GER / ENG

PRIVACY POLICY FOR THE SERVICES OF AVAJA.NET

1. SCOPE OF APPLICATION, RESPONSIBLE, DATA PROTECTION OFFICE

1.1 SCOPE OF THE PRIVACY POLICY

This data protection declaration explains the type, purpose and scope of the collection and
processing of personal data for the following services:

Applications: AVAJA App
Internet pages: avaja.net

1.2. NAME AND ADDRESS OF THE RESPONSIBLE

The person responsible within the meaning of the General Data Protection Regulation and other national data protection laws is www.avaja.net

Mirnel Jusic
Leumear Street 1/28
3166 Oakleigh East, Victoria
Australia

Email: office@avaja.net

1.3. NAME AND ADDRESS OF THE DATA PROTECTION OFFICER

See point 1.2.

2. GENERAL INFORMATION ABOUT DATA PROCESSING

2.1. SCOPE

We collect and use personal data of our users as far as this is necessary to provide a functional website and to fulfill the functionality of our services, namely the location-based display of advertisements from local dealers and service providers. In order to be able to provide you with our services free of charge, we finance our services through advertising income, which is why we need to collect data that we need in anonymised form to bill our customers for advertisements.

2.2. LEGAL BASIS

Insofar as we obtain the user’s consent, this serves as the legal basis for the processing of personal data in accordance with Art. 6 Paragraph 1 Clause 1 a GDPR. When
processing personal data that are required to fulfill a contract with the user, Art. 6 Paragraph 1 Clause 1 b GDPR serves as the legal basis. If processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests of the user do not outweigh the interests of the user, Art. 6 Paragraph 1 Sentence 1 f GDPR serves as the legal basis.

2.3. STORAGE DURATION AND DATA DELETION

The user’s personal data will be deleted as soon as the
purpose on which the data was collected has been fulfilled. If the person responsible is legally obliged to store the data beyond this, the data will be blocked from the time it is used until it is deleted. The information on the storage period is noted for the respective processing.

3. DATA PROCESSING APPS

3.1. ACCESS DATA (SERVER LOGFILES)

When you use our apps, the data that is sent during the usage process and that are required to use our apps is automatically collected. This data includes the IP address, mobile phone provider, information about the user agent and the date and time of use of our services. The data is also stored in the log files of our system. This data is not stored together with other personal data of the user. The legal basis for the temporary storage of the data is Art. 6 Para. 1 S. 1 f) GDPR. The temporary storage of the IP address by the system is necessary. In
These purposes are also our legitimate interest in data processing according to Art. 6 Para. 1 S. 1 f) GDPR. The data will be deleted or the IP address anonymized as soon as they are no longer required to achieve the purpose for which they were collected. The collection and storage of the data in log files is essential for the operation of the apps.

3.2. PUSH MESSAGES

3.2.1. DESCRIPTION AND SCOPE OF THE DATA PROCESSING

If the user has given authorization to send push notifications, a corresponding token is generated via the device’s operating system each time the app is started (for Android via Google’s GCM (Google Cloud Messaging) and for iOS via Apple’s APNS (Apple Push Notification) Service)) and sent by the app to an Offerista / Wogibtswas server (“PushBackend”). There the token is stored in a database together with the app’s visitor ID. Push messages are sent downstream on the basis of this database via the AWS service SNS (Amazon Simple Notification Service), which
uses the push token to contact the online services of the device operators (Apple or Google) and deliver the push message .

We offer you to send push notifications:

• when your „favorite stores“ publish new offers / brochures (automated
  push notifications),
• with „exclusive information“, ie campaigns from providers (manual and geo-based push notifications),
• via offers from a provider in whose vicinity you are (geo-based push notifications.

In order to be able to send you these push notifications with current offers and advertisements from the local dealers, we will obtain your consent. Consent will be requested when the app is set up for the first time or later depending on the occasion.

3.3. PURPOSE OF DATA PROCESSING

The purpose of push messages is to inform you about products and news that are of interest to you in the form of advertisements from providers who present advertisements on our services.

3.4. LEGAL BASIS

According to Art. 6 Paragraph 1 Sentence 1 a) GDPR, the legal basis is the consent you have given.

3.5 DURATION OF STORAGE

The data (push token and visitor ID) will be deleted no later than three months after the last app was opened or if canceled.

3.6. REVOCATION AND DISPOSAL

YOU CAN WITHDRAW YOUR CONSENT AT ANY TIME BY INTO THE
SYSTEM SETTINGS OF YOUR DEVICE CANCEL THE AUTHORIZATION FOR MESSAGES. ON IOS, YOU WILL FIND THIS POSSIBILITY UNDER „SETTINGS“> „NOTIFICATIONS“> „APP NAME“. ON ANDROID YOU WILL FIND THIS POSSIBILITY UNDER „SETTINGS“> „APPS“ OR „APP MANAGER“> „APP NAME>“ SHOW NOTIFICATIONS „. IN WINDOWS, YOU WILL FIND THIS OPTION UNDER „SETTINGS“> NOTIFICATIONS & ACTIONS „>“ APP NAME> DEACTIVATE SWITCH „. IF YOU WITHDRAW YOUR CONSENT IN THIS WAY, WE WILL NO LONGER SEND YOU PUSH MESSAGES. HOWEVER, PLEASE NOTE THAT SOME OF OUR FUNCTIONS (E.G. SENDING EXCLUSIVE OFFERS NEAR YOU) WILL NO LONGER AVAILABLE. YOU CAN RE-ACTIVATE THE AUTHORIZATION IN THE SYSTEM SETTINGS AT ANY TIME.

• AVAJA.NET

APPS / SETTINGS / FAVORITE
STORE APPS / SETTINGS / EXCLUSIVE INFORMATION

3.7. LOCATION DATA

3.7.1. DESCRIPTION AND SCOPE OF THE DATA PROCESSING

The location data is determined by the GPS based on user input or geo-coordinates
. Whereby we determine those from the end device based on the longitude and latitude
Location data basically washed out at postcode level. We obtain your consent so that we can send you location-specific offers and that you only see information that is offered by dealers in your area. If you click on the „Always allow“ button in the system query „May AVAJA access your location?“, You give us your consent to collect and process your location in order to show you offers in your area and the anonymous statistics about the Use of our offers to create. The location is also recorded if you are not currently using the app, but rather it is only open in the background. If you click on the button „When using the app“, you give this consent to the location survey with the proviso, that the location is only collected when we actively use the app. If you choose this option, the app may not be able to notify you of current offers in your area. Alternatively, you also have the option of not allowing location approval and instead entering your location manually in the form of the postcode. We will then use the zip code provided to provide brochures, offers and advertisements from local dealers at the specified location. Please note that the app may not be able to notify you of current offers in your area based solely on the zip code entered. Alternatively, you also have the option of not allowing location approval and instead entering your location manually in the form of the postcode. We will then use the zip code provided to provide brochures, offers and advertisements from local dealers at the specified location. Please note that the app may not be able to notify you of current offers in your area based solely on the zip code entered. Alternatively, you also have the option of not allowing location approval and instead entering your location manually in the form of the postcode. We will then use the zip code provided to provide brochures, offers and advertisements from local dealers at the specified location. Please note that the app may not be able to notify you of current offers in your area based solely on the zip code entered.

3.7.2. PURPOSE OF THE DATA PROCESSING

In order to be able to show you providers and offers in your area and to be able to send you geolocation-based information via push notification, we need your location. Without the localization of your location – either by entering your location manually or through automatic location determination – you cannot use the AVAJA App services. In order to inform you about offers from providers in your area by means of push notification, we need your location even if you are not currently using the app, in case you have consented that we can determine your location, even if you are using the app If you do not use it, we will also collect your location if you come near a shop whose advertisement you have viewed through our services. We also need your location data (postcode level),

3.7.3. LEGAL BASIS

The legal basis for the processing of location data is the consent you have given in accordance with Art. 6 Paragraph 1 Clause 1 a) GDPR.

3.7.4. DURATION OF STORAGE

We store your data for a period of three years.

3.7.5. REVOCATION AND DISPOSAL

YOU CAN WITHDRAW YOUR CONSENT TO COLLECT AND USE THE SITE AT ANY TIME. IF YOU WITHDRAW YOUR CONSENT, WE WILL NO LONGER DETERMINE THE LOCATION. HOWEVER, PLEASE NOTE THAT SOME OF OUR FUNCTIONS (E.G. SENDING EXCLUSIVE OFFERS NEAR YOU) WILL NO LONGER AVAILABLE. YOU CAN RE-ACTIVATE THE AUTHORIZATION IN THE SYSTEM SETTINGS AT ANY TIME. YOU CAN DISABLE THE AUTOMATIC LOCATION DETERMINATION IN THE APPS AT ANY TIME.

IN THE APPS:

• AVAJA MY WOGIBTSWAS / CHANGE MY LOCATION / DETERMINE LOCATION AT START -> OPT OUT

Or via the settings of your device:

• IOS / SETTINGS / PRIVACY POLICY / LOCATION SERVICES / AVAJA / ALLOW ACCESS TO LOCATION / NEVER OR WHILE USING THE APP OR ALWAYS
• ANDROID / SETTINGS / APPS / AVAJA / PERMISSIONS / LOCATION
• WINDOWS / SETTINGS / POSITION DETECTION (SETTING NO.1) AND / OR POSITION SERVICES (SETTING NO.2) AND APPS (SETTING NO.3)

4. WEBSITE / GENERAL DATA COLLECTION / OFFER SEARCH / AVAJA TRACKING TOOL

Like many other websites, www.AVAJA.net uses log files. Here are some examples of the different types of data AVAJA may collect and how they are used:

4.1. COOKIES, WEB BEACONS AND OTHER TECHNOLOGIES

Our websites, online services, interactive programs, e-mails and advertising materials can use so-called „cookies“ and other technologies, for example using tracking pixels (pixel tags) and web beacons. „Cookies“ are small text files that are stored on your device using the browser. she do no harm. We use cookies, like other sites and companies, to make our offer user-friendly. Some cookies remain stored on your device until you delete them. They enable us to recognize your browser the next time you visit. If you do not want this, you can set up your browser so that it informs you about the setting of cookies and that you only allow this in individual cases. Deactivating cookies may restrict the functionality of our website.

4.2. COUNTING PIXEL

Tracking pixels (English tracking bug or web bug; also German web bug, tracking pixel, IVWPixel, ivwbox, pixel tag, pixel tag, pixel method, one-pixel image, 1 × 1 gif, clear gif or web beacon) are small graphics in HTML e-mails or on websites that enable log file recording and log file analysis, which are often used for statistical evaluations for online marketing.

