What personal data is collected

In order for us to process your order, you must provide us with certain information. This includes your name, email address, postal address, payment information and details of the product you are ordering. You also have the option to provide us with additional personal information if you contact us directly.

Why we need your information and how we use it

we rely on a number of legal bases to collect, use and share your information. In fact:

  • to the extent we need your information to provide our services, for example to process your order, resolve disputes, or provide customer support;
  • if you have given your express consent (which you can revoke at any time), for example by registering for our newsletter mailing list;
  • if it is necessary to comply with a legal obligation or court order, or in connection with a legal claim, such as the need to retain information about your purchases due to tax legislation; and
  • as necessary for the purposes of our legitimate interests – provided these legitimate interests are not overridden by your rights or interests – such as  to provide and improve our services. We use your information to provide the services you have requested from us and in our legitimate interest to improve our services;

Comments

When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.

An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.

Media

If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.

Cookies

If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.

If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.

If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.

Embedded content from other websites

Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

Who we share your data with

Customer data is important to our business. We will only release your personal information for specific reasons and under very specific circumstances, as follows:

  • Service Providers: We use certain trusted third parties to perform tasks and provide services for our shop, such as parcel services. We share your personal information with these third parties, but only to the extent necessary to perform those services.
  • Business Transfers: If we sell our business or merge with another, we may disclose your information as part of that transaction, to the extent permitted by law.
  • Compliance with Laws: We may collect, use, retain, and share your information when we have a good faith belief that doing so is reasonable and necessary to: a) respond to legal process or governmental requests; b) enforce our contracts, terms and policies; c) prevent, investigate and correct fraud and other illegal activities, security or technical issues; or d) protect the rights, property and safety of our customers or others.

How long we retain your data

If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.

For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.

What rights you have over your data

If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.

If you reside in certain regions, including the EU, you have a number of rights in relation to your personal information. Some of these rights are general and others are specific. These rights are described below:

  • Access: You may have the right to access and receive a copy of the personal information we hold about you by writing to us using the contact information below.
  • Change, restriction, deletion: You may also have the right to change your personal information, limit our use of that information, or delete it. Except in exceptional circumstances (such as when we need to store data for legal reasons), we will generally delete your personal data upon request.
  • Object: You can object 1. to our processing some of your data in relation to our legitimate interests and 2. to you receiving marketing messages from us after you have previously given your express consent. In such cases, we will delete your personal data unless we can demonstrate compelling legitimate grounds for its continued use or it is required for legal reasons.
  • Complaint: If you reside in the EU and wish to raise a concern about our use of your information – without prejudice to any other rights you may have – you have the right to raise these concerns with your local data protection authority.

Where your data is sent

Visitor comments may be checked through an automated spam detection service.

Transfer of personal data to countries outside the EU:

I may store and process your information through third party hosting services in the US and other countries. As a result, I may transfer your personal information to countries that have data protection and regulatory surveillance laws that differ from the relevant laws in your country. If I am deemed to be transferring information about you outside of the EU, I rely on the EU-US Privacy Shield as a legal basis for the transfer as Google Cloud is EU-US Privacy Shield certified.

How to contact me

For the purpose of the EU General Data Protection Regulation, I, Walter Corn, am the data controller of Corn GmbH for your personal data. If you have any questions or concerns, you can contact me at walter.corn@gmx.at. Alternatively you can write to me at the following address:

Walter Corn, Sierningerstrasse 55a, 4400 Steyr, Austria

Who we are

“Burro de Oro Design” is part of the company Corn GmbH, Sierningerstrasse 55a, 400 Steyr, Austria.
Our website address is: https://burro-de-oro.com.