NL Galerie GmbH takes data protection seriously and always strives to collect and use all personal data in accordance with the applicable data protection law.

This data protection declaration clarifies the type, scope and purpose of the  processing

of personal data  within our  Homepages, web shop, newsletter, advertising & marketing  and others  external  Social media presences  in relation to

processing”, responsible person  (Article 4 of the General Data Protection Regulation  -  GDPR ).  

Responsible for data protection

NL Galerie GmbH, Griesgasse 10, 5020 Salzburg

www.nl-galerie.com
office@nl-galerie.com

I. General

The protection of your personal data is very important to NL Galerie GmbH.  We therefore process your personal data exclusively on the basis of the statutory provisions. Personal data is data that relates to an identified or identifiable person concerned, such as name, date of birth, address, telephone number, etc.. In this data protection information we inform you about the most important aspects of our data processing. We only process your data for the purpose of contract fulfilment/contract initiation and contract processing or if you have given us your express consent to do so or if there is a legitimate interest and your interests do not oppose it (e.g. IT security, customer loyalty, maintenance of the website) or if we are entitled to do so by law.

We process the personal data that is necessary for the individual purpose.  
 

Master data: | Contact person, company, address, contact details (such as telephone number, e-mail address, homepage, target group specifics 

Information about the nature and content of the contractual relationship,  Customer number, purchasing behavior

Payment data: bank details, payment terms,  Delivery data, receipt data

other personal data: such as IDs or passwords, date of birth, interests,  Photos,

Correspondence, contracts, applications, 

Cookies, access data, Google Analytics, social plug-ins

There is no obligation to actually provide the data that we ask you to provide. However, if you do not do this, you may not be able to use all the functions of our website or our services. 

We store your data until the end of the business relationship, beyond that only as long as there are statutory retention periods (corporate and/or tax retention obligations of currently 7 years) or as long as legal claims from the contractual relationship can be asserted against us or by us. This can be for a period of 30 years for reasons of compensation law.

If we transmit your data to third parties for further processing, there are order processing contracts for this. Your personal data will only be processed within the EU/EEA. Your personal data will only be used internally and not  sold to third parties.

The NL Galerie GmbH manages its data in the company's internal data depot.

Our credo:  Data Security | Transparency | Discretion.
 

II. Purposes of processing

2.1. NL Galerie GmbH newsletter, advertising and information mails

Through our  We will inform you regularly by e-mail of newsletters and info-mails. This only happens on the basis of your express  consent  (The legal basis for the processing is Article 6 Paragraph (1) lit a GDPR).

Your e-mail address and  processed your IP address. 

We work with you to optimize our online offer   tracking pixels. A tracking pixel is a miniature graphic that is embedded in e-mails that are sent in HTML format to enable log file recording and log file analysis. This allows a statistical evaluation of the success or failure of online marketing campaigns to be carried out. Based on the embedded tracking pixel, we can see if and when an e-mail was opened by a data subject, and which links in the e-mail were called up by data subjects. Such personal data collected via the tracking pixels contained in the newsletters and advertising or info mails are stored and evaluated in order to optimize the newsletter dispatch and advertising or info mail dispatch and to adapt the content of future newsletters even better to the interests of the customers. This processing takes place on the basis of legitimate interest in accordance with Art 6 Para 1 lit f GDPR (improvement and more attractive service offers).

You can revoke your consent to receive the newsletter and the advertising or information mail at any time by sending a short written message to our contact details. In this case, it is unfortunately not possible for us to continue to provide you with newsletters and advertising or information mails. Your data will be deleted if you withdraw your consent. Only the data that is absolutely necessary due to the applicable legal provisions or storage obligations will be stored for the purpose of proving your consent or your revocation.

2.2. NL Galerie GmbH online depot

We process the personal data you provide in the course of your purchase in our online depot (web shop) (e.g. your master data such as name, address, contact details and your payment data such as bank details or credit card details, etc.). Some of this data (name, address, bank details or credit card details, number and type of goods purchased,  Password) is required to fulfill the contract (purchase contract, management contract, cooperation contract, marketing and PR contract) or to carry out pre-contractual measures. Without this data, we cannot conclude contracts with you or provide our services. 

Correspondence conducted with you and contracts concluded are also processed for contract processing. Data collected beyond this is voluntary and is used to optimize our range of services and for statistical purposes or to optimize our website and product portfolio. This data processing takes place on the basis of Art 6 Para 1 lit b GDPR (contract fulfilment/contract initiation) with regard to the data necessary for the fulfillment of the contract, otherwise on the basis of our legitimate interest in optimizing our website and our product portfolio (Art 6 Para 1 lit f GDPR). 

After canceling the shopping process, the data stored by us will be deleted. If a contract is concluded, we store your data until the end of the business relationship, beyond that only as long as there are legal retention periods or as long as legal claims from the contractual relationship can be asserted against us or by us. This can be for a period of 30 years for reasons of compensation law.  

2.3. NL Galerie GmbH Contract processing | customer relationship | delivery service

When you make purchases from us or enter into contracts with us   conclude, we need your for the contract processing  personal data  (Invoice, contract, conclusion) that we  process to fulfill the contract.

