PRIVACY POLICY (arven.at)
version of 28.03.2025
1. Introduction.
ARVEN, operating as a "Furniture and Interior Accessories Store" via its website arven.at, is engaged in the online sale of natural wood furniture and interior accessories, including wood paintings. As the company's activities are aimed at selling goods in the European Union, ARVEN is obliged to comply with the requirements of the General Data Protection Regulation (GDPR), which is the European Union legislation aimed at protecting the personal data of individuals. This Privacy Policy aims to inform users of the arven.at website about how ARVEN collects, uses, stores and protects their personal data, as well as about their rights under the GDPR. The document applies to all persons visiting the arven.at website and using ARVEN services.
ARVEN, being incorporated in Austria, which is an EU member state, is directly subject to the GDPR for all processing of personal data of EU citizens. This means that there is no need to consider appointing a representative in the EU in accordance with Article 27 of the GDPR, except in situations where ARVEN may have customers outside the EU, where such representation may be required.
ARVEN is committed to processing personal data in accordance with the requirements of the GDPR, ensuring that processing is lawful, fair and transparent. This policy is based on the key principles of the GDPR, including data minimisation, purpose limitation, accuracy, storage restriction, integrity and confidentiality. ARVEN acts as a data controller responsible for compliance with the GDPR and is able to demonstrate this compliance in accordance with the principle of accountability.
2. Collection and processing of personal data
ARVEN may collect various categories of personal data from users of its website. This includes identifying information such as first and last name; contact information, including email address, telephone number and postal address, which may be used for shipping and billing purposes; payment information, such as bank card or other payment details processed through secure payment systems; transaction data, including purchase history and order details; technical data, such as IP address, browser type and version, time zone, location data, browser plug-in types and versions; andmarketing and communication data that reflects the user's preferences for receiving marketing materials; and other data that the user may provide voluntarily through forms on the website, such as product reviews. At the moment, there is no reason to believe that ARVEN collects special categories of personal data, except when the user may provide such information voluntarily. If such data is collected, a separate legal basis for its processing will be provided, usually explicit consent.
Personal data may be collected directly from the user, for example, when registering for an account, placing an order, subscribing to a newsletter or filling out forms. In addition, data may be collected automatically through cookies and other tracking technologies while using the website. In some cases, data may come from other sources, for example, through social media integration, if used. If ARVEN uses third-party services, such as Google Analytics or Facebook Pixel, users will be notified of this and an explanation will be provided as to the types of data collected by these services and for what purpose.
The processing of personal data is based on the following legal grounds: the user's consent, for example, to receive marketing mailings or to use certain types of cookies; the need to perform a contract, for example, to process orders and deliver goods; legal obligations, such as accounting; and the legitimate interests of ARVEN, for example, to improve the website or to prevent fraud, provided that these interests do not override the rights and freedoms of users. In cases of data processing based on legitimate interests, ARVEN will assess the balance of interests to ensure that the rights of users are not violated and document the results of this assessment.
Personal data of users are processed for the following purposes: processing and fulfilment of orders; delivery of purchased goods; providing customer support; processing payments for orders; sending users information about their orders and updates on them; sending marketing and advertising mailings (if there is appropriate consent); analysing the use of the website in order to improve its functionality and convenience for users; detecting and preventing fraudulent activities, as well as ensuring the security of the website; fulfilling legal obligations.and personalisation of the content and offers displayed to users (with appropriate consent or on the basis of legitimate interests). For each of these purposes, ARVEN determines the appropriate legal basis for data processing.
3. Transfer of personal data
ARVEN may transfer personal data of users to third parties under certain circumstances. These parties may include payment service providers that process payments for orders; delivery services that deliver ordered goods to specified addresses; marketing partners that assist with marketing campaigns (subject to users' consent); analytics providers such as Google Analytics that help analyse website usage; hosting and IT support providers that ensure the proper functioning of the website and related systems; and legal authorities, When transferring personal data to third parties, ARVEN takes measures to ensure that these parties also comply with the GDPR. Data Processing Agreements are concluded with service providers who process data on behalf of ARVEN, which define their obligations to protect personal data.
In the event that users' personal data is transferred outside the European Economic Area (EEA), ARVEN undertakes to notify users and provide appropriate safeguards to ensure an adequate level of data protection in the recipient country. Such safeguards may include a decision of the European Commission on the adequacy of the level of data protection in the respective country, the use of Standard Contractual Clauses (SCCs) approved by the European Commission, Binding Corporate Rules (BCRs), or obtaining the user's explicit consent to the transfer of data after providing him or her with information about the possible risks. ARVEN will conduct a thorough analysis of all cases of transferring personal data outside the EEA and will ensure that appropriate transfer mechanisms are used, which will be reflected in this policy, possibly with links to relevant documents.
4. Storage of personal data
The period of storage of personal data collected by ARVEN depends on the category of data and the purposes of its processing. Personal data required to fulfil an order is stored for the period necessary to fulfil the order and related warranty obligations, as well as in accordance with legal requirements, for example, for accounting purposes. The contact details used for marketing mailings are stored until the user withdraws their consent to receive such mailings. User account data is stored until the user decides to delete their account. Technical and website usage data may be stored for a certain period of time for the purposes of analysing and improving the website. ARVEN has developed a clear data retention policy for each category of personal data, taking into account the purposes of its processing and legal requirements. This Privacy Policy sets out the general criteria used to determine the retention periods, such as the need for performance of a contract, legal requirements (e.g. statute of limitations, tax requirements), ARVEN's legitimate interests (e.g. to defend against legal claims) and the existence of user consent (consent period).
