Data privacy

Thank you for visiting our online shop and for your interest in our products. Here at Lena Hoschek GmbH, we want you to enjoy using our website without having to worry about the privacy of your personal information. Therefore, transparency concerning the use of our customers’ data is a priority for us. We would now like to outline which personal data we collect and for which purposes. We also summarise your rights in respect of personal information.

Art. 4 (1) GDPR defines ‘personal data’ as any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

A. General Information
I. Name and address of the controller

B. Data Processing Procedures
I. Provision of the website
II. Use of cookies
III. Data processing when using our online shop
IV. Newsletter
V. Contact form, telephone and e-mail address

C. Rights of the Data Subject
D. Miscellaneous

I. Scope of your obligation to provide data to us
II. Forwarding to third parties
III. Version

We take data protection extremely seriously, particularly where the collection, use and processing of personal data collected in the course of your use of the Lena Hoschek Online Shop is concerned.

Valid from Dec. 01, 2023

• Important contact details for the controller: (see below A I)
• Categorie of Data
  
  We process the following categories of personal information:
  • transaction details of purchases made through the Lena Hoschek Online Shop,
  • communication data collected during the use of online forms, e-mail and/or telephone,
  • technical specifications of your devices collected when you visit our website,
  • pseudonymised data collected by web analysis toolsIn some places, this data is directly available (e.g. in the course of your purchase transaction) and in others it is collected automatically (e.g. when you visit our online shop).

• Purpose of Processing
  We process your data specifically in order to provide the services linked with purchases made through our Lena Hoschek Online Shop, as well as for the purposes of analysis with the aim of continuously improving and adjusting our services to facilitate the best possible shopping experience.

• Legal Basis
  Your data is required in order to fulfil purchase contracts concluded via the Lena Hoschek Online Shop and in pursuit of our legitimate interest.Where consent is required by law, we request that you provide such consent.

• Categories of recipients of your data
  In addition to the controller, external service providers who support us in the performance of our services may, under certain circumstances, have access to certain types of personal information. Your data is not currently processed outside the EU.

• Duration of data storage
  In principle, we process and store your data for the duration of our contractual relationship and to attain the objectives connected with the processing in each case. Where required by the law, certain personal information is also stored for a longer period.

• Your data protection rights, in particular the right to object (C. below)
  Under certain circumstances, you are entitled to assert data protection rights against us. We would like in particular to draw your attention to your right to object: where certain grounds are given relating to your particular situation, you have the right to object to the processing of your data if the lawfulness of the processing is based on overriding legitimate interests or if the data processing relates to profiling or direct advertising. As a rule, if you have objected, we will no longer process your data.

For the purposes of the General Data Protection Regulation, the national data protection laws in the EU Member States and other data protection provisions, the controller of the Lena Hoschek Online Shop is:

Lena Hoschek GmbH
Längenfeldgasse 27/7a
1120 Vienna
Phone: 0043 50 309 100
E-mail: office@lenahoschek.com

Duis autem vel eum iriure dolor in hendrerit in vulputate velit esse molestie consequat, vel illum dolore eu feugiat nulla facilisis at vero eros et accumsan et iusto odio dignissim qui blandit praesent luptatum zzril delenit augue duis dolore te feugait nulla facilisi. Lorem ipsum dolor sit amet, consectetuer adipiscing elit, sed diam nonummy nibh euismod tincidunt ut laoreet dolore magna aliquam erat volutpat.

Ut wisi enim ad minim veniam, quis nostrud exerci tation ullamcorper suscipit lobortis nisl ut aliquip ex ea commodo consequat. Duis autem vel eum iriure dolor in hendrerit in vulputate velit esse molestie consequat, vel illum dolore eu feugiat nulla facilisis at vero eros et accumsan et iusto odio dignissim qui blandit praesent luptatum zzril delenit augue duis dolore te feugait nulla facilisi.

Where you use our website for purely informative purposes, that is, if you do not register with us or otherwise submit information, we collect only the personal information transmitted to our server by your browser when you visit our website:

• – IP-address (in anonymised, abbreviated form if applicable)
• – date and time of access,
• – time zone difference from Greenwich Mean Time (GMT),
• – content of the request (specific page),
• – access status/HTTP-status code,
• – volume of data transmitted,
• – website from which the request originated,
• – browser type,
• – operating system and interface,
• – language and version of browser software.