We process the personal data you provide (master data, payment data, other personal data, correspondence) for the purpose of your purchase or for the purpose of fulfilling our contractual obligations to you.

The legal basis for the processing of your data is Article 6 Paragraph (1) lit b GDPR (performance of contract).

Your data will be stored until we have fulfilled our obligation. In addition, as long as there are statutory retention periods (corporate and/or tax retention obligations of currently 7 years) or as long as legal claims from the contractual relationship can be asserted against us or by us. At the longest, however, data will be stored for a period of 30 years if they are required to assert or defend against claims for damages.

We offer our customers one  worldwide shipping delivery service by 

“DHL – EXPRESS” on and  transport your purchased goods  comfortably home. We process the data required for this service (name, address, telephone number, email address and a contact person).

The legal basis for the processing of your data is Article 6 Paragraph (1) lit b GDPR (performance of contract).

Your data will be stored until we have fulfilled our obligation. In addition, as long as there are statutory retention periods (corporate and/or tax retention obligations of currently 7 years) or as long as legal claims from the contractual relationship can be asserted against us or by us. At the longest, however, data will be stored for a period of 30 years if they are required to assert or defend against claims for damages.

2.4. NL Galerie GmbH business relationship | supplier or business partner

If you have a business relationship with us as a supplier or other business partner, give us yours  personal data  known to process a business case.  We process the personal data you provide (in particular your master data such as company, contact details including e-mail and telephone, contact person, your bank details, etc.) for the purpose of contract processing.

We also process the other documents created in the course of the business transaction and personal data disclosed (such as in particular the number and type of goods purchased, payment amount, receipt data, delivery date, contracts, data on goods inspection, correspondence, etc.). 

The legal basis for the processing of your personal data is Article 6 Paragraph (1) lit b GDPR (performance of a contract). Your personal data will be kept for as long as there are statutory retention periods (company and/or tax law retention requirements of currently 7 years) or as long as legal claims from the contractual relationship can be asserted against us or by us. 

At the longest, however, data will be stored for a period of 30 years if they are required to assert or defend against claims for damages.

2.5. business relationship | general contact with NL Galerie GmbH

If you contact us, we will process the personal data you have provided us with for the respective purpose, in any case your name, address, contact details and correspondence. 
Depending on the request for the necessary contract fulfilment/contract initiation within the meaning of Art 6 Para 1 lit b GDPR, data processing takes place on the basis of legitimate interests within the meaning of Art 6 Para 1 lit f GDPR or due to a legal obligation within the meaning of Art 6 Para 1 lit c GDPR.

The data will be stored until the end of the business transaction and beyond as long as statutory retention periods exist or as long as legal claims from the business transaction can be asserted against us or by us, stored for a maximum of 30 years.
 

2.6. NL Galerie GmbH for marketing purposes

We also use your data as part of the  legal provisions for our own marketing purposes.  Your individual needs are important to us  and we only try to be relevant to you  information  to transmit.   For this we use findings from our business relationship (including our in-house database) and the internal  data analysis. We therefore analyze and process data from the business relationship with customers to select target groups for marketing activities

evaluate ours  Marketing activities to measure and evaluate the efficiency and relevance of our advertising measures. Information that we collect when you visit the website in order to further improve and develop the content of the website, our product portfolio and to inform you about the products that are of interest to you. Your data will be anonymized for processing for marketing purposes. For marketing purposes we process: name, address, head office/branch, subject of the service, interest in demand, purchase classification, historical marketing data.  Your data is collected to analyze purchasing behavior in order to ideally present you with advertising content that is of interest to you and to improve our product range. Your anonymized data is processed on the basis of our legitimate interest (Art 6 Para 1 lit f GDPR) in presenting you with interesting products and improving our product portfolio. Under no circumstances will the data processing have legal effects for you or affect you in any other similar way.  You can object to the analysis or use of your personal data for the stated purposes at any time. 

We do not store your data longer than we need it for the processing purposes mentioned above, at least when you unsubscribe from the newsletter and  of the e-mails, we delete this data.  
 

2.7. image rights 

By registering for our events, you consent to being part of photo and video recordings. These are used exclusively in the context of reporting and to advertise the events of NL Galerie GmbH  used. Excluded from this are images or videos that depict you in a discriminatory manner.

III. transfer of the data

The security of your data is important for us.  Within our company, those persons/offices who need the data for operational or organizational reasons or to fulfill our contractual and legal obligations have access to your data.

For legal obligations or for operational reasons  If you are interested, it may be necessary for your data to be forwarded to external bodies. These include public bodies and authorities, courts, lawyers, tax consultants,  Auditors,  Logistics companies, freight forwarders, media companies, printers, trade fair organizers, sales and marketing  

If we share your information with the service providers  Order processing contracts concluded. Your personal data will only be processed within the EU/EEA. No sale of yours  personal data to third parties.

IV. Cookies, access data, Google Analytics

4.1.  Basic information on the use of cookies

Our website uses cookies. These are small text files that do no harm and  stored on your end device with the help of the browser. 

