Privacy Policy

Valid from December 16, 2022

In accordance with our legal obligations, we inform you about the processing of personal data in connection with the use of our website. However, these notes have no regulatory character, but only serve to provide you with information, also to ensure fair and transparent data processing. We reserve the right to change this data protection declaration. The current version of the data protection declaration can be accessed at any time at https://i-am-liza.com/privacy. You can save or print out the data protection declaration at any time via your browser.

I. Data protection at a glance

The following notes give you a simple overview of what happens to your personal data when you visit this website. Personal data is all data with which you can be personally identified. You can find detailed information on the subject of data protection in our data protection declaration below this text.

1. Who is responsible for data collection on this website?
The data processing on this website is carried out by the website operator. You can find the contact details in the section Name, contact details and representative of the person responsible.

2. How is your data collected?
On the one hand, your data is collected when you communicate it to us. This can, for example, be data that you enter during an ordering process. Other data is collected automatically or with your consent by our IT systems when you visit the website. This is primarily technical data (e.g. internet browser, operating system or time of the page view). This data is collected automatically as soon as you access this website.

3. What do we use your data for?
Part of the data is collected in order to ensure that the website is provided as error-free as possible. Other data can be used to analyze your user behavior.

4. What rights do you have regarding your data?
You have the right at any time to receive information about the origin, recipient and purpose of your stored personal data free of charge. You also have the right to request the correction or deletion of this data. If you have given your consent to data processing, you can revoke this consent at any time for the future. You also have the right, under certain circumstances, to request that the processing of your personal data be restricted. You also have the right to lodge a complaint with the competent supervisory authority.

You can contact us at any time if you have any further questions on the subject of data protection.

5. Analysis Tools and Third-Party Tools
When you visit this website, your surfing and user behavior can be statistically evaluated. This is done primarily with so-called analysis programs and other tools – including those provided by third parties.

You can find detailed information on this in this data protection declaration.

6. How long do we store your data?
Unless a more specific storage period is specified in this data protection declaration, your personal data will only remain with us until the specific purpose for data processing no longer applies.

II. General

1. Definitions
We refer to the legal definitions in Art. 4 GDPR.

2. Name, contact details and representative of the person responsible
ruwido austria GmbH, represented by the managing director Ferdinand Maier, Köstendorfer Str. 8, 5202 Neumarkt am Wallersee, Austria, hi@i-am-liza.com

3. Purposes for which the personal data is processed and the legal basis for the processing
We at ruwido austria GmbH respect data protection. Data processing by us therefore only takes place on the basis of legal permission. We only process personal data with your consent in accordance with Article 6 Paragraph 1 Letter a GDPR, to fulfill a contract to which you are a party, or at your request to carry out pre-contractual measures in accordance with Article 6 Paragraph 1 Letter b GDPR, to fulfill a legal obligation pursuant to Article 6 (1) (c) GDPR or if processing is necessary to protect our legitimate interests or the legitimate interests of a third party, unless your interests or fundamental rights and freedoms, which require the protection of personal data, within the meaning of Art. 6 Para. 1 lit. f GDPR prevail.

4. Note on data transfer to the United States of America (USA) and other third countries
Our website contains, among other things, functions (so-called tools) with data transmission to the USA or other third countries in which the GDPR is not applicable law. These functions are not activated when you visit this website for the first time. If these tools are activated, your personal data can be transferred to these third countries and processed there. Activation of these tools can be reversed while visiting the website. However, we expressly point out that in these countries no level of data protection comparable to that of the European Union (EU) can be guaranteed. For example, US companies may be or will be required to release personal data to security authorities without the data subject being informed or being able to take legal action. It can therefore not be ruled out that US authorities (e.g. secret services) will process, evaluate and permanently store your data on US servers for monitoring purposes. We have no influence on these processing activities.

5. Duration of storage of personal data
Unless a specific storage period is specified in this data protection declaration, your personal data will remain with us until the purpose for data processing no longer applies. If you submit a legitimate request for deletion or revoke your consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data (e.g. tax or commercial retention periods). In the latter case, the data will be deleted after these reasons no longer apply.

