Privacy Policy
In this privacy policy we inform you about the processing of your personal data.
If you want to change your privacy settings (grant consent or revoke your previously granted consent), click here to change your settings.
Responsible
Gerber Art, Gerber Art, Rosentalstrasse 45, 9582 Gerber Art, AT, support@gerber-art.at, +436769662201
Hosting
Hetzner Online GmbH
Our website is hosted by our processor Hetzner, Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany.
Connection data are processed to provide and to deliver the website. Data are not stored beyond access for the mere purpose of delivery and provision of the website.
The legal basis of processing is the legitimate interest (absolute technical necessity to provide and to deliver the “website” service which you have explicitly requested by visiting the website according to Article 6 (1) (f) GDPR.
Connection data and other personal data are also processed in connection with various other functions or services in order to operate the website. Detailed information is provided in this Data Privacy Statement and in the individual functions or services.
Server Log Files
Connection data are processed to monitor the technical function and to increase the reliability of our webhost. The duration of processing is limited to days.
The legal basis of processing is the legitimate interest (absolute technical necessity of a server log file as fundamental data basis for failure analysis and for security measures in connection with the “website” service which you have explicitly requested by visiting the website) according to Art. 6 (1) (f) GDPR.
Contact Form
You can contact us by using a contact form provided on our website. After submission of the contact form, the controller will process the personal data you have provided for the purpose of handling your request on the basis of your consent which you have given by submitting the form according to Art. 6 (1) (a) GDPR, until revocation.
You have no legal or contractual obligation to provide personal data. If you do not provide such data, you are simply not able to submit and we are not able to process your request.
Promotional contest or game form
We process the data you have provided for the purpose of the game in order to carry out the game on the basis of the contract concluded according to Art. 6 (1) (b) GDPR until the end of the game.
You have no legal or contractual obligation to provide personal data. However, you have to provide such data if you want to participate in the game. You simply cannot participate in the game if you do not provide such data.
Registration Form
You can register on our website. After you have registered, we will process the data provided in the registration form for the performance of the contract based on the contract concluded with us with your registration according to Art. 6 (1) (b) GDPR.
You have no legal or contractual obligation to provide personal data. You simply cannot register for the service if you do not provide such data.
Data are not transferred to third parties.
Comments Form
By commenting our products, postings, photographs or videos we will process your personal data for the purpose of imaging your comments on our website and internal documentation of the legal basis of the contract concluded according to Art. 6 (1) (b) GDPR (gratuitous hosting contract to image your commentation on our website). We will publish your name and comment on our website and store your personal data until deletion of your comment.
Embeddings
If you have given your consent, we will process your personal data in cooperation with Twitter, Twitter, Inc., 1355 Market Street 900, San Francisco, California 94103, USA, as joint controllers for the purpose of providing Twitter services on our website.
We will enable the service to collect connection data, data of your web browser, and to place advertising cookies. The placing of advertising cookies allows Twitter to create an individual user-ID for each user. These personal data can be used for unambiguous identification and are then processed via the advertising network operated by Twitter.
Any further independent processing of data by Twitter is carried out by Twitter as sole controller. Detailed information is provided in the Data privacy policy of Twitter.
If you do not give your consent, we are simple not able to provide the Twitter service to you. You can withdraw your consent by changing the settings at Privacy policy.
The legal basis of processing is your consent according to Article 6 (1) (a) GDPR. The legal basis for data transfer to the USA is your consent in accordance with Art. 49 Para. 1 a in conjunction with Art. 6 Para. 1 a GDPR. Before you gave your consent, you were informed that the USA does not have a data protection level that complies with EU standards. In particular, US intelligence agencies can access your data without being informed about it and without you being able to take legal action against it. For this reason, the European Court of Justice ruled in a judgment that the previous adequacy decision (Privacy Shield) was invalid.
If you have given your consent, we will process your personal data in cooperation with Instagram, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland as joint controllers for the purpose of providing Instagram services on our website.
We will enable the service to collect connection data, data of your web browser, and to place advertising cookies. The placing of advertising cookies allows Facebook to create an individual user-ID for each user. These personal data can be used for unambiguous identification and are then processed via the advertising network operated by Facebook.
The Facebook group transfers your personal data to the USA. The legal basis for data transfer to the USA is your consent in accordance with Art. 49 Para. 1 a in conjunction with Art. 6 Para. 1 a GDPR. Before you gave your consent, you were informed that the USA does not have a data protection level that complies with EU standards. In particular, US intelligence agencies can access your data without being informed about it and without you being able to take legal action against it. For this reason, the European Court of Justice ruled in a judgment that the previous adequacy decision (Privacy Shield) was invalid.
