Declaration on information obligation
(Data privacy statement
of Joseph Brot GmbH, 1030 Wien, Joseph Genuss GmbH, 1030 Wien & Joseph Brotmanufaktur GmbH, 3730 Burgschleinitz)

The protection of your personal data is of particular concern to us. Therefore, we process your data exclusively on the basis of the legal regulations (GDPR, TKG 2003). In this privacy policy we inform you about the most important aspects of data processing within our website and as part of our business relationships.

Clients, Purchasers and Suppliers
If you are in a customer, purchaser or supplier relation with us, or if you contact us with an enquiry, the data you have supplied are required for the performance of a contract or the implementation of pre-contract measures. Without these data, we cannot conclude a contract with you. If necessary, data shall only be transmitted to third parties involved in the business processing, such as legal representatives, tax consultants, insurances, logistics providers, tax authority, other authorities or municipal authorities, group entities of the data controller, contract data processors, if any, with concluded contracts on the processing of contract data and data shall be stored for the period of the contractual relationship and for a period of at least 7 years following the termination of the contract, respectively.

Newsletters and Bonus Cards
You may subscribe to our newsletter on our website. To this end, we require your name, your e-mail address, as well as a declaration of consent that you agree to receive our newsletter. Provided that you communicate us your name and your e-mail address via our bonus cards, we will enter your data into the newsletter subscription form for you. In the process you will receive an e-mail in which you have to state your explicit consent and which will inform you about your rights (double-opt-in). We use the newsletter to inform you about our phine productions and business locations as well as about news regarding our group.
As soon as you have subscribed to our newsletter or we have entered the data from your bonus card into the web form for newsletter subscription, respectively, we shall send you a confirmation e-mail with a link to confirm your subscription. These personal data shall be transferred to our suppliers for further processing. You may terminate your newsletter subscription at any time via a direct link in the newsletter. Please click on the corresponding link at the end of the newsletter in order to do so. Following the termination of your subscription, we will immediately delete the data connected to the sending of the newsletter as well as to your bonus card.

Newsletter data

If you would like to subscribe to the newsletter offered on this website, we will need from you an e-mail address as well as information that allow us to verify that you are the owner of the e-mail address provided and consent to the receipt of the newsletter. No further data shall be collected or shall be collected only on a voluntary basis. We shall use such data only for the sending of the requested information and shall not share such data with any third parties.

The processing of the information entered into the newsletter subscription form shall occur exclusively on the basis of your consent (Art. 6 Sect. 1 lit. a GDPR). You may revoke the consent you have given to the archiving of data, the e-mail address and the use of this information for the sending of the newsletter at any time, for instance by clicking on the “Unsubscribe” link in the newsletter. This shall be without prejudice to the lawfulness of any data processing transactions that have taken place to date.

The data deposited with us for the purpose of subscribing to the newsletter will be stored by us until you unsubscribe from the newsletter or the newsletter service provider and deleted from the newsletter distribution list after you unsubscribe from the newsletter. Data stored for other purposes with us remain unaffected.

After you unsubscribe from the newsletter distribution list, your e-mail address may be stored by us or the newsletter service provider in a blacklist to prevent future mailings. The data from the blacklist is used only for this purpose and not merged with other data. This serves both your interest and our interest in complying with the legal requirements when sending newsletters (legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR). The storage in the blacklist is indefinite. You may object to the storage if your interests outweigh our legitimate interest.

MailChimp

This website uses the services of MailChimp to send out its newsletters. The provider is the Rocket Science Group LLC, 675 Ponce De Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA.

Among other things, MailChimp is a service that can be deployed to organise and analyse the sending of newsletters. Whenever you enter data for the purpose of subscribing to a newsletter (e.g. your e-mail address), the information is stored on MailChimp servers in the United States.

MailChimp is in possession of a certification that is in compliance with the “EU-US-Privacy-Shield”. The “Privacy-Shield” is a compact between the European Union (EU) and the United States of America (USA) that aims to warrant the compliance with European data protection standards in the United States.

