Data Protection Policy: Seite 1 Von 9 VAT: ATU63964918 - FN: FN302888z, Landesgericht Fuer ZRS Graz

https://www.vitalabo.
com
niceshops GmbH
VitalAbo
Saaz 99
8341 Paldau
E-Mail: [email protected]
Data Protection Policy

Data Protection
This Data Protection Policy refers to the nature, scope and purpose of personal data processing (hereinafter referred to as "data") relating to
our websites, features and content thereof, as well as the external presence such as our social media profiles (collectively referred to as "online
offer"). With regard to the terminology used, e.g. "processing" and "controller", we refer to the definitions stimulated in Article 4 of the General Data
Protection Regulation (GDPR).
Collection, Processing & Use of Personal Data

Types of Processed Data:
• Personal data (e.g. name, address).

• Contact data (e.g. email address, telephone number).
• Content data (e.g. text input, images, videos).
• Usage data (e.g. websites visited, interest in content, access time).
• Meta and communications data (e.g. device information, IP addresses)
Categories of Data Subjects
• Visitors and users of the online offer (hereinafter referred to as "user").

• Customers utilising our website (hereinafter referred to as "user").
Processing Purposes
• Provision of the online offer, its functions and content.

• Processing of all orders including the related physical processes, in particular, that of package dispatch and in respect to the possible reverse
transaction in case of warranty.
• Responding to contact requests and communication with users.
• Security measures
• Audience measurement/marketing
Definitions
"Personal data" means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one
who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an
online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural
person.
"Processing" means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by
automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure
by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
"Pseudonymisation" means the processing of personal data in such a manner that the personal data can no longer be attributed to a specific
data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and
organisational measures to ensure that the personal data are not attributed to an identified or identifiable natural person.
"Profiling" means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects
relating to a natural person, in particular to analyse or predict aspects concerning that natural person’s performance at work, economic situation,
health, personal preferences, interests, reliability, behaviour, location or movements.
"Controller" means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes
and means of the processing of personal data.
"Processor" means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.
In accordance with Article 13 of the GDPR, we provide information in regard to the legal basis of our data processing. Provided the legal basis in
the data protection statement is mentioned, the following applies: The legal basis for obtaining consent is Article 6 paragraph letter 1 and Article 7
of the GDPR, the legal basis for the processing for the fulfilment of our services and the execution of contractual measures as well as the answer
to inquiries is Article 6 paragraph 1 letter b of the GDPR, the legal basis for the processing in order to fulfil our legal obligations is article 6 (1) letter
c of the GDPR, and the legal basis for the processing in order to safeguard our legitimate interests is Article 6 (1) letter. f of the GDPR. Processing
is necessary in order to protect the vital interests of the data subject or of another natural person as stated in Article 6 paragraph 1 letter d of the
GDPR.
Collaboration with Processors and Third Parties

If, in the context of our processing, we disclose data to other persons and companies (contract processors or third parties), transmit them to them
or otherwise grant access to the data, this will only be done on the basis of a legal permission (eg if a transmission of the data to third parties, as
required by payment service providers, pursuant to Art. 6 (1) (b) GDPR to fulfil the contract), you have consented to a legal obligation or based on
our legitimate interests (eg the use of agents, web hosters, etc.).
Your data will be processed, in particular, to order processing in respect to payment and shipping services.
Account holder: niceshops GmbH, VitalAbo, Saaz 99, 8341 Paldau, Austria | E-Mail: [email protected] | |
VAT: ATU63964918 | FN: FN302888z, Landesgericht fuer ZRS Graz Seite 1 von 9
https://www.vitalabo.com
niceshops GmbH
VitalAbo
Saaz 99
8341 Paldau
If we commission third parties to process data on the basis of a so-called „contract processing contract“, this is done on the basis of Art. 28 GDPR.
Payment Data
Your payment data is encrypted during the order processed and transferred via the internet. We never gain access to your payment data thanks
to special embedding used during the order process and are therefore not the processors of the data. The data is processed exclusively by these
payment service providers:
Credit Card and Paypal Payments

SIX Payment Services (Europe) S.A.
10, rue Gabriel Lippmann
L-5365 Munsbach
Luxembourg
[email protected]
Sofort Transfers via Klarna

Klarna Bank AB (publ)
Sveavägen 46
111 34 Stockholm
Sweden
[email protected]
RatePay
RatePAY GmbH
Franklinstraße 28-29
10587 Berlin
[email protected]
Shipping Data
In order to improve our service, we work together with a third party service provider who processes parcel tracking numbers and publishes more
detailed information regarding the status of a parcel. Third party information:
parcelLab GmbH
Schillerstraße 23a
80336 Munich
Germany
[email protected]
Data Transmission in Third-Party Countries

