Privacy policy

Privacy Policy

1) Information on the collection of personal data and contact details of the controller

1.1 We are pleased that you are using our application (hereinafter "App"). Below we inform you about how we handle your personal data when you use our App. Personal data is any data with which you can be personally identified.

1.2 The controller responsible for data processing regarding this App within the meaning of the General Data Protection Regulation (GDPR) is HelloBello Tiernahrung GmbH, Garnisongasse 4/11, 1090 Vienna, Austria, Tel.: +43 (0) 1 9977289, email: support@hellobello.at. The controller responsible for the processing of personal data is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.

1.3 For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or enquiries to the controller), this App uses SSL or TLS encryption. You can recognise an encrypted connection by the character string "https://" and the lock symbol in your browser bar.

2) Log files when using our mobile app

When you download our mobile app via an app store, the required information is transferred to the app store, in particular the username, email address and customer number of your account, time of download, payment information and the individual device identification number. We have no influence on this data collection and are not responsible for it. We only process the data to the extent necessary for downloading the mobile app to your mobile device.

When you use our mobile app, we collect the personal data described below to enable convenient use of the function. If you want to use our mobile app, we collect the following data, which is technically necessary for us to offer you the functions of our mobile app and to ensure stability and security:

Date and time of the request
Time zone difference to Greenwich Mean Time (GMT)
Content of the request
Access status / HTTP status code
Amount of data sent in bytes
Source/referrer from which you reached the page
Browser used
Language and version of the browser software
Operating system used and its interface
IP address used (if applicable: in anonymised form)

Processing is carried out in accordance with Art. 6 (1) (f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our App. The data is not passed on or used in any other way. However, we reserve the right to check the aforementioned log files retrospectively should there be concrete indications of unlawful use.

We also need your device's unique number (IMEI = International Mobile Equipment Identity), the unique subscriber number (IMSI = International Mobile Subscriber Identity), mobile phone number (MSISDN), possibly the MAC address for Wi-Fi use and the name of your mobile device.

3) Hosting & content delivery network

Cloudflare

We use a content delivery network from the following provider: Cloudflare Inc., 101 Townsend St. San Francisco, CA 94107, USA

This service allows us to deliver large media files such as graphics, page content or scripts more quickly via a network of regionally distributed servers. Processing is carried out to safeguard our legitimate interest in improving the stability and functionality of our website in accordance with Art. 6 (1) (f) GDPR. We have concluded a data processing agreement with the provider, which ensures the protection of our site visitors' data and prohibits unauthorised disclosure to third parties.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision of the European Commission.

4) Cookies

To make our App attractive and to enable the use of certain functions, we use so-called cookies. These are small text files that are stored on your device. Some of the cookies we use are deleted again after the App is closed (so-called session cookies). Other cookies remain on your device and enable us to recognise you (so-called persistent cookies). When cookies are set, they collect and process certain user information to an individual extent, such as browser and location data and IP address values. Persistent cookies are automatically deleted after a specified period, which may differ depending on the cookie.

In some cases, cookies serve to simplify the operation of the App by saving settings. If personal data is also processed by individual cookies we use, the processing is carried out in accordance with Art. 6 (1) (b) GDPR for the performance of the contract, in accordance with Art. 6 (1) (a) GDPR if consent has been given, or in accordance with Art. 6 (1) (f) GDPR to safeguard our legitimate interests in the best possible functionality of the App and a customer-friendly and effective design of App use.

You can configure the settings of your mobile operating system and the App as you wish and, for example, reject the acceptance of third-party cookies or all cookies. However, we would like to point out that in this case you may no longer be able to use all the functions of our mobile app.

5) Contacting us

When you contact us (e.g. via contact form or email), personal data is collected. Which data is collected when using a contact form can be seen from the respective contact form in the App. This data is stored and used exclusively for the purpose of responding to your request or for establishing contact and the associated technical administration. The legal basis for processing this data is our legitimate interest in responding to your request in accordance with Art. 6 (1) (f) GDPR. If your contact is aimed at concluding a contract, the additional legal basis for the processing is Art. 6 (1) (b) GDPR. Your data will be deleted once your enquiry has been fully processed. This is the case if it can be inferred from the circumstances that the matter in question has been conclusively clarified, provided there are no statutory retention obligations to the contrary.