With the assistance of the MailChimp tool, we can analyse the performance of our newsletter campaigns. If you open an e-mail that has been sent through the MailChimp tool, a file that has been integrated into the e-mail (a so-called web-beacon) connects to MailChimp’s servers in the United States. As a result, it can be determined whether a newsletter message has been opened and which links the recipient possibly clicked on. Technical information is also recorded at that time (e.g. the time of access, the IP address, type of browser and operating system). This information cannot be allocated to the respective newsletter recipient. Their sole purpose is the performance of statistical analyses of newsletter campaigns. The results of such analyses can be used to tailor future newsletters to the interests of their recipients more effectively.

If you do not want to permit an analysis by MailChimp, you must unsubscribe from the newsletter. We provide a link for you to do this in every newsletter message. Moreover, you can also unsubscribe from the newsletter right on the website.

The data is processed based on your consent (Art. 6 Sect. 1 lit. a GDPR).  You may revoke any consent you have given at any time by unsubscribing from the newsletter. This shall be without prejudice to the lawfulness of any data processing transactions that have taken place prior to your revocation.

The data deposited with us for the purpose of subscribing to the newsletter will be stored by us until you unsubscribe from the newsletter or the newsletter service provider and deleted from the newsletter distribution list after you unsubscribe from the newsletter. Data stored for other purposes with us remain unaffected.

After you unsubscribe from the newsletter distribution list, your e-mail address may be stored by us or the newsletter service provider in a blacklist to prevent future mailings. The data from the blacklist is used only for this purpose and not merged with other data. This serves both your interest and our interest in complying with the legal requirements when sending newsletters (legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR). The storage in the blacklist is indefinite. You may object to the storage if your interests outweigh our legitimate interest.

For more details, please consult the Data Privacy Policies of MailChimp at: https://mailchimp.com/legal/terms/.

Execution of a contract data processing agreement

We have executed a so-called “Data Processing Agreement” with MailChimp, in which we mandate that MailChimp undertakes to protect the data of our customers and to refrain from sharing it with third parties.

Your rights
As a basic principle, you have the right to
a) access information about personal data concerning you pursuant to Article 15 GDPR;
b) rectification of inaccurate personal data pursuant to Article 16 GDPR;
c) erasure of personal data concerning you where one of the grounds pursuant to Article 17 GDPR applies;
d) restriction of data processing where one of the grounds pursuant to Article 18 GDPR applies;
e) receive the personal data in a structured, commonly used and machine-readable format pursuant to Article 20 GDPR;
f) to object pursuant to Article 21 GDPR;
g) pursuant § 24 to the Data Protection Amendment Act 2018 (Datenschutz-Anpassungsgesetz 2018), you also have the right to file complaint with the data protection authority if personal data concerning you is processed in violation of the General Data Protection Regulation, of § 1 or Article 2, Chapter 1 of the Data Protection Amendment Act 2018.
You may reach us using the following contact data:
datenschutz@joseph.co.at; Mag. Corinna Hengelmüller-Gepp, +43/680/5533732.

Cookies
Our website uses so-called Cookies. These are small text files that are stored on your device using the browser. They do no harm.
We use cookies to make our website user-friendly. Some cookies remain on your device until you delete them. These allow us to recognize your browser the next time you visit.
If you do not want this, you may set your browser so that it informs you about the setting of cookies and you only allow this in individual cases.
Deactivating Cookies may restrict the functionality of this website.

Web Fonts
On our site, we use licensed fonts by Monotype Imaging Holdings Inc., 600 Unicorn Park Drive, Woburn, MA 01801 USA who register page impressions via an embedded script. In doing so, Monotype Imaging Holdings Inc. (as a data controller) acts in accordance with data processing provisions pursuant to Art. 6. Par. 1 (f) GDPR, namely on the grounds of a legitimate interest in short-term processing of the IP, in order to enable counting and prevent misuse of the counter. After 30 days these log data will be deleted, personal data will no longer be processed.
You can find our privacy policy at: https://www.monotype.com/legal/privacy-policy/web-font-tracking-privacy-policy/.

Web Analytics

This website uses functions of the web analysis service Google Analytics. The provider of this service is Google Ireland Limited („Google“), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics uses so-called cookies. Cookies are text files, which are stored on your computer and that enable an analysis of the use of the website by users. The information generated by cookies on your use of this website is usually transferred to a Google server in the United States, where it is stored.