If we process data in a third country (ie outside the European Union (EU) or the European Economic Area (EEA)) or in the context of the use of
third-party services or disclosure or transmission of data to third parties, this will only be done if it is to fulfil our (pre) contractual obligations, on the
basis of your consent, on the basis of a legal obligation or on the basis of our legitimate interests. Subject to legal or contractual permissions, we
process or have the data processed in a third country only in the presence of the special conditions of Art. 44 et seq. GDPR. That the processing
is e.g. on the basis of specific guarantees, such as the officially recognized level of data protection (eg for the US through the Privacy Shield) or
compliance with officially recognized special contractual obligations (so-called "standard contractual clauses").
Withdrawal
Withdrawal
You have the right to consent according to. Art. 7 para. 3 of the GDPR. This right to consent also applies to data processed in the future.
You may at any time object to the future processing of your data in accordance with Art. 21 of the GDPR. Where the data subject objects to
processing for direct marketing purposes, the personal data shall no longer be processed for such purposes.
Rights of the Data Subject

The user shall have the right to obtain from the controller confirmation as to whether or not personal data concerning him or her are being
processed, and, where that is the case, access to the personal data and the controller shall provide a copy of the personal data undergoing
processing as in accordance with Article 15 of the GDPR.
The user shall have the right to obtain from the controller without undue delay the rectification of inaccurate personal data or incomplete personal
data concerning him or her in accordance with Article 16 of the GDPR.
The user shall have the right to obtain from the controller the erasure of personal data concerning him or her without undue delay and the controller
shall have the obligation to erase personal data without undue delay in accordance with Article 17. The user shall have the right to obtain from the
controller restriction of processing of personal data in accordance with Article 18 of the GDPR.
The user shall have the right to receive the personal data concerning him or her, which he or she has provided to a controller, in a structured,
commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from the controller to
which the personal data have been provided in accordance with Article 20 of the GDPR.
niceshops GmbH
VitalAbo
Saaz 99
8341 Paldau
The user shall have the right to lodge a complaint with a supervisory authority in accordance with Article 77 of the GDPR.
Data Usage for Advertising Purposes

