Data protection

Ladies and gentlemen!
Dear users!

MTH Retail Group greatly values your privacy and kindly asks you to carefully read the following information concerning the processing of your personal data on this website.

Your personal data is processed exclusively within the rules and regulations of the General Data Protection Act (GDPR)and the Data Protection Act (DPA), as well as the provisions of the Telecommunications Act (TCA 2003). Following this, we will inform you about the type, extent, and purpose of data processing on this website.

Contact details

MTH Retail Group Holding GmbH
Industriestraße 7
2353 Guntramsdorf
Tel: +43 2236 80 99 0
Data protection officer: datenschutz@mth-retailgroup.com

Server log files

When accessing our website, our homepage provider automatically collects and stores information in so-called server log files, which are automatically transmitted to MTH Retail Group by your browser. This information is:

Browser type
Browser version
Operating system
Referrer URL
The accessing computer’s host name
Date and time of the server request
Your IP address
Cookie contents from www.mth-retailgroup.com

This serves the purpose of logging system usage, authorization processes and the evaluation of server logs for problem analysis. As the operator of the website, this lies within our legitimate interest.

This data has no personal reference and will not be merged with other data sources. We reserve the right to verify the data later, if we become aware of any specific indications of illegal use. The data collected here will be saved automatically for a period of 31 days and will not be passed on to third parties.

Cookies

When visiting our website, we kindly ask you to consent to the use of cookies. The cookies used will be defined as follows.

We make use of cookies on our homepage. A cookie is a small set of data, which is saved on your device. It contains information such as personal system preferences or login information. This data is generated by the web server, which you are connected to via the web browser, and sent to your device. By consenting to the use of cookies through your browser settings, you allow the use of cookies.

You can also access our website without cookies. However, if you would like to use the MTH Retail Group to your full convenience, the cookies, which enable certain functions, must be accepted.

Necessary operational cookies

The cookie we use with the code „qtrans_front_language“ enables the system to remember language settings, if you return to a page within the same session. The cookie only collects data related to our website, information about browsing behavior on other websites will not be collected. Rejecting this cookie may mean you will not have access to the full range of functions.

Functional cookies

Besides this, we also use a permanent cookie that records and saves your consent to the use and placement of cookies. If you consent to the use of cookies, the permanent „cc_cookie_accept“ cookie will be saved on your device for one year. This first party cookie does not record any information concerning browsing behavior on other websites and does not share data with third parties. With this cookie, the user has to consent to the use of cookies only once within a browser session when accessing our website.

Cookie name	Cookie description
borlabs-cookie	Saves the visitor’s settings which were chosen in the Cookie Box of Borlabs Cookies.
NID (Google Maps)	Used to unlock Google Maps contents.
_icl_, wpml_, wp-wpml_*	Saves the current language.
YouTube	Used to unlock YouTube contents.
_ga,_gat,_gid (Google Analytics)	Google cookie for website analysis. Creates statistical data about the visitor’s use of the website.
_ga,_gat,_gid (Google Tagmanager)	Google Cookie to steer the expanded Script and Tag management.

Deactivating cookies

Once you have consented and cookies have been accepted by your browser settings, you have agreed to the use of cookies. Most browsers are set to accept cookies by default. You do however have the option of setting your browser to display cookies before they are saved, to accept or reject certain cookies, or to reject cookies all together. If you object to the use of certain cookies or deactivate them (individual opt-out), the functionality of the MTH Retail Group website could be limited. You can revoke your general consent as well as individual opt-outs at any time. Visit http://www.allaboutcookies.org/ for more detailed instructions on the “cookie opt-out”.

We would like to point out that changes made to settings only affect the browser you are currently using. If you use different browsers or devices, changes to the settings will need to be made again. Furthermore, you can erase cookies from your storage medium at any time. For more information regarding cookie settings and how to edit or delete them, please consult your browser’s help menu.

Google Analytics 4

On our website, we use Google Analytics, a web analytics service provided by Google Ireland Limited, based at Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).

Cookies are used to create pseudonymous user profiles. The data is stored on the end device, anonymized and evaluated in the form of statistics.

In connection with the web analysis service of Google Analytics, the following data will be processed by you:

Date and time of access
Website from which the access is made (referrer URL)
Browser type and version
In exceptional cases, IP addresses
Number of visits/users
Session statistics

We use Google Analytics for error analysis and to continuously improve the offer on our websites by means of statistical evaluation.

