• Stutz GmbH,

• Petzoldstrasse 13,4020 Linz,

• Austria,Tel. +43 732 778050,

• Email: info@livsmemories.com

• FN 358176f (Linz Regional Court),

at this point in accordance with Article 12 ff of the General Data Protection Regulation on data processing carried out by us in connection with the website www.livsmemorie.com and the online shop:

1. The rights of the data subjects:

Every person who is affected by one of the data processing operations mentioned below has - provided the legal requirements are met and always only in accordance with the relevant legal provisions - the following rights:

• The right to information about personal data concerning you.
• The right to rectification of personal data concerning you.
• The right to erasure of personal data concerning them.
• The right to restrict the processing of personal data concerning you.
• The right to portability of personal data concerning you.
• The right to object to the processing of personal data concerning you.
• The right to complain to the Austrian data protection authority.
• The right to revoke any consent given to data processing at any time, without affecting the lawfulness of the processing carried out based on the consent before its revocation.

2. Processing of customer data:

 We process the personal data of each customer (orderer) as a data subject, which the customer (orderer) provides by entering into the respective mask when ordering in the online shop, for the following purposes (based on the legal basis mentioned):

• Processing the order, concluding and fulfilling the purchase contract (legal basis is the necessity to carry out pre-contractual measures at the request of the data subject and to fulfill a contract to which the data subject is a party).
• Accounting and documentation of all sales (legal basis is our legal obligation, namely our commercial and tax law retention obligation).
• Contacting you, sending you useful or interesting information and advertising by post (the legal basis is our legitimate interest in achieving these purposes).
• If the data subject has given their consent: sending the email newsletter; Contacting you, sending useful or interesting information and advertising by email (the legal basis is the consent of the data subject).
• If necessary, examination of the legal situation and enforcement or defense of legal claims, presentation of evidence (the legal basis is our legitimate interest in achieving these purposes).

This data will be disclosed, at least in part, to the following categories of recipients, whereby this disclosure will only occur to the extent necessary to achieve the respective purpose and the data will not leave the territory of the European Union:

• Our employees.
• Our tax advice.
• Processors we use, such as IT service providers and software providers.
• Carriers commissioned by us.
• If necessary, our legal representation, courts and various authorities.

We store data relating to the customer until all relevant statutes of limitations and retention periods have expired.

The provision of personal data by the customer is neither legally nor contractually required. However, we can only process an order if the data requested during the ordering process is provided to us.

 3. Processing of website visitor data:

A) Data actively provided by the visitor:

We process all data from visitors to the website www.livsmemories.com (“visitors”) that the visitor actively provides by filling out the relevant fields, in particular when registering for the newsletter. Such data processing serves the purpose of providing the visitor with the service for which he or she has registered (the legal basis is the consent of the data subject).

This data is disclosed to our employees and to the processors we use (in particular IT service providers).

B) Automatically collected personal data (= information about cookies):

 When you visit our website, we also collect and process personal data relating to the visitor that the visitor does not actively provide by entering it into a field provided for this purpose. This is done by setting cookies. A cookie is a small text file that stores Internet settings and that the visitor's web browser downloads when they first visit a website. The next time you visit this website with the same device, the cookie is sent back and provides information, either to the website that created it and sent it (first party cookie), or to a person other than the website who sends the cookie independently generated by the website and then sent via the website (third party cookie). By sending the cookie back, the website or this person different from the website recognizes that the visitor has already accessed this website or another website that sends the same third-party cookie with their browser. And the content may vary based on this information.

Newsletter

With the following information we inform you about the contents of our newsletter as well as the registration, shipping and statistical evaluation procedures as well as your rights to object. By subscribing to our newsletter, you agree to its receipt and the procedures described.

Content of the newsletter: We only send newsletters, emails and other electronic notifications with promotional information (hereinafter “newsletter”) with the consent of the recipient or legal permission. If the contents are specifically described when registering for the newsletter, they are decisive for the user's consent. Our newsletters also contain information about our products and accompanying information (e.g. safety instructions), offers, promotions and our company.

Double opt-in and logging: Registration for our newsletter takes place using a so-called double opt-in procedure. This means that after you register you will receive an email asking you to confirm your registration. This confirmation is necessary so that no one can log in with someone else's email address. Registrations for the newsletter are logged in order to be able to provide evidence of the registration process in accordance with legal requirements. This includes storing the registration and confirmation times as well as the IP address. Changes to your data stored by the shipping service provider are also logged.

Registration data: To register for the newsletter, it is sufficient to provide your email address. Optionally, we ask you to provide a name so that you can be addressed personally in the newsletter.

The newsletter is sent and the associated measurement of success is based on the consent of the recipient in accordance with Article 6 (1) (a), Article 7 GDPR in conjunction with Section 107 (2) TKG or, if consent is not required, on the basis our legitimate interests in direct marketing in accordance with Art. 6 Para. 1 according to f. GDPR in conjunction with Section 107 Para. 2 and 3 TKG.

