Table of Contents

  1. Objective and Responsible Body
  2. Basic Information on Data Processing
  3. Processing of Personal Data
  4. Collection of Access Data
  5. Cookies and Reach Measurement
  6. Google Analytics
  7. Google-Re/Marketing-Services
  8. Facebook Social Plugins
  9. Facebook Remarketing
  10. Jetpack (WordPress Stats)
  11. Pinterest Share Button
  12. Newsletter
  13. Integration of Services and Contents of Third Parties
  14. User Rights and Deletion
  15. Changes to the Privacy Policy Statement
  16. Convenience Translation

1. Objective and Responsible Body
This Privacy Policy Statement clarifies the nature, scope and purpose of personal data processing (including the collection, processing, use and consent) within our online offering and the related websites, features and content (hereinafter collectively referred to as “online offer” or “website”). The privacy policy applies regardless of the domains, systems, platforms and devices (e.g. desktop computer or mobile), on which the online offering is run or consumed.

The provider of the online offer and the responsible body is Paperholic All ‘bout paper (a Wedding Avenue e. U. brand), company headquarters and billing address: Wedding Avenue e.U., Mayerweckstrasse 2-8 / 99/1, 1210, Vienna (hereinafter referred to as “provider”, “we”, or “us”). For further contact we refer to our imprint page.

The term “user” includes all customers and visitors of our online offer. The terms used, such as “users”, are to be understood as gender neutral.

2. Basic Information on Data Processing
We process personal data of users only in compliance with the relevant data protection regulations and in accordance with the principle of data reduction and data economy. This means that the users’ data is processed only if a legal permission exists, in particular, if the data of the performance of our contractual achievements and online services is required, if prescribed by law or if in presence of consent.

We take organizational, contractual and state of the art technical security measures to ensure that the regulations within the data protection act are complied with, and in order to protect the data processed by us against any accidental or intentional manipulation, loss, destruction and against access by unauthorized persons.

Insofar as content, tools or other means from foreign providers, with a registered office abroad, (hereinafter collectively referred to as “third party providers”) are used in this privacy policy statement, it can be assumed that data will be transferred to the state of residence of the third party provider. The data transfer to third countries takes place either on the basis of legal permission, the consent of the user or due to special contractual clauses, which ensure a legally required security of the data.

3. Processing of Personal Data
In addition to the uses explicitly stated in this privacy policy statement, the personal data might be processed for the following purposes on the basis of legal permissions or user consent:

  • The provision, execution, maintenance, optimization and security of our services.
  • Ensuring effective customer service and technical support.
    We only transfer users’ data to third parties when this is necessary for billing purposes (e.g. to a payment service provider) or for other purposes, if these are necessary in order to fulfil our contractual obligations towards the user (e.g. address information to suppliers).
    When contacting us (via contact form or e-mail), the details of the user are stored for the purpose of processing the request as well as in the event of follow-up questions. Personal data will be deleted if they have fulfilled their purpose and deletion does not conflict with any obligation to preserve records.

4. Collection of Access Data
We collect data about every access to the server on which this service is located (the so-called server log files). The access data includes the name of the retrieved web page, file, data and time of retrieval, amount of data transferred, notification of successful retrieval, browser type and version, the user’s operating system, referrer URL (the previously visited page), IP address and the requesting provider.

We use the log data, without connection to the person of the user or other profiling, solely for statistical evaluation, security and optimization of our online offer and according to the legal provisions. We reserve the right to retrospectively check the log data, however, if, on the basis of concrete evidence, the legitimate suspicion of unlawful use exists.

5. Cookies and Reach Measurement
Cookies are information transmitted by our web server or third-party web servers to users’ web browsers, where they are stored for later retrieval. The users are informed about the use of cookies in the context of pseudonymous range measurement in the context of this privacy policy statement.

The online offer can also be looked at when the collection of cookies is turned off. If users do not want cookies stored on their machine, they will be asked to disable the option in their browser’s system settings. Saved cookies can be deleted in the system settings of the browser. The exclusion of cookies may lead to functional restrictions of this online offer.

There is a possibility to mange many corporate online ad cookies form the US website http://www.aboutads.info/choices or the EU page http://www.youronlinechoices.com/uk/your-ad-choices/.

6. Google Analytics
We use Google Analytics, a web analytics service provided by Google Inc. (“Google”). Google uses cookies. The information generated by the cookie about the use of the online offer by users are usually transmitted to a Google server in the United States of America and stored there.

Google will use this information on our behalf to evaluate the use of our online offer by users, to compile reports on the activities within this online offer and to provide us with further services related to the use of this online offer and the internet usage. In this case, pseudonymous user profiles of the processes data can be created.