These technologies allow us to better understand user behavior, inform us which parts of our websites have been visited, and simplify and measure the efficiency of advertising and web searches. We treat data collected by cookies and other technologies as non-personal data. AVAJA also uses cookies and other technologies to record personal information when you use our website, online services and applications. Our goal in these cases is to make your experience with AVAJA more comfortable and personal. For example, if we know your first name, we can greet you personally on your next visit. Information such as the country you live in and the language you communicate in will help us To offer you a more useful shopping experience tailored to your needs. Knowing that someone who uses your computer or device has bought a certain product or used a certain service enables us to better tailor our advertising and e-mail communication to your interests and to improve their user experience. Knowledge of your contact details and information about your browser or your device help us to personalize your operating system and to offer you better customer service, such as reducing the amount of data, improving speed, optimally adapting the display to your device, and thus create a better user experience. Purchased a certain product or used a certain service enables us to better tailor our advertising and e-mail communication to your interests and to create a better user experience. Knowledge of your contact details and information about your browser or your device help us to personalize your operating system and to offer you better customer service, such as reducing the amount of data, improving speed, optimally adapting the display to your device, and thus create a better user experience. Purchased a certain product or used a certain service enables us to better tailor our advertising and e-mail communication to your interests and to create a better user experience. Knowledge of your contact details and information about your browser or your device help us to personalize your operating system and to offer you better customer service, such as reducing the amount of data, improving speed, optimally adapting the display to your device, and thus create a better user experience.

If you want to block cookies in the web browser, you can usually find the corresponding function in the settings under „Data protection and security“. In most browsers, you will find the settings in the “Data protection” section and “Block cookies” to define your settings. After a large number of browsers refer to your browser provider, how cookies can be deactivated for that.

If you have any questions about this legal basis, you can contact us using our contact form .

Note: We are a free web platform that lives from the fees of the partner companies and if you block cookies, we will not receive any fees and thus we cannot maintain our unique service.

4.3. FURTHER INFORMATION ON COOKIES

• As a third party provider, Google uses cookies to place advertisements on www.AVAJA.net.
• By using the DART cookie by Google, advertisements can be placed for users who visit www.AVAJA.net and other websites on the Internet.
• Users can deactivate the use of the DART cookie by visiting the privacy policy of the Google Ads and Content Networks at the following URL: http://www.google.com/privacy_ads.html

4.4. ADVERTISING PARTNERS

Some of our advertising partners may use cookies and web beacons on our website. Our advertising partners include:

• AMAZON.de – DATA PROTECTION
• AFFILINET – DATA PROTECTION
• ETSY – DATA PROTECTION

4.5. GOOGLE ADSENSE

These third party ad servers or ad networks use technology to send advertisements and links that appear on www.AVAJA.net directly to your browsers. In this case you will automatically receive your IP address. Other technologies (such as cookies, JavaScript or web beacons) can also be used by third-party advertising networks to measure the effectiveness of their advertising and / or to personalize the advertising content displayed.

www.AVAJA.net has no access to or no control over these cookies, which are used by third-party advertisers.

For more information about how they work and how to turn them off, see the privacy policies of those third-party ad servers. The data protection provisions of www.AVAJA.net do not apply to such other advertisers or websites and we cannot control their activities.

As mentioned, if you want to deactivate cookies, you can do this via your individual browser options. For more information on cookie management with specific web browsers, see the respective browser websites.

4.6. AFFILIATE LINKS / RECOMMENDATION PROGRAMS

AVAJA participates in partner / referral programs for some online shops. Some external links from www.AVAJA.net may contain referral links that can generate revenue that leads to purchases from the linked website. We have no influence on the prices and pricing policy of the goods providers or sellers.

Some of these websites may set cookies for a certain period of time. So if you make a purchase within a certain period of time, AVAJA will get part of the sale back.

4.7. SERVICE PROVIDER

AVAJA passes on personal data to companies that provide services, such as processing information, managing and maintaining customer data, providing customer service, evaluating your interest in listed products and services, and conducting customer research or conducting surveys Customer satisfaction. These companies are obliged to protect your personal data and can be located wherever AVAJA does business.

4.8. OTHERS

Sometimes it may be necessary for AVAJA – due to legal regulations,
legal procedures, legal disputes and / or requests from public authorities
and government agencies inside or outside your country of residence – disclose personal information. We may also disclose information about you (but only if there is a legal basis) if we believe it is reasonably necessary to enforce our terms and conditions or to protect our business or users. This may include providing information to public or government agencies. In addition, in the event of a reorganization, merger or sale, we may transfer all personal data that we collect to the third party provider concerned.

5. PROTECTION OF PERSONAL DATA

We attach great importance to the security of your personal data. As part of our website AVAJA.net and online services, your personal data is protected during transmission by encryption methods such as Transport Layer Security (TLS).

If you use certain products, services or applications or post personal data in a chat room or social network,
this personal data and content is visible to other users and can be
read, recorded or used by them. We refer to the respective provider and the data protection information provided by him. The
responsibility for the personal information that you share it or each
state rests solely with you.

5.1. INTEGRITY AND RETENTION OF PERSONAL DATA

AVAJA makes it easier for you to keep your personal data correct, complete and up-to-date. We keep personal data for as long as necessary to fulfill the purposes described in this privacy policy and our service-specific overviews on data protection. When measuring the periods of time required for this, we carefully consider the extent to which a collection of personal data is necessary at all. If we determine the need to collect such data, we will only keep it for as long as is absolutely necessary for the given purpose, unless longer retention periods are expressly required by law.

5.2. YOUR DATA PROTECTION RIGHTS

You can help us ensure that your contact information and settings are correct,
complete and up-to-date by logging into your customer account
.

We can refuse to process inquiries if they are offensive / annoying, endanger the personal rights of others, are extremely impractical or if the respective legal system does not otherwise provide information. We may also decline aspects of deletion or access requests if we believe that responding to such requests would undermine our lawful use of data for the aforementioned security or fraud prevention purposes.

5.3. LOCATIONAL SERVICES

In order to offer location-based services, AVAJA and our partners and
licensees, e.g. B. Providers of, collect, use and
share location data , including the geographic location of your device in real time. If location-based services are available, they can determine the approximate location of your devices. In addition to GPS, your IP address, data from public
WiFi hotspots and cell phone masts as well as other technologies are used.
If you have not given your consent to its use, this location data will
be collected anonymously, which will not personally identify you. your
For example, the device can share its geographic location with program or app providers if you select their location services.
Some of the location-based services offered by AVAJA, such as the „Where is?“ Function,
require your personal data in order to function properly.

5.4. WEBSITES AND SERVICES OF OTHER PROVIDERS

AVAJA websites, products, applications and services contain links to
websites, products and services of other companies. Our products and services
may also use or offer products and services from other providers.
The data collected by these third parties, which may include location data or contact details
, is governed by their data protection practices. We
therefore recommend that you check with these companies about their data protection practices.

5.5. INTERNATIONAL USERS

All data you have provided may be subject to transfer or access by companies in various locations around the world within the framework of the provisions of this privacy policy. In connection with the services of AVAJA, personal data about persons who live in a member state of the European Economic Area, in Great Britain or in Switzerland are managed by AVAJA Austria and processed on their behalf. If you have any unresolved concerns about data protection or usage in connection with, we recommend that you contact the ombudsman. 5.6 Our company-wide commitment to protecting your data In order to ensure the security of personal data,

5.7. DESCRIPTION AND SCOPE OF THE DATA PROCESSING

We collect the following data about your usage behavior:

• Action taken
• SessionID
• Uuid (randomly generated identification number)
• Time
• Location data (generally blurred at postcode level)
• App version
• brand

5.8. PURPOSE OF DATA PROCESSING

We use this data to evaluate and evaluate the functions of the apps by creating user profiles, to bill our customers for advertisements and to tailor our services to their needs.

5.9. LEGAL BASIS

The legal basis is in accordance with Article 6, Paragraph 1, Clause 1 b) GDPR.

5.9.1. DURATION OF STORAGE

We delete the data at the latest after 12 months.

5.10. PERSONAL DATA AND THEIR USE

With your consent, we can process your personal data for the purposes described in this data protection guideline as well as to comply with legal obligations to which AVAJA is subject, for the performance of a contract to which you are a party, to protect your essential interests, or when we need to know come to the conclusion that the disclosure of information is necessary for the pursuit of the legitimate interests of AVAJA or third parties, which may include the transfer of data to such third parties. This consent requires a clear declaration, which is made explicitly, for example in an online form, through registration or a written declaration. If you have any questions about this legal basis, you can contact us using the company email or contact form.

5.10.1. WHERE DO YOUR PERSONAL DATA COME FROM IF IT WAS NOT COLLECTED BY US?

• The personal data we collect allows us to keep you informed about the
  latest product announcements, coupons, competitions and upcoming AVAJA events. If you do not want to be on our mailing list, you can unsubscribe at any time by changing your settings.
• Personal data also support us in the creation, development, provision, provision and improvement of our products, services, content and advertising.
• We can also use your personal data for account and network security purposes. This also includes protecting our services for the benefit of all users, as well as pre-checking and scanning uploaded content for potentially illegal content.
• We can use your personal data, including your date of birth, to verify identity, to help identify users or to identify suitable services. The date of birth can be used to determine the age, for example.
• Occasionally we may use personal data to send important notices, such as changes to our terms and conditions and guidelines, as well as warnings or product defects. Because this information is important to your relationship with AVAJA, you may not be able to refuse to receive this information.
• We may also use personal data for internal purposes such as auditing, data analysis and research to improve AVAJA products and services and to improve communication with customers.
• If you take part in sweepstakes, competitions, vouchers or similar promotions, we can use the information provided to administer these programs.
• We may have received your personal data from other persons if the respective person has released their content for you via AVAJA products, sent you gift vouchers, products or invited you to participate in AVAJA services or forums. In the interests of security and fraud prevention, we can review the information you have provided.

5.11. COLLECTION AND USE OF NON-PERSONAL DATA

We also collect data in a form that, on its own, does not allow any direct reference to a specific person. We can collect, use, pass on and disclose non-personal data for any purpose. Below are some examples of non-personal information we collect and how we can use it:

• We collect data such as so that we can better understand the behavior of our customers and adapt and improve our products, services and advertising to individual needs.
• We collect data about customer activities on our website. This data is summarized (aggregated) and used as a tool to provide our customers with more useful information and to understand which parts of our website, products and services are most interesting for our customers. This aggregated data is considered non-personal data for the purposes of this privacy policy.
• If necessary, we collect and save more detailed information on how you use our services, including search queries. This information enables us to improve the informative value of the results provided by our services. Such information is generally not associated with your IP address.

In the event that we link non-personal data with personal data, these linked data will be treated as personal data as long as they remain linked.

5.12. THIRD PARTY DISCLOSURE

Occasionally, AVAJA may pass on certain personal data to third parties in
order to offer or improve our products and services and to provide products at your request or to support AVAJA in marketing them to customers. In this case, we require these third parties to handle the personal data in compliance with the applicable legal regulations. Personal data is never sold by AVAJA or passed on to third parties for marketing purposes.

