TEMPRASTONES is part of Aurox GmbH. Privacy Policy is available in German.

------------------------------------------

PRIVACY POLICY
We are delighted by your visit to our online shop and your interest in our products. Aurox GmbH wants you to feel comfortable on our website and not have to worry about the confidentiality of your data. Therefore, we consider transparency in handling our customers' data to be extremely important. Below, we would like to inform you about what personal data we collect, for what purposes we process your personal data, and what rights you have.

According to Article 4(1) GDPR, personal data means any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

Table of contents

General information
I. Name and address of the responsible party

B. Data processing operations
I. Provision of the website
II. Use of Cookies
III. Data processing when using our online shop
IV. Newsletter
V. Contact form, telephone and email
Data subject rights

D. Other
I. Scope of your obligation to provide us with your data
II. Disclosure to third parties
Version III

Brief overview

We take data protection very seriously, and this naturally also applies to the personal data that we collect, use, and process from you when you use our Aurox GmbH online shop.

Valid from May 25, 2018

- Important contact details for us as the responsible body: (see AI below)

- Categories of data
In particular, we process the following categories of personal data about you:

– Transaction data for purchases via the Aurox GmbH online shop,

– Communication data collected when using web forms, via email and/or telephone,

– technical data of your device, which is collected when you visit our website,

– Pseudonymous data within the framework of web analytics tools

In some cases you provide this data directly (e.g. as part of your purchase) and in some cases we collect this data automatically (e.g. when you visit our online shop).

- Processing purposes

We process your data in particular to provide services related to a purchase via our Aurox GmbH online shop, as well as for analysis purposes, with the intention of continuously adapting our services and enabling you to have an optimal shopping experience.

- Legal basis

The processing of your data is necessary in particular for the execution of a purchase agreement concluded with you via the Aurox GmbH online shop and for the pursuit of our legitimate interests.
Where consent is legally required, we ask for your consent.

- Categories of recipients of your data

In addition to the responsible body, external service providers who support us in providing our services may have access to certain types of your personal data.

- Duration of data storage

We generally process and store your data for the duration of our contractual relationship and to achieve the purposes associated with the respective processing operation. If required by law, certain personal data will also be stored for a longer period.

- Your data protection rights, in particular your right to object (see section C below)

Under certain conditions, you can assert your data protection rights against us. In particular, we would like to inform you of your right to object: If there are specific grounds arising from your particular situation, you have the right to object to the processing of your data if we base the lawfulness of the data processing on a balancing of interests or if the data processing concerns profiling or direct marketing. In principle, we will then no longer process your data.



General information
I. Name and address of the responsible party
The controller responsible for the Aurox online shop within the meaning of the General Data Protection Regulation and other national data protection laws of the member states as well as other data protection regulations is:
Aurox GmbH
Stremayrgasse 16/IV
8010 Graz
Email: dataprotection@auroxtech.com

Data processing operations
I. Provision of the website
1. Description and scope of data processing
When you use our website for purely informational purposes, i.e., if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server when you access our website:

- IP address (possibly in anonymized, shortened form)
- Date and time of the request,
- Time zone difference to Greenwich Mean Time (GMT),
- Content of the request (specific page),
- Access status/HTTP status code,
- the amount of data transferred in each case,
- Website from which the request originates,
- Browser type,
- Operating system and its interface,
- Language and version of the browser software.

The data is also stored in our system's log files. This data is not stored together with other personal data of the user. The anonymous data from the server log files is stored separately from any personal data provided by a data subject.

a) Hosting services provided by a third-party provider
As part of processing on our behalf, a third-party provider hosts and displays our website. This serves our legitimate interest in the correct presentation of our offerings, which outweighs any conflicting interests. All data collected through the use of this website or via forms provided in the online shop, as described below, is processed on their servers. Processing on other servers only takes place within the scope described here. This service provider is located in Canada, a third country considered to offer a secure data protection policy under Directive 95/46/EC.
Legal basis for data processing
The legal basis for the temporary storage of the data is Art. 6 para. 1 lit. f GDPR.
Purpose of data processing
When you visit our website, we collect the data mentioned in section 1, as it is technically necessary to display our website to you and to ensure the stability and security of the system. This data is stored in log files to ensure the website's functionality. Furthermore, we use the data to optimize the website and to ensure the security of our IT systems. These purposes also constitute our legitimate interest in data processing pursuant to Article 6(1)(f) GDPR.
Storage duration
The data will be deleted as soon as it is no longer needed for the purpose for which it was collected. In the case of data collected for the provision of the website, this is the case when the respective session ends, i.e., when you leave our website.
Opportunity to object and have the matter rectified
The collection of data for the provision of the website and the storage of data in log files is essential for the operation of the website. Therefore, there is no possibility for the user to object.