We only use Google Analytics with activated IP anonymization. This means, the IP address of the users is shorted by Google within member states of the European Union or in other contracting states of the Agreement on the Europeans Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the US and shortened there.

The IP address submitted by the user’s browser will not be merged with other data provided by Google. Users can prevent the storage of cookies by setting their browser software accordingly; users may also prevent Google’s collection and processing of the data, generated by the cookie, and the resulting data about their usage of the online offer, by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl=de.

For more information about Google’s use of data, as well as setting and protest options, please visit Google’s websites: https://www.google.com/intl/en/policies/privacy/partners (“Google’s use of your data when using websites or apps of our partners”); http://www.google.com/policies/technologies/ads (“Use of advertising data”); http://www.google.com/settings/ads (“Managing information that Google uses to show you advertisements”) and http://www.google.com/ads/preferences (“Determine which ads Google may show you”).

7. Google-Re/Marketing-Services
We use the Google Inc. Marketing and Remarketing Service (“Google Marketing Services”), 1600 Amphitheater Parkway, Mountain View, CA 94043, USA, (“Google”).

The Google Marketing Services allow us to better target advertisements for and on our website so that we only present ads to users that potentially match their interest. If users are shown ads for products, they have been previously interested in on other websites, it is called “remarketing”. When Google and our other websites that use Google Marketing Services are activated, Google immediately codes so-called (re-)marketing tags (invisible graphics or codes etc.) that are added to the website as “web beacons”. With their help, the user is provided with an individual cookie on the device and a small file is saved (instead of cookies, comparable technologies can be used). The cookies can be set by different domains, including google.com, doubleclick.net, invitemedia.com, admeld.com, googlesyndication.com or googleadservices.com. On this file is noted which websites the user visited, what content interested him and what offers he clicked, as well as technical information about the browser and operating system, referring websites, visit time and other information on the use of the online offer. The IP address of the user is also recorded, whereby the IP address is shorted within member states of the European Union or other parties of the Agreement on the European Economic Area (see also Google Analytics). Only in exceptional cases will the IP address be transferred to a Google server in the US and shorted there. The IP address will not be merged with data of the user within other offers from Google. The above information may also be associated with such information from other sources. If the user subsequently visits other websites, they may be shown ads tailored to him and his interests.

The data of the users are pseudonym processed in the context of the Google marketing service, which means that Google stores and processes not the names or e-mail addresses of the users but processes the relevant cookie-related data within pseudonymous user profiles. Therefore, from the perspective of Google, the ads are not managed and displayed to a specifically identified person, but to the cookie owner, regardless of who that cookie owner was. This does not apply if a user has expressly allowed Google to process their data without pseudonymization. The information collected about users by “DoubleClick” is transmitted to Google and stored on Google’s servers in the United States.

Among the Google marketing services, we use the online advertising program “Google AdWords”. In the case of Google AdWords, each advertiser receives a different “conversion cookie”. Cookies can not be tracked through the websites of advertisers. The information gathered through the cookies is used to generate conversion statistic for AdWords advertisers who have opted for conversion tracking. Advertisers will see the total number of users who clicked on their ad and were redirected to a conversion tacking tag page. However, they do not receive any information that personally identifies users.

We embed third-party ads based on Google’s DoubleClick marketing service. DoubleClick uses cookies, which allow Google and its affiliate websites to serve ads based on users’ visits to this site or other sites on the Internet.

We also engage third-party ads based on the Google AdSense marketing service. AdSense uses cookies, which allow Google and its affiliate websites to serve ads based on users’ visits to our site or other sites on the Internet.

Another Google marketing service we use is the “Google Tag Manager”, which allows additional Google analytics and marketing services to be integrated into our website (e.g. “AdWords”, “DoubleClick” or “Google Analytics”).

For more information about Google’s data usage for marketing purposes, see the overview page: https://www.google.com/policies/technologies/ads or Google’s Privacy Policy, which is located and available under: https://www.google.com/policies/privacy.

If you choose to opt out of Google marketing services, you may take advantage of Google’s recruitment and opt-out opportunities under: http://www.google.com/ads/preferences.

8. Facebook Social Plugins
Our online offering uses social plugins (“plugins”) from the social network facebook.com, which is operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland (“Facebook”). The plugins are recognizable by one of the Facebook logos (white “f” on blue tile, the term “Like” or a “thumbs up” sign) or are marked with the addition “Facebook Social Plugin”. The list and appearance of Facebook Social Plugins can be viewed here: https://developers.facebook.com/docs/plugins/.

