Privacy and Cookie Notice for the Website

Legal Basis and Purpose Limitation

We take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.

The use of our website is generally possible without providing personal data. Insofar as personal data (e.g., name, address, or email addresses) is collected on our pages, this is always done on a voluntary basis, as far as possible. This data will not be passed on to third parties without your express consent.

Storebox uses personal data of users as far as it is necessary for the establishment, execution, and termination of the storage contract as well as for the execution of any ancillary and additional services related to it. The use of this data is carried out using electronic data processing systems. Storebox uses the following data of members: family and first name, academic title, gender, date of birth, address, telephone number, email address, bank details, and/or other personal data that members provide to Storebox during registration or during the term of the storage contract. Members' consent to data usage is given during registration on the Storebox website. Members can revoke their consent at any time.

The data you provide is required for contract fulfillment or to carry out pre-contractual measures. Without this data, we cannot conclude the contract with you. Data transfer to third parties does not take place, except for the transfer of bank data/account data to the processing banks/payment service providers for the purpose of debiting the booking fee, to the transport company/shipping company commissioned by us for the possible transport of items, to our tax consultant to fulfill our tax obligations, and to the data processors listed below due to overriding legitimate interest or in the course of contract fulfillment.

Data processing is carried out based on the statutory provisions of § 96 para. 3 TKG as well as Art. 6 para. 1 lit a (consent), lit b (contract fulfillment), lit c (fulfillment of a legal obligation), and lit f (protection of legitimate interests of the controller or a third party) of the GDPR.

Your Rights

You have the right to information, correction, deletion, restriction, data portability, revocation, and objection. If you believe that the processing of your data violates data protection law or your data protection rights have otherwise been violated in any way, you have the right to lodge a complaint with the Austrian Data Protection Authority (the current address of the Data Protection Authority can be found at this link, email: dsb@dsb.gv.at) as well as in Germany with the respective data protection officers of the federal states. The list of data protection officers and their contact details can be found here.

Data Processing

In the course of operating our website, we commission data processors who, as part of their activities, may have access to your personal data, provided they need the data to fulfill their respective services. These data processors ensure compliance with applicable data protection regulations and are obligated to us. For this purpose, we have concluded data processing agreements in accordance with Art. 28 GDPR. Further information about the data processors we commission can be requested at datenschutz@yourstorebox.com.

Data Security

At Storebox, we use technical and organizational security measures to protect the stored personal data against accidental or intentional manipulation, loss, destruction, and access by unauthorized persons. We continuously improve our security measures in line with technological progress.

SSL Encryption

This site uses SSL encryption for security reasons and to protect the transmission of confidential content, such as inquiries you send to us as the site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.

TLS Encryption

By using TLS (Transport Layer Security), an encryption protocol for secure data transmission on the Internet, we can ensure the protection of confidential data. You can recognize the use of this data transmission security by the small lock symbol at the top left of the browser and the use of the https scheme as part of our Internet address.

Cookies

Our website uses so-called cookies. Cookies do not harm your computer and do not contain viruses. Cookies serve to make our offer more user-friendly, effective, and secure. Cookies are small text files that are stored on your computer and saved by your browser.

Most of the cookies we use are so-called "session cookies." They are automatically deleted after your visit. Other cookies remain stored on your device until you delete them. These cookies enable us to recognize your browser on your next visit.

With your consent, we also use cookies for personalized and non-personalized advertising. Personal data may be transmitted to partners such as Google. Information on how Google uses personal data can be found in the Google Privacy Notices.

You can set your browser to inform you about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or generally, and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be restricted.

Server log files

The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

Browser type and version
Operating system used
referrerURL
Hostname of the accessing computer
Time of the server request

This data cannot be assigned to specific persons. This data is not merged with other data sources. We reserve the right to check this data retrospectively if we become aware of specific indications of illegal use.

Contact form

If you send us inquiries via the contact form, your details from the inquiry form, including the contact details you provided there, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. We do not pass on this data without your consent.

Data storage

We point out that for the purpose of contract processing, the following data is also stored with us: name, gender, address, date of birth, telephone number, title, and bank details of customers. The data you provide is required for contract fulfillment or to carry out pre-contractual measures. Without this data, we cannot conclude the contract with you. Data transfer to third parties does not take place, except for the transfer of credit card data to the processing banks/payment service providers for the purpose of debiting the booking fee, to the transport company/shipping company commissioned by us for the possible transport of items, and to our tax consultant to fulfill our tax obligations.

In the event of a contract conclusion, all data from the contractual relationship will be stored until the expiry of the tax retention period (7 years in Austria, 10 years in Germany).

Data processing is carried out based on the statutory provisions of § 96 para. 3 TKG as well as Art. 6 para. 1 lit a (consent) and/or lit b (necessary for contract fulfillment) of the GDPR.

