Privacy Policy

Introduction

kronavstel.top AG ("we", "our", or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you visit our website kronavstel.top or use our food waste monitoring services.

We are the data controller for the personal data we collect about you. This policy complies with the General Data Protection Regulation (GDPR) and other applicable data protection laws in the European Union and Austria.

Data We Collect

We collect various types of personal data when you interact with our website and services. The data we collect includes information you provide directly to us and information we collect automatically through your use of our services.

Information You Provide

• Contact Information: Name, email address, phone number, company name, and postal address when you contact us or request information
• Account Information: Username, password, and profile information when you create an account for our monitoring platform
• Business Information: Restaurant details, operational data, and waste monitoring preferences
• Communication Data: Messages, enquiries, and feedback you send to us through our contact forms or support channels

Information We Collect Automatically

• Website Usage Data: IP address, browser type, pages visited, time spent on pages, and referral sources
• Device Information: Device type, operating system, screen resolution, and unique device identifiers
• Monitoring Data: Food waste metrics, operational patterns, and system performance data from our monitoring platforms

How We Use Your Information

We use your personal data for various purposes related to providing our food waste monitoring services and maintaining our business relationship with you. How we use your information depends on how you interact with our services and the preferences you have expressed.

Primary Uses

• Service Provision: To provide, maintain, and improve our food waste monitoring platforms and related services
• Customer Support: To respond to your enquiries, provide technical support, and resolve service issues
• Account Management: To create and manage your account, process payments, and communicate about your services
• Analytics and Reporting: To generate waste reduction reports, performance analytics, and operational insights
• Communication: To send service updates, important notices, and respond to your communications
• Legal Compliance: To comply with legal obligations, resolve disputes, and enforce our agreements

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner.

For detailed information about the cookies we use, please refer to our Cookie Policy.

Legal Basis for Processing

Under GDPR, we process your personal data based on the following legal grounds:

• Contractual Necessity: To perform our contract with you and provide our monitoring services
• Legitimate Interests: To improve our services, conduct analytics, and maintain our business operations
• Consent: For marketing communications and certain cookies, where you have given explicit consent
• Legal Obligations: To comply with applicable laws and regulations

Data Sharing and Disclosure

We do not sell your personal data to third parties. We may share your information in the following circumstances:

• Service Providers: With trusted third-party service providers who assist us in operating our business and providing services
• Legal Requirements: When required by law, court order, or to protect our rights and safety
• Business Transfers: In connection with mergers, acquisitions, or other business transactions
• Consent: With your explicit consent for specific purposes

International Data Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). When we transfer data internationally, we ensure appropriate safeguards are in place, such as adequacy decisions, standard contractual clauses, or other approved transfer mechanisms.

Data Retention

We retain your personal data for as long as necessary to fulfil the purposes for which it was collected and to comply with our legal obligations. Our data retention periods vary depending on the type of information and the purpose for which it is processed.

• Account Data: Retained for the duration of your account plus 7 years for legal and tax purposes
• Monitoring Data: Retained according to your service agreement, typically 2-5 years
• Marketing Data: Retained until you withdraw consent or for 3 years of inactivity
• Website Analytics: Retained for 26 months in accordance with Google Analytics settings

Your Rights

Under GDPR and applicable data protection laws, you have the following rights regarding your personal data:

• Right of Access: Request information about how we process your personal data
• Right to Rectification: Request correction of inaccurate or incomplete personal data
• Right to Erasure: Request deletion of your personal data in certain circumstances
• Right to Restrict Processing: Request limitation of how we process your data
• Right to Data Portability: Request transfer of your data to another controller
• Right to Object: Object to processing based on legitimate interests or for direct marketing
• Right to Withdraw Consent: Withdraw consent for processing based on consent

To exercise any of these rights, please contact us using the information provided in the contact section below.

Data Security

We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encryption, access controls, regular security assessments, and staff training on data protection.

Children's Privacy

Our services are not directed to children under the age of 16. We do not knowingly collect personal data from children under 16. If we become aware that we have collected personal data from a child under 16, we will take steps to delete such information promptly.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date. Your continued use of our services after such changes constitutes acceptance of the updated policy.

Contact Information

If you have questions about this Privacy Policy, wish to exercise your rights, or need to contact us regarding data protection matters, please reach out to us:

You also have the right to lodge a complaint with the Austrian Data Protection Authority (Datenschutzbehörde) if you believe we have not handled your personal data in accordance with applicable law.