Privacy Policy

In the following, we inform you about the collection of personal data when using our website. Personal data refers to all information related to an identified or identifiable natural person (excluding legal entities such as GmbH or AG). Personal data includes, in particular, information such as name, address, email address, or professional background.

§ 1 Controller

The controller pursuant to Article 4 (7) of the EU General Data Protection Regulation (GDPR) is:

Sonnenblatt GmbH
Wiener Straße 131,
4020 Linz, Austria
Email: info@sonnenblatt.com
(see also our legal notice/imprint)

§ 2 Collection of Personal Data When Contacting Us via Email, Contact Form, or When Placing an Order

When you contact us via email or through our contact form, the data you provide (in particular your email address, and if applicable your name and phone number) will be stored by us in order to respond to your inquiries.
When placing an order in our online shop, we collect and store the following data: name, address, telephone number, email address, and banking details – solely for the purpose of processing and fulfilling your order.
The legal basis for processing is Article 6 (1)(b) GDPR (pre-contractual/contractual measures). We delete the data once storage is no longer necessary or restrict processing if statutory retention obligations exist.

§ 3 Collection of Personal Data When Visiting Our Website

If you use our website for informational purposes only, i.e., without transmitting other data to us, we only collect the personal data that your browser sends to our server. This is technically necessary to display our website and ensure its stability and security (legal basis: Article 6 (1)(f) GDPR):

IP address
Date and time of the request
Time zone difference to Greenwich Mean Time (GMT)
Content of the request (specific page)
Access status/HTTP status code
Amount of data transferred
Website from which the request originates
Browser
Operating system and its interface
Language and version of browser software

In addition to the data mentioned above, cookies are stored on your device when using our website. Cookies are small text files stored on your hard drive associated with your browser, through which the party setting the cookie (in this case, us) receives certain information. Cookies cannot execute programs or transmit viruses. They serve to make the website more user-friendly and efficient.
Use of cookies:

a) This website uses the following types of cookies, the scope and function of which are explained below:

Transient cookies (see b)
Persistent cookies (see c)

b) Transient cookies are automatically deleted when you close your browser. These include session cookies that store a session ID allowing various browser requests to be associated with one session. This enables your device to be recognized when returning to our site. Session cookies are deleted when you close your browser.

c) Persistent cookies are automatically deleted after a set period, which may vary depending on the cookie. You can delete cookies at any time via your browser’s security settings.

d) You can configure your browser settings as you wish, for example to reject third-party cookies or all cookies. Please note that you may not be able to use all features of this website if you disable cookies.

§ 4 Use of Social Media Plug-ins

We currently use the following social media plug-ins: Facebook, Instagram, and Yelp. We use the so-called "two-click solution": When you visit our site, no personal data is transmitted to the plug-in providers by default. The provider of the plug-in can be identified by the logo or initial displayed. We offer the option to communicate directly with the plug-in provider via a button. Only when you click on the marked field and activate it, will the plug-in provider receive information that you have accessed the corresponding page on our website. The data mentioned in § 3 of this policy will also be transmitted. According to Facebook, IP addresses are anonymized immediately after collection in Germany. By activating the plug-in, personal data may be transferred to the plug-in provider and stored (in the case of US providers, in the USA). Since data collection mainly occurs via cookies, we recommend deleting all cookies via your browser settings before clicking on the plug-in.
We have no influence over the data collected or data processing operations, nor do we know the full extent of data collection, processing purposes, or storage periods. We also have no information regarding data deletion by the plug-in provider.
The plug-in provider stores data collected about you as user profiles and uses them for purposes such as advertising, market research, and/or customization of their website. This analysis also applies to users who are not logged in and is used in particular for targeted advertising and informing other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles; to exercise this right, please contact the respective plug-in provider. The use of plug-ins helps us to improve our online presence and make it more user-friendly. Legal basis for the use of plug-ins is Article 6 (1)(f) GDPR.
Data is transferred regardless of whether you have an account with the plug-in provider or are logged in. If you are logged in, the data collected on our site will be directly linked to your user account with the plug-in provider. If you activate the button (e.g., share content), the provider will also store this information in your profile and may share it publicly with your contacts. We recommend logging out of your social network accounts after use, particularly before activating any social plug-ins to prevent linking the data to your profile.
For more information on the purpose and scope of data collection and processing by the plug-in provider, please refer to the privacy policies provided by them. There, you will also find further information about your rights and how to protect your privacy.
Plug-in provider contacts and privacy policies:

(a) Facebook:
Facebook Inc., 1601 S California Ave, Palo Alto, CA 94304, USA
Privacy Policy: http://www.facebook.com/policy.php
Additional info:
http://www.facebook.com/help/186325668085084
http://www.facebook.com/about/privacy/your-info-on-other#applications
http://www.facebook.com/about/privacy/your-info#everyoneinfo
Facebook is certified under the EU-US Privacy Shield: https://www.privacyshield.gov/EU-US-Framework

(b) Instagram:
Instagram Inc., 1601 Willow Road, Menlo Park, CA 94025, USA
Website: https://www.instagram.com
Privacy Policy: https://instagram.com/about/legal/privacy

(c) Yelp:
Yelp Ireland Ltd., 70 Sir John Rogerson’s Quay, Dublin 2, Ireland
Privacy Policy: https://terms.yelp.com/privacy/en_us/20200101_en_us/

§ 5 Data Security

We implement technical and organizational security measures to protect personal data, particularly against accidental or intentional manipulation, loss, destruction, or unauthorized access. These measures are continuously adapted to the latest technological developments.

§ 6 Changes to this Privacy Policy

We reserve the right to update this privacy policy as necessary to reflect technical or legal changes, or to adjust our security and data protection measures accordingly. Please refer to the latest version of our privacy policy.

§ 7 Your Rights

You have the following rights regarding your personal data:

Right to access
Right to rectification or erasure
Right to restriction of processing
Right to object to processing
Right to data portability

You also have the right to lodge a complaint with a data protection supervisory authority regarding our processing of your personal data.
For questions about the collection, processing, or use of your personal data, or to request information, correction, blocking, or deletion of data, or to withdraw any consent or object to specific data use, please contact us by email: info@sonnenblatt.com