Your personal data is used to improve your shopping experience and shape it to suit your requirements. The information used to achieve this is
the data already available to us, e.g. via your internet connection, the chosen end device, the operating system, the date, the time at which our
website was visited or the pages accessed as well as information that was provided to us by you. You may object to the use of your personal data
for advertising purposes at any time. A notification via email, letter or fax would suffice. You can find our contact details here.
Newsletters
The following information is intended to inform you about the content of our newsletter, the subscription, shipping and statistical evaluation
procedures, as well as your right of opting out. By subscribing to our newsletter, you agree to receive it and to the described procedures.
We send newsletters, emails and other electronic notifications with advertising information (hereinafter “newsletter”) only with the consent of the
recipient or legal permission. Insofar as the content of the newsletter is concretely described as part of a subscription, it is relative for the consent of
the users. Otherwise, our newsletters only contain information concerning our products and the relevant information thereof (e.g. safety instruction),
special offers, promotions and information about our company.
Double opt-in and logging: Subscribing to our newsletter is part of a so-called double opt-in procedure. This means that you will receive an email
after subscribing requesting you to confirm your subscription. This confirmation is necessary so that nobody can subscribe with an email address
that is not their own. Subscription to the newsletter will be logged as proof of the subscription process in accordance with legal requirements. This
includes the storage of the subscription and confirmation time as well as the IP address. Similarly, changes to your data stored with the emailing
service provider will be logged.
Subscription details: To subscribe to the newsletter, all you have to do is enter your email address. Optionally, we ask that you provide your first and
last name. These are only used to personalize the newsletter.
The dispatch of the newsletter and the associated performance measurement are based on a consent of the recipients according to Article 6
paragraph 1 letter a, Art. 7 GDPR in conjunction with section107 paragraph 2 of the Telecommunications Act, or if consent is not required, based on
our legitimate interests in direct marketing according to Article 6 paragraph 1 letter f GDPR in conjunction with section 107 (2) and the like 3 of the
Telecommunications Act.
The logging of the registration process is based on our legitimate interests in accordance with Article 6 paragraph 1 letter f of the GDPR. Our
interest lies in the use of a user-friendly and secure newsletter system, which serves both our business interests and the expectations of the users
and also allows us to prove our consent.
Termination/Cancellation
The user can terminate the receipt of our newsletter at any time, i.e. revoke your consent. The newsletter cancellation link can be found at the
bottom of each newsletter. We may save the submitted email addresses for up to three years based on our legitimate interests before deletion
thereof to provide prior consent. The processing of this data is limited to the purpose of a possible defence against claims. An individual request for
cancellation is possible at any time, provided that at the same time the former existence of a consent is confirmed.
Email Marketing Service
The newsletter is distributed via the email service company, Amazon Web Services, Inc., 410 Terry Avenue North, Seattle WA 98109, United States.
The service provider operates a data centre in Germany, which is used for dispatching emails. The privacy policy of the email service provider can
be viewed here: https://aws.amazon.com/en/privacy/. The email service provider is based on our legitimate interests in accordance to Article 6
paragraph 1 letter f of the GDPR and a contract processing agreement according to Article 28 paragraph 3 section 1 of the GDPR.
The claim is limited to the Amazon AWS product "Simple Email Service". Consequently, only the actual dispatch of the newsletter is part of data
processing. On the part of Amazon AWS, there is no structured archiving of personal data.
Taboola
Our website utilises the service of Taboola Inc. (28 West 23rd St. 5th fl., New York, NY 10010, www.taboola.com ). Taboola is a discovery content
platform that delivers personalised recommendation to the user. The user profile does not allow any conclusions to be made upon your person.
Further information about deactivating Taboola cookies can be found here: https://www.taboola.com/privacy-policy (Opt-ou information can be found
under "Site Visitor Choices").
Cookies
Cookies are small text files that are stored on a user's computers. Different types of information can be stored within the text files. A cookie is
primarily used to store information about a user (i.e. the device on which the cookie is stored) during or after their visit on a website. Session cookies
are cookies that are deleted after a user leaves a website and closes the browser. In the case of session cookies, the contents of a shopping cart
in an online shop or a login status are saved. Persistent cookies remain stored even after the browser has been closed. Thus, a login status, for
instance, will be saved if the user visits the website after several days. Likewise, user interests can be stored which as used for range measurement
or marketing purposes. A third-party cookie refers to cookies that are offered by providers that do not manage the website that is being visited.
Cookies offered by the person that manages the website are called first-party cookies.
We can use session or persistent cookies and clarify these in the context of our privacy policy.
niceshops GmbH
VitalAbo
Saaz 99
8341 Paldau
The user is requested to disable the settings in their browser if they do not want any cookies stored, Saved cookies can be deleted in the system
settings of the browser. The exclusion of cookies can lead to functional restrictions of the website being visited.
A general contradiction explaining the use of cookies used for online marketing purposes can be found in a variety of services, especially in the
case of tracking, via the US website http://www.aboutads.info/choices/ or the EU site http://www.youronlinechoices.com/. Furthermore, the storage
of cookie can be switched off in the browser settings. Please note that, once the settings have been changed, not all the features available on this
website may be used.
Google Analytics with "Anonymize IP" Extention

Based on our legitimate interests (i.e. interest in the analysis, optimisation and economical operation of our online offering pursuant to Art. 6 (1),
letter f. GDPR), we use Google Analytics, a web analysis service of Google LLC ("Google"). Google uses cookies. The information generated by the
cookies regarding the use of the online offering by the user is generally transmitted to a Google server in the USA where it is stored.
Google is certified under the Privacy Shield agreement and thereby guarantees compliance with European data protection law (https://
www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).
Google uses this information on our behalf in order to evaluate the use of our online offering by the users, compile reports about the activities within
this online offering and provide us with additional services related to the use of this online offering and the internet. In doing so, pseudonymised
usage profiles for the users may be prepared from the processed data.
We only use Google Analytics with activated IP anonymisation. This means that the IP address of users within member states of the European
Union or other states in the European Economic Area is shortened by Google. Only in exceptional cases is the full IP address transferred to a
Google server in the USA and shortened there.
The IP address transferred by the user’s browser is not combined with other data by Google. Users can prevent the storage of cookies by
configuring the settings of their browser software accordingly. Furthermore, users can prevent the capture of data generated by the cookie and
related to their use of the online offering by Google as well as the processing of these data by Google by downloading and installing the browser
plug-in available under the following link: https://tools.google.com/dlpage/gaoptout?hl=en.
Further information about the use of data by Google, settings and rights to object is available in the Google data privacy statement (https://
policies.google.com/technologies/ads) and the settings for the display of advertisements by Google (https://adssettings.google.com/authenticated).
The personal data of users are erased or anonymised after 14 months.
Google Universal Analytics
We use Google Analytics in the "Universal Analytics" version. "Universal Analytics" is a Google Analytics process that prepares the user analysis on
the basis of a pseudonymised user ID and thereby creates a pseudonymised user profile with information from the use of various devices (known as
cross-device tracking).
Formation of Target Groups with Google Analytics
We use Google Analytics in order to display the advertisements placed within advertising services of Google and its partners only to those users
who have shown an interest in our online offering, or who exhibit certain characteristics (e.g. interest in certain topics or products determined based
on the websites that are visited), which we transmit to Google (known as Remarketing Audiences or Google Analytics Audiences). With the help of
Remarketing Audiences, we also want to ensure that our advertisements correspond to the potential interests of users.
Google Remarketing & Conversion Measurements