6. WEB ANALYSIS

Our website uses functions of the web analysis services listed below: Cookies are used for this purpose, which enable an analysis of the use of the website by your users. The information generated in this way is transferred to the provider’s server and stored there. You can prevent this by setting up your browser so that no cookies are stored. The data processing takes place on the basis of the legal provisions of § 96 Paragraph 3 TKG and Art 6 Paragraph 1 lit a (consent) and / or f (legitimate interest ) of the GDPR. Our concern within the meaning of the GDPR (legitimate interest) is to improve our offer and our website. Since the privacy of our users is important to us, the user data is pseudonymized [pseudonymization is recommended for the legal reason “legitimate interest”; this must be clarified with the web analysis service].

6.1 GOOGLE ANALYTICS

6.1.1. DESCRIPTION AND SCOPE OF THE DATA PROCESSING

We use Google Analytics, a web analysis service from Google Inc. (“Google”). Google
Analytics uses so-called „cookies“, text files that are stored on the users‘ mobile devices and that enable an analysis of their use of the app. The information generated by the cookie about the use of the app is usually transferred to a Google server in the USA and stored there. IP anonymization has been activated on this website so that the IP address of Google users within member states of the European Union or in other contracting states of the Agreement on the European Economic Area is shortened beforehand. The full IP address is only transmitted to a Google server in the USA and shortened there in exceptional cases. The following data is collected: online identification (including cookie identification),
anonymized IP addresses, device IDs.

6.1.2. PURPOSE OF DATA PROCESSING

Google will use this information on our behalf to evaluate the use of the app by you as a user, to compile reports on app activities and to provide the app provider with other services relating to website and internet usage.

6.1.3. LEGAL BASIS

The legal basis for the processing of the data is Art. 6 Para. 1 S. 1 f) GDPR. Our
legitimate overriding interest lies in improving the quality of our offers and their content. We learn how our services are used and can thus continuously optimize our offer.

6.1.4. DURATION OF STORAGE

The data will be deleted after 26 months.

6.1.5. OBJECTION

YOU CAN PREVENT THE STORAGE OF COOKIES BY
SETTING YOUR BROWSER SOFTWARE PROPERLY; HOWEVER, THIS OFFER NOTES USERS THAT IN THIS CASE THEY MAY NOT BE ABLE TO USE ALL THE FUNCTIONS OF THIS WEBSITE TO THE FULLEST. IN ADDITION, THE USERS CAN PROVIDE THE COLLECTION OF THE DATA GENERATED BY THE COOKIE AND RELATED TO YOUR USE OF THE WEBSITE (INCLUDING YOUR IP ADDRESS) ON GOOGLE AND THE PROCESSING OF THIS DATA THROUGH THE BROCH GOOGLE PROVIDING THE PROCESSING, IN THE FOLLOWING OF THE BROCHURE DOWNLOAD AND INSTALL. THE CURRENT LINK
IS: https://TOOLS.GOOGLE.COM/DLPAGE/GAOPTOUT?HL=DE

6.2. GOOGLE ADWORDS – REMARKETING

6.2.1. DESCRIPTION AND SCOPE OF DATA PROCESSING

We have integrated Google Remarketing. This enables us to create user-related advertising and thus to show you advertisements that are relevant to your interests in other apps of the Google advertising network. To do this, Google Remarketing places a cookie in the browser of your device. The cookie enables Google to recognize you when you call up apps after leaving our app that also belong to the Google advertising network. Every time you call up an app with integrated Google Remarketing, the browser on your device automatically identifies itself with Google. In doing so, Google gains knowledge of personal data, such as the IP address or the surfing behavior of the user, which Google uses, among other things, to display interest-relevant advertising.

6.2.2. PURPOSE

The purpose is to display interest-based advertisements via the Google advertising network or other websites.

6.2.3. LEGAL BASIS

The legal basis for the processing is the
consent given by you before the start of use in accordance with Art. 6 Paragraph 1 Clause 1 a) GDPR.

6.2.4. DURATION OF STORAGE

The data will be deleted after 18 months at the latest.

6.2.5. REVOCATION

YOU CAN REVOCATE THE USE OF COOKIES BY GOOGLE AT ANY TIME, WITH EFFECT FOR THE FUTURE.

IN THE BROWSER:

• ANDROID GINGERBREAD, HONEYCOMB, ICE CREAM, KITKAT AND LOLLIPOP
  (ANDROID VERSIONS 2.3 AND ABOVE): GOOGLE SETTINGS / ADS / OPT OUT OF INTEREST-BASED ADS / OPT OUT
• IOS (FROM 6): SETTINGS / DATA PROTECTION / ADVERTISING / NO AD TRACKING / OPT IN
• WINDOWS: SYSTEM APPLICATIONS / ADVERTISING ID / OPT OUT

FURTHER INFORMATION ON GOOGLE REMARKETING AND THE
GOOGLE PRIVACY POLICY CAN BE VIEWED AT
: HTTPS://WWW.GOOGLE.COM/PRIVACY/ADS/ AND HTTPS://WWW.GOOGLE.DE/INTL/DE/POLICIES/PRUFEN WERDENGER .

6.3 GOOGLE ADWORDS CONVERSION TRACKING

6.3.1. DESCRIPTION AND SCOPE OF THE DATA PROCESSING

We use Google AdWords Conversion Tracking, a service provided by Google Inc. (1600
Amphitheater Parkway, Mountain View, CA 94043, USA; hereinafter „Google“). Conversion tracking is a service that enables us to record what happens after a user clicks on one of our ads, e.g. whether you then install our app and when you open it for the first time. Furthermore, we can record which keywords, ads, ad groups and campaigns have led to which user actions. If you click on an advertisement from us in the Google search or on a selected website of the Google advertising network, a temporary cookie will be saved on your device (conversion cookie). When you complete an action, our system recognizes the cookie (via the code snippet you inserted) and records a conversion. Cookies for conversion tracking are only valid for 30 days. No personal data is collected and / or stored by means of the cookie. We cannot assign the conversion data to specific visitors, but only have access to the overall data for ads and keywords.

6.3.2. PURPOSE

The purpose of data processing is to measure the success of our services and offers and to improve them for users and our advertising customers.

6.3.3. LEGAL BASIS

The legal basis for the processing is the
consent given by you before the start of use in accordance with Art. 6 Paragraph 1 Clause 1 a) GDPR.

6.3.4. DURATION OF STORAGE

Cookies for conversion tracking are only valid for 30 days. No personal data is collected and / or stored by means of the cookie.

6.3.5. POSSIBILITY OF OBJECTION AND ELIMINATION

YOU CAN DISCONTINUE CONVERSION TRACKING AT ANY TIME WITH EFFECT FOR THE
FUTURE. DEACTIVATE THE FUNCTION IN THE BROWSER OF YOUR TERMINAL DEVICE:

• ANDROID GINGERBREAD, HONEYCOMB, ICE CREAM, KITKAT AND LOLLIPOP
  (ANDROID VERSIONS 2.3 AND ABOVE): GOOGLE SETTINGS / ADS / OPT OUT OF INTEREST-BASED ADS / OPT OUT
• IOS (FROM 6): SETTINGS / DATA PROTECTION / ADVERTISING / NO AD TRACKING / OPT IN
• WINDOWS: SYSTEM APPLICATIONS / ADVERTISING ID / OPT OUT

FURTHER INFORMATION ON GOOGLE REMARKETING AND THE
GOOGLE PRIVACY POLICY CAN BE VIEWED AT
: https://WWW.GOOGLE.COM/PRIVACY/ADS.

6.4. ADSENSE MOBIL APPLICATION

6.4.1. DESCRIPTION AND SCOPE OF THE DATA PROCESSING

We use the online service Google AdSense, which enables advertising to be placed on third-party apps. The advertisements displayed on third-party apps are selected using an algorithm to match the content of the respective third-party apps, which enables the app visitor to be addressed based on their interests. When you visit our above-mentioned offers, Google AdSense sets a cookie on your device, which enables the service provider to analyze your use of our apps. Every time our apps are accessed, the browser on your device is automatically prompted by the Adsense cookie to transmit personal data to Alphabet Inc. for the purpose of online advertising and billing of commissions. The data are used to Understand the origin of visitors and clicks and subsequently enable commission accounting. The data recorded by the cookie is transferred to Alphabet Inc. in the United States of America, stored and, if necessary, passed on to third parties to the extent necessary for the recording and billing of the displayed advertisements.

Google AdSense is explained in more detail under this link https://www.google.de/intl/de/adsense/start/ .

6.4.2. PURPOSE

The purpose of the Google AdSense component is to integrate advertisements for a commission on our website in order to generate advertising income.

6.4.3. LEGAL BASIS

The legal basis for the processing is the
consent given by you before the start of use in accordance with Art. 6 Paragraph 1 Clause 1 a) GDPR.

6.4.4. DURATION OF STORAGE

The data will be deleted after 18 months at the latest.

6.4.5. REVOCATION

You can object to the use of cookies at any time, with effect for the future. DEACTIVATE THE FUNCTION IN THE BROWSER OF YOUR TERMINAL DEVICE:

• ANDROID GINGERBREAD, HONEYCOMB, ICE CREAM, KITKAT AND LOLLIPOP
  (ANDROID VERSIONS 2.3 AND ABOVE): GOOGLE SETTINGS / ADS / OPT OUT OF INTEREST-BASED ADS / OPT OUT
• IOS (FROM 6): SETTINGS / DATA PROTECTION / ADVERTISING / NO AD TRACKING / OPT IN
• WINDOWS: SYSTEM APPLICATIONS / ADVERTISING ID / OPT OUT

FURTHER INFORMATION ON GOOGLE REMARKETING AND THE
GOOGLE PRIVACY POLICY CAN BE VIEWED AT
: HTTPS://WWW.GOOGLE.COM/PRIVACY/ADS/ .

6.5. DOUBLECLICK

6.5.1. DESCRIPTION AND SCOPE OF THE DATA PROCESSING

We have integrated DoubleClick by Google on our apps. DoubleClick by Google transfers data to the DoubleClick server during your activities on our apps, which in turn triggers a cookie request to your application. If your application accepts this request, DoubleClick places a cookie on your device. A DoubleClick cookie does not contain any personal data, but does contain a cookie ID, which is required, for example, to display an advertisement in the application and at the same time records which advertisements have already been displayed in order to avoid duplication. It is also possible to record conversions for commission accounting, for example if you were previously shown a DoubleClick advertisement and then make a purchase on the advertiser’s website. DoubleClick transmits this information to Google every time the application is accessed for the purpose of online advertising and billing. DoubleClick cookies do not contain any personal data.

6.5.2. PURPOSE

The purpose of the cookie is to optimize and display advertising against commission. The cookie is used, among other things, to place and display user-relevant advertising and to create reports on advertising campaigns or to improve them. The cookie also serves to prevent the same advertisement from being shown multiple times.

6.5.3. LEGAL BASIS

The legal basis for setting the cookie and the associated data processing is the consent you have given in accordance with Art. 6 Paragraph 1 Clause 1 a) GDPR.