We use cookies to optimize our offer. Within the framework of cookies, the IP data of the connection owner is stored, as well as name, address, account, number and type of goods purchased, price, date of purchase, e-mail address, password, telephone number. The data is processed on the basis of our legitimate interest (online service offer - Art 6 Para 1 lit f GDPR). 

They enable us to recognize your browser on your next visit. If you do not want this, you can set up your browser so that it informs you about the setting of cookies and you only allow this in individual cases. If cookies are deactivated, the functionality of our website may be restricted.

Which cookies are saved?

A brief overview of which cookies are stored.

ga cookie: To distinguish users, expires every two years

gat cookie: To throttle request rate, expires every 10 min

Session Cookies: Websites have no memory of their own. Session cookies allow your movements to be tracked across the individual pages, so that you have to re-enter information that you have already entered (shopping cart). We use session cookies to ensure that we recognize you as you move from one page to the next and that any data you enter during your visit is cached. The data is stored for 3 months.

The cookies remain stored on your end device until you delete them.  

4.2.  Processing of access data

In order to optimize our offer for you, we store the following data: 

Browser type/version

operating system used

Referrer URL (last visited page)

Host name of the accessing computer (IP address)

Time of server request

transaction data

segmentation

This data is statistically evaluated (increase in user-friendliness, error minimization, server optimization). 

The legal basis for the processing of the access data is the legitimate interest (online service offering and data security; Art 6 Para 1 lit f GDPR). The data is stored for a maximum of 3 months.  

4.3.  Use of Google Analytics

We use Google Analytics, a web analytics service  Google Inc. based in Mountain View in Santa Clara County (California, USA)  (“Google”). Google uses cookies. The information generated by the cookie about the use of the online offer by the user is usually transmitted to a Google server in the USA and stored there. Google will use this information on our behalf to evaluate the use of our online offer by users, to compile reports on the activities within this online offer and to provide us with other services related to the use of this online offer and internet usage. Pseudonymous user profiles can be created from the processed data. We only use Google Analytics with activated IP anonymization. This means that the IP address of the user is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the USA and shortened there. The IP address transmitted by the user's browser is not merged with other Google data.

Users can prevent the storage of cookies by setting their browser software accordingly; In addition, users can prevent the data generated by the cookie and related to their use of the online offering being collected by Google and the processing of this data by Google by downloading and installing the browser plug-in available under the following link:  http://tools.google.com/dlpage/gaoptout?hl=de .

You can find out more information about the use of data for advertising purposes by Google, setting and objection options on the Google websites:  https://www.google.com/intl/de/policies/privacy/partners/  ("Use of data by Google when you use our partners' websites or apps"),  http://www.google.com/policies/technologies/ads  ("Use of data for advertising purposes"),  http://www.google.de/settings/ads  ("Manage information that Google uses to show you advertising") and  http://www.google.com/ads/preferences/  (“Control what ads Google shows you”).

The legal basis for the use of Google Analytics is Art. 6 ABs. 1 lit f GDPR the legitimate interest (improvement of online services).

V  Social Plugins

Our website uses the following social plugins:

facebook.com, Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook" for short),

youtube.com, YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA (“Youtube” for short)

instagram.com, Instagram LLC., 1601 Willow Rd, Menlo Park CA 94025, USA (“Instagram” for short)

The plugins are marked with a Facebook, Youtube and Instagram logo. If you access a website on our website that contains such a plugin, your browser establishes a direct connection to the Facebook, YouTube or Instagram servers. The content of the plugin is transmitted directly to your browser from Facebook, Youtube or Instagram and integrated into the website by it. By integrating the plugins, Facebook, YouTube or Instagram receives the information that you have accessed the corresponding page of our website. If you are logged into Facebook, YouTube or Instagram, they can assign the visit to your respective account. If you interact with the plugins, the corresponding information is transmitted directly from your browser to Facebook, Youtube or Instagram and stored there. The purpose and scope of the data collection and the further processing and use of the data by Facebook, YouTube or Instagram as well as your rights in this regard and setting options for protecting your privacy can be found in the data protection information of the respective operator. If you do not want Facebook, YouTube or Instagram to collect data about you via our website, you must log out of them before you visit our website.

VI. Your rights

Compliance with data protection regulations is very important to us. Insofar as the legal requirements are met, you have the right:

to obtain information about whether and which personal data we have stored about you, to request us to correct and supplement your personal data that is incorrect or not processed in accordance with the law, to request that we delete the personal data relating to you, to request that we delete it to restrict the processing of your personal data  to object to data processing based on Art. 6 Para. 1 lit e or f) GDPR for reasons arising from your particular situation  to revoke the consent previously given for processing to request data portability to know the identity of third parties to whom your personal data is transmitted to lodge a complaint with the competent authority (Austrian Data Protection Authority, Hohenstaufengasse 3, 1010 Vienna).

​

To enforce your rights, please contact our address below.

We are also happy to answer any questions you may have personally regarding the protection of your data.

​

​