Privacy Policy

General Information
This privacy policy provides detailed information about what happens to your personal data when you visit our website www.join.marcelzalec.at. Personal data includes all information that can personally identify you. We strictly adhere to legal regulations, especially the General Data Protection Regulation (GDPR), when processing your data, and we place great importance on ensuring that your visit to our website is absolutely secure.
Data Controller
The data controller responsible for the collection and processing of personal data on this website is:

First Name, Last Name: Marcel Zalec
Street, House Number: Drosen 40
Postal Code, City: 40 St.Martin an der Raab
Country: Austria
Email: contact@marcelzalec.at
Phone: 0678/1316031
Access Data (Server Log Files)
When you access our website, we automatically collect and store access data in server log files, which your browser transmits to us. This includes:
- Email/Username/Phone Number
In general, personal identification is not possible or intended. The processing of such data is carried out in accordance with Article 6(1)(f) of the GDPR to safeguard our legitimate interest in improving the stability and functionality of our website.
Contact Form
If you contact us via email or through a contact form, transmitted data including your contact details will be stored to process your inquiry or to be available for follow-up questions. Such data will not be disclosed without your consent.
The processing of data entered into the contact form is based exclusively on your consent (Article 6(1)(a) of the GDPR). You can revoke your consent at any time. To do so, simply send a informal email. The legality of data processing operations carried out before the revocation remains unaffected by the revocation.
Data transmitted via the contact form will remain with us until you request deletion, revoke your consent to storage, or there is no longer a need for data storage. Mandatory legal provisions, especially retention periods, remain unaffected.
Customer Account
When you open a customer account, you consent to the storage of your master data such as name, address, email address, and bank details, as well as your usage data (username, password). This allows you to place orders with us using your email address and personal password
Online Payments
When you order goods or services in our online shop, it is necessary for the fulfillment of the contract that you provide your personal data required for processing your order. The mandatory information for contract processing is marked separately. Depending on the chosen payment method, the data required for payment processing will be forwarded to the respective payment service providers. The processing of your data is based on Article 6(1)(b) of the GDPR.
Data Use and Disclosure
The personal data you provide to us, such as when placing an order or via email (e.g., your name, address, or email address), will neither be sold to third parties nor marketed elsewhere. Your personal data will only be processed for correspondence with you and for the purpose for which you provided the data. For payment processing, we share your payment data with the credit institution responsible for payment.

The use of data automatically collected during your visit to our website is solely for the purposes mentioned above. Data will not be used otherwise.

We assure you that, apart from legal obligations or your prior consent, we will not disclose your personal data to third parties.
SSL/TLS Encryption
For security reasons and to protect the transmission of confidential content (such as orders or inquiries) that you send to us as the site operator, our website uses SSL/TLS encryption. You can recognize an encrypted connection by the change in the browser’s address bar from “http://” to “https://” and the padlock symbol in your browser.
When SSL/TLS encryption is active, the data you transmit to us cannot be read by third parties.
Storage Duration
Personal data provided to us through our website will only be stored until the purpose for which it was entrusted to us is fulfilled. If commercial and tax retention periods apply, the storage duration for certain data may be up to 10 years.
Rights of Data Subjects
Regarding your personal data, you have the following rights as a data subject under the legal provisions:
1. Right to Withdraw Consent
  
  Many data processing operations are only possible with your explicit consent. If data processing is based on your consent, you have the right to withdraw that consent at any time, affecting the lawfulness of processing carried out before the withdrawal. Storage of data for billing and accounting purposes remains unaffected by withdrawal.
2. Right to Information
  
  You have the right, according to Article 15 of the GDPR, to request confirmation whether we process personal data concerning you. If such processing exists, you have the right to know about your processed personal data, the purposes of processing, the categories of personal data processed, recipients or categories of recipients to whom your data has been or will be disclosed, the planned storage duration, criteria for determining the storage duration, the right to rectification, erasure, restriction of processing, objection to processing, the right to lodge a complaint with a supervisory authority, the origin of your data (if not collected from you), the existence of automated decision-making (including profiling), and meaningful information about the logic involved and the potential consequences of such processing. Additionally, you have the right to be informed about guarantees pursuant to Article 46 of the GDPR when transferring your data to third countries.
3. Right to Erasure(Right to Be Forgotten)
  
  You have the right, in accordance with Article 16 of the GDPR, to request the immediate rectification of inaccurate personal data concerning you and/or the completion of your incomplete data at any time.
4. Right to deletion
  
