DATA PROTECTION DECLARATION
Basic Information on Data Processing
The protection of your personal data is of particular importance to us. We therefore process your data exclusively in accordance with legal requirements (GDPR). In this privacy policy, we inform you about the most important aspects of data processing in connection with our website.
This Privacy Policy informs you about the nature, scope, and purpose of the processing of personal data within our online offering and the associated websites, features, and content (hereinafter collectively referred to as the “online offering” or “website”). The Privacy Policy applies regardless of the domains, systems, platforms, and devices (e.g., desktop or mobile device) on which the online offering is operated.
Collection, Processing, and Use of Personal Data
With regard to the terms used (e.g., “personal data” or its “processing”), we refer to the definitions in Article 4 of the General Data Protection Regulation (GDPR).
The personal data processed within the scope of this online offering includes usage data (e.g., the web pages visited on our online offering, interest in our products) and content data (e.g., entries in the contact form).
The term “user” encompasses all categories of individuals affected by data processing. This includes our business partners, customers, prospective customers, and other visitors to our website.
We process your personal data only in compliance with the applicable data protection regulations. This means that your data will be processed only if we have legal authorization to do so. Specifically, this means when data processing is necessary or required by law to provide our contractual services (e.g., handling inquiries) and online services, when we have obtained your consent, or based on our legitimate interests (i.e., our interest in analyzing, optimizing, and ensuring the economic operation and security of our online offering; Art. 6(1)(f) GDPR), particularly in connection with audience measurement, the creation of profiles for advertising and marketing purposes, as well as the collection of access data and the use of third-party services.
We process your personal data only in compliance with the applicable data protection regulations. This means that your data will be processed only if we have legal authorization to do so. Specifically, this means when data processing is necessary or required by law to provide our contractual services (e.g., handling inquiries) and online services, when we have obtained your consent, or based on our legitimate interests (i.e., our interest in analyzing, optimizing, and ensuring the economic operation and security of our online offering; Art. 6(1)(f) GDPR), particularly in connection with audience measurement, the creation of profiles for advertising and marketing purposes, as well as the collection of access data and the use of third-party services.
We refer to the following legal bases:
* Legal basis for consent: Art. 6(1)(a) and Art. 7 of the GDPR
* Legal basis for processing to fulfill our services and carry out contractual measures: Art. 6(1)(b) of the GDPR
* Legal basis for processing to fulfill our legal obligations: Article 6(1)(c) of the GDPR
* Legal basis for processing to protect our legitimate interests: Article 6(1)(f) of the GDPR
Security Measures
We implement appropriate organizational, contractual, and technical security measures in accordance with the state of the art to ensure compliance with data protection regulations and to protect the data we process against accidental or intentional manipulation, loss, destruction, or access by unauthorized persons.
These security measures include, in particular, the encrypted transmission of data between your browser and our server.
Contact
If you contact us via the contact form or by email, your information will be processed for the purpose of handling your contact request and its follow-up (Art. 6(1)(b) GDPR).
Collection of Access Data & Log Files
Based on our legitimate interests (Art. 6(1)(f) GDPR), we collect data regarding every access to the server on which this website is hosted (so-called server log files). Access data includes the name of the website accessed, the file, the date and time of access, the amount of data transferred, a notification of successful access, browser type and version, your operating system, the referrer URL (the previously visited page, if our website was accessed via a link), and your IP address.
The log file information is stored for a maximum of three months for security reasons (e.g., to investigate cases of misuse or fraud) and is deleted thereafter.
Data that must be retained for evidentiary purposes is exempt from deletion until the respective incident has been fully resolved.
Cookies & Audience Measurement
Cookies are pieces of information transmitted by our web server or third-party web servers to the user’s web browser, where they are stored on a data storage medium for later retrieval. Cookies may be small files or other types of data storage.
We use “session cookies,” which are stored only for the duration of the current visit to our website. A session cookie stores a randomly generated unique identification number, known as a session ID. In addition, a cookie contains Information on their origin and retention period: These cookies cannot store any additional data. Session cookies are deleted as soon as you stop using our online service—for example, when you close your browser.
Opt-Out
If you do not wish to have cookies stored on your computer, please disable the corresponding option in your browser’s settings. Stored cookies can be deleted in your browser’s settings. Disabling cookies may result in limited functionality on our website. You can opt out of the use of cookies for audience measurement and advertising purposes via the Network Advertising Initiative’s opt-out page (http://optout.networkadvertising.org/), as well as via the U.S. website (http://www.aboutads.info/choices) or the European website (http://www.youronlinechoices.com/uk/ your-ad-choices/).
Google Analytics
Based on our legitimate interests (interest in the analysis, optimization, and economic operation of our website, Art. 6(1)(f) GDPR), we use Google Analytics, a web analytics service provided by Google Inc. (“Google”). Google uses cookies. The information generated by the cookie regarding your use of this website is generally transmitted to a Google server in the United States and stored there.
Compliance with European Data Protection Law
Google is certified under the Privacy Shield Framework and thereby guarantees compliance with European data protection law (https://www.privacyshield.gov/participantid=a2zt000000001L5AAI&status=Active).
How Google Analytics Works
Google will use this information on our behalf to evaluate your use of the website, to compile reports on activity within the website, and to provide other services related to the use of this website and the Internet. In doing so, pseudonymous user profiles may be created from the processed data.
