Privacy Policy of Mag. Madeleine Dumhart (“SUN OF SPRING Energetic Academy”; “we”), Altenbergerstraße 189, 4203 Altenberg near Linz, Austria, for the websites https://www.sunofspring.com, https://www.sunofspring.at, https://www.soulhouse.at (“Website”).

Below we provide you with comprehensive information on how we process your data and what rights you have in this regard. The protection of your privacy is very important to us and we would like to inform you accordingly about your rights and options in order to promote a trusting business relationship in the long term. Our data protection practices are in accordance with the General Data Protection Regulation of the European Union (“GDPR”) in conjunction with the Austrian Data Protection Amendment Act 2018 (“DSG”), the Telecommunications Act (TKG) and other relevant legal provisions. Data protection regulations must always be observed whenever personal data is processed. The scope of this privacy policy is based on the definition of the GDPR. This means that the “processing” of personal data essentially includes any handling of the same. Insofar as data processed by us can be related to people and - even if only via third parties, in a synopsis or by means of additional knowledge - make you identifiable as a person (in particular your full name can be found out), this is basically personal data. This privacy policy relates exclusively to the website listed. If you are redirected to other websites via links on our website, please inform yourself directly on the target page about the respective handling of your data. We cannot accept any responsibility or liability for the content of third-party websites linked to our website.

1. data processing
when using our websiteWhen you visit our website, we collect the following data: IP address. You can visit our website without having to provide any personal data. Only certain access data (your IP address and other metadata relating to your surfing behavior, e.g. date/time of access, requesting provider) are processed when you visit our website. This data processing is carried out for the purpose of tracing visitors and for the purposes of security and improving the quality of our offer and is based on Art. 6 para. 1 lit. f GDPR (overriding legitimate interests, namely achieving the purposes just mentioned). However, this information does not allow us to draw any conclusions about you personally. As a mere website visitor, you can therefore inform yourself about our offers and activities without obligation.

2. data processing
if you become our customer and wish to purchase productsIf you have decided to use our offer, you must provide certain information for the execution of the contract. This requires you to create a customer account with us. Before purchasing a product or training program, you must or can therefore provide the following personal data, which we will subsequently process:
First name, last nameUser nameE-mail addressPostal addressDate of birthCompany (optional)Telephone number
This information is required by us in order to be able to fulfill contracts concluded with us (Art. 6 para. 1 lit b GDPR), as well as after order processing, in particular for possible withdrawal and warranty cases. The data is therefore also stored by us, whereby we only store it for as long as we reasonably deem necessary to achieve the purpose of fulfilling the contract and as permitted by applicable law. In any case, we store personal data for as long as statutory retention obligations exist or limitation periods for potential legal claims have not yet expired. If the storage of the data is no longer necessary for the purposes of the original collection (or in the context of a legally permissible change of purpose) and there are no legal provisions to the contrary, we will arrange for the data to be deleted. In order to fulfill contracts with our customers, we use processors who process personal data on our behalf. Our processors are contractually bound to our data protection practices and will treat your personal data as strictly confidential. Under no circumstances will they transfer your data to third parties without your express consent or use it for purposes other than to fulfill their obligations to Madeleine Dumhart (SUN OF SPRING Energetic Academy) and on the basis of our express instructions. The processors are, in particular, the transport company DPD Direct Parcel Distribution Austria GmbH, Arbeitergasse 46, 2333 Leopoldsdorf, Austria and Österreichische Post Aktiengesellschaft, Rochusplatz 1, 1030 Vienna, which we use to deliver the products. In this context, we only provide the company with the data required to process the product shipment (full name and postal address). The company will process this data exclusively in accordance with the provisions of the GDPR.

3. payments
If you decide to purchase products from us, you or we may have to commission a payment service provider (also a processor) to carry out the transaction. In the process, certain (personal) (payment) data will be transmitted, over the storage and processing of which we have largely no influence. In turn, the transfer takes place exclusively for the purpose of fulfilling the contract concluded with us. In some cases, the selected payment service providers also collect this data themselves, especially if you (have to) create an account with them. In this respect, the privacy policy of the respective provider applies; our privacy policy is only intended to provide you with information about which recipients may receive your payment data. When selecting an online payment method such as: Credit card (American Express, Diners Club, Mastercard, Visa) EPS bank transfer Maestro Giropay Paypal, you will be redirected to the respective provider's website, depending on your selection. Any data that you have already entered during the ordering process (name, total amount of the order) will then be transmitted to this provider so that the payment can be processed.

4. data processing of minors/children
When it comes to the data processing of persons under the age of sixteen (16), the GDPR imposes increased requirements in relation to the necessary consent of their respective legal representatives. In accordance with the relevant Austrian youth protection regulations, the products offered via our website are not accessible to persons in this age group. Madeleine Dumhart (SOULWELT Energetic Academy) takes these requirements into account by asking for the customer's date of birth when creating a customer account. If, for any reason, data of minors/children is processed, deletion can be requested at any time (see also point 5 lit c).
 

