Privacy policy

Purpose of data processing

We process personal data from forms (booking inquiries) for the purpose of providing the business activity and fulfilling the associated legal and contractual requirements.

IP address

When you visit our website, information is automatically stored on the web server. This includes the browser used, the operating system used, which page brought you to our website, the IP address, the time of access and other information. In our view, this data is pseudonymized and cannot be assigned to a specific person without additional data sources. We do not evaluate this data as long as there is no illegal use of the website.

Cookies

Cookies are small text files that are sent when you visit a website and are temporarily stored on the hard disk of the website user. If the corresponding server of our website is called up again by the user of the website, the browser of the user of the website sends the previously received cookie back to the server. The server can then evaluate the information obtained through this procedure in various ways. Cookies can be used, for example, to control the display of advertisements or make it easier to navigate a website. If the user of the website wishes to prevent the use of cookies, he can do so by making local changes to his settings in the Internet browser used on his computer, i.e. the program for opening and displaying Internet pages (e.g. Internet Explorer, Mozilla Firefox, Opera or Safari).

Conclusion of a data processing agreement

We have concluded a so-called “Data Processing Agreement” with MailChimp, in which we oblige MailChimp to protect our customers’ data and not to pass it on to third parties. This contract can be viewed at the following link: https://mailchimp.com/legal/forms/data-processing-agreement/sample-agreement/. You can revoke your consent to the storage of the data, the e-mail address and its use for sending the newsletter at any time, for example via the “unsubscribe” link in the newsletter.

Web analysis (Google Analytics)

This website uses Google Analytics, a web analytics service provided by Google Inc. (“Google”). Google Analytics uses “cookies”, which are text files placed on the user’s computer, to help the website analyze how users use the site. The information generated by the cookie about the use of this website by the consumer (including the IP address) is transmitted to a Google server in the USA and stored there. Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google’s behalf. Google will not associate the IP address of the user with any other data held by Google. The consumer can prevent the installation of cookies by making the appropriate setting in the Internet browser; in this case, not all functions of the pharmacy’s website can be used to their full extent. By using the website, the consumer consents to the processing of data about him/her by Google in the manner and for the purposes set out above. You can prevent the storage of cookies by selecting the appropriate settings in your browser software. However, we would like to point out that in this case you may not be able to use all the functions of this website to their full extent. You can also prevent Google from collecting your data in connection with Google Analytics by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de. You can also prevent the collection of your data by Google Analytics on this website by clicking on the link below. An opt-out cookie is set to prevent the future collection of your data when you visit this website:

You can find more information on Google’s terms of use and Google’s privacy policy at http://www.google.com/analytics/terms/de.html or at https://www.google.at/intl/at/policies/.

Contact with us

If you contact us using the form on the website or by e-mail, the data you provide will be stored by us for six months for the purpose of processing the inquiry and in the event of follow-up questions. We do not pass on this data without your consent.

Principles of the processing of personal data

The processing of personal data is based on strict principles that consider the protection and security of data and the rights of the data subjects to be of the utmost importance.

Legality and transparency

Data processing is carried out in a lawful manner, in good faith. The data subject is informed about the planned processing and handling of the data when the data is collected. In this way, those affected are at least informed about the following points:

Earmarking

The data is collected and processed for specified, clear and legitimate purposes. The data will not be processed in a manner that is not compatible with these purposes.

Data minimization

Only data that is absolutely necessary for the stated purposes is collected and processed. If it is possible to achieve the purpose and the effort is reasonable, only anonymized data will be processed.

Memory limitation and deletion

Personal data is deleted as soon as the purpose for which it was originally collected no longer applies and statutory retention periods do not prevent deletion. If there are legitimate interests in these data in individual cases, they will continue to be stored until the legitimate interest has been legally clarified.

Data security

Data secrecy applies to personal data. The data must be handled confidentially and is protected against unauthorized access, unlawful manipulation or disclosure as well as loss and destruction by appropriate organizational and technical measures.

Factual accuracy

Personal data must be kept correct, complete and up-to-date. Appropriate measures are taken to correct outdated, incorrect or incomplete data.

Commitment to data secrecy

All our employees are contractually obliged to maintain confidentiality and are regularly instructed and trained in the secure handling of personal and other critical data.

Rights of data subjects

Every data subject whose personal data is processed by us has the opportunity to invoke and assert their own rights at any time. To exercise your rights as a data subject, you can write to info@zflys.at at any time.

Information
Data subjects can request information at any time about which personal data about them is being processed and the purposes of this processing.

Correction

Data subjects have the right to demand the immediate correction of incorrect personal data concerning them.

Restriction

Data subjects have the right to restriction of processing if the accuracy of the data concerning them is contested, the processing is unlawful, the data are no longer required for processing or the data subjects have objected to the processing.

Revocation

Data subjects have the right to object at any time to the processing of personal data concerning them.

Transferability

Data subjects have the right to receive the personal data concerning them, which they have provided to us, in a structured, commonly used and machine-readable format. You also have the right to request the transfer of this data to another controller, if technically feasible. Portability only applies to personal data that is processed by automated means.

Erasure – right to be forgotten

The data subject has the right to demand the immediate erasure of personal data concerning them if the legal basis for the processing of the data is missing or no longer applies, the data processing is objected to, the data processing is unlawful and no statutory retention periods make erasure impossible. Data security also has a high priority with regard to the rights of data subjects, which is why the assertion of data subject rights is only possible after the data subject has been identified beyond doubt. You also have the right to lodge a complaint with the data protection authority at any time.

Data transmission

Personal data will only be transferred to recipients outside the company and recipients in EU third countries in accordance with applicable laws and on a lawful basis and in compliance with the highest levels of confidentiality and data security. We use various processors for processing. All processors are contractually bound by a processor agreement to comply with the legally applicable data protection regulations.