6) Data processing when opening a customer account

In accordance with Art. 6 (1) (b) GDPR, personal data is also collected and processed if you provide it to us for the performance of a contract or when opening a customer account. Which data is collected can be seen from the respective input forms. You can delete your customer account at any time by sending a message to the above-mentioned address of the controller. We store and use the data you provide to process the contract. After complete processing of the contract or deletion of your customer account, your data will be blocked in view of tax and commercial retention periods and deleted after these periods have expired, unless you have expressly consented to further use of your data or we have reserved the right to further use of data permitted by law, about which we inform you accordingly below.

7) Data processing for contract processing

To process contracts concluded via the App, we work with the service provider(s) listed below, who support us in whole or in part in the performance of concluded contracts. Certain personal data is transferred to these service providers in accordance with the following information.

The personal data we collect will be passed on to the transport company commissioned with the delivery as part of the contract processing, insofar as this is necessary for the delivery of the goods. We pass on your payment data to the commissioned credit institution as part of payment processing, insofar as this is necessary for payment processing. If payment service providers are used, we will inform you explicitly about this below. The legal basis for passing on the data is Art. 6 (1) (b) GDPR.

Amazon Pay

If you select the "Amazon Pay" payment method, payment is processed via the payment service provider Amazon Payments Europe s.c.a., 38 avenue J.F. Kennedy, L-1855 Luxembourg (hereinafter: "Amazon Payments"), to whom we pass on the information you provided during the ordering process together with information about your order in accordance with Art. 6 (1) (b) GDPR. Your data is passed on exclusively for the purpose of payment processing with the payment service provider Amazon Payments and only to the extent necessary for this. If cookies, i.e. small text files stored on the device, are set when using Amazon Pay, this is done exclusively on the basis of your express consent in accordance with Art. 6 (1) (a) GDPR. This consent can be withdrawn at any time via the "cookie consent tool" implemented on the website. Further information on Amazon Payments' privacy policy can be found at the following web address: https://pay.amazon.com/de/help/201751600

Apple Pay

If you choose the "Apple Pay" payment method from Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland, payment is processed via the "Apple Pay" function of your device running iOS, watchOS or macOS by charging a payment card stored in "Apple Pay". Apple Pay uses security features built into the hardware and software of your device to protect your transactions. To authorise a payment, you must therefore enter a code you have previously set and verify it using the "Face ID" or "Touch ID" function of your device.

For the purpose of payment processing, the information you provide during the ordering process, together with information about your order, is passed on to Apple in encrypted form. Apple then encrypts this data again with a developer-specific key before the data is transmitted to the payment service provider of the payment card stored in Apple Pay to carry out the payment. The encryption ensures that only the website through which the purchase was made can access the payment data. After the payment has been made, Apple sends your device account number and a transaction-specific, dynamic security code to the originating website to confirm that the payment was successful.

If personal data is processed in the transmissions described, the processing is carried out exclusively for the purpose of payment processing in accordance with Art. 6 (1) (b) GDPR.

Apple retains anonymised transaction data, including the approximate purchase amount, the approximate date and time and whether the transaction was completed successfully. Anonymisation completely excludes any personal reference. Apple uses the anonymised data to improve "Apple Pay" and other Apple products and services.

If you use Apple Pay on your iPhone or Apple Watch to complete a purchase made via Safari on your Mac, the Mac and the authorising device communicate via an encrypted channel on Apple's servers. Apple does not process or store any of this information in a format that can identify you. You can disable the option to use Apple Pay on your Mac in your iPhone settings. Go to "Wallet & Apple Pay" and turn off "Allow Payments on Mac".

Further information on data protection with Apple Pay can be found at the following web address: https://support.apple.com/de-de/HT203027

Google Pay

If you choose the "Google Pay" payment method from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), payment is processed via the "Google Pay" application of your mobile device running at least Android 4.4 ("KitKat") and equipped with an NFC function, by charging a payment card stored in Google Pay or a payment system verified there (e.g. PayPal). To authorise a payment via Google Pay of more than €25, you must first unlock your mobile device using the verification method you have set up (such as facial recognition, password, fingerprint or pattern).

