Data protection

Date: 08.09.2022

1. General information

The protection of your personal data is particularly important to us. We process your personal data exclusively on the basis of the statutory provisions (GDPR, DSG, TKG 2003).

For the provision of our website, for the processing of the sale of our goods and the provision of our services, we process information about you, so-called personal data - or hereinafter referred to as "data". The term "processing" means any handling of the data, such as the collection, storage, use or deletion of personal data.

We would be happy to inform you within the scope of the data protection declaration about the processing of your personal data and the claims and rights to which you are entitled under data protection regulations.

Responsible for the processing of your personal data is:

REMUS Innovation GmbH

Ruhmannstraße 11

Tel. No.: +43 5 05201 - 0

Email: office@remus.at

For all complaints, questions and suggestions on the subject of data protection, we are at your disposal at the addresses mentioned Contact details available at office hours. 

2. Data processing on our website and our web-shop

2.1. General information

As part of our website and web shop, we process data that you provide to us (e.g. when placing orders), logs (for security reasons, our servers log who makes inquiries) and cookies (these are small text files that are stored on your device and contain information to recognize you).

The web server for the operation of our website is technically operated by Hetzner GmbH as the processor.

The information generated is usually transferred to a Hetzner server in Germany and stored there. The appropriate level of protection for the transmission results from standard contractual clauses in accordance with Article 46 GDPR.

To prevent third-party cookies from being set, you can block so-called third-party cookies in your browser. Here you will find instructions for the most common browsers:

• Firefox: here
• Chrome: here
• Internet Explorer: here
• Safari: Third-party cookies are blocked by default in Apple's Safari.

2.2. Data processing for the operation and security of our website and our web shop (server logs):

2.2.1. Server logs

Purpose of processing: When you visit our website, the web server collects usage data (so-called server logs). The collection of this data is necessary to technically enable the connection to our server and the use of the website. This data is also used to defend against and analyze attacks.

The following server logs are collected: The IP address of the requesting device, together with the date, time, the request, which file is requested (name and URL), what amount of data is transferred to you, a message as to whether the request was successful, Identification data of the browser and operating system used, as well as the website from which access was made (if access is via a link).

Legal basis of processing: Your data is processed on the basis of our legitimate interest in ensuring the operation of the service and system security.

Recipient of the data: The web server for the operation of our website is technically operated by the IT company Hetzner GmbH operated as a processor. If there has been a hacker attack, the data from the server logs will be passed on to the law enforcement authorities. Any further transfer to third parties does not take place.

Additional information: The server logs are stored for a maximum of 1 month .

2.3. Data processing for marketing purposes:

2.3.1. Web analysis

We use the following tool to process data about your use of our website and our web shop in order to be able to adapt them to your interests as best as possible.

GOOGLE ANALYTICS

A web analysis service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google")

Purpose of processing: Google Analytics stores cookies in order to recognize you and then to be able to create personalized user statistics about your website activities we have activated the "anonymize IP" module from Google. For this purpose, the IP address assigned to you is anonymized by Google within the European Union. The cookies stored by Google Analytics on your device result from the data protection settings of the cookie banner from Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich Germany.

Legal basis of processing: Your data will be processed on the basis of your consent. If you agree to the processing of your data on our cookie banner, you agree that we may process your data to the extent described here.

Recipients of the data: The information generated by the cookie about your use of the website is usually transmitted to a Google server in the USA and stored there. The appropriate level of protection for the transmission results from standard contractual clauses in accordance with Article 46 GDPR. For more information on the Standard Contractual Clauses and applicable or reasonable guarantees, please visit https://privacy.google.com/businesses/processorterms/. Google works for us as a processor and may only use the transmitted data to process specific orders and is contractually obliged to us to comply with the statutory provisions on data protection.

Further information: You can prevent the storage of cookies by setting your browser software accordingly; we would like to point out to you however that in this case you will if applicable not be able to use all functions of the website in full. You can also prevent the data generated by the cookie and related to your use of the website (including your anonymized IP address) from being sent to Google and the processing of this data by Google by clicking on the following link (http:/ /tools.google.com/dlpage/gaoptout?hl=en) Download and install the available browser plugin.

WEB ANALYSIS

Purpose of processing: We use a web analysis tool from HOTJAR Ltd. a. The data is processed for the creation of evaluations and for the technical optimization of the website. Web analysis enables us to determine how many users visit our website, which pages, products and categories are popular and which content is rather uninteresting. The data required for the analysis is determined by so-called tracking pixels (these are small image files that are integrated on our website and enable an analysis of your user behavior) or by a server log file.

The following user data is recorded by our web analysis:

• Requested website or file Browser
• and browser
• Operating system
• used Device type used
• Time of access
• Click path
• Date and time of visit
• Downloads
• Location information
• JavaScript support
• Visited pages
• Purchase activity
• Widget interactions

So that no conclusions can be drawn about individual users of our website are, the IP address will be anonymized immediately. There is therefore no processing of personal data.