Any further independent processing of data by Facebook is carried out by Facebook as sole controller. Detailed information is provided in the Data privacy policy of Facebook.
If you do not give your consent, we are simple not able to provide the Facebook services to you. You can withdraw your consent by changing the settings at Privacy policy.
The legal basis of processing is your consent according to Article 6 (1) (a) GDPR.
If you have given your consent, we will process your personal data in cooperation with Facebook, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland as joint controllers for the purpose of providing Facebook services (e.g. Facebook Like Button, Facebook Like Box) on our website.
We will enable the service to collect connection data, data of your web browser, and to place advertising cookies. The placing of advertising cookies allows Facebook to create an individual user-ID for each user. These personal data can be used for unambiguous identification and are then processed via the advertising network operated by Facebook.
The Facebook group transfers your personal data to the USA. The legal basis for data transfer to the USA is your consent in accordance with Art. 49 Para. 1 a in conjunction with Art. 6 Para. 1 a GDPR. Before you gave your consent, you were informed that the USA does not have a data protection level that complies with EU standards. In particular, US intelligence agencies can access your data without being informed about it and without you being able to take legal action against it. For this reason, the European Court of Justice ruled in a judgment that the previous adequacy decision (Privacy Shield) was invalid.
Any further independent processing of data by Facebook is carried out by Facebook as sole controller. Detailed information is provided in the Data privacy policy of Facebook.
If you do not give your consent, we are simple not able to provide the Facebook services to you. You can withdraw your consent by changing the settings at Privacy policy.
The legal basis of processing is your consent according to Article 6 (1) (a) GDPR.
Web Shop
You can buy products directly via our webshop. If you do so, the data you provide and the data of the products you have selected will be processed by the controller in order to provide you with an offer, for the conclusion of the contract, for the performance of the contract and for the fulfillment of post-contractual obligations prior to the conclusion of the contract based on the pre-contractual relationship initiated by you and, after conclusion of the contract, based on the contract according to Art. 6 (1) (b) GDPR.
If you use an already existing customer account to buy our products or have created a customer account to buy the products, your personal data will be processed until you delete your customer account.
When customers buy our products via a guest checkout, their personal data will be processed until the legal retention periods have expired.
Your data are processed for the purpose of direct marketing in a manner compatible with the purpose of performing the contract in forms not requiring consent, such as addressed advertising materials sent by post, until you object.
You have no legal or contractual obligation to provide personal data. However, the provision of data is necessary for the conclusion of the contract. If you do not provide such data, a contract cannot be concluded.
Shopping carts of non-registered users will be deleted after 14 days, at the latest. User accounts of registered users are active until the account is deleted by the user. Contract data are processed until the limitation period of potential post-contractual obligations has expired.
Payments are processed via:
Service: PayPal
Provider: PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, 2449 Luxenburg
Service: Stripe
Provider: Stripe,Inc. 185 Berry Street, Suite 550, San Francisco, CA 94107, USA
Analysis Services
Google Analytics
If you give your consent, we will process your personal data in cooperation with the service Google Analytics, Google LLC, Amphitheatre Parkway, Mountain View, CA 94043, USA, as joint controllers for the purpose of failure analysis and statistical analysis of our website. A failure to give consent will have no immediate impact on the function of the website, although a lack of statistic data will make it more difficult for us to sophisticate the website. You can revoke your consent by changing the settings at Privacy settings.
We will enable the service to collect connection data, data of your web browser and data of accessed content and to execute analysis software and to store data on your terminal device. The service anonymizes collected data immediately after such data were collected and provides us with statistics for analysis containing anonymous data. We use these statistics for failure analysis and for the sophistication of our website. Data on your terminal device are kept for up to two years.
The legal basis of processing is your consent according to Article 6 (1) (a) GDPR. The Google group transfers your personal data to the USA. The legal basis for data transfer to the USA is your consent in accordance with Art. 49 Para. 1 a in conjunction with Art. 6 Para. 1 a GDPR. Before you gave your consent, you were informed that the USA does not have a data protection level that complies with EU standards. In particular, US intelligence agencies can access your data without being informed about it and without you being able to take legal action against it. For this reason, the European Court of Justice ruled in a judgment that the previous adequacy decision (Privacy Shield) was invalid.
WP Statistics
We use the local analysis software WP-Statistics, WordPress to process your data for the purpose of troubleshooting, failure analysis and statistical analysis and to identify measures for the sophistication of our website.
This service is a local analysis tool so that no personal data are transferred to the service provider or to third parties. Furthermore, your personal data are anonymized immediately after such data were collected. Personal data are therefore not stored beyond initial processing.
The legal basis of processing is the legitimate interest (absolute technical necessity to provide and to deliver the “website” service which you have explicitly requested by visiting the website according to Article 6 (1) (f) GDPR.
