Privacy Policy

Cookie Guide & Data Privacy Policy

Legal basis (EU General Data Protection Regulation and Austrian Data Protection Act 2018)

The EU General Data Protection Regulation protects the fundamental rights and freedoms of natural persons, in particular their right to the protection of personal data. Personal data refers to all information relating to an identified or identifiable natural person.

Website operator and controller of data processing
Genuss-Card GC GmbH Hauptstraße 2a 8280 Fürstenfeld, Austria
By using our website, you consent to us collecting certain data. In return, we undertake to protect your data in accordance with the current state of the art. We do not pass on your data to third parties for advertising purposes. We only provide third parties with your personal data in the manner described in these data protection provisions.

Cookies & plugins
Cookies are used on our website genusscard.at to make our website more user-friendly and to provide you as a user of our website with tailored content. None of the cookies used on our website collect information that can personally identify you. Almost every website uses cookie technologies. Cookies are necessary for the use of genusscard.at.

Cookies are small text files that enable recognition of the user and analysis of your use of our website. Some cookies are extremely useful because they can improve the user experience when you revisit a website that you have visited several times before. Provided you use the same device and browser as before, cookies remember, for example, your preferences, tell us how you use our pages, and make the content displayed more relevant to your personal interests and needs. When you visit our websites, we only set cookies that are absolutely necessary to operate our website genusscard.at or to provide a service that you have expressly requested (e.g. holiday requests, brochure orders). Furthermore, cookies are used to store optionally selected settings from a previous visit to the website (e.g. language, interests, etc.). Otherwise, we only collect and store data in personal form by setting cookies after your express consent. If you do not wish this to happen, you can configure your browser to inform you about the setting of cookies and only allow this on an individual basis. Disabling cookies may restrict the functionality of our website. Adjust cookie settings By giving your express consent, you agree to the use of the following cookies & plugins:

Use of Facebook social plugins Our concern within the meaning of the GDPR (legitimate interest) is to improve our offer as well as analyze, optimize and operate our website economically. Therefore, we use social plugins (“plugins”) from the social network facebook.com, which are operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”). The plugins can display content such as graphics, text posts, or videos on the website, or elements for interaction. You can recognize them by one of the Facebook logos (“f” on a corresponding background, the “thumbs up” sign, or the terms “Like” or “Gefällt mir”), or the label “Facebook Social Plugin.” You can view the list and appearance of Facebook social plugins here: https://developers.facebook.com/docs/plugins/. Facebook is certified under the Privacy Shield agreement and therefore provides a guarantee of compliance with European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active). Further information regarding data collection by Facebook, further processing and use of the data, as well as user rights and privacy protection settings can be found in Facebook’s privacy policy: https://www.facebook.com/about/privacy/.

Facebook Pixel (Visitor Action Pixel)
With your consent, we use the visitor action pixel of Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”) on our website. This service enables us to track the behavior of users after they have been redirected to our website by clicking on a Facebook ad. This allows us to evaluate the effectiveness of Facebook ads and optimize future advertising measures. The data collected is anonymous to us and does not provide any conclusions about the identity of the user. However, Facebook stores and processes the data so that a connection to the respective user profile is possible, and Facebook can use the data for advertising purposes, in accordance with the Facebook Data Use Policy (facebook.com/about/privacy). You can enable Facebook and its partners to display advertisements on and off Facebook for this purpose. Furthermore, a cookie may be stored on your computer for this purpose. By using our website, you agree to the use of the visitor action pixel. You can object to the collection by the Facebook pixel and the use of your data for displaying Facebook ads. To do this, you can visit the page set up by Facebook and follow the instructions for adjusting your usage-based advertising settings: https://www.facebook.com/settings?tab=ads, or declare your objection through the US website http://www.aboutads.info/choices/ or the EU website http://www.youronlinechoices.com/at/. The settings are platform-independent, i.e. they apply to all devices such as desktop computers or mobile devices.

