1. Data Controller
The controller responsible for processing personal data in connection with the operation of this website is:
Fidelity Kosher – Arie Folger EPU
Praterstraße 14/1/11
1020 Vienna
Austria
For questions concerning data protection or to exercise your rights under the General Data Protection Regulation (GDPR), please use the contact form on this website and enter “Data Protection” in the subject field.
2. General Information on Data Processing
We process personal data of visitors to our website only to the extent necessary and legally permissible for providing and securely operating the website, responding to enquiries, or fulfilling the other purposes described below.
In doing so, we observe the principles of lawfulness, purpose limitation, data minimisation, storage limitation and confidentiality under Article 5 GDPR.
This Privacy Policy concerns the use of our website and communications initiated through it. The processing of personal data in connection with existing or prospective business and certification relationships may additionally be subject to separate privacy notices.
3. Visiting Our Website
When you access our website, technically necessary information is processed. This may include:
IP address and connection data;
date and time of access;
pages visited and files requested;
information about your browser, operating system and device;
technical session identifiers;
error messages and security-related events.
This processing enables us to provide the website, maintain its functionality, identify technical errors and prevent unauthorised access.
The legal basis is Article 6(1)(f) GDPR. Our legitimate interest lies in the secure, reliable and proper operation of the website.
When you visit our website, pseudonymous visitor identifiers and technical information about page views may also be processed. This data is used for the technical operation, security and administration of the website.
Under the intended system configuration, anonymous visitor records are generally deleted after 60 days without further activity.
Technical server logs are retained only for limited periods. The current technical configuration provides for log retention of no more than 14 days or a limit determined by the configured storage capacity.
4. Cookies and Local Storage
Our website uses cookies and comparable local storage technologies, particularly for session management, language selection and technical functionality.
These include, in particular, the following:
| Name | Purpose | Storage period |
|---|---|---|
| session_id | Technical session management | Up to 7 days |
| frontend_lang | Remembering the selected language | Approximately 1 year |
| tz | Remembering the time-zone setting | For the duration of the browser session |
| presence.focus | Technical state information stored locally in the browser | Until deleted or overwritten |
We do not use cookies for personalised advertising.
Technically necessary cookies and comparable storage technologies are used insofar as they are required to provide a service expressly requested by the user. Where consent is required for other storage or access operations, these are carried out only after the relevant consent has been obtained.
You can manage or delete cookies through your browser settings. Disabling technically necessary cookies may impair the functionality of the website.
5. Contact Form and Enquiries
When you contact us through our website's contact form, we process the information you provide, particularly:
name;
email address;
telephone number, where provided;
subject and content of your message;
any additional information voluntarily supplied.
This information is used to receive and respond to your enquiry and, where necessary, to ask follow-up questions.
Depending on the nature of the enquiry, processing is based on Article 6(1)(b) GDPR, where steps are necessary at your request prior to entering into a contract, or Article 6(1)(f) GDPR, based on our legitimate interest in responding to incoming enquiries.
Enquiries that have been concluded and for which there is no further lawful purpose for retention are generally deleted within 90 days of closure.
Where further retention is necessary and legally permissible to document significant business correspondence, safeguard legitimate interests, or establish, exercise or defend legal claims, the information may be retained for longer. Statutory retention obligations remain unaffected.
Please do not submit unnecessary sensitive personal data through the general contact form.
Forwarding Enquiries to Fidelity Kosher s.r.o.
Fidelity Kosher works with its affiliated company, Fidelity Kosher s.r.o.
Where an enquiry submitted through this website concerns services or matters falling within the responsibility of Fidelity Kosher s.r.o., the personal data necessary to handle that enquiry may be forwarded to that company.
Such disclosure takes place only insofar as it is necessary to process the enquiry and legally permissible. Fidelity Kosher s.r.o. is independently responsible for its subsequent processing of the personal data received.
6. Fonts and External Services
Our website uses fonts to display its content.
The font files used are hosted locally on our own technical infrastructure. Consequently, loading these fonts does not require a connection to external font providers.
Where service providers are engaged for the technical operation of the website, such as hosting, server administration or electronic communications, they are granted access to personal data only to the extent necessary.
Where personal data is processed on our behalf, we enter into the necessary data protection agreements pursuant to Article 28 GDPR.
If additional external services involving the processing of personal data are introduced in the future, we will provide the necessary information and obtain consent where required.
7. Data Security and Data Transfers
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration and unlawful disclosure.
These include, in particular, measures to restrict access, secure the systems used and restore data in the event of technical disruptions.
Where personal data is transferred to recipients outside the European Union or the European Economic Area, such transfers are carried out only in compliance with the requirements of Articles 44 et seq. GDPR.
8. Your Rights
Subject to the applicable legal requirements, you have the following rights in particular:
Access to your personal data under Article 15 GDPR;
Rectification of inaccurate data under Article 16 GDPR;
Erasure under Article 17 GDPR;
Restriction of processing under Article 18 GDPR;
Data portability, where applicable, under Article 20 GDPR;
Objection to certain processing activities under Article 21 GDPR;
Withdrawal of consent with effect for the future, where processing is based on your consent.
These rights are subject to the applicable statutory conditions and exceptions.
To exercise your rights, please use the contact form on this website and enter “Data Protection” in the subject field.
Where there are reasonable doubts concerning your identity, we may request additional information necessary to verify it.
No decision-making based solely on automated processing that produces legal or similarly significant effects within the meaning of Article 22 GDPR takes place in connection with the operation of this website.
9. Right to Lodge a Complaint
If you believe that the processing of your personal data infringes the GDPR, you have the right to lodge a complaint with a competent data protection supervisory authority.
In Austria, this is:
Austrian Data Protection Authority (Österreichische Datenschutzbehörde)
Barichgasse 40–42
1030 Vienna
Austria
Website: https://www.dsb.gv.at
10. Changes to This Privacy Policy
We update this Privacy Policy as necessary, particularly where technical functions, services used or legal requirements change.
The current version is available on this website.