  You have the right, according to Article 17 of the GDPR, to request the erasure of your personal data if one of the following reasons applies:
  1. Your personal data is no longer necessary for the purposes for which it was collected or otherwise processed.
  2. You withdraw your consent, and there is no other legal basis for the processing.
  3. You object to the processing under Article 21(1) of the GDPR, and there are no overriding legitimate grounds for the processing, or you object under Article 21(2) of the GDPR.
  4. The personal data has been unlawfully processed.
  5. The erasure of personal data is required to fulfill a legal obligation under Union law or the law of a Member State to which we are subject.
  6. The personal data was collected in relation to services offered by the information society under Article 8(1) of the GDPR.
  However, this right does not apply if processing is necessary:
  1. For exercising the right to freedom of expression and information.
  2. For compliance with a legal obligation that requires processing under Union or Member State law, or for the performance of a task carried out in the public interest or in the exercise of official authority.
  3. For reasons of public interest in the area of public health under Article 9(2)(h) and (i) and Article 9(3) of the GDPR.
  4. For archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes under Article 89(1) of the GDPR, where exercising the right would likely render impossible or seriously impair the achievement of the objectives of such processing.
  5. For the establishment, exercise, or defense of legal claims.
  If we have made your personal data public and are obligated to erase it, we will take reasonable measures, including technical means, to inform data controllers processing the personal data that you, as the data subject, have requested the deletion of all links to your personal data or copies or replications of such personal data.
5. Right to Restriction of Processing
  
  According to Article 18 of the GDPR, you have the right to request the restriction (blocking) of the processing of your personal data. To exercise this right, you can contact us at the address provided in the imprint. The right to restriction of processing applies in the following cases:
  1. If you dispute the accuracy of your personal data stored with us, we usually need time to verify this. During the verification period, you have the right to request the restriction of processing your personal data.
  2. If the processing of your personal data is unlawful, you can request restriction of data processing instead of deletion.
  3. If we no longer need your personal data but you require it for exercising, defending, or asserting legal claims, you have the right to request restriction of processing instead of deletion.
  4. If you have objected to processing under Article 21(1) of the GDPR, a balance must be struck between your interests and ours. As long as it is not clear whose interests prevail, you have the right to request restriction of processing your personal data.
  When your personal data is restricted, it may only be processed – except for storage – with your consent or for the purpose of asserting, exercising, or defending legal claims, or to protect the rights of another natural or legal person or for reasons of important public interest of the EU or a Member State.
6. Right to Information
  
  If you have exercised your right to rectification, erasure, or restriction of processing against us, we are obliged to inform all recipients to whom your personal data has been disclosed about this correction, erasure, or restriction of processing, unless this proves impossible or involves disproportionate effort. According to Article 19 of the GDPR, you have the right to be informed about these recipients upon request.
7. Right Not to Be Subject to Automated Decision-Making
  
  You have the right, according to Article 22 of the GDPR, not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
  
  However, this does not apply if the decision:
  1. Is necessary for the conclusion or performance of a contract between you and us.
  2. Is authorized by Union or Member State law to which the controller is subject, and such law contains appropriate measures to safeguard your rights, freedoms, and legitimate interests.
  3. Is made with your explicit consent.
  Decisions based on special categories of personal data under Article 9(1) of the GDPR are not allowed in cases (a) to ©, unless Article 9(2)(a) or (g) applies and appropriate measures to protect your rights and freedoms have been taken.
  
  In cases (a) and ©, we take appropriate measures to safeguard your rights and freedoms, including at least the right to obtain human intervention on our part, to express your point of view, and to contest the decision.
8. Right to Data Portability
  
  If the processing is based on your consent under Article 6(1)(a) of the GDPR or Article 9(2)(a) of the GDPR, or on a contract under Article 6(1)(b) of the GDPR, and is carried out by automated means, you have the right, according to Article 20 of the GDPR, to receive your personal data that you have provided to us in a structured, commonly used, and machine-readable format. You can also request the transfer of this data to another data controller, where technically feasible.
9. Right to Object
  
  If we base the processing of your personal data on the legitimate interests under Article 6(1)(f) of the GDPR, you have the right to object to the processing of your personal data for reasons arising from your particular situation. This also applies to profiling based on this provision. You can find the specific legal basis for processing in this privacy policy. If you object, we will no longer process your affected personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or if the processing serves the establishment, exercise, or defense of legal claims (objection under Article 21(1) of the GDPR).
  
  If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing, including profiling related to such direct marketing. If you object, your personal data will no longer be used for direct marketing purposes (objection under Article 21(2) of the GDPR).
  
  You also have the option to exercise your right to object in relation to the use of information society services, notwithstanding Directive 2002/58/EC, using automated procedures that use technical specifications.
10. Right to Lodge a Complaint with the Competent Supervisory Authority under Article 77 of the GDPR
  
  In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, particularly in the Member State of their habitual residence, place of work, or the place of the alleged infringement. This right exists without prejudice to other administrative or judicial remedies.
  
  The competent supervisory authority for us is:
  
  The State Commissioner for Data Protection and Freedom of Information Baden-Württemberg
  
  Postal address: Postfach 10 29 32
  70025 Stuttgart, Germany
  
  or:
  
  Lautenschlagerstraße 20
  70173 Stuttgart, Germany
  
  Phone: +49 711/61 55 41-0
  Email: poststelle@lfdi.bwl.de
  Website: https://www.baden-wuerttemberg.datenschutz.de
Validity and Modification of this Privacy Policy
This privacy policy is effective from July 3, 2024. We reserve the right to change this privacy policy at any time in compliance with applicable data protection regulations. This may be necessary, for example, to comply with new legal provisions or to account for changes to our website or new services offered on our website. The version accessible at the time of your visit applies.
If this privacy policy is amended, we intend to announce changes to our privacy policy on this page so that you are fully informed about what personal data we collect, how we process it, and under what circumstances it may be disclosed.