top of page

Data protection

Introduction and Contact Details of the Controller

1.1 We are pleased that you are visiting our website and thank you for your interest. Below we inform you about how we handle your personal data when using our website. Personal data refers to all data that can be used to personally identify you.

1.2 The data controller for processing personal data on this website within the meaning of the General Data Protection Regulation (GDPR) is Brass Innovations GmbH, Schützenweg 12, 21130 Mistelbach, +43 699 150 90 153, info@brass-innovations.com. The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

2) Data Collection When Visiting Our Website

2.1 If you use our website purely for informational purposes, i.e., you do not register or otherwise provide us with information, we only collect data that your browser transmits to the server (so-called "server log files"). When you visit our website, we collect the following data, which is technically necessary for us to display the website:

  • The page you visited on our site

  • Date and time of access

  • Amount of data sent in bytes

  • Source/reference from which you came to the site

  • Browser used

  • Operating system used

  • IP address used (possibly anonymized)

Processing is carried out in accordance with Art. 6(1)(f) GDPR based on our legitimate interest in improving the stability and functionality of our website. Data will not be shared or used in any other way. However, we reserve the right to review the server log files retrospectively if there are specific indications of unlawful use.

2.2 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries). You can recognize an encrypted connection by the "https://" prefix and the lock symbol in your browser's address bar.

3) Cookies

To make visiting our website attractive and to enable the use of certain functions, we use cookies—small text files that are stored on your device. Some cookies are deleted automatically when the browser is closed (so-called "session cookies"), while others remain on your device longer and allow us to save site settings (so-called "persistent cookies"). You can find the storage duration in your browser’s cookie settings overview.

Where cookies process personal data, this is done in accordance with Art. 6(1)(b) GDPR (for contract performance), Art. 6(1)(a) GDPR (with consent), or Art. 6(1)(f) GDPR (legitimate interests in optimal functionality and user-friendliness).

You can configure your browser to notify you about the setting of cookies and to allow cookies only in individual cases or to exclude cookies altogether. Please note that disabling cookies may limit the functionality of our website.

4) Contacting Us

When you contact us (e.g., via contact form or email), personal data is collected and processed solely for the purpose of handling and responding to your inquiry and only to the extent necessary.

The legal basis for processing this data is our legitimate interest in responding to your inquiry (Art. 6(1)(f) GDPR). If your contact aims to enter into a contract, the additional legal basis is Art. 6(1)(b) GDPR. Your data will be deleted once your inquiry has been resolved, provided there are no legal retention obligations.

5) Data Processing When Creating a Customer Account

In accordance with Art. 6(1)(b) GDPR, personal data is collected and processed when you open a customer account, to the extent necessary. Required data can be seen in the form fields.

You may request the deletion of your account at any time by contacting us at the address above. Your data will then be deleted unless all related contracts have been fully executed, no legal retention periods apply, and there is no legitimate interest in further storage.

6) Use of Customer Data for Direct Marketing

Newsletter Subscription

If you subscribe to our email newsletter, we will regularly send you information about our offers. The only required field is your email address; any additional data is voluntary and used for personalization. We use the double opt-in method to ensure you wish to receive newsletters.

By clicking the confirmation link, you consent to the use of your data as per Art. 6(1)(a) GDPR. We store your IP address and the time of registration to trace any misuse.

You may unsubscribe at any time via the unsubscribe link in the newsletter or by contacting us. Your email address will be removed from our distribution list unless you have expressly consented to further use or we are legally permitted to retain it.

7) Data Processing for Order Fulfillment

7.1 For contract fulfillment, personal data may be transferred to the transport company or payment provider involved (Art. 6(1)(b) GDPR). If updates are required for digital goods, we will use your contact data to comply with our legal obligations (Art. 6(1)(c) GDPR).

We work with the following service providers, who may receive personal data for these purposes:

7.2 Payment Service Providers

  • Mollie
    Available payment methods from Mollie B.V., Keizersgracht 313, 1016 EE Amsterdam, Netherlands. If you select a prepaid option, data such as name, address, and payment details are transferred to Mollie per Art. 6(1)(b) GDPR solely for payment processing.

  • PayPal
    Available payment methods from PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. Payment data and order details are transferred under Art. 6(1)(b) GDPR. For payments requiring preauthorization, additional personal data may be requested and used for a credit check (Art. 6(1)(f) GDPR).

Credit checks may use statistical probability values (scores) based in part on address data. You can object to this processing, though the provider may still process your data if necessary for payment execution.

8) Site Functionality

8.1 YouTube
Videos are embedded using a plugin by Google Ireland Limited. Data may also be transmitted to Google LLC in the USA. A connection to YouTube’s servers is established during playback, transmitting your IP address. YouTube uses cookies to analyze behavior and prevent abuse.

If you are logged into your YouTube account, your activity may be linked to your profile. You must log out to avoid this. Data processing only takes place with your consent (Art. 6(1)(a) GDPR), which can be revoked at any time via the cookie consent tool.

YouTube complies with the EU-US Data Privacy Framework.

8.2 Google reCAPTCHA
Used to ensure input is made by a human and to prevent abuse. This includes collecting IP address, browser details, and visit duration, possibly using cookies. If cookies are involved, processing only occurs with consent (Art. 6(1)(a) GDPR). Otherwise, processing is based on legitimate interest (Art. 6(1)(f) GDPR).

Google Fonts may be loaded for CAPTCHA styling. We have a data processing agreement with Google. Google also complies with the EU-US Data Privacy Framework. For more information, see: https://business.safety.google/intl/de/privacy/

9) Tools and Other Services

Cookie Consent Tool
We use a consent tool to obtain valid consent for cookies and services. It displays options allowing you to select preferences. Cookies requiring consent are only activated once consent is given. Technically necessary cookies are set to store your preferences.

If personal data is processed (e.g., IP address), it is based on Art. 6(1)(f) GDPR for proper compliance. Additionally, Art. 6(1)(c) GDPR applies to our legal obligation.

We have a data processing agreement with the tool provider where required.

10) Data Subject Rights

10.1 Under the GDPR, you have the following rights regarding your personal data:

  • Right of access (Art. 15 GDPR)

  • Right to rectification (Art. 16 GDPR)

  • Right to erasure (Art. 17 GDPR)

  • Right to restriction of processing (Art. 18 GDPR)

  • Right to notification (Art. 19 GDPR)

  • Right to data portability (Art. 20 GDPR)

  • Right to withdraw consent (Art. 7(3) GDPR)

  • Right to lodge a complaint (Art. 77 GDPR)

10.2 RIGHT TO OBJECT

If we process your personal data based on a balancing of interests under Art. 6(1)(f) GDPR, you have the right to object at any time for reasons relating to your particular situation.

If you object, we will stop processing your data unless we can demonstrate compelling legitimate grounds or the processing is necessary for legal claims.

If your data is used for direct marketing, you have the right to object at any time. We will cease processing for such purposes upon objection.

11) Duration of Storage of Personal Data

Storage duration depends on the legal basis, purpose of processing, and statutory retention periods.

If processing is based on consent (Art. 6(1)(a) GDPR), data is stored until consent is withdrawn.

For contract-related processing (Art. 6(1)(b) GDPR), data is stored as long as necessary for fulfillment and retention periods. Where legitimate interests apply (Art. 6(1)(f) GDPR), data is stored until an objection is raised.

Unless otherwise specified, personal data is deleted when it is no longer needed for its original purpose.

bottom of page