Privacy policy

Privacy policy

Last modified 26.09.2023

The fact that you are reading this text shows that you value your privacy and personal information. So do we. Therefore, we have developed this document, in which:

- we describe the principles of personal data processing as required by the GDPR,

- we expand the description beyond the requirements of the GDPR to provide you with additional information that may be important to you,

- we describe how we use cookies and other tracking technologies.

The premise of this document is to present information in a clear, simple, and reliable manner. However, if you have any doubts, please get in touch with us and we will kindly clarify everything. Here our contact information:

HENDI GmbH

Ehring 15 | 5112 Lamprechtshausen | Austria

zivjo@hendi.com | +43 6274 200 100

1.Who is the administrator of your personal data and who can you contact regarding the processing of your personal data?

The administrator of your personal data is HENDI GmbH with its registered office in Ehring 15, 5112 Lamprechtshausen, Austria (hereinafter: HENDI). Responsible under data protection law: HENDI GmbH. If you have any questions, please contact us at: zivjo@hendi.com.

2.Which kind of your data do we process and where do we get your personal information from?

The personal data that we may process regarding your usage of our online store are:

- name,

- e-mail address,

- data contained in email correspondence,

- information visible in social media profiles,

- delivery address,

- business address,

- tax ID no,

- telephone number,

- details of orders placed,

- bank account number,

- IP address,

- location,

- statistics related to newsletters.

To optimize the performance of our online store, we use external tools that collect information about how you use our store. This includes the following data:

- information about your device (operating system, web browser and its version, screen resolution),

- information about accepting/rejecting cookies,

- user ID,

- date of site visit,

- time spent on the site,

- behavior on the site (sub-pages visited, transitions between sub-pages, clicks/taps),

- source from which you came,

This information is anonymous to us. We do not identify you based on them. We do not collate them with other data we have about you (if any). However, please remember that we use third-party tools over which we have limited influence. Their administrators may combine information from the cookies stored by our store with other information about you that they have acquired previously and will acquire in the future.

In our opinion, in this situation we do not process personal but rather anonymous data, which can be combined with other data by third parties and acquire a personal character. However, as there can be other interpretations of this situation, as a precaution, we inform you about this fact.

The external tools and third parties we mention are often based on cookies. You can find detailed information about cookies later in this Privacy Policy. The tools we use are listed in section 7, "What do we use third-party cookies for?".

We got your personal data from you. You provide them to us when:

- you register an account in our store,

- you place an order,

- you make a complaint or withdraw from a contract,

- you sign up for a newsletter,

- you contact us by phone, email, or contact form,

- you interact with our social media profiles.

Some personal information is also collected automatically by the tools and systems we use:

- store software and servers save your IP address in logs,

- newsletter software records your IP address, the interactions you take with messages sent (information about opening, clicking on links, etc.),

- statistical tools collect (to us) anonymous information regarding your actions on the site.

3.Do you have to give us your personal information and what are the purposes, legal basis, and duration of the processing of your personal data?

You are not required to provide your personal data. However, if you do not, the realization of the purpose of some processes on this website (e.g. creating an account, placing an order) will not be possible.

