Data protection declaration of Soulhouse Academy ("SOULHOUSE Energetische Akademie"; "Mag. Madeleine Dumhart" "we"), Altenbergerstraße 189, 4203 Altenberg bei Linz, Austria, for the website https://www.soulhouse.at ("Website").  

 

Below we inform you in detail to what extent we process your data and what rights you have in this regard. The protection of your privacy is very important to us and we would like to inform you accordingly about your rights and options in order to promote a trusting business relationship in the long term. Our data protection practice is in line with the European Union’s General Data Protection Regulation (“GDPR”) in conjunction with the Austrian Data Protection Adaptation Act 2018 (“DSG”), the Telecommunications Act (TKG) and other relevant statutory provisions.   Data protection regulations must always be observed when processing personal data. For the scope of this data protection declaration, the terminology of the GDPR is used. The "processing" of personal data essentially includes any handling of the same. Insofar as the data processed by us can be related to people and - even if only via third parties, in an overview or by means of additional knowledge - make you identifiable as a person (especially having your full name found out), it is basically personal data.   The present data protection declaration relates exclusively to the specified website. If you are redirected to other websites via links on our website, inform yourself directly on the target page about the respective handling of your data. We cannot assume any responsibility or liability for the content of third-party websites that are linked via our website.  

 

1. Data processing when using our website

When you visit our website, we collect the following data: IP address.   You can visit our website without having to provide any personal information. Only certain access data (your IP address and other metadata relating to your surfing behavior, e.g. date/time of access, requesting provider) are processed when you access it. This data processing is carried out for the purpose of traceability of visitors as well as for the purposes of security and improvement of the quality of our offer and is based on Art 6 Para 1 lit f DSGVO (overriding legitimate interests, namely achievement of the purposes just mentioned). However, this information does not allow us to draw any conclusions about your person. As a mere website visitor, you can inform yourself about our offers and activities without obligation.  

 

2. Data processing if you become our customer and want to purchase products

If you have decided to use our offer, you must provide certain information to process the contract. This requires you to create a customer account with us. Before purchasing a product or training program, you must or can therefore provide the following personal data, which we subsequently process:  

 

First name Last Name

User name

e-mail address

postal address

birth date

Company (optional)

phone number

 

This information is required by us in order to be able to fulfill contracts concluded with us (Art. 6 Para. 1 lit b GDPR), as well as after the order processing, in particular for possible cancellation and warranty cases. The data will therefore also be stored by us, although we will only keep it for as long as is reasonably considered necessary by us to achieve the purpose of performing the contract and as permitted by applicable law. In any case, we store the personal data as long as there are statutory retention requirements or the statute of limitations for potential legal claims has not yet expired. Insofar as the storage of the data is no longer necessary for the purposes of the original collection (or as part of a legally permissible change of purpose) and there are no legal provisions to the contrary, we will arrange for the deletion of the same.   In order to be able to fulfill contracts with our customers, we use processors who process personal data on our behalf. Our processors are contractually bound to our data protection practices and will treat your personal data in the strictest confidence. Under no circumstances will they transmit your data to third parties without your express consent or use it for purposes other than the fulfillment of your obligations to SOULHOUSE Energetische Akademie and based on our express instructions.   The processors are in particular the transport company DPD Direct Parcel Distribution Austria GmbH, Arbeitergasse 46, 2333 Leopoldsdorf, Austria, and Österreichische Post Aktiengesellschaft, Rochusplatz 1, 1030 Vienna, which we use to deliver the products. In this context, we only transmit the data to the company that is required to process the product shipment (full name and postal address). The company will only process this data in accordance with the provisions of the GDPR.  

 

3. Payments

If you decide to purchase products from us, you or we may have to commission a payment service provider (also a processor) to carry out the transaction. In doing so, certain (personal) (payment) data is transmitted, and we have largely no influence on its storage and processing. The transmission takes place exclusively for the purpose of fulfilling the contract concluded with us. Some of the selected payment service providers also collect this data themselves, especially if you (have to) create an account there. In this respect, the data protection declaration of the respective provider applies; Our data protection declaration is only intended to give you information about which recipients may receive your payment data.   When selecting an online payment method such as:   Credit card (American Express, Diners Club, Mastercard, Visa) EPS transfer Maestro Giropay Paypal you will – depending on your selection – be forwarded to the respective website of the provider. Any data that you have already provided during the ordering process (name, total amount of the order) will then be sent to this provider so that the payment can be made.  

 

4. Data processing of minors/children

As far as the data processing of persons under the age of sixteen (16) is concerned, the GDPR sets increased requirements in connection with the necessary consent of their respective legal representatives. In accordance with the relevant Austrian youth protection regulations, the products offered via our website are not accessible to people in this age group. SOULHOUSE Energetic Academy takes these requirements into account by asking for the customer's date of birth when creating a customer account. However, should data of minors/children be processed for any reason, deletion can be requested at any time (see also point 5 lit c).  