6. Rights Regarding Personal Data

1. You have the right at any time to obtain information about your stored personal data from the person responsible free of charge.
2. You also have the right to request the person responsible to correct, delete or restrict the processing of this data.
3. You have the right to object to the person responsible for data processing and, under certain conditions, also the right to data portability.
4. If you have given your consent to data processing, you can revoke this consent from the person responsible at any time for the future without affecting the legality of the processing carried out on the basis of the consent up to the revocation.
5. You also have the right to lodge a complaint with the competent supervisory authority. The supervisory authority responsible for us is the Austrian Data Protection Authority, Barichgasse 40-42, 1030 Vienna, +43 1 52152-0, dsb@dsb.gv.at.

7. Right to object to data collection in special cases and to direct advertising (Art. 21 GDPR)
IF THE DATA PROCESSING IS BASED ON ART. 6 ABS. 1 LIT. E OR F GDPR, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE RESPECTIVE LEGAL BASIS ON WHICH A PROCESSING IS BASED CAN BE TAKEN FROM THIS DATA PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR CONCERNED PERSONAL DATA UNLESS WE CAN PROVE COMPREHENSIVE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOM OBJECTION ACCORDING TO ARTICLE 21 (1) GDPR).

IF YOUR PERSONAL DATA IS PROCESSED FOR DIRECT ADVERTISING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR THE PURPOSES OF SUCH ADVERTISING; THIS ALSO APPLIES TO PROFILING TO THE EXTENT RELATED TO SUCH DIRECT ADVERTISING. IF YOU OBJECT, YOUR PERSONAL DATA WILL NO LONGER BE USED FOR DIRECT ADVERTISING PURPOSES (OBJECTION ACCORDING TO ART. 21 (2) GDPR).

III. Use of our website

1. Data collection on this website

1. Cookies
   Our website uses so-called "cookies". Cookies are small text files and do not cause any damage to your end device. They are stored on your end device either temporarily for the duration of a session (session cookies) or permanently (permanent cookies). Session cookies are automatically deleted after your visit. Permanent cookies remain stored on your end device until you delete them yourself or until your web browser automatically deletes them. In some cases, cookies from third-party companies can also be stored on your end device when you enter our site (third-party cookies). These enable us or you to use certain services of the third-party company (e.g. cookies for processing payment services). Cookies have different functions. Numerous cookies are technically necessary because certain website functions would not work without them (e.g. the shopping cart function or the display of videos). Other cookies are used to evaluate user behavior or to display advertising. Cookies that are required to carry out the electronic communication process (necessary cookies) or to provide certain functions you want (functional cookies, e.g. for the shopping cart function) or to optimize the website (e.g. cookies for measuring the web audience) are set on the basis of Article 6 paragraph 1 lit. f GDPR, unless another legal basis is given. We have a legitimate interest in the storage of cookies for the technically error-free and optimized provision of our services. If consent to the storage of cookies was requested, the relevant cookies are stored exclusively on the basis of this consent (Article 6 (1) (a) GDPR); the consent can be revoked at any time. You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when the browser is closed. If cookies are deactivated, the functionality of this website may be restricted. If cookies are used by third-party companies or for analysis purposes, we will inform you of this separately in this data protection declaration and, if necessary, ask for your consent.
   
   You can check the cookies we use at any time and adjust or change your settings. The cookies used for our website www.i-am-liza.com and its subpages are listed at https://i-am-liza.com/privacy#c3149. You can find the cookies used for our online store shop.i-am-liza.com and its subpages at https://shop.i-am-liza.com by clicking on “Cookies” in the footer and selecting "Individual Data Privacy Settings" in the cookie banner that then appears.
    
2. Server log files
   The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are browser type and browser version, operating system used, referrer URL, host name of the accessing computer, time of server request, IP address.
   
   This data is not merged with other data sources. This data is collected on the basis of Article 6 (1) (f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimization of his website - the server log files must be recorded for this purpose.

2. Consent Management System
In order to make our efforts to protect your data as transparent and understandable as possible for you, we use a so-called consent management system.

