Privacy policy

Purpose of this notice

This Website Privacy Notice (this "Notice") explains which personal data are collected when you visit our website www.supportbravehood.org (our "Website") and how this data is processed by the non-profit organization Guiding Lights – Society to support people in need and charity initiatives, Postfach 0007, 1166 Vienna (Reg. No: 1500277594) as the data controller ("Guiding Lights" or "we").

This Notice is addressed to any visitor of our Website ("data subject "or "you").

We process your personal data in accordance with the EU General Data Protection Regulation ("GDPR") and applicable national data protection laws. Unless otherwise defined in this Notice, the terms used herein shall have the same meaning as defined in the GDPR.

What personal data we collect and how we use it

When you use our Website we may process those personal data which you voluntarily provide to us (e.g. by means of our contact form).

However, you can also visit our Website without actively providing us with information about you. In this case we collect certain data that your browser transmits to our website server (i.e. log files) as well as data that we collect via the use of cookies or similar technologies.

The following explanations shall serve to inform you about the different ways we may collect personal data about you on our Website and for what lawful purposes we may use them.

Personal data you actively disclose to us

When you actively communicate with us via our Website, we process those personal data that you voluntarily provide to us. In particular, this relates to our following services:

  • Contact forms: When you choose to contact us via the contact form provided on our Website the personal data you provide to us (e.g. name, email address, correspondence) will be processed for the purpose of answering your questions, fulfilling your requests or otherwise communicating with you.
    Legal basis: Art 6(1) b GDPR – performance of (pre-)contractual duties.
  • Orders of our products and donations: If you donate or order one of our #bravehood products, we need to process your personal data in order to fulfill our request and our contractual duties with you (e.g. your payment information, contact details, delivery address for shipping).
    Legal basis: Art 6(1) b GDPR – performance of (pre-)contractual duties.
  • User Account: If you have registered a user account on our Website, the personal data you voluntarily provide to us (e.g. name, email address, date of birth, password, product requests) will be processed for the purposes of providing you access to your user account and to send you personalized content offers. 
    Legal basis: Art 6(1) b GDPR – performance of contract.

Some of the data we request in connection with our above services may be marked as mandatory fields. You are not required to provide these data. However, without providing this information we may not be able to process your request or provide our services.

Log files

You may also visit our Website without actively providing us with information about you. In this case we collect certain data that your browser transmits to our website server (i.e. log files).

Our log files contain the following information: (i) date and time of retrieval of our Website, (ii) type, version and settings of your web-browser, (iii) your operating system and internet service provider, (iv) requested pages and files, (v) website used prior to visiting our Website as well as (vi) your IP-address. The IP address is a specific number assigned to your computer which enables your device to communicate in a network using the Internet Protocol (IP). IP addresses may qualify as personal data as they technically allow the identification of the user in certain circumstances.

The processing of these log files is necessary for us to maintain the functionality, stability and security of our Website. We may also process them for the purpose of forensic investigations in the case of a security incident or in order to generate user statistics. For statistical purposes your IP-address is used in anonymized form only.

Legal basis: Art 6(1) f GDPR – legitimate interest in maintaining functionality, stability and security of our Website.

Cookies

In addition, this Website uses cookies. These are small text files that may be placed on your device while browsing our Website which store certain information about you. Cookies cannot access, read or modify other data stored on your device. When we refer to “cookies” we include other technologies with similar purposes, such as pixel tags.

We use two types of cookies on our Website:

Essential cookies: Essential cookies help to make a website usable by enabling basic functions such as page navigation and access to secure areas of the website. Without these cookies, the website cannot function properly. For a detailed description of the used necessary cookies and respective purposes kindly see list below.

Legal basis: Section 165 Telecommunications Act 2021

Statistical cookies: Statistical cookies help shop owners understand how customers interact with websites by anonymously collecting and reporting information. Marketing cookies are used to track visitors across Web pages. The goal is to serve advertisements that are relevant and appealing to the individual user and are therefore more valuable to third-party advertisers. For a detailed description of the used optional cookies and respective purposes kindly see list below.

Legal basis: Art 6(1) a GDPR – consent

Essential cookies used on our Website

Name Function Duration
_ab Used in connection with access to admin. 2y
_secure_session_id Used in connection with navigation through a storefront. 24h
_shopify_country Used in connection with checkout. session
_shopify_m Used for managing customer privacy settings. 1y
_shopify_tm Used for managing customer privacy settings. 30min
_shopify_tw Used for managing customer privacy settings. 2w
_storefront_u Used to facilitate updating customer account information. 1min
_tracking_consent Tracking preferences. 1y
c Used in connection with checkout. 1y
cart Used in connection with shopping cart. 2w
cart_currency Used in connection with shopping cart. 2w
cart_sig Used in connection with checkout. 2w
cart_ts Used in connection with checkout. 2w
cart_ver Used in connection with shopping cart. 2w
checkout Used in connection with checkout. 4w
checkout_token Used in connection with checkout. 1y
dynamic_checkout_shown_on_cart Used in connection with checkout. 30min
hide_shopify_pay_for_checkout Used in connection with checkout. session
keep_alive Used in connection with buyer localization. 2w
master_device_id Used in connection with merchant login. 2y
previous_step Used in connection with checkout. 1y
remember_me Used in connection with checkout. 1y
secure_customer_sig Used in connection with customer login. 20y
shopify_pay Used in connection with checkout. 1y
shopify_pay_redirect Used in connection with checkout. 30 minutes, 3w or 1y depending on value
storefront_digest Used in connection with customer login. 2y
tracked_start_checkout Used in connection with checkout. 1y
checkout_one_experiment Used in connection with checkout. session

