1

General

We, 4 Brains GmbH, take the protection of our users’ personal data very seriously. This privacy policy informs you about the nature, scope and purposes of the collection and use of your personal data. We are the data controller within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws of the EU Member States and other data protection regulations:

4 Brains GmbH
Paracelsusstraße 11A
5020 Salzburg
office@4brains.at

2

What is personal data?

Personal data is information relating to individuals whose identity is known or can be ascertained (such as name, address, email address, telephone number, etc.).

3

What personal data do we process about you, and where do we obtain this data from?

We process your personal data that we receive in the course of our business relationship with you. This personal data includes, for example, your personal details (name, address, contact details, etc.).
In addition, it may also include order data (e.g. payment orders), marketing and sales data, as well as data required to fulfil legal obligations. We receive this data either directly from you or it is provided to us by third parties, such as our partner companies.

4

For what purposes and on what legal basis is the data processed?

We process your personal data either

• to carry out pre-contractual measures or to fulfil our contractual obligations (Article 6(1)(b) of the GDPR) within the context of the business relationship
• on the basis of your consent (Article 6(1)(a) of the GDPR), if you have given us your consent for us to contact you to send you offers, to send you advertising (for marketing purposes) or to transfer your data to the manufacturer/importer, or
• to fulfil our legal obligations (Article 6(1)(c) of the GDPR) or
• or on the basis of our legitimate interest in data processing (Article 6(1)(f) of the GDPR)

The processing of your data is necessary for the establishment and performance of our business relationship. If you do not provide us with data, we will generally have to refuse to enter into a contract or will no longer be able to perform an existing contract and will therefore have to terminate it.
Should consent be required for processing, this will be obtained. Consent is, in any case, voluntary. If you have given us your consent to process your personal data for specific purposes, processing will take place on the basis of this consent in accordance with the purposes set out in the consent form and to the extent agreed therein. Consent that has been given may be withdrawn at any time, with effect for the future, in writing or by email. This does not affect the lawfulness of the data processing carried out up to that point.
You are not obliged to give your consent to the processing of any data that is not relevant to, or not necessary for, the performance of the contract.
Furthermore, we wish to inform you that we do not use automated decision-making in accordance with Article 22 of the GDPR to reach a decision on the establishment and conduct of a business relationship.

5

Will your data be passed on?

We will only disclose your data to the extent necessary to fulfil the stated purposes. In order to fulfil the stated purposes, it may be necessary to disclose your personal data to the following recipients. This disclosure may take the form of transmission, dissemination or any other form of provision, like

• IT companies for the provision, maintenance and support of our IT system, as well as for the IT-related processing of the data for the purposes of data processing,
• Tax advisers and chartered accountants for the purpose of, and in the interests of, assisting with the fulfilment of our tax obligations (UGB, BAO, etc.)
• Marketing partners (graphic designers, advertising agencies, printers, mail order companies, telemarketing firms, newspaper publishers), for the purpose of sending you advertising, provided you have given your consent in this regard
• Legal representatives, security authorities, competent courts or authorities for the purposes of legal proceedings

6

How long do we keep your data?

We will only store your data for as long as is necessary for the purpose for which we collected it. In any event, we will retain your personal data for as long as statutory retention obligations (including under the Austrian Commercial Code (UGB), the Austrian Federal Tax Code (BAO), etc.) apply or until the limitation periods for potential legal claims (in certain cases up to 30 years) have expired.

7

What rights do you have regarding data processing?

Under current law, you are entitled, amongst other things, to

• to check whether we process any personal data about you, and if so, what data, and to receive copies of that data,
• to request the rectification, supplementation or erasure of personal data that is inaccurate or is being processed in breach of the law,
• to require us to restrict the processing of personal data,
• to object to the processing of personal data,
• to request data portability and
• to know the identity of any third parties to whom the personal data is disclosed.

Where we process your data on the basis of your consent, you have the right to withdraw this consent at any time by email or post. This does not affect the lawfulness of the data processing carried out up to that point.
Furthermore, you have the right to lodge a complaint with the Austrian Data Protection Authority or with another data protection supervisory authority in the EU, in particular in your place of residence or work.

8

Information about the services we use on our website

Cookies

Our website uses cookies. Cookies are text files that are stored in the web browser or by the web browser on the user’s computer system. When a user visits a website, a cookie may be stored on the user’s operating system.
This cookie contains a distinctive string that enables the browser to be uniquely identified when the website is visited again.
Cookies that are already stored on your computer can be deleted at any time. You can find instructions on how to do this in your browser’s help section (under ‘Help’ in the browser menu). We use cookies to make our website more user-friendly. Some elements of our website require the browser accessing the site to be identifiable even after a page has been refreshed. The cookies store language settings and session keys for verifying the login.

Server Log Files

Every time our website is accessed, our system automatically collects data and information from the computer system of the user accessing the site.
The following data is collected in the process:

1. Information about the browser (“User Agent”)
2. Anonymised IP (“Internet Protocol”) address (the last octet of the IP address is discarded)
3. Date and time of access
4. Exact address of the requested page (“Request Path” and “Request Type”)
5. Status of the response to the requested page (“Response Status”)

The data is also stored in our system’s log files. The log file also contains the user’s full IP address. This data is not stored alongside any other personal data relating to the user.