Privacy Policy

1. Name and address of the data controller

The controller within the meaning of the General Data Protection Regulation, other national data protection laws, and other data protection regulations is:

RESET – Adaptive Mountain Bike Solutions GmbH
Johann-Haiden-Straße 36
8020 Graz
Tel.: +43 664 1737 663
Website: www.re-set.at

2. Contact information for the Data Protection Officer

The data protection officer of the data controller can be reached at the following contact information: office@re-set.at

3. General Information on Data Processing

A. Scope of the processing of personal data

We collect and use our users’ personal data only to the extent necessary to provide a fully functional website and to deliver our content and services. As a general rule, we collect and use our users’ personal data only with their consent. An exception applies in cases where obtaining prior consent is not possible for practical reasons and the processing of the data is permitted by law.

B. Legal basis for the processing of personal data

To the extent that we obtain the data subject’s consent for the processing of personal data, Article 6(1)(a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis for the processing of personal data.

When processing personal data necessary for the performance of a contract to which the data subject is a party, Article 6(1)(b) of the GDPR serves as the legal basis. This also applies to processing operations necessary for the implementation of pre-contractual measures.

To the extent that the processing of personal data is necessary to comply with a legal obligation to which our company is subject, Article 6(1)(c) of the GDPR serves as the legal basis.

In cases where the processing of personal data is necessary to protect the vital interests of the data subject or another natural person, Article 6(1)(d) of the GDPR serves as the legal basis.

If processing is necessary to safeguard a legitimate interest of our company or a third party, and the interests, fundamental rights, and freedoms of the data subject do not override that interest, Article 6(1)(f) of the GDPR serves as the legal basis for the processing.

C. Data Deletion and Retention Period

The data subject’s personal data will be deleted or blocked as soon as the purpose for which it was stored no longer applies. Data may also be stored if this is required by European or national legislation in trade union regulations, laws, or other provisions to which the controller is subject. Data will also be blocked or deleted when a retention period prescribed by the aforementioned standards expires, unless there is a requirement to continue storing the data for the conclusion or performance of a contract.

4. Provision of the Website and Creation of Log Files

A. Description and Scope of Data Processing

Every time our website is accessed, our system automatically collects data and information from the accessing computer’s system.

The following data is collected in this process:

(1) Information about the browser type and version used

(2) The user’s operating system

(3) The user’s Internet service provider

(4) Date and time of access

(5) Websites from which the user’s system accesses our website

(6) Websites accessed by the user’s system via our website

B. Legal basis for data processing

The legal basis for the temporary storage of the data is Article 6(1)(f) of the GDPR.

C. Purpose of Data Processing

We use this data to optimize our website and ensure the security of our IT systems. This also constitutes our legitimate interest in data processing under Article 6(1)(f) of the GDPR.

d. Duration of storage

The data will be deleted as soon as it is no longer necessary for the purpose for which it was collected. In the case of data collected for the purpose of providing the website, this occurs when the respective session ends.

e. Right to object and request rectification

The collection of data for the purpose of providing the website and the storage of this data in log files is essential for the operation of the website. Furthermore, users have no option to object.

5. Use of Cookies

A. Description and Scope of Data Processing

Our website uses cookies. Cookies are text files that are stored in or by the web browser on the user’s computer system. When a user visits a website, a cookie is stored on the user’s operating system—provided consent has been given. This cookie contains a unique string of characters that allows the browser to be uniquely identified when the website is visited again. Cookies that are already on the computer can be deleted at any time. The procedure for doing so is described in the respective browser instructions (under “Help” in the browser menu). We use cookies to make our website more user-friendly. Some elements of our website require that the accessing browser can be identified even after a page change.

A cookie is placed on the user’s computer only with the user’s consent.

B. Legal basis for data processing

The legal basis for the processing of personal data using cookies is the user’s consent pursuant to Article 6(1)(f) of the GDPR and Article 6(1)(a) of the GDPR.

