Privacy Statement

General Terms and Conditions and Legal Basis

Privacy has always been a matter of great concern to Sensi Weeds - Grow City GmbH. In line with the principles of the EU General Data Protection Regulation (GDPR), we shall minimise the processing of your data, store it for as short a time as possible and ensure its greatest possible security. Data shall exclusively be processed pursuant to the applicable legal provisions (GDPR, DSG – data protection law 2018, TKG – telecommunication law 2003). In this privacy statement, we inform you about the most important aspects of data processing within our website.

The data controller is:

Grow City GmbH

Industriestraße D 5

A-2345 Brunn/Gebirge

Austria

Phone no.: +43 (1) 609 1314

Email: info@sensiweeds.com

Purpose, Grounds for Processing and Storage Period

The personal data collected from you shall be used to ensure a technically smooth visit to our website, fulfil contractual terms, bill your online purchases and offer you the best possible customer service. All data shall be collected, stored, processed and used for these purposes.

The grounds for processing your personal data are contract clauses (governing online shopping), legitimate interests, our legal or contractual obligations as well as your consent (regarding the use of information provided on your contact form, the receipt of our newsletter, and the use of cookies). Failure to provide your data may have various consequences.

We shall process your data as far as necessary for the full period of our business relationship with you (from the signature of the purchase contract to its complete performance) and beyond, in compliance with the statutory record-keeping and document-retention obligations set out in the Austrian Commercial Code (UGB) and the Federal Taxation Code (BAO), among others, as well as until the end of any legal dispute, ongoing warranty, guarantee periods, etc.

Data Recipients and Data Transfer to Third Parties

For the operation of our websites and its underlying processing systems, we contracted a number of data processors (IT service providers, payment service providers, transport service providers and tax consultants), who are authorised to access your data during and for the provision of their respective services. They committed to us that they would comply with the applicable data protection regulations. Contracts concerning the processing of customer orders are concluded in accordance with Art. 28 of the GDPR.

Furthermore, we shall exchange data with our parent company Grow City GmbH, Industriestrasse D 5, A-2345 Brunn/Gebirge, insofar as it is necessary for our business process requirements and, in particular our central accounting. Our IT systems are shared within the Grow City GmbH corporate organisation and subject to the same privacy policy and security requirements.

Furthermore, we shall never pass on your data to third parties, unless we are legally required to do so. We take the protection of your data very seriously. For all the measures taken to protect your data, see paragraph "Data Security" below.

IP Address

Whenever you access our website, your IP address shall be recorded in our server logs, but immediately pseudonymised by masking the last 8 bits. This means that only a rough localisation is possible. We shall store server log data for a period of 30 days.

Online Shopping

In order to simplify your shopping experience and for the subsequent processing of contracts, your IP address will be stored in the form of cookies. Furthermore, we will store the data received from you in the course of your registration and/or purchase (name, contact details, shipping method, etc., content of the order). Obviously, data shall be transferred exclusively via an encrypted connection.

Subsequently, for the purpose of contract processing, data on shipping status will also be stored in our systems.

The data you provide is required for the performance of the contract or the implementation of pre-contractual measures. Without such data, we will not be able to perform a contract with you. No data shall be transferred to third parties, with the exception of necessary data sent to our contracted transport or shipping companies for the delivery of the goods, or to our tax advisor for the fulfilment of our tax obligations, or to our IT service providers for a smooth technical process, or, when payment is made by credit card, to the processing banks/payment service providers for debiting the purchase price, as the case may be. When this happens, we shall only transfer the purchase price with an anonymised transaction ID, i.e. we shall provide no further information about the order to the payment service provider. All the above order processors committed to us that they would comply with the applicable data protection regulations. An order processing contract was concluded in accordance with Art 28 of the GDPR.

If you cancel your purchase process before its completion, we shall store no data. In the event of the conclusion of a contract, all data concerning the contractual relationship will continue to be stored until the expiry of the retention period provided for by the applicable tax legislation (seven years). Data such as name, address, purchased goods, date of purchase and method of payment will be stored beyond this period until the expiry of the product liability (10 years). Data shall be processed in accordance with the provisions of art. 96 para. 3 of the telecommunications law (TKG) as well as art. 6 para. 1(a) (consent) and/or para. 1(b) (data required for contract performance) of the GDPR.

Contact Form

If you contact us via the contact form available on this website or by email, your enquiry will reach us through our email server and we shall process and store it, without passing it on to any third party without your consent. This data is indispensible to process your enquiry. We shall store enquiries (contact forms) and all our business correspondence for seven years.

Data processing is based on the provisions of art. 96 para. 3 of the TKG and art. 6 para. 1(a) (consent) of the GDPR.

Newsletter

You may choose to subscribe to our newsletter via our website. To that end, we will need your email address and declaration that you agree to receive the newsletter. No newsletter shall be sent without your communication of this data.

