Schrankerl GmbH (hereinafter "Schrankerl", "we", "us") is aware of the importance of the personal data entrusted to it. It is therefore particularly important to us to ensure the confidentiality and lawful processing of your data when visiting our website and in the context of providing our fresh and healthy food. 

In this privacy policy, you will find information about the data processing carried out by us. We use the terms set forth in the General Data Protection Regulation ("GDPR"). For better comprehensibility, we would like to explain the most important terms according to their legal definition below.

•  Personal data means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

• Processing means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

• Controller means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law.

• Processor means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.

• Consent of the data subject means any freely given, specific, informed and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.

• Personal data breach means a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data transmitted, stored or otherwise processed.

​1. Who is responsible for data processing and whom can I contact?

1. Schrankerl is the responsible person within the meaning of Article 4 (7) GDPR. You can reach us under
   Schrankerl GmbH
   Franz-Josefs-Kai 45, 1010 Vienna
   Phone: +43 664 78 39 618
   E-mail: support@schrankerl.at
   Our contact person for data protection is Sara Mari.

​
2. For what purposes do we process your personal data?

1. Use of the website and contact via the website

   1. Purposes of processing: We operate the website www.schrankerl.at to provide information about our products and services. To make it easier for you to contact us, we provide you with an interactive contact form on the website. Without the processing of the following categories of data, a reliable operation of the website cannot take place.

   2. Data categories: For the aforementioned processing purposes, we process your contact data (first and last name, address, telephone number, e-mail address), IP address and additional personal data that you voluntarily provide us via the input mask for the purpose of contacting you. 

   3. Legal basis: We process the aforementioned personal data on the basis of our legitimate interests (Article 6 (1) (f) GDPR), such as the proper operation of our website and the provision of information about our products and services. 

   4. Storage period: We store the aforementioned personal data for the aforementioned processing purposes for the duration of your visit of our website. We process your data, which is provided to us via the contact form, for the duration of the processing of your request.

2. Using the app to provide our food service 

   1. Purposes of processing: We process your personal data in order to provide you with our fresh and healthy meals and to execute the contract concluded with you in this regard. When you purchase our food via the "FrescoFrigo" app, the following categories of personal data are collected, stored and transmitted to us by FrescoFrigo S.R.L. Without the processing of this personal data, we cannot provide you with our services.

   2. Data categories: For the aforementioned processing purposes, we process your contact data (first and last name, e-mail address, date of birth, gender), your user ID and additional personal data that you also voluntarily provide to us for the aforementioned purposes.

   3. Legal basis: We process the aforementioned personal data for the aforementioned processing purposes on the basis of the performance of a contract (Article 6 (1) (b) GDPR).

   4. Storage period: We process your aforementioned personal data for the abovementioned processing purposes for the duration of the existence of your contract and beyond that in accordance with the respective statutory retention periods (e.g. retention obligation under tax law in accordance with § 132 para. 1 BAO: 7 years, beyond that as long as they are of significance for the tax authority in pending proceedings; retention obligation under company law in accordance with §§ 190, 212 UGB: 7 years; retention obligation under turnover tax law for invoices in accordance with § 11 para. 2 UStG: 7 years).
       

3. Processing of personal data for sending information about our products and services

   1. Purposes of processing: Upon request, we will send you information about our products and services, such as weekly menu suggestions and credit notes, by email. For this purpose, we process your personal data. Without this data we cannot send you this information and services.

   2. Data categories: For the aforementioned processing purposes, we process your first and last name, email address, telephone number and company for which you work.

   3. Legal basis: We process your aforementioned personal data for the above-mentioned processing purposes based on your consent (Article 6 (1) (a) GDPR).

   4. Storage period: We store the aforementioned personal data for the above-mentioned processing purposes until you revoke your consent. You have the option to revoke your consent at any time. This allows you to refuse the future sending of information about our products and services to your specified e-mail address at any time, free of charge and without complications. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.

4. Assortment optimisation and preparation of internal statistics

   1. Purposes of processing: We process your personal data for the purpose of optimising our product range and for compiling internal statistics in order to optimise our services.

   2. Data categories: For the aforementioned processing purposes, we process your contact details (first and last name, email address, date of birth, gender, company), your user ID and your purchase history.

   3. Legal basis: We process your aforementioned personal data for the aforementioned processing purposes on the basis of our legitimate legal interests (Article 6 (1) (f) GDPR) to optimise our product range and to compile internal statistics. 

   4. Storage period: We store your aforementioned personal data for the aforementioned processing purposes for a period of 3 months.

5. Establishment, exercise or defence of legal claims 

   1. Purpose of processing: In the event of a legal dispute, the data required for the appropriate prosecution is transmitted to legal representatives and courts.

   2. Data categories: Contact data (e.g. first and last name, acad. title, address), data related to the litigation in question (e.g. your behavior in relation to the use of the website);

   3. Legal basis: We process the aforementioned personal data for the aforementioned purpose on the basis of legitimate legal interests (Article 6 (1) (f) in connection with Article 9 (2) (f) GDPR) for the purpose of legal prosecution.

   4. Storage period: We store the aforementioned personal data for the purpose of pursuing or defending legal claims for as long as this is necessary for the potential conduct of proceedings or until the expiry of the statutory limitation periods, whereby the statutory limitation period for claims arising from the breach of contracts is three years.

