Privacy Policy

The protection of your personal data is important to us. This privacy policy provides you with all relevant information as to why we collect your data and how it is processed when you visit our website, subscribe to our newsletter, use our online offer or make a contact request as a customer, supplier or business partner. It gives you a comprehensive overview on which technologies we use, what this means to you and who you can contact in case of any questions.

We strictly comply with the legal obligations of the GDPR when processing personal data and would like to inform you below in more detail how data is being processed on our website.

This data protection policy only applies to www.orloffs.com and the associated sub-pages and not to websites controlled and operated by any third parties.

1. Contact details

Orloffs Window Cleaning Training OWCT-
Justin Rafael Orloff e.U.
A-1150 Wien, Braunhirschengasse 6/1
Privacy contact: Justin Rafael Orloff
E-Mail: office@orloffs.com
Website: https://www.orloffs.com

2. Data security

Data security is our highest concern. We aim to take all suitable and necessary technical and organizational measures to protect your data against accidental or intentional manipulation, loss, destruction or access by unauthorized persons.

Communication and data transfer on our website are carried out using SSL (Secure Socket Layer). As a result, all information is transmitted securely and encrypted. The measures taken are subject to regular review and are up to date with latest technology.

3. Definition of personal data

Personal data is any information relating to individuals whose identity is identified or identifiable, such as name, contact information, billing information or IP address.

4. Personal data we collect and how we process it

Information we collect

When you visit our website, we receive your personal data either from you providing it to us or via so-called cookies that automatically record data. For more information about how cookies are used on our website, see 6.

Data provided by you

Personal data that you transmit electronically on our website, e.g. in contact forms (name, e-mail address, postal address or other personal information) or when making a purchase transaction in our online shop (name, address, e-mail address, telephone number, payment method) is only used by us for the specified purpose, processed in accordance with the applicable data protection regulations, stored securely and will not be passed on to third parties – such as address publishers and direct advertising companies.

Personal data you provide us will be processed for the purposes described below. We will only send you information if you have registered for relevant services and we have your consent to do so.

Processing of personal data by partners

Your personal data will only be passed on to third parties in regulation with the applicable law, i.e for the purpose of processing your order, fulfilling billing and payment, for marketing purposes or if you have given your prior consent. When processing your purchase we use partners such as banks, tax consultants, payment service etc that will receive the necessary data for order processing. The data passed on may only be used by our partners to fulfill their task.

These partners have been carefully selected and take appropriate technical and organizational measures to ensure that your data is processed in accordance with data protection regulations and that your rights are protected. The partners are not permitted to use the personal data provided for their own or advertising purposes or to pass it on to third parties.

5. Data processing not requiring consent:

General contact form:

  • Contact form: When using the contact form, the following personal data will be processed: first and last name, address, e-mail, contact information and text of your request
  • Purpose: Answering your query, contacting you in the course of initiating business, customer acquisition/customer care, efficient communication.
  • Justification: fulfillment of contract or implementing of pre-contractual measures in accordance with Article 6 (1) (b) GDPR
  • Storage period: 6 months. In case of fulfillment of a contract (purchase) the data will be deleted in compliance with the applicable tax retention periods of 7 years or 10 years depending on product liability.

Order and payment processing in our online shop and customer account

  • Order processing: during the order process in the Woocommerce online shop, the following personal customer data is processed: first and last name, address, e-mail, payment method. Optionally, users can create a user account. Users are informed which mandatory information will need to be provided during the registration process.
  • Payment processing: by using the online payment service Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland, the following personal data is processed: first and last name, address, e-mail address, telephone number, payment method
  • Purpose: Provision of contractual services as part of an online shop for order and purchase processing, billing, delivery and customer service.
  • Justification: for the processing and fulfilling of the contract in accordance with Article 6 (1) (b) GDPR.
  • Storage period: the data is stored for as long as it is necessary to fulfill the purpose for which it was collected or to execute the contract. After the purchase has been completed, there may be a need to store data in order to comply with contractual or legal obligations.

6. Data processing requiring consent:

Newsletter

We use the service provider Brevo (formerly sendinblue) — 106 boulevard Haussmann, 75008 Paris, France. French Simplified Joint Stock Company with a registered capital of 387 722 euros

RCS of Paris: 498 019 298, Intra-community VAT number: FR80498019298 to send out newsletters. We use the data you provide (name, e-mail address) and need your consent that you, as the owner of the e-mail address, agree to receive mails via so-called double opt-in. You can unsubscribe from the newsletter at any time using the unsubscribe link in the newsletter.

  • Purpose: Sending information about products, services and events.
  • Justification: Consent in accordance with Art. 6 Para. 1 lit a GDPR.
  • Storage period: As long as the newsletter is sent and no objection is made.

Cookies

Cookies are small text files that are sent to your computer or mobile device from a website and are then stored by your web browser.There are two different types of cookies. So-called session cookies, which are deleted as soon as you close your browser, and permanent cookies, which remain on your data medium until you delete them manually in your browser.

We use permanent cookies to recognize you the next time you visit our website. This helps us to design our websites and optimize our offers for you and makes it easier for you to use our website, e.g.by storing certain of your entry information so that you do not have to repeat it next time you visit our website.

In addition to technically necessary cookies, we also use cookies on our website that enable an analysis of user behaviour and improve the performance and functionality of our website. Only these technically necessary cookies are set without consent. You can activate or deactivate all other cookies individually with our consent management solution and so give or revoke your consent. We would like to point out that our website and services may only have limited functionality if you disable cookies or revoke your consent.

