Privacy policy

We take the protection of your personal data very seriously and endeavor to make the use of our website safe. We guarantee that we comply with the statutory data protection regulations.
Please read this privacy statement carefully.

With this declaration, the Firefin GmbH, Weyringergasse 34/4, 1040 Wien, Austria (hereinafter referred to as "Firefin", "we" or "us") informs the users of the website firefin.surf (hereinafter referred to as "Site"). in accordance with the provisions of the General Data Protection Regulation (hereinafter referred to as "GDPR") about the nature, scope and purpose of the collection and use of personal data.

1. Responsible for data protection is the
Firefin GmbH
Weyringergasse 34/4
1040 Wien
Austria
E-Mail: contact@firefin.surf

2. Definitions
The following definitions are used in this privacy statement:

Personal Data
Personal data is any information relating to an identified or identifiable natural person (hereinafter referred to as "data subject"). For example, the following data are personal data: Name, home address, IP addresses, location data, Internet usage data, etc.

Processing
Processing means any operation carried out with or without the aid of automated processes relating to personal data, such as collection, organization, sorting, storage, adaptation or alteration, retrieval, consultation, use, disclosure, limitation, erasure or destruction.

Data Subject
The data subject is an identified or identifiable natural person whose personal data are processed. This includes, for instance, visitors to our website.

Consent
Any voluntary, informed and unequivocal statement of intent, in the form of a statement, in which the data subject indicates his or her consent to the processing of personal data concerning him or her.

Controller
The data controller is the natural or legal person who alone or jointly with others decides on the purposes and means of the processing of personal data.

Processor
The processor is the natural or legal person who processes personal data on behalf of the data controller. The processor is subject to the instructions of the person responsible and is contractually bound by us to process the data in accordance with data protection law.

3. Personal Data we collect

Device Information
When you visit the Site, we automatically collect the following data in so-called web server log files:

• IP address
• Date and time of website access
• Browser and browser version
• the operating system
• the address (URL) of the previously visited page (referrer URL)

This data is used to further improve our website and for possible troubleshooting. The web server log files are stored for a maximum of 6 weeks and are then automatically deleted. If there is a concrete illegal use of our website, this data will be viewed for the purpose of possible prosecution and will eventually be further processed.

Pursuant to Art 6 Para. 1 lit. f GDPR, the legal basis is that we have a legitimate interest in ensuring the error-free operation of this website by recording web server log files and making our services available to you.

Cookies
We use "cookies" on our website to store user-specific data. A "cookie" is a small text file that is exchanged between a web browser and a web server. This enables our website to recognize you as a user when a connection is established between our web server and your browser. Cookies help us to determine the frequency of use and the number of users of our Internet pages. The content of the cookies we use is limited to an identification number that no longer allows any personal reference to the user. The main purpose of a cookie is to recognize visitors to the website.

Two types of cookies are used on this website:
• Session cookies (transient cookies): These temporary cookies remain in the cookie file of your browser until you leave our website and are automatically deleted at the end of your visit.
• Persistent Cookies: For better usability, these cookies remain stored on your device and allow us to recognize your browser the next time you visit.

You can set your browser so that you get informed, when cookies are set and only allow cookies in individual or a specific kind of cases, or generally exclude them. You can also activate the automatic deletion of cookies, when the browser is closed. If cookies are deactivated, the functionality of this website may be restricted, and you may not be able to use all the functions of this website.

We use cookies to make our website more user-friendly. Some cookies remain stored on your device until you delete them. They allow us to recognize your browser the next time you visit.

Here you will find specific instructions for the most common browsers:
Google Chrome: https://support.google.com/chrome/answer/95647?hl=de
Morzilla Firefox: https://support.mozilla.org/de/kb/Cookies-von-Drittanbietern-blockieren
Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies

Pursuant to Art 6 para. 1 lit. f GDPR, the legal basis is that we have a legitimate interest in further improving the services offered on the website.

Online Shop Purchase and Delivery
We process your personal data (contact details, shipping address, payment information) which you provide to us in the course of buying our products on our online shop in order to transact your purchase and to deliver your purchased products. This processing includes also electronic notifications about your current order and delivery status via E-Mail and/or SMS. Your data processed in this context will only be disclosed to logistic companies and payment service providers. Logistic companies as well as payment service providers act as independent controller according to Art 4 (7) GDPR. 

The legal basis of the data processing is the performance of a contract  according to Art 6 para. 1 lit. b GDPR”

Newsletter
If you have subscribed to our newsletter, we will also process your e-mail address for the purpose of sending you the newsletters you have requested. For the newsletter dispatch, we use a processor in accordance with GDPR.

The legal basis of the data processing is the separate consent according to Art 6 para. 1 lit. a GDPR

If you no longer wish to receive our newsletter, please send us an e-mail with the subject "Unsubscribe from the newsletter" to the following e-mail address: contact@firefin.surf

Google Analytics
Our website uses Google Analytics, a web analysis service provided by Google Inc., 1600 Amphitheatre Parkway Mountain View, CA 94043, USA (hereinafter referred to as "Google"). Google Analytics uses "cookies" (see point 5.). The information generated by the cookie about your use of the website will generally be transmitted to and stored by Google on servers in the United States. However, if IP anonymisation is activated on this website, your IP address will be shortened by Google in advance within the member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA, where it will be shortened. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services relating to website activity and internet usage to the website operator.

The IP address transmitted by your browser as part of Google Analytics is not combined with other data from Google.

You can prevent cookies from being saved by making the appropriate settings in your browser software. You can also prevent the collection of data generated by the cookie and relating to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl=de.

If you disable cookies, the functionality of this website may be limited and you may not be able to use all the features of this website.

This website uses Google Analytics with the extension "_anonymizeIp()". This means that IP addresses are shortened for further processing and that it is not possible to identify you personally. If the data collected about you is personally related, this will be excluded immediately, and the personal data is deleted without delay.

We use Google Analytics to analyse the use of our website and to improve it regularly. The statistics obtained allow us to improve our services and make them more interesting for you as a user. For the exceptional cases, in which personal data is transferred to the USA, Google has submitted to the EU-US Privacy Shield: https://www.privacyshield.gov/EU-US-Framework.

Third Party information: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001;

Terms of use: http://www.google.com/analytics/terms/de.html;
Data protection overview: http://www.google.com/intl/de/analytics/learn/privacy.html;
as well as the Privacy Statement: http://www.google.de/intl/de/policies/privacy.

Pursuant to Art 6 para. 1 lit. f GDPR, the legal basis is that we have a legitimate interest in further improving the content of the website and making it more user-friendly.

4. Data security
The security of your personal data is of particular concern to us. Therefore, we take all appropriate technical and organizational measures in accordance with Art 32 GDPR, taking into account the state of the art, the implementation costs and the type, extent, circumstances and purposes of the processing as well as the probability of occurrence and severity of the risk to the rights and freedoms of natural persons.

5. Storage period of personal data
We only store your personal data for as long as we need it to fulfil the above-mentioned purposes and our contractual or legal obligations. If your personal data is no longer needed, it will be irrevocably deleted or anonymized (so that it cannot be traced back to you).

6. Your rights (rights of data subjects)
You have the right to access personal information we hold about you. Furthermore, you have the right to correction, objection, deletion, restriction of processing and data transferability and can revoke your consent at any time. You also have the possibility to lodge a complaint with a data protection supervisory authority, in particular in the Member State in which you are located, in which you work or in which the alleged breach occurs.

7. Changes
We may update this privacy policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal or regulatory reasons.