3. To which recipients will your personal data be transferred?

 

1. In the course of our data processing, we transfer your personal data to the following recipients to the extent necessary: service partners, service providers, legal representatives, courts and administrative authorities as well as companies that are commissioned to support our internal IT infrastructure (software, hardware).

​​

4. What rights do you have?

​

1. You have the right of access information under Article 15 GDPR, the right to rectification under Article 16 GDPR, the right to erasure under Article 17 GDPR, the right to restriction of processing under Article 18 GDPR, the right to object under Article 21 GDPR, the right not to be subject to automated decision-making in individual cases, including profiling, and the right to data portability under Article 20 GDPR. In addition, you have the right to lodge a complaint with a competent data protection supervisory authority Article 77 GDPR. You can find more information about your rights at: https://www.dsb.gv.at/rechte-der-betroffenen. ​

2. The competent supervisory authority is the Austrian Data Protection Authority, Barichgasse 40-42, 1030 Vienna (https://www.dsb.gv.at/). 

​5. Embedding of social media plug-ins and similar instrument

1. We use the following social media plug-ins and similar tools as part of the operation of the website. We include elements of social media services on our website to display images, videos and texts. By visiting pages that display these elements, data may be transmitted from your browser to the respective social media service and stored there. We do not have access to this data. A description of the respective service and the personal data processed can be found below.

2. The legal basis for embedding the following services is your consent according to Article 6 (1) (a) GDPR.

3. Storage period: We process your personal data until your valid consent is revoked at any time. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation. You can partially prevent the usage of the following services by setting the internet browser used accordingly and thus permanently prevent such data processing.

4. Google Maps

   1. ​We use Google Maps by the company Google Inc. on our website. For the European area the company Google Ireland Limited (Gordon House, Barrow Street Dublin 4, Ireland) is responsible for all Google services. Google Maps allows us to show you locations better and thus adapt our service to your needs.

   2. Through the usage of Google Maps, data is transmitted to Google and processed on Google servers, including in particular data about the use of the Maps functions by visitors to the website. For more information about data processing by Google, please refer to the privacy policy of Google on https://www.google.at/intl/de/policies/privacy/. There you can also change your settings in the Privacy Center so that you can manage and protect your data.

5. Instagram

   1. Schrankerl has integrated components of the service Instagram on this website. Instagram is a service that qualifies as an audiovisual platform and allows users to share photos and videos and also to redistribute such data in other social networks.

   2. The operating company of the Instagram services is Instagram LLC, 1 Hacker Way, Building 14 First Floor, Menlo Park, CA, USA.

   3. By calling up one of the individual pages of this websit, which is operated by the controller who is responsible for the processing, and which integrates an Instagram component (Insta button), the internet browser on the information technology system of the data subject is automatically caused to download a representation of the corresponding component from Instagram by the respective Instagram component. Within the scope of this technical procedure, Instagram receives notice about which specific subpage of our website is visited by the data subject.

   4. If the data subject is logged in to Instagram at the same time, Instagram recognises which specific subpage the data subject is visiting each time the data subject opens our website as well as for the entire duration of the respective stay on our website. This information is collected by the Instagram component and assigned by Instagram to the respective Instagram account of the data subject. If the data subject activates one of the Instagram buttons integrated on our website, the data and information transmitted will be assigned to the personal Instagram user account of the data subject and stored and processed by Instagram.

   5. Instagram always receives information via the Instagram component that the data subject has visited our website if the data subject is simultaneously logged into Instagram at the time of calling up our website. This takes place regardless of whether the data subject clicks on the Instagram component or not. If the data subject does not want this information to be transmitted to Instagram, he or she can prevent the transmission by logging out of his or her Instagram account before accessing our website.

   6. Further information and the applicable privacy policy of Instagram can be found at https://help.instagram.com/155833707900388 and https://www.instagram.com/about/legal/privacy/.
       

6. ​Google Analytics

   1. ​This website uses Google Analytics, a web analytics service provided by Google, Inc. ("Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyse how users use the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. In the event that IP anonymisation is activated on this website your IP address will however be truncated beforehand by Google within the European Union or in other contracting states based on the European Economic Area Agreement. We would like to point out that on this website Google Analytics has been extended by the code "gat._anonymizeIp();" in order to ensure anonymised collection of IP addresses (so-called IP masking).

   2. The full IP address will only in exceptional cases be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

   3. You may refuse the use of cookies by selecting the appropriate settings on your browser, however, please note that if you do this you may not be able to use the full functionality of this website. In addition, you can prevent the collection of the data generated by the cookie and related to your use of the website (incl. your IP address) to Google as well as the processing of this data by Google by downloading and installing the browser plugin available under the following link: <a href="http://tools.google.com/dlpage/gaoptout?hl=de">http://tools.google.com/dlpage/gaoptout?hl=de</a>. You can also prevent the collection by Google Analytics by clicking on the following link. An opt-out cookie will be set to prevent future collection of your data when visiting this website: <a href="javascript:gaOptout()">Disable Google Analytics</a>.

   4. For more information on terms of use and data protection, please visit https://marketingplatform.google.com/about/analytics/terms/de/.