C. Consent

Before setting or storing a cookie, we obtain the user’s consent. This consent is voluntary. Consent may be revoked at any time by sending an email to office@re-set.at, effective for the future. In addition, the user may delete cookies stored by us in their web browser at any time. Users can find more detailed information on this in their browser’s help section (under “Help” in the browser menu). Therefore, when visiting our website again, the user can no longer grant consent.

If the user does not give consent, not all features of the website can be used to their full extent (user identification when switching pages, language selection). However, it is still possible to visit the website. If consent is not given, no cookie will be set.

D. Purpose of Data Processing

The purpose of using technically necessary cookies is to make it easier for users to use our website.

The user data collected by technically necessary cookies is not used to create user profiles.

E. Duration of the Right to Object and Request Rectification

Cookies are stored on the user’s computer and transmit information from it to us. As a user, you therefore have full control over the use of cookies. By changing the settings in your web browser, you can disable or restrict the setting, storage, and transmission of cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are disabled for our website, it may no longer be possible to use all of the website’s features to their full extent.

6. Use of Google Analytics, Google AdWords, and Google Remarketing

A. Description and Scope of Data Processing

To improve efficiency, we use Google Analytics, a web analytics service provided by Google Inc. (“Google”), on our website. Google Analytics uses so-called “cookies,” which are text files stored on the user’s computer that enable an analysis of the user’s use of the website. The information generated by the cookie regarding the use of the website (including the user’s IP address) is transmitted to a Google server in the United States and stored there.

In addition, this website uses cookies to target users with online ads at a later time within the Google advertising network through remarketing campaigns (Google AdWords and Google Remarketing). To display remarketing ads, cookies are set or stored—with the user’s consent—based on a visit to our website.

A cookie is placed on the user’s computer only with the user’s consent. As a user, you can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) by Google, as well as the processing of this data by Google, by downloading and installing the browser plugin available at the following link: tools.google.com/dlpage/gaoptout.

The following data is collected in this context:

(1) The user’s IP address

(2) Date and time of access

(3) Frequency of page views

(4) Use of website features

(5) The user’s operating system

(6) The user’s Internet service provider

(7) Date and time of access

(8) Websites from which the user’s system accesses our website

(9) Websites accessed by the user’s system via our website

(10) Operating systems used on end devices

(11) Age, gender, languages, interests, country of origin

B. Legal basis for data processing

The legal basis for the processing of personal data using cookies is the user’s consent pursuant to Article 6(1)(f) of the GDPR and Article 6(1)(a) of the GDPR.

c. Consent

D. Purpose of Data Processing

Die Übermittlung der Daten an Google dient zur Effizienzsteigerung unserer Website und für diesbezügliche Auswertungen des Userverhaltens sowie zur Finanzierung dieser Website. Die Verarbeitung der Daten ermöglicht uns eine Analyse des Surfverhaltens unserer Nutzer. Wir sind durch die Auswertung der gewonnenen Daten in der Lage, Informationen über die Nutzung der einzelnen Komponenten unserer Website zusammenzustellen. Dies hilft uns dabei, unsere Website und deren Nutzerfreundlichkeit stetig zu verbessern.

e. Transfer of data

By using Google Analytics, Google AdWords, and Google Remarketing, provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, to improve efficiency, user data is transmitted to Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google LLC is a company that has registered with the Privacy Shield list in accordance with the Privacy Shield. The EU-U.S. Privacy Shield was adopted by the European Commission through Adequacy Decision C(2016) 4176 final dated July 12, 2016. Accordingly, Google LLC provides adequate safeguards for data transfers to the United States. For more information, please visit the official Privacy Shield website at www.privacyshield.gov.

F. Duration of the Right to Object and Request Correction

7. Newsletter

A. Description and Scope of Data Processing

On our website, you can subscribe to free newsletters. When you sign up for the newsletter, the data entered in the form is transmitted to us.

(1) First name

(3) E-Mail

In addition, the following information is collected during registration:

(4) Date and time of registration

Your consent to the processing of your data will be obtained during the registration process, and you will be directed to this privacy policy.

B. Legal basis for data processing

The legal basis for processing data following a user’s subscription to the newsletter is Article 6(1)(a) of the GDPR, provided the user has given consent.

