The german version of this privacy policy can be found at the following link.

FANTOPLAST Circular Design GmbH
FN 586290t (Commercial Court of Vienna)

Managing Directors:
Julian Jankovic
Maximilian Scheidl
Florian Schäfer, MSc (WU)
Alessia Scuderi
Raphael Volkmer

E-Mail: info@fantoplast.com
Tel: +43-670-605-7253

The protection of your data is particularly important to us. In this document, you can find out more about how we collect and process your personal data. In all cases, data is collected and processed exclusively in consideration of statutory provisions, namely the General Data Protection Regulation (EU) 2016/679 (GDPR), the Austrian Data Protection Act (DSG) and the Austrian Telecommunication Act (TKG 2021). Via the contact details listed above we are available for your questions, requests or revocations at any time. Any linguistic phrasing using the masculine form applies equally to both genders.

Personal data is all data that contains individual details about personal or factual circumstances, for example name, address, email address, telephone number, date of birth, age, gender, photos, contract data. Sensitive data such as health data may also be included.

Whether and how your data is collected and processed depends on whether you visit our website, contact us, subscribe to our newsletter or are our customer, business partner or supplier. We only collect personal data that is necessary for the performance and processing of our services or personal data that you have voluntarily provided to us. If you as a customer do not wish to provide us with any data, we cannot conclude a contract with you.

We would also like to inform you that we may also process data provided by third parties (e.g. company register, Gewerbeinformationssystem Austria [GISA], Edicts Archive (Ediktsdatei), central register of residents [ZMR], credit reference agencies). This includes contact information, information on business licenses, information on functions and responsibilities in companies and information on creditworthiness. The processing of this data is based on our legitimate interest in a complete and up-to-date master data set on your person required for the business relationship. 

We only collect and process your personal data if there is a legal basis for this in accordance with the General Data Protection Regulation (GDPR). All data protection and civil law provisions are also complied with during collection and processing. The legal basis for the collection and processing of your personal data is generally

• consent to processing (Art 6 (1) lit a GDPR): This includes both inquiries by email and registration for our newsletter.

• performance of a contract (Art 6 (1) lit b GDPR): Data is collected and processed for the performance of a contract or in order to take steps at your request prior to entering into a contract.

• compliance with a legal obligation (Art 6 (1) lit c GDPR): This includes, for example, obligations under the Austrian Federal Fiscal Code (BAO).

• Safeguarding the legitimate interests pursued by the controller or a third party (Art. 6 (1) lit. f DPR): This includes ensuring the operation and security of the website, the interest in an up-to-date/complete master data set (see point 2.) and direct advertising (see point 4.).

Other legal bases listed in the GDPR for the collection and processing of data, such as the performance of tasks in the public interest or in the exercise of official authority vested in the controller as well as the protection of vital interests of the data subject are generally not used. If another legal basis is relevant, this will be indicated at the appropriate point.

If your consent is required for the processing of your data, we will only process it after you have given your express consent. You can withdraw your consent at any time by sending an email to the following address: info@fantoplast.at. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

You also have the right to object at any time to the processing of personal data concerning you for the purposes of direct marketing (newsletters [see this point 8.], e-mails, mail to customers to inform them about our range of services). If you object to processing for direct marketing purposes, the personal data will no longer be processed for these purposes. Please send your objection to info@fantoplast.at. The processing of your personal data for the purpose of direct advertising is not necessary for the performance of a contractual relationship.

Our customer relationship management system has been programmed internally, which is why no data is passed on to third parties when it is used. However, we also work with the following service providers:

• World4You Internet Services GmbH, Hafenstraße 35, 4020 Linz, Austria (provision of the server);

• The Rocket Science Group LLC d/b/a Mailchimp, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, United States of America (Newsletter);

• Google LLC, 1600 Amphitheatre Parkway Mountain View, 94043 California, United States of America (Google Drive)

• Österreichische Post Aktiengesellschaft, Rochusplatz 1, 1030 Vienna, Austria (shipping);

• Gebrüder Weiss GmbH, Karatas-Straße 6, 87700 Memmingen, Germany (shipping);

In order to process your request or fulfill your order, it may also be necessary to forward your data to third parties other than the aforementioned third parties (e.g. cooperation partners, lawyers, tax consultants, insurance companies, authorities, IT support and other service providers/processors). However, your data will only be forwarded on the basis of the GDPR, in particular for the performance of a contract, in order to take steps at your request prior to entering into a contract or on the basis of your prior consent.

