Privacy policy

Information on data processing in accordance with Art. 13 and 14 of the EU General Data Protection Regulation (GDPR) - as of November 2024

We hereby inform you about the processing of your personal data and the data protection claims and rights to which you are entitled. The content and scope of data processing depends largely on the products and services you have requested or agreed with you.

1. Who is responsible for data processing and who can I contact?

Responsible for data processing is:
Fa. Gerhard Kempf Grafikdesign
Moosstraße 23/5 - 5201 Seekirchen am Wallersee - AUSTRIA

Contact:
Tel.:+43 664 / 153 07 63
E-Mail: office@kempf-grafik.at

2. What data is processed and from which sources does this data come?

We process personal data that we receive from you or from a partner commissioned by you (sales company, dealer) as part of our business relationships. We also process data that we have legitimately received from publicly accessible sources (e.g. company register, association register, land register, media). Personal data includes your personal details (such as company name, title, first name, last name, country, address, email address and telephone number, delivery addresses, etc.).

3. For what purposes and on what legal basis is the data processed?

We process your personal data in accordance with the provisions of the European General Data Protection Regulation (GDPR) and the Austrian Data Protection Act 2018

To fulfill contractual obligations (Article 6 Paragraph 1b GDPR): Your personal data (Article 4 No. 2 GDPR) is processed to provide product sales and services, in particular to execute your orders and inquiries given to us. The scope of data processing depends primarily on the specific product you have requested and can include, among other things, needs analysis, advice and the implementation of product tests, product orders, product manufacturing and product deliveries.

To fulfill legal obligations (Article 6, paragraph 1c GDPR): Processing of personal data may be necessary for the purpose of fulfilling various legal obligations and regulatory requirements to which Gerhard Kempf Grafikdesign is subject as an Austrian company. Examples of such cases are:

- necessary reports to the tax office, storage of documents relevant to tax law

Within the scope of your consent (Article 6, paragraph 1a GDPR): If you have given us your consent to process your personal data, processing will only take place in accordance with the purposes set out in the declaration of consent and to the extent agreed therein. You can revoke your consent at any time without giving reasons with effect for the future.

To protect legitimate interests (Article 6 (1f) GDPR): If necessary, within the framework of balancing interests in favor of Gerhard Kempf Graphic Design or a third party, data processing may take place beyond the actual fulfillment of the contract to protect the legitimate interests of us or third parties. In the following cases, data processing may take place to protect the legitimate interests of Gerhard Kempf Grafikdesign:

– Consultation of and data exchange with credit agencies and credit institutions to determine creditworthiness or default risks
– Consultation of and data exchange with debt collection companies to collect legitimate claims
– Review and optimization of processes for needs analysis and direct customer contact; – Direct advertising, provided you have not objected to the use of your data in accordance with Art. 21 GDPR
– Processing of complaints
– Measures for business management, further development of services and products and customer recovery
– Measures to protect employees and customers
– Pursuit of our legal interests

4. Who is the recipient of your data?

Within Gerhard Kempf Grafikdesign, only those departments or employees will receive your data who need it to fulfil our contractual, legal and regulatory obligations or to protect the legitimate interests of Gerhard Kempf Grafikdesign.

In addition, we transmit your data to contract data processors commissioned by us, which can be:

– IT and hosting service providers who administer our IT and provide storage media;
– Credit institutions to process payment transactions for orders;
– Back office service providers to process advertising mailings;
 – Suppliers to process product orders;
– Transport companies to send the goods you have ordered;
– Partner companies, if they need your data to process your order.
– to public bodies and institutions (tax offices, authorities if there is a legal or regulatory obligation to do so).

All contract processors and sales partners are contractually obliged to process your data only within the scope of the provision of services and in accordance with the applicable data protection regulations.