Statistical cookies used on our Website

Name Function Duration
_landing_page Track landing pages. 2w
_orig_referrer Track landing pages. 2w
_s Shopify analytics. 30min
_shopify_d Shopify analytics. session
_shopify_s Shopify analytics. 30min
_shopify_sa_p Shopify analytics relating to marketing & referrals. 30min
_shopify_sa_t Shopify analytics relating to marketing & referrals. 30min
_shopify_y Shopify analytics. 1y
_y Shopify analytics. 1y
_shopify_evids Shopify analytics. session
_shopify_ga Shopify and Google Analytics. session

 

How to control and manage the use of cookies

By clicking on the "Accept"-button in the Website's cookie banner you agree to the use of the above listed optional cookies on our Website. Your consent can be withdrawn (for all or individual cookies) at any time with effect for the future.

You may also refuse the use of cookies by selecting the appropriate settings on your browser or by deleting the cookies from the device and browser. Most browsers accept cookies automatically, but you can alter the settings of your browser to erase cookies or prevent automatic acceptance if you prefer. Generally you have the option to see what cookies have been placed and delete them individually, block third party cookies or cookies from particular sites, accept all cookies, to be notified when a cookie is issued or reject all cookies. Visit the ‘options’ or ‘preferences’ menu on your browser to change settings, and check the following links for more browser-specific information:

Cookie settings in Internet Explorer
Cookie settings in Firefox
Cookie settings in Chrome
Cookie settings in Safari

You should be aware that any preferences will be lost, if you delete all cookies and many websites will not work properly or you will lose some functionality. We do not recommend turning cookies off when using our website for these reasons.

To whom we may disclose your personal data

For the above mentioned purposes we may share your personal data with the following recipients:

  • Guiding Light - Organisation for Ethics and Sustainability in Technologies
  • Shopify
  • Printful
  • Advertising und web-analysis partners who provide certain services to us in connection to our Website
  • Where disclosure is required (i) by law or regulation or (ii) to establish, exercise or defend legal claims, we may also disclose personal data to a competent authority, such as supervisory, regulatory or criminal authorities, courts of law or other third parties who advise us in this context (e.g. lawyers or forensics experts).

Some of these recipients may be located in countries outside the EU/EEA for which an adequate level of data protection has not yet been established by the EU Commission. In particular, this includes our group companies. It should be noted that the level of data protection in such countries may not be the same as within the EU/EEA. Also, subject to local laws and regulations data may be accessible to local authorities or courts.

However, where personal data is transferred to such third countries we implement appropriate safeguards to ensure that your rights are protected in accordance with the GDPR. Further details on the implemented safeguards as well as copies of the respective agreements are available on request at contact@supportbravehood.org.

How long we keep your personal data

Log files (see Section 2.5 above) are generally kept for a period of three months. Beyond this time period log files will only be stored for the purpose of investigating irregularities or security incidents in our system. For the storage duration of cookies see Section 2.6 above.

We generally retain your personal data for as long as this is necessary for the fulfilment of the purpose for which they were obtained. Thus, in any case we process your personal data for the duration of our contractual or service relationship with you (see Section 2.4 above). Beyond this time period we keep your personal data to comply with statutory retention obligations (e.g. to fulfill the 7-year retention obligation under applicable tax and company law). Where necessary we may also keep your data for as long as potential legal claims against us are not yet time-barred; for certain claims the statutory limitation period may be up to 30 years.

As soon as there are no legitimate grounds for the further storage of personal data available, they will either be deleted or anonymized.

Your rights as a data subject

As a data subject you have inter alia the following rights under the statutory conditions:

  • to check whether and what kind of personal data we hold about you and to request copies of such data (right of access)
  • to request correction, supplementation or deletion of your personal data that is inaccurate or processed in non-compliance with applicable requirements (right to rectification and erasure)
  • to request us to restrict the processing of your personal data (right to restriction)
  • in certain circumstances, to object for legitimate reasons to the processing of your personal data or to revoke consent previously granted for the processing (right to object or withdraw consent)
  • to receive the personal data you provided to us in a structured, commonly used and machine-readable format and to transmit those data to another controller (right to data portability)

We do not process your personal data for the purpose of taking decisions based solely on automated processing, including profiling, which produce legal effects concerning you (Art 22 GDPR).

To exercise any of the above rights kindly send an email to contact@supportbravehood.org. In addition, you have the right to lodge a complaint with a supervisory authority, if you believe your data protection rights have been violated. For Austria the competent authority is the Data Protection Authority (Datenschutzbehörde).

Updates to this notice

We may update this Notice to reflect legal, technical or business changes. When we update this Notice, we will take reasonable steps to inform you about the changes made. You will find the date of the "last update" at the end of this Notice.

Disclaimer

The Website contains links to third-party websites. We have no control over the content or privacy practices of these other websites. Please read the respective data protection provisions of other websites that you visit.

Our contact details

Should you have any requests or questions in relation to the processing of your personal data by us, kindly address them at contact@supportbravehood.org.

Our office address:
Guiding Lights  Society to support people in need and charity initiatives
Postfach 0007
1166 Vienna
Austria

Last updated: 14.12.2022