7. Embedded Social Media Elements

We integrate elements of social media services on our website in order to display images, videos and texts.

By visiting pages that display these elements, data is transferred from your browser to the respective social media service and stored there. We have no access to this data.

The following links will take you to the pages of the these social media services, where it is explained how they handle your data:

Facebook (Meta)

On this website we use functions from Facebook, a social media network from Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland.

You can read about the functions (social plug-ins) provided by Facebook at https://developers.facebook.com/docs/plugins.

By visiting our website, information can be transmitted to Facebook. If you have a Facebook account, Facebook can associate this data with your personal account. If you do not want this, please log out of Facebook.

The privacy policy outlining information Facebook collects and how they use it can be found at http://www.facebook.com/policy.php.

Instagram (Meta)

We use functions of the social media network Instagram from Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland on our website.

Using Instagram content embedding features (embed function) allows us to display images and videos. Data (IP address, browser data, date, time, cookies) is transmitted to Instagram, stored and evaluated.

If you have an Instagram account and are logged in, this data will be assigned to your personal account and the data stored in it. If you do not want this, please log out of Instagram.

The privacy policy, what information Instagram collects and how they use it can be found at https://privacycenter.instagram.com/.

Vimeo

We are embedding videos from the “Vimeo” platform of the provider Vimeo Inc., 555 West 18th Street New York, New York 10011, USA, on this website.

The privacy policy outlining what information Vimeo collects and how they use it can be found here: https://vimeo.com/privacy.

8. Analysis and marketing measures

Google Analytics

This website uses Google Analytics, a service of Google Ireland Limited Gordon House, Barrow Street Dublin 4, Ireland, to analyze how users use our website. Google Analytics uses “cookies” – text files that are stored on your end device. The information automatically collected by cookies about your use of the website is usually transmitted to a Google server in its global infrastructure and stored there. IP anonymization takes effect on this website. The IP address of the user is shortened within the member states of the EU and the European Economic Area and there is no personal reference. Only in exceptional cases will the full IP address be sent to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage to the website operator.

You have the option of preventing the storage of cookies on your device by changing the relevant settings in your browser. There is no guarantee that you will be able to access all functions of this website without restrictions if your browser does not accept cookies.

You can also use a browser plug-in to prevent the information collected by cookies (including your IP address) from being sent to Google and used by Google. The following link takes you to the corresponding plugin: https://tools.google.com/dlpage/gaoptout?hl=en

Here you find further information on the use of data by Google: https://support.google.com/analytics/answer/6004245?hl=en

Google AdWords

We use Google AdWords Conversion Tracking to measure the success of our advertising measures. After certain goals have been achieved on our website (“conversions”) – such as completing a purchase or registering for our newsletter – this conversion is recorded by Google. Google can use this to measure the number of conversions. In addition, Google will use previously set cookies to match which advertisements were previously clicked on and were therefore decisive for the conversion.

For the placement of Google Ads in the Google advertising network, we use the plugin of the shop system WooCommerce Ireland Ltd., Grand Canal Dock, 25 Herbert Pl, Dublin, D02 AY86, Ireland. The use of advertising cookies can be deactivated here: https://myadcenter.google.com/?sasb=true

9. Tools we use

If we collect and process your personal data as stated, we use the following service providers and tools which – as recipients in terms of the GDPR – could have access to your data. As processors, these service providers are contractually obliged to comply with the data protection regulations:

Brevo (formerly Sendinblue)
106 Boulevard Haussmann, 75008 Paris, France

WooCommerce Ireland Ltd.
Grand Canal Dock, 25 Herbert Pl
Dublin, D02 AY86 Ireland

WooCommerce, Inc.
60 29th Street #343
San Francisco, CA 94110
https://automattic.com/privacy/

Google Ireland Limited
Gordon House, Barrow Street Dublin 4, Ireland EWR

Google LLC
1600 Amphitheatre Parkway Mountain View, CA 94043, USA
Privacy: https://policies.google.com/privacy?hl=en-US

Stripe Payments Europe Limited
1 Grand Canal Street Lower, Grand Canal Dock
Dublin, D02 H210, Ireland

Stripe, Inc.
354 Oyster Point Boulevard
South San Francisco, California, 94080, USA
https://stripe.com/en-at/privacy

We would like to point out that the services mentioned above may result in the processing of personal data and this may be carried out in the USA or other third countries. The European Court of Justice does not see an adequate level of data protection in the USA since the fall of the Privacy Shield. There is therefore a theoretical risk that US authorities may have access to your data for control and monitoring purposes. However, all of our third-party providers have the applicable standard contractual clauses in place. If data is accessed outside of the European Economic Area (EEA), an appropriate level of data protection is guaranteed by using the applicable version of the EU standard contractual clauses.

In the consent banner you can actively agree to the use of the technologies mentioned and the transmission of data to third parties in third countries (including the USA). You can revoke this consent at any time. Please note that based on the settings you have made yourself, it is possible that not all the functions of the site will be available.

10. Your rights and choices

You have the legal right to information, correction, deletion, restriction of processing, objection to processing and data portability.

You can claim these rights by sending a message to the e-mail address office@orloffs.com

We will notify you immediately of any personal data breach if such breach is likely to result in a high risk to your rights and freedoms.

You also have the right to lodge a complaint with the supervisory authority. In Austria the data protection authority is responsible.

11. Updates

We reserve the right to change the data protection policy from time to time to reflect changes of relevant laws, new services or data processing.