For the purpose of payment processing, the information you provide during the ordering process, together with information about your order, is passed on to Google. Google then transmits your payment information stored in Google Pay to the originating website in the form of a one-time transaction number, which is used to verify that a payment has been made. This transaction number does not contain any information about the actual payment data of the payment methods stored in Google Pay, but is created and transmitted as a numerical token valid only once. For all transactions via Google Pay, Google acts merely as an intermediary for processing the payment. The transaction is carried out exclusively between the user and the originating website by charging the payment method stored in Google Pay.

If personal data is processed in the transmissions described, the processing is carried out exclusively for the purpose of payment processing in accordance with Art. 6 (1) (b) GDPR.

Google reserves the right to collect, store and evaluate certain transaction-specific information for every transaction made via Google Pay. This includes the date, time and amount of the transaction, merchant location and description, a description of the goods or services purchased provided by the merchant, photos you have attached to the transaction, the name and email address of the seller and buyer or of the sender and recipient, the payment method used, your description of the reason for the transaction and, where applicable, the offer associated with the transaction.

According to Google, this processing is carried out exclusively in accordance with Art. 6 (1) (f) GDPR on the basis of the legitimate interest in proper accounting, the verification of transaction data and the optimisation and maintenance of the functionality of the Google Pay service.

Google also reserves the right to combine the processed transaction data with other information collected and stored by Google when other Google services are used.

The Google Pay terms of use can be found here:

https://payments.google.com/payments/apis-secure/u/0/get_legal_document?ldo=0&ldt=googlepaytos&ldl=de

Further information on data protection with Google Pay can be found at the following web address:

https://payments.google.com/payments/apis-secure/get_legal_document?ldo=0&ldt=privacynotice&ldl=de

PayPal

One or more online payment methods from the following provider are available on this website: PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg

If you select a payment method from the provider where you pay in advance, the payment data you provided during the ordering process (including name, address, bank and payment card information, currency and transaction number) as well as information about the content of your order will be passed on to the provider in accordance with Art. 6 (1) (b) GDPR. In this case, your data is passed on exclusively for the purpose of payment processing with the provider and only to the extent necessary for this.

If you select a payment method where we pay in advance, you will also be asked during the ordering process to provide certain personal data (first and last name, street, house number, postcode, town, date of birth, email address, telephone number, and possibly data on an alternative means of payment).

To safeguard our legitimate interest in determining your solvency in such cases, we forward this data to the provider for the purpose of a credit check in accordance with Art. 6 (1) (f) GDPR. On the basis of the personal data you have provided and other data (such as shopping basket, invoice amount, order history, payment experience), the provider checks whether the payment option you have selected can be granted with regard to payment and/or default risks.

The credit report may contain probability values (so-called score values). Insofar as score values are included in the result of the credit report, they are based on a scientifically recognised mathematical-statistical procedure. Address data, among other things, but not exclusively, is included in the calculation of the score values.

You can object to this processing of your data at any time by sending a message to us or to the provider. However, the provider may still be entitled to process your personal data if this is necessary for contractual payment processing.

Shopify Payments

One or more online payment methods from the following provider are available on this website: Shopify International Limited, Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland

If you select a payment method from the provider where you pay in advance (such as credit card payment), the payment data you provided during the ordering process (including name, address, bank and payment card information, currency and transaction number) as well as information about the content of your order will be passed on to the provider in accordance with Art. 6 (1) (b) GDPR. In this case, your data is passed on exclusively for the purpose of payment processing with the provider and only to the extent necessary for this.

8) Use of your data for direct advertising

8.1 Subscribing to our email newsletter

If you subscribe to our email newsletter, we will regularly send you information about our offers. The only mandatory information for sending the newsletter is your email address. The provision of further data is voluntary and is used to be able to address you personally. We use the so-called double opt-in procedure to send the newsletter. This means that we will only send you an email newsletter once you have expressly confirmed to us that you consent to receiving newsletters. We will then send you a confirmation email asking you to confirm that you wish to receive the newsletter in future by clicking on a corresponding link.