6.5.4. STORAGE DURATION

The data will be deleted after 18 months at the latest.

6.5.5. REVOCATION

You can object to the use of cookies at any time, with effect for the future. DEACTIVATE THE FUNCTION IN THE BROWSER OF YOUR TERMINAL DEVICE:

• ANDROID GINGERBREAD, HONEYCOMB, ICE CREAM, KITKAT AND LOLLIPOP
  (ANDROID VERSIONS 2.3 AND ABOVE): GOOGLE SETTINGS / ADS / OPT OUT OF INTEREST-BASED ADS / OPT OUT
• IOS (FROM 6): SETTINGS / DATA PROTECTION / ADVERTISING / NO AD TRACKING / OPT IN
• WINDOWS: SYSTEM APPLICATIONS / ADVERTISING ID / OPT OUT

6.6. E-MAIL CONTACT

6.6.1. DESCRIPTION AND SCOPE OF THE DATA PROCESSING

In our apps, you can contact us using the email address provided. In this case, your personal data transmitted with the email (email address, UUID, version of the operating system, name of the end device, mobile phone provider, information on whether the location has been approved, possibly the last location information) will be saved. In this context, the data will not be passed on to third parties.

6.6.2. PURPOSE OF THE DATA PROCESSING

The data will only be used to process the conversation. The processing of personal data serves us only to process the contact.

6.6.3. LEGAL BASIS

The legal basis for the processing of the data is acc. Art. 6 Paragraph 1 Clause 1 a) DSGVO your consent by sending the email to us.

6.6.4. DURATION OF PROCESSING

The data will be deleted after 30 days, ie as soon as they are no longer required to achieve the purpose for which they were collected. This is the case when the respective conversation with you has ended, ie when it can be inferred from the circumstances that the matter in question has been finally clarified.

6.6.5. OBJECTION

THE INFORMATION REGARDING VER BROWSERVERSION YOU CAN DELETE FROM THE SUBJECT LINE BEFORE SENDING THE MAIL. YOU CAN OBJECT TO THE STORAGE OF YOUR PERSONAL DATA AT ANY TIME. IN SUCH A CASE, CONVERSATION CANNOT BE PERFORMED.
IN THIS CASE, PERSONAL DATA STORED IN THE WAY TO CONTACT US WILL BE DELETED.

6.7 ADVERTISING PIXEL

Pixels of the respective retailer or service provider can be integrated in advertising material (brochures, etc.) that are kept ready in our apps. The pixels record how often, for example, a brochure is clicked on. This information is forwarded to the respective dealer. IP addresses are only processed in a shortened and therefore anonymized form. It is therefore impossible that a personal reference can be made. The advertiser is responsible for the anonymous processing of the data. AVAJA.net remains the contact person for the user.

PRIVACY POLICY INTERNET SITES

7. ACCESS DATA (SERVER LOGFILES)

7.1. SCOPE

When you use our website, the data that is sent by your browser during the usage process and that are required to use our services is automatically recorded. This data includes in particular the URL, the browser type, the browser version, the requesting provider, Internet Service Provider (ISP), the IP address, referring / exit pages and the number of clicks in order to analyze trends, manage the site and the Track user movement on the website and collect demographic information as well as the date and time of use of our services. The data is also stored in the log files of our system. This data is not stored together with other personal data of the user. The user’s IP addresses are not affected by this.

7.2. PERSONAL DATA

Personal data is data that can be used about a person
to identify or to contact a specific person. When you get in contact with AVAJA or a company affiliated with AVAJA, you may be asked to provide personal data. AVAJA and its affiliated companies can exchange this personal data with one another and use them in accordance with this data protection guideline. You can also combine such data with other information in order to offer or improve our products, services, content and advertising. You are not forced to provide the requested personal data. In this case, however, it will often not be possible for us to inform you about our products or services or to answer your inquiries.

7.3. PURPOSE

The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user’s computer. To do this, the user’s IP address must be saved for the duration of the session.

7.4. LEGAL BASIS

Our legitimate interest in data processing in accordance with Art. 6 Paragraph 1 lit. f GDPR.

7.5. STORAGE DURATION

The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. In the case of data collection for the provision of the website, this is the case when the respective session has ended.

8. NEWSLETTER – AVAJA.NET

8.1. DESCRIPTION AND SCOPE OF THE DATA PROCESSING

On the website wogibtswas.at there is the possibility to subscribe to our free newsletter on current trends in digital trade marketing. When registering for the newsletter, the name entered in the input mask and the email address are sent to us. In addition, the IP address of the calling computer and the date and time of registration are collected when you register. For the processing of the data, your consent is obtained during the registration process and reference is made to this data protection declaration. We use Emarsys – emarsys eMarketing Systems AG, Märzstrasse 1,1150 Vienna, to send and manage our newsletter. Emarsys will not forward the data described here to third parties. Emarsys uses so-called „cookies“, text files, which are stored on your computer and which enable an analysis of the use of the newsletter. The information generated by the cookie is sent to a server and analyzed there. The newsletters also contain tracking pixels. this is a
Miniature graphics that let us recognize whether a newsletter has been received, opened by you
and which links have been clicked in the newsletter. As part of this retrieval, technical information such as information about the browser and your system, the device used and the mail client as well as your IP address and the time of retrieval are collected. In addition, the reading time is recorded, although this is only done on a target group basis. For technical reasons, this information can be assigned to individual newsletter recipients, but it is neither our aim nor that of Emarsys to monitor individual users.

8.2. PURPOSE

The collection of your email address is used to deliver the newsletter. The collection of
other personal data as part of the registration process serves
to prevent misuse of the services or the e-mail address used and to
prove the legal requirements. The information from your use of the newsletter is used for the technical improvement of the services and the evaluation of the
reading habits of our users and enables us
to send content according to the interests of our users. To send you a newsletter tailored to your needs
In order to be able to send, an explicit tracking consent is necessary. If you have agreed to this in the context of an additional opt-in query in a newsletter, you agree that a personal user profile will be created based on your data.

8.3. LEGAL BASIS

Consent to sending email addresses is given on the basis of Art. 6 Paragraph 1 (a), Art. 7 GDPR and Section 7 Paragraph 2 No. 3 or Paragraph 3 UWG. The use of the
shipping service provider, the implementation of statistical surveys and analyzes and the
logging of the registration process are based on our legitimate interests in accordance with Art. 6 Paragraph 1 (f) GDPR. We are interested in the use of a user-friendly and secure newsletter system that serves both our business interests, such as direct mail, and meets the expectations of users.

8.4. STORAGE DURATION

The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected, i.e. when the newsletter is canceled.

8.5. REVOCATION

THE SUBSCRIPTION TO THE NEWSLETTER AND THE CREATION OF A PERSONAL
USER PROFILE MAY BE CANCELED OR NOTIFIED AT ANY TIME BY CLICKING THE LINK „UNSUBSCRIBE“ OR „TRACKING UNSUBSCRIBE“ IN THE NEWSLETTER. TO BE REVOCATED.

9. USE OF TECHNICALLY NECESSARY COOKIES

9.1. DESCRIPTION AND SCOPE OF DATA PROCESSING

Our website uses technically necessary cookies. Cookies are text files that are stored in the internet browser or by the internet browser on your computer system. If you call up a website, a cookie can be stored on your operating system. This cookie contains a characteristic string of characters that enables the browser to be clearly identified when the website is accessed again.

9.2. PURPOSE

The purpose of using technically necessary cookies is to simplify the use of websites for the user. Some functions of our website cannot be offered without the use of cookies. For this it is necessary that the browser is recognized even after changing pages.

9.3. LEGAL BASIS

According to Art. 6 Paragraph 1 Clause 1 f) GDPR, the legal basis for the processing of personal data using cookies is our interest in providing a functional internet service.

9.4. STORAGE DURATION

The data transmitted by the cookie will be deleted after 2 months.

9.5. ELIMINATION POSSIBILITY

BY CHANGING THE SETTINGS IN YOUR INTERNET BROWSER,
YOU CAN DEACTIVATE OR
RESTRICT THE TRANSMISSION OF COOKIES. COOKIES HAVE ALREADY STORED CAN BE DELETED AT ANY TIME. THIS CAN ALSO BE AUTOMATED. IF COOKIES ARE DEACTIVATED FOR OUR WEBSITE, ALL FUNCTIONS OF THE WEBSITE MAY NO LONGER BE FULLY USED.

10. GOOGLE ANALYTICS

10.1. DESCRIPTION AND SCOPE OF THE DATA PROCESSING

We have integrated Google Analytics with an anonymization function on this website. So-called “cookies” (text files) are saved on your computer, which enable your use of the website to be analyzed. As a rule, the information collected by the cookie is transferred to a Google server in the USA and saved. To prevent this, we use IP anonymization. The IP address is shortened beforehand within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. As an exception, the full IP address is sent to a Google server in the USA and shortened there. Google will use the information collected on our behalf to evaluate usage behavior on the website, Compile reports on website activity and provide other related services. The IP address transmitted by your browser is not compared with other Google data.

10.2. PURPOSE

The purpose is to improve our offer on the basis of the data collected.

10.3. LEGAL BASIS

The legal basis for the processing is according to Art. 6 Paragraph 1 Clause 1 f) GDPR. Our
legitimate overriding interest lies in improving the quality of our offers and their content. We learn how our services are used and can thus continuously optimize our offer.

10.4. STORAGE DURATION

The data will be deleted after 26 months.

10.5. Objection and the possibility of removal

YOU CAN PREVENT THE STORAGE OF COOKIES BY
SETTING YOUR BROWSER SOFTWARE PROPERLY; BUT WE ADVISE YOU THAT YOU MAY NOT BE ABLE TO USE ALL OF THE FUNCTIONS OF THIS WEBSITE. YOU CAN ALSO PREVENT THE COLLECTION OF THE DATA GENERATED BY THE COOKIE AND RELATED TO YOUR USE OF THE WEBSITE (INCLUDING YOUR IP ADDRESS), THE TRANSMISSION TO AND THE PROCESSING OF THE DATA THROUGH GOOGLE AND INSTALL: HTTPS://TOOLS.GOOGLE.COM/DLPAGE/GAOPTOUT?HL=DE .
ALTERNATIVE TO THE BROWSER PLUG-IN, YOU CAN CLICK ON ONE OF THE FOLLOWING LINKS TO PREVENT THE FUTURE COLLECTION BY GOOGLE ANALYTICS WITHIN THIS WEBSITE.

Deactivate Google Analytics for this website.

THE OPT OUT ONLY WORKS IN THIS BROWSER AND ONLY FOR THIS DOMAIN. THIS DOES AN OPT-OUT COOKIE WILL BE STORED ON YOUR DEVICE. IF YOU DELETE YOUR COOKIES IN THIS BROWSER, YOU HAVE TO CLICK ON THIS LINK AGAIN.