If you would like to receive the newsletter offered on the website, we require an email address from you as well as information that allows us to verify that you are the owner of the specified email address and agree to receive the newsletter. No further data is collected. We use this data exclusively for sending the requested information and do not pass it on to third parties.

You can revoke your consent to the storage of the data, the email address, and its use for sending the newsletter at any time, for example, via the 'Unsubscribe' link in the newsletter footer.

MailChimp

We send our newsletters using the "MailChimp" service. This is a newsletter distribution platform of the US provider Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA. The privacy policy and terms of the service provider can be viewed here. MailChimp guarantees the European data protection level and is also certified under the Privacy Shield Agreement. Based on our legitimate interests according to Art. 6 para. 1 lit. f GDPR and a data processing agreement according to Art. 28 para. 3 sentence 1 GDPR, MailChimp is used as a service provider.

MailChimp does not contact newsletter recipients under any circumstances or pass on the data to third parties. However, the service provider may use the data, without being able to assign it to a user, to optimize or improve its own services.

Further information on the privacy policy can be found in MailChimp's privacy policy at https://mailchimp.com/legal/privacy/.

The general terms of use of MailChimp can be found here https://mailchimp.com/legal/terms/.

Amazon Web Services

Storebox uses the hosting services of Amazon Web Services, Inc., 410 Terry Avenue North, Seattle, WA 98109-5210. We use servers in the Frankfurt data center, Germany. Data transfer outside the EU does not take place. More about data protection at Amazon Web Services can be found here: https://aws.amazon.com/en/privacy/.

Google Analytics

This website uses functions of the web analytics service Google Analytics. The provider is Google Inc., 1600 Amphitheatre Parkway Mountain View, CA 94043, USA.

Google Analytics uses so-called 'cookies.' These are text files that are stored on your computer and enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there.

Google Universal Analytics

We use Google Analytics in the form of "Universal Analytics." "Universal Analytics" describes a procedure of Google Analytics in which user analysis is carried out based on a pseudonymous user ID. This creates a pseudonymous profile of the user with information from the use of various devices (so-called "cross-device tracking").

IP anonymization

An important concern in terms of the GDPR is the improvement of our offer and our website. Since the privacy of our users is a high priority for us, their user data is pseudonymized. Data processing is therefore based on the statutory provisions of § 96 para. 3 TKG as well as Art. 6 EU-GDPR para. 1 lit a (consent) and/or f (legitimate interest) of the GDPR.

We have activated the IP anonymization function on this website. As a result, your IP address is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, compile reports on website activity, and provide other services related to website and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. More information about IP anonymization can be found here: https://support.google.com/analytics/answer/2763052?hl=en.

Browser plugin

You can prevent the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case, you may not be able to use all the functions of this website to their full extent. You can also prevent the collection of the data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en.

Opt-out of data collection

You can prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie will be set that prevents the collection of your data during future visits to this website:

More information on how Google Analytics handles user data can be found in Google's privacy policy: https://support.google.com/analytics/answer/6004245?hl=de.

Data processing agreement

We have concluded a data processing agreement with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.

Google Analytics - Data Processing Addendum

We have also concluded a direct customer contract with Google for the use of Google Analytics. For this purpose, we have accepted the "Data Processing Addendum" in Google Analytics.

More about this data processing addendum for Google Analytics can be found here: https://support.google.com/analytics/answer/3379636?hl=de&utm_id=ad.

Demographic features in Google Analytics

This website uses the "demographic features" function of Google Analytics. This allows reports to be created that contain statements about the age, gender, and interests of site visitors. This data comes from interest-based advertising by Google as well as visitor data from third-party providers. This data cannot be assigned to a specific person. You can deactivate this function at any time via the ad settings in your Google account or generally prohibit the collection of your data by Google Analytics as described in the "Opt-out of data collection" section. More about these advertising functions can be found here: https://support.google.com/analytics/answer/3450482?hl=de_AT&utm_id=ad.

You can deactivate the use of your personal activities and information in your Google account under the "Ad settings" here: https://adssettings.google.com/authenticated.

Google Tag Manager

Google Tag Manager is a Google offering that allows us to manage various website tags via a single interface (e.g., we implement Google Analytics and other Google marketing services on our website). Google Tag Manager itself does not process any personal data of users. Regarding the processing of users' personal data, we refer to Google's usage guidelines: https://www.google.com/intl/de/tagmanager/use-policy.html.

Further information on Google's terms of use and privacy can be found here: https://www.google.com/analytics/terms/de.html bzw. https://support.google.com/analytics/answer/6004245?hl=de.