Purpose of processing	Legal basis	Processing time
Customer service	Article 6(1)(b) GDPR - conclusion and performance of a contract.	Duration of the contract. Duration of our obligations under warranty, guarantee, etc. The duration of complaint handling.
Bookkeeping	Article 6(1)(b) GDPR in connection with tax regulations.	Until the expiration of the period for which we are required by law to keep accounting records.
Correspondence handling	Article 6(1)(f) GDPR - our legitimate interest in exchanging correspondence.	Until the purpose of conducting correspondence is deemed to have been achieved or until you successfully object to the processing of your personal data.
Newsletter handling	Art. 6(1)(a) GDPR - consent or Art. 6(1)(f) GDPR - our legitimate interest in sending the newsletter - depending on what is the basis for processing.	Until you withdraw your consent or make an effective objection to the processing of your personal data.
Social media handling	Art. 6(1)(f) GDPR - our legitimate interest in maintaining social media profiles	Until you remove the data from social media.
Analysis and statistics	Art. 6(1)(f) GDPR - our legitimate interest in creating and analyzing statistics to optimize the store's performance.	Until the expiration of the usefulness or according to the retention time offered by each tool or until you successfully object to the processing of your personal data.
Own marketing	Art. 6(1)(f) GDPR - our legitimate interest in targeting ads.	Until the end of its usefulness or in accordance with the retention time imposed by the individual tools or until you successfully object to the processing of your personal data.
Transfer of data to financial service providers	Art. 6(1)(f) GDPR - our legitimate interest in providing personal data to entities designated by you in order to facilitate your contract with those entities.	Data transmission time.
Investigating claims, defending against claims, settling claims	Art. 6(1)(f) GDPR - our legitimate interest in defending, establishing, or pursuing claims related to HENDI's business.	Until the statute of limitations on claims or until claims are satisfied.

If we process your personal data based on your consent, you have the right to withdraw that consent at any time. This does not affect the lawfulness of processing the data prior to your withdrawal.

4.Who has access to your personal information and is your data transferred to third countries or international organizations?

Your personal data may be accessed by our employees and associates and providers of services used in our operations:

- hosting providers,

- providers of programming and maintenance services for the store's software,

- providers of marketing automation services,

- providers of analytics services,

- providers of other sales support services,

- providers of IT support services,

Entities that cooperate or act under the law and become the controller of your data:

- postal and courier service providers,

- legal advisors and attorneys (if their work for us requires access to personal data),

- entities providing financial services (payment intermediaries, lessors, factors)

- banks,

- authorized state authorities.

A third country is a country in which GDPR is not applicable law.

As we use entities that are based or process data in third countries (e.g. the United States of America), your data may be transferred there.

The transfer of personal data to third countries takes place:

- in accordance with the European Commission's decision of July 10, 2023 recognizing the provision of an adequate level of protection by the US, or

- based on the so-called Standard Contractual Clauses in accordance with the European Commission Decision No. 2021/914 EU of June 4, 2021.

5.Do we make decisions based solely on automated processing including profiling and what rights do you have as we process your personal data?

We do not make decisions about you based solely on automated processing, including profiling, that produce legal consequences for you or similarly significantly affect you.

There are mechanisms in the store that collect data about the way you use it, the products you browse and buy. However, they do not affect your situation as a customer. Instead, they allow us to personalize advertising and target you with an offer that is best suited to your needs.

As we process your personal data, you have the right to:

- request access to your personal data,

- request rectification of your personal data,

- request the deletion of your personal data,

- request the restriction of the processing of your personal data,

- notify recipients of changes in the processing of your personal data,

- request the transfer of your personal data to another controller,

- object to the processing of your personal data,

- file a complaint with a personal data supervisory authority; in Austria this is the Austrian Data Protection Authority, Barichgasse 40-42, 1030 Vienna, Austria.

Not all the above rights are exercised absolutely, and you will not always be entitled to them. For example, we will not delete your personal data at your request if the law requires us to process it. If you need a broader explanation of the meaning of these rights and the rules for exercising them, you can find it in Articles 12-23 of the GDPR.

6.What are cookies, what do we use them for, and on what basis do we use cookies?

Cookies are small pieces of text information, saved and stored on your device (e.g. computer, tablet, smartphone - depending on which device you use when visiting the store). Cookies stored on your device can be read by our ICT system (our own cookies), as well as by third-party ICT systems (third-party cookies). Cookies may contain certain information that is read by these ICT systems. You can find more information about cookies here: https://pl.wikipedia.org/wiki/HTTP_cookie.

Some of the cookies we use are cookies necessary for the proper operation of our store. In accordance with the law (Article 173, paragraph 3 of the Telecommunications Act, we may store these cookies on your device.

