We are committed to protecting the privacy of users of our website. This Privacy Policy therefore sets out in detail what personal data are processed when you use our website and how we (= the Controller) protect that data. Data is processed on the basis of the applicable statutory provisions.

Controller for this website:
Bunzl & Biach GmbH, Steinheilgasse 5, 1210 Wien
Representative of the Controller: Walter Davit, davit@bunzl-biach.at, +43 699 1 250 61 30

A) Visiting our website

1.
When you visit our website or web shop, we temporarily save and process the following (log) data:
• IP address of the accessing computer
• Date and time of access
• Name and URL of the file accessed
• Volume of data transferred
• Notification of whether access was successful (HTTP status code)
• Identifiers of the browser and operating system used

The data recorded are stored for three days. The legal basis for the storage of these data is our legitimate interest, as they serve in particular to ensure the smooth operation of the server and system security (Art. 6 (1)(f) GDPR). IP addresses are only evaluated in the event of attacks on our network infrastructure.

2.
We shall not disclose data that are saved following access to our website to third parties without your consent unless we are required to do so by law or by a court order, or disclosure is necessary for the purposes of investigation or criminal prosecution in the event of attacks on our Internet infrastructure. Data shall not be disclosed for any other non-commercial purposes or for commercial ends.

3.
We do not carry out all processing of the log files and cookies saved ourselves; we also use the services of reliable, carefully selected partners (= Processors). Our partners also ensure the security of your data with suitable technical and organisational measures that correspond to the state of the art. Our partners are not authorised to use the personal data provided to them for anything but the specified purposes.

Your personal data are also transferred to Google Inc. in the USA:

• if you use the automated translation service “Google Translate”
• if you view a video embedded on our site with a YouTube plugin
• if geographical information is displayed on one of our contact pages using a map from “Google Maps”

Google Inc. is certified in accordance with the EU-US Privacy Shield framework. The certificate can be viewed online at https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI. You can find more information on data processing by Google in the Google privacy policy at: http://www.google.com/privacypolicy.html. Select the appropriate settings in the privacy centre to manage and protect your data.

To allow us to display the font “Trade Gothic” on our website, personal data is transferred to Fonts.com, a web service provided by Monotype Imaging Inc. You can find more information on data processing by Monotype Imaging Inc. at https://www.monotype.com/legal/privacy-policy/

4.
Our website uses cookies in several places to make it more effective and user-friendly. Cookies are small text files that your browser saves on your computer. Data are collected and saved in anonymous or pseudonymised form only.
Our website uses the following cookies:

• codeworkscakecookie (expires after one session)
• Frontend[language] (selected language is saved for one year)
• language (selected language is saved for one year)

In your browser settings, you can specify whether or not to allow cookies of any type. You can prevent cookies from being installed on your device by changing your browser settings; however, please be aware that if you do so, you may not have full access to all the functions of our website.

5.
This website uses Google Analytics, a web analysis service provided by Google Inc.
Google Analytics also uses cookies, text files that are stored on your computer and that enable an analysis of how you use our website. The information about your use of this website (including your IP address) that is generated by the cookie is transferred to a Google server in the USA and stored there. Google uses this information to analyse your use of the website, to compile reports about website activity for the website operator, and to provide further services in connection with the use of this website and of the Internet. This information may also be provided to third parties if legally required or if third parties process this data on behalf of Google. Google will never associate your IP address with any other data saved by Google. Google Analytics uses the function “_anonymizeIp()” for all processing of your data. This function means that only abbreviated IP addresses are used in further processing and direct association with a person is therefore not possible. Google thus anonymises your IP address.

You can prevent cookies from being installed on your device by changing the settings in your browser software; however, please be aware that if you do so, you may not have full access to all the functions on this website. You can also prevent the data being recorded and being processed by Google by adjusting the ad settings at https://adssettings.google.com/authenticated or downloading and installing the relevant browser plugin from: https://tools.google.com/dlpage/gaoptout?hl=en. You can also find more information on the Google terms of use and privacy policy here: https://support.google.com/analytics/answer/7124332?hl=en or https://policies.google.com/?hl=en

B) Rights of data subjects
Please note that you also have the following rights relating to your personal data as a data subject pursuant to the GDPR:

• The right to information from the Controller on the personal data held concerning you pursuant to Art 15 GDPR
• The right to rectification pursuant to Art 16 GDPR
• The right to erasure pursuant to Art 17 GDPR
• The right to restriction of processing pursuant to Art 18 GDPR
• The right to data portability pursuant to Art 20 GDPR
• The right to object to processing pursuant to Art 21 GDPR

You also have the right to lodge a complaint with the data protection authority. Please also see the website of the data protection authority, which can be accessed here: https://www.dsb.gv.at/

C) Links to other providers
Our website may contain links to other providers and links to our social media pages. This Privacy Policy applies to websites and services that belong to us and are operated by us. We have no control over external pages or content to which our services provide links. We are not responsible for ensuring that such providers or the operators of the social media platforms comply with statutory data protection provisions.

D) Technical data protection
We employ technical and organisational measures to safeguard the personal data concerning you that are processed by us from accidental and deliberate manipulation, loss, destruction and access by unauthorised persons. We are continuously improving our security measures in accordance with technological developments.

E) Scope and validity of this Privacy Policy
This Privacy Policy applies with immediate effect and supersedes all previous privacy policies. We reserve the right to amend this Privacy Policy if reasonable or necessary.