11. GOOGLE ADWORDS REMARKETING

11.1. DESCRIPTION AND SCOPE OF DATA PROCESSING

We have integrated Google Remarketing. This enables us to create user-related advertising and thus to show you advertisements that are relevant to your interests on other Internet pages of the Google advertising network. To do this, Google Remarketing places a cookie in the browser of your device. The cookie allows Google to recognize you when you visit pages that also belong to the Google advertising network after leaving our site. Each time you visit a page with integrated Google Remarketing, the browser on your device automatically identifies itself with Google. In doing so, Google gains knowledge of personal data, such as the IP address or the surfing behavior of the user, which Google uses, among other things, to display interest-relevant advertising.

11.2. PURPOSE

The purpose is to display interest-based advertisements via the Google advertising network or other websites in order to generate advertising income.

11.3. LEGAL BASIS

According to Art. 6 Paragraph 1 Clause 1 a) GDPR, the legal basis is the consent you gave when you visited the app.

11.4. DURATION OF STORAGE

The data will be deleted after 18 months at the latest.

11.5. ELIMINATION POSSIBILITY

YOU CAN REVOCATE THE USE OF COOKIES BY GOOGLE AT ANY TIME, WITH
EFFECT FOR THE FUTURE. YOU CAN ACCESS THE DISABLING FUNCTION VIA THE FOLLOWING LINKS AND FOLLOW THE INFORMATION THEREOF:

HTTPS://WWW.GOOGLE.COM/SETTINGS/U/0/ADS/AUTHENTICATED OR
HTTPS://SUPPORT.GOOGLE.COM/ADS/ANSWER/2662922?HL=DE
DOUBLECLICK:
HTTPS://WWW.GOOGLE.COM / SETTINGS / U / 0 / ADS / AUTHENTICATED? HL = DE # DISPLAY_OPTOUT .

ALTERNATIVELY, YOU CAN DEACTIVATE THE USE OF COOKIES BY THIRD PARTY PROVIDERS BY VISITING THE DEACTIVATION PAGE OF THE
NETWORKING INITIATIVE:

HTTPS://WWW.NETWORKADVERTISING.ORG/CHOICES/ AND USE THE OPT OUT POSSIBILITIES MENTIONED THERE.

YOU CAN ALSO PREVENT THE INSTALLATION OF COOKIES BY CHOOSING THE APPROPRIATE SETTING IN YOUR BROWSER. THE USE OF OUR WEBSITE AND SERVICES MAY BE THEN, HOWEVER. ONLY POSSIBLE WITH RESTRICTIONS.

MORE INFORMATION ON DATA PROTECTION BY GOOGLE CAN BE FOUND AT:

HTTPS://SUPPORT.GOOGLE.COM/ADWORDSPOLICY/ANSWER/6020956 .

12. GOOGLE ADWORDS CONVERSION TRACKING

12.1. DESCRIPTION AND SCOPE OF THE DATA PROCESSING

We use Google AdWords Conversion Tracking, a service provided by Google Inc. (1600
Amphitheater Parkway, Mountain View, CA 94043, USA; hereinafter „Google“). Conversion tracking is a service that enables us to record what happens after a user clicks on one of our ads. We can also record which keywords, ads, ad groups and campaigns have led to which user actions. If you click on an advertisement from us in the Google search or on a selected website of the Google advertising network, a temporary cookie will be saved on your device (conversion cookie). When you complete an action, our system recognizes the cookie (via the code snippet you inserted) and records a conversion. Cookies for conversion tracking are only valid for 30 days. No personal data is collected and / or stored by means of the cookie.

12.2. PURPOSE

The purpose is to optimize our internet services for a more interest-based design and to improve the conversion rate.

12.3. LEGAL BASIS

The legal basis for collection and transfer is the
consent you gave when you started visiting our website in accordance with Art. 6 Paragraph 1 Clause 1 a) GDPR.

12.4. DURATION OF STORAGE

Cookies for conversion tracking are only valid for 30 days. No personal data is collected and / or stored by means of the cookie.

12.5. ELIMINATION POSSIBILITY

YOU CAN DISCONTINUE CONVERSION TRACKING AT ANY TIME WITH EFFECT FOR THE
FUTURE. DEACTIVATE THE FUNCTION IN THE BROWSER OF YOUR TERMINAL DEVICE:
HTTPS://WWW.GOOGLE.COM/SETTINGS/U/0/ADS/AUTHENTICATED
HTTPS://SUPPORT.GOOGLE.COM/ADS/ANSWER/2662922?HL=DE

YOU CAN ALSO PREVENT THE INSTALLATION OF COOKIES AS A WHOLE BY SELECTING
THE APPROPRIATE SETTING IN YOUR BROWSER. THE USE OF OUR WEBSITE AND SERVICES MAY BE THEN, HOWEVER. ONLY POSSIBLE WITH RESTRICTIONS.

13. GOOGLE ADSENSE

13.1. DESCRIPTION AND SCOPE OF THE DATA PROCESSING

We use the online service Google AdSense, which enables advertising on third-party sites. The
advertisements displayed on third-party websites are matched to the content of the respective websites by means of an algorithm
Third-party websites selected, which enables an interest-based addressing of the site visitor. When you visit our website, Google AdSense places a cookie on your browser, which enables the service provider to analyze your use of our website. Each time you visit our website, the browser on your device is automatically prompted by the Adsense cookie to transmit personal data to Alphabet Inc. for the purpose of online advertising and billing of commissions. The data is used to trace the origin of the visitors and clicks and subsequently to enable commission settlements. The data collected by the cookie is sent to Alphabet Inc. as far as it is necessary to collect and bill the advertisements displayed. transferred to the United States of America, stored and possibly passed on to third parties. Google AdSense is explained in more detail under this link https://www.google.de/intl/de/adsense/start/.

13.2. PURPOSE

The purpose of the Google AdSense component is the interest-based integration of
advertisements against commission on third-party sites in order to generate advertising income.

13.3. LEGAL BASIS

The legal basis for collection and transfer is the
consent you gave when you started visiting our website in accordance with Art. 6 Paragraph 1 Clause 1 a) GDPR.

13.4. DURATION OF STORAGE

The data will be deleted after 18 months at the latest.

13.5. REVOCATION AND DISPOSAL

You can object to the use of cookies at any time, with effect for the future. DEACTIVATE THE FUNCTION IN THE BROWSER OF YOUR TERMINAL DEVICE: YOU CAN PERMANENTLY OBJECT TO THE USE OF COOKIES AT ANY TIME, WITH EFFECT FOR THE FUTURE. THE
DISABLING FUNCTION OVER THE FOLLOWING LINKS TO ACCESS AND FOLLOW INSTRUCTIONS the local:

HTTPS://WWW.GOOGLE.COM/SETTINGS/U/0/ADS/AUTHENTICATED
HTTPS://SUPPORT.GOOGLE.COM/ADS/ANSWER/2662922?HL=DE .
ALTERNATIVELY, YOU CAN DEACTIVATE THE USE OF COOKIES BY THIRD
PARTY PROVIDERS BY ACCESSING THE DEACTIVATION PAGE OF THE
NETWORK ADVERTISING INITIATIVE:
https://WWW.NETWORKADVERTISING.ORG/CHOICES/ AND YOU CAN USE THE OPEN OPENINGS THERE.

YOU CAN ALSO PREVENT THE INSTALLATION OF COOKIES BY CHOOSING THE APPROPRIATE SETTING IN YOUR BROWSER. THE USE OF OUR WEBSITE AND SERVICES MAY BE THEN, HOWEVER. ONLY POSSIBLE WITH RESTRICTIONS.

FURTHER INFORMATION ON DATA PROTECTION AND COOKIES FOR ADVERTISING
ON GOOGLE ADSENSE CAN BE FOUND IN THE GOOGLE PRIVACY POLICY, IN PARTICULAR AT
THE FOLLOWING LINKS:

HTTPS://WWW.GOOGLE.DE/POLICIES/PRIVACY/PARTNERS/
HTTPS://WWW.GOOGLE.DE/INTL/DE/POLICIES/TECHNOLOGIES/ADS .

14. DOUBLECLICK

14.1. DESCRIPTION AND SCOPE OF THE DATA PROCESSING

We have integrated DoubleClick by Google on our website. DoubleClick by Google transfers data to the DoubleClick server when you are active on our website, which in turn triggers a cookie request to your browser. If your browser accepts this request, DoubleClick sets a cookie on your IT device. A DoubleClick cookie does not contain any personal data, but does contain a cookie ID, which is required, for example, to display an advertisement on the website and at the same time records which advertisements have already been displayed in order to avoid duplication. It is also possible to record conversions for commission accounting, for example if you were previously shown a DoubleClick advertisement and then use the same browser to shop on the advertiser’s website. DoubleClick transmits this information to Google every time the website is accessed for the purpose of online advertising and billing. DoubleClick cookies do not contain any personal data.

14.2. PURPOSE

The purpose of the cookie is to display interest-based advertising with a high
conversion rate in order to generate advertising income. The cookie is used, among other things, to place and display user-relevant advertising and to create reports on advertising campaigns or to improve them. The cookie is also used to avoid multiple displays of the same advertisement and to generate commission statements.

14.3. LEGAL BASIS

The legal basis for setting the cookie and the associated data processing is the consent you have given in accordance with Art. 6 Paragraph 1 Clause 1 a).

14.4. STORAGE DURATION

The data will be deleted after 26 months.

14.5. REVOCATION AND DISPOSAL

You can object to the use of cookies at any time, with effect for the future. DEACTIVATE THE FUNCTION IN THE BROWSER OF YOUR TERMINAL DEVICE: YOU CAN PERMANENTLY OBJECT TO THE USE OF THE COUBLECLICK COOKIES AT ANY TIME, WITH EFFECT FOR THE FUTURE. YOU CAN ACCESS THE DISABLING FUNCTION VIA THE FOLLOWING LINKS AND FOLLOW THE INFORMATION THEREOF:

HTTPS://WWW.GOOGLE.COM/SETTINGS/U/0/ADS/AUTHENTICATED?HL=DE#DISPLAY_OPTOUT .

ALTERNATIVELY, YOU CAN DEACTIVATE THE USE OF COOKIES BY
THIRD PARTY PROVIDERS BY VISITING THE DEACTIVATION PAGE OF THE
NETWORK
ADVERTISING INITIATIVE: https://WWW.NETWORKADVERTISING.ORG/CHOICES/ AND YOU CAN USE THE OPEN OUTPUTS. YOU CAN ALSO PREVENT THE INSTALLATION
OF COOKIES BY CHOOSING THE APPROPRIATE SETTING IN
YOUR BROWSER. THE USE OF OUR WEBSITE AND SERVICES
MAY BE THEN, HOWEVER. ONLY POSSIBLE WITH RESTRICTIONS. DETAILED INFORMATION ON DOUBLECLICK COOKIES CAN
BE FOUND AT
: HTTPS://SUPPORT.GOOGLE.COM/ADSENSE/ANSWER/2839090 .