Ads, Profiling, Tracking, Retargeting
Facebook Pixel
If you have given your consent, we will process your personal data in cooperation with Facebook Pixel, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, as joint controllers for the purpose of providing personalized ads and measuring our advertising success.
There will not be any direct impact on the function of the website if you do not give your consent, although we will not be able to provide you with personalized ads on your device if you do not consent. You can revoke your consent by changing the settings at Privacy settings.
We will enable the service to collect connection data, data of your web browser and data of accessed content. We also enable the service to execute a tracking and recognition software and to store data on your device. The tracking and recognition software then allows the service to enhance its advertising network and to recognize you when you visit other websites or to provide personalized ads. We also use the collected data also to measure our advertising success. Data on your device are kept for up to two years.
The legal basis of processing is your consent according to Article 6 (1) (a) GDPR.
The Facebook group transfers your personal data to the USA. The legal basis for data transfer to the USA is your consent in accordance with Art. 49 Para. 1 a in conjunction with Art. 6 Para. 1 a GDPR. Before you gave your consent, you were informed that the USA does not have a data protection level that complies with EU standards. In particular, US intelligence agencies can access your data without being informed about it and without you being able to take legal action against it. For this reason, the European Court of Justice ruled in a judgment that the previous adequacy decision (Privacy Shield) was invalid.
LinkedIn Pixel
If you have given your consent, we will process your personal data in cooperation with LinkedIn Pixel, LinkedIn Ireland Unlimited Company, Attn: Legal Dept. (Privacy Policy and User Agreement), Wilton Plaza, Wilton Place, Dublin 2, Ireland, as joint controllers for the purpose of providing personalized ads and measuring our advertising success.
There will not be any direct impact on the function of the website if you do not give your consent, although we will not be able to provide you with personalized ads on your device if you do not consent. You can revoke your consent by changing the settings at Privacy settings.
We will enable the service to collect connection data, data of your web browser and data of accessed content. We also enable the service to execute a tracking and recognition software and to store data on your device. The tracking and recognition software then allows the service to enhance its advertising network and to recognize you when you visit other websites or to provide personalized ads. We also use the collected data also to measure our advertising success. Data on your device are kept for up to two years.
The legal basis of processing is your consent according to Article 6 (1) (a) GDPR.
The LinkedIn group transfers your personal data to the USA. The legal basis for data transfer to the USA is your consent in accordance with Art. 49 Para. 1 a in conjunction with Art. 6 Para. 1 a GDPR. Before you gave your consent, you were informed that the USA does not have a data protection level that complies with EU standards. In particular, US intelligence agencies can access your data without being informed about it and without you being able to take legal action against it. For this reason, the European Court of Justice ruled in a judgment that the previous adequacy decision (Privacy Shield) was invalid.
Newsletter Services
MailChimp
After consenting we will process your personal data for the purpose of sending you electronic direct mailings (e.g. newsletter) until revocation.
For the purpose of sending you newsletters we collaborate with our processor Mailchimp, The Rocket Science Group, LLC, 675 Ponce de Leon Ave NE, Suite 5000 Atlanta, GA 30308, USA.
The legal basis of processing is your consent according to Article 6 (1) (a) GDPR. You have no legal or contractual obligation to provide personal data. If you do not provide such data, we will not send you electronic direct mailings.
The legal basis for data transfer to the USA is your consent in accordance with Art. 49 Para. 1 a in conjunction with Art. 6 Para. 1 a GDPR. Before you gave your consent, you were informed that the USA does not have a data protection level that complies with EU standards. In particular, US intelligence agencies can access your data without being informed about it and without you being able to take legal action against it. For this reason, the European Court of Justice ruled in a judgment that the previous adequacy decision (Privacy Shield) was invalid.
Right to object
You have the right to object to processing if your personal data is processed based on legitimate interests.
We will then cease the processing carried out on this basis, unless there are compelling and legitimate reasons for us to do so.
You have the right to object to the processing of your personal data for the purpose of direct marketing. In this case, we will cease the processing of your personal data for the purpose of direct mail.
The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
Withdrawal
You have the right to withdraw your consent at any time by changing the settings at Privacy settings.
If you have given your consent to receipt of advertising by email, you may withdraw your consent by clicking the unsubscribe link. In this case, we will cease the processing operations, unless there is any other legal basis.
The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
Right to data subject
You have the right to access to, rectification, erasure and restriction of processing of personal data.
You have also the right to data portability if the processing of your personal data is based on your consent or on a contract concluded with you.
You have also the right to lodge a complaint with the supervisory authority. If you need more information on the supervisory authorities in the European Union, go to here.