DSGVO – Data protection information

  1. Introduction

The protection of your personal data is of particular concern to us, Kumar’s Kitchen – Hari Aum GmbH, located at Breitenfurter Straße 213, 1230 Vienna, Tel.: +43 (664) 5005846, Email: service@kkevents.at (Kumar’s Kitchen). We process your personal data exclusively in accordance with the legal regulations, especially the General Data Protection Regulation (“GDPR”), the applicable Data Protection Act 2018 (“DSG”), and the Telecommunications Act (“TKG”). Below, you will find information on what data we collect, process, and use when you visit and use our website www.kumarskitchen.com, www.kkevents.at (“Website”).

We may need to update these data protection notices periodically as the internet evolves. Therefore, we recommend checking this page regularly to ensure that you have read the latest version.

  1. What are personal data?

“Personal data are information about individuals whose identity is either determined or at least determinable. This includes, for example, your name, your email address, and your IP address.”

  1. WHICH PERSONAL DATA DO WE COLLECT FROM YOU AND FOR WHAT PURPOSE?

3.1. Contacting us

If you contact us by email, phone, post, or via our contact form, your voluntarily provided personal data (salutation, title, name, company, email, phone number) and the content of your inquiry will be stored with us for the purpose of processing your inquiry and in case of follow-up questions (pre-contractual measures or legitimate interests). This data will be used to process the inquiry as required for its response. Naturally, we will not forward your inquiry to third parties without your consent.

3.2. Registration

If you create an account on this website, we collect, store, and process at least your salutation, name, username, address, email address, phone number, and password. We may also store your title, company, and VAT number, if applicable. The processing is carried out for the purpose of managing your online account.

3.3. Orders via the webshop

For the purpose of contract processing, we process the information provided during registration as well as the selected goods, comments on your orders, delivery address, and credit card data (credit card provider, cardholder, the last four digits of the credit card number). The data you provide is necessary for contract fulfillment or for carrying out pre-contractual measures. Without this data, we cannot conclude the contract with you. Data will not be transmitted to third parties, except for the transmission of the name, address, and possibly the phone number to the shipping and delivery company contracted by us for the delivery of the goods, as well as to the accounting department of Kumar’s Kitchen – Hari Aum GbmH and tax advisor to fulfill our tax obligations.

3.4. Transmission to Third Parties

In addition to the data transmissions mentioned above, we also transmit your personal data to external assistants or service providers to the extent necessary:

  • to IT service providers and/or providers of data hosting or data processing or similar services;
    to other
  • to other service providers, providers of tools and software solutions that also assist us in providing our services and act on our behalf
  • to any third parties involved in fulfilling our obligations to you (such as service providers for delivering your webshop order to you, payment service providers for processing payments in the webshop, banks for payment processing)
  • to other external third parties to the extent necessary (e.g., auditors, insurance companies in case of insurance claims, legal representatives as required);
  • to authorities and other public bodies to the extent legally required (e.g., tax authorities, etc.).
  • The website kumarskitchen.com and www.kkevents.at are maintained in a third country that complies with GDPR regulations.
  1. COOKIES

Our website uses cookies. Cookies are small text files that are stored on your device via your browser.

We use cookies to make our website and offerings more user-friendly. Some cookies remain on your device until you delete them. They enable us to recognize your browser on your next visit.

If you do not wish to receive cookies, you can set your browser to notify you when cookies are set and to allow cookies only in individual cases. Disabling cookies may limit the functionality of our website.

4.1. Google Analytics

Our website uses features of the Google Analytics web analytics service provided by Google Inc. (‘Google’). This analytics tool uses cookies to collect standard logging information and visitor behavior in aggregate form on our website. The information collected by Google Analytics cookies about your use of this website is usually transmitted to and stored on Google servers, which may be located in the United States or other countries outside the EU. To protect our users’ privacy, IP addresses are anonymized.

The following information is collected by Google Analytics: anonymized IP address, browser, device type, device model, country, service provider, screen resolution (on mobile devices), time spent on the website, language, operating system, pages visited on the website. Google uses this information to evaluate website usage, compile reports on website activities, and provide other services related to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google’s behalf.

If you do not want our website to record your activities through Google Analytics, you can download and install a browser plugin available at http://tools.google.com/dlpage/gaoptout.

User data is stored indefinitely or until you request deletion of your data. Google will delete the data as soon as possible, but no later than 180 days after the deletion request.

4.2. Google Maps

Our website uses features of the Google Analytics web analytics service provided by Google Inc. (‘Google’). This analytics tool uses cookies to collect standard logging information and visitor behavior in aggregate form on our website. The information collected by Google Analytics cookies about your use of this website is usually transmitted to and stored on Google servers, which may be located in the United States or other countries outside the EU. To protect our users’ privacy, IP addresses are anonymized.

The following information is collected by Google Analytics: anonymized IP address, browser, device type, device model, country, service provider, screen resolution (on mobile devices), time spent on the website, language, operating system, pages visited on the website. Google uses this information to evaluate website usage, compile reports on website activities, and provide other services related to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google’s behalf.

If you do not want our website to record your activities through Google Analytics, you can download and install a browser plugin available at http://tools.google.com/dlpage/gaoptout.

User data is stored indefinitely or until you request deletion of your data. Google will delete the data as soon as possible, but no later than 180 days after the deletion request.