15. GOOGLE TAG MANAGER

15.1. DESCRIPTION AND SCOPE

AVAJA.net uses the Google Tag Manager, a service provided by Google LLC, 1600 Ampitheatre Parkway, Mountain View, CA 94043, USA (“Google”) for users in Europe from Google Ireland Limited, Gordon House , Barrow Street, Dublin 4, Ireland. The Tag Manager itself, which uses tags, works without cookies and does not collect any personal data.

15.2. PURPOSE OF THE PROCESSING

The Tag Manager triggers other tags, which in turn may collect data. Corresponding explanations for these respective third-party providers can be found in this data protection declaration. The Google Tag Manager does not use this data itself. The Google Tag Manager only ensures that the usage data required by our partners (see the other data processing operations described in this data protection declaration) are forwarded to them. Some of the data is processed on a Google server in the USA. In the event that personal data is transferred to the USA, Google has submitted to the EU-US Privacy Shield.

15.3. LEGAL BASIS

The legal basis is Art. 6 Para. 1 S. 1 lit. f GDPR, based on our legitimate
interest in effectively integrating and managing multiple tags on our website. You can find more information on this in Google’s information on the Tag Manager .

15.4. DURATION OF PROCESSING

Since the Tag Manager is only used to manage the tags, no
personal data is stored in it.

15.5. ELIMINATION POSSIBILITY

IF YOU HAVE SET A DEACTIVATION OF COOKIES OR OTHERWISE PERFORMED
THIS, THIS WILL BE OBSERVED FOR ALL TRACKING TAGS USED WITH THE GOOGLE TAG MANAGER, THE TOOL WILL NOT CHANGE YOUR COOKIE SETTINGS.

16. CONTACT FORM AND EMAIL CONTACT

16.1. DESCRIPTION AND SCOPE

You can contact us on our website using our contact form or the email addresses provided there. If you contact us, your personal data transmitted with the email will be saved. If you send us inquiries via our website forms, your details from the forms, including the contact details you provided there, will be saved. In this context, the data will not be passed on to third parties.

16.2. PURPOSE OF THE PROCESSING

The processing and storage takes place solely for the purpose of processing the request and in the event of follow-up questions.

16.3. LEGAL BASIS

The legal basis for the processing of the data is that of you according to. Art. 6 Paragraph 1 Clause 1 a) GDPR.

16.4. DURATION OF PROCESSING

The data you enter will remain with us until you ask us to delete it, revoke your consent to storage or the purpose for data storage no longer applies (e.g. after your request has been processed). Mandatory legal provisions – in particular retention periods – remain unaffected.

16.5. ELIMINATION POSSIBILITY

YOU CAN OBJECT TO THE STORAGE OF YOUR PERSONAL DATA AT ANY TIME. A FORMLESS E-MAIL TO OFFICE@AVAJA.NET is sufficient. THE LEGALITY OF THE DATA PROCESSING UP TO THE REVOCATION REMAINS UNAFFECTED BY THE REVOCATION. IN SUCH A CASE, CONVERSATION CANNOT BE PERFORMED. IN THIS CASE, PERSONAL DATA STORED IN THE WAY TO CONTACT US WILL BE DELETED

17. NOTES FOR AVAJA.NET ONLY

17.1. LOCATION DATA

17.1.1. DESCRIPTION AND SCOPE OF THE DATA PROCESSING

After calling up the website, you will be asked whether we can determine your location. You can accept or reject this. If you answer yes, your location will be determined by means of a location service. You may give the following consent: „Should this website be allowed to access your location?“. If you decline, you can enter your location manually. If you have reached our website by clicking on a banner on a third party site, we have determined your approximate location based on your abbreviated IP address.

17.1.2. PURPOSE OF DATA PROCESSING

In order to be able to show you offers and prices in your area, we need your
location. Without the localization of your location – either by manually entering
your location or by automatic location determination – you can
only use the offer of the website to a limited extent.

17.1.3. LEGAL BASIS

The legal basis for the processing of location data is the consent you have given in accordance with Art. 6 Paragraph 1 Clause 1 a) GDPR.

17.1.4. DURATION OF STORAGE

The data is stored for a period of three years and deleted when revoked.

17.1.5. Objection and the possibility of removal

YOU CAN DISABLE THE AUTOMATIC LOCATION DETECTION AT ANY TIME AS FOLLOWS. BUTTON „AUTO-LOCATION“ / „NEVER FORWARD LOCATION TO THIS PAGE“

17.2. AVAJA TRACKING TOOL

17.2.1. DESCRIPTION AND SCOPE OF THE DATA PROCESSING

We use a tracking tool to collect data about your usage behavior. We use a so-called cookie for this. This is a text file that we store in the browser you are using. We collect the following data:
Action carried out

• SessionID
• Uuid (randomly generated identification number)
• Time
• Location data (blurred at postcode level)
• Browser version

17.2.2. PURPOSE OF DATA PROCESSING

We use this data to evaluate and evaluate the functionality of our
website, to place
advertisements in line with interests and to bill our customers for advertisements.

17.2.3. LEGAL BASIS

According to Article 6 Paragraph 1 Sentence 1 f) GDPR, the legal basis is our interest in
generating advertising revenue. This interest is transferring because we provide our service free of charge and are financed by advertising income.

17.2.4. DURATION OF STORAGE

We delete the data no later than 12 months after their collection.

18. ADVERTISING PIXELS

In advertising material (brochures, etc.) that are made available on our portals, pixels of the respective retailer or service provider can be integrated, by means of which it is recorded how often, for example, a brochure is clicked on. This information is forwarded to the respective dealer. The IP address is only processed in a shortened and therefore anonymized form. It is therefore impossible that a personal reference can be made. The advertiser is responsible for the anonymous processing of the data. AVAJA remains the contact person for the user.

19. SOCIAL MEDIA

19.1. SOCIAL MEDIA PRESENCES

We are represented in the following social networks with our own social media presences and can be reached by you:

• Facebook | ( Data protection )
• Instagram | ( Data protection )
• Pinterest | ( Data protection )
• YouTube | ( Data protection )
• TikTok | ( Data protection )

In particular, our Facebook presence is operated jointly with Facebook Ireland Ltd., 4 Grand Canal Square, D2 Dublin, Ireland (“Facebook”). We inform you about news on social media and like to use the possibilities of social networks to communicate directly with their members and our users and to provide information about our products and services.

Please note, however, that we have little influence on data processing by social networks. If you visit a social media presence, your data can also be processed in countries outside the European Union, in which there is a lower level of data protection than in the European Union (e.g. in the USA). Therefore, please check carefully which personal information and messages you share via social networks and, if in doubt, use other contact options offered by us.

We can also receive statistics on the use of our social media presence from the networks (e.g. information on the number of views, names of users, interactions such as likes and comments, and summarized demographic and other information or statistics). (The legal basis is Art. 6 Para. 1 Clause 1 b) GDPR if we receive and process your data as part of a specific request via our social media presence and Art. 6 Para. 1 Clause 1 f) GDPR based on our aforementioned legitimate Interest if the processing concerns the creation of the statistics mentioned.) You can find more information on the type and scope of these statistics regarding Facebook in the Facebook page statistics notes. Further information on the respective responsibilities can be found in the Facebook Page Insights Supplement .

Insofar as we receive your personal data as part of our social media offer, you are entitled to the rights mentioned in this data protection declaration in section E below. If you also want to assert your rights against the social media provider, the easiest way to do this is to contact the respective provider directly. He knows both the details of the technical operation of his platform and the specific purposes of data processing and can implement appropriate measures on request if you make use of your rights. The contact details can be found in the data protection information linked above.

We are also happy to support you in asserting your rights, as far as we can and forward your inquiries to the respective provider. You can contact us at any time using the contact details given in Section A under II.

We have embedded functions of the respective social networks on our website (so-called social plug-ins). If you use these functions to share or comment on the linked content, a direct connection is established with the servers of the respective social networks. We have embedded the functions of the social networks in such a way that the networks only find out that you have accessed our website when you actually interact with the respective social plug-ins and not when you visit our site.

If you are logged in to the respective social network with your user name and password when interacting with the respective social plug-ins, the information that you are visiting our site is transferred there and the respective provider can assign this information to your user account. If you interact with the social plug-ins, ie use the Facebook “Like” or the Twitter “Tweet This” function, the content of our pages will then be linked to your Facebook or Twitter profile and shared.

If you are not a member of the respective social networks or have logged out of the providers before visiting our website, there is still the possibility that at least your IP address will be transmitted and stored there when you interact with the respective social plug-ins. We would like to point out that the content and scope of the data that is collected and transmitted directly from the social networks via the social plug-ins, as well as the storage period of up to 250 days and the purposes of use, is determined exclusively by the respective providers. We have no influence on this information transfer. For more information, please refer to the provider’s data protection information linked above.

The legal basis for integrating the social plug-ins is Art. 6 Paragraph 1 Clause 1 f) GDPR based on our legitimate interest in providing the above-mentioned social network functions.

19.2. PRIVACY POLICY FOR OUR SOCIAL MEDIA PAGES

We, the AVAJA, operate the following social media sites:

• Facebook | ( Data protection )
• Instagram | ( Data protection )
• Pinterest | ( Data protection )
• YouTube | ( Data protection )
• TikTok | ( Data protection )

19.3. RESPONSIBILITY OF THE PLATFORM OPERATORS

We have only limited influence on the data processing by the operators of the social media platform (e.g. management of members and the information shared). At the points where we can influence and parameterize the data processing, we work towards the data protection-compliant handling by the operator of the social media platform within the scope of the possibilities available to us. In many places, however, we cannot influence the data processing by the operator of the social media platform and we also do not know exactly which data they are processing. The platform operator operates the entire IT infrastructure of the service, maintains its own data protection regulations and maintains its own user relationship with you (provided you are a registered user of the social media service).

You can find more information on data processing by the provider of the social media platform and other options for objection in the provider’s privacy policy:

• Facebook | ( Data protection )
• Instagram | ( Data protection )
• Pinterest | ( Data protection )
• YouTube | ( Data protection )
• TikTok | ( Data protection )

19.4. OUR RESPONSIBILITY

19.4.1. PURPOSE OF THE DATA PROCESSING BY US / LEGAL BASIS

The purpose of data processing by us on our social media presences is to inform customers about offers, products, services, promotions, competitions, technical issues, company news and the interaction with visitors to the social media sites on these topics, as well as answering relevant questions, praise or criticism.

We only reserve the right to delete content if this is necessary. Possibly. we share your content on our site if this is a function of the social media platform and communicate with you via the social media platform. The legal basis is Art. 6 Para. 1 S. 1 lit. f GDPR. The data processing takes place in the interest of our public relations and communication.

We have no way of influencing the processing of your data by AVAJA Austria in the context of customer communication with our partners or on the basis of competitions.