We use the services of Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043 on the basis of our legitimate interests (i.e. interest in
the analysis, optimisation and economic operation of our online service within the scope of Article 6 (1) letter f of the GDPR, USA, ("Google").
Google is certified under the Privacy Shield Agreement, which provides a guarantee to comply with European privacy legislation (https://
www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).
We use Google's online marketing tool, AdWords, to place ads on the Google advertising network (e.. in search results, in videos, on websites, etc.).
This allows us to display ads for and within the scope of our website and online offer in order to only present ads to users that potentially match
their interests. For instance, if a user is being presented with products that he/she has shown interest in on a different website, it is referred to as
"remarketing". When our or other websites are being accessed, whereby the Google advertising network is active, Google will immediately execute
a Google code and so-called (re)marketing tags (invisible graphics or code also referred to as "web beacons") are incorporated into the website.
With the help of these tags an individual cookie, i.e. a small text file, is saved on the user's device. Comparable technologies can also be used
instead of cookies. The file records which websites the user has visited, or which content the user is interested in as well as technical information
about the browser and operating system, referring websites, visiting times and other information regarding the use of the online offer.
Furthermore, we receive an individual "conversion cookie". The information obtained is used by Google to generate conversion statistics on our
behalf. However, we only receive the anonymous total number of users who clicked on our ad and were redirected to a conversion tracking tag
page. We do not receive any information that personally identifies users.
niceshops GmbH
VitalAbo
Saaz 99
8341 Paldau
The user data is processed within the Google advertising networking using a pseudonym. This means that Google does not store or process the
user's name or email address but rather the relevant, cookie-related data within pseudonymous user profiles. Thus, the ads are not displayed to a
specific, identifiable person but rather to the owner of the cookie and not their personal identity. This does not apply if the user has explicitly allowed
Google to process the data by other means. The user information collected is transmitted to Google and stored on Google servers in the United
States.
For more information about Google's data usage, settings and possibilities of revocation, please read Google's Private Policy (https://
policies.google.com/technologies/ads) as well as the settings regarding the display of ads via Google (https://adssettings.google.com/authenticated).
Facebook Pixel, Custom Audiences and Facebook Conversion