Google AdWords

To place advertisements in the Google search network and the Google display network (e.g., in search results, in videos, on websites, etc.), we use Google AdWords. This allows these advertisements to be displayed to users who are likely to be interested in them. This enables us to target advertisements for and within our online offering more specifically to users. For example, if a user is shown advertisements for products they have previously shown interest in on other online offerings, this is referred to as remarketing. For these purposes, when you visit our and other websites where Google's advertising networks are activated, Google immediately executes a code, and the Google remarketing tag is also integrated into the website. With its help, an individual cookie is created on the user's device. This file records which websites the user visits, what content they are interested in, and which offers the user has clicked on. In addition, technical information about the browser and operating system, referring websites, visit time, and other information about the use of the online offering is collected.

Facebook plugins (Like button)

Plugins of the social network Facebook, provider Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA, are integrated on our pages. You can recognize the Facebook plugins by the Facebook logo or the "Like button" ("Like") on our site. An overview of the Facebook plugins can be found here: https://developers.facebook.com/docs/plugins/.

When you visit our pages, a direct connection is established between your browser and the Facebook server via the plugin. Facebook thereby receives the information that you have visited our site with your IP address. If you click the Facebook "Like button" while logged into your Facebook account, you can link the content of our pages to your Facebook profile. This allows Facebook to associate the visit to our pages with your user account. We point out that we, as the provider of the pages, have no knowledge of the content of the transmitted data or its use by Facebook. Further information on this can be found in Facebook's privacy policy at

Further information on this can be found in Facebook's privacy policy at <a className='text-underline' href='https://www.facebook.com/about/privacy/' target='_blank'>https://www.facebook.com/about/privacy/</a>.: https://de-de.facebook.com/policy.php.

If you do not want Facebook to associate your visit to our pages with your Facebook user account, please log out of your Facebook user account.

Facebook Pixel

Storebox uses the Facebook Pixel function on its website, provided by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA, or, if you are located in the EU, by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook").

Facebook Pixel is an analytics tool that allows Storebox to evaluate the effectiveness of its Facebook ads. This enables relevant ads to be displayed exclusively to respective target groups, tailored to their interests. The code implemented on this page by Facebook can analyze the behavior of website visitors who have arrived at this website via a Facebook ad. This can be used to continuously optimize Facebook ads. The data collected is captured and stored by Facebook. The data is not visible to Storebox but can only be used in the context of ad placements. Additionally, cookies are set through the use of the Facebook Pixel.

By using the Facebook Pixel, Facebook registers the visit to this website so that visitors can be shown relevant ads on Facebook. If you are a Facebook account holder and logged in, the visit to this website will be associated with your Facebook account.

Learn how the Facebook Pixel is used for ad campaigns here: https://www.facebook.com/business/learn/facebook-ads-pixel.

You can change your ad settings on Facebook here: https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen, provided you are logged into your Facebook account.

Additionally, you can manage your preferences regarding usage-based online advertising here: https://www.youronlinechoices.com/en/praferenzmanagement/. You have the option to activate or deactivate many providers at once or make settings for individual providers.

Facebook Pixel - Custom Audiences

Storebox uses the Facebook Pixel - Customer Audience function on its website, provided by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA, or, if you are located in the EU, by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook").

This website uses the "Custom Audiences" remarketing function from Facebook. With the "advanced matching" feature, personal data is transmitted to Facebook in encrypted form. Additionally, with "Custom Audiences from File," the email address, name, and phone number of newsletter recipients are uploaded to Facebook in encrypted form. This is used to determine the recipients of Facebook ads and to ensure that ads are only displayed to interested users. Storebox has no influence on the amount, quality, or storage duration of the transmitted data. Facebook may pass the data on to third parties.

Storebox obtains your consent for the use of this service via an opt-in. This means that the cookie, tracking pixel, or similar methods that process personal data through this service will only be activated if you have given your consent. In this case, we rely on Art. 6 para. 1 lit. f GDPR as the legal basis. If you are located in Germany and are under the age of 16 (14 in Austria and Switzerland), you are not legally able to provide valid consent under the respective national laws.

You can deactivate Facebook Custom Audiences by logging into your Facebook account and adjusting the settings at the following link: https://www.facebook.com/settings/?tab=ads#.

Alternatively, you can deactivate the "Custom Audiences" remarketing function here: https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen#_=_.

Facebook is certified under the Privacy Shield Agreement and thus guarantees compliance with European data protection law. More information can be found here: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active.

Google+

Our pages use functions of Google+. The provider is Google Inc., 1600 Amphitheatre Parkway Mountain View, CA 94043, USA.

Collection and sharing of information: Using the Google+ button, you can publish information worldwide. Via the Google+ button, you and other users receive personalized content from Google and our partners. Google stores both the information that you have given a +1 for content and information about the page you viewed when you clicked +1. Your +1s can be displayed as hints along with your profile name and photo in Google services, such as in search results or in your Google profile, or elsewhere on websites and ads on the Internet.