The data processing takes place with your explicit consent in accordance with Art. 6 (1) sentence 1 lit. a GDPR, which you have given via the cookie banner.

This data processing is not necessary for the functionality of the website.

Your data will be processed by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Personal data may also be transferred to the U.S. parent company Google LLC. Google LLC is a participant in the EU-U.S. and Swiss-U.S. Data Privacy Frameworks. As a result, your personal data may be transferred to Google LLC in the United States without the need for additional safeguards. For more information on how Google Analytics handles user data, please refer to Google’s privacy policy at:

https://support.google.com/analytics/answer/6004245?hl=de

Your data will be stored on the device for up to 2 years.

Google Tag Manager

On our website, we use the Google Tag Manager (“GTM”) of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The GTM is a tag management system that integrates tags uniformly via a user interface. Tags are short pieces of source code that can track activity and access other systems to centrally control when certain systems are triggered. Google Analytics, Google Marketing Platforms (Double Click and Google Analytics) and Google Ads Remarketing are integrated into the GTM. This means that GTM is merely a link between the website and the analysis software. You can prevent the setting of tags in the cookie or domain settings at any time. Further information on these systems and their data processing can be found in the following chapters.

GTM ensures the activation of other tools, which in turn collect personal data. Depending on the integrated tool, GTM collects IP addresses of website visitors and passes them on to the analysis programs. You can find more information on the individual data processing processes in the following chapters.

We process your personal data for marketing and analysis purposes. In doing so, we evaluate your user behavior, conduct conversion tracking, compile statistics and optimize our advertising channels and approaches.

The use of GTM takes place by means of your explicit consent in accordance with or Art. 6 (1) sentence 1 lit. a GDPR, which you have given via the cookie banner.

This processing activity is not necessary for the functionality of the website.

Your personal data will generally be processed by Google Ireland Limited in Ireland. However, personal data may also be transferred to the U.S. parent company Google LLC. Google LLC is a participant in the EU-U.S. and Swiss-U.S. Data Privacy Frameworks. Thus, your personal data can be transferred to Google LLC in the USA without the need for further guarantees.

Google’s privacy policy can be found here:

https://policies.google.com/privacy?hl=en

Your data will be stored on the device for up to two years, unless it is renewed.

Jentis Tag Manager

For the purpose of analysing customer user behaviour and for the purpose of website optimisation, we use the services of Jentis GmbH (Schönbrunner Straße 231, 1120 Vienna). Jentis therefore has access to web analysis data, which is evaluated, stored and prepared by the analysis tools and Jentis in use. For this purpose, data is transmitted to Jentis for analysis purposes, and on the other hand, it independently collects data on our behalf with regard to browser variants and visitor behavior.

It generates a randomly generated ID that is stored in a browser cookie to recognize returning users. You can find more details about the cookies set at https://docs.jentis.com/space/DD/842465342/JENTIS+Cookies

The legal basis for the processing is Art. 6 (1) a GDPR.

In this case, the IP address is anonymized by Jentis and thus a personal reference is guaranteed. Jentis sets a randomly generated ID, which also does not constitute a personal reference within the meaning of the GDPR.

You can view the privacy policy of JENTIS at the following link: https://www.jentis.com/privacy-policy/

Meta Pixel

We have integrated Meta Pixel (incl. Facebook Custom Audience) from Meta Platforms Ireland Ltd. (“Meta”), 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, on our website. These services are internet advertising services that allow advertisers to place ads on both Facebook’s platforms and Meta’s advertising networks (“conversion tracking”).

Meta Pixel allows us to place targeted ads on Facebook’s platform and target a relevant audience. This may include Sponsored Content, Sponsored Messaging, Dynamic Ads, or Text Ads.

With Facebook Custom Audience, visitors to our website are included in lists that we can use to retarget you as a potential customer. As a user on the remarketing lists, we can show you targeted ads.

You can find more information on the handling of personal data in the privacy policy: https://de-de.facebook.com/privacy/policy/

Conversion cookies are used to store personal data, such as the websites visited by the data subject. Accordingly, every time you visit our website, personal data, including the IP address of the data subject, is processed.

The following personal data will be processed:

Click Path
IP address
Cookie-IDs
Unique mobile device identifier
Number of visits/users
Operations
Usage

The purpose of these ad services is to advertise our website by displaying interest-relevant advertising on the websites of third-party companies and on the Facebook platform and to display third-party advertising on our website.