This data is also stored in our system logfiles. The data is not at any time stored together with other personal information. The anonymous data of the server-logfiles is stored separately from all personal information submitted by a data subject.

a) Third-party hosting services
In the course of order processing, a third-party service provider renders hosting services and services relating to the display of the website. This serves to safeguard our overriding legitimate interest in the correct display of our website. All data collected during the use of this website or submitted in the forms provided in the online shop as described below, are processed on its servers. Processing on other servers takes place only as described herein. The third-party service provider is based in an EU or EEA Member State.

2. Legal Basis for Data Processing
The legal basis for the temporary storage of the data is Art. 6 (1) lit. f GDPR.

3. Purpose of Data Processing
When you view our website, we collect the data stated in section 1. which is required for technical purposes in order to display our website correctly and to guarantee the stability and security of the system. Data is stored in logfiles in order to ensure the functionality of the website. In addition, this data helps us to optimise the website and to ensure the security of our IT-systems. These purposes also establish our legitimate interest in the data processing pursuant to Art. 6(1) lit. f GDPR.

4. Duration of Data Storage
The data is deleted as soon as it is no longer required for the attainment of the purpose for which it was collected. In the case of the collection of data required in order to correctly display the website, this is the case if the session has ended, i.e. when you leave our website.

5. Right to Object and Right to Have Data Removed or Deleted
The recording of data for the provision of the website and the storage of data in logfiles is vital for the operation of the Internet site. Therefore, there is no option for the user to object to this.

II. Cookies

1. Description and scope of data processing

We hope to make our services as individualised as possible in future and are constantly striving to improve our services, in order to provide interesting information and an enjoyable shopping experience. To this end, we sometimes use cookies. Cookies are small text files stored on your hard drive and allocated to your browser through which certain information is transmitted to the party that installed the cookie (in this case, us). This kind of cookie contains a unique series of characters that allows the browser to be unequivocally recognised the next time you visit the website. Cookies cannot run programmes or transmit viruses to your computer. We use cookies in order to make our website more user-friendly. Cookies can be disabled in the browser settings. However, please note that certain cookies are required in order to use all of the functions provided on our website.

We use both session-cookies, which are used only for the duration of a single online visit, as well as those that are used for longer. Longer-term cookies are used to enable us to provide customers with relevant settings in the Lena Hoschek Online Shop that appear every time you use the site, such as individually tailored information to increase ease of use and to present offers based on your previous shopping activities.

We use the following types of cookies, the scope and function of which is explained below:

• Transient cookies (e.g. Session Cookies) (see a)
• Persistent cookies (see b).

a) Transient Cookies
As a rule, transient cookies – which include, in particular, “session cookies” – are automatically deleted when you close the browser or the session has expired. These cookies store a session-ID, which is used to allocate various requests from your browser to the same session. This allows your device to be recognised the next time you visit our website. Session cookies are generally deleted when you log out or close the browser window. Session cookies store and transmit the following data:

• Language settings
• Log-in information
• Visitor-ID
• Time stamp with start and finish time of the current session.

b) Persistent Cookies
Persistent cookies are automatically deleted after a specified period, which differs from one cookie to another. You can delete or disable cookies in the security settings of your browser at any time. Data is collected and stored to facilitate the proper display and optimisation of our website; based on this data, user profiles are created using pseudonyms. However, user profiles are never combined with data relating to the bearer of the pseudonym without the explicit consent of the user. When they access the website, visitors are informed of the use of cookies for analysis purposes and referred to this Privacy Policy.

a) Social Media Cookies
This website features social media plug-ins to allow users to recommend and share articles on social media, such as Facebook, Instagram, Twitter and Pinterest. We use a two-phase procedure; data intended for third parties is transmitted only when you, the website visitor, click on one of the icons displayed in the social media bar. Lena Hoschek has no influence over or access to the cookies used by Facebook, Twitter, etc.

b) Web Analysis
If you consented to this pursuant to Art. 6(1) sentence 1 lit. a GDPR, this website uses Google (Universal) Analytics, a web analysis service provided by Google LLC (www.google.de). Google (Universal) Analytics uses various methods that allow it to analyse your use of the website, such as, for example, cookies. The automatically collected information on your use of this website is as a rule transmitted to our Google server in the USA, where it is then stored. As a result of the activation of IP-anonymisation on this website, the IP-address is abbreviated prior to transmission within the member states of the European Union and in EEA states. Only in exceptional cases is the full IP-address transmitted to a Google server in the USA and abbreviated there. The anonymized IP address transmitted by your browser in the course of Google Analytics is as a rule not combined with other data held by Google. Where the intended purpose ceases to apply and when our use of Google Analytics comes to an end, the data collected in this connection will be deleted.