The registration process is logged on the basis of our legitimate interests in accordance with Art. 6 (1) (f) GDPR. Our interest is in using a user-friendly and secure newsletter system that serves our business interests and meets the expectations of users and also allows us to provide evidence of consent.

Termination/revocation – You can terminate your receipt of our newsletter at any time, i.e. revoke your consent. You will find a link to unsubscribe from the newsletter at the end of each newsletter. We can store the unsubscribed email addresses for up to three years based on our legitimate interests before deleting them in order to be able to prove that consent was previously given. The processing of this data is limited to the purpose of possible defense against claims. An individual request for deletion is possible at any time, provided that the previous existence of consent is confirmed at the same time.

Newsletter – Mailchimp

The newsletter is sent using the shipping service provider “MailChimp”, a newsletter delivery platform from the US provider Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA. You can view the shipping service provider’s privacy policy here: https://mailchimp.com/legal/privacy/.

The Rocket Science Group LLC d/b/a MailChimp is certified under the Privacy Shield Agreement and thereby offers a guarantee that it will comply with European data protection standards (https://www.privacyshield.gov/participant?id=a2zt0000000TO6hAAG&status=Active ). The shipping service provider is used on the basis of our legitimate interests in accordance with Article 6 Paragraph 1 Letter f of the GDPR and an order processing agreement in accordance with Article 28 Paragraph 3 Sentence 1 of the GDPR.

The shipping service provider can use the recipients' data in pseudonymous form, i.e. without assignment to a user, to optimize or improve its own services, e.g. for the technical optimization of the sending and presentation of the newsletter or for statistical purposes. However, the shipping service provider does not use the data of our newsletter recipients to write to them directly or to pass the data on to third parties.

Newsletter – measuring success

The newsletters contain a so-called “web beacon”, ie a pixel-sized file that is retrieved from our server, or if we use a shipping service provider, from their server when the newsletter is opened. As part of this retrieval, technical information is initially collected, such as information about the browser and your system, as well as your IP address and the time of retrieval.

This information is used to technically improve the services based on the technical data or the target groups and their reading behavior based on their access locations (which can be determined using the IP address) or the access times. The statistical surveys also include determining whether the newsletters are opened, when they are opened and which links are clicked. For technical reasons, this information can be assigned to individual newsletter recipients. However, it is neither our aim nor that of the shipping service provider, if used, to observe individual users. The evaluations are much more to help us recognize the reading habits of our users and adapt our content to them or to send different content according to the interests of our users.

Unfortunately, it is not possible to revoke the success measurement separately; in this case, the entire newsletter subscription must be canceled.

Hosting and email sending

The hosting services we use serve to provide the following services: infrastructure and platform services, computing capacity, storage space and database services, email delivery, security services and technical maintenance services, which we use for the purpose of operating this online offering.

In doing so, we, or our hosting provider, process inventory data, contact data, content data, contract data, usage data, meta and communication data from customers, interested parties and visitors to this online offering based on our legitimate interests in the efficient and secure provision of this online offering in accordance with Art. 6 Para. 1 lit. f GDPR in conjunction with Art. 28 GDPR (conclusion of order processing contract).

 i. We use Google Analytics: The visitor’s IP address is anonymized.

• Google Analytics is a web analytics service operated by  Google Inc.  (1600 Amphitheater Parkway, Mountain View, CA 94043, United States). Google processes the website usage data on our behalf (as a processor) and is contractually obliged to take measures to ensure the confidentiality of the processed data.
• Google Analytics uses cookies to help analyze how the website is used. The information generated by the cookie about the use of this website is usually transmitted to a Google server in the USA and stored there. The pages accessed, any orders, visitor behavior on the pages (e.g. clicks, scrolling behavior and length of stay), the approximate location of the visitor (country and city), the IP address of the visitor (in anonymized form, so that no unique information is collected) are collected Assignment is possible, see below), technical information about the connection and the Internet provider, the end device (including ID and screen resolution) and the browser, as well as the source of origin of the visit (“referral URL”).
• However, the IP anonymization active on this website leads to the anonymization of the IP address and thus to the anonymization of all collected data: For user IP addresses of type IPv4, the last octet and for IPv6 addresses the last 80 bits in memory are set to zero (i.e. "anonymized") shortly after it has been sent to the Analytics data collection network for collection, still within the RAM and before it is stored on the hard disk (more on anonymization at  https://support.google.com/analytics/answer/2763052?hl=de ).
• The anonymized IP address transmitted by the browser used as part of Google Analytics is not merged with other data from Google.
• The purpose of this data processing by Google is to analyze the use of our website and, based on this, to optimize our website and the associated advertising measures. We have a legitimate interest in achieving this purpose.
• On our behalf, Google will use the information received to evaluate - in an anonymous form - the visitor's use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage.
• Google stores this data on our behalf for 14 months, after which this data is deleted. They only remain indefinitely in aggregated form (e.g. for the specified total number of website visits).
• If you do not want user data and IP addresses to be stored and processed in an anonymized form, you must not allow cookies to be stored and thus also not allow data to be collected by Google (setting in the web browser used: do not allow third-party cookies). Of course, not all functions of the website may then be fully usable.
• You can find even more details about Google Analytics  here .