3. Provision of personal data and consequences of non-provision
For the purely informational use of our website, it is neither legally nor contractually required to actively provide personal data.

You are therefore not obliged to actively provide personal data.

However, during an ordering process, the provision of personal data is required for the conclusion of a contract. Necessary mandatory information is specially marked, the provision of further data is voluntary. Failure to provide necessary data can result in you not being able to use the website or not being able to use the full range of functions. This does not refer to so-called analysis tools (such as Google Analytics). If you do not want to use analysis tools, you will not suffer any disadvantages. You can find more information on this in this data protection declaration.

4. Third Party Services
We use the services of various third parties.

1. For the ordering function on our website, we use the shop system of the provider Shopify Inc., 151 O'Connor Street, Ground Floor, Ottawa, ON K2P 2L8, Canada (hereinafter also "Shopify"), a Canadian provider. The European Union (EU) has passed an adequacy decision for data transfers to Canada. There is an order processing contract between us and Shopify, according to which Shopify may not use the data for non-contractual purposes, in particular for its own purposes. When receiving a payment, we process the data that the payment service provider transmits to us. Orders are processed using Shopify services on the basis of Article 6 (1) (b) GDPR. In addition, we have a legitimate interest i. s.d. Art. 6 Para. 1 lit. f.) GDPR to offer our customers the use of suitable and secure payment options. We store order data until all mutual claims from the respective contractual relationship with you have been fulfilled and the commercial and tax retention periods applicable to us have expired.
    
2. For the ordering function, we use the services of payment service providers that process payments for your purchases. When paying, the payment service provider collects and processes personal data that is required for the payment method you have chosen. In this respect, the data protection regulations of the payment service provider you have selected also apply. When receiving a payment, we process the data that the payment service provider transmits to us. Payments are processed via service providers on the basis of Article 6 (1) (b) GDPR. In addition, we have a legitimate interest i. s.d. Art. 6 Para. 1 lit. f.) GDPR to offer our customers the use of suitable and secure payment options. We store payment data until all mutual claims from the respective contractual relationship with you have been fulfilled and the commercial and tax retention periods applicable to us have expired. There is an order processing contract between us and the individual payment service providers, according to which they may not use the data for non-contractual purposes, in particular for their own purposes.
   
   1. Shop Pay
   2. Apple Pay
   3. PayPal
   4. Google Pay
    
3. This website uses web fonts from Adobe for the uniform display of certain fonts. The provider is Adobe Systems Incorporated, 345 Park Avenue, San Jose, CA 95110-2704, USA (Adobe).
   
   All required fonts are provided by Adobe.
   
   You can find more information about Adobe Fonts at https://www.adobe.com/privacy/policies/adobe-fonts.html.
   
   You can find Adobe's privacy policy at https://www.adobe.com/privacy/policy.html.

5. Hosting
This website is hosted by an external service provider (hoster). The personal data collected on this website is stored on the host's servers. This can be v. a. IP addresses, contact requests, meta and communication data, contract data, contact details, names, website access and other data generated via a website. The hoster is used for the purpose of fulfilling the contract with our potential and existing customers (Art. 6 Para. 1 lit. b DSGVO) and in the interest of a secure, fast and efficient provision of our offer by a professional provider (Art. 6 Para. 1 lit. f GDPR). Our hoster will only process your data to the extent that this is necessary to fulfill its performance obligations and will follow our instructions in relation to this data.

We use the following hoster:
Host Europe GmbH
Hansestr. 111
51149 Cologne
Germany

In order to ensure data protection-compliant processing, we have concluded an order processing contract with our hoster.

6. Analysis Tools
We use analytics tools to improve app performance and user experience and to send you more relevant messages. If you do not turn app analytics on or turn it off again, certain diagnostic usage and crash data associated with your use of the app will not be shared with us. Some changes may not take effect until your device is restarted.

1. Google Analytics
2. Google Crashlytics

The processing of personal data described here takes place with your consent. The legal basis for data processing is therefore Art. 6 Para. 1 Letter a GDPR. You can revoke this consent at any time with effect for the future.