Google LLC is headquartered in the USA and certified under the EU-US-Privacy Shield. Click here to view the current certificate. Based on this agreement between the USA and the European Commission, the latter has verified that companies certified under the Privacy Shield Programme have an appropriate level of data protection.

You can withdraw your consent at any time by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de . This prevents the recording of the information created by the cookie relating to your use of the website (including your IP-address), as well as the processing of this data by Google.

Alternatively, click here to prevent Google Analytics from recording any data on this website in future. This installs an opt-out cookie on your device. If you delete cookies, you will be asked to provide consent again.

c) Facebook Custom Audiences
Our website uses Facebook Website Custom Audiences. To this end, Facebook Pixel is integrated into our website. Facebook pixel is Javascript Code. The pixel generates a checksum (hash value) from your user data which is submitted to Facebook, e.g. browser information. If it is installed, the Facebook Cookie is also activated and your Facebook-ID is transmitted. If you have a Facebook profile and log in to your Facebook account, the data transmitted by the pixel allows individualised advertising for Lena Hoschek products and offers to be displayed. Facebook rejects unused the data of users who do not have a Facebook profile. For further information on the purpose and scope of the data collection, as well as the further processing and use of the data by Facebook and privacy settings, please visit Facebook’s privacy policy at https://de-de.facebook.com/privacy/explanation.

If you do not wish the relevant data to be collected, you can object using the following link and disable data collection: https://de-de.facebook.com/help/769828729705201/

2. Legal Basis for the Data Processing
The legal basis for the processing of data through the use of cookies is Art. 6 (1) lit. f GDPR.

3. Purpose of the Data Processing
Transient cookies are used in order to make our website simpler to use for the individual user. Some functions on our Internet site cannot be provided without using cookies. For these pages, the browser needs to be recognised even when the user switches between different pages. Therefore, transient cookies are used to ensure the basket function works, to record language settings and to recognise search terms.
Persistent analysis cookies are used in order to improve the quality of our website and its content. The analysis cookies tell us how the website is used, thus enabling us to constantly improve our offering.
Without your consent, analysis data is collected only in anonymised or pseudonymised form. We are then unable to personally identify you. These purposes establish our legitimate interest in the processing of personal information pursuant to Art. 6 (1) lit. f GDPR.

4. Duration of Storage, Right to Object and Option to Have Data Removed
Cookies are stored on your computer, from where they transmit information to our website. As such, you, the user, have full control over the use of cookies. You can restrict or disable cookies via your Internet browser settings. Existing cookies can be deleted at any time. Such deletion can also be automated. Please note that you can configure your browser settings such that you are notified of the installation of cookies and can decide on a case-by-case basis whether to accept them or to disable cookies for certain cases or across the board. Every browser is different in terms of how it manages cookie settings. An explanation can be found in the help menu of every browser, which also describes how to change cookie settings. The instructions for the various browsers can be found by clicking on the following links:

Internet Explorer: http://windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies
Firefox: http://windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies
Chrome: http://windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies
Safari: https://support.apple.com/kb/ph21411?locale=de_DE
Opera: http://help.opera.com/Windows/10.20/de/cookies.html

Please note that disabling cookies may result in the functionalities of our website being restricted.

III. Data Processing during use of our online shop
1. Description and Scope of Data Processing

a) Purchases in the Online Shop
If you shop in the Lena Hoschek Online Shop, the followting personal information can be collected, processed and used in order to process your order:

• surname,
• name,
• title,
• invoice and delivery address,
• e-mail address,
• telephone number,
• payment information

(“Customer Master Data”).

When your data is transmitted to us, it is encrypted using the latest security standard – SSL 128bit encryption (SSL = Secure Socket Layer) (TLS 1.2). The security certificate is issued by Let’s Encrypt.