Google Tag Manager

Google Tag Manager is a solution with which we can manage so-called website tags via an interface (and thus, for example, integrate Google Analytics and other Google marketing services into our online offering). The Tag Manager itself (which implements the tags) does not process users' personal data. With regard to the processing of users' personal data, reference is made to the following information on Google services. Usage guidelines: https://www.google.com/intl/de/tagmanager/use-policy.html.

Here you can :  Deactivate Google Analytics

Further information on data usage by Google, settings and objection options can be found in Google's data protection declaration ( https://policies.google.com/technologies/ads ) and in the settings for the display of advertising by Google (https:// adssettings.google.com/authenticated).

Users' personal data will be deleted or anonymized after 14 months.

Google Universal Analytics

We use Google Analytics in the form of universal analytics. “Universal Analytics” refers to a process from Google Analytics in which user analysis is carried out on the basis of a pseudonymous user ID and thus a pseudonymous profile of the user is created with information from the use of various devices (so-called “cross-device tracking”).

Target group formation with Google Analytics

We use Google Analytics to show the advertisements placed within the advertising services of Google and its partners only to those users who have also shown an interest in our online offering or who have certain characteristics (e.g. interests in certain topics or products) based on the information they visit websites) that we transmit to Google (so-called “remarketing” or “Google Analytics audiences”). With the help of remarketing audiences, we also want to ensure that our ads match the potential interest of users.

Google AdWords and conversion measurement

We use the services of Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043 based on our legitimate interests (ie interest in the analysis, optimization and economic operation of our online offering within the meaning of Art. 6 Para. 1 lit. f. GDPR). , USA, (“Google”).

Google is certified under the Privacy Shield Agreement and thereby offers a guarantee that it will comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active). (Disable Google Analytics)

We use the online marketing process Google “AdWords” to place advertisements in the Google advertising network (e.g. in search results, in videos, on websites, etc.) so that they are displayed to users who have a presumed interest in the advertisements. This allows us to display advertisements for and within our online offering in a more targeted manner in order to only present users with advertisements that potentially match their interests. For example, if a user is shown ads for products that they were interested in on other online offerings, this is referred to as “remarketing”. For these purposes, when you visit our and other websites on which the Google advertising network is active, Google directly executes a code from Google and so-called (re)marketing tags (invisible graphics or code, also known as “ “Web beacons”) are integrated into the website. With their help, an individual cookie, ie a small file, is stored on the user's device (comparable technologies can also be used instead of cookies). This file records which websites the user has visited, what content the user is interested in and which offers the user has clicked on, as well as technical information about the browser and operating system, referring websites, visiting time and other information about the use of the online offer.

We also receive an individual "conversion cookie". The information obtained using the cookie is used by Google to create conversion statistics for us. However, we only learn the anonymous total number of users who clicked on our ad and were redirected to a page with a conversion tracking tag. However, we do not receive any information that can be used to personally identify users.<br>

User data is processed pseudonymously within the Google advertising network. This means that Google does not store and process the user's name or email address, for example, but rather processes the relevant cookie-related data within pseudonymous user profiles. This means that from Google's perspective, the advertisements are not managed and displayed for a specifically identified person, but for the cookie holder, regardless of who the cookie holder is. This does not apply if a user has expressly allowed Google to process the data without this pseudonymization. The information collected about users is transmitted to Google and stored on Google's servers in the USA.<br>

Further information on data usage by Google, settings and objection options can be found in Google's data protection declaration (https://policies.google.com/technologies/ads) and in the settings for the display of advertising by Google (https:// adssettings.google.com/authenticated).

ii. We use Facebook Pixel:

