DATA PRIVACY POLICY
Valid as of 21 August 2023
eXpertcode GmbH has its registered office in Vienna and its business address at Wallnerstraße 3/4/19, 1010 Vienna (hereinafter the “eXpertcode“ or “we”).
1. SCOPE OF APPLICATION
1.1. This Data Privacy Policy applies to the use of the website ankeruhr.art (the „Website“) of eXpertcode, the purchase of a digital reproduction of “The Ankeruhr” by Franz Matsch as a series of non-fungible tokens through the Website (“The Ankeruhr NFT” – short „MT-NFT“).
1.2. Processing of personal data by eXpertcode as the data controller according to Art. 4(7) GDPR is subject to the General Data Protection Regulation (“GDPR”) and the Austrian Data Protection Act (“DSG”).
1.3. Personal data means all information according to Art. 4(1) GDPR that relates to an identified or identifiable natural person.
2. DATA PROCESSING Activities
eXpertcode processes the following personal data for the following purposes:
2.1. Providing the Website
2.1.1. In order to be able to provide you with the Website (Art. 6(1)(b) GDPR) and to be able to detect, prevent and investigate attacks on the Website (Art. 6(1)(f) GDPR), we process the following personal data:
2.1.1.1. URL;
2.1.1.2. Date and time you access the Website;
2.1.1.3. Name and version of the browser;
2.1.1.4. Type of the browser and settings;
2.1.1.5. Operating system; and
2.1.1.6. Referral URL.
2.1.2.The legitimate interest of eXpertcode is to be able to detect, prevent and investigate attacks on the Website and thus ward off damage from epXpertcode and the users.
2.1.3.We store the above-mentioned personal data for as long as this is necessary to provide the Website to you respectively for as long as this is necessary to pursue or defend legal claims, or to fulfil legal retention obligations.
2.1.4.The provision of the above-mentioned personal data is necessary for using the Website. If you do not provide these personal data, you will not be able to use the Website.
2.2. NFT Whitelisting
2.2.1.There is no Whitelisting for this Ankeruhr NFT project.
2.3. Purchasing NFT
2.3.1.In order for you to be able to purchase „MT-NFT“, we process the following personal data (Art. 6(1)(b) GDPR):
2.3.1.1. Your first and last name;
2.3.1.2. your e-mail address;
2.3.1.3. your wallet address;
2.3.1.4. the time of your purchase.
2.3.2.For the abovementioned purpose we store the above-mentioned personal data for as long as this is necessary to complete the purchase process respectively for as long as this is necessary to pursue or defend legal claims, or to fulfil legal retention obligations (e.g. for the duration of 7 years according to the Austrian Tax Act).
2.3.3.We store the above-mentioned personal data as long as it is necessary to answer the inquiry.
2.3.4.The provision of the above-mentioned personal data is necessary for you to be able to purchase „MT-NFT“. If you do not provide these personal data, you will not be able to purchase „MT-NFT“.
2.4. Dedication
2.4.1.In order for you to be able to publish a personal dedication for your “MT-NFT”, we process the following personal data (Art. 6(1)(b) GDPR):
2.4.1.1. Your first and/or last name or a nickname of your choice;
2.4.1.2. your e-mail address;
2.4.1.3. your wallet address;
2.4.1.4. the message you enter on the Website.
2.4.2.Where the personal dedication of a “MT-NFT” also contains the first and/or last name or a nickname of a person other than the owner of “MT-NFT”, we process the following personal data (Art. 6(1)(f) GDPR):
2.4.2.1. The first and/or last name or a nickname of this person;
2.4.2.2. The message entered by the owner of “MT-NFT” on the Website.
2.4.3.For the abovementioned purposes we store the above-mentioned personal data until the owner of the respective “MT-NFT” changes or deletes it respectively for as long as this is necessary to pursue or defend legal claims, or to fulfil legal retention obligations (e.g., for the duration of 7 years according to the Austrian Tax Act).