In other cases, we ask your permission. The rest of the cookies are blocked until you give your consent by accepting all other or selected cookies.

7.Can you disable/block/manage cookies and what do we use our own cookies for?

Yes, there are several ways to do this.

Mechanism for managing cookies in our store:

In our store, we use a mechanism that blocks all cookies (except the necessary ones) on your first visit. If you do not accept cookies, they will not be stored on your device. If we have received your consent for cookies, and you want to revoke it, you can also do so. At the bottom left of the page, there is a link that takes you to the cookie management screen, where you can change your preferences at any time.

Browsers:

All leading browsers give you many options for managing cookies. You can block them and delete them from your device. You can use the private mode (incognito), in which cookies should be deleted when you close the browser. You can also use several browser add-ons that enhance your ability to manage cookies.

We use our own cookies for the proper operation of the mechanisms of our store, such as sending forms, remembering your choice regarding language, country and related currency or cookie preferences.

8.What do we use third-party cookies for and how can you increase your privacy and control over your personal information?

Our store uses third-party tools that (with your permission) may store cookies on your device. The data collected by these tools is usually anonymous to us but is not necessarily anonymous to the entities that provide it.

It may happen that rejecting third-party cookies will block your ability to use their service. For example, rejecting YouTube cookies may result in you not seeing a video. Information about the various tools and their providers and the purpose of use is presented in the table below.

Software/service	Supplier	Purpose of use	Supplier information
Google Analytics	Google LLC	Analysis of site user behavior and visit statistics.	More info
Google Ads	Google LLC	Targeting and measuring the effectiveness of ads.	More info
YouTube	Google LLC	Embedding and statistics of video footage.
reCaptcha	Google LLC	Distinguish between humans and bots on the site.	More info
Meta Pixel	Meta Platforms Ireland Limited	Targeting and measuring the effectiveness of ads.	More info
Facebook Connect	Meta Platforms, Ireland Limited	Enabling registration and login to various services using your Facebook account information.	More info
Microsoft Advertising	Microsoft Corp.	Targeting and measuring the effectiveness of ads.	More info
Criteo	Criteo GmbH	Targeting and measuring the effectiveness of ads.	More info
Pinterest	Pinterest Ads	Targeting and measuring the effectiveness of ads.	More info
HotJar	HotJar Limited	Analysis of site user behavior and visit statistics.	More info
CallPage	Callpage sp. z o.o.	Embedding a PopUp window to order a phone call and interaction statistics with it.	More info
User.com	Positive Group Polska sp. z o. o.	Collection, analysis of user data and marketing automation.	More info

We have mentioned ways to increase privacy before. We'll summarize that information, adding a few more ways to increase privacy (not just on our store's website):

- use the cookies management mechanisms on the sites and do not allow cookies you do not want,

- install plug-ins with mechanisms that block cookies and other tracking mechanisms in your browser (specialists recommend Ghostery, uBlock Origin),

- use private mode (incognito) in your browser,

- use browsers designed to protect your privacy (e.g., DuckDuckGo Browser, Brave),

- use available mechanisms for setting behavioral ads (e.g., youronlinechoices.eu),

- use the privacy settings on your Facebook, Google, etc. accounts.

9.Is this complete information about the processing of personal data and will we be changing the Privacy Policy?

Personal data processing is a complicated issue. Especially when modern technologies are involved. We want to strike a balance between detail, comprehensiveness, and readability of information. That's why not everything about the processing of your personal data is mentioned here. However, there is more than what is required by the GDPR and if any of the information in the Privacy Policy is unclear to you, or if you want more information about the processing of your personal data, simply write to zivjo@hendi.com.

We want to provide you with up-to-date information regarding the processing of your data. This processing changes due to the development of HENDI, technological changes in our store and in the tools we use, and based on changes in the law. Therefore, this Privacy Policy will also change. If you are a registered user of our store or a subscriber to our newsletter, we will inform you about its changes.