• Facebook Pixel is provided by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland (“Facebook”).
• In terms of data protection law, we and Facebook are responsible for the processing of personal data associated with the use of Facebook Pixel.
• The use of Facebook Pixel causes Facebook to set a cookie if the visitor has consented to this by setting their web browser accordingly (by allowing third-party cookies).
• Personal data relating to the visitor is only collected and processed if the visitor is logged in to Facebook and accessed our website via a Facebook advertisement. This creates a link to the visitor's Facebook profile. Data about the visitor's behavior on our website and the hardware and software used are also processed. We do not carry out the so-called “automatic extended comparison”.
• The purpose of this data processing is to analyze and optimize our online offering and to promote it appropriately by placing targeted and individualized Facebook advertisements (details at  https://www.facebook.com/business/learn/facebook-ads -pixels ). The legal basis for data processing is our legitimate interest in achieving this purpose.
• Tracking procedures enable Facebook to track the visitor affected by data processing across numerous websites and to use them to advertise products on Facebook. However, as website operators, we cannot view this collected user data.
• The visitor can also change the settings for Facebook ads in his Facebook profile.
• Facebook Pixel is integrated on our website using the Google Tag Manager. Google Tag Manager is a solution that allows us to manage website tags (Facebook Pixel) through one interface. The Tag Manager tool itself (which implements the tags) is a cookieless domain. The tool triggers other tags, which in turn collect data (as described above). Google Tag Manager does not access this data.

Online presence in social media

We maintain online presences within social networks and platforms in order to be able to communicate with customers, interested parties and users who are active there and inform them about our services.

We would like to point out that user data may be processed outside the European Union. This can result in risks for users because, for example, it could make it more difficult to enforce users' rights. With regard to US providers who are certified under the Privacy Shield, we would like to point out that they are committed to complying with EU data protection standards.

Furthermore, user data is usually processed for market research and advertising purposes. For example, usage profiles can be created based on user behavior and the resulting interests of the user. The usage profiles can in turn be used, for example, to place advertisements inside and outside the platforms that presumably correspond to the interests of the users. For these purposes, cookies are usually stored on the users' computers, in which the usage behavior and interests of the users are stored. Furthermore, data can also be stored in the usage profiles regardless of the devices used by the users (particularly if the users are members of the respective platforms and are logged in to them).

The processing of users' personal data is based on our legitimate interests in effectively informing users and communicating with users in accordance with Article 6 Paragraph 1 Letter f of the GDPR. If the users are asked by the respective providers for their consent to data processing (i.e. express their consent, for example by checking a checkbox or confirming a button), the legal basis for the processing is Article 6 Paragraph 1 lit. a., Article 7 GDPR.

For a detailed description of the respective processing and the objection options (opt-out), we refer to the information provided by the providers linked below

Even in the case of requests for information and the assertion of user rights, we would like to point out that these can most effectively be asserted with the providers. Only the providers have access to user data and can take appropriate measures and provide information directly. If you still need help, you can contact us.

• Facebook (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland) – Data protection declaration: https://www.facebook.com/about/privacy/ , Opt-Out: https://www.facebook .com/settings?tab=ads and http://www.youronlinechoices.com , Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active.
• Google/YouTube (Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA) – Data protection declaration: https://policies.google.com/privacy, Opt-Out: https://adssettings.google.com/authenticated, (Disable Google Analytics)Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active
• Instagram (Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA) – Privacy Policy/Opt-Out: http://instagram.com/about/legal/privacy/
• Twitter (Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA) – Data protection declaration: https://twitter.com/de/privacy, Opt-Out: https://twitter.com/personalization, Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000TORzAAO&status=Active
• Pinterest (Pinterest Inc., 635 High Street, Palo Alto, CA, 94301, USA) – Data protection declaration/opt-out: https://about.pinterest.com/de/privacy-policy.
• LinkedIn (LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland) – Data protection declaration https://www.linkedin.com/legal/privacy-policy, opt-out: https://www.linkedin.com/psettings/guest- controls/retargeting-opt-out, Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000L0UZAA0&status=Active.
• Xing (XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany) – Data protection declaration/opt-out: https://privacy.xing.com/de/datenschutzerklaerung.

Integration of third-party services and content

Within our online offering, we use content or service offerings from third-party providers based on our legitimate interests (ie interest in the analysis, optimization and economic operation of our online offering within the meaning of Art. 6 Para. 1 lit. f. GDPR) in order to improve their content and To integrate services such as videos or fonts (hereinafter referred to as “content”).

This always assumes that the third party providers of this content are aware of the user's IP address, as without the IP address they would not be able to send the content to their browser. The IP address is therefore required to display this content. We strive to only use content whose respective providers only use the IP address to deliver the content. Third parties may also use so-called pixel tags (invisible graphics, also known as “web beacons”) for statistical or marketing purposes. The “pixel tags” can be used to evaluate information such as visitor traffic on the pages of this website. The pseudonymous information can also be stored in cookies on the user's device and may contain, among other things, technical information about the browser and operating system, referring websites, visiting time and other information about the use of our online offering, as well as being linked to such information from other sources.

Instagram

Functions and content from the Instagram service, offered by Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA, can be integrated into our online offering. This may include, for example, content such as images, videos or texts and buttons with which users can share content from this online offer within Instagram. If the users are members of the Instagram platform, Instagram can assign access to the above-mentioned content and functions to the users' profiles there. Instagram privacy policy: http://instagram.com/about/legal/privacy/