Privacy Policy

1. General

1.1

Data protection has a particularly high priority for us. With this Privacy Policy, we would like to inform you about the nature, scope and purpose of the personal data we collect and process.

1.2

We process your personal data in accordance with the provisions of the data protection law (in particular GDPR and Data Protection Act (DSG) as amended) and other applicable provisions. To ensure the highest possible level of protection for your personal data processed, we, as the Controller, have implemented various technical and organisational measures.

2. Responsible Party for Data Processing and Data Protection Officer

The Controller within the meaning of the GDPR is Pirlo Dosenprofi GmbH. You can reach us as follows:

The Data Protection Officer within the meaning of the GDPR is Werner Adamer. Any affected data subject may contact him with questions and suggestions regarding data protection by using the following contact details:

3. Collected Data, Purpose and Legal Basis

3.1 Order and Customer Account

You may purchase our products on Dosenprofi.com. You are free to place your order with an express checkout without a customer account, to register as a new customer or to login as a customer in the customer account.

The customer account enables you, among other things, to check up order statuses, personal notepads and order history. We process the personal data provided by you to process your order and, if applicable, to manage your customer account.

The following data may be processed for this purpose: First and last name, address, country, e-mail address, phone number, company, branch, order number, order statuses, personal notepads and order history.

The legal basis for the processing is the preparation and fulfilment of a contract pursuant to Art. 6 (1) lit. b GDPR.

3.2 Payment Procedure

When you buy products in our Online Shop, we need your payment details to process the payment procedure. Depending on the payment method, we forward your payment details to payment service providers (see 4.).

The following data may be processed for this purpose: First and last name, address, e-mail address, IP address, phone number, payment amount, details of the payee, credit card number, credit card holder and period of validity of the credit card.

The legal basis for the processing is the preparation and fulfilment of a contract pursuant to Art. 6 (1) lit. b GDPR.

3.3 Newsletter Registration

You can subscribe to our newsletter via our Online Shop. You will then receive interesting information about our activities, products and offers by e-mail. After your first registration, you will be sent a confirmation e-mail with which you must reconfirm your registration. You can unsubscribe from the newsletter at any time afterwards.

The following data is processed for this purpose: First and last name, address and e-mail address.

The legal basis for sending direct advertising is our legitimate interest pursuant to Art. 6 (1) lit. f GDPR. You have the right to object at any time to the processing of personal data concerning you in connection with such direct marketing (see 6.4.).

3.4 Website

We process your personal data, which your browser automatically transmits when you access or use our website, for the purpose of providing the website. The personal data is temporarily stored in a so-called log file.

The following personal data is processed for this purpose: IP address of the requesting computer, date and time of access, name and URL of the retrieved file, access website (Referrer-URL), browser used and, if applicable, the operating system of your computer, as well as the name of your access provider.

The legal basis for the processing is the protection of our legitimate interest in accordance with Art. 6 (1) lit. f GDPR. As the processing is based on the protection of our legitimate interests, you have the right to object (see point 6.4 first paragraph).

4. Transmission of Data

4.1 Pirlo Dosenprofi GmbH and Affiliated Companies

Within Pirlo Dosenprofi GmbH, only those departments or employees get access to your personal data which need it to process the corresponding purposes.

Data transfer within our affiliated companies, which are Pirlo Holding GmbH, Österreichische Blechwarenfabrik Pirlo GmbH & Co KG, Pirlo Industrial GmbH & Co OG, Pirlo Services GmbH, Pirlo Poland Sp. z o.o. and Pirlo Tubes GmbH, only takes place on a valid legal basis and for predefined purposes (see point 3.1.).

4.2 PayPal

If you pay via PayPal, your payment details (see 3.2.) will be forwarded to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal") as part of the payment process. PayPal reserves the right to carry out a credit check for some payment methods. Insofar as score values are included in the result of the credit check, they may contain address data, among other things.

4.3 Sofortüberweisung (Klarna)

If you pay via Sofortüberweisung, your payment details (see 3.2.) will be forwarded to Sofort GmbH, Theresienhöhe 12, 80339 Munich, Germany. Immediately afterwards you will receive a confirmation of the transaction. We will then receive the transfer credit directly.