To ensure the best possible experience for our customers, as legally permitted, we share your personal information with other companies employed by us as order processors exclusively for the proper performance of the contract and only to the extent necessary. We furthermore ensure that your data is at all times processed only in accordance with our instructions.

b) Payment Method
PayPal, Apple Pay, credit card and immediate transfer data is not stored, but is instead collected and processed by our payment service provider, “PAYONE GmbH”. We use technical and organisational measures to secure our website and other systems against the loss, destruction, unauthorised access, alteration or dissemination by unauthorised persons of your personal information.

c) Customer Account
Your customer account can only be accessed by entering your personal password. You should always keep your log-in information confidential and close the browser window once you have finished using our website, in particular if you are viewing the website from a shared computer.

d) Parcel Tracking
After placing an order through our online shop, you will be sent status updates from the carrier of your parcel. To this end, we provide your e-mail address to SUXESS LOGISTIC GmbH, Wagramer Straße 120, Top 37, 1220 Wien, Austria, which are bound by law to comply with data protection requirements. To object to this, simply send an e-mail to the following address: office@lenahoschek.com

e) Availability Updates
You can also sign up to receive e-mail updates to be notified when an item is back in stock. We will use your e-mail address to notify you of the status of the item concerned.

2. Legal Basis for the Data Processing
a) The legal basis for the processing of your data in the course of placing an order and shopping in our online shop is Art. 6 (1) lit. b GDPR.
b) The legal basis for the transmission of your data to external payment services providers is Art. 6 (1) lit. a and b GDPR.
c) The legal basis for the parcel tracking is Art. 6 (1) lit. b GDPR.
d) The legal basis for the availability updates is Art. 6 (1) lit. a GDPR. You can withdraw your consent at any time by e-mailing office@lenahoschek.com.

3. Purpose of the Data Processing
a) We use the personal information transmitted to us in the course of your use of our online shop to initiate and process purchase contracts concluded via the online shop, as well as for customer service and support services. In addition, we also use your personal data to assert rights relating to the purchase contracts initiated or concluded with you.
b) The processing of your data during payment is carried out for the purposes of making payment using the method selected by you.
c) The provision of your e-mail address to delivery services is carried out for the purpose of keeping you updated as to the status of your shipment, to allow you to plan accordingly for when the parcel is due to arrive.
g) Data processing for availability updates is carried out in order to notify you as soon as the item concerned is available in your size.

4. Duration of Data Storage
As a rule, we process and store your data for the duration of our contractual relationship. This also includes the initiation of a contract (precontractual legal relationship).

In the event of the conclusion of a contract, all data relating to the contractual relationship is stored until such time as the mandatory statutory storage period under tax law (7 years) has expired.

Your name, address, items purchased and order data are furthermore stored until the warranty period under product liability law expires (10 years). The data processing is carried out based on the statutory provisions set forth in Section 96 (3) Telecommunications Act (Telekommunikationsgesetz, TKG) as well as Art 6 (1) lit. a (consent) and/or lit. b (necessary for the performance of a contract) of the GDPR.

IV. Newsletter
You can subscribe to our newsletter via the website. To subscribe, you need to provide your e-mail address and submit a declaration that you consent to the subscription. To allow us to provide targeted information, we also collect and process voluntary information on areas of interest, date of birth, post code and language.

As soon as you register for the newsletter, we will send you a confirmation e-mail with a link to confirm your subscription. You can unsubscribe at any time. There is a link at the bottom of every newsletter via which you can unsubscribe from the newsletter. Detailed information on the newsletter available from our website can be found in the separate privacy policy applicable to the newsletter.

V. Contact Form and E-mail Contact, Telephone Number
1. Description and Scope of Data Processing
Our website features a contact form, an e-mail address and telephone number. You can also contact us via various social media platforms (Facebook, Instagram). This means you can contact our customer service team directly. If and insofar as you contact us using the contact form provided on our website by e-mail, telephone, fax or through social media platforms and wish to find out about your orders or customer status, to enable us to properly process your request you may need to provide certain personal information, such as name, address, e-mail address, date of birth, order or invoice number. This data is used solely to verify and process your request. In the event that you contact us via a social media platform, please note that these platforms are not owned or controlled by Lena Hoschek, meaning that it is not possible to protect and maintain the confidentiality of the information provided via the social media platform. Should you have any questions concerning data protection, please contact the owner and operator of the social media platform in question.

In this context, data is not shared with third parties. The data is used solely for the purposes of processing the interaction.

2. Legal Basis for the Data Processing
The legal basis for the processing of the data you provide in the course of submitting your request is Art. 6 (1) lit. f GDPR. If the contact has the intent of concluding a contract, the additional legal basis for the processing is Art. 6 (1) lit. b GDPR.