The data processing is based on our overriding interest in accordance with Art. 6 (1) sentence 1 lit. f GDPR. As soon as you have consented to this data processing, we will also process your personal data on the basis of your explicit consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR.

The mentioned data is not necessary for the website functionality.

Your personal data will generally be processed by Meta Platforms Ireland Ltd. in Ireland. Personal data may also be transmitted to the U.S. parent company Meta Platforms Inc.

Meta Platforms Inc. is a participant in the EU-U.S. and Swiss-U.S. Data Privacy Frameworks. This means that your personal data can be transferred to Meta in the United States without the need for additional safeguards. Meta’s privacy policy can be found here:

https://www.facebook.com/privacy/policy/

The retention period for Meta Pixel is generally 90 days.

Google Ads

We have integrated Google Ads (incl. DoubleClick and Google Remarketing) from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, on our website. These services are internet advertising services that allow advertisers to place ads in both Google’s search engine results and Google’s advertising networks (“conversion tracking”). Google Ads makes it possible to define certain keywords in advance, by means of which an ad will only be displayed in Google’s search engine results if the user uses the search engine to retrieve a keyword-relevant search result. In the Google advertising network, the ads are distributed on websites relevant to the topic by means of an automatic algorithm and taking into account the previously defined keywords.

With Google Ads remarketing (GA audience), visitors to our website are included in lists that we can use to retarget you as a potential customer. As a user on the remarketing lists, we can show you targeted ads.

You can find more information about the handling of personal data at Google in the privacy policy:

https://policies.google.com/privacy?hl=de

Conversion cookies are used to store personal data, such as the websites visited by the data subject. Every time you visit our website, personal data, including the IP address of the Internet connection used by the data subject, is transmitted to Google in the USA.

The following personal data will be processed:

Click Path
IP address
Cookie-IDs
Unique mobile device identifier
Number of visits/users
Operations
Usage

The purpose of these ads services is to advertise our website by displaying interest-relevant advertising on the websites of third-party companies and in the search engine results of the Google search engine and to display third-party advertising on our website.

The data processing takes place with your explicit consent in accordance with Art. 6 (1) sentence 1 lit. a GDPR, which you have given via the cookie banner.

The mentioned data is not necessary for the website functionality.

Your personal data will generally be processed by Google in Ireland. Personal data may also be transferred to the U.S. parent company Google LLC.

Google LLC is a participant in the EU-U.S. and Swiss-U.S. Data Privacy Frameworks. Thus, your personal data can be transferred to Google LLC in the USA without the need for further guarantees. Google’s privacy policy can be found here:

https://policies.google.com/privacy?hl=en

The retention period is generally 13 months.

LinkedIn Ads

We have integrated LinkedIn Ads from LinkedIn Ireland Unlimited Company, Wilton Plaza, Gardner House, Dublin 2, Ireland, on our website. These services are internet advertising services that allow both advertisements to be placed on the LinkedIn platform and in the LinkedIn advertising network (“conversion tracking”).

LinkedIn Ads allows us to place targeted advertising on LinkedIn’s platform and address a relevant target audience. This may include Sponsored Content, Sponsored Messaging, Dynamic Ads, or Text Ads.

You can find more information on the handling of personal data at LinkedIn in the privacy policy:

https://www.linkedin.com/legal/privacy-policy

The following personal data will be processed:

Click Path
IP address
Cookie-IDs
Unique mobile device identifier
Number of visits/users
Operations
Usage

The purpose of these ads services is to advertise our website by displaying interest-relevant advertising on the websites of third-party companies and in the search engine results of the search engine Google, Bing and on the LinkedIn platform and to display third-party advertising on our website.

The data processing takes place with your explicit consent in accordance with Art. 6 (1) sentence 1 lit. a GDPR, which you have given via the cookie banner.

The mentioned data is not necessary for the website functionality.

LinkedIn Ireland Unlimited also shares data with its affiliates such as LinkedIn Corporation (USA), LinkedIn Singapore and Microsoft Corporation (USA) in accordance with its privacy policy. LinkedIn Corporation (USA) is not a participant in the EU-U.S. and Swiss-U.S. Data Privacy Frameworks and also otherwise, it is possible that LinkedIn transfers data to third countries. Therefore, your data may be subject to a level of data protection that is not comparable to that in Switzerland or the EU. If you consent to the processing by LinkedIn, you therefore also consent to your personal data being transferred to unsafe third countries in accordance with Art. 49 (1) (a) GDPR.