As already stated, we pay attention to the places where the provider of the social media platform gives us the opportunity to make our social media pages as data protection compliant as possible.

19.5. SOCIAL MEDIA SITES AND SERVICES:

19.5.1. DATA SUCH AS COMMENTS, VIDEOS, PICTURES, LIKES, PUBLIC MESSAGES ETC.

The data you enter on our social media pages, such as B. Comments, videos, pictures, likes, public messages etc. are published for this purpose by the social media platform and are never used or processed by us for other purposes. We only reserve the right to delete illegal content if this is necessary. This is the case, for example, with infringing or illegal posts, hateful comments, suggestive comments (explicitly sexual content) or attachments (e.g. pictures or videos) that may violate copyrights, personal rights, criminal laws or the ethical principles of AVAJA Austria.

Possibly. we share your content on our site if this is a function of the social media platform and communicate via social media If you send us a request on the social media platform, we may also refer you to other, secure communication channels depending on the required response that guarantee confidentiality. You always have the option to send us confidential inquiries to our under no. 1 or the address given in the imprint.

Concerning. Data that you send us in a confidential way (e.g. via private message function, letter or e-mail), we generally exclude the transfer of the data to third parties outside the AVAJA Group. As an exception, data are processed by contract processors on our behalf. These are carefully selected, are also audited by us and contractually bound according to Art. 28 GDPR. Furthermore, it may be necessary that we have to pass on extracts of your confidential inquiry to contractual partners (e.g. suppliers in the case of product-specific inquiries) in order to process your inquiry. In these cases, however, the request is anonymized beforehand so that the third party cannot establish any reference to you. If it is necessary to pass on your personal information in individual cases,

19.5.2. STORAGE DURATION / CRITERIA FOR DETERMINING THE STORAGE DURATION

All public posts by you on this social media presence remain in the timeline indefinitely, unless we delete them due to an update of the underlying topic, a legal violation or a violation of our guidelines or you delete the post yourself.

Concerning. We have no way of influencing the deletion of your data by the operator himself. Therefore, the data protection regulations of the respective operator apply in addition.

19.5.3. COMPETITIONS

Purpose of data processing / legal basis: You have the option of participating in various competitions on our website, from our newsletter, on our presences in social media. Unless otherwise stipulated in the respective competition, or you have not given us any further express consent, the personal data you provide to us as part of the competition participation will only be used for the processing of the competition (e.g. winners, notification of winners, sending of the prize, if necessary, anonymous announcement of winners). If you act under a real name in the affected social media network or are recognizable by photos in your profile, identification by other users on our part cannot be ruled out.

The legal basis for data processing in the context of competitions is generally Article 6 Paragraph 1 Letter b) GDPR. If a declaration of consent is given in the context of a competition, Article 6 (1) (a) GDPR is the legal basis for the data processing based on the consent. If you have given your consent in the context of a competition, you have the option of revoking this consent at any time with effect for the future.

19.5.4. RECIPIENTS / CATEGORIES OF RECIPIENTS

The data will only be passed on to third parties if this is necessary for the implementation of the competition or the sending of the prize (e.g. the sponsor of a competition or the transfer of data to a logistics company) or you have given us your express consent . Please note that with some social media presences, participation may also be possible directly on the publicly viewable websites (e.g. on the pin board or via comments) and thus other users can also see the fact of your participation publicly through their interaction with us. In addition, in such cases, the fact that you have won can be recognizable on the respective social media presence.

19.5.5. STORAGE DURATION / CRITERIA FOR DETERMINING THE STORAGE DURATION

After the competition has ended and the winners have been announced, the participants‘ personal data will be deleted. In the case of non-cash prizes, the data of the winners will be stored for the duration of the statutory warranty claims in order to initiate a repair or replacement if necessary. When participating in a competition on a social media site (e.g. by post or comment), we have no control over the deletion of your data by the operator. Therefore, the data protection regulations of the respective operator of the social media site also apply.

19.5.6. SHARED RESPONSIBILITY, ART. 26 ABS. 1 GDPR

There is partly a relationship with the operator of the social media service in accordance with Art. 26 Para. 1 GDPR (joint responsibility):

The platform operator and we act as jointly responsible for the web tracking methods used by the operator of the social media platform. The web tracking can also take place regardless of whether you are logged in or registered with the social media platform. As already shown, we can unfortunately hardly influence the web tracking methods of the social media platform. We cannot switch this off, for example. The legal basis for the web tracking methods is Art. 6 Para. Lit. f) GDPR. The interest in optimizing the social media platform and the respective fan page is to be regarded as legitimate within the meaning of the aforementioned regulation.

Further information on the recipients or categories of recipients as well as the storage period or the criteria for determining the storage period can be found in the data protection declarations of the platform operators. We have no
influence on this .

The options for exercising your rights to prevent these web tracking methods can be found in the data protection declarations of the platform operators listed under section 2. You can also contact the platform operator using the contact details given in the respective legal notice.

With regard to statistics that the provider of the social media platform makes available to us, we can only influence and also prevent them to a limited extent. However, we make sure that no additional optional statistics are made available to us.

Please be aware of this: It cannot be ruled out that the provider of the social media platform will use your profile and behavioral data, for example to evaluate your habits, personal relationships, preferences, etc. AVAJA Austria has no influence on the processing or transfer of your data by the provider of the social media platform.

19.5.7. YOUR AFFECTED RIGHTS

According to Art. 15 Para. 1 GDPR, you have the right to request, free of charge, information about the personal data stored about you at Lidl Austria. In addition, if the legal requirements are met, you have the right to correction (Art. 16 GDPR), deletion (Art. 17 GDPR) and restriction of processing (Art. 18 GDPR) of your personal data.

If the data processing is based on Art. 6 Paragraph 1 e) or f) GDPR, you have a right of objection according to Art. 21 GDPR. If you object to data processing, this will not take place in the future, unless the person responsible can prove compelling reasons worthy of protection for further processing that outweigh the interest of the person concerned in the objection.

If you have made the processed data available yourself, you have the right to data transfer according to Art. 20 GDPR. In the case of social media presences, however, you can usually only assert this against the operator of the social media platform, as only this operator has access to your profile data.

If the data processing is based on consent in accordance with Art. 6 Paragraph 1 a) or Art. 9 Paragraph 2 a) GDPR, you can revoke your consent at any time with effect for the future without affecting the legality of the previous processing. In the aforementioned cases, if you have any questions or if you have complaints, please contact the data protection officer in writing or by e-mail. In accordance with Art. 77 GDPR, you also have the right to lodge a complaint with the competent data protection supervisory authority.

If you would like to exercise your data subject rights with regard to a certain data processing over which we have an influence, please contact us. We will then check your request (e.g. request for information or objection) ourselves or, if necessary, forward it to the responsible social media platform, provided that the subject of your request is data processing by the operator of the social media network.

19.5.8. SOCIAL LISTING

Purposes of data processing / legal bases:

In addition to the information you provide to us directly via social networks, we continue to use the option of so-called social listening to get an idea of ​​how our products and services are perceived and to identify any potential for improvement. Posts on online platforms (Xing, Facebook, etc.) are evaluated according to a search request (e.g. for a new product line). Only those contributions will be viewed that have been freely made available by you to an unrestricted public.

The scope of the data collected is primarily determined by the type and content of the respective article; For example, a posting in text form or an uploaded image file can be affected. In individual cases, the user ID used can also be relevant; if AVAJA would like to offer help with any problems. In some cases, we also receive information from the respective platform operators about the reach of the relevant posts.

The legal basis for the processing of personal data in the context of social listening is Art. 6 Paragraph 1 Letter f) GDPR, because we have a legitimate interest in
recognizing any deficiencies in our products and services in freely visible statements and being able to respond appropriately. Recipients / categories of recipients:

The personal data processed in the context of social listening will not be passed on to external third parties.

Storage period / criteria for determining the storage period:

AVAJA does not store the relevant data permanently, but merely analyzes it in a targeted manner with regard to potentially required countermeasures.

20. AVAJA ECOMMERCE

As “AVAJA eCommerce”, we provide interactive flip catalogs to partners participating in the Google advertising network. When the advertising material is displayed and subsequent success tracking using so-called „tracking pixels“, we collect the following data:

• Action carried out in the advertising material
• SessionID
• Server access logs with typical browser data (user agent, call-up URL, IP address (anonymized), referrer and time).

The purpose is to display interest-based advertisements via the Google advertising network on third-party websites in order to generate advertising income. The legal basis for processing is the consent you gave before you start using the website on which “AVAJA.net” is integrated in accordance with Art. 6 paragraph 1 sentence 1 b) GDPR. The data will be deleted after a maximum of 24 months.

DATA SUBJECT RIGHTS

If your personal data is processed, you are a data subject within the meaning of the
GDPR and you have the following rights vis-à-vis the person responsible.

RIGHT OF PROVIDING INFORMATION

You can request information from the person responsible about the extent to which we process personal data relating to you. If such processing has taken place, you can request the following information from the person responsible:

(1) the purposes for which the personal data are processed;

(2) the categories of personal data that are processed;

(3) the recipients or the categories of recipients to whom the personal data relating to you have been disclosed or are still being disclosed;

(4) the planned duration of the storage of your personal data or, if specific information is not available, criteria for determining the storage duration;

(5) the existence of a right to correction or deletion of your personal data, a right to restrict processing by the person responsible or a right to object to this processing;

(6) the right to lodge a complaint with a supervisory authority;

(7) all available information about the origin of the data if the personal data is not collected from you;

(8) the existence of automated decision-making including profiling in accordance with Art. 22 Para. 1 and 4 GDPR and meaningful information about the logic involved and the scope and intended effects of such processing for you.

You have the right to request information about whether your personal data is being transmitted to a third country or to an international organization. In this context, you can request to be informed about the appropriate guarantees according to Art. 46 DSGV O in connection with the transmission.

RIGHT TO CORRECTION

You have a right to correction and / or completion vis-à-vis the person responsible if the processed personal data concerning you is incorrect or incomplete. The person responsible must make the correction immediately.

RIGHT TO RESTRICTION OF PROCESSING

You can request the restriction of the processing of your personal data under the following conditions:

(1) if you dispute the accuracy of the personal data concerning you for a period of time that enables the person responsible to check the accuracy of the personal data;

(2) if the processing is unlawful and you refuse to delete the personal data and instead request the restriction of the use of the personal data;

(3) if the person responsible no longer needs the personal data for the purposes of processing, but you need them to assert, exercise or defend the law, or

(4) if you have lodged an objection to the processing in accordance with Art. 21 Para. 1 DSGV O and it has not yet been determined whether the legitimate reasons of the person responsible outweigh your reasons.

If the processing of your personal data has been restricted, this data may only be saved with your consent or to assert, exercise or defend legal claims or to protect the rights of another natural or legal person or for reasons of an important public interest of the Union or a member state. If the processing restriction has been restricted according to the above conditions, you will be informed by the person responsible before the restriction is lifted.