By activating the confirmation link, you give us your consent to the use of your personal data in accordance with Art. 6 (1) (a) GDPR. When you subscribe to the newsletter, we store your IP address entered by your Internet Service Provider (ISP) as well as the date and time of subscription in order to be able to trace any possible misuse of your email address at a later date. The data we collect when you subscribe to the newsletter is used exclusively for the purpose of advertising via the newsletter. You can unsubscribe from the newsletter at any time via the link provided in the newsletter or by sending a corresponding message to the controller named at the beginning. After unsubscribing, your email address will be deleted from our newsletter distribution list immediately, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this statement.

8.2 Sending the email newsletter to existing customers

If you have provided us with your email address when purchasing goods or services, we reserve the right to regularly send you offers for similar goods or services from our range by email. In accordance with § 7 (3) UWG (German Act Against Unfair Competition), we do not need to obtain separate consent from you for this. In this respect, data processing is carried out solely on the basis of our legitimate interest in personalised direct advertising in accordance with Art. 6 (1) (f) GDPR. If you initially objected to the use of your email address for this purpose, we will not send you any emails.

You are entitled to object to the use of your email address for the aforementioned advertising purpose at any time with effect for the future by notifying the controller named at the beginning. You will only incur transmission costs according to the basic rates for this. Once your objection has been received, the use of your email address for advertising purposes will cease immediately.

8.3 Klaviyo

Our email newsletters and other promotional email communications are sent via this provider: Klaviyo, Inc., 125 Summer St., Ste 600, Boston, MA 02110, USA

On the basis of our legitimate interest in effective and user-friendly email marketing, we pass on the data you provided when signing up to this provider in accordance with Art. 6 (1) (f) GDPR so that it can send the emails on our behalf.

Subject to your express consent in accordance with Art. 6 (1) (a) GDPR, the provider also carries out a statistical evaluation of the success of email campaigns using web beacons or tracking pixels in the emails sent, which can measure open rates and specific interactions with the content of the newsletter. Device information (e.g. time of access, IP address, browser type and operating system) is also collected and evaluated, but not combined with other data sets.

You can withdraw your consent to email tracking at any time with effect for the future.

We have concluded a data processing agreement with the provider, which protects our site visitors' data and prohibits disclosure to third parties.

9) Data processing for order processing

To process your order, we may work with service providers who support us in whole or in part in the performance of concluded contracts. The personal data required to fulfil the contract is transferred to these service providers, Art. 6 (1) (b) GDPR.

The personal data we collect will be passed on to the transport company commissioned with the delivery as part of the contract processing, insofar as this is necessary for the delivery of the goods. We pass on your payment data to the commissioned credit institution as part of payment processing, insofar as this is necessary for payment processing. If payment service providers are used, this is done on the basis of contract fulfilment, Art. 6 (1) (b) GDPR.

To fulfil our contractual obligations to our customers, we work with external shipping partners. We pass on your name and delivery address and, where necessary for delivery, your telephone number to a shipping partner selected by us exclusively for the purpose of delivering goods, Art. 6 (1) (b) GDPR.

10) Online marketing

10.1 "Advertising Identifier"

For advertising purposes we use the so-called "Advertising Identifier" (IDFA). This is a unique but non-personalised and non-permanent identification number for a specific device, provided by iOS. The data collected via the IDFA is not linked to any other device-related information. We use the IDFA to provide you with personalised advertising and to evaluate its use. If you activate the "Limit Ad Tracking" option in the iOS settings under "Privacy" – "Advertising", we can only carry out the following measures: measuring your interaction with banners by counting the number of times a banner is displayed without being clicked ("frequency capping"), click rate, determining unique use ("unique user") as well as security measures, fraud prevention and troubleshooting. You can delete the IDFA at any time in the device settings ("Reset Advertising Identifier"); a new IDFA will then be created, which will not be combined with the previously collected data. Please note that you may not be able to use all the functions of our App if you restrict the use of the IDFA.

10.2 Google Ads conversion tracking

This App uses the online advertising programme "Google Ads" and, as part of Google Ads, the conversion tracking of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). We use Google Ads to draw attention to our attractive offers on external websites with the help of advertising material (so-called Google AdWords). In relation to the data of the advertising campaigns, we can determine how successful the individual advertising measures are. Our aim is to show you advertising that is of interest to you, to make our App more interesting for you and to achieve a fair calculation of the advertising costs incurred.