Anonymization of Your Data
We use Google Analytics only with IP anonymization enabled. This means that your IP address is truncated by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the United States and truncated there. The IP address transmitted by your browser is not combined with other data held by Google.
Opt-Out
You can refuse the use of cookies by selecting the appropriate settings in your browser. You can also prevent Google from collecting the data generated by the cookie and related to your use of the website, as well as from processing this data, by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.
Further Information
For more information about Google’s use of data, as well as options for settings and opting out, please visit Google’s websites: https://www.google.com/intl/de/policies/privacy/partners (“How Google uses data when you use our partners’ websites or apps”), http://www.google.com/policies/technologies/ads (“Data Use for Advertising Purposes”), http://www.google.de/settings/ads (“Manage the information Google uses to show you ads”).
Integration of Third-Party Services and Content
Our online offering may include third-party content (e.g., maps from Google Maps, fonts, etc.). This requires that the providers of this content (“third-party providers”) collect users’ IP addresses. Without the IP address, the content could not be sent to the user’s browser. The IP address is therefore necessary for displaying this content.
We make every effort to use only content whose respective providers use the IP address solely for the purpose of delivering the content.
Third-party providers may also use so-called pixel tags (invisible graphics, also known as “web beacons”) for statistical or marketing purposes. These “pixel tags” allow information such as visitor traffic on the pages of this website to be analyzed. The pseudonymous information may also be stored in cookies on the user’s device and may include, among other things, technical information about the browser and operating system, referring websites, time of visit, and other details regarding the use of our online service, as well as being linked to such information from other sources.
Below you will find an overview of third-party providers and their content, a link to their respective privacy policies (which contain further information on the processing of your data), and, where already mentioned here, options to opt out:
* External fonts from Google Inc., https://www.google.com/fonts (“Google Fonts”). Google Fonts are integrated via a server request to Google (typically in the U.S.). Privacy Policy: https://www.google.com/policies/privacy/ | Opt-out: https://www.google.com/settings/ads/
* Maps from the “Google Maps” service provided by the third-party provider Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy Policy: https://www.google.com/policies/privacy/ | Opt-out: https://www.google.com/settings/ads/
Facebook Social Plugins
Based on our legitimate interests (i.e., our interest in analyzing, optimizing, and ensuring the economic operation of our online offering within the meaning of Article 6(1)(f) of the GDPR), we use so-called social plugins (“plugins”) from the social network facebook.com, which is operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”). The plugins may display interactive elements or content (e.g., videos, graphics, or text posts) and can be recognized by one of the Facebook logos (a white “f” on a blue tile, the terms “Like,” “Gefällt mir,” or a “thumbs-up” icon) or are labeled with the phrase “Facebook Social Plugin.” The list and appearance of the Facebook Social Plugins can be viewed here: https://developers.facebook.com/docs/plugins/.
Facebook is certified under the Privacy Shield Framework and thereby guarantees compliance with European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active).
When the plugins are integrated, Facebook receives information that a user has accessed the corresponding page of the online service. If the user is logged into Facebook, Facebook can associate the visit with the user’s Facebook account. If users interact with the plugins—for example, by clicking the “Like” button or posting a comment—the corresponding information is transmitted directly from your device to Facebook and stored there. Even if a user is not a member of Facebook, there is still a possibility that Facebook may obtain and store their IP address. According to Facebook, only an anonymized IP address is stored in Germany.
The purpose and scope of data collection, as well as the further processing and use of the data by Facebook, and the related rights and settings options for protecting users’ privacy, can be found in Facebook’s Privacy Policy: https://www.facebook.com/about/privacy/.
If a user is a Facebook member and does not want Facebook to collect data about them through this online service and link it to their membership data stored on Facebook, they must log out of Facebook and delete their cookies before using our online service. Additional settings and the ability to opt out of the use of data for advertising purposes are available in the Facebook profile settings: https://www.facebook.com/settings?tab=ads or via the U.S. site http://www.aboutads.info/choices/ or the EU site http://www.youronlinechoices.com/. These settings apply across all platforms, meaning they are applied to all devices, such as desktop computers or mobile devices.
Your Rights
* Right of Access: You have the right to receive, free of charge, information about the personal data we have stored about you.
* Right to Rectification, Erasure, Data Portability, and Restriction of Processing: You naturally have the right to have inaccurate data corrected, to restrict the processing of your personal data, and to have your personal data erased. If applicable, you may exercise your right to data portability.
* Right to lodge a complaint: If you believe that we are processing your data unlawfully, you have the right to lodge a complaint with the competent supervisory authority. In Austria, this is the Data Protection Authority.
Deletion of Data
The data we store will be deleted as soon as it is no longer necessary for its intended purpose and there are no legal retention requirements preventing its deletion.
Changes to the Privacy Policy
We reserve the right to amend our Privacy Policy to adapt it to changes in the legal landscape or in the event of changes to the service or data processing. To the extent that consent is required or parts of the Privacy Policy contain provisions governing the contractual relationship with you, changes will only be made with your consent.
However, this applies only in relation to data processing statements under data protection law. If consent is required or if parts of the Privacy Policy contain provisions governing our contractual relationship with you, changes will be made only with your consent.
We ask that you review the content of our Privacy Policy regularly.