 

5. Data subject rights

A major concern of data protection law is to grant you certain options for disposing of your personal data even after data processing has already begun. For this purpose, there are a number of data subject rights, which we will comply with immediately upon your request, but usually within one (1) month at the latest. To exercise your rights, contact us via the following email address: akademie @ SOULHOUSE.at. Specifically, the following rights are provided:   If you exercise your right to information and there are no legal restrictions to the contrary, we will inform you comprehensively about our processing of your data. For this purpose we will send you (i) copies of the data (e-mails, database excerpts, etc.), as well as information on (ii) specifically processed data, (iii) processing purposes, (iv) categories of processed data, (v) recipients, (vi) the storage period or the criteria for determining it, (vii) the origin of the data and (viii) further information, if applicable, depending on the individual case. Please note, however, that we cannot hand over any documents that could affect the rights of other people.   With the right to rectification, you can request that we correct data that has been recorded incorrectly, has become incorrect or is incomplete (for the respective processing purpose). Your request will then be checked, whereby the data processing concerned can be restricted for the duration of the check upon request.   The right to (data) deletion can be exercised (i) if it is not necessary for the purpose of processing, (ii) if you revoke your consent, (iii) in the event of a particular objection, insofar as the data processing concerned is based on the legitimate interests of SOULHOUSE Energetische Academy is supported, (iv) in the case of unlawful data processing, (v) if there is a legal obligation to delete it and (vi) in the case of data processing by minors under the age of 16.   An accompanying right to restriction, after the exercise of which the data concerned may only be stored, exists (only) in special cases. In addition to the possibility of restricting the duration of the examination of data corrections, (i) illegal data processing (if no deletion is requested) and (ii) the duration of the examination of a special objection request are recorded.   You also have a fundamental right to object to data processing at any time. However, this only applies if the processing is based on the legitimate interests of SOULHOUSE Energetische Akademie.  A right to data portability, after the exercise of which the data concerned must be received in a structured, commonly used and machine-readable format and this data must be transmitted to another person responsible.   You can also exercise your right to lodge a complaint with the supervisory authority (see point 10).  Please also note that we may not be able to comply with your request due to compelling reasons worthy of protection for the processing (balancing of interests) or processing due to the assertion, exercise or defense of legal claims (on our part). The same applies in the case of excessive requests, whereby a fee may be charged here as well as in the case of obviously unfounded requests.  

 

6. data security; data erasure

SOULHOUSE Energetische Akademie takes all appropriate technical and organizational measures to ensure that only those personal data are processed by default, the processing of which is absolutely necessary for the business purpose. The measures taken by SOULHOUSE Energetic Academy affect both the amount of data collected, the scope of processing and their storage period and accessibility. Based on these measures, SOULHOUSE Energetic Academy ensures that personal data is only made accessible to a strictly limited and necessary number of people by default. Under no circumstances will other persons be granted access to personal data without the express consent of the person concerned. SOULHOUSE Energetische Akademie also uses various protective mechanisms (backups, encryption) to secure the website and other systems. This is intended to protect your (personal) data as best as possible against loss or theft, destruction, unauthorized access, alteration and dissemination.   In accordance with the provisions of the GDPR, all (personal) data collected by us via the website will only be kept for as long as is necessary in relation to the legal ground for the processing, unless longer-term storage is required by law. We comply with our deletion obligation based on our specific in-house deletion concept, whereby we can provide you with more detailed information on request.   All employees of SOULHOUSE Energetische Akademie have been sufficiently informed about all applicable data protection regulations, internal data protection regulations and data security precautions and are required to keep secret all information entrusted to them or made accessible to them in the course of their professional activities. The requirements of the GDPR are strictly observed and personal data is only made available to individual employees to the extent that this is necessary with regard to the purpose of data collection and our resulting obligations. If processors are used by SOULHOUSE Energetische Akademie, they are also obliged to comply with all applicable data protection regulations due to specific framework agreements. In addition, when handling your (personal) data, you are strictly bound to our specifications, especially with regard to type and scope.  

 

7. Data Transfer

For the purposes explained in this data protection declaration, we will transfer your (personal) data to recipients of the following categories:   Within our organization, those departments or employees who need your data to fulfill contractual or legal obligations and for data processing based on our legitimate interests receive your data.   Furthermore, (external) contract processors commissioned by us will receive your data if they need the data to provide their respective service (although access to personal data is sufficient). All processors are contractually obliged to treat your data confidentially and only process it within the scope of the provision of services. This includes the following categories of recipients:   Management Customer Management Product Management Supplier Shipping & Transport Hosting Provider Payment Provider Analytics We always have an up-to-date list of our recipient categories regarding data transmissions and processors.   Some of the above recipients are located outside the EU or process your (personal) data there. However, we take measures to ensure that all recipients have an adequate level of data protection. For this purpose, we conclude standard contractual clauses, for example, which can be sent on request. Alternatively, we use providers who are certified according to the EU-US Privacy Shield and for which an appropriate level of data protection applies according to the GDPR (according to the adequacy decision of the European Commission).   If we use contract processors, they are, as already mentioned, bound by our data protection practices and will treat your personal data as strictly confidential. Under no circumstances will they transmit your data to third parties without your express consent or use it for purposes other than the fulfillment of your obligations to SOULHOUSE Energetische Akademie and based on our express instructions.  