The storage of Google Analytics cookies and the utilization of this analysis tool are based on Art. 6 Sect. 1 lit. f GDPR. The operator of this website has a legitimate interest in the analysis of user patterns to optimize both, the services offered online and the operator's advertising activities. If a corresponding agreement has been requested (e.g. an agreement to the storage of cookies), the processing takes place exclusively on the basis of Art. 6 para. 1 lit. a GDPR; the agreement can be revoked at any time.

IP anonymization

On this website, we have activated the IP anonymization function. As a result, your IP address will be abbreviated by Google within the member states of the European Union or in other states that have ratified the Convention on the European Economic Area prior to its transmission to the United States. The full IP address will be transmitted to one of Google's servers in the United States and abbreviated there only in exceptional cases. On behalf of the operator of this website, Google shall use this information to analyse your use of this website to generate reports on website activities and to render other services to the operator of this website that are related to the use of the website and the Internet. The IP address transmitted in conjunction with Google Analytics from your browser shall not be merged with other data in Google's possession.

Browser plug-in

You do have the option to prevent the archiving of cookies by making pertinent changes to the settings of your browser software. However, we have to point out that in this case you may not be able to use all of the functions of this website to their fullest extent. Moreover, you have the option prevent the recording of the data generated by the cookie and affiliated with your use of the website (including your IP address) by Google as well as the processing of this data by Google by downloading and installing the browser plug-in available under the following link: https://tools.google.com/dlpage/gaoptout?hl=en.

Objection to the recording of data

You have the option to prevent the recording of your data by Google Analytics by clicking on the following link. This will result in the placement of an opt out cookie, which prevents the recording of your data during future visits to this website: Google Analytics deactivation.

For more information about the handling of user data by Google Analytics, please consult Google's Data Privacy Declaration at: https://support.google.com/analytics/answer/6004245?hl=en.

Contract data processing

We have executed a contract data processing agreement with Google and are implementing the stringent provisions of the German data protection agencies to the fullest when using Google Analytics.

Archiving period

Data on the user or incident level stored by Google linked to cookies, user IDs or advertising IDs (e.g. DoubleClick cookies, Android advertising ID) will be anonymized or deleted after 14 month. For details please click the following link: https://support.google.com/analytics/answer/7667196?hl=en

 

Facebook-Plugins (Like & Share-Button)
Plugins of the social network Facebook, operated by Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA, are integrated on our pages. You can recognize the Facebook plugins by the Facebook logo or the “like” button on our pages. You can find an overview of the Facebook plugins here: https://developers.facebook.com/docs/plugins/.
When you visit our pages, the plug-in establishes a direct connection between your browser and the Facebook server. Facebook thereby receives the information that you have visited our site from your IP address. If you click the Facebook “like” button while you are logged into your Facebook account, you can link the contents of our pages to your Facebook profile. This way, Facebook can attribute the visit to our pages to your user account. Please note that we, as the provider of the pages, do not receive any notice of the content of transmitted data, nor of their use by Facebook. You can find more information about this in the data privacy statement of Facebook at: https://de-de.facebook.com/policy.php.
If you do not wish for Facebook to attribute the visit to your Facebook user account, please log out of your Facebook user account.

Twitter Plugin
Features of the Twitter service are integrated on our pages. These functionalities are provided by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. By using Twitter and the “re-tweet” feature, the websites visited by you will be linked to your Twitter account and disclosed to other users. In the process, data are transmitted to Twitter as well. Please note that we, as the provider of the pages, do not receive any notice of the content of transmitted data, nor of their use by Twitter. You can find more information about this in the data privacy statement of Twitter at: https://twitter.com/privacy.
You can change your data privacy settings in your Twitter account settings at http://twitter.com/account/settings.

Instagram Plugin
Features of the Instagram service are integrated on our pages. These functionalities are provided by Instagram Inc., 1601 Willow Road, Menlo Park, CA 94025, USA.
If you are logged into your Instagram account, you can link the content of our pages with your Instagram profile by clicking on the Instagram button. This way, Instagram can attribute the visit to our pages to your user account. Please note that we, as the provider of the pages, do not receive any notice of the content of transmitted data, nor of their use by Instagram.
You can find more information about this in the data privacy statement of Instagram at: https://instagram.com/about/legal/privacy/.

Google+ Plugin
No data is exchanged. These pages are only integrated via links, but not automatically linked.

Pinterest Plugin
No data is exchanged. These pages are only integrated via links, but not automatically linked.