The cookie for conversion tracking is set when a user clicks on an ad placed by Google. Cookies are small text files that are stored on your device. These cookies usually expire after 30 days and are not used for personal identification. If the user visits certain pages of this App and the cookie has not yet expired, Google and we can recognise that the user clicked on the ad and was redirected to this page. Each Google Ads customer receives a different cookie. Cookies therefore cannot be tracked across the websites of Google Ads customers. The information obtained using the conversion cookie is used to create conversion statistics for Google Ads customers who have opted for conversion tracking. Customers learn the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information with which users can be personally identified. The use of Google Ads may also involve the transfer of personal data to the servers of Google LLC in the USA.

Details on the processing triggered by Google Ads conversion tracking and on how Google handles data from websites can be found here: https://policies.google.com/technologies/partner-sites

All processing described above, in particular the setting of cookies for reading information on the device used, will only be carried out if you have given us your express consent to do so in accordance with Art. 6 (1) (a) GDPR. You can withdraw your consent at any time with effect for the future by deactivating this service in the "cookie consent tool" provided on the website.

You can also permanently object to the setting of cookies by Google Ads conversion tracking by downloading and installing the Google browser plug-in available at the following link:

https://www.google.com/settings/ads/plugin?hl=de

Please note that certain functions of this website may not be available or only to a limited extent if you have deactivated the use of cookies.

Google's privacy policy can be viewed here: https://business.safety.google/intl/de/privacy/ and https://www.google.de/policies/privacy/

11) Web analytics services

11.1 Google Analytics 4

This App uses Google Analytics 4, a service of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which can be used to analyse the use of apps.

When using Google Analytics 4, so-called "cookies" are used by default. Cookies are text files that are stored on your device and enable an analysis of your use of an app. The information collected by cookies about your use of the App (including the IP address transmitted by your device, shortened by the last digits, see below) is usually transmitted to a Google server and stored and processed there. This may also involve the transfer of information to the servers of Google LLC, based in the USA, and further processing of the information there.

When using Google Analytics 4, the IP address transmitted by your device when you use the App is always collected and processed in anonymised form by default and automatically, so that the information collected cannot be directly linked to a person. This automatic anonymisation is carried out by Google shortening the IP address transmitted by your device by the last digits within member states of the European Union (EU) or other contracting states of the Agreement on the European Economic Area (EEA).

On our behalf, Google uses this and other information to evaluate your use of the App, to compile reports on your App activities or usage behaviour and to provide us with further services related to your App use and internet use. The IP address transmitted and shortened by your device as part of Google Analytics 4 is not combined with other Google data. The data collected through the use of Google Analytics 4 is kept for 2 months and then deleted.

Through a special function, the so-called "demographic characteristics", Google Analytics 4 also enables the creation of statistics with information on the age, gender and interests of App users based on an evaluation of interest-based advertising and with the use of third-party information. This makes it possible to define and differentiate user groups of the App for the purpose of target-group-optimised marketing measures. However, data collected via the "demographic characteristics" cannot be assigned to a specific person and therefore not to you personally. The data collected via the "demographic characteristics" function is kept for two months and then deleted.

All processing described above, in particular the setting of Google Analytics cookies for storing and reading information on the device you use to access the App, will only take place if you have given us your express consent to do so in accordance with Art. 6 (1) (a) GDPR. Without your consent, Google Analytics 4 will not be used while you use the App. You can withdraw your consent at any time with effect for the future. To exercise your withdrawal, please deactivate this service via the "cookie consent tool" provided in the App.

In connection with this App, the Google Signals service is also used as an extension of Google Analytics 4. With Google Signals, we can have Google create cross-device reports (so-called "cross-device tracking"). If you have activated "personalised ads" in your Google account settings and linked your internet-enabled devices to your Google account, Google can analyse usage behaviour across devices and create database models based on this, provided you have given your consent to the use of Google Analytics 4 in accordance with Art. 6 (1) (a) GDPR. This takes into account the logins and device types of all App users who were logged in to a Google account and carried out a conversion. Among other things, the data shows on which device you first clicked on an ad and on which device the related conversion took place. We do not receive any personal data from Google, only statistics created on the basis of Google Signals. You can deactivate the "personalised ads" function in your Google account settings and thereby turn off cross-device analysis in connection with Google Signals. To do so, follow the instructions on this page: https://support.google.com/ads/answer/2662922?hl=de

Further information on Google Signals can be found at the following link: https://support.google.com/analytics/answer/7532985?hl=de

We have concluded a so-called data processing agreement with Google for our use of Google Analytics 4, which obliges Google to protect the data of our App users and not to pass it on to third parties.