C. Purpose of Data Processing

The user’s email address is collected for the purpose of setting up the newsletter.

The collection of other personal data during the registration process is intended to prevent misuse of the services or the email address provided and to generate a personalized greeting.

d. Duration of storage

The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. The user’s email address will therefore be stored for as long as the newsletter subscription remains active.

e. Right to object and request rectification

The user may unsubscribe from the newsletter at any time. A link for this purpose is included in every newsletter.

8. Use of Facebook Pixel

We use the so-called “Facebook Pixel” from Facebook Inc. (“Facebook”) on our website. This allows interest-based advertisements (“Facebook Ads”) to be displayed to users of our website when they visit the Facebook social network or other websites that also use this technology. The Facebook Pixel causes your browser to automatically establish a direct connection to Facebook’s server. We have no influence over the scope and further use of the data collected by Facebook through the use of this tool and therefore inform you to the best of our knowledge: By integrating the Facebook Pixel, Facebook receives the information that you have clicked on an ad from us or visited the corresponding page on our website. If you are registered with a Facebook service, Facebook can associate the visit with your account. Even if you are not registered with Facebook or have not logged in, there is a possibility that the provider may obtain and store your IP address and other identifying characteristics.

We use the Facebook Pixel to ensure that the Facebook ads we run are shown only to those Facebook users who have already expressed an interest in our website. We also use the Facebook Pixel to ensure that our Facebook ads align with users’ potential interests and do not come across as intrusive. Furthermore, the Facebook Pixel allows us to track the effectiveness of Facebook ads for statistical purposes by determining whether users were redirected to our website after clicking on a Facebook ad. The legal basis for using the Facebook Pixel is your consent, which may be revoked at any time.

Third-party provider information: Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA; http://www.facebook.com/policy.php ; Further information on data collection: http://www.facebook.com/help/186325668085084 , http://www.face-book.com/about/privacy/your-info-on-other#applicationssowie http://www. facebook.com/about/privacy/your-info#everyoneinfo .

B. Legal basis for data processing

The legal basis for the processing of personal data using cookies is the user’s consent pursuant to Article 6(1)(f) of the GDPR and Article 6(1)(a) of the GDPR.

9. Rights of the Data Subject

If your personal data is processed, you are a data subject and you have the following rights vis-à-vis the controller:

a. Right to access information

You may request confirmation from the controller as to whether we are processing personal data concerning you.

If such processing is taking place, you may request the following information from the controller:

(1) the purposes for which the personal data is processed;

(2) the categories of personal data that are processed;

(3) the recipients or categories of recipients to whom your personal data has been or will be disclosed;

(4) the planned duration of the storage of your personal data or, if it is not possible to provide specific information on this, the criteria used to determine the storage period;

(5) the existence of a right to request the disclosure or erasure of your personal data, a right to restrict processing by the controller, or a right to object to such processing;

(6) the existence of a right to lodge a complaint with a supervisory authority;

(7) any available information regarding the source of the data, if the personal data is not collected directly from the data subject;

(8) the existence of automated decision-making, including profiling, pursuant to Article 22(1) and (4) of the GDPR and—at least in such cases—meaningful information about the logic involved, as well as the significance and the intended consequences of such processing for the data subject.

You have the right to request information regarding whether your personal data will be transferred to a third country or an international organization. In this context, you may request to be informed of the appropriate safeguards pursuant to Article 46 of the GDPR in connection with the transfer.

b. Right to rectification

You have the right to request that the controller correct and/or complete the personal data concerning you if such data is inaccurate or incomplete. The controller must take immediate action to correct the data.

C. Right to restriction of processing

Under the following conditions, you may request that the processing of your personal data be restricted:

(1) If you dispute the accuracy of the personal data concerning you for a certain period of time, the controller shall be given the opportunity to verify the accuracy of the personal data;

(2) the processing is unlawful and you object to the erasure of the personal data and instead request the restriction of the use of the personal data;

(3) The controller no longer needs the personal data for the purposes of the processing, but the controller needs it to assert, exercise, or defend legal claims, or

(4) If you have objected to the processing pursuant to Article 21(1) of the GDPR and it has not yet been determined whether the controller’s legitimate grounds override your interests.