Use of cookies
1. Description and scope of data processing
We want to continue making our services as personalized as possible and constantly improve them to offer you relevant information and an attractive shopping experience. Therefore, we sometimes use cookies. Cookies are small text files that are stored on your hard drive and assigned to the browser you are using. These files allow the entity that sets the cookie (in this case, us) to receive certain information. A cookie contains a unique string of characters that enables the browser to be uniquely identified when the website is visited again. Cookies cannot run programs or transmit viruses to your computer. We use cookies to make our website more user-friendly. If you do not wish to receive cookies, you can configure this accordingly in your internet browser settings. Please note, however, that certain cookies are necessary to use all the functionalities of our website.
We use both session cookies, which are only active for the duration of an online visit, and persistent cookies. Persistent cookies are used in particular to provide you, as a customer, with recurring settings in the AUROX online shop, such as personalized information to enhance your user experience and present you with offers tailored to your previous purchasing behavior.
We use the following types of cookies, the scope and function of which are explained below:

- Transient cookies (e.g. session cookies) (see a)
- Persistent cookies (see b).

a) Transient cookies
Transient cookies – which include session cookies – are usually automatically deleted when you close your browser or a session expires. These cookies store a session ID, which allows different requests from your browser to be associated with the same session. This allows your computer to be recognized when you return to our website. Session cookies are generally deleted when you log out or close your browser. The following data is stored and transmitted in session cookies:
Language settings
• any login information
• Visitor ID
• Timestamp showing the start and end of the current session.
b) Persistent cookies
Persistent cookies are automatically deleted after a predetermined period, which varies depending on the cookie. You can delete or disable cookies yourself at any time in your browser's security settings. For the purpose of tailoring and optimizing our website, data is collected and stored, and user profiles are created from this data using pseudonyms. However, user profiles are not merged with data about the holder of the pseudonym without the visitor's explicit consent. When you visit our website, a banner informs you about the use of cookies for analytical purposes and refers you to this privacy policy.
a) Social Media Cookies
Social media plugins are integrated into the website to allow you to recommend and share articles on social networks such as Facebook, Instagram, Twitter, and Pinterest. We use a two-step process for this. Data is only transferred to third parties when you, as a website visitor, click on one of the icons displayed in the social media bar. AUROX has no influence on, nor access to, the cookies set by Facebook, Twitter, etc.
b) Web analytics
If you have given your consent pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR, this website uses Google Analytics, a web analytics service provided by Google LLC (www.google.de), for the purpose of website analysis. Google Analytics uses methods that enable analysis of your use of the website, such as cookies. The information automatically collected about your use of this website is generally transmitted to and stored on a Google server in the USA. By activating IP anonymization on this website, your IP address is shortened before transmission within the member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. The anonymized IP address transmitted by your browser as part of Google Analytics will generally not be merged with other Google data. The data collected in this context will be deleted once the purpose for which it was collected has been fulfilled and we have ceased using Google Analytics.
Google LLC is headquartered in the USA and is certified under the EU-US Privacy Shield. A current certificate can be viewed here. Based on this agreement between the USA and the European Commission, the latter has determined that companies certified under the Privacy Shield provide an adequate level of data protection.

You can withdraw your consent at any time with effect for the future by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de. This will prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) as well as the processing of this data by Google.

As an alternative to the browser plugin, you can click this link to prevent Google Analytics from collecting data on this website in the future. This will place an opt-out cookie on your device. If you delete your cookies, you will be asked for your consent again.

c) Facebook Custom Audiences
We use Facebook Website Custom Audiences on our website. For this purpose, so-called Facebook pixels are integrated into our websites. These are JavaScript code. These pixels generate a checksum (hash value) from your usage data, which is transmitted to Facebook, e.g., browser information. If available, the Facebook cookie is also accessed and your Facebook ID is transmitted. If you have a Facebook profile and are logged in, you can be shown targeted, personalized advertising for AUROX products and offers based on the data transmitted by the pixels. Data from users who do not have a Facebook profile is discarded by Facebook without being used. For further information about the purpose and scope of data collection and the further processing and use of data by Facebook, as well as your privacy settings, please refer to Facebook's privacy policy at https://de-de.facebook.com/privacy/explanation.
If you do not wish for your data to be collected, you can object and deactivate data collection via the following link: https://www.facebook.com/help/769828729705201/

