Information on data processing within the meaning of EU Directive No. 679/2016

Vewa GmbH provides information on the type, scope and purpose of its data processing in accordance with EU Directive No. 679/2016 (hereinafter referred to as GDPR), and with reference to the personal and sensitive data that will come to its knowledge.

1. Person responsible for data processing:

The data controller is Vewa GmbH, in the person of the legal representative Damain Kerschbaumer, with registered office at Brennerstraße 21, 39042 Brixen, contact details +39 331 400 8130.

The person responsible for data processing is Damian Kerschbaumer and can be contacted by registered letter to Brennerstraße 21, 39042 Brixen or by e-mail to info@vewa.it.

2. Types of data processed and data subjects:

We process the personal data of customers and suppliers, as well as data of persons who voluntarily provide our company with their personal details (in person, by telephone, fax or e-mail), as well as by registering on our website, and of persons whose data has been taken over by third parties, for example when collecting external data for business information, public directories, etc., whereby in the latter case it is also exclusively simple personal data.

3. purpose of data processing :

Data processing is carried out exclusively for the following purposes:

a. Fulfillment of the obligations provided for by applicable regulations and laws, including tax and accounting obligations

b. Fulfillment of contractual obligations towards the data subjects

c. Performing activities related to the business activities of our company, such as compiling internal statistics, accounting, keeping customer and supplier accounts

d. Preparation of an offer

e. Sending newsletters

f. Creation of internal statistics

4. Legal basis for data processing:

Data processing is carried out in compliance with the legal requirements and is based on the following legal bases in accordance with Art. 6 and 7 GDPR: The data processing is carried out to fulfill the agreed services, to carry out contractual measures and to respond to inquiries, to fulfill legal obligations and to safeguard legitimate interests, as well as on the basis of the consent of the data subjects.

5. Modality of data processing:

Data processing may be carried out with or without the aid of electronic, in any case automated, means and includes the collection, storage, organization, retention, retrieval, processing in the narrower sense, modification, selection, selection, comparison, use, linking, blocking, transmission, deletion and storage of data.

Data processing is carried out both by the data controller and by processors and third parties whom the data controller has commissioned to process the data in order to fulfill the purposes provided for in point 3 or in cases where this is regulated by law. The data controller has ensured that processors and third parties also process personal data in accordance with the GDPR.

If necessary, the data will be passed on to domestic and/or foreign natural and/or legal persons, insofar as this serves to carry out the activities and purposes provided for under point 3. However, there is no general dissemination of personal data.

Specifically, data processing is carried out using the following modalities:

a. User account:

Personal data is collected during registration and processed for the provision of a user account. As part of the registration and login function, the IP address and the time of the respective user action are also stored.

This data will be deleted immediately after termination of the user account, unless storage is necessary for tax or accounting purposes.

b. Making contact:

When contacting the company using the contact form, email or social media, the user's details are processed to handle the contact request and process it. The information may be stored in a customer relationship management system or a comparable inquiry organization.

The requests will be deleted as soon as they are no longer required, unless the retention of the data serves to fulfill legal obligations.

c. Newsletter:

It is possible to subscribe to a newsletter on this website. By subscribing to the newsletter, the data subject agrees to receive emails and other electronic notifications containing promotional information. Subscription to the newsletter takes place by submitting a request and agreeing to the privacy policy or by registering via the newsletter field. The time of registration and confirmation are saved, as well as the IP address and the necessary personal registration data. Cancellation or revocation of the newsletter can be done by contacting Vewa GmbH by e-mail. From this point in time, the relevant personal data will be deleted, unless their retention is necessary to fulfill legal obligations.

d. Google Tag Manager:

Google Tag Manager is a solution with which so-called website tags can be managed via an interface in order to be able to integrate Google marketing services into the online offer and which is used on this website. The Tag Manager itself does not process any personal data; for more detailed information, please refer to the Google services usage guidelines: https://www.google.com/intl/de/tagmanager/use-policy.html

e. Google Analytics:

This website uses analysis tools from Google Inc. for marketing and optimization purposes. Data is collected and stored in anonymized form. Google Analytics uses cookies, which are text files placed on your computer, to help the website analyze how users use the site. This data is transferred to a Google server in the USA and stored there. The IP address transmitted by the data subject's browser as part of Google Analytics is not merged with other Google data. In addition, the "anonymizeIP" function is used in the code, which guarantees that the IP address is masked so that all data is collected anonymously. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and truncated there. The data collected is not used to personally identify the visitor to this website; the individual user remains anonymous and no data is passed on to third parties. Google uses this information to compile various reports on website activity on behalf of the website operator.