2.4.4.2.4.4 Our legitimate interests to process this personal data is to allow owners of „MT-NFT“ to make a gift to someone through a publicly visible dedication.
2.5. Marketing Communication
2.5.1.In order to be able to provide you with information about products and services of eXpertcode, we process the following personal data (Art. 6(1)(a) GDPR):
2.5.1.1. your e-mail address;
2.5.1.2. your wallet address.
2.5.2.For the abovementioned purpose we store the above-mentioned personal data until you withdraw your consent. The withdrawal of your consent does not affect the lawfulness of processing based on consent before the withdrawal.
2.5.3.The provision of the above-mentioned personal data in the context of marketing is voluntary. If you do not provide these personal data in the context of marketing and do not consent, you will not receive marketing materials.
2.6. Use of Cookies and Social Plug-Ins
2.6.1.Universal Analytics
2.6.1.1. The Website uses Universal Analytics, a web analytics service provided by Google LLC, Google Ireland Ltd. or any other entity that directly or indirectly controls, is controlled by, or is under common control with, Google LLC (“Google”). Universal Analytics uses “cookies”, which are text files placed on your computer, to help the Website to analyse how users use the Website.
2.6.1.2. We process your data on the basis of your consent (Art. 6(1)(a) GDPR). We store the above-mentioned personal data until you withdraw your consent. The withdrawal of your consent does not affect the lawfulness of processing based on consent before the withdrawal.
2.6.1.3. For the purpose of analysing your use of the Website and generating anonymous statistics, the following personal data is processed by Google on our behalf:
2.6.1.3.1. Time spent on the Website;
2.6.1.3.2. Time spent on each individual page and the order in which individual pages are visited;
2.6.1.3.3. Which internal links are clicked by you when browsing the Website;
2.6.1.3.4. Previously accessed websites;
2.6.1.3.5. First page accessed;
2.6.1.3.6. IP address;
2.6.1.3.7. Geographical location;
2.6.1.3.8. Browser (including plug-ins) and operating system;
2.6.1.3.9. Screen resolution and whether Flash or Java is installed in the User's browser.
2.6.1.4. Google places the following cookies:
|
Name |
Duration |
Purpose |
|
_ga |
2 years |
Differentiation of individual users. |
|
_gid |
24 hours |
Differentiation of individual users. |
|
_gat |
10 minutes |
Reduction of the number of requests. |
|
Google NID |
5 months |
Show Google Ads in Google Services for signed out users. |
|
Google __Secure-3PAPISID |
2 years |
Builds a profile of website visitor interests to show relevant and personalized ads through retargeting. |
2.6.1.5. On our behalf, the above-mentioned data on the use of the Website is transmitted to Google servers in the USA and stored there. This Website uses the possibility of IP anonymisation offered by Google Analytics. Your IP address is therefore shortened by Google as soon as Google receives your IP address. You can find further information on IP anonymisation athttps://support.google.com/analytics/answer/2763052?hl=en.
2.6.2.VIMEO
2.6.2.1. eXpertcode uses videos of the company Vimeo on the website. The video portal is operated by Vimeo LLC, 555 West 18th Street, New York, New York 10011, USA. With the help of a plug-in, we can show you interesting video material directly on our website. Certain data may be transferred from you to Vimeo in the process. You can find more information on data processing by Vimeo at https://vimeo.zendesk.com/hc/de/sections/203915088-Datenschutz .
2.6.2.2. Vimeo places the following cookies:
|
Name |
Duration |
Purpose |
|
Vimeo Player |
2 years |
Cookies enabling video player experience |
|
Vimeo vuid |
3 hours |
Cookeis enabling video player experience |
2.6.2.3. When you call up a web page on our website that has a Vimeo video embedded, your browser connects to the Vimeo servers. This results in a data transfer. This data is collected, stored and processed on the Vimeo servers. Regardless of whether you have a Vimeo account or not, Vimeo collects data about you. This includes your IP address, technical information about your browser type, operating system or very basic device information. Furthermore, Vimeo stores information about which website you use the Vimeo service and what actions (web activities) you perform on our website. This web activity includes, for example, session duration, bounce rate or which button you clicked on our website with the built-in Vimeo function.