Recipients of the data: The information generated by the cookie about your use of the website is usually transmitted to a Hotjar Limited server in Ireland (EU). The data collected is evaluated by us.

Further information: Your data will be stored for a maximum of 1 year .

2.3.2. Remarketing

We reserve the right Google & Meta remarketing .

Purpose of processing: In order to place advertisements tailored to you, we use re-marketing for advertisements placed and banner advertising in order to present users with interest-based advertisements.

These cookies stored on your device result from the data protection settings of the cookie banner from Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich Germany.

Legal basis of processing: Your data will be processed on the basis of your consent.

Recipients of the data: The information generated by the cookie about your use of the website is usually transmitted to a server in the USA and stored there. The appropriate level of protection for the transmission results from standard contractual clauses in accordance with Article 46 GDPR.

We reserve the right to also use the re-marketing function of Google Ads, an online marketing service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"), on our website.

Purpose of processing: In order to place advertising tailored to you and to evaluate your interaction with these advertisements. The use of this tool also enables us to present interest-based advertisements.

Legal basis for processing: Your data is processed on the basis of your consent.

Recipients of the data: The Information generated by the cookie about your use of the website is usually transmitted to a Google server in the USA and stored there. The appropriate level of protection for the transmission results from standard contractual clauses in accordance with Art. 46 DSGVO. Further information on the standard contractual clauses and suitable or appropriate guarantees are available at https://privacy.google.co m/businesses/processorterms/. Google works for us as a processor and may only use the transmitted data to process specific orders and is contractually obliged to us to comply with the statutory provisions on data protection.

2.4. Data processing as part of our social media activities:

We use so-called "social media plugins". These enable us to show you interaction elements or content (e.g. text posts, graphics, images and videos) from social media services. Data, including personal data, can be transmitted to the social media service providers via these plugins and used by them if necessary.

When you visit our website, a direct connection between your browser and the server of the social media service provider is only established via the social media plugins if you have consented to the transmission of the data.

We currently use social media plugins for the following services:

FACEBOOK

We use Plugins of the Facebook service on our website. The plugins can display interaction elements or content (e.g. videos, graphics or text contributions) and can be recognized by one of the Facebook logos (white "f" on a blue tile, the terms "Like", "I like" or a "thumbs up" sign ). With the help of the plugins, it is possible for you to "Like" a contribution on our website or to share it on Facebook. Data is only transmitted to Facebook once you have consented

to itsfrom the data protection settings of the cookie banner from Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich Germany.You

more information about Facebook and the exact scope and purpose of data processing in Facebook's data protection declaration at https://www.facebook.com /privacy/explanation. Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland is responsible for data processing.

YOUTUBE

W I use on our website plugins of the YouTube service. The plugins can display interaction elements or content (e.g. videos, graphics or text contributions). Data can be sent to YouTube via these plugins and may be used by YouTube. Data is only transmitted to YouTube if you have consented to its use.

The cookies stored by Google on your device result from the data protection settings of the cookie banner from Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich Germany. You

can find more information about YouTube and the exact scope and purpose of data processing in Google's data protection declaration at https https://policies.google.com/privacy. Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland is responsible for data processing.

2.5. Other third

We also use the following third-party providers to improve our website:

GOOGLE MAPS

With the integration of Google Maps, we can display Google's map service directly on our website and thus enable you to use the map function. By integrating Google Maps, data can be sent to Google and possibly used by Google. When you visit our website, data is not automatically transmitted to Google.

When integrating Google Maps into our website, we use the so-called "two-click solution". Therefore, when you visit our website, data is not automatically transmitted to Google. Only when you click on the corresponding button on the Google Maps map will data be transmitted to Google.

The appropriate level of protection for the transmission results from standard contractual clauses in accordance with Article 46 GDPR. For more information on the Standard Contractual Clauses and applicable or reasonable guarantees, please visit https://privacy.google.com/businesses/processorterms/. Google works for us as a processor and may only use the transmitted data to process specific orders and is contractually obliged to us to comply with the statutory provisions on data protection.

CLOUDFLARE

This is a service that increases the security and performance of websites. By integrating Cloudflare, data can be sent to a server in the USA. The appropriate level of protection for the transmission results from standard contractual clauses in accordance with Article 46 GDPR. For more information on the Standard Contractual Clauses and applicable or reasonable guarantees, please visit  https://www.cloudflare.com/privacypolicy/. Cloudflare works for us as a processor and may only use the transmitted data to process specific orders and is contractually obliged to us to comply with the statutory data protection regulations.

3. Data processing for the purpose of direct advertising:

Purpose and legal basis of the processing: If we have received your contact details in connection with the sale or a service or a voluntary submission (e.g.: pop-up form), we will also process this data and keep it We reserve the right, based on our legitimate interest, to send you (advertising) information by post and email (including newsletters) about our own similar products, services and events.

If you no longer wish to be contacted by us, we will be happy to accept your requests. Simply register at office@remus.at.

