Politika zasebnosti
1. Zasebnost na hitro
Splosne informacije
Naslednje informacije dajejo preprost pregled nad tem, kaj se zgodi z tvojimi osebnimi podatki, ko obisces to spletno stran. Osebni podatki so vsi podatki, s katerimi te je mogoce osebno prepoznati. Podrobne informacije o varstvu podatkov najdes v nasi politiki zasebnosti spodaj.
2. Zbiranje podatkov na tej spletni strani
Kdo je odgovoren za zbiranje podatkov na tej spletni strani?
Obdelavo podatkov na tej spletni strani izvaja upravljavec spletne strani. Njegove kontaktne podatke najdes v pravnih podatkih te spletne strani.
Kako zbiramo tvoje podatke?
Nekatere podatke zberemo, ko nam jih posreduješ, na primer pri naročilu, pri odstopu prek našega spletnega obrazca ali v e-poštnem sporočilu.
Druge podatke nasi IT sistemi zberejo samodejno ali po tvojem soglasju ob obisku spletne strani. Gre predvsem za tehnicne podatke, kot so internetni brskalnik, operacijski sistem ali cas dostopa do strani.
Za kaj uporabljamo tvoje podatke?
Del podatkov zberemo, da spletno mesto deluje brez napak. Druge podatke potrebujemo za naročila, uporabniški račun in podporo. Merjenje obiska poteka brez piškotkov in samo zbirno.
Kaksne pravice imas glede svojih podatkov?
Kadarkoli imas pravico brezplacno prejeti informacije o izvoru, prejemnikih in namenu svojih shranjenih osebnih podatkov. Imas tudi pravico zahtevati popravek ali izbris teh podatkov. Ce si podal soglasje za obdelavo podatkov, ga lahko kadarkoli z ucinkom za prihodnost preklices.
3. Gostovanje
Vsebino nase spletne strani gostujemo pri naslednjem ponudniku: Vercel Inc., 340 Pine Street Suite 701, San Francisco, California 94104, USA.
Podrobnosti najdes v politiki zasebnosti podjetja Vercel: https://vercel.com/legal/privacy-policy
4. Splosne informacije in obvezna obvestila
Zasebnost
Upravljavci te strani jemljejo varstvo tvojih osebnih podatkov zelo resno. Tvoje osebne podatke obravnavamo zaupno in v skladu z zakonskimi predpisi o varstvu podatkov ter s to politiko zasebnosti.
Informacije o upravljavcu
Upravljavec obdelave podatkov na tej spletni strani je:
Laurids Pucher e.U.
Frauengasse 14
8430 Leibnitz
Avstrija
E-posta: laurids.pucher@raceready.bike
Obdobje hrambe
Ce v tej politiki zasebnosti ni naveden bolj dolocen rok hrambe, tvoji osebni podatki ostanejo pri nas, dokler ne preneha namen obdelave. Ce uveljavljas upraviceno zahtevo za izbris ali preklices soglasje za obdelavo podatkov, bodo tvoji podatki izbrisani, razen ce imamo druge pravno dopustne razloge za njihovo hrambo.
5. Zbiranje podatkov na tej spletni strani
Piškotki in lokalna shramba
Piškotkov in lokalne shrambe ne uporabljamo za oglaševanje ali analitiko. Spodnji seznam navaja vse, kar to spletno mesto shrani v tvojem brskalniku. Vsak vnos je tehnično potreben za košarico, prijavo ali nastavitev, ki si jo izbral. Po § 165 odst. 3 avstrijskega zakona o telekomunikacijah iz leta 2021 privolitev ni potrebna, zato ni pasice za piškotke. Vnose lahko kadar koli izbrišeš v brskalniku. V checkoutu Shopify nastavi svoje piškotke, zanje velja Shopifyjeva politika zasebnosti.
- NEXT_LOCALE (cookie, 1 year). Remembers the language of the website.
- raceready_currency, raceready_currency_source (cookie, 1 year). Remembers the displayed currency and whether you chose it yourself.
- raceready_theme (cookie, 1 year). Remembers the light or dark appearance.
- authjs.session-token, authjs.csrf-token, authjs.callback-url (cookie, session up to 30 days, the others until the browser is closed). Only after you sign in. Keeps you signed in and protects sign-in against forgery. On the live site the names carry the prefix __Secure- or __Host-.
- authjs.state, authjs.pkce.code_verifier, authjs.nonce (cookie, 15 minutes). Only during sign-in with Google or Apple. Secures the return from the provider.
- raceready_cart, raceready_coupon (local storage, until you empty the cart). Stores the cart and any voucher code you entered.
- raceready_currency, raceready_theme_mode (local storage, until you clear storage). The same settings as the cookies above, so they apply immediately on load.
- raceready_checkout_started (local storage, until your next visit after ordering). Remembers that you opened the checkout, so the cart is emptied after you order.
- raceready_consent_v1 (local storage, until you withdraw consent or clear storage). Stores whether you unlocked external videos. To withdraw: clear this website’s storage in your browser.
- raceready_checkout_method (session storage, until the tab is closed). Remembers the chosen route into the checkout.
- rfAns (session storage, until the tab is closed). Stores your answers in the tyre finder between questions.
Strezniski dnevniski zapisi
Ponudnik teh strani samodejno zbira in shranjuje informacije v dnevniske zapise streznika, ki nam jih tvoj brskalnik samodejno posreduje. To so:
- Vrsta in razlicica brskalnika
- uporabljeni operacijski sistem
- referrer URL
- ime gostitelja dostopajocega racunalnika
- cas strezniske zahteve
- IP naslov
Stik po e-pošti ali telefonu
Kontaktnega obrazca na tem spletnem mestu ni. Če nas kontaktiraš po e-pošti ali telefonu, tvoje podatke obdelamo, da odgovorimo na vprašanje (člen 6(1)(b) GDPR, sicer (f)). Ko je vprašanje rešeno, ga izbrišemo. Če se nanaša na naročilo, ga hranimo enako dolgo kot naročilo.