Based on our legitimate interests in the analysis, optimisation and economical operation of our online offering and for these purposes, our online
offering uses what is called the "Facebook pixel" of the social network Facebook operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025,
USA or, if you are resident in the EU, by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook").
Facebook is certified under the Privacy Shield agreement and thereby guarantees compliance with European data protection law (https://
www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active).
The Facebook pixel allows Facebook to identify the visitors to our online offering as a target group for this display of advertisements (known as
Facebook ads). Accordingly we use the Facebook pixel in order to display the Facebook ads placed by us only to those Facebook users who
have shown an interest in our online offering, or who exhibit certain characteristics (e.g. interest in certain topics or products determined based on
the websites that are visited), which we transmit to Facebook (known as Custom Audiences). We also use the Facebook pixel to ensure that our
Facebook ads correspond to the potential interests of users and are not perceived as bothersome. With the help of the Facebook pixel, we are also
able to understand the effectiveness of Facebook ads for statistical and market research purposes by seeing whether users were forwarded to our
website after clicking a Facebook advertisement (known as conversion).
Facebook processes the data according to Facebook’s data usage guideline. Corresponding general information about the display of Facebook ads
in Facebook’s data usage guideline: https://www.facebook.com/about/privacy/. Specific information and details about the Facebook pixel and its
functionality is available in the Facebook help section: https://www.facebook.com/business/help/651294705016616.
You can object to the recording of data by the Facebook pixel and their use for the display of Facebook ads. To choose what types of
advertisements are displayed to you on Facebook, you can call up the page set up by Facebook and follow the instructions for configuring usage-
based advertising settings: https://www.facebook.com/settings?tab=ads. The settings are platform-independent, meaning they apply to all devices
including desktop computers and mobile devices.
You can also object to the use of cookies for the purpose of measuring coverage and for promotional purposes on the deactivation page of the
network advertising initiative (http://optout.networkadvertising.org/) and on the US website (http://www.aboutads.info/choices) or the European
website (http://www.youronlinechoices.com/uk/your-ad-choices/).
Bing Ads
Based on our legitimate interest in the analysis and optimisation of our advertisements we use the conversion and tracking tool “Bing Ads” by
Microsoft (Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA). If personal data is used in this context it is used in
compliance with Art. 6 (1) of the GDPR. To use this tool, Microsoft Bing Ads places a cookie on your device if you reach our website by clicking
on a Microsoft Bing advertisement. We can then see that someone clicked on the ad, was redirected to our online offer and reached a previously
determined landing page (the so-called "conversion page"). We only learn the total number of users that clicked on the Bing ad. No IP addresses
are stored. We do not receive any personal Information regarding the identity of the user.
Microsoft is certified under the Privacy Shield Agreement, which guarantees that the level of data protection is kept at the valid level required in the
EU. (https://www.privacyshield.gov/participant?id=a2zt0000000KzNaAAK&status=Active ).
If you do not want to participate in the Bing Ads tracking process, you can also disable the the cookies required in your browser settings or use the
Microsoft opt-out page: http://www.youronlinechoices.com/uk/your-ad-choices/.
For more information about privacy and cookies used with Microsoft Bing Ads, please refer to the Microsoft Privacy Policy: https://
privacy.microsoft.com/en-us/privacystatement .
intelliAD
Our website uses the services of intelliAd Media GmbH, Sendlinger Str. 7, 80331 Munich. Anonymised data is captured and aggregated for the
design and optimisation of this website and user profiles are created from the data using pseudonyms. intelliAD tracking stores cookies offline.
Anonymized usage data and profiles can be used by the website operator as well as other intelliAd customers for the identification of user interests
without any conclusion as to your identity as a website visitor. You have the right to object to the data storage of your (anonymized) data for future
use by selecting the intelliAd opt-out function.
Social Media Online Presence

We maintain a social media online presence and other platforms in order to communicate with customers, interested parties and active users, and
to inform them about our services. When viewing the respective networks and platforms, the business conditions and data processing policies of the
respective operators apply.
We would like to point out that the users' data may be processed outside the European Union. This may result in risks to users because e.g. the
enforcement of user rights could be made more difficult. With respect to US providers certified under the Privacy Shield, we point out that they are
committed to respecting EU privacy standards.
niceshops GmbH
VitalAbo
Saaz 99
8341 Paldau
Furthermore, the user's data is usually processed for market research and advertising purposes. Thus, e.g. user profiles are created from user
behaviour and the resulting interests of the users. The usage profiles may, in turn, be used to e.g. place advertisements inside and outside the
platforms that are presumably in line with users' interests. For these purposes, cookies are usually stored on the users' computers, in which the user
behaviour and the interests of the users are stored. Furthermore, in the usage profiles, data can also be stored independently of the devices used by
the users (in particular if the users are members of the respective platforms and logged in to them).
The processing of personal data linked to the user is based on our legitimate interests in effective information of users and the communication with
users in accordance with. Art. 6 para. 1 lit. f. GDPR. If the users are asked by the respective providers for consent to data processing (that is, they
declare their agreement, for example, by ticking a checkbox or confirmation a button), the legal basis of the processing is in accordance to Art. 6
para. a., Art. 7 GDPR.
For a detailed description of the respective processing and the possibilities of contradiction (opt-out), we refer to the following linked information of
the provider.
Also, in the case of requests for information and the assertion of user rights, we point out that these can be claimed most effectively from the
providers. Only the providers have access to the data of the users and can take appropriate measures directly and provide information. If you still
need help, then you can contact us.
• Facebook (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Irland) - data privacy statement: https://
www.facebook.com/about/privacy/, Opt-Out: https://www.facebook.com/settings?tab=ads and http://www.youronlinechoices.com, Privacy Shield:
https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active.
• Google/ YouTube (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) – data privacy statement: https://
policies.google.com/privacy, Opt-Out: https://adssettings.google.com/authenticated, Privacy Shield: https://www.privacyshield.gov/participant?
id=a2zt000000001L5AAI&status=Active.
• Instagram (Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA) – data privcy statement/opt-out: http://instagram.com/about/legal/
privacy/.
Security Measures
Taking into account the state of the art, the costs of implementation and the nature, scope, context and purposes of processing as well as the risk of
varying likelihood and severity for the rights and freedoms of natural persons, the controller and the processor shall implement appropriate technical
and organisational measures to ensure a level of security appropriate to the risk, including inter alia as appropriate:
the pseudonymisation and encryption of personal data;
the ability to ensure the ongoing confidentiality, integrity, availability and resilience of processing systems and services;
the ability to restore the availability and access to personal data in a timely manner in the event of a physical or technical incident;
a process for regularly testing, assessing and evaluating the effectiveness of technical and organisational measures for ensuring the security of the
processing.
Product & Order Reviews