5. Storage Duration

5.1

We process your personal data as long as is reasonably necessary to fulfil the corresponding purposes and, in addition, in accordance with statutory retention and documentation obligations or for the establishment, exercise or defence of legal claims which are taking place or are certain to take place.

5.2

In general, your data will be routinely deleted after complete processing of the contractual relationship, revocation of your consent or your objection to the processing of data, provided that it is no longer required for the above-mentioned purposes.

6. Your Rights

6.1 Right of Access

Within the scope of the applicable legal provisions, you have the right to request confirmation at any time as to whether personal data relating to you is being processed. If this is the case, you have the right to receive information about this personal data free of charge (e.g. purposes of the processing, categories of personal data concerned and recipients).

6.2 Right to Rectification

You have the right to demand the rectification of your incorrect personal data without delay.

6.3 Right to Erasure

You have the right to have your personal data erased immediately under certain circumstances. Such right to erasure exists, for example, if (i) your data is no longer necessary for the purposes for which it was collected or otherwise processed, (ii) your personal data has been unlawfully processed, (iii) the data processing is based on your consent and you withdraw your consent or (iv) you object to the processing pursuant to Art. 21 (1) GDPR and there are no overriding legitimate grounds for processing your personal data. You also have a right of erasure if you object to processing for the purpose of direct marketing.

You do not have the right to erasure if one of the exceptions in Art. 17 (3) GDPR applies. This is the case, for example, if the processing is necessary to fulfil a legal obligation under EU or Austrian law (e.g. statutory duty to preserve records) or to establish, exercise or defend legal claims.

6.4 Right to Object to Data Processing

If the data processing is necessary for the purposes of our legitimate interests, you have the right to object to the processing of your personal data at any time for reasons arising from your particular situation. The respective legal basis on which processing is based can be found in this Privacy Policy. If you object, your personal data will no longer be processed unless we can demonstrate legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves for the establishment, exercise or defence of legal claims.

If we process your personal data for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing.

6.5 Right to Data Portability

You have the right to receive your personal data, which we process automatically on the basis of your consent or in fulfilment of a contract, to you or to a third-party in a common, machine-readable format. If you request the direct transfer of the data to another controller, this will only be done insofar as this is technically feasible.

6.6 Right to Restriction of Processing

You have the right to request the restriction of the processing of your personal data. The right to restriction of processing applies in the following cases:

If you dispute the accuracy of your personal data stored by us, we usually need time to verify this. For the duration of the verification, you have the right to request the restriction of the processing of your personal data.

If the processing of your personal data happened/is happening unlawfully, you can request the restriction of data processing instead of erasure.

If we no longer need your personal data for the purposes of the processing, but you need it to establish, exercise or defend legal claims, you have the right to request restriction of the processing of your personal data instead of erasure.

If you have objected to processing pursuant to Art. 21 (1) GDPR, a balancing of your interests and ours must be carried out. As long as it has not yet been determined whose interests prevail, you have the right to demand the restriction of the processing of your personal data.

If you have restricted the processing of your personal data, this data shall - with the exception of storage - only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.

6.7 Right to Lodge a Complaint with the Competent Supervisory Authority

If you believe that the processing of your personal data violates data protection laws or your data protection rights have otherwise been violated in any way, you can lodge a complaint with the supervisory authority. In Austria, the Austrian Data Protection Authority (DSB) is responsible.

You can reach the DSB as follows:

7. Cookie Policy and Other Technologies

7.1 General Information

Our website uses cookies and other technologies, such as pixels, tags and external services (hereinafter referred to as “Cookies/Tools”), which are used when you visit and use our website. Cookies and tools can perform technical storage on end devices and access their data in order to store relevant information about your visit.

Cookies are small text files that are stored on your device either temporarily for the duration of a session (Session-Cookies) or permanently (Permanent Cookies). Session Cookies are automatically deleted at the end of your visit to the website. Permanent Cookies remain stored on your device until you delete them yourself or they are automatically deleted by your web browser.

In some cases, cookies from third-party companies may also be stored on your device when you visit our website (Third-Party Cookies). These enable us or you to use certain services of the third-party company.

Cookies and tools have various functions. Many are technically necessary, as certain website functions would not work without them. Others are used to evaluate the user behaviour of website visitors, to improve the performance of the website, to make it more user-friendly or to carry out marketing measures.