 

 

8.Cookies

We use so-called cookies, small text files that are stored on your computer when you access our website. They help us to make our offer more user-friendly, more attractive and more secure. In many cases these are “session cookies”, which are deleted again without your intervention as soon as you end your current browser session. Other cookies (e.g. to save your language setting) remain for a longer period of time or until you remove them manually. Cookies do not generally contain any personal data.   Most browsers accept cookies automatically. However, you can adjust your browser settings so that cookies are either generally rejected or only certain types are permitted (e.g. limiting the refusal to third-party cookies). However, if you change the cookie settings in your browser, our website may no longer be fully usable. The setting options for the most common browsers can be found under the following links:   Internet Explorer™: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies Edge™: https://www.netzwelt.de/news/155267- microsoft-edge-cookies-blockieren-verwalten-loeschen.html Safari™: https://www.verbraucher-sicher-online.de/anleitung/cookies-verwalten-in-apple-safari Chrome™: https://support. google.com/chrome/bin/answer.py?hl=de&hlrm=en&answer=95647 Firefox™ https://support.mozilla.org/de/kb/cookies-allow-and-reject Opera™: https ://help.opera.com/en/latest/web-preferences/#cookies​

 

9.Google Analytics

Our website uses Universal Analytics, the new generation of the web analytics tool Google Analytics from Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA ("Google"). This enables a comprehensive analysis of the use of the website by the customer. When you visit the website, you will be given a specific user ID that enables activities to be assigned across devices (computer, smartphone, tablet, etc.) (user-based tracking). However, this requires that you register or log in to our website. The stored user ID is used exclusively as a pseudonym. If you only visit the website as a guest, you will only be assigned a client ID; in the case of different end devices, such a new one is generated in each case. Tracking on our website is carried out by the tracking code analytics.js (Java Script). The data is organized in so-called dimensions, which are made up of measured values. In this context, we process your data on the basis of our overriding legitimate interest in creating easy-to-use website access statistics in a cost-efficient manner (Art 6 Para 1 lit f GDPR).   By using the software, a cookie is set (for the client ID), which is stored on your computer. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. However, due to the activation of IP anonymization on this website, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the USA and shortened there. Google will use this information to evaluate your use of the website for us, to compile reports on website activity and to provide us with other services related to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.   Google is a participant in the EU-US Privacy Shield, which means that the company is obliged to comply with the agreement and to permanently maintain a level of data protection that corresponds to European data protection standards. The Privacy Shield certification can be viewed at https://www.privacyshield.gov/list. With the procedure described under point 8, you can prevent the storage of cookies by setting your browser software accordingly (possibly limited to third-party cookies). Alternatively, you can also click here to set a so-called opt-out cookie, which is stored on your end device and also prevents Google Analytics from collecting your data. However, if you delete your stored cookies, this step will have to be repeated. However, we would like to point out that you may then not be able to use all the functions of the website to their full extent. However, Google Analytics also collects certain user interaction data without cookies and transmits it to a Google server in the USA. You can prevent the collection of data related to your use of the website (including your IP address) and their processing by Google by downloading and installing the browser plug-in available under the following link: https://tools.google.com /dlpage/gaoptout?hl=de.   Further information on data protection in connection with Google Analytics and your options in this regard can be found at https://www.google.at/intl/de_ALL/analytics/learn/privacy.html.  

 

10. Right to Complain

If you are of the opinion that we are violating the applicable data protection law when processing your data, you have the right to lodge a complaint with the Austrian data protection authority. The requirements for such a complaint are based on § 24ff DSG. However, we ask that you contact us beforehand in order to be able to clarify any questions or problems. The contact details of the data protection authority are as follows:   Austrian Data Protection Authority Wickenburggasse 8 1080 Vienna Austria   Phone: +43 1 52 152-0 Email: dsb@dsb.gv.at   

 

11. Contact

for data protection questions, notifications, requests For data protection questions, notifications or requests, please use the following contact address:   

SOULHOUSE Energetic Academy

Mag. Madeleine Dumhart

Altenbergerstrasse 189

4203 Altenberg near Linz

Austria

Phone:  +43 732 776 348

Email: akademie @ soulhouse.at