In order to maintain our quality of service and that of the products on offer, we request the customer's opinion and feedback after the business
transaction has been completed.
For this purpose, we process the order and order data with the review site "Verified Reviews" by Net Reviews SAS.
Should you encounter any problems, please do not hesitate to contact us in advance. We do our best to resolve any concerns in a timely fashion.
Please review our service and products once we have had the opportunity to solve the issue beforehand.
Net Reviews SAS, a French simplified joint-stock company (SAS) registered in the Marseille Trade and Companies Register (RCS) under number
750 882 375, is the provider of an IT solution for gathering reviews pertaining to the quality of the E-commerce Service provided by web merchants.
Verified Reviews and the customer agree to comply with the law governing the collection, processing and distribution of personal data in relation to
the processing of such data.
In particular, Verified Reviews guarantees that customers, users and site visitors have a right of access to personal information stored, as well as the
right to modify, correct, block, delete or oppose the processing of such data.
The following data is transferred to Net Reviews SAS and processed to collect ratings:
• Surname
• First name
• E-mail address
• Date and order number
• Name and internal as well as international references (GTIN / ISDNF) of the ordered product
The following data will be made available through the publication of ratings:
• First name
• First letter of the surname
• Date and time of review submission
• Date of purchase experience
niceshops GmbH
VitalAbo
Saaz 99
8341 Paldau
• Product purchased
• Place of purchase or of service delivery
More information about the company can be found here: https://www.verified-reviews.co.uk/
Participation in Affiliate Partner Programs

Within our online services, we use, on the basis of our legitimate interests (i.e. interest in the analysis, optimising, and economic operation of our
online services) pursuant to Article 6 (1) (f) GDPR, tracking measures customary in the trade, insofar as these are required for the operation of the
affiliate system. In the following paragraphs, we inform users of the technical background.
The services offered by our contractual partners may be advertised and linked as well on other websites (so-called affiliate links or after buy
systems, if for example links or services of third parties are offered after the conclusion of a contract). The operators of the website concerned
receive a commission if the user follows the affiliate links and subsequently make use of the offers.
In summary, it is required for our online service that we be able to trace whether users interested in affiliate links and/or the goods available at our
business, subsequently make use of the offers at the initiative of the affiliate link or our online platform. For this purpose, the affiliate links and our
offers are supplemented with certain values which may be placed as a part of the link or otherwise, e.g. in a cookie. The values include in particular
the referrer website, time, an online ID of the operator of the website on which the affiliate link was situated, an online ID of the offer concerned, an
online ID of the user, and values specific to tracking such as advertising material ID, partner ID, and categorization.
The online IDs of users used by us are pseudonym values. This means that the online ID itself does not contain personal data such as name or e-
mail address. They only assist us in determining whether the same user who clicked on an affiliate link, or who, through our website, took an interest
in one of our products, made use of the offer, i.e. concluded a contract with the provider. However, the online ID is personal insofar as the online ID
together with other user data are available to the partner business and also to us. Only in this way is the partner business able to inform us whether
such user accepted the offer and whether we may pay out the bonus.
We collaborate with Webgains and Belboon. These are so-called tracking cookies that provide our partners with order provisioning data. The data
does not contain personal data or information about the order or ordered products.
Server Log Files

We automatically collect and store information in so-called server log files, which your browser automatically sends to us when enquiring about our
website. The information comprises:
• the type and version of the browser used

