Data Privacy Statement
We take the protection of your personal data very seriously and exclusively process such data based on the statutory provisions (GDPR, DSG [Data Protection Act], TKG [Telecommunications Act]) and within the scope of our business purpose.
Responsible party for data processing
Zeichenfabrik Ausbildungsstätte für Kunst GmbH
Flachgasse 35-37/4-5
1150 Vienna
Austria
E-Mail: buero@zeichenfabrik.at
If you have questions on how your data will be processed, or would like to enforce your rights (see below), please contact this address.
Server log files
Even if you use our website (https://www.zeichenfabrik.at/) without registering or logging in, our web server records the data communicated to us by your Internet browser (including the name of the accessed site or file, date and time, used Internet browser, number of visits, session length, the page from which you reached us (referrer), screen resolution and operating system, IP address). We store the unabbreviated IP address for a maximum of three months in order to be able to respond to any judicial or official queries (e.g. in case of fraudulent offer of a work of art or buying under a false identity). Pursuant hereto, your IP address is abbreviated such that conclusions can longer be drawn on your person. The legal basis for processing is our statutory disclosure obligation (Art 6(1) c) GDPR) and our legitimate interest in protecting us and our customers from improper conduct and clarifying such conduct (Art 6(1) f) GDPR). We will only transmit the IP address in response to a judicial or official request. Other data are evaluated in a statistical analysis, but without personally identifying information, so that we can learn more about the use of our platform, remedy errors and optimally align our offer to our audience.
How to contact us
If you write to us using the contact form, or contact us by email or phone, we will record and store all data which you provide to us. In case of an online query, in addition to the message, you should indicate your name, a valid email address and a subject. If you do not provide us with these data, we cannot process your query. Data are processed for implementation of pre-contractual measures (such as queries prior to purchase) or to fulfill a contractual relationship (Art 6(1) b) GDPR) or in relation to our legitimate interest in handling the reply to the query (Article 6(1) f) GDPR). We only transfer the data to third parties (e.g. to users of another platform) if and when required for replying to the query. We store the data for the duration of replying to the query and for any further enquiries. Furthermore, we keep your queries for up to an additional six months, allowing you to refer to an older query later.
If you make a query to other users of our platform on the contact form, we shall receive the query as the processor. Further processing is carried out by the respective contacted user(s).
Booking courses
We would like to point out that for the purpose of simplifying the purchasing or booking process and to fulfill our contractual obligations to you or to carry out pre-contractual measures, the web shop operator saves the IP address of the connection owner in the context of cookies, as well as the name , address, telephone number, e-mail address, goods purchased / courses booked, date of purchase or booking and, if applicable, the buyer's credit card number.
The data you provide is required to fulfill our contractual obligations to you or to carry out pre-contractual measures. Without this data we cannot conclude and/or fulfill the contract with you. Data is only transmitted to third parties for objectively comprehensible purposes in connection with the fulfillment of the contract, in particular with credit card companies and the banks processing the payments as well as with those companies that design and support our online services, and in particular to fulfill our tax and other legal obligations.
After aborting the purchase or booking process, the data stored by us will be deleted. If a contract is concluded, all data from the contractual relationship will be stored at least until the end of the tax retention period (7 years). They will then be deleted if you instruct us to delete them. By storing it, we ensure that we can respond to customer inquiries at any time using the customer history. Data processing takes place on the basis of the legal provisions of § 96(3) TKG and Article 6(1) a) GDPR and/or Article 6(1) b) of the GDPR.
Purchase of works of art
If you submit an offer to purchase a work of art on our website and/or buy the work of art, we will record and store all related data (query date and time, item, Buyer, Vendor, payment methods, delivery address, etc.). The legal basis is the fulfillment of our existing contractual obligation to you or the implementation of pre-contractual measures (such as in case of queries about works of art prior to ordering) – Article 6(1) b) GDPR. Data are transferred to third parties (e.g. carriers) if and when this is necessary to fulfill this contractual relationship. We store all these data until completion of the order and expiry of the deadline for enforcement of warranty and compensation claims from the sale (usually three years). Legal retention obligations (e.g. pursuant to reporting rules) shall not be affected thereby.
