Information obligations under the GDPR
Name of data processing: HANAFSAN
We process your personal data that falls under the following data categories: e.g., contact details, contract details, billing details, order details, payment details, and similar.
Legal basis: consent
You have voluntarily provided us with data, namely your name, address, and email address, and we process this data on the basis of your consent for the following purposes: e.g., customer account, discount promotions, sending information about our products.
You can revoke this consent at any time. Revocation means that we will no longer process your data for the above-mentioned purposes from that point on. To revoke your consent, please contact us in writing at: info@hanafsan.com
Legal basis: Contract fulfillment
The data you provide is necessary for the fulfillment of the contract or for the implementation of pre-contractual measures. Without this data, we cannot conclude the contract with you.
The data is used for the purpose of invoicing (statutory seven-year retention period), maintaining a customer account, and occasionally sending information about our products.
Legal basis: legitimate interests
We process data about you on the basis of our legitimate interests or those of a third party.
The data is used for invoicing purposes (statutory seven-year retention period), maintaining a customer account, and occasional advertising purposes. The provision of your data is mandatory for the conclusion of the contract.
Storage period/deletion period
We store your data based on the seven-year period currently required by law. This period begins at the end of the calendar year in which the last entry was made.
Processors
We use processors for this data processing.
Cookies
This website stores essential cookies without consent so that technical processes can function smoothly. This applies in particular to the shopping cart (for temporarily storing your desired products), the login area for resellers (for logging in), and the online forms (to prevent misuse). The above-mentioned cookies do not track you! The analysis software “Matomo” is used on this website. We host “Matomo” ourselves on a server in the EU. The last characters of your IP address are stored anonymously, and tracking cookies for counting returning visitors are not set without consent.
Social media plugins
This website does not contain any social media plugins.
Data transfer
In order for us to deliver the goods you have ordered, your address details will be forwarded to DPD (Direct Parcel Distribution Austria GmbH, 2333 Leopoldsdorf, Austria).
In some cases, we also deliver with Austrian Post, in which case your address data will be forwarded to Österreichische Post AG, 1030 Vienna, Austria.
If you pay by credit card, your order number, the payment amount, your IP address, and your credit card details will be forwarded to mPAY24 GmbH (1050 Vienna, Austria) for payment processing.
These companies may only use your data for order processing and not for any other purposes, and are contractually obliged to comply with the legal provisions on data protection. However, in the event of a legal requirement, an official order, or an official investigation, we are legally obliged to make the relevant data available to the authorities.
Beschwerderecht
Sie haben weiters das Recht, eine Beschwerde bei einer Aufsichtsbehörde einzureichen. Für Österreich ist dies die österreichische Datenschutzbehörde, Barichgasse 40-42, 1030 Wien, Telefon: +43 1 52 152-0, E-Mail: dsb@dsb.gv.at, Web: https://www.dsb.gv.at/.
Contact
You can reach us at the following contact details:
Dr. Feurstein Medical Hemp GmbH
Obere Gamsfeldstr. 8a
A-6844 Altach
Phone: +43 5576 74671
E: info@hanafsan.com
You can reach our data protection officer at:
info@hanafsan.com or +43 5523 54084
Legal remedy information
You have the right to information, correction, deletion, restriction, data portability, and objection. Please contact us if you wish to exercise these rights.
If you believe that the processing of your data violates data protection law or that your data protection rights have been violated in any other way, you can lodge a complaint with the supervisory authority. In Austria, the data protection authority is responsible.
CONTACT ADDRESS
Supervisory authority for compliance with data protection regulations in Austria:
Austrian Data Protection Authority
Barichgasse 40-42
1030 Vienna
Phone: +43 1 531 15-202525
Fax: +43 1 531 15-202690
E: dsb@dsb.gv.at
W: http://www.dsb.gv.at/