Privacy policy

Kosher Meat Vienna
Tempelgasse 4, 1020 Wien, Österreich
Phone: +43 664 921 71 09
Email: e.cohen@gmx.at

No data protection officer has been appointed for this website, as the statutory requirements for doing so are not met.

This website is deliberately built to minimise data. In concrete terms this means:

• No cookies. We do not set any cookies for analytics, marketing or tracking purposes. That is why no cookie banner appears on this website.
• No tracking, no analytics tools. Neither Google Analytics nor comparable tools, social media plug-ins or advertising networks are embedded.
• Fonts hosted locally. The fonts used are loaded from our own server. There is no connection to Google Fonts or any other external service.
• No online shop. No sales, no payment processing and no account registration take place.

This website is hosted by Netlify, Inc., 101 2nd Street, San Francisco, CA 94105, USA. The provider processes the technically necessary access data on our behalf; a data processing agreement is incorporated into Netlify’s terms.

Transfer to the USA: The website is served and the server functions are executed on servers in the United States (Ohio region). Personal data is therefore transferred to a third country. According to its own statements, Netlify, Inc. is certified under the EU-U.S. Data Privacy Framework (Art. 45 GDPR); in addition, the European Commission’s standard contractual clauses under Implementing Decision 2021/914 apply (Art. 46 GDPR).

Each time a page is called up, data transmitted by your browser is automatically recorded in what are known as server log files:

• IP address of the accessing device
• date and time of access
• name and URL of the file retrieved
• volume of data transferred and notification of successful retrieval
• browser type and operating system used
• previously visited page (referrer)

Legal basis: Art. 6(1)(f) GDPR (legitimate interest). Our legitimate interest lies in the technically faultless operation and the security of the website. This data is not merged with other data sources, nor evaluated for marketing purposes.

Storage period: According to Netlify, access logs containing IP addresses are stored for no longer than 30 days; logs of the server functions are kept for up to 7 days, depending on the plan. We do not keep server log files of our own – the processing takes place exclusively at the provider.

Still to be verified: Netlify’s certification status under the Data Privacy Framework should be checked once before going live.

If you contact us via the contact form, by email or by phone, we process the data you provide in order to answer your enquiry.

Data processed: name, email address, optionally phone number, the subject you selected and the content of your message.

Purpose: handling and answering your enquiry and, where applicable, preparing an order.

Legal basis: Art. 6(1)(a) GDPR (your consent, which you give expressly when submitting) and Art. 6(1)(b) GDPR insofar as the enquiry is aimed at concluding a contract.

Transmission: Your enquiry is processed by a server function of our host Netlify, which runs on servers in the USA (Ohio region) – see section 3 – and is delivered by email to our mailbox. The enquiry is not stored in a database. For dispatch we use the email provider Brevo SAS, 55 rue d’Amsterdam, 75008 Paris, France (RCS Paris 498 019 298). Dispatch takes place via data centres within the European Union; no transfer to a third country occurs in this step. A data processing agreement pursuant to Art. 28 GDPR is in place with the provider.

Storage period: We keep your enquiry for as long as it is required in order to process it. We then delete it, unless statutory retention obligations (in particular under the Commercial Code and the Federal Fiscal Code, generally seven years) prevent this.

Withdrawal: You may withdraw your consent at any time without any particular form, for example by email to e.cohen@gmx.at. This does not affect the lawfulness of processing carried out up to the point of withdrawal.

Spam protection: The form contains an additional field that is invisible to you (a “honeypot”) and serves solely to detect automated submissions. No personal data is transmitted to third parties and no captcha service is embedded.

On our contact page we embed a Google Maps map so that you can find us more easily. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Two-click solution: The map is not loaded automatically. As long as you do not click “Load map”, no connection whatsoever is established to Google servers and no data is transmitted to Google. Only your click constitutes consent to loading it.

Data transmitted after loading: in particular your IP address, information about your browser and device, and the page called up. Google may process this data on its own responsibility and may also transfer it to third countries, in particular the USA. To the best of our knowledge, Google LLC is certified under the EU-U.S. Data Privacy Framework; standard contractual clauses apply in addition. We have no influence over Google’s further processing.

Legal basis: Art. 6(1)(a) GDPR (consent). For the transfer to third countries we additionally rely on Art. 49(1)(a) GDPR (explicit consent).

Withdrawal: Below the loaded map you will find the button “Hide map & withdraw consent” at any time. Alternatively you can clear your browser’s local storage for this website.

Further information can be found in Google’s privacy policy. If you prefer not to load the map, simply use the text link “Open in Google Maps” – this takes you directly to Google without anything being embedded here.

If you tick the option “Remember my choice for future visits” when loading the map, we store a single technical value in your browser’s local storage (key kmv:maps-consent). This value contains no personal data, is not transmitted to our server and serves solely to avoid having to ask for your consent on every visit. Nothing is stored without action on your part. You can remove the value at any time using the withdrawal button or via your browser settings.

Your data is passed on exclusively to the following categories of recipients, and only insofar as this is necessary for the purpose described:

• our hosting provider (processor)
• our email provider for the delivery of enquiries (processor)
• Google Ireland Ltd., exclusively after your explicit consent to the map

We do not sell your data or pass it on for advertising purposes. No automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place.

Under the GDPR you are generally entitled to the following rights:

• Access to the data processed about you (Art. 15)
• Rectification of inaccurate data (Art. 16)
• Erasure (Art. 17)
• Restriction of processing (Art. 18)
• Data portability (Art. 20)
• Objection to processing (Art. 21)
• Withdrawal of consent given, with effect for the future (Art. 7(3))

An informal message to e.cohen@gmx.at is sufficient to exercise these rights.

If you believe that the processing of your data infringes data protection law, you may lodge a complaint with the Austrian supervisory authority:

Austrian Data Protection Authority
Barichgasse 40–42, 1030 Vienna, Austria
Phone: +43 1 52 152-0
Email: dsb@dsb.gv.at
Web: www.dsb.gv.at

This website is delivered exclusively in encrypted form via HTTPS. This protects the data transmitted between your browser and our server – such as the content of the contact form – against being read by third parties.

We will adapt this privacy policy as soon as data processing on this website changes or new legal requirements make this necessary.