7. Social Media
We maintain publicly accessible profiles on social networks.

1. General
   Social networks such as Facebook, Twitter, etc. can usually analyze your user behavior comprehensively when you visit their website or a website with integrated social media content (e.g. Like buttons or advertising banners). Visiting our social media presence triggers numerous data protection-related processing operations.

   If you are logged into your social media account and visit our social media presence, the operator of the social media portal can assign this visit to your user account. However, your personal data may also be recorded if you are not logged in or do not have an account with the respective social media portal. In this case, this data is collected, for example, via cookies that are stored on your end device or by recording your IP address.

   With the help of the data collected in this way, the operators of the social media portals can create user profiles in which your preferences and interests are stored. In this way, you can be shown interest-based advertising inside and outside of the respective social media presence. If you have an account with the respective social network, interest-based advertising can be displayed on all devices on which you are logged in or were logged in.

   Please also note that we cannot trace all processing operations on the social media portals and have no influence on them. Depending on the provider, additional processing operations may therefore be carried out by the operators of the social media portals. For details, please refer to the terms of use and data protection regulations of the respective social media portals.

2. Legal basis
   Our social media appearances should ensure the widest possible presence on the Internet. This is a legitimate interest within the meaning of Article 6 (1) (f) GDPR. The analysis processes initiated by the social networks may be based on different legal bases, which must be specified by the operators of the social networks (e.g. consent within the meaning of Art. 6 Para. 1 lit. a GDPR).
    
3. Controller and the assertion of rights
   If you visit one of our social media presences (e.g. Facebook), we are jointly responsible with the operator of the social media platform for the data processing operations triggered during this visit. In principle, you can assert your rights (information, correction, deletion, restriction of processing, data transferability and complaint) both against us and against the operator of the respective social media portal (for example against Facebook).
   
   Please note that despite the joint responsibility with the social media portal operators, we often have almost no influence on the data processing operations of the social media portals. Our options are largely based on the corporate policy of the respective provider.
    
4. Storage duration
   The data collected directly by us via the social media presence will be deleted from our systems as soon as you ask us to delete it, revoke your consent to storage or the purpose for data storage no longer applies. Saved cookies remain on your end device until you delete them. Mandatory legal provisions - especially retention periods - remain unaffected.
   
   We have no influence on the storage period of your data, which is stored by the operators of the social networks for their own purposes. For details, please contact the operators of the social networks directly (e.g. in their data protection declaration).
    
5. Social networks in detail
   1. Facebook
      We have a profile on Facebook. The provider of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. According to Facebook, the data collected is also transferred to the USA and other third countries.
      
      You can adjust your advertising settings independently in your user account. To do this, click on the following link and log in: https://en-gb.facebook.com/login
      
      Details can be found in Facebook's privacy policy: https://en-gb.facebook.com/about/privacy
       
   2. Instagram
      We have a profile on Instagram. The provider of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. According to Facebook, the data collected is also transferred to the USA and other third countries.
      
      You can adjust your advertising settings independently in your user account. To do this, click on the following link and log in: https://www.instagram.com/login
      
      Details on how they handle your personal data can be found in Instagram's data protection declaration: https://help.instagram.com/519522125107875
       
   3. LinkedIn
      We have a profile on LinkedIn. The provider is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. LinkedIn uses advertising cookies.
      
      You can adjust your advertising settings independently in your user account. To do this, click on the following link and log in: https://www.linkedin.com/login
      
      If you would like to disable LinkedIn advertising cookies, please use the following link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out
      
      Details can be found in LinkedIn's data protection declaration: https://linkedin.com/legal/privacy-policy

8. Contact
If you contact us by e-mail, the data you provide (your e-mail address, possibly your name and telephone number) will be stored by us in order to answer your questions. If the request is assigned to a contract, we delete the data arising in this context after the deadlines for the contract period, otherwise after the storage is no longer necessary, or restrict the processing if there are statutory storage obligations.

When contacting us, data is processed for the purpose of fulfilling the contract with our potential and existing customers (Art. 6 Para. 1 lit. b GDPR).