If the processing of your personal data has been restricted, such data may—apart from storage—be processed only with your consent, or for the establishment, exercise, or defense of legal claims, or to protect the rights of another natural or legal person, or for reasons of substantial public interest of the Union or of an authorized legal entity.

If the restriction on processing has been imposed in accordance with the applicable requirements, the controller will notify you before the restriction is lifted.

d. Right to erasure

Obligation to delete

You may request that the controller erase your personal data without delay, and the controller is obligated to erase such data without delay if any of the following grounds apply:

(1) The personal data concerning you is no longer necessary for the purposes for which it was collected or otherwise processed.

(2) You withdraw your consent on which the processing is based pursuant to Article 6(1)(a) or Article 9(2)(a) of the GDPR, and there is no other legal basis for the processing.

(3) You object to the processing pursuant to Article 21(1) of the GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Article 21(2) of the GDPR.

(4) The personal data concerning you has been processed unlawfully.

(5) The erasure of your personal data is necessary for compliance with a legal obligation under Union law or the law of the Member States to which the controller is subject.

(6) The personal data concerning you was collected in connection with information society services offered in accordance with Article 8(1) of the GDPR.

Disclosure to Third Parties

If the controller has made your personal data public and is required to erase it pursuant to Article 17(1) of the GDPR, the controller shall, taking into account available technology and the cost of implementation, take reasonable measures, including technical measures, to inform controllers who process the personal data that, as the data subject, you have requested the erasure of all links to such personal data or of copies or replicas of such personal data.

Exceptions

The right to erasure does not apply if the processing is necessary

(1) to exercise the right to freedom of expression and information;

(2) for compliance with a legal obligation which requires processing under Union or Member State law to which the controller is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;

(3) for reasons of public interest in the area of public health pursuant to Article 9(2)(h) and (i) and Article 9(3) of the GDPR;

(4) for archiving purposes in the public interest, scientific or historical research purposes, or for statistical purposes pursuant to Article 89(1) of the GDPR, insofar as the right referred to in subparagraph (a) is likely to render impossible or seriously impair the achievement of the objectives of such processing, or

(5) to assert, exercise, or defend legal claims.

e. Right to information

If you have exercised your right to be informed, to have your data erased, or to restrict processing with the controller, the controller is required to notify all recipients to whom your personal data has been disclosed of this notification, erasure, or restriction of processing, unless this proves impossible or involves disproportionate effort.

You have the right to be informed by the controller about this recipient.

F. Right to data portability

You have the right to receive the personal data concerning you that you have provided to the controller in a structured, commonly used, and machine-readable format, provided that this is technically feasible. In addition, you have the right to transmit this data to another controller without hindrance from the controller to whom the personal data was provided, provided that

(1) The processing is based on consent pursuant to Article 6(1)(a) of the GDPR or Article 9(2)(a) of the GDPR, or on a contract pursuant to Article 6(1)(b) of the GDPR, and

(2) The processing is carried out using automated procedures.

In exercising this right, you also have the right to request that your personal data be transferred directly from one controller to another, provided this is technically feasible. This must not infringe upon the rights and freedoms of others.

The right to data portability does not apply to the processing of personal data that is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

g. Right to object

You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data carried out pursuant to Article 6(1)(e) or (f) of the GDPR.

The controller will no longer process your personal data unless it can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defense of legal claims.

If your personal data is processed for the purpose of direct marketing, you have the right to object at any time to the processing of your personal data for such marketing purposes; this also applies to profiling to the extent that it is related to such direct marketing.

Object to the processing of your personal data for direct marketing purposes so that it is no longer processed for those purposes.

You have the option, in connection with the use of information society services—notwithstanding Directive 2002/58/EC—to exercise your right to object through automated procedures that use technical specifications.