• the operating system used
• referrer URL
• the hostname of the computer being accessed
• time of the server request
This mainly serves as quality assurance of our services. The data cannot be assigned to specific persons. The data is not merged with other data
sources. We reserve the right to check this data retrospectively if specific indications for illegal use come to our attention.
Data Erasure
The data processed by us is deleted or the processing thereof limited in accordance with Articles 17 and 18 of the GDPR. Unless explicitly stated
in this Privacy Policy, the data stored by us is deleted as soon as it is no longer required for its purpose and the deletion does not conflict with any
statutory storage requirements. Unless the data is deleted because it is required for other and legitimate purposes, its processing will be restricted.
This means that the data is blocked and not processed for other purposes. This applies, for example, to data that must be kept for commercial or tax
reasons.
According to the legal requirements in Germany, the storage takes place for 10 years according to §§ 147 paragraph 1 AO, 257 paragraph 1 No. 1
and 4, paragraph. 4 HGB (books, records, management reports, accounting documents, trading books, for taxation relevant Documents, etc.) and 6
years in accordance with § 257 (1) no. 2 and 3, para. 4 (commercial letters).
According to legal regulations in Austria, the storage takes place in for 7 years in accordance with § 132 exp. 1 BAO (accounting documents,
documents / invoices, accounts, documents, business documents, statement of income and expenses, etc.), for 22 years in connection with land
and for 10 years in the case of documents related to electronically supplied services, telecommunications, broadcasting and television services
provided to non-EU companies in EU Member States for which the Mini-One-Stop-Shop (MOSS) is used.
In the event of deletion, our system will be rendered unrecognizable and unrecoverable using an irreversible pseudonymization procedure.
Consent to data processing upon a job application at niceshops GmbH

1. Consent
By applying for or registering with niceshops GmbH, you consent to the processing of your personal data in connection with a job application. Your
data is stored and processed on BambooHR partner software system.
2. Data protection and data confidentiality
Data protection is important to us. niceshops GmbH has taken the necessary organisational and technical measures to ensure the confidentiality of
your application.
3. Use of your personal data
niceshops GmbH
VitalAbo
Saaz 99
8341 Paldau
During the application process, the contact details such as postal address, e-mail address and telephone numbers are stored in the applicant's
database, along with their title, surname and first name. In addition, application documents such as the cover letter, curriculum vitae, vocational
training certificates, theoretical and work certificates are captured and saved.
The data will be stored, evaluated, processed or transferred internally only as part of your application process. The data is accessible to employees
of the niceshops GmbH Human Resources Department and to those responsible for the selection of new niceshops GmbH staff only. Your data will
not be transmitted to companies or persons outside niceshops GmbH, nor used for other purposes.
4. Right of Access to Personal Data
Upon request, we would be happy to provide you with information about the personal data saved. Please contact our Human Resources Department
([email protected]) for more information.
5. Storage and Deletion of Data
Your data will be kept for the duration of the application process, during the corresponding legal retention period. If you are employed by niceshops
GmbH, your personal data or excerpt thereof will be added to your personal file.
If you have applied but we unable to offer you an appropriate position, we reserve the right to reserve your application. You will be notified if this is
the case. If you do not agree or are no longer interested, you have the option of having your data deleted by the Human Resources Department at
any time.
Contact Details
For questions concerning the collection, processing or use of your personal data, for information, rectification, blocking or deletion of data as well as
the revocation of consent, please contact: [email protected]
Banner Ads
When the user visits, we used data collected to display banner ads. This refers to web banners that are served by ad networks.
The banner ads display products that the user has previously seen on our website or products that are similar to those seen (retargeting). We only
use anonymous data in this case. The user's name or email address is not stored by cookies.
Our Partner:
Criteo CIL, 32 Rue Blanche, 75009 Paris, France.
Criteo generates an individual code ("hash") with the email address used to create a customer account on our website in order to identify users
across all devices. Information about their data protection policy can be found here: http://www.criteo.com/privacy/corporate-privacy-policy/
Information on our to deactivate this service can also be found here.
Use of YouTube Plugins

Our website embeds videos from the YouTube portal a company of Google Inc. (1600 Amphitheater Parkway, Mountain View, CA 94043, USA).
When viewing a YouTube video that is embedded in our website, a connection is established between the YouTube and Google servers. The
connection is used to communicate to these servers which of our website pages you have visited. If you are logged into your YouTube account,
YouTube assigns this information to your personal user account. The purpose and scope of the data collection and the further processing and
use of the data by Google or YouTube, as well as your rights and settings for the protection of your privacy, can be viewed in Google's privacy
policy: www.google.com/intl/en/policies/privacy/ . If you do not wish Google or YouTube to assign the data collected through our website directly
to your profile with another Google services, you can prevent Google Plugins by uploading add-ons for your browser, such as the script blocker
"NoScript" (http://noscript.net/).
Web Tracking Tools