2.6.2.4. If you are logged in to Vimeo as a registered member, more data can usually be collected as more cookies may have already been set in your browser. In addition, your actions on our website are directly linked to your Vimeo account. To prevent this, you must log out of Vimeo while “surfing” on our website.
Display & Video 360
2.6.3.1. Display & Video 360 is a tool provided by Google for planning campaigns, designing and managing creative, organizing and applying audience data, finding and buying inventory, and measuring and optimizing campaigns. We use Display & Video 360 services on the basis of a data protection agreement pursuant to Art. 28 GDPR concluded with Google.
2.6.3.2. We process your data on the basis of your consent (Art. 6(1)(a) GDPR). We store the above-mentioned personal data until you withdraw your consent. The withdrawal of your consent does not affect the lawfulness of processing based on consent before the withdrawal.
2.6.3.3. For the purpose of measuring and optimizing our campaigns, Google processes the following personal data on our behalf:
2.6.3.3.1. Online identifiers, including cookie identifiers, internet protocol addresses and device identifiers;
2.6.3.3.2. precise location data;
2.6.3.3.3. client identifiers;
2.6.3.3.4. For more information please see under https://privacy.google.com/businesses/adsservices/.
2.6.4.Campaign Manager 360
2.6.4.1. Campaign Manager 360 is a web-based ad management system that helps us manage our digital campaigns across websites and mobile. We use Campaign Manager 360 services on the basis of a data protection agreement pursuant to Art. 28 GDPR concluded with Google.
2.6.4.2. We process your data on the basis of your consent (Art. 6(1)(a) GDPR). We store the above-mentioned personal data until you withdraw your consent. The withdrawal of your consent does not affect the lawfulness of processing based on consent before the withdrawal.
2.6.4.3. For the purpose of ad serving, targeting, verification, and reporting, Google processes the following personal data on our behalf:
2.6.4.3.1. Online identifiers, including cookie identifiers, internet protocol addresses and device identifiers;
2.6.4.3.2. precise location data;
2.6.4.3.3. client identifiers;
2.6.4.3.4. For more information please see under https://privacy.google.com/businesses/adsservices/.
3. Recipients and Data Transers
3.1. We instruct data processors who perform services on our behalf. The processors may only process the data provided to them in accordance with our instructions and only to the extent necessary to perform services for us. We contractually oblige these processors to guarantee the confidentiality and security of the personal data processed within the scope of the contract.
3.2. The level of data protection in other countries outside the European Economic Area (“EEA”) may not be the same as within the EEA. However, we will only transfer your personal data to countries for which the European Commission has decided that they have an adequate level of data protection or we will take measures to ensure that all recipients in third countries guarantee an adequate level of data protection. To this end, we conclude, for example, the standard contractual clauses issued by the European Commission with these recipients. On request we will provide you with the concluded standard contractual clauses. For this purpose, please contact us using the contact details provided above.
4. Rights according to the GDPR
4.1. The GDPR grants you as a data subject the following rights:
4.1.1.The right of access according to Art. 15 GDPR regarding the personal data processed by eXpertcode.
4.1.2.The right of rectification according to Art. 16 GDPR, the right of erasure according to Art. 17 GDPR and the right to restriction of processing according to Art. 18 GDPR.
4.1.3.The right of data portability according to Art. 20 GDPR.
4.1.4.The right of objection according to Art. 21 GDPR.
4.1.5.The right to appeal to the competent data protection authority in accordance with Art. 77 GDPR.
4.1.6.You may revoke your consent to the processing of personal data at any time. Please note that the revocation is only effective for the future. Processing that took place before the revocation is not affected.