Right to withdraw consent under data protection law

You have the right to withdraw your consent under data protection law at any time. Withdrawing your consent does not affect the lawfulness of any processing carried out on the basis of your consent prior to its withdrawal.

H. Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular the one in the jurisdiction of your place of residence, your workplace, or the place where the alleged infringement occurred, if you believe that the processing of your personal data violates the GDPR.

The supervisory authority to which the complaint was submitted informed the complainant of the status and outcome of the complaint, including the possibility of seeking judicial remedy under Article 78 of the GDPR

9. Rights of the data subject

If your personal data is processed, you are a data subject and you have the following rights vis-à-vis the controller:

a. Right to access information

You may request confirmation from the controller as to whether we are processing personal data concerning you.

If such processing is taking place, you may request the following information from the controller:

(1) the purposes for which the personal data is processed;

(2) the categories of personal data that are processed;

(3) the recipients or categories of recipients to whom your personal data has been or will be disclosed;

(4) the planned duration of the storage of your personal data or, if it is not possible to provide specific information on this, the criteria used to determine the storage period;

(5) the existence of a right to request the disclosure or erasure of your personal data, a right to restrict processing by the controller, or a right to object to such processing;

(6) the existence of a right to lodge a complaint with a supervisory authority;

(7) any available information regarding the source of the data, if the personal data is not collected directly from the data subject;

You have the right to request information regarding whether your personal data is being transferred to a third country or an international organization. In this context, you may request to be informed of the appropriate safeguards pursuant to Article 46 of the GDPR in connection with such transfers.

b. Right to rectification

C. Right to restriction of processing

Under the following conditions, you may request that the processing of your personal data be restricted:

(1) If you dispute the accuracy of the personal data concerning you for a certain period of time, the controller shall be given the opportunity to verify the accuracy of the personal data;

(2) the processing is unlawful and you object to the erasure of the personal data and instead request the restriction of the use of the personal data;

(3) The controller no longer needs the personal data for the purposes of the processing, but the controller needs it to assert, exercise, or defend legal claims, or

(4) If you have objected to the processing pursuant to Article 21(1) of the GDPR and it has not yet been determined whether the controller’s legitimate grounds override your interests.

If the restriction on processing has been imposed in accordance with the applicable requirements, the controller will notify you before the restriction is lifted.

d. Right to erasure

Obligation to delete

You may request that the controller erase your personal data without delay, and the controller is obligated to erase such data without delay if any of the following grounds apply:

(1) The personal data concerning you is no longer necessary for the purposes for which it was collected or otherwise processed.

(2) You withdraw your consent on which the processing is based pursuant to Article 6(1)(a) or Article 9(2)(a) of the GDPR, and there is no other legal basis for the processing.

(4) The personal data concerning you has been processed unlawfully.

(5) The erasure of your personal data is necessary for compliance with a legal obligation under Union law or the law of the Member States to which the controller is subject.

(6) The personal data concerning you was collected in connection with information society services offered in accordance with Article 8(1) of the GDPR.

Disclosure to Third Parties

Exceptions

The right to erasure does not apply if the processing is necessary

(1) to exercise the right to freedom of expression and information;

(3) for reasons of public interest in the area of public health pursuant to Article 9(2)(h) and (i) and Article 9(3) of the GDPR;

(5) to assert, exercise, or defend legal claims.

e. Right to information

You have the right to be informed by the controller about this recipient.

F. Right to data portability

(1) The processing is based on consent pursuant to Article 6(1)(a) of the GDPR or Article 9(2)(a) of the GDPR, or on a contract pursuant to Article 6(1)(b) of the GDPR, and

(2) The processing is carried out using automated procedures.

In exercising this right, you also have the right to request that your personal data be transmitted directly from one controller to another, provided this is technically feasible. This must not infringe upon the rights and freedoms of others.

g. Right to object

You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data carried out pursuant to Article 6(1)(e) or (f) of the GDPR.

Object to the processing of your personal data for direct marketing purposes so that it is no longer processed for those purposes.

Right to withdraw consent under data protection law

H. Right to lodge a complaint with a supervisory authority