5. User rights
Users of the arven.at website have a number of rights in relation to their personal data under the GDPR. These rights include the right to receive information about what personal data is being processed, for what purpose, who the recipients of the data are, how long it will be stored, and other important information about the processing. Each user has the right to receive a copy of their personal data stored by ARVEN, as well as the right to request the correction of any inaccurate or incomplete personal data. Under certain circumstances, the user may exercise the right to have their personal data erased ("right to be forgotten"), for example, if the data is no longer required for the purposes for which it was collected or if the user withdraws their consent to its processing. In addition, the user has the right to request the restriction of the processing of their personal data, for example, while the accuracy of the data is being verified or in the event of unlawful processing. The right to data portability allows users to receive their personal data in a structured, commonly used and machine-readable format and to transmit it to another controller if the processing is carried out in an automated manner on the basis of consent or contract. Each user has the right to object to the processing of their personal data if such processing is based on the legitimate interests of ARVEN or is used for direct marketing purposes. Finally, users have the right not to be subject to a decision based solely on automated processing, including profiling, if such a decision has legal implications or significantly affects them.
To exercise any of their rights, users can send a request to info@arven.at or by post to Ramperstorffergasse 8-12/1 /39, 1050, Wien. The request will be processed within one month, which may be extended under certain circumstances. ARVEN undertakes to respond to user requests without undue delay and free of charge, except in cases of manifestly unfounded or excessive requests. Users also have the right to lodge a complaint with a supervisory authority if they believe that their rights have been violated. In Austria, this authority is the Österreichische Datenschutzbehörde, with contact details: Address: Barichgasse 40-42, 1030 Wien. Website: https://dsb.gv.at/kontakt.
6. Cookies and other tracking technologies
The arven.at website uses cookies, small text files that are stored on a user's device when they visit the website. These cookies allow the website to remember information about the user's actions and preferences, such as language preferences or shopping basket contents. In addition to cookies, other tracking technologies such as web beacons, pixel tags and scripts may be used. Cookies can be either first-party cookies (set directly by the ARVEN website) or third-party cookies (set by other organisations, for example, for advertising or web analytics purposes)."Cookie Policy arven.at"
For the use of all cookies other than those strictly necessary for the functioning of the website, ARVEN obtains the explicit consent of the user. Consent is given through a clear positive action by the user, for example by clicking the "Accept" button in a special cookie banner. Users are given the opportunity to choose between different categories of cookies. Information about the use of cookies is provided in clear and simple language. ARVEN uses a cookie banner to obtain user consent, which contains information about the types of cookies, their purposes and the possibility of setting parameters. The "Accept" and "Reject" buttons in this banner are displayed on equal terms. Users can withdraw their consent to the use of cookies or change their settings at any timeby clicking on the link to the cookie settings page, which is located in the cookie banner and at the bottom of the website. Users can also block cookies through their browser settings. Withdrawing consent to the use of cookies is as easy as granting it.
7. Data security
ARVEN takes appropriate technical and organisational measures to protect users' personal data from unauthorised access, use, disclosure, alteration or destruction. Such measures may include encrypting data using SSL/TLS technologies, restricting access to personal data only to authorised personnel, using firewalls and other security technologies, regularly updating software and security systems, and conducting training for employees on data protection. In the event of a personal data leak, ARVEN undertakes to notify the relevant supervisory authority within 72 hours, as well as to notify affected users if the leak poses a high risk to their rights and freedoms. ARVEN has a developed procedure for responding to data leaks to ensure proper protection of personal data in the event of a security incident.
8. Contact information
ARVEN "Furniture and interior accessories store"
Address: Ramperstorffergasse 8-12 /1 /39, 1050, Wien.
E-mail for privacy and data protection enquiries: info@arven.at
Phone number: +43 681 20173544
Users have the right to lodge a complaint with a data protection supervisory authority. In Austria, this is the Austrian Data Protection Authority:
Österreichische Datenschutzbehörde Address: Barichgasse 40-42, 1030 Wien, Austria Website: https://www.dsb.gv.at/
As ARVEN is registered in Austria and processes personal data of EU citizens, the appointment of a data protection representative in other EU countries may not be necessary, except in special circumstances involving a significant amount of processing or processing of special categories of data concerning users from other EU countries.
9. Terms of use of the website (brief overview)
Ordering: to place an order, the user needs to add the selected products to the basket and proceed to the checkout, where they will need to provide the necessary information and confirm the order. Confirmation of the order means that the user accepts the terms and conditions of sale.
Payment: ARVEN offers various payment methods, which may include payment by credit card, online payment systems and other available methods. All payment transactions are made through secure communication channels to ensure the security of users' financial data.
Delivery: Delivery of goods is carried out to the address specified by the user. Delivery times and costs may vary depending on the destination and the chosen delivery method. Detailed information on delivery terms and conditions is available on the relevant page of the website.
Return of goods: Users have the right to return purchased goods within 30 days from the date of receipt without giving any reason. To make a return, you must follow the procedure described on the product return page.Detailed terms and conditions for orders, payment, delivery and return of goods are set out in a separate document "User Agreement", the link to which is located at the bottom of the website.
10. Changes to this Privacy Policy
ARVEN may update this Privacy Policy from time to time to reflect changes in the law, our data processing practices, or the functionality of the website. In the event of material changes to this policy, ARVEN will notify users by posting a notice on the website or, if necessary, by e-mail. The date of the last update of this Privacy Policy will be indicated at the beginning of the document. Users are advised to review this policy regularly to be aware of any changes.