4.3. Mapping service

We use Google Maps, a mapping service provided by Google LLC, Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”), on our website. When you access a page that contains Google Maps, your browser establishes a direct connection to Google’s servers. The map content is transmitted directly from Google to your browser and integrated into the website via an iFrame. If you do not want Google to collect, process, or use data about you through our website, you can disable JavaScript in your browser settings. However, please note that if you do this, you will not be able to use the map display. For more information on how Google processes data, please refer to Google’s privacy policy: https://www.google.com/intl/en/policies/privacy/index.html.

 
 

3.5

4.4. YouTube-Videos

On our website, video clips from the YouTube video portal are embedded. YouTube is a portal operated by YouTube, LLC, a subsidiary of Google Inc.

For data protection reasons, we have chosen not to embed the video clips directly on our site. By default, when you visit our site, no data is transmitted to Google. Instead, you will only find a preview image of the video clip on our website. To play the video clip, you need to activate it by clicking on the preview image. By clicking, you consent to the data being transferred to YouTube. The legal basis for processing your data is your consent according to Art. 6(1)(a) and Art. 49(1)(a) GDPR. Only after activation will a connection be established to Google’s servers, and data will be transmitted to Google. This involves transferring your personal data to a third country (outside the European Economic Area), where a level of data protection comparable to EU law is not guaranteed. Therefore, compliance with the data protection principles of EU law is not ensured. We have no influence over the extent of data collected in this regard.

For more information on the purpose and scope of data collection, as well as further processing and use of the data by Google, your rights in this regard, and options for protecting your privacy, please refer to Google’s privacy policy at: https://www.google.com/intl/en/policies/privacy/.

You can find YouTube’s terms of service at: https://www.youtube.com/t/terms.

 
 

3.5

4.5. Facebook (Instagram) Website Custom Audiences

This website uses the “Website Custom Audiences” pixel of the social network Facebook, located at 1601 South California Avenue, Palo Alto, CA 94304, USA.

When you visit our website, a direct connection is established between your browser and the Facebook server via this pixel. Facebook thereby receives information that your IP address has visited this website. This allows Facebook to associate the visit to our pages with your user account. The information obtained in this way may be used for displaying Facebook Ads. Please note that as the provider of the website, we do not receive any information about the content of the transmitted data or its use by Facebook.

For more information, please refer to Facebook’s privacy policy at https://www.facebook.com/about/privacy/. If you do not wish for data collection via Custom Audiences, you can deactivate Custom Audiences here.

4.6. Mail Chimp – Newsletter

We work with Mailchimp – Newsletter. What is a Mailchimp?

Mailchimp is a cloud-based service for newsletter management. This means that users do not install Mailchimp on their own computer or server, but instead use the service via a web interface on an external server.

The Rocket Science Group, LLC
675 Ponce de Leon Ave NE
Suite 5000
Atlanta, GA 30308 USA

Translated from English – Mailchimp is an American marketing automation platform and email marketing service used by businesses to manage their mailing lists and create email marketing campaigns and automations sent to customers.

  1. STORAGE DURATION

We generally store your personal data only for as long as necessary to fulfill our obligations to you. However, due to tax and company law retention obligations that apply to us, we typically store your personal data provided in connection with orders for seven years after contract fulfillment. Personal data provided in inquiries is stored for six months after responding to the inquiry to handle any follow-up questions. This storage is based on our legitimate interests, particularly in providing customer support that is user-friendly and enhancing the company’s reputation. In this case, there are no overriding interests on your part.

6. Data Processing in Third Countries

If data is transferred to entities located outside a Member State of the European Union or another state party to the Agreement on the European Economic Area, we ensure prior to such transfer that the recipient either provides an adequate level of data protection (e.g., through an adequacy decision by the European Commission, appropriate safeguards such as the recipient’s self-certification under the EU-US Privacy Shield, or the implementation of EU Standard Contractual Clauses with the recipient) except in legally permitted exceptional cases, or we obtain your sufficient consent. You may request an overview of recipients in third countries and a copy of the specific arrangements ensuring adequate data protection by contacting us using the details provided in Section 1.

  1. DATA SECURITY
    We implement appropriate technical and organizational security measures to protect your personal data against accidental or unlawful destruction, alteration, loss, theft, unauthorized access, disclosure, reproduction, use, modification, or any other form of unlawful processing.

    Our security server software encrypts all of your personal data such as credit card numbers, bank codes, bank account numbers, name, and address. This encryption ensures that unauthorized parties cannot read this information during transmission over the Internet. The characters you enter are transformed into a code that can be securely transmitted online, providing optimal protection against unauthorized access for our customers.

    Furthermore, we and our employees are committed to maintaining data confidentiality and secrecy. Our agents and subcontractors who require access to your personal data to fulfill their professional duties will also adhere to the same obligations of confidentiality and secrecy.

     
     

    3.5

    YOUR RIGHTS AS AFFECTED PERSON

You have the right to request information about the data stored about you at any time. Furthermore, under certain conditions, you can request the correction or deletion of your data. You may also have the right to restrict the processing of your data and the right to receive the data you have provided in a structured, commonly used, and machine-readable format.

Furthermore, you have the right to object to data processing, particularly if the processing serves direct marketing purposes. Additionally, if we process your data for legitimate purposes, you have the right to object at any time, provided there are reasons arising from your particular situation.

To facilitate the processing of your request regarding the aforementioned rights, and to ensure that personal data is not disclosed to unauthorized third parties, please submit your inquiry with clear identification of your person and a brief description detailing the extent of how you wish to exercise your rights as listed above. You can reach out to us at:

Kumar’s Kitchen – Hari Aum GmbH
Breitenfurter Straße 213
1230 Vienna
Tel.: +43 (664) 5005846
Email: service@kkevents.at

If you have any questions, feel free to contact us directly.