Privacy-policy

A) General Information
The data controller is: Werner Ramschak S.P., Kobjeglava 20, 6222 Stanjel, Slovenia.

B) Collection and Processing of Personal Data
If personal data is voluntarily provided as part of a registration (e.g., contact form, newsletter, competition, Facebook, Instagram or similar) or if you consent to the use of cookies (see https://karststonecottage.com/cookie-policy), this data will be collected and processed.

All personal data will be collected, processed and used in accordance with the applicable data protection regulations primarily for the purpose of the services you have requested and to process your inquiries.

We obtain your data when:

  1. It is provided by you

You are not required to provide personal data to use our website.

However, if you wish to use a service from us (e.g., competition, newsletter, contacting us, …), then personal data is necessary for us to provide this service.

  1. You use our services and/or provide us with your data in this context

Some data is automatically generated for technical reasons as soon as you visit our site. This is technically necessary to display our website stably and to ensure security. When pages are accessed or files are retrieved, the access details of this process are logged as follows:

  • Access date and time

  • Your IP address

  • The website from which the page is accessed

  • Retrieved data volumes

  • Details of the retrieved file or page

  • Retrieval success including reason for any failure

  • Operating system and browser software of your computer

C) Purpose, Legal Basis, Storage Duration and Data Recipients
The legal bases for processing your personal data are:

  • Your consent (Art. 6 para. 1 lit. a GDPR) (e.g., contact form, newsletter, cookies, etc.)

  • Fulfillment of legal obligations (Art. 6 para. 1 lit. c GDPR)

  • Legitimate interests (Art. 6 para. 1 lit. f GDPR)

  • Contract performance (Art. 6 para. 1 lit. b GDPR)

If you have given your consent to the processing of your personal data, this will only be done in accordance with the purposes specified in the consent declaration and to the extent agreed therein. Consent may be revoked at any time (see also section H).

To initiate and conduct our business relationship, e.g., competitions, you must provide us with personal data so that we can process it. If you do not, we must generally refuse to conclude a contract or provide certain services.

Irrelevant data that is not required for the fulfillment of the respective service does not need to be provided.

Your personal data will be processed for the duration of the business relationship and beyond in accordance with legal retention and documentation obligations, or as long as our interest in retaining it to defend against potential liability claims exists.

Only those employees within Werner Ramschak S.P. who need your data to fulfill contractual and/or legal obligations or to protect legitimate interests will receive your data. Additionally, companies contracted by us will receive your data if required for their tasks. These companies are obligated to comply with the applicable data protection laws.

D) Google Analytics
If you grant your consent, we use the service Google Analytics, Google LLC, Amphitheatre Parkway, Mountain View, CA 94043, USA, as joint controllers to process your personal data for the purpose of error analysis and statistical evaluation of our website. Failure to grant consent has no direct effect on the functionality of the website, but without statistical data, further development of the website is more difficult. Consent can be revoked by changing the privacy settings.

We enable the service to collect connection data, data from your web browser, and data about the content accessed, as well as to run analysis software and store data on your device. The service anonymizes the collected data immediately and provides us with anonymized data in the form of statistics. We use these statistics for troubleshooting and website development. The data on your device is stored for up to two years.

The legal basis is your consent according to Art. 6 para. 1 lit. a GDPR. Google transmits your personal data to the USA. The legal basis for this transfer is your consent under Art. 49 para. 1 lit. a in conjunction with Art. 6 para. 1 lit. a GDPR and §25 TTDSG. You were informed before giving your consent that the USA does not have an adequate level of data protection according to EU standards. In particular, US intelligence services may access your data without informing you and without legal recourse. For this reason, the European Court of Justice invalidated the previous adequacy decision (Privacy Shield).

F) Facebook Pixel
If you grant your consent, we use the Facebook Pixel service, Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, as joint controllers to process your personal data for personalized advertising and measuring advertising success.

