the data provided is also processed for contractual offers, orders or other enquiries about placing an order.
What rights do you have regarding your data?
You have the right at any time to obtain information free of charge about the source, recipients and purpose of your stored personal data. You also have the right to request rectification or erasure. If you have consented to processing, you may withdraw your consent at any time with effect for the future. In certain circumstances, you may request restriction of processing. You also have the right to lodge a complaint with the competent supervisory authority.
You can contact us at any time about these rights or any other data protection questions.
Cookies
Our website uses no tracking or marketing cookies. Technically necessary cookies may be used to keep the website secure and functioning correctly. This applies in particular to the security features of our provider Cloudflare, such as protection against DDoS attacks and malicious access. These technically necessary cookies do not store profiles for advertising or analytics and do not require consent.
When you select a language, we store that choice locally in your browser. If you dismiss a language suggestion, we remember that choice for the current session. Your browser’s language setting may be used to suggest a language. We do not use your IP address to determine your location.
2. Hosting
We host our website content with the following provider:
External hosting through Cloudflare Pages
This website is hosted and delivered through Cloudflare Pages. The provider is Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA.
When delivering the website, Cloudflare processes data including IP addresses, technical connection data, metadata and communications data, and website access data.
Hosting serves the performance of contracts with prospective and existing customers (Article 6(1)(b) GDPR) and our legitimate interest in delivering the website securely, quickly and efficiently (Article 6(1)(f) GDPR).
Processing on our behalf
Where Cloudflare processes personal data on our behalf, it does so under a data processing agreement pursuant to Article 28 GDPR.
Transfers to third countries
Using Cloudflare may involve transfers of personal data to third countries, in particular the United States. Cloudflare is certified under the EU–U.S. Data Privacy Framework. Where necessary, transfers also rely on standard contractual clauses approved by the European Commission and supplementary safeguards.
Content delivery network (CDN) and security service – Cloudflare
We use Cloudflare as a content delivery network (CDN) and security service to protect this website from attacks such as DDoS attacks and to improve loading times. The provider is Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA.
When you visit our website, your request is routed through Cloudflare’s servers. Technical usage data is processed, including your IP address, content accessed, date and time of access, volume of data transferred, browser, operating system and referrer URL. This processing protects our website from abusive access and attacks and keeps it stable, secure and fast.
We use Cloudflare on the basis of our legitimate interest in providing our online services as securely and efficiently as possible (Article 6(1)(f) GDPR). We have concluded a data processing agreement with Cloudflare under Article 28 GDPR.
Using Cloudflare may result in transfers of personal data to third countries, in particular the United States. Cloudflare is certified under the EU–U.S. Data Privacy Framework (DPF) and also uses the EU standard contractual clauses as appropriate safeguards under Article 44 et seq. GDPR to ensure an adequate level of data protection.
3. General and mandatory information
Data protection
The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with applicable data protection law and this privacy notice.
When you use this website, various types of personal data are collected. Personal data is data that can be used to identify you personally. This notice explains which data we collect, how we collect it, and what we use it for.
Data transmission over the internet, for example by email, may have security vulnerabilities. Complete protection against access by third parties is not possible.
Data controller
The controller responsible for processing data on this website is:
deCon Handels GmbH
Jessengasse 6
1190 Vienna, Austria
Telephone: +43 664 2337601
The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data such as names and email addresses.
Retention period
Unless this notice specifies a more specific retention period, we retain your personal data until the purpose for processing it no longer applies. If you make a valid request for erasure or withdraw your consent, we erase your data unless we have another lawful reason to retain it, such as a retention period under tax or commercial law. In that case we erase the data once those reasons cease to apply.
General information on the legal bases for processing on this website
If you have consented to processing, we process your personal data under Article 6(1)(a) GDPR or, where special categories of data under Article 9(1) GDPR are processed, Article 9(2)(a) GDPR. Where you expressly consent to the transfer of personal data to third countries, processing is also based on Article 49(1)(a) GDPR. Where you have consented to the storage of information on your device or access to information on it, processing is also based on Section 25(1) TDDDG. You may withdraw your consent at any time.
If your data is necessary to perform a contract or take pre-contractual steps, we process it under Article 6(1)(b) GDPR. We also process data necessary to comply with a legal obligation under Article 6(1)(c) GDPR. Processing may also be based on our legitimate interests under Article 6(1)(f) GDPR. The following sections describe the legal basis applicable in each case.