In this context, data subjects are informed of the option to object by installing the browser plugin for deactivating Google Analytics at https://tools.google.com/dlpage/gaoptout?hl=de.

f. Google Adwords and conversion measurement:

This website also uses the services of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google is certified under the Privacy Shield Agreement and guarantees to comply with European data protection law. This website uses the online marketing process Google Adwords to place ads in the Google advertising network so that they are displayed to users who are presumed to be interested in the ads. This makes it possible to display ads for and within the online offering of this website in a more targeted manner in order to present users only with ads that potentially match their interests. For this purpose, when websites on which the Google advertising network is active are accessed, a code is executed directly by Google and so-called marketing tags are integrated into the website, with the help of which an individual cookie, i.e. a small file, is stored on the user's device. This file records which websites the user visits, what content they are interested in, as well as technical information about the browser and operating system and the time of the visit. In addition, Google uses conversion cookies to compile statistics to determine the total number of users who have viewed the ad. However, the users themselves cannot be personally identified; Google only processes cookie-related data within anonymized user profiles, unless a user expressly allows Google to process the data without anonymization. Further information on this can be found in Google's privacy policy (https://policies.google.com/technologies/ads).

g. Twitter:

A Twitter widget is integrated into the customer administration of the website to display tweets from the company's Twitter account. This establishes a connection with Twitter and log data is transmitted to Twitter and a cookie is set on the computer of the data subject. Twitter begins deleting, de-identifying or collecting this data after a maximum of ten days. Further information on this can be found in the Twitter privacy policy (https://twitter.com/de/pivacy).

h. Facebook:

Plugins of the social network Facebook, 1601 South California Avenue, Palo Alto, CA 94304, USA are integrated on this website. The Facebook plugins can be recognized by the Facebook logo or the "Like" button. This plugin establishes a direct connection between the data subject's browser and the Facebook server. Facebook receives the information that the data subject has visited this website and it is possible to link the content of this website to your Facebook profile using the "Like" button. Further information on this can be found in Facebook's privacy policy (https://de-de.facebook.com/policy.php).

i. Instagram:

Social plugins from Instagram LLC, 1601 Willow Road, Menlo Park, CA 94025 USA are used on this website. These plugins are marked with an Instagram logo. These plugins establish a direct connection between the data subject's browser and the Instagram server, which is located in the USA, and Instagram receives the information that the data subject has accessed the corresponding page. If the data subject is logged in to Instagram, Instagram can assign the corresponding data directly to the respective account. Further information regarding the purpose and scope of data collection by Instagram, as well as the further processing of the data, can be found in Instagram's privacy policy (https://help.instagram.com/519522125107875?helpref=page_content).

j. Social media presence:

Vewa GmbH maintains online presences within social networks and platforms in order to be able to communicate with customers, interested parties and users active there and to inform them about its own services. When accessing the respective networks, the data protection guidelines of the respective operators apply.

k. Forwarding of data to domain registrars:

For the registration of the respective domains of the data subjects, their data must be forwarded to the respective national and international registries of the domains. Only the absolutely necessary personal data is transferred. The data transmitted to the registrars can be queried and viewed by Internet users. The registries prohibit commercial and improper use.

l. Forwarding of data to certificate issuers:

Personal data is transmitted to the certificate issuer for the issue of an SSL certificate. Only the absolutely necessary data is transmitted. The data subject consents to this data being automatically transmitted to the certificate issuer when the certificate is created.

m. Business analyses and market research:

In order to identify market trends and the wishes of contractual partners and users, the available data on business transactions, inquiries, contracts, etc. are analyzed. This involves processing inventory data, communication data, contract data, payment data, usage data and metadata from contractual partners, interested parties, customers and visitors to the online offering. The analyses serve to increase user-friendliness, optimize the offering and improve business efficiency and are not disclosed externally.

n. Cookies:

When you visit this website, session cookies are generated which are only valid during your visit to the website. It is not possible to evaluate these cookies across domains, as advertising networks do, and the cookies are not used to evaluate user behavior.

6. Disclosure of data and refusal to disclose:

The disclosure of personal data is indispensable for the fulfillment of the purposes provided for in point 3, and the possible refusal of the data subjects to disclose the data means that the purposes provided for in point 3 cannot be fulfilled.

7. Storage of the data:

Unless expressly stated otherwise in this privacy policy, the processed data will be deleted as soon as it is no longer required for the purposes set out in point 3 and there are no longer any legal obligations to retain it. In general, personal data will not be stored for longer than two years.

If deletion is not possible for legal reasons, data processing will be restricted, i.e. the data will be blocked and not used for other purposes.

8. Rights of the data subject:

The GDPR allows the data subject to exercise specific rights:

a. Right of access by the controller to the personal data concerned, as well as to rectification or erasure or restriction of processing, and a right to object to processing;

b. Right to receive their own data from the data controller in a structured and intelligible format, including, where possible, for the purpose of data portability to another data controller;

c. Right to withdraw consent to data processing at any time, provided that the lawfulness of processing is based on the data subject's consent and without affecting the lawfulness of processing based on consent before its withdrawal;

d. Right to lodge a complaint with the supervisory authority for data processing.

The rights provided for may be exercised by sending a written communication by certified e-mail to the address vewa@pec.rolmail.net or by registered letter A.R. to the address Brennerstrasse 21, 39042 Bressanone/Brixen.

‍