21. RIGHT TO DELETION

DELETION OBLIGATION

You can request the person responsible to delete your personal data immediately if one of the following reasons applies:

(1) The personal data concerning you are no longer necessary for the purposes for which they were collected or otherwise processed;

(2) You revoke your consent on which the processing was based in accordance with Art. 6 Paragraph 1 Clause 1 a or Art. 9 Paragraph 2a GDPR and there is no other legal basis for the processing;

(3) You object to the processing in accordance with Art. 21 Para. 1 GDPR and there are no overriding legitimate reasons for the processing or you object to the processing in accordance with Art. 21 Paragraph 2 GDPR;

(4) the personal data concerning you have been processed unlawfully.

(5) The deletion of your personal data is necessary to fulfill a legal obligation under Union law or the law of the member states to which the person responsible is subject.

(6) the personal data relating to you was collected in relation to the information society services offered in accordance with Art. 8 Para. 1 GDPR.

22. INFORMATION TO THIRD PARTIES

If the person responsible has made the personal data concerning you public and is obliged to delete it in accordance with Art. 17 Para. 1 DSGV O, he shall take appropriate measures, including technical measures, to identify the person responsible for the data processing, taking into account the available technology and the implementation costs who process the personal data, that you, as the data subject, have requested them to delete all links to this personal data or copies or replication of this personal data.

23. EXCEPTIONS

The right to deletion does not exist if processing is necessary:

(1) to exercise the right to freedom of expression and information;

(2) To fulfill a legal obligation that requires processing under the law of the Union or of the Member States to which the person responsible is subject, or to perform a task that is in the public interest or in the exercise of official authority that has been transferred to the person responsible ;

(3) for reasons of public interest in the area of ​​public health in accordance with Art. 9 Paragraph 2 h and i and Art. 9 Paragraph 3 GDPR;

(4) for archiving purposes in the public interest, scientific or historical research purposes or for statistical purposes in accordance with Art. 89 Para. 1 GDPR, insofar as the law mentioned under Section A is likely to make the realization of the objectives of this processing impossible or seriously impair it, or

(5) for the establishment, exercise or defense of legal claims.

24. RIGHT TO INFORMATION

If you have asserted the right to correction, deletion or restriction of processing against the person responsible, the person responsible is obliged to notify all recipients to whom the personal data relating to you has been disclosed of this correction or deletion of the data or restriction of processing, unless , this turns out to be impossible or involves a disproportionate effort. You have the right to be informed about these recipients by the person responsible.

25. RIGHT TO DATA PORTABILITY

You have the right to receive the personal data concerning you, which you have provided to the person responsible, in a structured, common and machine-readable format. You also have the right to transfer this data to another person in charge without hindrance by the person in charge to whom the personal data was provided, provided that

(1) the processing is based on consent in accordance with Art. 6 Paragraph 1 Clause 1 a GDPR or Art. 9 Paragraph 1 a GDPR or on a contract in accordance with Art. 6 Paragraph 1 Clause 1 b GDPR and

(2) the processing is carried out using automated procedures.
In exercising this right, you also have the right to have your personal data transmitted directly from one person in charge to another person in charge, insofar as this is technically feasible. This must not impair the freedoms and rights of other people. The right to data portability does not apply to the processing of personal data that is necessary for the performance of a task that is in the public interest or takes place in the exercise of official authority that has been transferred to the person responsible.

26. RIGHT TO OBJECT

You have the right, for reasons that arise from your particular situation, to object at any time to the processing of your personal data, which is based on Art. 6 Paragraph 1 Clause 1 e or f GDPR; this also applies to profiling based on this provision. The person responsible will no longer process the personal data concerning you unless he can prove compelling legitimate reasons for the processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims. If the personal data concerning you are processed in order to conduct advertising directly, you have the right to object at any time to the processing of your personal data for the purpose of such advertising: this also applies to profiling insofar as it is associated with such direct advertising. If you object to processing for direct marketing purposes, your personal data will no longer be processed for these purposes. In connection with the use of information society services, you have the option of exercising your right of objection by means of automated processes in which technical specifications are used. the personal data relating to you will no longer be processed for these purposes. In connection with the use of information society services, you have the option of exercising your right of objection by means of automated processes in which technical specifications are used. the personal data relating to you will no longer be processed for these purposes. In connection with the use of information society services, you have the option of exercising your right of objection by means of automated processes in which technical specifications are used.

27. RIGHT TO REVOCATION OF THE PRIVACY
POLICY CONSENT

You have the right to withdraw your declaration of consent under data protection law at any time.

Withdrawing your consent does not affect the legality of the processing carried out on the basis of your consent up until the withdrawal.

28. AUTOMATED DECISIONS IN INDIVIDUAL CASES, INCLUDING PROFILIN

You have the right not to be subject to a decision based solely on automated processing, including profiling, which has legal effects on you or which significantly affects you in a similar manner. This does not apply if the decision

(1) is necessary for the conclusion or performance of a contract between you and the person responsible,

(2) is permissible on the basis of legal provisions of the Union or of the member states to which the person responsible is subject and these legal provisions contain appropriate measures to safeguard your rights and freedoms and your legitimate interests or

(3) is made with your express consent. However, these decisions may not be based on special categories of personal
data according to Art. 9 Paragraph 1 GDPR, unless Art. 9 Paragraph 2 a or g applies and appropriate measures to protect rights and freedoms as well Your legitimate interests have been met. With regard to the cases mentioned in (1) and (3), the person responsible shall take appropriate measures to safeguard the rights and freedoms and your legitimate interests, including at least the right to have a person intervene on the part of the person responsible, to express their own point of view and heard on contesting the decision.

29. RIGHT TO COMPLAINT TO A REGULATORY AUTHORITY

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the member state of your place of residence, your place of work or the place of the alleged
violation if you are of the opinion that the processing of your personal data is contrary to the GDPR violates. The supervisory authority to which the complaint was lodged informs the complainant about the status and results of the decision, complaint including the possibility of a judicial remedy according to Art. 78 GDPR.

30. APPLICABLE LAW AND JURISDICTION

30.1. Austrian law applies.

30.2. For all legal transactions between AVAJA and the customer and unless there are any compelling statutory provisions to the contrary, Austrian law is to be applied exclusively, excluding its reference norms and UN sales law and the non-mandatory provisions of the IPRG and the EVÜ
.

30.3. For consumers within the meaning of Art. 5 EVÜ, their national mandatory
consumer protection regulations apply , unless the respective
Austrian regulations are more favorable for the consumer.

30.4. If the customer does not have a general place of jurisdiction in Germany, has relocated his place of residence or habitual abode abroad after conclusion of the contract, or if his place of residence or habitual abode is unknown at the time the action is brought, then Vienna is the exclusive place of jurisdiction for all disputes resulting directly or indirectly from the contractual relationship.

30.5. If the customer has his domicile or his habitual residence in Germany or if he is employed in Germany, only the jurisdiction of the court can be established for an action against him according to §§ 88, 89, 93 Paragraph 2 and 104 Paragraph 1 JN in whose district the place of residence, habitual abode or place of employment is. This does not apply to legal disputes that have already arisen. For any legal disputes arising from the contract, the mandatory consumer law provisions at the customer’s place of residence are also applicable to the contractual relationship.

30.6. The place of performance is Vienna, Austria

31. PRIVACY POLICY

All data collected by us are used and processed exclusively within the framework of the applicable data protection laws in accordance with ours.

By agreeing to the terms and conditions, you agree that AVAJA may process your data in accordance with the data protection guidelines and use it for AVAJA’s advertising purposes!

32.THIRD PARTY RIGHTS (COPYRIGHT)

32.1. The customer acknowledges that third party rights, in particular copyrights and other intellectual property rights, may exist on the object of purchase. He undertakes to use the object of purchase only within the framework of what is contractually and / or legally permitted.

32.2. The above point applies accordingly to the rights of AVAJA to its homepage and its contents such as texts, graphics, logos, brands, titles, programs, price compilations, databases and other services.

33. DATA PROCESSING IN THIRD COUNTRIES

Since we only create content and information but do not make any direct sales, the logging of data is limited to what is necessary to ensure the running of the site. We do not forward any specific user data (personal data). We adhere to the GDPR requirements. In this context, we do not store or forward any more detailed personal information. We check the information from the software manufacturers of the software and plug-ins we use. We ask you to look for any data collected through partnerships and plugins, but in compliance with the GDPR, in our Terms and Conditions. If you have any further questions or comments that are not covered, please contact us in writing.

If data is transferred to bodies whose registered office or the place of data processing is not located in a member state of the European Union or in another signatory state to the Agreement on the European Economic Area, we ensure that, outside of the exceptions permitted by law, with the recipient before it is passed on either an adequate level of data protection exists (e.g. through an adequacy decision by the European Commission, through appropriate guarantees such as self-certification of the recipient for the EU-US Privacy Shield or the agreement of so-called EU standard contractual clauses of the European Union with the recipient) or You have given sufficient consent.

34. LINKS TO THIRD PARTY OFFERS

Websites and services of other providers to which this website links were and are designed and provided by third parties. We have no influence on the design, content and function of these third-party services. We expressly distance ourselves from all content of all linked third-party offers. Please note that linked third-party offers may install your own cookies on your device or collect personal data. We have no influence on this. If necessary, please inform yourself directly from the providers of these linked third-party offers.

35. OTHER PROVISIONS

35.1. Legal declarations of intent and other legally relevant declarations must be made in writing (also electronically, e.g. by email) to the last known or announced address. Proof of access (e.g. arrival of the electronic message on the incoming mail server) is made by the declaring party.

35.2. Until the contractual relationship has been fully processed, the customer must notify AVAJA of any changes to his personal data. Otherwise, declarations from AVAJA are deemed to have been received if they were sent to the last known address (office@avaja.net).

35.3. All inquiries, information, etc. in connection with AVAJA should be sent to the e-mail address office@avaja.net.

35.4. AVAJA recognizes the Internet Ombudsman, Margaretenstr. 70/2/10, 1050 Vienna, (www.ombudsmann.at) as an out-of-court dispute settlement.

35.5. Contract, order and business language is German.

35.6. Severability clause: Should one or more provisions of these terms and conditions be or become ineffective or void, this does not result in the ineffectiveness or nullity of the entire terms and conditions, but the ineffective or void provision is to be replaced by a regulation that reflects the economic content of the affected Determination comes closest.

35.7. Acquisition of goods from / to non-EU countries: AVAJA is not responsible to pay the tax to be paid in the respective non-EU country, nor to pay the due customs duties because we do not sell any goods.

36. RIGHT OF WITHDRAWAL FOR CONSUMERS UNDER AUSTRIAN LAW

36.1. For contracts between AVAJA and customers to which the mandatory distance selling consumer protection provisions of Austrian law apply, the „cancellation rules according to Austrian consumer protection law“ (cancellation policy for consumers based in Germany) apply.