 

Facebook Custom Audiences
This website uses Custom Audiences, a web analytics service provided by Facebook Ireland Limited (“Facebook”). Facebook Custom Audiences uses tracking tools (such as pixels, SDKs, and APIs) that are implemented on the website genusscard.at. This allows data about actions that people take on the genusscard.at website (“event data”) to be transferred to a server of Facebook Inc. in the USA and stored there in order to create custom audiences of people who have visited our genusscard.at website (“Custom Audiences from genusscard.at”). In connection with such audience targeting and optimization, Facebook does the following: Facebook uses the event data collected from our genusscard.at website to optimize ads, but only after such event data has been aggregated with other data collected by other advertisers or in other ways on Facebook. Facebook does not allow any other advertiser or third party to target their ads solely on the basis of event data that they have collected from our genusscard.at website.

By clicking “Accept” on the cookie banner and visiting our genusscard.at website, the user agrees to the following terms: Third parties, including Facebook, may use cookies, web beacons, and other storage technologies to collect or receive information from genusscard.at and other places on the internet, and then use this information for the provision of measurements and the targeting of advertising. Users of our genusscard.at website can object to the collection and use of information for targeting purposes, and users can access a mechanism to make such a choice (e.g. www.aboutads.info/choices or http://www.youronlinechoices.eu/)

Instagram Content and features of the Instagram service may be integrated into our online offering. They are offered by Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA. These may include content such as images, videos, or texts and buttons with which users can interact with the content. If users are members of Instagram, Instagram can associate the call of the content and features with the respective profiles of the users. Instagram’s privacy policy: http://instagram.com/about/legal/privacy/.

LinkedIn Content and features of the LinkedIn service may be integrated into our online offering. They are offered by LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. This may include content such as images, videos, or texts and buttons with which users can interact with the content. If users are members of LinkedIn, LinkedIn can assign the calling of the content and features to the respective user profiles. Privacy policy of LinkedIn: https://www.linkedin.com/legal/privacy-policy.

LinkedIn
LinkedIn is certified under the Privacy Shield agreement, which provides a guarantee of compliance with European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000L0UZAA0&status=Active).

Vimeo
Our website may also contain videos from the “Vimeo” platform. They are offered by Vimeo Inc., Attention: Legal Department, 555 West 18th Street New York, New York 10011, USA. Privacy policy: https://vimeo.com/privacy.

Youtube
Our website may also contain videos from the “YouTube” platform. They are offered by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy policy: https://www.google.com/policies/privacy/, Opt-Out: https://adssettings.google.com/authenticated.

Google Analytics
On our website, we use the web analytics service Google Analytics, provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). Google Analytics uses cookies, which are stored on your computer and allow an analysis of website usage. The information generated by the cookie about your use of the website is usually transmitted to a Google server in the USA and stored there. Google complies with the privacy provisions of the “US Safe Harbor” agreement. Google will use this information on our behalf to evaluate your use of the website, to compile reports on website activity, and to provide other services related to website activity and internet usage to website operators. We only use Google Analytics with active IP anonymization. This means that the IP address of users is shortened by Google within member states of the European Union or other states party to the agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. You can prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google, as well as the processing of this data by Google, by downloading and installing the browser plugin available under the following link: tools.google.com/dlpage/gaoptout. We use the functions of Google Analytics to analyze website usage, e.g. in the form of anonymized evaluations and graphics of page views and visits, as well as for remarketing, reports on impressions in the Google Display Network, integration of DoubleClick Campaign Manager, and Google Analytics reports on performance by demographic characteristics and interests. Google Analytics stores cookies in your web browser for two years since your last visit. These cookies contain a randomly generated user ID that can be recognized during future website visits. The recorded data is stored together with the randomly generated user ID, allowing the evaluation of pseudonymous user profiles. This user-related data is automatically deleted after 14 months. Other data is stored indefinitely in aggregated form. For more information on terms of use and privacy, please visit www.google.com/analytics/terms/de.html or www.google.de/intl/de/policies/.