When a user invokes a feature of this online offering that includes such a plugin, their device establishes a direct connection to the Facebook servers. The content of the plugin is transmitted by Facebook directly to the device of the user and incorporated by him into the online offer. In the process, user profiles of the processed data can be created. We therefore have no influence on the extent of data that Facebook collects with the help of this plugin and can only inform users according to our level of knowledge.

By integrating the plugins, Facebook receives the information that a user has accessed the corresponding page of the online offer. If the user is logged into Facebook, Facebook can assign the visit to his Facebook account. If users interact with the plugins, press the Like button or leave a comment, the information is transmitted from the users’ device directly to Facebook. This means that there is a possibility that Facebook will find out and save the users’ IP addresses. According to Facebook, only anonymous IP addresses are stored within Germany.

The purpose and scope of data collection, further processing and use of data by Facebook, as well as the related rights and setting options for protecting the privacy of users, can be found in Facebook’s own privacy policy: https://www.facebook.com/about/privacy/.

If a user is a Facebook member and does not want Facebook collecting data about him via this online offer and link it to his member data stored on Facebook, he must log out of Facebook and delete his cookies before using our online offer. Other setting and protest options regarding the use of data for promotional purposes are possible within the Facebook profile settings at: https://www.facebook.com/settings?tab=ads; via the US-American site: http://www.aboutads.info/choices/; or the EU page: http://www.youronlinechoices.com/. The settings are platform independent, which means that they are adopted for all devices, such as desktop computers or mobile devices.

9. Facebook Remarketing
Within our online offer, we use so-called “Facebook pixels” of the social network Facebook, which are of Facebook Inc. 1 Hacker Way, Menlo Park, CA 94025, USA, or if you are based in the EU, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland (“Facebook”). With the help of the Facebook pixel it is possible for Facebook to designate the visitors of our offer as a target group for the presentation of advertisements, so-called “Facebook Ads”. Accordingly, we use the Facebook pixel to display the Facebook ads we have been sent only to those Facebook users who have also shown an interest in our website. In other words, with the help of the Facebook pixel, we want to make sure that our Facebook ads are in line with potential interest of users, instead of being annoying. With the help of the Facebook pixel, we can also understand the effectiveness of the Facebook ads for statistical and market research purposes, by seeing if users were redirected to our site after clicking on a Facebook ad.

The Facebook pixel is integrated when visiting our website directly through Facebook and can save a small file, the so-called cookie, on the users’ devices. If they, subsequently, log into Facebook or visit Facebook in the logged-in state, the visit of our online offer will be noted in the users’ Facebook profiles. The data collected about them are anonymous to us, and do not give us any conclusions about the identity of the users. However, the data is stored and processed by Facebook, so that a connection to the respective user profile is possible. The processing of the data by Facebook is part of Facebook’s data usage policy. Accordingly, to learn more about how the remarketing pixel works and about how Facebook ads work more generally, visit Facebook’s Data Usage Policy: https://www.facebook.com/policy.php.

The user may object to the capture by the Facebook pixel and use of their data to display Facebook Ads. To do this, they can go to the page set up by Facebook and follow the instructions for the usage-based advertising settings: https://www.facebook.com/settings?tab=ads; via the US-American site: http://www.aboutads.info/choices/; or the EU page: http://www.youronlinechoices.com/. The settings are platform independent, which means that they are adopted for all devices, such as desktop computers or mobile devices.

10. Jetpack (WordPress Stats)
We use the plugin Jetpack (a subfunction of “Wordpress Stats”), which integrates a tool for the statistical evaluation of visitor accesses and is part of Automattic, Inc. 132 Hawthorne Street San Francisco, CA 94107, USA. Jetpack uses so-called “cookies”, text files that are stored on a user’s computer and that allow an analysis of the use of the website by this user.

The information generated by the cookie about the user’s usage of this online offer is stored on a server in the United States. Here, user profiles of the users can be created from the processes data and be used for analysis purposes only, never for advertising purposes. For more information, one may refer to Automattic’s Privacy Policy: https://automattic.com/privacy/ and Jetpack Cookie Hints: https://jetpack.com/support/cookies/.

11. Pinterest Share Button
We use the buttons (“Pin It”), connected to the service Pinterest, http://pinterest.com. The buttons allow users to share our articles, pictures or web pages on their “Pinterest Boards”. When a user visits a web page that contains a “Pin It” button, his browser establishes a direct connection to the servers of Pinterest. The content of the “Pin It” button is transmitted by Pinterest directly on the user’s browser. Therefore, we have no control over the amount of data that Pinterest collects by means of the “Pin It” button and can only inform users according to our knowledge. According to our standard of knowledge, only the IP address of the users as well as the URL of the respective website is transmitted, but only used for the purpose of displaying the “Pin It” button and for sharing the content.