User accounts
If you create a user account as Vendor at the Zeichenfabrik Gallery, we store all related data that you declare to us. We store master data for your account (first name, surname, gender, date of birth, email address, company data, postal address, phone number, company statements), tax and payment data, the selected password, your personal settings in account administration, delivery data, communication data, your outstanding and completed sales. Indicating data marked “*” is mandatory. If you do not provide us with this data to us, you cannot create an account on our platform. We use such data to manage your account and allow you to handle sales on the Zeichenfabrik Gallery. The legal basis for processing your data is fulfillment of the contractual relationship entered into with you (Art 6(1) b) GDPR) and a legal obligation (Art 6(1) c) GDPR). Data are transferred to third parties (e.g. carriers) of necessary for fulfilling this contractual relationship. In the event of a justified request for information (e.g. according to § 18 ECG [E-Commerce Law]) by a court, an authority or an authorized third party, we will disclose your name, postal address and email address. We store all such data until you delete your user account, but in any case until completion of outstanding orders and expiry of the deadline for enforcement of warranty and compensation claims from the sale (usually three years). Legal retention obligations (e.g. pursuant to reporting rules) shall not be affected.
As Vendor, you can set up a publicly visible profile on the gallery, where we can store and display texts, images and graphics that you have entered. The legal foundations are fulfillment of our contractual relationship (Art 6(1) b) GDPR) and your consent (Art 6(1) a) GDPR). We will store all such data until you delete them again from your public profile.
Newsletter
If you register for our newsletter, we will store this request for your user account and process the data that you indicate therein (form of address, name, email address) for delivery. The legal basis is your consent to receiving shipments (Art 6(1) a) GDPR). Once you have registered for the newsletter, we will send you an email with a link to confirm your registration. You can cancel the newsletter subscription at any time. Please send your cancellation to the following email address: buero@zeichenfabrik.at After cancellation you will not receive any further newsletters, but such cancellation does not affect the lawfulness of data processing carried out until this time.
In addition, we record and store data for your user account about the individual use of our shipments (number and date of received shipments, opening rate, click rate on links and the employed email program and device). We analyze these data in order to continually adapt our offer to the needs and interests of our users, so that our newsletters contain relevant information for you.
We store such data in personal form until you unsubscribe from the newsletter.
Cookies
Our online platform uses cookies. These are small text files which can be stored and accessed again on your device. You can find information below on the cookies used during your visit to our website:
Name: _zeichenfabrik_session
Purpose: Remembers which products are in the shopping cart or in the wish list
Content: Status of the shopping cart, status of the wish list
Duration: Session
Readable by: Zeichenfabrik only
Name: hide-zeichenfabrik-cookie-notice
Purpose: Remembers whether the cookie notice has been hidden
Content: State of the cookie notice
Duration: 1 year
Readable by: Browser
Name: hide-zeichenfabrik-browser-support-notice
Purpose: Remembers whether the browser support notice (for outdated browsers) has been hidden
Content: State of the browser support notice
Duration: 1 week
Readable by: Browser
Name: program_filter_is_expanded
Purpose: Remembers whether the program filter is shown or hidden
Content: State of the program filter
Duration: unlimited
Readable by: Browser
You can refuse some or all cookies via the settings in your browser or delete already placed cookies. Please note that certain functions of our platform are not available if you deactivate cookies.
Google reCaptcha
We use the Google reCaptcha service to decide whether a human or a computer is making an entry in our contact form. Google checks whether you are a human or a computer based on the following data: IP address for the used device, the website which you visit us at and on which Captcha is integrated, the date and duration of visit, identification data for the employed browser and operating system type, Google account, if you are logged on with Google, mouse movements on reCaptcha interfaces and tasks in which you have to identify images. The legal basis for the specified data processing is constituted by our legitimate interest in guaranteeing the security of our platform and protecting ourselves from automated entries (attacks) (Art 6(1) f) GDPR).