Further legal information on Google Analytics 4 can be found here: https://business.safety.google/intl/de/privacy/ and https://policies.google.com/privacy?hl=de&gl=de

Details on the processing triggered by Google Analytics 4 and on how Google handles data from apps can be found here: https://policies.google.com/technologies/partner-sites

11.2 Microsoft Clarity

This App uses the web analytics service of the following provider: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399 USA

With the help of cookies and/or comparable technologies (tracking pixels, web beacons, algorithms for reading device and browser information), the service collects and stores pseudonymised visitor data, including information about the device used such as the IP address and browser information, in order to evaluate it for statistical analyses of usage behaviour in our App and to create pseudonymised usage profiles. Among other things, this makes it possible to evaluate movement patterns (so-called heatmaps), which show the duration of page visits and interactions with page content. Pseudonymisation generally excludes any direct personal reference. It is not combined with clear data about you collected in other ways.

All processing described above, in particular the reading or storing of information on the device used, will only be carried out if you have given us your express consent to do so in accordance with Art. 6 (1) (a) GDPR. You can withdraw your consent at any time with effect for the future by deactivating this service in the "cookie consent tool" provided in the App.

We have concluded a data processing agreement with the provider, which ensures the protection of our site visitors' data and prohibits unauthorised disclosure to third parties.

12) Retargeting / remarketing / recommendation advertising

Meta Pixel

In our online offering we use the "Meta Pixel" service of the following provider: Meta Platforms Ireland Limited, 4 Grand Canal Quare, Dublin 2, Ireland ("Meta")

If a user clicks on an advertisement we have placed on Facebook and/or Instagram, "Meta Pixel" adds a parameter to the URL of our linked page. This URL parameter is then entered into the user's browser after the redirect by a cookie that our linked page sets itself.

On the one hand, this enables Meta to define the visitors to our online offering as a target group for displaying ads (so-called "Ads"). Accordingly, we use the service to display the Facebook and/or Instagram ads we place only to users who have shown an interest in our online offering or who have certain characteristics (e.g. interests in certain topics or products, determined on the basis of the websites visited) which we transmit to Meta (so-called "Custom Audiences").

On the other hand, the "Meta Pixel" can be used to track whether users were redirected to our website after clicking on an advertisement and which actions they carry out there (so-called "conversion tracking").

The data collected is anonymous to us, i.e. it does not allow us to draw any conclusions about the identity of users. However, the data is stored and processed by Meta, so that a connection to the respective user profile is possible and Meta can use the data for its own advertising purposes.

We have concluded a data processing agreement with the provider, which ensures the protection of our site visitors' data and prohibits unauthorised disclosure to third parties.

The information generated by Meta is usually transmitted to a Facebook server and stored there; in this context, it may also be transferred to servers of Meta Platforms Inc. in the USA.

13) Tools and miscellaneous

Google Web Fonts

For the uniform display of fonts, this App uses so-called web fonts from the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

When you use this App, the required web fonts are loaded to display texts and fonts correctly, establishing a direct connection to the provider's servers. Certain browser information, including your IP address, is transmitted to the provider.

Data may also be transferred to: Google LLC, USA

The processing of personal data in the course of establishing a connection with the font provider will only be carried out if you have given us your express consent to do so in accordance with Art. 6 (1) (a) GDPR. You can withdraw your consent at any time with effect for the future by deactivating this service via the "cookie consent tool" provided in the App. If your browser does not support web fonts, a standard font from your computer is used.