Google Tag Manager
On our website, we use “Google Tag Manager,” a service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter referred to as “Google”). Google Tag Manager allows us as marketers to manage website tags via an interface. The tool Google Tag Manager, which implements the tags, is a cookie-less domain and does not itself collect personal data. Google Tag Manager triggers other tags, which in turn may collect data. Google Tag Manager does not access this data. If deactivation has been made at the domain or cookie level, it remains in effect for all tracking tags implemented with Google Tag Manager. Google has submitted to the EU-US Privacy Shield Agreement and certified its compliance with European data protection regulations. For more information, please refer to the following link: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active Third party information: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. For more information on privacy, please visit the following Google websites: Privacy policy: http://www.google.de/intl/de/policies/privacy FAQ Google Tag Manager: https://www.google.com/intl/de/tagmanager/faq.html Terms of use Google Tag Manager: https://www.google.com/intl/de/tagmanager/use-policy.html

 

Google Advertising Network, Remarketing, and DoubleClick
Google uses the DoubleClick cookie on websites within the Google Advertising Network and certain Google services to assist AdWords customers and publishers in displaying and managing ads on the web. When you visit a website and view or click on an ad displayed on websites within the Google Advertising Network, a DoubleClick cookie may be placed in your browser. The DoubleClick cookie identifier assigned to your browser is the same one used when visiting websites that use DoubleClick advertising programs. If your browser already has a DoubleClick cookie, another one should not be placed. For more information about the use of DoubleClick cookies in relation to the DoubleClick privacy program, please refer to the frequently asked questions about DoubleClick privacy. In addition, our website uses remarketing with Google Analytics for online advertising, which involves the use of cookies by third parties, including Google. By using a combination of first-party cookies (such as Google Analytics cookies) and third-party cookies (such as DoubleClick cookies), ads can be presented to you based on your previous visits to this website and can be optimized and evaluated. With the help of remarketing, information about your browsing behavior is collected and stored in an anonymous form for marketing purposes (targeting/retargeting). This data is stored on your computer using cookies. An algorithm can then be used to display targeted product recommendations as personalized advertising banners on other websites (so-called publishers). Under no circumstances can this data be used to personally identify you as a visitor to this website. The collected data is only used to improve the offering. We also use cookies from the Google Marketing Service “Google AdWords”; based on the Google Marketing Service “AdSense” and its cookies, we may display third-party ads. For more information on data usage for marketing purposes by Google, please visit https://policies.google.com/technologies/ads. The Google Privacy Policy is available at https://www.google.com/policies/privacy. We also use the “Google Tag Manager” to integrate and manage the analysis and marketing services offered by Google on our website.

Google Maps
We use the maps of the “Google Maps” service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy Policy: https://www.google.com/policies/privacy/. Opt-Out: https://adssettings.google.com/authenticated.

 

Google Fonts
We use fonts (“Google Fonts”) from the provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy Policy: https://www.google.com/policies/privacy/, Opt-Out: https://adssettings.google.com/authenticated.

Google ReCaptcha
We use the “ReCaptcha” function to prevent bots from making inputs in online forms. It is offered by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy Policy: https://www.google.com/policies/privacy/, Opt-Out: https://adssettings.google.com/authenticated.

Sharing and embedding of social media elements
Our website includes share buttons of the social networks Twitter Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107, USA, Facebook, 1601 South California Avenue, Palo Alto, CA 94304, USA, YouTube, from YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA, Instagram from Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA, and GooglePlus of the social network Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States. All share buttons are set up in compliance with data protection regulations. Only when you click on the respective “Share” button on our website (and only then) will a direct connection be established between your browser and the server of the operator of the respective social network. According to the operators of the aforementioned social networks, no personal or company-related data is collected by the social networks without a click on the respective share button. Such data, including the IP address, is only collected and processed for logged-in members. If you do not wish to associate your visit to our website with your respective user account on the social network, please log out of your user account on the respective social network. We would like to point out at this point that as the provider of the website, we have no knowledge of the content of the data transmitted to and from social networks, nor of their use by the social networks. For further information on data usage by social networks, please refer to the privacy policies of the aforementioned social networks.

