Privacy Policy of www.mrnongnong.at

To obtain information about your personal data, the purposes of processing, and the parties with whom this data is shared, please contact the Data Controller.

Data Controller and Responsible Party

Types of Data Collected

The Data Controller does not provide a list of the personal data collected.

Full details on each type of personal data processed are provided in the relevant sections of this privacy policy or through specific explanatory texts displayed prior to the data collection.

Personal data may be provided voluntarily by the User or, in the case of Usage Data, collected automatically when this Application is used.

Unless specified otherwise, all data requested by this Application is mandatory. If the User refuses to provide it, this Application may not be able to provide its services. In cases where this Application specifically indicates that certain data is optional, Users may choose not to provide it without affecting the availability or functionality of the service.

Users who are uncertain about which personal data is mandatory are welcome to contact the Data Controller.

Any use of Cookies – or other tracking tools – by this Application or by the owners of third-party services used by this Application serves the purpose of delivering the service requested by the User, as well as any other purposes described in this document and in the Cookie Policy.

Users are responsible for any third-party personal data obtained, published, or shared through this Application.

Method and Place of Processing Data

Processing Methods

The Data Controller processes User data in a proper manner and takes appropriate security measures to prevent unauthorized access, disclosure, modification, or unauthorized destruction of data.

Data processing is carried out using computers and/or IT-enabled tools following organizational procedures and modes strictly related to the stated purposes. In addition to the Data Controller, other parties may have access to the data internally (personnel administration, sales, marketing, legal department, system administrators) or externally – and insofar as necessary, designated by the Data Controller as data processors (such as technical service providers, delivery companies, hosting providers, IT companies, or communication agencies). An up-to-date list of these parties can be requested from the Data Controller at any time.

Place of Processing

Data is processed at the Data Controller's operating offices and at any other locations where the parties involved in the processing are located.

Depending on the User's location, data transfers may involve transferring the User's data to a country other than their own. To learn more about the place of processing of transferred data, Users may refer to the section containing detailed information on the processing of personal data.

Storage Duration

Unless specified otherwise in this document, personal data will be processed and stored for as long as required by the purpose for which it was collected and may be stored longer based on a legal obligation or the User's consent.

Cookie Policy

This Application uses Trackers. Further information can be found in the Cookie Policy.

Additional Information for Users

Legal Basis for Processing

The Data Controller may process Users' personal data only if one of the following conditions applies:

• The User has given consent for one or more specific purposes.

• Processing is necessary for the performance of a contract with the User and/or for any pre-contractual obligations thereof.

• Processing is necessary to comply with a legal obligation to which the Data Controller is subject.

• Processing is related to a task carried out in the public interest or in the exercise of official authority vested in the Data Controller.

• Processing is necessary for the purposes of the legitimate interests pursued by the Data Controller or by a third party.

In any case, the Data Controller will gladly help clarify the specific legal basis that applies to the processing, particularly whether the provision of personal data is a statutory or contractual requirement, or a necessary prerequisite for concluding a contract.

Further Information on Storage Duration

Unless specified otherwise in this document, personal data will be processed and stored for as long as required by the purpose for which it was collected and may be stored longer based on a legal obligation or the User's consent.

Therefore:

• Personal data collected for the purposes of performing a contract between the Data Controller and the User will be stored until the performance of that contract is complete.

• Personal data collected for the purposes of the Data Controller's legitimate interests will be stored for as long as necessary to fulfill those interests. Users may request further information on the legitimate interests pursued by the Data Controller in the relevant sections of this document or by contacting the Data Controller.

• The Data Controller may store personal data for a longer period if the User has given consent to such processing, as long as the consent is not withdrawn. Furthermore, the Data Controller may be obligated to store personal data for a longer period if required to do so for the fulfillment of a legal obligation or by order of an authority.

Once the retention period expires, personal data will be deleted. Therefore, the rights of access, erasure, rectification, and data portability cannot be enforced after the expiration of the retention period.

User Rights under the General Data Protection Regulation (GDPR)

Users may exercise certain rights regarding their data processed by the Data Controller.

In particular, Users have the right to do the following (within the applicable legal limits):

• Withdraw consent at any time. Users may revoke previously given consent to the processing of their personal data.

• Object to processing of their data. Users have the right to object to the processing of their data if the processing is based on a legal basis other than consent.

• Access their data. Users have the right to learn if data is being processed by the Data Controller, obtain information regarding certain aspects of the processing, and obtain a copy of the data undergoing processing.

• Verify and seek rectification. Users have the right to verify the accuracy of their data and ask for it to be updated or corrected.

• Restrict the processing of their data. Users have the right to restrict the processing of their data. In this case, the Data Controller will not process the data beyond storage except as necessary for legal reasons.

• Have their personal data deleted or otherwise removed. Users have the right to request the deletion of their data from the Data Controller.

• Receive their data and have it transmitted to another controller. Users have the right to receive their data in a structured, commonly used, and machine-readable format and, if technically feasible, to have it transmitted without hindrance to another controller.

• Lodge a complaint. Users have the right to bring a claim before their competent data protection authority.

Users also have the right to be informed about the legal basis for the transfer of their data to a third country or to an international organization governed by public international law or established by two or more countries, such as the United Nations, as well as the security measures taken by the Data Controller to protect their data.

Details on the Right to Object

Where personal data is processed for a public interest, in the exercise of an official authority vested in the Data Controller, or for the legitimate interests pursued by the Data Controller, Users may object to such processing by providing a justification based on their particular situation.

Users are informed that they may object to the processing of their personal data for direct marketing purposes at any time, free of charge and without providing reasons. If the User objects to processing for direct marketing purposes, their personal data will no longer be processed for these purposes. Users may review whether the Data Controller processes their personal data for direct marketing purposes in the relevant sections of this document.

How to Exercise Rights

To exercise their rights, all requests can be directed to the Data Controller using the contact details provided in this document. These requests can be made free of charge and will be addressed by the Data Controller as early as possible and always within one month, providing Users with the information required by law. Any rectification, erasure, or restriction of processing will be notified by the Data Controller to each recipient to whom the personal data have been disclosed, unless this proves impossible or involves disproportionate effort. The Data Controller will inform the User about these recipients if requested.

Additional Information on Data Collection and Processing

Legal Actions

The User's personal data may be used by the Data Controller for legal purposes in court or in the stages leading to possible legal action arising from improper use of this Application or the related services.

The User declares to be aware that the Data Controller may be required to reveal personal data upon request of public authorities.

Additional Information on User's Personal Data

In addition to the information contained in this privacy policy, this Application may provide Users with context-specific information on specific services or the collection and processing of personal data upon request.

System Logs and Maintenance

This Application and any third-party services may use files to record interactions taking place through this Application (System Logs) or other personal data (e.g., IP address) for maintenance purposes.

Information Not Contained in This Policy

Further information about the collection or processing of personal data may be requested from the Data Controller at any time using the contact details provided.

Changes to This Privacy Policy

The Data Controller reserves the right to make changes to this privacy policy at any time by notifying Users on this page and, if possible, through this Application and/or – as far as technically and legally feasible – via any direct communication sent to the User using the contact details held by the Data Controller.

Users are therefore encouraged to regularly check this page, particularly the date of the last change indicated at the bottom.

If required by changes involving the use of data based on User consent, the Data Controller will obtain a new consent.

Last Update: April 2, 2024