6. Nakupovanje v trgovini
Za izvedbo naročil obdelujemo ime, naslov za dostavo in račun, e-poštni naslov, telefonsko številko, če jo navedeš, naročeno blago in stanje plačila. Celotnih plačilnih podatkov ne vidimo, obdelujeta jih Shopify in izbrani ponudnik plačil. Pravna podlaga je izpolnitev pogodbe (člen 6(1)(b) GDPR) in naša zakonska obveznost hrambe (c). Račune in knjigovodske listine hranimo sedem let (§ 132 BAO).
7. Tvoje pravice
Glede svojih osebnih podatkov imas naslednje pravice:
- Pravica do dostopa
- pravica do popravka ali izbrisa
- pravica do omejitve obdelave
- pravica do ugovora obdelavi
- pravica do prenosljivosti podatkov
Imas tudi pravico vloziti pritozbo pri nadzornem organu za varstvo podatkov glede obdelave svojih osebnih podatkov z nase strani.
Pristojni nadzorni organ v Avstriji:
Österreichische Datenschutzbehörde
Barichgasse 40–42, 1030 Wien
E-Mail: dsb@dsb.gv.at
Web: www.dsb.gv.at
8. Obdelave podrobno
For each service, this lists why we process data, on which legal basis, for how long and whether data reaches a country outside the EU. Videos and fonts are served from our own server.
Hosting and server logs (Vercel)
- Purpose: Deliver the website, fend off attacks and find errors.
- Data: IP address, date and time, page requested, referrer, browser and operating system.
- Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest is secure and stable operation.
- Retention: Vercel deletes the logs automatically, at the latest after 30 days.
- Recipient and third country: Vercel Inc., San Francisco, USA. Transfers to the USA rely on the EU-US Data Privacy Framework (Art. 45 GDPR) and the European Commission’s standard contractual clauses (Art. 46 GDPR).
Audience measurement (Vercel Web Analytics)
- Purpose: See in aggregate which pages and products are viewed, to improve the shop.
- Data: Page viewed without query parameters, referrer, device type, browser and country. For cart events only the technical product ID, quantity and value. No names, email addresses or search terms. No cookies are set. Vercel recognises visits through a hash that expires after 24 hours.
- Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest is improving the shop based on anonymous figures.
- Retention: The hash expires after 24 hours. After that only aggregated figures remain.
- Recipient and third country: Vercel Inc., USA. Transfers to the USA rely on the EU-US Data Privacy Framework (Art. 45 GDPR) and the European Commission’s standard contractual clauses (Art. 46 GDPR). More: https://vercel.com/docs/analytics/privacy-policy
Order, payment and checkout (Shopify)
- Purpose: Hand the cart over to the checkout and handle order, payment, shipping and invoice.
- Data: The order data from section 6. Your payment details go directly to Shopify and the payment provider you choose.
- Legal basis: Art. 6(1)(b) GDPR (contract) and (c) (retention duty).
- Retention: Order and invoice data for seven years (section 132 BAO).
- Recipient and third country: Shopify International Limited, Dublin, Ireland. Shopify may pass data to Shopify Inc. in Canada (EU adequacy decision) and to service providers in the USA. Transfers to the USA rely on the EU-US Data Privacy Framework (Art. 45 GDPR) and the European Commission’s standard contractual clauses (Art. 46 GDPR). Payment providers such as card networks, Apple Pay and Google Pay process payment data under their own privacy policies.
Product images (Shopify CDN)
- Purpose: Some product images load directly from cdn.shopify.com, on almost every page.
- Data: Technically required for delivery: IP address, time, browser identifier and the requested image file. No cookies are set.
- Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest is to show the products quickly and completely.
- Retention: According to Shopify’s retention periods for server logs.
- Recipient and third country: Shopify International Limited, Dublin, Ireland, delivered through a global network. Transfers to the USA rely on the EU-US Data Privacy Framework (Art. 45 GDPR) and the European Commission’s standard contractual clauses (Art. 46 GDPR).
Customer account and sign-in
- Purpose: Sign you in to the customer account and keep you signed in.
- Data: When you sign in with email and password, Shopify checks your credentials. Where offered, you can also sign in with Google or Apple. We then receive your name, email address and an ID from that provider.
- Legal basis: Art. 6(1)(b) GDPR.
- Retention: The sign-in lasts until you sign out, at most 30 days. The Shopify customer account remains until you ask us to delete it.
- Recipient and third country: Shopify as above. Google Ireland Limited, Ireland, and Apple Distribution International Ltd., Ireland, if you choose that sign-in. Both may transfer data to the USA. Transfers to the USA rely on the EU-US Data Privacy Framework (Art. 45 GDPR) and the European Commission’s standard contractual clauses (Art. 46 GDPR).
Withdrawal via the online form (Resend)
- Purpose: Receive your withdrawal and confirm receipt by email to you and to us.
- Data: Name, email address, order number, your message if given, time of receipt. We use your IP address only briefly in memory to limit abuse.
- Legal basis: Art. 6(1)(c) GDPR (legal duty to confirm) and (b) (handling the contract).
- Retention: We keep the withdrawal with the order for seven years (section 132 BAO). Resend stores the emails only for delivery and its sending log.
- Recipient and third country: Resend, USA. Transfers to the USA rely on the European Commission’s standard contractual clauses (Art. 46 GDPR).
We do not sell data and do not use it for advertising. We do not send a newsletter at the moment.