Recipients of the data: The following service providers receive your data in order to create and send the newsletter on our behalf:

MAILCHIMP

Is the e-mail marketing platform of the US provider The Rocket Science Group, LLC 675 Ponce de Leon Ave NE Suite 5000 Atlanta, GA 30308 USA. This company works for us as a processor and may only use your data to process specific orders and is contractually obliged to us to comply with the statutory data protection regulations. The appropriate level of protection for the transmission of data to the USA results from standard contractual clauses in accordance with Article 46 GDPR. For more information on the Standard Contractual Clauses and applicable or reasonable guarantees, please visit https://mailchimp.com/legal/data-processing-addendum/.

Further information: We process your data on the basis of your consent until you withdraw your consent or unsubscribe from the newsletter.

4. Data processing as part of business operations:

4.1. Data processing when contacting us:

Purpose of processing: If you contact us (e.g. by email, contact form or telephone), we process the data you provide when you contact us, only to the extent that this is necessary to process the request or to process it is.

Legal basis of the processing: Your data is processed to carry out pre-contractual measures or to fulfill a contractual relationship or is based on our legitimate interest, namely for the organization of answering enquiries.

Recipient of the data: This data is only transmitted on the condition that the transmission is necessary to answer the request.

Further information: We process your data for as long as this is necessary to process the request and, in addition, in the event of a follow-up request for a further seven years after the last contact with you.

4.2. Data processing in the context of the customer account:

Purpose of the processing: If you register on our website for our web shop, we process the data provided during your registration for the establishment of the business relationship within the framework of the contractual relationship and for the processing of the services we offer.

Legal basis of the processing: Your data is processed to carry out pre-contractual measures or to fulfill a contractual relationship.

Recipients of the data: If a transfer of your relevant data in each individual case is required for the fulfillment of the contractual relationship or due to a legal basis, this will be sent to the following recipients:

• Magento (Adobe Ltd.) Ireland (EU)

Further information: The deletion of your user account is possible at any time. You can request the deletion of your user account by sending an email to office@remus.at. After requesting the deletion of your user account, your data will be deleted no later than 14 days the deletion of your user account.

4.3. General data processing in the context of a customer order:

Purpose of the processing: If you place an order with us, we process your data to process the order, to answer questions that you send to us in connection with your order, and for the formal handling of the business cases to be handled by us within the framework of the business relationship.

Legal basis of processing: Your data is processed to fulfill a contractual relationship or is based on a legal basis in the context of a business relationship (or to process it).

Recipients of the data: If a transfer of your data relevant in each individual case is required for the fulfillment of the contractual relationship or due to a legal basis, this will be sent to the following categories of recipients:

• banks
• legal
• accountants, auditors and tax consultants
• courts
• competent administrative authorities
• debt collection companies
• financiers
• contractual and business partners
• insurance companies
• Transport
• companies Suppliers

Further information: We only process your data for as long as this is necessary for the fulfillment of the contractual relationship or due to legal obligations (e.g. according to tax and company law storage obligations). As a rule, we keep data for seven years.

5. Your rights

5.1. Right to information about the stored data in accordance with Article 15 GDPR

You have the right request information as to whether we are processing your personal data. If this is the case, you have a right to information about this personal data as well as to further information related to the processing.

5.2. Right to rectification of inaccurate data in accordance with Art. 16 GDPR

In the event that personal data that we process about you is not (or no longer) accurate or incomplete, you can corrected and, if necessary, completed request that this data be

5.3. Right to erasure of data in accordance with Art. 17 GDPR

If the legal requirements are met, you can request the erasure your personal data.

5.4. Right to restriction of data according to Art. 18 GDPR

If the legal requirements are met, you can request the restriction of the processing of the data concerning you.

5.5. Right to data transferability in accordance with Art. 20 GDPR

If the legal requirements are met, you can request the transfer of your data in a structured, common and machine-readable format.

5.6. Right to object to unreasonable data processing in accordance with Art. 21 GDPR

For reasons arising from your particular situation, you can object at any time to the processing of data concerning you that we process on the basis of a legitimate interest in accordance with Art. 6 Para. 1 GDPR.

5.7. Right to revoke consent

If the processing is based on a declaration of consent, you have the option of revoking this at any time without affecting the legality of the processing carried out on the basis of the consent up to the revocation.

5.8. Right to complain to the data protection authority

If you are of the opinion that the processing of your personal data by us violates the applicable data protection law or your data protection claims have been violated in any other way, you have the option of complaining to the responsible supervisory authority (Austrian data protection authority) to complain. The address is:

Austrian data protection authority

Barichgasse 40-42, 1030 Vienna

Telephone: +43 1 52 152-0

E-mail: dsb@dsb.gv.at

6. Further information:

We need the data that we ask you to provide for the processing of the sale of our goods and provision of our services within the framework of the contractual relationship or to provide information that you have asked us for or when sending our newsletter and other information.

If you do not provide the data, we cannot provide our services.

There is no automated decision-making including profiling. If we process your personal data for a purpose other than that for which we collected this data, we will notify you of this fact and inform you about this other purpose.