Data Privacy

1. General Information

Protecting your personal data is particularly important to us. We therefore process your data exclusively on the basis of the applicable legal provisions (General Data Protection Regulation – GDPR, Austrian Data Protection Act – DSG, and Telecommunications Act – TKG 2021). In this privacy policy, we inform you about the most important aspects of data processing in the context of our activities as a shopping center.

2. Controller

SN EKZ Villach GmbH
Conrad-von-Hötzendorf-Straße 99
A-8010 Graz
[email protected]
+43 50 113 321
Company registration number: FN 648480 y

3. Collection and Processing of Personal Data

We process personal data that you voluntarily provide to us during a visit, an inquiry, or when participating in promotions (e.g., competitions, newsletter registration, customer service inquiries).
This may include:
    •    First and last name
    •    Contact details (email address, phone number, address)
    •    Communication content (e.g., messages, inquiries)
    •    Technical data when visiting our website (e.g., IP address, browser information, time and duration of access)

4. Purpose of Data Processing

Your data is processed exclusively for the following purposes:

    •    Handling inquiries and communication with visitors
    •    Execution of competitions, events, and marketing activities
    •    Sending newsletters (only with voluntary consent)
    •    Analysis and improvement of our services
    •    Ensuring the security and operation of our website

5. Legal Basis

Processing is carried out on the following legal bases pursuant to Art. 6 GDPR:

Art. 6 Abs. 1 lit. a – Consent (e.g., for cookies, competitions)
Art. 6 Abs. 1 lit. b – Performance of a contract or pre-contractual measures (e.g., inquiries)
Art. 6 Abs. 1 lit. f – Legitimate interest (e.g., analysis and improvement of the website, IT security)

6. Cookies and Tracking

Our website uses cookies to improve user-friendliness and enable certain functions. Cookies are small text files stored on your device.

We distinguish between:
    •    Technically necessary cookies (required for website operation)
    •    Statistics cookies (anonymous usage analysis)
    •    Marketing cookies (for displaying personalized content)

The use of non-essential cookies takes place only with your consent via our cookie banner when you first visit the website. You may withdraw or adjust this consent at any time by changing the settings in the cookie banner or in your browser.

Services Used:

To analyze and optimize our online presence, we may use tools such as Google Analytics (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). IP addresses are collected in an anonymized form. The transfer of personal data to third countries (e.g., the USA) cannot be excluded. Google is certified under the EU-US Data Privacy Framework, ensuring an adequate level of data protection.

Further information on data processing by Google can be found at:
policies.google.com/privacy

7. Competitions

In the context of competitions, we collect personal data (e.g., name, contact details) exclusively for conducting the competition, determining and notifying winners, and delivering prizes.

Processing is based on your consent pursuant to Art. 6(1)(a) GDPR or on contract performance pursuant to Art. 6(1)(b) GDPR.
Data is only shared with third parties if necessary for executing the competition (e.g., agencies or delivery services).
After the competition ends, the data is deleted unless statutory retention obligations apply.

8. Data Disclosure

Your data is only disclosed if you have expressly consented, if it is necessary for fulfilling contractual obligations, or if a legal obligation exists.

Service providers (e.g., IT, marketing, or security companies) acting on our behalf process data exclusively under data processing agreements according to Art. 28 GDPR.

9. Storage Period

Your personal data is stored only as long as necessary to achieve the purposes mentioned or as required by legal retention obligations (e.g., under the Austrian Commercial Code or Federal Fiscal Code). Afterward, the data is deleted or anonymized.

10. Your Rights

Under the GDPR, you have the following rights at any time:
    •    Access to your stored data (Art. 15 GDPR)
    •    Rectification of inaccurate data (Art. 16 GDPR)
    •    Deletion (“right to be forgotten”, Art. 17 GDPR)
    •    Restriction of processing (Art. 18 GDPR)
    •    Data portability (Art. 20 GDPR)
    •    Objection to processing (Art. 21 GDPR)

If you believe that the processing of your data violates data protection laws, you may file a complaint with the Austrian Data Protection Authority:

Austrian Data Protection Authority
Barichgasse 40–42, 1030 Vienna
www.dsb.gv.at

11. Contact

For all matters relating to data protection, please contact:
Email: [email protected]
Phone: +43 50 113 321