Failure to consent has no direct effect on website functionality, but without consent, we cannot display personalized ads on your devices. Consent can be revoked by changing the privacy settings.

We enable the service to collect connection data, browser data, and content usage data. We also allow the use of tracking and recognition software and data storage on your device. This allows the service to enhance its advertising network and recognize you when visiting other websites, as well as serve personalized ads. We also use the data to measure advertising success. Data on your device is stored for up to two years.

The legal basis is your consent according to Art. 6 para. 1 lit. a GDPR.

Meta transmits your personal data to the USA. The legal basis for this transfer is your consent under Art. 49 para. 1 lit. a in conjunction with Art. 6 para. 1 lit. a GDPR and §25 TTDSG. You were informed before giving your consent that the USA does not have an adequate level of data protection according to EU standards. In particular, US intelligence services may access your data without informing you and without legal recourse. For this reason, the European Court of Justice invalidated the previous adequacy decision (Privacy Shield).

G) Interaction with Social Networks
These services enable interaction with social networks directly from the pages of the website. Interactions and information collected via this website are subject to the respective social network’s privacy policy. If a service for interaction with social networks is installed, the website may collect traffic data from the pages, even if users do not use the service.

Embedded Content from External Platforms
These services allow content hosted on external platforms to be displayed directly on this website and interacted with. Even if users do not use the services, the website may collect traffic data.

This website uses:

  • YouTube (Google Ireland Limited)
    YouTube allows video content to be integrated into our pages.
    Personal data collected: cookies and usage data.
    Processing location: Ireland – https://policies.google.com/privacy

H) Our Services

  • Contact Form
    When you contact us via the contact form or email, we store the data you provide to answer your questions. We delete the data when it is no longer needed unless legal obligations apply.

  • Newsletter
    We only send newsletters and marketing emails with your consent or legal permission. If content is described during registration, this is relevant to the consent.
    Your data is used only for newsletter delivery unless you consent to further use.
    Data is collected only by us and our processors (see section C). No data is shared with unauthorized third parties.
    Newsletters are sent using „The Newsletter Plugin“ by Web Agile Sas di Fietta Roberto in Mussolente (VI), via Trieste 8, Italy. Privacy policy: https://www.thenewsletterplugin.com/legal/privacy
    You may unsubscribe at any time.

  • Competition
    Competitions may be organized by us or our processors (see section C). The following personal data may be collected: salutation, full name, address, email address, and phone number. This data is used to notify winners and deliver prizes. If a cooperation partner provides the prize, data may be passed to them for delivery purposes. The partner will be named during the competition.
    Data is used exclusively for managing the competition unless additional consent is given. Data is generally deleted six months after the competition ends.
    Data may be analyzed anonymously for statistical purposes.

I) Consent and Right of Withdrawal
If your consent is required for data processing, we will only process it with your express approval.

We do not process data of minors. By giving your consent, you confirm that you are at least 14 years old or have the consent of a legal guardian.

You can withdraw your consent at any time via the email provided in section L. In this case, stored data will be anonymized and used only for statistical purposes without personal reference. Withdrawal does not affect the lawfulness of processing based on consent before withdrawal.

J) Data Security
Data security is important to us. We take technical and organizational measures to protect your personal data against accidental or intentional manipulation, loss, destruction or unauthorized access by third parties. Our security measures are continuously improved in line with technological progress.

K) Your Rights
You have the right to access, rectify, delete, restrict, transfer data, and to withdraw consent or object. You also have the right to lodge a complaint with a supervisory authority. More information on authorities in the EU: https://ec.europa.eu/justice/article-29/structure/data-protection-authorities/index_en.htm

L) Information and Contact
After verifying your identity, we are happy to inform you which personal data we have stored, and you can request deletion unless the data is still required for contractual purposes, must be retained legally, or is needed to defend against liability claims.
You can contact us via email at karst.stone.cottage@gmx.at