Recipients of personal data
In the course of our business, we work with various external parties. In some cases, this requires transferring personal data to those parties. We disclose personal data only where necessary for the performance of a contract, where legally required (for example, disclosure to tax authorities), where we have a legitimate interest in disclosure under Article 6(1)(f) GDPR, or where another legal basis permits it. When using processors, we disclose our customers’ personal data only under a valid data processing agreement. In cases of joint processing, we conclude a joint processing agreement.
Recipients of personal data may include the following provider:
- Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA (hosting through Cloudflare Pages, content delivery network and security service)
Withdrawing your consent to data processing
Many processing operations are possible only with your express consent. You can withdraw consent you have already given at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
Right to object in particular circumstances and to direct marketing (Article 21 GDPR)
Where processing is based on Article 6(1)(e) or (f) GDPR, you have the right at any time to object to the processing of your personal data on grounds relating to your particular situation. This also applies to profiling based on those provisions. If you object, we will cease processing the personal data concerned unless we can demonstrate compelling legitimate grounds for processing that override your interests, rights and freedoms, or unless processing serves the establishment, exercise or defence of legal claims.
If your personal data is processed for direct marketing, you have the right at any time to object to processing for such marketing. This also applies to profiling to the extent that it relates to direct marketing. If you object, your personal data will no longer be processed for direct marketing purposes.
Right to lodge a complaint with the competent supervisory authority
If the GDPR is infringed, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work or the place of the alleged infringement. In Austria, this is the Austrian Data Protection Authority. This right is without prejudice to other administrative or judicial remedies.
Right to data portability
You have the right to receive data that we process by automated means on the basis of your consent or in performance of a contract, or to have it provided to a third party, in a commonly used, machine-readable format. If you request direct transmission to another controller, this will be done only where technically feasible.
Access, rectification and erasure
Under applicable law, you have the right at any time to obtain information free of charge about your stored personal data, its source and recipients, and the purposes of processing. Where applicable, you also have the right to request rectification or erasure. You can contact us at any time about these rights or other questions concerning personal data.
Right to restriction of processing
You have the right to request restriction of the processing of your personal data. You can contact us about this at any time. This right applies in the following circumstances:
- If you contest the accuracy of your personal data, we generally need time to verify it. You have the right to request restriction for the duration of that verification.
- If processing of your personal data was or is unlawful, you may request restriction instead of erasure.
- If we no longer need your personal data but you require it for the establishment, exercise or defence of legal claims, you may request restriction instead of erasure.
- If you have objected under Article 21(1) GDPR, your interests must be weighed against ours. You may request restriction while it is being determined whose interests prevail.
Where processing has been restricted, the data may, apart from storage, be processed only with your consent, for the establishment, exercise or defence of legal claims, for the protection of the rights of another natural or legal person, or for reasons of important public interest of the European Union or a Member State.
SSL or TLS encryption
This website uses SSL or TLS encryption for security and to protect confidential information in transit, such as enquiries you send to us as the website operator. You can recognise an encrypted connection when your browser’s address changes from “http://” to “https://” and by the padlock icon in your browser.
When SSL or TLS encryption is enabled, the data you send us cannot be read by third parties in transit.
Objection to unsolicited advertising emails
We object to the use of contact details published to comply with legal disclosure requirements for sending advertising or information that has not been expressly requested. The operators reserve the right to take legal action in the event of unsolicited advertising, including spam emails.
4. Data collection on this website
Server log files
The website provider automatically collects and stores information in server log files that your browser transmits automatically. This includes:
- Browser type and version
- Operating system
- Referrer URL
- Hostname of the accessing computer
- Time of the server request
- IP address
This data is not combined with other data sources.
Collection is based on Article 6(1)(f) GDPR. The website operator has a legitimate interest in ensuring that the site displays correctly and in optimising it. Server log files are necessary for these purposes.
Enquiries by email or telephone
If you contact us by email or telephone, we store and process your enquiry and the personal data it contains, including your name, contact details and the contents of the enquiry, to respond to it. We do not disclose this data without your consent.
We process this data under Article 6(1)(b) GDPR if your enquiry relates to the performance of a contract or is necessary for pre-contractual steps. In all other cases, processing is based on our legitimate interest in responding effectively to enquiries (Article 6(1)(f) GDPR) or on your consent (Article 6(1)(a) GDPR) where it has been requested. You may withdraw your consent at any time.