Integration of the Trusted Shops Trustbadge / other widgets
The Trusted Shops Trustbadge is integrated on this website to display the Trusted Shops services (e.g. Trustbadge and collected reviews) as well as to offer Trusted Shops products to buyers after an order.
This is necessary to safeguard our legitimate prevailing interests in an optimal marke- ting by ensuring the safety of your purchase according to Article 6 (1) f GDPR. The Trustbadge and the services advertised with it are an offer of the Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne, Germany with whom we are jointly res- ponsible for data protection pursuant to Art. 26 GDPR. In the following, we inform you about the essential contractual contents pursuant to Art. 26 (2) DSGVO within the scope of this data protection notice.
The Trustbadge is made available by a USA-based CDN provider (Content-Delivery- Network). An adequate level of data protection is ensured by standard data protection clauses and other contractual measures. You can find further information to the data security of Trusted Shops GmbH can be found in their privacy policy: https://www.- trustedshops.co.uk/imprint/
When the Trustbadge is called up, the web server automatically saves a server log file which contains, for example, your IP address, the date and time of the call, the amount of data transferred and the requesting provider (access data) and documents the call. The IP address is anonymized immediately after collection so that the stored data can- not be assigned to your person. The anonymized data is used in particular for statistical purposes and for error analysis.
After order completion, your email address, which is hashed by cryptological one-way function, is transmitted to Trusted Shops GmbH. The legal basis is Art. 6 para. 1 p. 1 lit. f DSGVO. This serves to check whether you are already registered for services with Trusted Shops GmbH and is therefore necessary for the fulfillment of our and Trusted Shops' overriding legitimate interests in the provision of the Buyer Protection linked to the specific order in each case and the transactional evaluation services pursuant to Art. 6 para. 1 p. 1 lit. f DSGVO.
If this is the case, further processing will be carried out in accordance with the contrac- tual agreement between you and Trusted Shops. If you have not yet registered for the services, you will be given the opportunity to do so for the first time. Further processing after registration also depends on the contractual agreement with Trusted Shops GmbH. If you do not register, all transmitted data will be automatically deleted by Trusted Shops GmbH and a personal reference is then no longer possible.
Within the framework of the joint responsibility existing between us and Trusted Shops GmbH, if you have any data protection questions and wish to assert your rights, please prefer to contact Trusted Shops GmbH using the contact options provided in the data protection information linked above. Irrespective of this, however, you can always con- tact the responsible person of your choice. Your inquiry will then, if necessary, be for- warded to the other responsible party for a response.
Transfer of data, processing
Your personal data are exclusively used by us and will not be shared with third parties without your consent, a legal obligation or court or official resolution. If we make use of third parties to carry out orders (“processors”), we will ensure that they use your data exclusively within the scope of the agreement concluded with you, within the scope of our mandates, and in compliance with data protection regulations.
The Zeichenfabrik Gallery is an online platform, which offers art lovers and vendors the opportunity to conclude business transactions with one another. In the course of a query and order processing we will partly work on our own behalf and partly as processor for the respective Vendor(s). We have concluded an agreement on processing with the Vendors for this purpose.
Your rights
You are entitled to demand information from us about all processed data, the rectification or erasure of such data or even restriction on the processing of data. Moreover, you can raise an objection to data processing. In addition, you may revoke your consent to use of your data by email to buero@zeichenfabrik.at at any time. If you revoke consent or raise an objection, this will result in us deleting your data, unless we are under a legal storage obligation or are authorized for compelling, legitimate reasons. If you revoke consent, this shall not affect the lawfulness of data processing carried out until this time. In addition, you have the right to receive personal data concerning you in a structured, common and machine-readable format. If you think that your data are being used contrary to legal requirements, please contact us. We can usually clear up your concerns in a direct conversation. You may also lodge a complaint to the data protection authority (+43 1 521 52-25 69, dsb@dsb.gv.at).
Amendments to this Data Privacy Statement
We hereby reserve the right to amend or supplement this statement where appropriate, in order to allow for changes in our range of services and the requirements of our users. You can find the date of the latest amendment right at the top of this document. Visit our platform regularly to get informed about the current status of the data privacy statement.
Last revised: 11/22/2022