5. How long will your data be stored?

We store your personal data, if necessary, for the duration of the entire business relationship (from initiation, processing to termination of a contract) and beyond that in accordance with the statutory retention and documentation obligations that arise from the Austrian Commercial Code (UGB) and the Federal Tax Code (BAO), among others. We store personal data of customers from orders for 7 years in accordance with the currently valid provisions. In addition, the statutory limitation periods, which can be up to 30 years in certain cases (the general limitation period is 3 years), for example according to the Austrian Civil Code (ABGB), must be taken into account when determining the storage period. If you have given us your consent to provide you with personal support and to send you information about our products and offers, we will store your data until you revoke this consent.

6. What data protection rights do you have?

You have the right at any time to information regarding the type and scope of your processed data, to correction, deletion or restriction of the processing of your data, a right to object to the processing and a right to data portability in accordance with the requirements of data protection law. If you believe that we are violating Austrian or European data protection law when processing your data, we ask you to contact us so that we can clarify your concerns. You can also address complaints to the relevant data protection authority.

Data Protection Authority, Wickenburggasse 8-10, 1080 Vienna

7. Are you obliged to provide data?

As part of the business relationship, you must provide the personal data that is necessary for the initiation and implementation of the business relationship and which we are legally obliged to collect. If you do not provide us with this data, we will generally have to refuse to conclude the contract or carry out the order or terminate an existing contractual relationship.

8. Server data

For technical reasons, in particular to ensure a secure and stable website, data is transmitted to us or to our web space provider by your internet browser. These so-called server log files record, among other things, the type and version of your internet browser, the operating system, the website from which you accessed our website (referrer URL), the website(s) of our website that you visit, the date and time of each access and the IP address of the internet connection from which you use our website.

The data collected in this way is temporarily stored, but not together with other data from you.

This storage is carried out on the legal basis of Art. 6 Paragraph 1 Letter f) GDPR. Our legitimate interest lies in the improvement, stability, functionality and security of our website.

The data will be deleted after seven days at the latest, unless further storage is required for evidentiary purposes. Otherwise, the data will be fully or partially exempt from deletion until the incident has been finally resolved.

9. Cookies

a) Session-Cookies

We use so-called cookies on our website. Cookies are small text files or other storage technologies that are placed and stored on your device by the Internet browser you use. These cookies process certain information about you on an individual basis, such as your browser or location data or your IP address. This processing makes our website more user-friendly, effective and secure, as the processing enables, for example, the reproduction of our website in different languages ​​or the offer of a shopping cart function. The legal basis for this processing is Art. 6 Para. 1 lit. b.) GDPR, provided that these cookies process data for the initiation or execution of a contract. If the processing does not serve the purpose of initiating or executing a contract, our legitimate interest lies in improving the functionality of our website. The legal basis is then Art. 6 Para. 1 lit. f) GDPR. When you close your Internet browser, these session cookies are deleted.

b) Third-party cookies

Our website may also use cookies from partner companies with whom we work together for the purposes of advertising, analysis or the functionality of our website. Please refer to the following information for details, in particular the purposes and legal basis for processing such third-party cookies.

c) Removal option

You can prevent or restrict the installation of cookies by changing the settings in your Internet browser. You can also delete cookies that have already been saved at any time. The steps and measures required for this depend on the specific Internet browser you are using. If you have any questions, please use the help function or documentation of your Internet browser or contact its manufacturer or support. However, in the case of so-called Flash cookies, processing cannot be prevented via the browser settings. Instead, you must change the settings of your Flash player. The steps and measures required for this also depend on the specific Flash player you are using. If you have any questions, please use the help function or documentation of your Flash player or contact the manufacturer or user support. If you prevent or restrict the installation of cookies, this may mean that not all functions of our website are fully usable.

10. Contact requests / contact options

If you contact us by email, the data you provide will be used to process your request. Providing the data is necessary to process and answer your request - without providing it, we cannot answer your request or can only answer it to a limited extent.

The legal basis for this processing is Art. 6 Paragraph 1 Letter b) GDPR.

Your data will be deleted if your request has been answered conclusively and there are no statutory retention periods that prevent deletion, such as in the case of any subsequent contract processing.

11. Adaptation of the information according to Art. 13/14 GDPR


Please note that if necessary, we can or must make adjustments to this information according to Art. 13/14 GDPR on data processing.