1. INTRODUCTION

The protection of your personal data is of particular concern to us, Henry - the art of living GmbH, Stephansplatz 12, 1010 Vienna, Tel: +43 (0)1 74 000 2100, Email: office@enjoyhenry.com, ("Henry", "we"). We process your personal data exclusively based on legal regulations, especially the General Data Protection Regulation ("GDPR"), the applicable Data Protection Act 2018 ("DSG"), and the Telecommunications Act ("TKG 2021"). The following sections detail the information we collect, process, and use when you visit and use our website www.enjoyhenry.com ("Website").

We may need to update this privacy notice from time to time due to the ongoing development of the internet. Therefore, we recommend that you review this page periodically to ensure that you have read the latest version.

Henry is part of the DO & CO corporate group. For questions regarding data protection at Henry or DO & CO, please contact our data protection officer at privacy@doco.com.

2. WHAT ARE PERSONAL DATA?

Personal data is information that can be used on its own or with other information to identify a natural person. This includes, for example, your name, email address and your IP address.

3. WHAT PERSONAL DATA DO WE COLLECT FROM PEOPLE THAT VISIT OUR WEBSITE AND FOR WHAT PURPOSES?

3.1. Contacting Us

When you contact us by email, phone, mail, or through our contact form, your voluntarily provided personal data (salutation, title, name, company, email, phone number) and the content of your inquiry are stored by us for the purpose of processing your request and for any follow-up questions (pre-contractual measures or legitimate interests). We pass on this data to our group companies only if required to respond to your inquiry. We do not share your request with third parties without your consent.

3.2. Registration

When you create an account through this website, we collect, store, and process at least your salutation, name, username, address, email address, phone number, and password. We may also store your title, company, and VAT number if provided. This processing is for managing your online account for future orders in the Henry Online Shop (pre-contractual measures). To ensure the registration was carried out by you and the email address is valid, you will receive a confirmation email after registration. Your account will be activated only after you click the link in the email.

3.3. Orders through the Webshop

For the purpose of contract processing, we process the information provided during registration, as well as the selected goods, comments on your orders, delivery address, and credit card data (credit card provider, credit card holder, the last four digits of the credit card number). The data you provide is necessary to fulfill the contract or carry out pre-contractual measures. Without this data, we cannot conclude the contract with you. Data transmission to third parties does not occur except for the transmission of your name, address, and possibly phone number to the shipping and delivery company commissioned by us for delivering the goods, to the accounting department of DO & CO Aktiengesellschaft as the group headquarters, and tax consultants to fulfill our tax obligations, as well as to payment service providers for processing the payment.

3.4. General Use of the Website

When you access our website, information about the access (date, time, page viewed, IP address) is stored as log files on our server. This is done out of legitimate interest in monitoring technical operations, optimizing our information offering, and detecting attacks on our website. These data are evaluated by us exclusively for our own statistical purposes in anonymized form.

4. TO WHOM ARE YOUR DATA DISCLOSED?

In addition to the data transfers mentioned above, we also disclose your personal data to external service providers or contractors as needed:

• IT service providers and/or providers of data hosting or data processing or similar services;
• Other service providers, tool providers, and software solutions providers that support us in providing our services and act on our behalf; these service providers are bound by separate agreements to the strict regulations of the EU General Data Protection Regulation (GDPR) and cannot use the data for their own purposes;
• Group companies of the DO & CO corporate group, if required to fulfill the contract and legal obligations;
• Any third parties involved in fulfilling our obligations to you (e.g., delivery service providers for delivering your webshop order, payment service providers for payment processing in the webshop, banks for payment processing);
• Other external third parties as needed (e.g., auditors, insurers in case of an insurance event, legal representatives if necessary, etc.);
• Authorities and other public bodies as legally required (e.g., tax authorities, etc.).

5. COOKIES

Our website uses so-called cookies. Cookies are data stored in your browser that allow the recognition of a visitor on an anonymous basis. Cookies can generally be rejected or deleted via appropriate browser settings. The statements made here regarding cookies apply similarly to other technical browser functions such as local storage and session storage.

Some cookies on this website are necessary for the website's functionality and are set based on our legitimate interest in the secure and efficient operation of the website. Information is not generally passed on to third parties for their own business purposes.

Cookies for analysis and profiling purposes are used only with your explicit consent. Previously given consents can be revoked via the "Cookie Settings" link in the footer of each page.

5.1. Google Analytics with Google Signals

For error analysis, statistical evaluation of our web offering, examination of user behaviour, analysis of the impact of online marketing measures, and the selection of online advertising on other platforms that is automatically selected based on your user behaviour, our website uses the analysis service Google Analytics by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, Tel: +353 1 543 1000, Fax: +353 1 686 5660, Email: support@google.com ("Google"), which in turn transmits your data to the USA for further processing. We note that the USA has a lower level of data protection than the EU and US companies are required to disclose data to courts, law enforcement agencies, regulatory authorities, or security agencies. Google is committed to adhering to the principles of the EU-US Data Privacy Framework (DPF) to achieve a data protection level comparable to that of the EU. According to Art. 45 GDPR, no additional legal basis is required for the transmission of data to the USA.

The processing of data with Google Analytics takes place only with your consent.

Google uses the collected information for its own purposes. Further information can be found at https://policies.google.com/technologies/partner-sites.

5.2. Google Maps

Our website uses the Google Maps API to visually display geographical information on the Contact/Route page. Google Maps is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

When using Google Maps, information about the use of our website, including your IP address, is transmitted to a Google server in the USA and stored there. We note that the USA has a lower level of data protection than the EU and US companies are required to disclose data to courts, law enforcement agencies, regulatory authorities, or security agencies. Google is committed to adhering to the principles of the EU-US Data Privacy Framework (DPF) to achieve a data protection level comparable to that of the EU. According to Art. 45 GDPR, no additional legal basis is required for the transmission of data to the USA.

6. STORAGE DURATION

We store your personal data only as long as necessary to fulfill our obligations to you. For tax and corporate law retention requirements, we generally store your personal data provided in connection with orders for seven years after contract fulfillment. Personal data submitted in inquiries are stored for six months after responding to the inquiry to address any follow-up questions. This storage is based on our legitimate interests. Henry has an interest in making customer support as user-friendly as possible, thereby strengthening the company's reputation. In this case, there are no overriding interests on your part. Log files of the web server are deleted or anonymized after three months.

7. YOUR RIGHTS AS DATA SUBJECT

You can request information about the data stored about you at any time. You may also have the right to request the correction or deletion of your data under certain conditions. Furthermore, you may have the right to restrict the processing of your data and the right to receive the data you provided in a structured, commonly used, and machine-readable format.

Additionally, you have the right to object to data processing if the processing is for direct marketing purposes. If we process your data for legitimate purposes, you also have the right to object at any time if there are reasons arising from your particular situation.

You have the option to lodge a complaint with a data protection supervisory authority. The data protection authority responsible for us is the Austrian Data Protection Authority in Vienna (www.dsb.gv.at). However, you can also contact another supervisory authority responsible for your place of residence.

For questions, you can also contact us:

Henry - the art of living GmbH
Stephansplatz 12, 1010 Vienna
Tel: +43 (0)1 74 000 2100
Email: office@enjoyhenry.com or privacy@doco.com

To process your request regarding your above-mentioned rights and to ensure that personal data is not disclosed to unauthorized third parties, please submit the request with clear identification of your person and a brief description of the extent of the exercise of your data subject rights.