In the context of retargeting and banner advertisements, we use third-party services. This is usually done using cookies or pixels. Thus, promotional
offers will be more useful and interesting for you.
Adyen Credit Payments

The processing of credit card payments is carried out by our partner Adyen BV, Simon Carmiggelstraat 6 - 50, 1011 DJ Amsterdam. In order to
prevent and detect fraud, we provide Adyen with your IP address, billing and delivery address, as well as your delivery details. The data is stored by
Adyen BV to protect your credit card against fraud. All data is encrypted. For more information, visit https://www.adyen.com/policies-and-disclaimer/
privacy-policy.
Use of Facebook Social Plugins

This website uses Facebook (operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA ) social plugins. The plugins are
marked with a Facebook logo, the "Facebook Social Plugin" add on or "Facebook Social Plugin". An overview of the Facebook plugins and how they
appear can be found here: https://developers.facebook.com/docs/plugins
When you visit one of our pages that displays such a plugin, your browser connects directly to the Facebook servers. The content of the plugin is
transmitted directly from Facebook to your browser and integrated into the website.
By integrating plugins, Facebook is given the information that your browser has accessed, the corresponding page of our website, even if you do
not have a Facebook account or are not logged into your Facebook account. This information (including your IP address) is transmitted directly from
your browser to a Facebook server in the United States and stored there.
niceshops GmbH
VitalAbo
Saaz 99
8341 Paldau
If you are logged into Facebook, Facebook can directly associate our website visit with your Facebook account. If you interact with the plugins, for
example, press the "Like" button or write a comment, the corresponding information is also sent directly to a Facebook server and stored there. The
information is published on Facebook and displayed to your Facebook friends.
Facebook can use this information for the purpose of advertising, market research and the design of Facebook pages. Facebook creates usage,
interest and relationship profiles, e.g. to evaluate your use of our website with regard to the advertisements shown on Facebook, to inform other
Facebook users of your activities on our website and to provide further services associated with the use of Facebook.
If you do not want Facebook to assign the data collected through our website to your Facebook account, you must log out of Facebook before you
visit our website.
For the purpose and scope of the data collection and the further processing and use of the data by Facebook, as well as your rights and settings for
the protection of your privacy, please refer to Facebook's Privacy Policy of Facebook: https://www.facebook.com/policy.php
Data Security
Your payment data will be encrypted during the order process. We secure our website and other systems by means of technical and organisational
measures against the loss, destruction, access, modification and dissemination of your data by unauthorized persons. You should always keep your
access information confidential and close the browser window when you have finished communicating with us, especially if you share the computer
with others.
We store the wording of a contract, sending you the order data and our Terms and Conditions via email. You can also read up on our Terms and
Conditions here . All previous order can be viewed within your customer account.

Data Protection Policy: Seite 1 Von 9 VAT: ATU63964918 - FN: FN302888z, Landesgericht Fuer ZRS Graz

Uploaded by

Copyright:

Available Formats

Data Protection Policy: Seite 1 Von 9 VAT: ATU63964918 - FN: FN302888z, Landesgericht Fuer ZRS Graz

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Data Protection Policy: Seite 1 Von 9 VAT: ATU63964918 - FN: FN302888z, Landesgericht Fuer ZRS Graz

Uploaded by

Copyright:

Available Formats

https://www.vitalabo.

Data Protection Policy

Collection, Processing & Use of Personal Data

• Personal data (e.g. name, address).

• Visitors and users of the online offer (hereinafter referred to as "user").

• Provision of the online offer, its functions and content.

Collaboration with Processors and Third Parties

Credit Card and Paypal Payments

Sofort Transfers via Klarna

Data Transmission in Third-Party Countries

Rights of the Data Subject

Data Usage for Advertising Purposes

Email Marketing Service

Google Analytics with "Anonymize IP" Extention

The personal data of users are erased or anonymised after 14 months.

Google Universal Analytics

Formation of Target Groups with Google Analytics

Google Remarketing & Conversion Measurements

Facebook Pixel, Custom Audiences and Facebook Conversion

Social Media Online Presence

the pseudonymisation and encryption of personal data;

Product & Order Reviews

Participation in Affiliate Partner Programs

Server Log Files

• the type and version of the browser used

Consent to data processing upon a job application at niceshops GmbH

2. Data protection and data confidentiality

3. Use of your personal data

4. Right of Access to Personal Data

5. Storage and Deletion of Data

Use of YouTube Plugins

Web Tracking Tools

Adyen Credit Payments

Use of Facebook Social Plugins

You might also like