Legal basis for data processing
The legal basis for the processing of personal data using cookies is Article 6(1)(f) GDPR.
Purpose of data processing
Transient cookies are used to simplify the use of our website for individual users. Some functions of our website cannot be offered without the use of cookies. For these functions, it is necessary that the browser is recognized even after a page change. Transient cookies are used, for example, for the functionality of the shopping cart, the saving of language settings, and the remembering of search terms.
The use of persistent analytics cookies is for the purpose of improving the quality of our website and its content. These cookies allow us to understand how the website is used and thus continuously optimize our offerings.
Without your consent, analytical data is collected only anonymously or pseudonymously. We cannot identify you through this process. Therefore, our legitimate interest in processing personal data for these purposes is based on Article 6(1)(f) of the GDPR.
Duration of storage, right to object and erasure
Cookies are stored on your computer and transmitted from there to our website. Therefore, as a user, you have full control over the use of cookies. By changing the settings in your internet browser, you can deactivate or restrict the transmission of cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically.
Please note that you can configure your browser to notify you when cookies are being set, allowing you to decide whether to accept them individually, or to block cookies in certain cases or entirely. Each browser manages cookie settings differently. This is described in the help menu of each browser, which explains how to change your cookie settings. You can find this information for the respective browsers at the following links:
Internet Explorer: http://windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies
Firefox: http://windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies
Chrome: http://windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies
Safari: https://support.apple.com/kb/ph21411?locale=de_DE
Opera: http://help.opera.com/Windows/10.20/de/cookies.html

Please note that if you do not accept cookies, the functionality of our website may be limited.

III. Data processing when using our online shop
1. Description and scope of data processing

a) Purchase in the online shop
When you shop in the AUROX online shop, the following personal data may be collected, processed and used to process your order:
- Name,
- First name,
- Title,
- Billing and shipping address,
- E-mail address,
- Telephone number,
- Payment method

(“Customer master data”).

Your data is encrypted using the latest technical security standards, specifically SSL 128-bit encryption (SSL = Secure Socket Layer) (TLS 1.2), when transmitted to us. The security certificate used is issued by Let's Encrypt.

To ensure the best possible service for our customers, we only share their personal data with other companies that we have appointed as data processors, within the legally permissible framework, exclusively for the proper fulfillment of the contract and only to the extent necessary, and ensure that your data is only processed according to our instructions.

b) Payment method
PayPal, credit card, and instant bank transfer data are not stored by us, but are collected and processed directly by our payment service providers "PayPal (Europe) S.à.rl et Cie, SCA", "Paymill GmbH", "Directebanking" and "Bitpay, Inc." We protect our website and other systems through technical and organizational measures against loss, destruction, access, alteration, or distribution of your data by unauthorized persons.
c) Customer account
Access to your customer account is only possible after entering your personal password. You should always keep your login information confidential and close the browser window when you have finished communicating with us, especially if you share the computer with others.
Legal basis for data processing
a)The legal basis for processing your data in connection with the purchase and purchase initiation in our online shop is Art. 6 para. 1 lit. b GDPR.
b)The legal basis for the transfer of your data to external payment service providers is Art. 6 para. 1 lit. a and b GDPR.

3. Purpose of data processing
a) We use your personal data, which we receive during your use of our online shop, to initiate and process purchase agreements concluded via the online shop, as well as for customer service and advice. Furthermore, we also use your personal data to assert rights arising from purchase agreements concluded or initiated with you.
b) Your data will be processed during the payment process in order to carry out the payment method you have chosen.
c) Your email address is shared with shipping service providers so that they can inform you about the status of your shipment and allow you to plan when the package will arrive at the shipping address.
Storage duration
We process and store your data, in principle, for the duration of our contractual relationship. This also includes the initiation of a contract (pre-contractual legal relationship).
In the event of a contract being concluded, all data from the contractual relationship will be stored until the expiry of the statutory retention period for tax purposes (7 years).

The data (name, address, purchased goods, and date of purchase) will be stored beyond this period until the product liability period expires (10 years). Data processing is based on the legal provisions of Section 96 Paragraph 3 of the Telecommunications Act (TKG) and Article 6 Paragraph 1 Letter a (consent) and/or Letter b (necessary for the performance of a contract) of the GDPR.

Newsletter
You have the option to subscribe to our newsletter via our website. For this, we require your email address and your confirmation that you agree to receive the newsletter. To provide you with targeted information, we also collect and process voluntarily provided information about your areas of interest, date of birth, postal code, and language.
Once you have subscribed to the newsletter, we will send you a confirmation email with a link to confirm your subscription. You can unsubscribe at any time. A link to unsubscribe is included at the end of every newsletter.

Contact form and email contact, telephone
1. Description and scope of data processing
On our website, we provide, among other things, a contact form, an email address, and a telephone number. You also have the option of contacting us via various social media platforms (Facebook, Instagram). This allows you to contact our customer service directly. If and when you contact us via the contact form provided on our website, by email, telephone, fax, or social media platforms and request information about your orders or customer status, it may be necessary for you to provide us with certain personal data, such as your name, address, email address, date of birth, order number, or invoice number, in order to process your request properly. This data will be used exclusively for the purpose of verifying and processing your request. If you contact us via a social media platform, please note that these platforms are not owned or controlled by AUROX, and therefore the protection and confidentiality of the data you provide to us via the respective social media platform cannot be guaranteed. For questions regarding data protection, please contact the operators and owners of the respective social media platform.
In this context, no data will be shared with third parties. The data will be used exclusively for processing the conversation.