Some of the recipients of your personal data mentioned above may be located outside your country or process your personal data there. The level of data protection in other countries may not be the same as in Austria. For this reason, we only transfer your personal data (a) within the EU, (b) to countries for which the EU Commission has decided that they have an adequate level of data protection or (c) we take measures to ensure that all recipients have an adequate level of data protection. To this end, we conclude standard contractual clauses, for example. If there are no suitable guarantees, data will only be transferred if this is necessary for the establishment, exercise or defense of legal claims (Art. 49 (1) lit. e GDPR) or for the performance of a contract (Art. 49 (1) lit. b or c GDPR).

To optimize our website in terms of system performance, user-friendliness and the provision of useful information about our services, the provider of the website automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. 

This includes

• Your Internet Protocol address (IP address) or the host name,

• the browser used,

• the duration of the visit to the website as well as the date and time,

• the pages accessed on the website,

• the language settings and the operating system,

• the "leaving page" (the URL on which the user left the website),

• your Internet Service Provider;

The information collected is not processed on a personal basis. Likewise, this data is not merged with personal data sources. We reserve the right to check this data retrospectively if we become aware of specific indications of unlawful use.

We utilize Google Analytics, a web analytics service provided by Google LLC, to understand how visitors interact with our website. Google Analytics employs cookies to collect information such as your IP address, browser type, referring pages, and time spent on pages. This data helps us improve our website's performance and user experience.​

We have configured Google Analytics to anonymize IP addresses in accordance with GDPR guidelines. The information generated by these cookies is transmitted to and stored by Google on servers in the United States. Google uses this information to evaluate your use of the website, compile reports on website activity, and provide other services related to website activity and internet usage.​

You can prevent the collection of data generated by cookies and related to your use of the website (including your IP address) by Google, as well as the processing of this data by Google, by downloading and installing the browser plugin available at: https://tools.google.com/dlpage/gaoptout.

Any links to external websites are provided as a service. These websites are independent and beyond our control, which is why we accept no responsibility for the content of external websites.

You have the option of subscribing to our newsletter via our website (double opt-in procedure). After registering on the website, you will receive an email asking you to confirm your registration. You can unsubscribe from the newsletter at any time by clicking on the unsubscribe link at the end of a newsletter. The revocation of consent can also be sent by post or by e-mail to the contact details listed under point 1. Our newsletter is sent by us. Data processing is carried out on the basis of the statutory provisions of Art 165 (3) of the Austrian Telecommunication Act (TKG 2021) and Art. 6 (1) lit a GDPR (consent).

You have the option of ordering a compilation of different samples (sample boxes) via our website. This requires the provision of personal data (contact details for shipping and invoicing). Without entering this data, a contract cannot be concluded and the samples cannot be sent. Data processing is carried out on the basis of the statutory provisions of Art 165 (3) of the Austrian Telecommunication Act (TKG 2021), Art. 6 (1) lit a GDPR (consent) and Art. 6 (1) (b) GDPR (processing for the performance of a contract).

We will not store data longer than necessary to fulfill contractual or legal obligations (in particular the Federal Fiscal Code [BAO]) and to defend against any liability claims (limitation periods of up to 30 years). If you have registered for our newsletter, your data will be stored until you unsubscribe or revoke your consent to receive it. Data of applicants who are not hired will be deleted within seven months after rejection (Art 15 (1), 26 (1) Austrian Federal Equal Treatment Act [GlBG] plus delivery times) if no consent to keep records has been given.

As a data subject, you have the right at any time to

• information about your stored personal data and
• the right to rectification,
• the right to data portability,
• the right to object,
• the right to restriction of processing and
• the right to erasure (insofar as there is no retention obligation).

If there are any changes to your personal data, please inform us accordingly. Your request for information, erasure, rectifictation, restriction of processing, objection and/or data portability, in the latter case, provided that this does involve a disproportionate effort, can be sent to the address of the person responsible listed in point 1 of this declaration by post or by e-mail to info@fantoplast.at.

If you are of the opinion that the processing of your personal data by us violates the applicable data protection law or your data protection claims have been violated in any other way, you have the option of complaining to the competent supervisory authority. In Austria, the competent authority for this is the Data Protection Authority (Datenschutzbehörde, Barichgasse 40-42, 1030 Vienna, e-mail: dsb@dsb.gv.at, telephone: +43 1 521 52-25 69).