As soon as you have subscribed to the newsletter, we will send you an email with a link to confirm your subscription.

You may cancel your subscription to the newsletter at any time. To do so, click on the 'Newsletter' option in the bottom navigation bar of this website - you will then find the unsubscribe link at the bottom of the following page - or send an email to info@sensiweeds.com. When you do so, we shall immediately delete your data with regard to the newsletter dispatch.

Data processing is carried out in accordance with the provisions of art. 96 para. 3 of TKG and art. 6 para. 1(a) (consent) of the GDPR.

Cookies and Web Analytics

Our website uses cookies. These are small text files stored on your terminal via the browser.

They enable recognition of the user and an analysis of the use of our website. The information thus created is transferred to the provider's server and stored there and helps us make our website more user-friendly, effective and secure. Cookies are also used to measure the frequency of page views and for navigation in general.

By using our website, you give your consent to our use of cookies. Some cookies shall remain stored on your terminal until you delete them. You can refuse to accept cookies via your browser settings. However, you can also set your browser so that it informs you about the storage of cookies and only allows this in individual cases, or deactivate the storage of cookies altogether. You can delete cookies that have already been stored at any time in the settings of your browser. Since this procedure is browser-specific, we ask you to consult the instructions for your browser. However, please note that, if you delete cookies, the functionality of the website may be restricted and online shopping with us will not be technically possible as the placement of items in the shopping cart will not be possible when cookies are disabled.

Cookies and Web Analytics: Google

This website uses Google Analytics, a web analytics service provided by Google, Inc. ("Google"), 1600 Amphitheatre Parkway, Mountain View, California, 94043, USA. Data is processed on the basis of the provisions of art. 96 para. 3 of TKG and art. 6 para. 1 (a) (consent) and/or para. 1(f) (legitimate interest) of the GDPR. In order to comply with the GDPR legitimate-interest requirements, we are committed to improving our offer and website.

Google Analytics uses cookies that enable the analysis of your use of the website. Any information generated by cookies about your use of this website such as

browser type/version
operating system used
referrer URL (i.e. a previously visited page)
host name of the accessing computer (IP address)
server query time

are usually transmitted to a Google server in the USA and stored there. The IP address transmitted by your browser for use by Google Analytics will not be merged with other Google data. Furthermore, we use IP anonymisation on this website via Google Analytics with the extension "_anonymizeIp()", as your privacy is important to us. This means that your IP address is already shortened by Google in the Member States of the European Union or other countries signatory to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and only shortened there.

Google will use this information on behalf of our company, as website operator, in order to evaluate your use of this website, prepare reports on website activity and provide services related to website and internet use to the website operator.

You can deactivate the storage of cookies by selecting the appropriate settings on your browser. You can also prevent the collection of data generated by cookies and related to your use of the website (including your IP address) by Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de

More information on the current terms of use and data protection can be found directly at the Google pages http://www.google.com/analytics/terms/de.html and https://policies.google.com and https://policies.google.com/privacy/partners

We have signed an order data processing contract with Google. Google committed to us that they would comply with the applicable data protection regulations.

Our relationship with Google is based on standard contractual clauses approved by the European Commission and, for transfers of data from the EEA to the USA and other countries, where applicable, on adequacy decisions issued by the European Commission concerning the USA.

Consent and Right to Opt Out

If your consent is required for us to process your data, we will only process such data with your express consent..

We are not authorised to and, generally, do not process data of minors. By giving your consent, you confirm that you have reached the age of 18.

You can withdraw your consent at any time by contacting the following e-mail address: info@sensiweeds.com. In such a case, any data previously stored about you will be anonymised and subsequently used for statistical purposes only, without any personal reference. By withdrawing your consent, the lawfulness of the processing carried out on the basis of the consent given until its withdrawal shall not be affected.

Data Security

Sensi Weeds - Grow City GmbH uses technical and organisational security measures in order to protect all the stored personal data against accidental or intentional manipulation, loss or destruction, and against access by unauthorised persons.

Our websites are encrypted using SSL.
Our databases are backed up regularly.
Our servers are equipped with virus-protection measures.

Our security measures are continuously improved in line with technical progress.

Your Rights

You will be entitled to obtain information from us at any time about the personal data concerning you. If there is no legal obligation to retain such data, you will be entitled to have it deleted and object to its processing. In addition, you will be entitled to correct the data and to limit their processing, as well as the right to data portability and to lodge a complaint with the relevant privacy regulator, i.e. in our case, the Austrian Data Protection Authority (Wickenburggasse 8-10, 1080 Vienna, e-mail: dsb@dsb.gv.at).

For further questions or requests for information about data protection that are not covered in this privacy statement, please contact our data protection coordinator at info@sensiweeds.com

Version 1.1, last update: 8 Nov. 2021