In this privacy policy, we inform you which data are recorded by the Walter Heindl Ges.m.b.H., for which purpose they are used and what rights you have in relation to your data. We also endeavor to provide all necessary technical and organizational security measures to adequately protect your personal data from unauthorized access and misuse at any time.



Collection, processing and use of your personal data


We collect, store and process data in compliance with the relevant data protection regulations in case of


  • a contractual relationship with you
  • your consent to the purposes you agreed with
  • a legal obligation
  • a legitimate interest


We only collect personal information that is necessary for the performance of our services and for the fulfillment of the contract or that you voluntarily provided to us.


When you access our websites, information such as the web browser used, the operating system, the domain name of your provider and the like is collected. This is only information that does not allow conclusions about your person.



Use of Cookies


Our website uses so-called cookies. These are small text files that are stored on your device using the browser. They do no harm. We use cookies to make our offer user-friendly. Some cookies remain stored on your device until you delete them. They allow us to recognize your browser on your next visit. If you do not want this, you can set up your browser so that it informs you about the setting of cookies and you allow this only in individual cases. Disabling cookies may limit the functionality of our website.


If you allow us to use cookies through your browser settings or consent, the following cookies may be used on our websites:


  • PHPSESSID: This cookie serves as an identification feature for the duration of your visit to our websites. It only applies to the current session.
  • _icl_current_language: This cookie contains information about the language version used. It only applies to the current session.
  • __utmt: This 10-minute cookie contains information supporting Google Analytics and is designed to reduce the rate at which usage statistics are collected / submitted.
  • __utma: This 2-year cookie used for Google Analytics is used to distinguish users and sessions.
  • __utmb: This Google Analytics cookie is used to identify new visits to web pages. It is valid for 30 minutes.
  • __utmc: This cookie used for Google Analytics complements the _utmb cookie and is used to measure the duration of visits to websites. It only applies to the current session.
  • __utmz: This Google Analytics cookie is used to determine the way a website was found and visited. It is valid for 6 months.
  • PREF: This cookie used by Google contains information about the settings chosen by the visitor as well as features that are intended to identify the visitor in a fraud-proof manner and to collect information about their use when using Google’s offers. The cookie is only valid for the current session.
  • NID: This cookie used by Google is used to collect information about the use of Google offers. It only applies to the current session.


Use of Google Analytics


This website uses Google Universal Analytics, a web analytics service provided by Google LLC (“Google”), Amphitheatre Parkway, Mountain View, CA 94043, USA. Google uses cookies. The information about the use of this website, which is generated by cookies, by users is usually transmitted to a Google server in the United States and stored there. Google is certified by the Privacy Shield Agreement.


Google Analytics is a web analytics service. Web analysis is the collection, recording and analysis of data about the behavior of visitors to websites. Among other things, a web analysis service collects data about which website has led an affected person to another website (so-called referrers), which subpages of the website were accessed or how often and for how long a subpage was viewed. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on the website activity for the website operator and to provide other services related to website activity and internet usage to the website operator.


We only use Google Analytics with activated IP anonymization. This means that the IP address of the users will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the US and shortened there.


You can prevent the storage of cookies by the appropriate setting of your browser software. You may also prevent the collection by Google of the data generated by the cookie and related to your use of the website as well as the processing of this data by Google by downloading and installing the browser plug-in available under the following link:  


Google Maps


We include maps from the Google Maps service of Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA, on our website. The processed data may include, but is not limited to, users’ IP addresses and location data, but they are not collected without their consent (usually via the settings of their mobile devices). The data can be processed in the USA.


Google’s Privacy Policy & Additional Terms of Use for Google Maps can be found at



Social Plug-In of Facebook


On our pages, plugins of the social network Facebook, 1601 South California Avenue, Palo Alto, CA 94304, USA are integrated. You can recognize the Facebook plug-ins by the Facebook logo or the “Like-Button” (“Like”) on our site. You can find an overview of the Facebook plug-ins here: / plugins /. When you visit our pages, the plugin establishes a direct connection between your browser and the Facebook server, which informs Facebook that you have visited our site with your IP address. If you use the Facebook “Like-Button” while you are logged in to your Facebook account, you can link the contents of our pages with your Facebook profile. This allows Facebook to associate the visit of our pages with your user account. We point out that we as the provider of the pages receive no knowledge of the content of the transmitted data and their use by Facebook.


If you do not want Facebook to associate your visit with our pages with your Facebook user account, please log out of your Facebook user account.


For more information about how Facebook collects and uses your information, see the Facebook terms of use at



Registration SchokoClub


In order to be able to ensure you customized offers and to continuously optimize our assortments, you have the opportunity to register for the SchokoClub via our website. We process your personal information from the registration form and your shopping data. The data you provide is required to fulfill the contract or to perform pre-contractual action and is processed, for example, for vouchers, the birthday discount and important customer information. For the processing and dispatch of these mailings in postal form, we only pass on address data to selected partners (e.g. printers).


The registration of the affected person for the SchokoClub is carried out by voluntarily providing personal data and serves to offer the affected person content or services that can only be offered to registered visitors, such as special offers and promotions exclusively for SchokoClub members in all Heindl shops. Furthermore, regular information about news and events in the SchokoMuseum via newsletter and / or mail.


Registered persons have the right to a complete deletion from the database of the personal data given at registration.



Contact form


On our website, you have the opportunity to contact us by e-mail and / or via a contact form. In this case, the data you provide will be stored for the purpose of processing the request. Your data will not be disclosed to third parties without your consent.





When registering for the SchokoClub newsletter, the data you enter will be used solely for the purpose of using the newsletter service.


Visitors may be notified by email about circumstances relevant to the service or registration (such as changes to the newsletter offer or technical conditions). The data collected during registration in the input mask are collected.


You can revoke your consent to the newsletter at any time. Each newsletter has a link to it. In addition, the revocation can be made by the other contact options indicated on the website.



Data protection for applications and the application process


Personal data of applicants are collected and processed for the purpose of handling the application process. The processing can also be done electronically. This is especially the case if applicants submit corresponding application documents by electronic means, for example by e-mail. In case of the conclusion of a contract of employment with applicants, the transmitted data for the completion of the employment relationship are stored in compliance with the legal requirements. If we do not conclude a contract of employment with the applicant, the application documents will be automatically deleted six months after the announcement of the rejection decision or stored with a legitimate interest on our part.


Legitimate interest in this sense is, for example, a burden of proof in proceedings under the General Equal Treatment Act (AGG).



Storage and retention period


We adhere to the principles of data avoidance and data economy. Your data will not be retained for longer than it is necessary to achieve the above-mentioned purposes or to fulfill the contractual or legal obligations and to avert any possible liability claims.



Your rights


You have the right to receive information about your stored personal data at any time. Furthermore, you have the right to correction, blocking or, apart from the prescribed data storage for business transactions, deletion of your personal data.


You can make changes or revoke your consent by notifying us with effect for the future.



Changes to our data protection regulation


We reserve the right to modify this privacy policy when necessary to comply with current legal requirements or to implement changes to our data protection regulation, such as the introduction of new services / duties. Your new visit will be subject to the new privacy policy.




Walter Heindl Ges.m.b.H., Willendorfer Gasse 2-8, A-1230 Wien, phone: +43 1 667 21 10 – 0, email: