Social Media Privacy Policy

Welcome to shop.alimentastic.com! As per Art 13, Art 14 GDPR and Section 165 Paragraph 3 TKG, we will provide you with comprehensive information about how your data is processed when you visit our social media profiles. Please familiarise yourself with how your personal data (hereafter referred to as "data") is processed and why. Here you will find out:

1. What data is processed when you visit our social media platforms
2. About the purposes and legal basis
3. Which social media platforms we can use and whether there is joint responsibility
4. How long your data will be stored
5. What rights you have in regard to how we process your data
6. who is responsible for data protection and how to contact us.

You can find more general information about data protection on shop.alimentastic.com here: https://shop.alimentastic.com/info/datenschutz.

The following categories of your data may be processed when you visit our social media profiles:

• Country/city
• Language
• Age/gender
• Previously visited websites
• Type of end device used
• User ID on the respective social media platform
• Date and time of actions/interactions, such as when you
  • view, comment on, share, like, or otherwise interact with (including responding to) our profiles, posts, videos, stories, or other content associated with our profiles;
  • send direct messages to our profiles;

In principle, we can only get information about your social media profile or your person if you actively interact with our profiles when you are logged in with your social media profile. Additional data, such as views, is only made available to us anonymously by the respective social media platform and it is, therefore, impossible for us to draw conclusions about your person.

We process your data for the following purposes and legal basis:

• To set up and manage our social media profiles to promote our products, increase awareness of our presence, and enable interaction among and with visitors to our profiles. The processing is justified by our overriding legitimate interest in the aforementioned purposes (Art 6 Para 1 lit f GDPR).
• To process customer inquiries, customer care and other customer support services via our social media profiles. The processing is justified by our overriding legitimate interest in the aforementioned purposes (Art 6 Para 1 lit f GDPR) and occasionally necessary for the fulfillment of the contract (Art 6 Para 1 lit b GDPR).
• For anonymous analysis of the use of our social media profiles to optimise our online presence. The processing is justified by our overriding legitimate interest in the aforementioned purposes (Art 6 Para 1 lit f GDPR).
• To conduct and promote contests to promote our products and increase awareness of our presence (contests are never linked to social media platforms and are in no way sponsored, endorsed or organised by social media platforms). The processing is justified by our overriding legitimate interest in the aforementioned purposes (Art 6 Para 1 lit f GDPR) and occasionally necessary for the fulfillment of the contract (Art 6 Para 1 lit b GDPR).
• Legally required storage according to § 132 BAO (Federal Tax Code in Austria). The processing is necessary to fulfill our legal obligations (Art 6 Para 1 lit c GDPR).
• Prevention and investigation in cases of fraud or attempts at fraud. The processing is justified by our overriding legitimate interest in the aforementioned purposes (Art 6 Para 1 lit f GDPR).
• Assertion and defense of legal claims. The processing is justified by our overriding legitimate interest in the aforementioned purposes (Art 6 Para 1 lit f GDPR).

First of all, we would like to point out that you are responsible for your interactive use of social media platforms. However, when you visit or interact with our profiles on the following social media platforms, the following information is relevant:

Facebook and Instagram

Social media platforms Facebook and Instagram (both are Meta Group platforms) are operated in Europe by Facebook Ireland Limited located at 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland. Here you will find information regarding general data policy at Meta. Under certain circumstances, we are jointly responsible for processing your data to generate page insights in relation to a visit or other interaction with any of our Facebook or Instagram pages or related content.

Facebook Ireland Limited provides us, as a site operator, with statistics and insights that help us obtain detailed information on the types of actions people take on our sites ("Page Insights"). Page Insights are aggregate statistics generated by specific events recorded by Facebook or Instagram servers when people interact with pages or the content associated with them. As a site operator, we do not have access to the data processed in the context of these events, but only to the summarised Page Insights.

We have entered into an agreement with Facebook Ireland Limited that establishes what obligations are fulfilled by each of us under GDPR. You agree that Facebook Ireland is responsible for providing you with information about the processing of Page Insights and for enabling you to exercise your rights under GDPR. However, you are free to contact any of the parties.

YouTube

YouTube is a video platform operated in Europe by Google Ireland Limited, located at Gordon House, Barrow Street, Dublin 4, Ireland. You can find the privacy policy at Google here.

We use YouTube to play videos. YouTube has the option to process your personal data when you visit our YouTube profiles where YouTube acts as an independent data controller. "YouTube Analytics" allows us to view anonymous statistics on the use of our YouTube channels without knowing who the users are.

X/Twitter

X/Twitter is a social media platform operated in Europe by Twitter International Unlimited Company, based at 1 Cumberland Place, Fenian St, Dublin 2, D02 AX07, Ireland. You can find the privacy policy at X/Twitter here.

When you visit our X/Twitter profiles, X/Twitter can process your personal data, as X/Twitter acts as the data controller independently. "X/Twitter Analytics" allows us to view anonymous statistics on the use of our X/Twitter profiles without knowing who the users are.

TikTok

TikTok is a social media platform operated in Europe by TikTok Technology Limited, located at 10 Earlsfort Terrace, Dublin, D02 T380, Ireland. You can find the privacy policy at TikTok here. We are jointly responsible for processing your data to create measurement reports and insights about a visit or other interactions with any of our TikTok pages or related content.