Further information on Google's privacy policy can be found here: https://business.safety.google/intl/de/privacy/ and https://policies.google.com/privacy

14) Rights of the data subject

14.1 Applicable data protection law grants you comprehensive data subject rights vis-à-vis the controller with regard to the processing of your personal data (rights of access and intervention), about which we inform you below:

Right of access in accordance with Art. 15 GDPR: In particular, you have the right to information about your personal data processed by us, the purposes of processing, the categories of personal data processed, the recipients or categories of recipients to whom your data has been or will be disclosed, the planned storage period or the criteria for determining the storage period, the existence of a right to rectification, erasure, restriction of processing, objection to processing, the right to lodge a complaint with a supervisory authority, the origin of your data if it was not collected by us from you, the existence of automated decision-making including profiling and, where applicable, meaningful information about the logic involved and the scope and intended effects of such processing concerning you, as well as your right to be informed about the safeguards in accordance with Art. 46 GDPR when your data is transferred to third countries;
Right to rectification in accordance with Art. 16 GDPR: You have the right to immediate rectification of incorrect data concerning you and/or completion of incomplete data stored by us;
Right to erasure in accordance with Art. 17 GDPR: You have the right to request the erasure of your personal data if the requirements of Art. 17 (1) GDPR are met. However, this right does not apply in particular if the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims;
Right to restriction of processing in accordance with Art. 18 GDPR: You have the right to request the restriction of the processing of your personal data while the accuracy of your data, which you dispute, is being verified, if you refuse the erasure of your data due to unlawful data processing and instead request the restriction of the processing of your data, if you need your data for the establishment, exercise or defence of legal claims after we no longer need this data once the purpose has been achieved, or if you have lodged an objection on grounds relating to your particular situation, as long as it has not yet been determined whether our legitimate grounds prevail;
Right to notification in accordance with Art. 19 GDPR: If you have asserted the right to rectification, erasure or restriction of processing against the controller, the controller is obliged to notify all recipients to whom the personal data concerning you has been disclosed of this rectification or erasure of data or restriction of processing, unless this proves impossible or involves disproportionate effort. You have the right to be informed about these recipients.
Right to data portability in accordance with Art. 20 GDPR: You have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format or to request its transmission to another controller, insofar as this is technically feasible;
Right to withdraw consent in accordance with Art. 7 (3) GDPR: You have the right to withdraw consent to the processing of data once given at any time with effect for the future. In the event of withdrawal, we will delete the data concerned immediately, unless further processing can be based on a legal basis for processing without consent. The withdrawal of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the withdrawal;
Right to lodge a complaint in accordance with Art. 77 GDPR: If you consider that the processing of personal data concerning you infringes the GDPR, you have - without prejudice to any other administrative or judicial remedy - the right to lodge a complaint with a supervisory authority, in particular in the member state of your habitual residence, place of work or place of the alleged infringement.

14.2 RIGHT TO OBJECT

IF WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST AS PART OF A BALANCING OF INTERESTS, YOU HAVE THE RIGHT AT ANY TIME, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, TO OBJECT TO THIS PROCESSING WITH EFFECT FOR THE FUTURE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO FURTHER PROCESSING IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS.

IF YOUR PERSONAL DATA IS PROCESSED BY US FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH MARKETING. YOU CAN EXERCISE YOUR OBJECTION AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

15) Duration of storage of personal data

The duration of the storage of personal data is determined by the respective legal basis, the purpose of processing and – if relevant – additionally by the respective statutory retention period (e.g. retention periods under commercial and tax law).

When personal data is processed on the basis of express consent in accordance with Art. 6 (1) (a) GDPR, the data concerned is stored until you withdraw your consent.

If there are statutory retention periods for data processed in the context of legal or quasi-legal obligations on the basis of Art. 6 (1) (b) GDPR, this data will be routinely deleted after the retention periods have expired, provided it is no longer required for the performance or initiation of a contract and/or we no longer have a legitimate interest in continuing to store it.

When personal data is processed on the basis of Art. 6 (1) (f) GDPR, this data is stored until you exercise your right to object in accordance with Art. 21 (1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

When personal data is processed for direct marketing purposes on the basis of Art. 6 (1) (f) GDPR, this data is stored until you exercise your right to object in accordance with Art. 21 (2) GDPR.

Unless otherwise stated in the other information in this statement on specific processing situations, stored personal data will otherwise be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.

Copyright notice: This privacy policy was drawn up by the specialist lawyers of IT-Recht Kanzlei and is protected by copyright (https://www.it-recht-kanzlei.de)

As of: 26.02.2026