7.2 Consent – Consent Management

If cookies or tools are used and these do not guarantee basic functionalities of our pages and the optimized presentation of our offer, the data processing is based on your consent. You can withdraw your consent at any time.

We offer you the option of deciding on the use of cookies on our website as part of Consent Management (“Cookie Banner”).

7.3 Necessary Cookies

Technically necessary cookies are used on our website to ensure basic website functions. You can deactivate the cookies in your browser. However, disabling all cookies may limit the functionality of our website.

7.4 Google Analytics

With your consent, we use the functions of the web analysis service Google Analytics. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as “Google”). We use Google Analytics for the purpose of analyzing and evaluating the behaviour of users on our website. We use the anonymization function provided by Google Analytics, which shortens and anonymizes your IP address.

Permanent Google Analytics 1st Party cookies on the website:

7.5 Google Tag Manager

With your consent, we use the functions of the Google Tag Manager, which simplifies the integration of Tracking Codes on the website, making it easier for us to use web analysis tools such as Google Analytics. The provider is Google. According to Google, the Google Tag Manager itself does not set any cookies, but personal data such as IP, browser information and language can be collected in connection with use and transferred to the Google Server.

7.6 Google Ads

With your consent, we use the service of Google Ads from the service provider Google.

If you have reached our website via a Google Ad, a Conversion Cookie will be set by Google with your consent in order to measure the success of our ad campaign, with which information such as IP address, browser information, the previously visited website and the date and time of the server request are retrieved.

The Conversion Cookie expires automatically after 30 days. You can also deactivate cookies for conversion tracking by setting your browser to block cookies from the domain “googleadservices.com”.

Further information on how Google processes your personal data can be found here: https://business.safety.google/intl/de/privacy/.

7.7 Facebook Pixel and Conversions API

With your consent, we use Facebook Pixel and the Conversions API of the social network Facebook. The provider is Meta Platforms Ireland Limited, Block J, Serpentine Avenue, Dublin 4, Ireland (hereinafter referred to as “Meta”). We use Facebook Pixel and Conversions API for the purpose of displaying personalized advertising and for statistical market research purposes. In order to deliver content that matches your interests, we use your activities together with the personal data that you have provided to us on our website.

We process your personal data with Meta as joint controllers. We have entered into a joint controllership agreement with Meta, which is available here: https://www.facebook.com/legal/controller_addendum. Therein, the respective obligations regarding the processing of personal data as joint controllers within the meaning of Art. 26 GDPR are assigned to the respective controller.

The contact details of Meta and Facebooks data protection officer can be found here: https://www.facebook.com/about/privacy.

The central point of contact for asserting your rights as a data subject is Meta. Irrespective of this, you can also assert your data subject rights with us (see point 2.).

Further information on how Meta processes personal data, including the legal basis and the options for exercising data subject rights against Meta, can be found here: https://www.facebook.com/about/privacy.

You can deactivate the Facebook pixel settings at any time via the cookie settings or as a logged-in user at https://www.facebook.com/ settings/?tab=ads#. The storage period for Facebook Pixel and the Conversions API set via this website is a maximum of two years.

7.8 LinkedIn Insight Tag

With your consent, we use LinkedIn Insight Tag. The provider is LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (hereinafter “LinkedIn”). We use the LinkedIn Insight Tag to evaluate the performance of our campaigns on LinkedIn and to receive reports and notifications about website visitors and the performance of advertisements without you being identified. In this context, LinkedIn collects personal data such as URL, IP address, timestamp, device and browser characteristics. In addition to the Cookie Banner, you can also control the use of your personal data for advertising purposes via your LinkedIn account settings.

Further information on how LinkedIn processes your personal data can be found here:

8. Links

There are thumbnails with the Facebook, Instagram and LinkedIn logos on the website which, when clicked, link the visitor to the external source of Meta or LinkedIn.

After clicking on the respective thumbnail, a new tab will open and you will leave our website. We therefore have no influence on any data processing and transfers carried out by Meta or LinkedIn. Further information on the processing of your personal data by Meta or LinkedIn can be found here: https://www.facebook.com/about/privacy and https://www.linkedin.com/ legal/privacy-policy.