TikTok Technology Limited provides us, as the site operator, with statistics and insights that help us understand the types of actions people take on our sites ("Measurement and Insight Reporting"). Measurement and Insight Reports are aggregate statistics generated by specific events recorded by TikTok servers when people interact with pages and the content associated with them. As a site operator, we do not have access to the data processed in the context of events, but only to the summarised Measurement and Insight Reports.

We have entered into an agreement with TikTok Technology Limited that establishes what obligations are fulfilled by each of us under GDPR. It has been agreed that TikTok Technology Limited is responsible for providing you with information on the processing of Measurement and Insight Reports and for enabling you to exercise your rights under the GDPR. However, you have the right to contact any of the parties.

LinkedIn

The LinkedIn social media platform is operated in Europe by LinkedIn Ireland Unlimited Company, located at Wilton Place, Dublin 2, Ireland. You can find the privacy policy at LinkedIn here. We are jointly responsible for processing your data to create Page Insights in connection with a visit or other interactions with any of our LinkedIn pages or related content.

LinkedIn Ireland Unlimited Company provides us, as the site operator, with statistics and insights that help us obtain detailed information on the types of actions people take on our sites ("Site Insights"). Measurement and Insight Reports are aggregate statistics created on the basis of specific events recorded by LinkedIn's servers when people interact with the pages and content associated with them. As a site operator, we do not have access to the data processed in the context of events but only to the summarised measurement and insight reports.

We have entered into an agreement with LinkedIn Ireland Unlimited Company that establishes what obligations are fulfilled by each of us under GDPR. It is agreed that LinkedIn Ireland Unlimited Company is responsible for providing you with information on the processing of page insights and for enabling you to exercise your rights under the GDPR. However, you have the right to contact any of the parties.

Pinterest

Pinterest is a social media platform operated in Europe by Pinterest Europe Ltd., located at Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland. You can find the privacy policy at Printerest here.

Pinterest has the option to process your personal data when you visit our Pinterest profiles with Pinterest acting as an independent data controller. Pinterest Analytics allows us to view anonymous statistics on the use of our Pinterest profiles without identifying who the users are.

Discord

Discord is a social media platform operated by Discord Inc., located at 444 De Haro Street, Suite # 200, San Francisco, CA 94107, USA. You can find the privacy policy at Discord here.

Discord has the option to process your personal data when you visit our Discord profiles with Discord acting as an independent data controller. "Server Insights" provide us anonymous statistics on the use of our Discord profiles without revealing the identities of the users.

Data entered by you on social media platforms remain stored there until they are deleted by you or the social media platform.

We store your data for only as long as is necessary for the purposes for which we collected your data. In this context, statutory storage obligations must be taken into account - e.g. for tax reasons, contracts, order data or other documents from a contractual relationship must be stored for a period of seven years (§ 132 BAO - Austria's Federal Tax Code). In justified individual cases, such as for the assertion and defence of legal claims, we may also store your data for up to 30 years after the termination of the business relationship.

We would like to inform you that, provided the legal requirements are met, you have the right to

• request information about what personal data we are processing (see Art 15 GDPR for details)
• request the amendment of your data that is incorrect or incomplete (see Art. 16 GDPR for details)
• delete your data (see Art 17 GDPR for details), provided there are no conflicting reasons that require the data to be retained
• restrict the processing of your data (see Art 18 GDPR for details)
• data portability - receipt of the data you have provided in a structured, common and machine-readable format (see Art 20 GDPR for details)
• object to the processing of your data based on Article 6 paragraph 1 letter e or f GDPR (see Article 21 GDPR for details). This applies particularly to the processing of your data for advertising purposes

If we process your data on the basis of your consent, you have the right to withdraw consent at any time. This does not affect the lawfulness of the data processing that has taken place up to that point (Article 7 (3) GDPR).

If, contrary to expectations, your right to the lawful processing of your data is violated, please contact us. We will endeavour to process your request immediately, but within the statutory period of one month at the latest. You also have the right to lodge a complaint with the supervisory authority responsible for data protection matters concerning you.

The person responsible for data protection with regard to our social media profiles within the meaning of Art 4 Z 7 GDPR is:

Alimentastic Food Innovation GmbH
Strubergasse 24
5020 Salzburg
shop@alimentastic.com
ATU80197449

CEO Laurenz Hoffmann

Shared responsibility with the niceshops group and exercise of your rights

Alimentastic Food Innovation GmbH is a member or client of the niceshops group, an Austrian e-commerce company that specialises in the development of online shops in various product segments. Data processing of the e-commerce activities of Alimentastic Food Innovation GmbH takes place in joint responsibility according to Art. 26 DSGVO with the niceshops group. The parties have agreed that niceshops GmbH shall serve as a single point of contact to exercise your rights. You are nevertheless free to assert your rights with either party. We will be happy to provide you with the essential contents of the agreement upon request.

Contact details of the Data Protection Officer at niceshops GmbH:
Email - privacy@niceshops.com
Post - niceshops GmbH, Attn: Data Protection Officer, Annenstraße 23, 8020 Graz, Austria.

Any use of this privacy policy, or parts thereof, without the consent of the author constitutes an infringement of copyright.