3. Purpose of the Data Processing
The processing of the personal information submitted through the contact channel in each case serves solely the processing of your request and the handling of the issue to which the request relates. This establishes the necessary legitimate interest in processing the data.

The other personal data processed during the submission serves to prevent abuse of the contact form and to help guarantee the security of our IT-systems.

4. Duration of Data Storage
The data is deleted as soon as it is no longer required for the attainment of the purpose. This applies to the personal data from the input screen for the contact form, as well as the information sent by e-mail if the conversation with the user concerned has ended. The conversation has ended if it can be concluded from the circumstances that the issue concerned has been conclusively resolved. Under certain circumstances, however, we may need to store certain personal information from the communication for longer (e.g. as evidence if in the course of the conversation agreements are reached concerning purchases made, goodwill decisions by Lena Hoschek, agreements on payments, claims based on defects, etc.).

Under certain circumstances, you can assert data protection rights against us:

• Right to withdraw consent: if you consented to certain types of processing activities, you can at any time withdraw such consent for the future. Such withdrawal of consent does not, however, have any effect on the lawfulness of the processing prior to the withdrawal of consent or insofar as the processing is justified on a different legal basis.
• Right to information: Pursuant to Art. 15 GDPR, you have the right to obtain information on which of your personal information we store.
• Right to rectification: Pursuant to Art. 16 GDPR, we will on request rectify any inaccurate or erroneous personal information.
• Right to rectification: If you wish, we will delete your data pursuant to the basic principles set forth in Art. 17 GDPR.
• Right to restriction of processing: Taking account of the prerequisites set forth in Art. 18 GDPR, you can request that we restrict the processing of your data.

Right to object: In addition, pursuant to Art. 21 GDPR you can object to the processing of your data. This right to object applies where there are grounds relating to your particular situation and only with respect to data processing that is lawful based on an overriding interest, concerning profiling or for the purposes of direct marketing. If you object, we will no longer process your data, unless we are entitled by law to reject your objection. An objection to direct marketing, including profiling, is binding for us, which means that we are no longer permitted to process your data for these purposes.
If you consented to direct marketing and no longer wish to receive such direct advertising, you need to withdraw your consent.

• Right to data portability: You also have the right to obtain your data pursuant to the rules set forth in Art. 20 GDPR in a structured, customary, machine-readable format or to transmit it to a third party.
• Complaint to the Data Protection Authority: Furthermore, you have the right to lodge a complaint with any competent data protection supervisory authority (Art. 77 GDPR). If you think there has been an infringement of data protection law or that your data protection rights have otherwise been contravened, you can lodge a complaint with the data protection supervisory authority.

I. Scope of your duty to provide personal information
You need only provide the data required for the initiation and performance of the contractual relationship or for a pre-contractual relationship with us or which we are required, by law, to collect. Without this data, we will as a rule not be able to conclude the contract or further execute it. This can also relate to data required later on in the course of the contractual relationship. If we request additional information from you, you will be notified separately of the voluntary nature of the information concerned.

II. Forwarding to third parties
Lena Hoschek GmbH has access to your data only insofar as this is necessary for the attainment of the objectives in line with the internal allocation of tasks. To this end, within the company only those departments that require access will be permitted to access your data.

Service Providers: We have commissioned service providers who as order processors have access to your data and process this data on our behalf for specific purposes specified by us. These order processors can be providers of marketing services, website-hosting services, IT-support services, website analysis services or shipping services.

Other third parties: If necessary for legal or statutory reasons, we are also required to provide certain data to third parties. These may be official bodies, external advisors, business partners, courts, experts as well as executive bodies within the company and supervisory bodies, where necessary.
International data transfer: Although all recipients are currently based in the EU/EEA, it cannot be excluded that recipients will, in future, be located in a country outside the EU/EEA that does not provide a level of data protection comparable to that in Europe. In particular, service providers may, in future, be located in the USA. In this case, Lena Hoschek will either select service providers certified under the US-EU Privacy Shield Program (Art. 45(1) GDPR) or which have agreed with Lena Hoschek the EU standard data protection clauses adopted by the EU Commission (Art. 46 (2) (c) or (d) GDPR).

III. Version
This privacy policy was last updated on Dec 01, 2023. Lena Hoschek GmbH reserves the right from time to time to update or amend this Privacy Policy.