 

Social media presence We maintain online presences within social networks and platforms in order to communicate with users, interested parties, and customers who are active on these platforms. When accessing these networks and platforms, the terms and conditions and data processing policies of the respective operators apply. Unless otherwise specified in our privacy policy, we process user data when they communicate with us on social networks and platforms.

Collection of anonymous data and information Every time a user accesses our website, i.e. every time a file on this server is accessed or attempted to be accessed, data on this process is stored in a log file (log file). This data is not personal; we cannot therefore trace which user accessed which data. We also do not attempt to collect this information. In detail, the following data record is stored for each access:

(1) Name of the accessed file
(2) Date and time of access
(3) Transferred data volume
(4) Notification of whether the access was successful
(5) Notification of why an access may have failed
(6) The name of your Internet service provider, through which you access our website
(7) Operating system and browser software of your computer if applicable, as well as
(8) The website from which you visit us. All the data mentioned is evaluated by us and by order processors commissioned by us solely for statistical purposes. We use this data to make our website even better for you.

Contact form and electronic inquiries
If you send us inquiries by email to office@genusscard.at or via a contact form, your information from the email or the inquiry form, including the contact details you provide there, will be stored by us for the purpose of processing the inquiry and, if necessary, passed on to the contact partners for further processing of the inquiry. After the inquiry has been processed, your data will be deleted.

 

Catalog and brochure ordering
If you would like to receive the catalogs or brochures offered on our website, we require the information requested in the order form, which enables us to fulfill the contract. We use this data exclusively for the delivery of the requested information and do not pass it on to third parties unless they are involved in the shipment process. After the order has been processed, your data will be deleted.

Other collection and processing of personal data
If there is an opportunity to enter personal or business data (email addresses, names, addresses) within our internet offerings – such as ordering brochures or vouchers as well as newsletters – the user provides this data on an expressly voluntary basis. If you send us an email, your email address and other personal data will only be used for individual correspondence with you. The use and payment of all services we offer is permitted – as far as technically possible and reasonable – without providing personal data or by providing anonymized data or a pseudonym.

Use of image data (events, etc.)
We have pictures (photos/videos) taken at various events, especially at press conferences and other events organized by us, or where people perform or appear in our premises or for us or with our support. Prior to invitations and events, it is indicated that photography will take place. If the media privilege (§ 9 DSG) is not applicable, the photographer is instructed to obtain consent from small groups that are depicted. If larger groups are photographed at the events, the images are used to make our organization better known and promote the image of our organization, and we publish these images on the internet and possibly in printed information about our organizations (legitimate interest).

If you are photographed in a small group or as an individual, the photographer will ask for your consent before taking the picture. If you do not agree, you will have the opportunity to step aside and not be included in the photo. If the media privilege (§ 9 DSG) is not applicable, you have the right to revoke your consent at any time for the future. In the event of revocation, the recordings will be removed if technically possible, and efforts will be made to remove them from any other media. Print brochures will not be destroyed after a revocation. Upon receipt of the revocation, the data will no longer be processed for the purpose. If costs arise due to revocation and any prohibition of further use, and there is no legitimate interest in a revocation, the costs of the changes must be borne by the person concerned.

There is a right to object within the framework of legal regulations if the processing is based on legitimate interests. Since you have entered a public space for an event in which our organization has an interest, this expectation must also be taken into account when objecting. If the data is published on our own website, it will be deleted after the copyright protection period has expired or if consent is revoked. If this data is published on social networks, the data will only be deleted if consent is revoked.

 

Subscribe to our newsletter
Subscribing to our newsletter is done through the double opt-in procedure. After registering, you will receive an email asking you to confirm your subscription. You can unsubscribe from the newsletter by clicking on the unsubscribe link at the end of each newsletter. We engage a service provider to send our newsletter, and they are obligated to comply with applicable data protection regulations. For further information about the service provider we engage, please email us at office@genusscard.at.

Your rights as a data subject

Right to confirmation
As a data subject, you have the right to request confirmation from us as to whether personal data concerning you is being processed by us. You can contact us at any time at office@genusscard.at for this purpose.