Legal basis for data processing
The legal basis for processing the data you provide us with in connection with your inquiry is Article 6(1)(f) GDPR. If the contact aims at concluding a contract, the additional legal basis for processing is Article 6(1)(b) GDPR.
Purpose of data processing
The processing of personal data via the respective contact channel serves solely to process your inquiry and address your request. This also constitutes the necessary legitimate interest in processing the data.
The other personal data processed during the sending process serves to prevent misuse of the contact form and to ensure the security of our information technology systems.

Storage duration
The data will be deleted as soon as it is no longer required for the purpose for which it was collected. For personal data from the contact form and data transmitted by email, this is the case when the respective conversation with the user has ended. A conversation is considered ended when it is clear from the circumstances that the matter in question has been resolved. However, we may need to store certain personal data from the communication for a longer period (e.g., for evidentiary purposes, if agreements regarding purchases were made during the communication, goodwill decisions by AUROX, agreements regarding payments and warranty claims, etc.).
Data subject rights
Under certain conditions, you can assert your data protection rights against us:
- Right to withdraw consent: If you have given your consent for certain types of processing activities, you can withdraw this consent at any time with effect for the future. However, this withdrawal does not affect the lawfulness of the processing before the withdrawal of your consent or insofar as the processing can be justified on another legal basis.

- Right to information: You have the right to obtain information from us about your data stored with us in accordance with the rules of Art. 15 GDPR.

- Right to rectification: Upon your request, we will rectify the data stored about you in accordance with Article 16 GDPR if it is inaccurate or incorrect.

- Right to erasure: If you wish, we will erase your data in accordance with the principles of Article 17 GDPR.

- Right to restriction of processing: Taking into account the conditions of Art. 18 GDPR, you can request that we restrict the processing of your data.

Right to object: You also have the right to object to the processing of your data pursuant to Article 21 GDPR. This right to object exists if there are specific grounds relating to your particular situation and only applies to data processing whose lawfulness is based on a balancing of interests, which involves profiling, or which is carried out for direct marketing purposes. In this case, we will no longer process your data unless we are legally entitled to reject your objection. However, an objection to direct marketing, including profiling, is mandatory for us, and we may no longer process your data for these purposes.
If you have given your consent for direct marketing and no longer wish to receive this direct marketing, you must revoke your consent.

- Right to data portability: You also have the right to receive your data in a structured, commonly used and machine-readable format or to transmit it to a third party in accordance with the regulations of Art. 20 GDPR.

- Complaint to the data protection authority: You also have the right to lodge a complaint with any competent data protection supervisory authority (Art. 77 GDPR). If you believe that data protection law has been violated or that your data protection rights have otherwise been infringed, you can lodge a complaint with the supervisory authority.

Miscellaneous
I. Scope of your obligation to provide us with your data
You only need to provide the data that is necessary for establishing and carrying out the contractual relationship or for a pre-contractual relationship with us, or that we are legally obligated to collect. Without this data, we will generally be unable to conclude or further perform the contract. This may also apply to data required later in the course of the contractual relationship. If we request additional data from you, you will be informed separately about the voluntary nature of providing this information.
Disclosure to third parties
AUROX GmbH only has access to your data to the extent necessary to achieve the purposes according to the internal division of tasks. Internally, access to your data is granted only to those departments and employees who require it.
Service providers: We have engaged service providers who, as data processors, have access to your data and process it for specific purposes defined by us. These data processors may include marketing service providers, website hosting providers, IT support providers, website analytics providers, and shipping providers.

Other third parties: Should it be legally required, we would also be obligated to disclose certain data to third parties. These may include authorities, external consultants, business partners, courts, experts, as well as internal company committees and control bodies, if necessary.
International Data Transfer: Although all recipients are currently located within the EU/EEA or in safe third countries, it cannot be ruled out that recipients may be located in a country outside the EU/EEA in the future that does not offer a level of data protection equivalent to the European level. In particular, service providers may be located in the USA in the future. In this case, AUROX will either select service providers that are certified under the EU-US Privacy Shield program (Art. 45 para. 1 GDPR) or that agree to the EU Standard Contractual Clauses with AUROX, as approved by the EU Commission (Art. 46 para. 2 (c) or (d) GDPR).

Version III
This privacy policy was last updated on January 8, 2023. AUROX GmbH reserves the right to update this privacy policy from time to time.