Privacy policy

This privacy policy applies to the website www.top-vital.at – responsible for it is T.O.P. The Original Perfumes GmbH, commercially registered in 3422 Hadersfeld near Vienna, represented by the managing director, Mr. DI Rüdiger Klermund. We have written this text (version February 2023, valid immediately and until revoked) and published it here in order to explain in the simplest possible terms, in accordance with the requirements of the EU General Data Protection Regulation (EU GDPR), which personal data may be collected as part of our website, in what form this information is used and how long it is stored.

1 Automatic storage of data

When you visit websites on the Internet, certain data is automatically generated, stored in log files and, in some cases, processed. This is also the case in the context of this website. When visiting our website, the following data, among others, may thus be logged and transmitted to our hosting provider:

the URL – this is the called address
Your browser and its version number
the Ref-URL, i.e. from where was redirected/brokered to our website
Your IP address
Your device and operating system
Date and time of access

Such data is stored in so-called server log files (access logs, error logs) at the provider. In our case, there is a time limit of 3 weeks on the provider side in which the log files can be generated, after which they are completely deleted. We only generate these log files when it is absolutely necessary (e.g. in the case of illegal behavior or in the case of technical problems for analysis) and assume that our hosting provider also only reads them out when it is necessary.

2 Storage duration

As a matter of principle, we always endeavor to delete personal data as soon as it is no longer relevant for the purpose for which it was originally collected. If personal data has been collected following the user’s consent, we delete it immediately after any revocation of consent – we also do this as soon as there is no longer a legal basis for data processing. We would like to point out that deletion may not be possible or only possible to a limited extent in certain cases, for example if a legal obligation (statutory retention period, etc.) must be fulfilled. We also reserve the right to store contact data for the purpose of communication or to fulfill our services, if necessary for the duration of the business relationship.

3 What personal data we collect (and why)

Inquiry or contact forms

We have integrated contact forms on our website based on WPForms software, the content of which is sent out via SMTP to our email box and temporarily stored in the database on the web server. The contact form allows you to leave contact information for an initial phone call if desired. If necessary, this can also be the basis for sending further information on our range of services via e-mail. You also have the opportunity to pre-register for our courses and workshop offerings through such forms. Within the scope of the online contact form, the following categories of data are collected or transmitted:

Name (first name and last name)
Company or organization
E-mail address
Phone number
IP address

4 Cookies & external media embedding

Cookies are small text files that store basic information about your website visit. This enables, for example, functions such as the “recognition” of users to ensure smooth and personalized use of the website.

For technical reasons, our website uses essential cookies that are absolutely necessary for the operation of our online presence (set, for example, by our CMS WordPress). In principle, we strive to keep the use of cookies as minimal as possible. Currently, our T.O.P. website does not use 3rd party cookies that require consent.

If this should change in the future, you have the decision-making power when you visit our website for the first time – a so-called cookie consent banner then appears and within the scope of this you have the possibility to make individual data protection settings. In addition to consenting to the setting of cookies, this also includes integrations of external websites through scripts (for example, social media or video platforms), which you can accept or block there.

In addition to the settings in the Cookie Consent Banner, you also have other options on the World Wide Web to prevent tracking or unwanted data storage. In your browser settings you will find options that generally prevent the setting of cookies and avoid tracking. In addition, there are corresponding plugins/addons for modern browsers (e.g. Google Chrome, Safari or Mozilla Firefox) that promote data protection. However, we would like to expressly point out that in this case many web offers can no longer be used to their full extent.

5 Encryption via TLS: SSL certificate

Our website has a valid SSL certificate from Let’s Encrypt. In simple terms, this means that data transmission is encrypted and thus better protected against unauthorized access by third parties during the transmission process.

You can recognize a TLS-encrypted website by the “https://” at the beginning of the URL, for example. In addition, modern browsers display a small padlock symbol and may indicate a “secure connection”. Whenever you enter your data on the Internet or carry out payment transactions in a web store, you should make sure that you have an upright SSL connection.

6 Web analysis: evaluation of visitor:inside behavior

Our website administrator uses the privacy-friendly web analytics tool Plausible.io from Estonia/EU to collect basic usage statistics. This analysis tool does not use cookies, accesses are only logged via IP address (in anonymized form) and user agent. More information can be found in the data policy of Plausibe.io.

7 Your rights according to DSGVO

According to the General Data Protection Regulation, you have, among others, the following rights with regard to your personal data, which we would like to explicitly point out at this point:

Right to information about all stored data concerning your person (Art. 15 DSGVO)
Right to rectification of stored data (Art. 16 DSGVO)
Right to erasure aka “right to be forgotten” (Art. 17 GDPR)
Right to restriction of processing (Art. 18 DSGVO)
Right to data portability (Art. 20 DSGVO)
Right to object to your consent (Art. 21 DSGVO).

In the event of a complaint regarding data protection, you may contact the competent authority. In Austria, this has been the Austrian Data Protection Authority (DPA), Barichgasse 40-42, 1030 Vienna, since January 1, 2014. The data protection authority can be reached via e-mail at dsb@dsb.gv.at and by telephone at +43 1 52 152-0.

8 Where we send your data and who may have access to it

As a matter of principle, we do not pass on your data to unauthorized third parties under any circumstances and ensure to the best of our knowledge and belief that they are protected in the best possible way – also with organizational and technical measures, as far as it is possible for us as an individual company. However, the aspects described above give rise to scenarios that could make your personal data accessible to third parties:

our hosting provider may process data in log files on the server (see chapter 1)
our website admin (Michael Schifflhuber from screenfire.at, Markt 7, A-3213 Frankenfels) regularly performs maintenance work in the backend (software updates, administration of contact forms as well as content management)
in case of cooperation with suppliers, network partners or external consultants within the scope of your orders, data will be passed on to them in case of need, but only after your explicit consent.

Queries regarding data protection on the T.O.P. website

If you have any questions about this privacy policy, please do not hesitate to contact us. You can reach us under the contact details listed on the pages “Contact” and “Imprint”.