Right to information
As a data subject, you have the right to obtain free information from us at any time about the personal data stored about you and a copy of this information. You can contact us at any time at office@genusscard.at for this purpose. Your right to information includes the following information:
(1) The purposes of the processing,
(2) The categories of personal data processed by us,
(3) The recipients or categories of recipients to whom the personal data have been or will be disclosed,
(4) Where possible, the planned duration for which your personal data will be stored, or, if not possible, the criteria used to determine that duration,
(5) The existence of your right to rectify or erase the personal data concerning you or to restrict its processing by us as the data controller, or to object to such processing,
(6) The existence of a right to lodge a complaint with the Austrian Data Protection Authority as the supervisory authority,
(7) If your personal data are not collected from you as the data subject, all available information about the origin of the data.

As part of the operation of our websites, we engage software service providers and agencies who may have access to your personal data in the course of their activities. They have committed to us to comply with applicable data protection regulations. You can request more information about the service providers we have engaged by contacting us at office@genusscard.at. Furthermore, as a data subject, you have the right to be informed whether your personal data has been transferred to a third country or an international organization. If this is the case, you have the right to obtain information about the appropriate safeguards in connection with the transfer.

 

Right to rectification
As the data subject, you have the right to request from us the immediate rectification of any inaccurate personal data concerning you. You can contact us at any time at office@genusscard.at to exercise this right.

 

Right to erasure (right to be forgotten) As the data subject, you have the right to request from us the immediate erasure of any personal data concerning you, provided that one of the following grounds applies and to the extent that the processing is not necessary:

(1) Your personal data have been collected or otherwise processed for purposes for which they are no longer necessary.
(2) As the data subject, you have withdrawn your consent on which the processing pursuant to Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR was based, and there is no other legal ground for the processing.
(3) As the data subject, you have objected to the processing pursuant to Art. 21(1) GDPR and there are no overriding legitimate grounds for the processing, or you have objected to the processing pursuant to Art. 21(2) GDPR.
(4) Your personal data have been unlawfully processed.
(5) The erasure of your personal data is necessary for compliance with a legal obligation under Union or Austrian law to which we, as the controller, are subject.

If one of the above-mentioned grounds applies and you, as the data subject whose personal data is stored by Genuss-Card GC GmbH, want to request the erasure of your data, you can contact us at any time at office@genusscard.at to exercise this right.

 

Right to Restriction of Processing
As a data subject affected by the processing of personal data, you have the right to request from us as the data controller the restriction of processing if one of the following conditions applies:

(1) The accuracy of your personal data is contested by you as the data subject, for a period enabling us as the data controller to verify the accuracy of your personal data.
(2) The processing is unlawful, and you as the data subject oppose the erasure of your personal data and instead request the restriction of their use.
(3) We as the data controller no longer need your personal data for the purposes of processing, but you as the data subject require them for the establishment, exercise or defense of legal claims.
(4) You as the data subject have objected to processing pursuant to Art. 21(1) GDPR and it is not yet determined whether the legitimate grounds of the controller override those of the data subject. If any of the above conditions apply and you, as a data subject whose personal data is stored by Genuss-Card GC GmbH, wish to request the restriction of the processing of such data, you can contact us at any time at office@genusscard.at.

 

Your right to data portability
As a data subject, you have the right to receive the personal data concerning you, which you have provided to us as the data controller, in a structured, commonly used and machine-readable format. You also have the right to transmit those data to another controller without hindrance from us, where the processing is based on consent pursuant to Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR or on a contract pursuant to Art. 6(1)(b) GDPR, and the processing is carried out by automated means, provided that the processing is not necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller. Furthermore, in exercising your right to data portability under Art. 20(1) GDPR, you have the right to have your personal data transmitted directly from us as the data controller to another controller, where technically feasible and provided that this does not adversely affect the rights and freedoms of others. To exercise your right to data portability, you can contact us at any time at office@genusscard.at.

 

Right to object
As a data subject, you have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is based on Article 6(1)(e) or (f) GDPR. You can contact us at any time at office@genusscard.at to exercise this right. If we process your personal data for direct marketing purposes, you have the right as a data subject to object at any time to processing of personal data concerning you for such marketing.