Google records information about your +1 activities to improve Google's services for you and others. To use the Google+ button, you need a globally visible, public Google profile that must contain at least the name chosen for the profile. This name is used in all Google services. In some cases, this name can also replace another name that you have used when sharing content via your Google account. The identity of your Google profile can be shown to users who know your email address or have other identifying information about you.

Use of the collected information: In addition to the purposes explained above, the information you provide will be used in accordance with Google's applicable privacy policies. Google may publish aggregated statistics about users' +1 activities or share them with users and partners, such as publishers, advertisers, or affiliated websites.

YouTube

Our website uses plugins from the YouTube site operated by Google. The operator of the pages is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. When you visit one of our pages equipped with a YouTube plugin, a connection to the YouTube servers is established. The YouTube server is informed about which of our pages you have visited.

If you are logged into your YouTube account, you enable YouTube to associate your browsing behavior directly with your personal profile. You can prevent this by logging out of your YouTube account.

Further information on the handling of user data can be found in YouTube's privacy policy at: https://www.youtube.at/t/privacy.

The use of ShareThis social plugins allows our visitors to share content from this website on various social networks such as Facebook, Twitter, Google+, and many others. If visitors share content with ShareThis on those services where they have an account and are logged in, the visit and sharing can be associated with the user.

To collect information about visitor behavior, ShareThis uses cookies, pixel tags, HTTP headers, and browser identifiers. Further information about how ShareThis uses your data can be found at https://sharethis.com/en/publisher-terms-of-use/.

PostHog

We use PostHog (PostHog Inc, 2261 Market Street, Suite 4008, San Francisco, CA 94114, United States) as an analytics tool to better understand how visitors interact with our website. This helps us improve our content and features and provide a better user experience. We collect anonymous usage data such as clicks, page usage behavior, and time spent on individual pages.

PostHog stores this data within the EU (Frankfurt, Germany) and processes it in accordance with the General Data Protection Regulation (GDPR). Your privacy is important to us – no personal data such as names or email addresses is collected.

Further information can be found in the PostHog Privacy Policy.

Alternatively, you can completely disable tracking here:

MangoPay

As part of payment processing, we use the services of the payment service provider MangoPay by MANGOPAY S.A., 10 boulevard Royal L-2449 Luxembourg, with whom we have also concluded a data processing agreement. MangoPay guarantees high security standards as a reliable payment service provider and takes extensive technical and organizational measures to protect your data. More information can be found in the MangoPay Privacy Policy: https://www.mangopay.com/privacy/.

Klarna

As part of payment processing, we occasionally use the services of the payment service provider Klarna. If Klarna processes your payments and therefore your data, this will be displayed to you during booking. Details of the privacy policy can be found in the links below:

Stripe

As part of payment processing, we use the services of the payment service provider Stripe Payments Europe Limited (1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland). Which payment service provider processes your payments and therefore your data will be displayed to you during booking. Details on data processing can be found on Stripe's privacy page: https://stripe.com/at/privacy. An informative German translation of Stripe's privacy policy is available here: https://stripe.com/at/privacy#translation.

Salesforce

As part of customer communication (including the customer support chat integrated on this website) and the processing of all personal inquiries and bookings, we use services from Salesforce.com, Inc. (415 Mission Street, 3rd Floor San Francisco, CA 94105). Salesforce maintains a very high standard of security regarding data protection and the processing of personal data, participates in the Privacy Shield verification program by TRUSTe, and is certified under the EU-U.S. Privacy Shield. Details on Salesforce's data processing can be found at: https://www.salesforce.com/company/privacy/.

Aircall.io

As part of our customer communication – for internet telephony using a cloud-based VoIP system – we use services from Aircall.io, Inc. (381 Park Ave South, Floor 16, New York, NY 10016). As part of this communication, personal and call data is processed and stored by Aircall.io. Aircall.io takes its responsibility as a communication service provider and corresponding data protection regulations seriously – details on Aircall.io's data processing can be found on their privacy policy page: https://aircall.io/privacy/.

Trustpilot Customer Reviews

As part of our quality management, we use the customer review tool from Trustpilot A/S, Pilestraede 58, 5th Floor, 1112 Copenhagen, Denmark, on this website. Trustpilot allows us to ensure high transparency and customer satisfaction when using our services. We have concluded a data processing agreement with Trustpilot. More details on Trustpilot's data protection can be found at: https://en.legal.trustpilot.com/end-user-privacy-terms.

Objection to Advertising Emails

The use of contact data published as part of the imprint obligation for sending unsolicited advertising and information materials is hereby objected to. The operators of the pages expressly reserve the right to take legal action in the event of unsolicited sending of advertising information, such as spam emails.

Contact

If you have further questions regarding this privacy policy or would like information about the data we process, please contact us by email at datenschutz@yourstorebox.com or by post at Storebox Holding GmbH, Schönbrunner Straße 59-61, 4th Floor, AT-1050 Vienna, Austria.