Burton Sportartikel GmbH takes data protection issues very seriously and collects, processes and uses customers personal data exclusively in accordance with the principles described below, taking into account the applicable data protection laws.
1.1 – The body responsible for operating Burton.com, as well as for collecting, processing and using your personal data in accordance with the applicable data protection provisions is Burton Sportartikel GmbH, Hallerstraße 111, 6020 Innsbruck, Austria.
COLLECTION AND STORAGE OF PERSONAL DATA
2.1 – The term "personal data" refers to all information relating to an identified or identifiable physical person. This includes, for example, your name, telephone number, postal address and e-mail address.
2.2 – Personal data, as defined in the applicable data protection provisions, also include information concerning your use of Burton.com. Upon your consent, these will be collected, processed, stored and used by our Web servers to enable the provision and optimization of our Website and ensure system security and for statistical purposes (the "User Data"). These include, inter alia, the connection data of the requesting computer (IP address), the pages that you visit on our Website, the date and length of your visit, the identification data of the type of browser and operating system used, the website from which you visit us, the content of your shopping cart in case of a potential purchase and the length of time until the order is placed. We do not utilize User Data to determine your identity, nor do we combine them with other personal data stored by us.
2.3– Apart from the User Data described in paragraph (2.2) above, we will only collect personal data if you voluntarily share them with us. The following data, in particular, are collected when you place an order or open a customer account: name, postal address, e-mail address and telephone number. Payment information, such as your bank details or credit card number, is also collected when you place an order. See more details under “Data Protection of Payments and Online Orders”.
2.4 – You have the option to update the data in your customer account anytime to add further details (e.g. date of birth) on a voluntary basis.
2.5 – The personal data shared by you (name, postal address, e-mail address, telephone number, bank details, credit card number) are stored lawfully and as specified by the applicable data protection provisions. Your data will, of course, be treated confidentially.
DATA PROCESSING AND USE
3.1 – We process your personal data based on at least one of following six legal grounds, recognized by GDPR:
- 1. Consent – the data subject whom the personal data is about has consented to the processing
- 2. Contractual – processing is necessary for the performance of a contract with the data subject or to take steps to enter into a contract
- 3. Legal obligation – processing is necessary for compliance with a legal obligation
- 4. Vital interests – processing is necessary to protect the vital interests of the data subject or another person
- 5. Public tasks – processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the business
- 6. Legitimate interests – processing is necessary for purposes of legitimate interests pursued by the business or a third party, except where such interests are overridden by the interests, rights or freedoms of the data subject.
For example, will your personal data be used to perform the agreements concluded between you and us, such as delivering products to the address provided by you or when you consent, your data may be used for purposes of internal marketing research to meet our customers' needs, as well as for sending e-mails containing information about our product line. Your data will be transferred to the US, where it will be stored as required by GDPR legislation. You can opt-out at any time after you have given your consent.
DATA PROTECTION OF PAYMENTS AND ONLINE ORDERS
4.1 – During the ordering process, your personal information is encoded via “Secure Socket Layer” (SSL) and transferred through the Internet (excluding address transfer within newsletter subscriptions). We use a highly secure 128-Bit encoding system. Credit card details are not saved, but directly received and processed by our payment provider 'Adyen' and our fraud/id security provider ‘Riskified’. No payment or order made on Burton.com is subjected to a credit check or scoring system unless you are explicitly informed of this during checkout when selecting the payment method. Burton.com operates on the Salesforce platform and is 100% PCI Compliant, this means that at no point during the order process or post order process are credit card details or bank account numbers saved or held by Burton.com.
4.2 – We use both technical and organizational measures to secure our website and systems against data loss, destruction, access, manipulation or distribution by unauthorized persons. Access to your customer account is only possible by entering your personal password. Please keep your login details confidential at all times and always close your browser window once you have finished communicating with us, especially if you are using a shared computer.
CHILDRENS DATA PROTECTION
5.1 – Children Under the Age of 13, Read This: Burton is committed to protecting the online privacy of children. In accordance with the Children's Online Privacy Protection Act, we will not knowingly collect any information from children under the age of 13. Burton.com does not sell products for purchase by children. We sell children's products for purchase by adults. 5.2 – Children Under the Age of 16, Read This: Sorry kids, but if you are under 16, you may shop at burton.com only with the involvement of a parent or guardian.
6.1 – By registering for the Burton Newsletter, you expressly authorize us by giving your consent to use your e-mail address (including metadata) for internal advertising purposes. You can object to delivery of the newsletter and the use of your e-mail address for advertising purposes with prospective effect at any time by clicking on the link included in the newsletter or in the promotional e-mails or via e-mail firstname.lastname@example.org . We will also notify you of this right of objection separately in the e-mail that accompanies our newsletter and in all other promotional e-mails.
8.3 – Youtube Plug-Ins We use features on this website from YouTube, a video service, YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. By accessing pages of our website that have integrated YouTube videos, data is transmitted to YouTube, stored and evaluated. If you have a YouTube account and you're signed in, it will be associated with your personal account and the data stored in it. What data Google collects and how it uses this information can be found here.
8.6 – Google Maps Plug-Ins We use Google Maps from Google Inc. (1600 Amphitheater Parkway Mountain View, CA 94043, USA) on our website. By using the features of this map, data will be transmitted to Google. What data Google collects and how it uses this information can be found here.
8.7 – Facebook Pixel We use on this website the Facebook Pixel of Facebook, a social media network of the company Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2 Ireland. The code implemented on this page can evaluate the behavior of visitors who have come to this website from a Facebook ad. This can be used to improve Facebook ads and this information is collected and stored by Facebook. The collected data is not visible to us but can only be used within the scope of advertising advertisements. The use of the Facebook pixel code also sets cookies. By using the Facebook pixel, the visit to this website will be communicated to Facebook, so that visitors get to see matching ads on Facebook. If you have a Facebook account and are logged in, the visit to this website will be associated with your Facebook user account. How Facebook uses this pixel for advertising campaigns can be read here. If you’re signed in to your Facebook account, you can change your ad settings here. Click here to manage your preferences for usage-based online advertising. You can disable or enable many providers at once or make settings for individual providers. More information about Facebook's data policy can be found here.
LINKS TO OTHER WEBSITES
10.1 – On our website, you will also find links to other websites. We specifically do not hold any kind of liability for the accuracy, completeness, legality, objectivity and timeliness of the contents of these websites.
YOUR RIGHTS RELATING TO YOUR PERSONAL DATA
11.1 - You have the right to request: access to your personal data; an electronic copy of your personal data (portability); correction of your personal data if it is incomplete or inaccurate; or deletion or restriction of your personal data in certain circumstances provided by applicable law. These rights are not absolute. Where we have obtained your consent for the processing of your personal data, you have the right to withdraw your consent at any time. If you would like to request a copy of your personal data or exercise any of your other rights, please contact us using the contact details in the “Question and Feedback” section below.
QUESTIONS AND FEEDBACK