Further information can be found in the privacy policy of Pinterest at http://pinterest.com/about/privacy/.

12. Newsletter
With the following information, we will inform users about the contents of our newsletter as well as the registration, shipping and statistical evaluation procedures connected to it and a user’s right to objection. By subscribing to our newsletter, users agree to the receipt and the procedure described.

Content of the Newsletter: We send newsletters, e-mails and other electronic notifications with advertising information (hereinafter referred to as “newsletter”) only with the consent of the recipient or a legal permission. Insofar as the content of a newsletter is clearly described at the time of subscription, it is essential for the user’s consent. Our newsletter contains the following information: Paperholic All ‘Bout Paper products, special offers and promotions of our company.

Double-Opt-In and Protocolling: Registration for our newsletter is done in a so-called double opt-in procedure. After registration, the user will receive an e-mail asking to confirm their registration. This confirmation is necessary so nobody can register with external e-mail addresses. Registration for the newsletter will be logged in order to prove the registration process has happened according to the legal requirements. This includes the storage of the login and the confirmation time, as well as the user’s IP address. Likewise, changes to the user’s data stored with the shipping provider will be logged as well.

Shipping Service Provider: The newsletter is sent via Mailchimp, www.mailchimp.com (hereinafter referred to as “shipping service provider”). The privacy policy of the shipping service provider can be viewed here: https://mailchimp.com/legal/.

The e-mail addresses of our newsletter recipients, as well as their other data described in the context of these noted, are stored on the servers of the shipping service provider. The shipping service provider uses this information to send and evaluate the newsletter on our behalf. Furthermore, the shipping service provider may, according to its own information, use this data to optimize or improve its own services, e.g. use it for technical optimization of shipping processes and the presentation of newsletter or for economic purposes, to determine from which countries the recipients come. However, the shipping service provider does not use the data of our newsletter recipients to address them themselves or to pass them on to third parties.

Credentials: To sign up for the newsletter, it is sufficient to provide an e-mail address and first name.

Statistical Survey and Analysis: The newsletters contain a so-called “web-beacon”, a pixel-sized file, which is retrieved from the server of the shipping service provider when the newsletter is opened. In the course of this call, technical information, such as information about the browser and the user’s system, as well as their IP address and time of retrieval can be collected. This information is used to improve the technical performance of services based on their specifications or audience and their reading habits, based on their location, which can be determined using the IP address) or access times. The statistical survey also include determining whether the newsletters are opened, when they are opened, and which links are clicked. For technical reasons, this information can be assigned to the individual newsletter recipients. However, it is neither our endeavour nor that of the shipping service provider to observe individual users. The evaluations serve us much more to recognize the reading habits of our users and to adapt our content to them or to send different content according to the interest of our users.

Termination or Withdrawal: Any user can terminate the subscription to our newsletter at any time, which means to revoke their consent. At the same time, their consent to its dispatch by the shipping service provider and the statistical analyses expires. A separate revocation of the shipment by the shipping service provider or the statistical evaluation is unfortunately not possible. A link to cancel the newsletter can be found at the end of each newsletter.

13. Integration of Services and Contents of Third Parties
It may happen that contents or services of third-party providers, such as maps or fonts from other websites, are included in our online offer. The inclusion of content from third-party providers always requires that the third-party providers perceive the user’s IP address, since they could not send the content to the users’ browser without the IP address. The IP address is therefore required for the presentation of this content. Furthermore, providers of third-party content can set their own cookies and process users’ data for their own purposes. In the process, user profiles of the processes data can be created. We will use this content largely in a data-saving and data-avoiding manner and will select reliable third-party providers with regard to data security.

The following presentation provides an overview of third-party providers as well as their contents and links to their data protection statements, which include further notes on their data processing policies:

14. User Rights and Deletion
Users have the right, upon request, to obtain free information about the personal data that we have stored about them.

In addition, users have the right to correct inaccurate data, revoke consent, block and delete their personal data, and to file a complaint with the appropriate regulatory authority in the event of unlawful processing.

The data stored by us will be deleted as soon as they are no longer necessary for their intended purpose and the deletion does not conflict with any statutory storage requirements.

15. Changes to the Privacy Policy Statement
We reserve the right to change the privacy policy statement in order to adapt it to changing legal situations, or to changes in the service and data processing processes. However, this only applies to declaration of data processing. If users’ consent is required or elements of the privacy policy statement contain contractual relationships with the users, the changes are only made upon having received consent from the users. Users are requested to inform themselves regularly about the content of the privacy policy statement.

16. Convenience Translation
This translation has been added for information purposes. In the event of questions of interpretation, the German version remains representative.