5. rights of data subjects
An essential concern of data protection law is to give you certain options for disposing of your personal data even after data processing has already begun. For this purpose, there are a number of data subject rights, which we will comply with immediately upon your request, but generally within one (1) month at the latest. To exercise your rights, please contact us at the following email address: soulwelt @ gmx.at. The following rights are provided in detail: If you exercise your right to information and there are no legal restrictions to the contrary, we will provide you with comprehensive information about our processing of your data. For this purpose, we will provide you with (i) copies of the data (e-mails, database extracts, etc.), as well as information on (ii) specifically processed data, (iii) processing purposes, (iv) categories of processed data, (v) recipients, (vi) the storage period or criteria for its determination, (vii) the origin of the data and (viii) further information depending on the individual case. Please note, however, that we cannot hand over any documents that could affect the rights of other persons. With the right to rectification, you can request that we correct data that has been recorded incorrectly, has become incorrect or is incomplete (for the respective processing purpose). Your request will then be examined, whereby the data processing concerned may be restricted for the duration of the examination upon request. The right to (data) erasure can be exercised (i) in the absence of necessity with regard to the purpose of processing, (ii) in the event of revocation of consent given by you, (iii) in the event of a particular objection, insofar as the data processing concerned is based on the legitimate interests of Madeleine Dumhart (SUN OF SPRING Energetic Academy), (iv) in the event of unlawful data processing, (v) in the event of the existence of a legal obligation to erase and (vi) in the event of data processing of minors under the age of 16. An accompanying right to restriction, after the exercise of which the data concerned may only be stored, exists (only) in special cases. In addition to the possibility of restricting the duration of the examination of data corrections, (i) unlawful data processing (unless deletion is requested) and (ii) the duration of the examination of a special request for objection are covered. You also have a fundamental right to object to data processing at any time. However, this only applies if the processing is based on the legitimate interests of Madeleine Dumhart (SUN OF SPRING Energetic Academy). A right to data portability, after exercising which the data concerned must be received in a structured, commonly used and machine-readable format and this data must be transmitted to another controller. You can also exercise your right to lodge a complaint with the supervisory authority (see point 10). Please also note that we may not be able to comply with your request due to compelling legitimate grounds for processing (balancing of interests) or processing for the establishment, exercise or defense of legal claims (on our part). The same applies in the case of excessive requests, whereby a fee may be charged in this case and also in the case of compliance with manifestly unfounded requests.

6. data security; data deletion
Mag. Madeleine Dumhart (SUN OF SPRING Energetic Academy) takes all appropriate technical and organizational measures to ensure that only those personal data are processed by default whose processing is absolutely necessary for the business purpose. The measures taken by Madeleine Dumhart (SUN OF SPRING Energetic Academy) concern both the amount of data collected, the scope of processing and its storage period and accessibility. Madeleine Dumhart (SUN OF SPRING Energetic Academy) uses these measures to ensure that personal data is only made accessible to a strictly limited and necessary number of persons by means of default settings. Other persons are not granted access to personal data under any circumstances without the express consent of the person concerned. Madeleine Dumhart (SUN OF SPRING Energetic Academy) also uses various protective mechanisms (backups, encryption) to secure the website and other systems. This is intended to protect your (personal) data in the best possible way against loss or theft, destruction, unauthorized access, modification and dissemination. In accordance with the provisions of the GDPR, all (personal) data collected by us via the website will only be stored for as long as it is required with regard to the legal basis of the processing, unless longer-term storage is required by law. We comply with our deletion obligation on the basis of our specific internal company deletion concept, whereby we can provide you with more detailed information on request. All employees of Madeleine Dumhart (SUN OF SPRING Energetic Academy) have been sufficiently informed about all applicable data protection regulations, internal data protection regulations and data security precautions and are required to keep secret all information entrusted or made accessible to them in the course of their professional employment. The requirements of the GDPR are strictly observed and personal data is only made available to individual employees to the extent that this is necessary with regard to the purpose of data collection and our resulting obligations. If processors are used by Madeleine Dumhart (SUN OF SPRING Energetic Academy), they are also obliged to comply with all applicable data protection regulations on the basis of specific framework agreements. In addition, they are strictly bound by our instructions when handling your (personal) data, in particular with regard to type and scope.