The retention period for LinkedIn Ads is up to 720 days.

TikTok Pixel

We use TikTok Pixel, a conversation tracking tool, on our website. The service provider is the Chinese company TikTok. TikTok Technology Limited (10 Earlsfort Terrace, Dublin, D02 T380, Ireland) is responsible for the European region.

Categories of data processed: data on the use of the website as well as the logging of clicks on individual elements.

Some of this data is information that is stored in the device you are using. In addition, the TikTok pixel also uses cookies to store information on the device you are using. Such storage of information by the TikTok pixel or access to information that is already stored in your device will only take place with your consent.

TikTok also receives your IP address and other information about the user’s device, such as the marketing identifier, the device used, the website visited and the time. TikTok uses this data to identify the users of our website and to link their actions to a “TikTok” user account. TikTok processes this data on its own responsibility from the moment it is transmitted. We have no influence on the further processing by TikTok.

Information on how TikTok collects, uses, and protects the information collected with the TikTok pixel can be found in detail in the TikTok User Privacy Policy:

https://www.tiktok.com/legal/page/eea/privacy-policy/en

Joint Responsibility:

We are jointly responsible with TikTok Technology Limited, Ireland and TikTok Information Technologies UK Limited, United Kingdom (TikTok) for the collection and transfer of data as part of this process. This applies to the following purposes:

Measurements and Insight Reporting
Collection and transmission of developer data and/or event data

For joint responsibility, we have concluded a corresponding agreement with TikTok, which can be accessed here:

https://ads.tiktok.com/i18n/official/policy/jurisdiction-specific-terms .

It sets out the respective responsibilities for fulfilling the obligation under the GDPR with regard to shared responsibility.

The contact details of the responsible company, as well as TikTok’s data protection officer, can be found here:

https://www.tiktok.com/legal/page/eea/privacy-policy/en

We have agreed with TikTok that TikTok can be used as a point of contact for exercising the rights of data subjects. Notwithstanding this, the jurisdiction of the rights of the data subject is not restricted.

We transmit the data within the scope of joint responsibility on the basis of the legitimate interest pursuant to Art. 6 (1) f GDPR.

Transfers to third countries are possible. So-called standard contractual clauses in accordance with Art. 46 GDPR have been concluded as suitable guarantees. For third countries/companies for which an adequacy decision has been issued, the adequacy decision also applies.

Purpose of processing: Analysis of user behaviour, analysis of the effect of online marketing measures and selection of online advertising on other platforms, which are automatically selected by means of real-time bidding based on user behaviour.

The legal basis for processing: Your consent pursuant to Art. 6 (1) a GDPR.

Data will be transmitted to the independent controller TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland (https://www.tiktok.com).

The legal basis for the transfer of data to TikTok Technology Limited is your consent in accordance with Art. 6 (1) a GDPR.

Deletion/revocation:

You can disable the tool via the cookie settings (under Cookies for marketing purposes)

Cookie lifespan: 13 months

For more information on how TikTok processes personal data, including the legal basis on which TikTok relies and how to exercise your rights against TikTok, please refer to TikTok’s Privacy Policy at

https://www.tiktok.com/legal/privacy-policy?lang=de-DE.

Personal rights

In general, you have the following rights:

Information: You have the right to information about how your data is used and may request a copy of all the data we have processed. Exercising your right to information will not affect the rights of other people.
Deletion: You have the right to request the deletion of your data if it is not being used on another legal basis.
Correction: You have the right to request the correction of your data. This also includes the completion of incomplete personal data.
Data portability: You have the right to receive the data you have provided to us in a structured, commonly used format, if it is being processed with your consent or within the fulfillment of a contract. The processing must take place automatically.
Restrictions in processing: If you wish to dispute the accuracy of your data, or you do not wish to exercise your right to data deletion in the event of unauthorized processing, you may restrict the processing of your data.
Revoking consent: If we are processing your data based on your consent, you make revoke your consent at any time.
Objection to processing: If we are processing your data based on legitimate interest, you may revoke your consent at any time. If a weighing of interests reveals that our legitimate interests predominate, we will reject with justification.

Furthermore, you have the right to file a complaint with data protection authorities against the processing of your personal data, if you are of the opinion that your data is not being processed in accordance with the law. You are entitled to the rights mentioned above at any time and without the need of a legal remedy.

We are happy to provide you with further information concerning the processing of your personal data at
datenschutz@mth-retailgroup.com