7. data transfer

For the purposes explained in this privacy policy, we will transfer your (personal) data to recipients in the following categories: Within our organization, those departments or employees will receive your data who need it to fulfill contractual or legal obligations and due to data processing based on our legitimate interests. Furthermore, (external) processors commissioned by us will receive your data if they require the data to provide their respective services (whereby access to personal data is sufficient). All processors are contractually obliged to treat your data confidentially and to process it only in the context of providing the service. This includes the following categories of recipients: Management Customer management Product management Suppliers Shipping & transportation Hosting provider Payment provider Analytics We always have an up-to-date list of our categories of recipients with regard to data transfers and processors. Some of the recipients listed above are located outside the EU or process your (personal) data there. However, we take measures to ensure that all recipients have an appropriate level of data protection. To this end, we conclude standard contractual clauses, for example, which can be provided on request. Alternatively, we use providers that are certified in accordance with the EU-US Privacy Shield and therefore have an adequate level of data protection in accordance with the GDPR (according to the European Commission's adequacy decision). If we use processors, they are, as already mentioned, bound by our data protection practices and will treat your personal data as strictly confidential. Under no circumstances will they transfer your data to third parties without your express consent or use it for purposes other than those intended to fulfill their obligations to Madeleine Dumhart (SUN OF SPRING Energetic Academy) and on the basis of our express instructions.

8. cookies

We use so-called cookies, small text files that are stored on your computer when you access our website. They help us to make our website more user-friendly, attractive and secure. In many cases, these are “session cookies”, which are deleted again without any action on your part as soon as you end your current browser session. Other cookies (e.g. to save your language settings) remain for a longer period of time or until you remove them manually. Cookies do not contain any personal data. Most browsers accept cookies automatically. However, you have the option of adjusting your browser settings so that cookies are either generally rejected or only certain types are permitted (e.g. restriction of refusal to third-party cookies). However, if you change your browser's cookie settings, you may no longer be able to use our website to its full extent. The setting options for the most common browsers can be found under the following links Internet Explorer™: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies Edge™: https://www.netzwelt.de/news/155267-microsoft-edge-cookies-blockieren-verwalten-loeschen.html Safari™: https://www.verbraucher-sicher-online.de/anleitung/cookies-verwalten-in-apple-safari Chrome™: https://support.google.com/chrome/bin/answer.py?hl=de&hlrm=en&answer=95647 Firefox™ https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen Opera™: https://help.opera.com/en/latest/web-preferences/#cookies

9 Google Analytics

Our website uses Universal Analytics, the new generation of the web analysis tool Google Analytics from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). This enables a comprehensive analysis of the use of the website by the customer. When you visit the website, you are assigned a specific user ID, which makes it possible to assign activities across devices (computer, smartphone, tablet, etc.) (user-based tracking). However, this requires you to register or log in to our website. The stored user ID is used exclusively as a pseudonym. If you only visit the website as a guest, you will only be assigned a client ID; if you use different end devices, a new client ID will be generated each time. Tracking on our website is carried out using the tracking code analytics.js (Java Script). The data is organized in so-called dimensions, which are made up of measured values. We process your data in this context on the basis of our overriding legitimate interest in creating easy-to-use website access statistics in a cost-efficient manner (Art. 6 (1) (f) GDPR). By using the software, a cookie is set (for the client ID), which is stored on your computer. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. However, due to the activation of IP anonymization on this website, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for us and providing us with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. Google is a participant in the EU-US Privacy Shield, which obliges the company to comply with the agreement and to maintain a level of data protection in line with European data protection standards at all times. The Privacy Shield certification can be viewed at https://www.privacyshield.gov/list. With the procedure described under point 8, you can prevent the storage of cookies by setting your browser software accordingly (possibly limited to third-party cookies). Alternatively, you can click here to set an opt-out cookie, which is stored on your device and also prevents the collection of your data by Google Analytics. However, if you delete your stored cookies, you will need to take this step again. However, we would like to point out that you may then not be able to use all functions of the website to their full extent. However, Google Analytics collects certain user interaction data even without cookies and transmits it to a Google server in the USA. You can prevent the collection of data relating to your use of the website (including your IP address) and its processing by Google by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de. Further information on data protection in connection with Google Analytics and your options in this regard can be found at https://www.google.at/intl/de_ALL/analytics/learn/privacy.html.
10. right to lodge a complaintIf you are of the opinion that we are violating applicable data protection law when processing your data, you have the right to lodge a complaint with the Austrian Data Protection Authority. The requirements for such a complaint are based on § 24ff DSG. However, we would ask you to contact us beforehand so that we can clarify any questions or problems. The contact details of the data protection authority are as follows Austrian Data Protection Authority Wickenburggasse 8 1080 Vienna Austria Phone: +43 1 52 152-0 Email: dsb@dsb.gv.at
 

11. contact
for data protection questions, notifications, requests For data protection questions, notifications or requests, please use the following contact address:

Mag. Madeleine Dumhart
Altenbergerstraße 189
4203 Altenberg near Linz
Austria
Phone: +43 732 776 348
Email: akademie @ sunofspring.at