Privacy Policy

Introduction and overview

We have written this privacy policy (version 20.05.2023-112507125) in accordance with the requirements of General Data Protection Regulation (EU) 2016/679 and to explain to applicable national laws which personal data (data for short) we, as the controller — and the contract processors commissioned by us (e.g. providers) — process, will process in the future and what lawful options you have. The terms used are to be understood as gender-neutral.

In short: We will provide you with comprehensive information about the data that we process about you.

Privacy statements usually sound very technical and use technical legal terms. This privacy policy, on the other hand, is intended to describe the most important things to you as simply and transparently as possible. As far as it is conducive to transparency, technical terms are explained in a reader-friendly manner, links to further information are provided and graphics are used. We hereby inform you in clear and simple language that we only process personal data as part of our business activities if there is a corresponding legal basis. This is certainly not possible if you provide concise, unclear and legal-technical explanations, as they are often standard on the Internet when it comes to data protection. I hope you find the following explanations interesting and informative and perhaps there is some information that you did not know yet.

If you still have any questions, we would like to ask you to contact the responsible body mentioned below or in the legal notice, follow the existing links and look at further information on third-party sites. Our contact details can of course also be found in the legal notice.

Scope of application

This privacy policy applies to all personal data processed by us in the company and to all personal data that companies commissioned by us (contract processors) process. By personal data, we mean information within the meaning of Article 4 No. 1 GDPR, such as the name, e-mail address and postal address of a person. The processing of personal data ensures that we can offer and bill for our services and products, whether online or offline. The scope of this privacy statement includes:

• all online presences (websites, online shops) that we operate
• Social media appearances and email communication
• mobile apps for smartphones and other devices

In short: The privacy policy applies to all areas in which personal data in the company is processed in a structured manner via the mentioned channels. Should we enter into legal relationships with you outside of these channels, we may inform you separately.

legal bases

In the following privacy policy, we provide you with transparent information on the legal principles and regulations, i.e. the legal bases of the General Data Protection Regulation, which enable us to process personal data.

As far as EU law is concerned, we refer to REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016. This EU General Data Protection Regulation can of course be found online at EUR-Lex, access to EU law, at https://eur-lex.europa.eu/legal-content/DE/ALL/?uri=celex%3A32016R0679 Read up.

We only process your data if at least one of the following conditions applies:

1. consent (Article 6 paragraph 1 lit. a GDPR): You have given us your consent to process data for a specific purpose. One example would be saving the data you entered in a contact form.
2. treaty (Article 6 paragraph 1 lit. b GDPR): In order to fulfill a contract or pre-contractual obligations with you, we process your data. For example, when we conclude a purchase contract with you, we need personal information in advance.
3. Legal obligation (Article 6 paragraph 1 lit. c GDPR): If we are subject to a legal obligation, we process your data. For example, we are required by law to keep invoices for accounting purposes. These usually contain personal data.
4. Legitimate interests (Article 6 paragraph 1 lit. f GDPR): In the case of legitimate interests that do not restrict your fundamental rights, we reserve the right to process personal data. For example, we must process certain data in order to be able to operate our website securely and economically efficiently. This processing is therefore a legitimate interest.

As a rule, we do not have any other conditions, such as the use of recordings in the public interest and the exercise of public authority as well as the protection of vital interests. Insofar as such a legal basis should be relevant, it will be shown in the appropriate place.

In addition to the EU regulation, national laws also apply:

• In austria Is this the Federal Act on the Protection of Individuals with regard to the Processing of Personal Data (Data Protection Act), short DSG.
• In germany Does that apply Federal Data Protection Act, briefly BDSG.

If other regional or national laws apply, we will inform you about them in the following sections.

Contact details of the person responsible

If you have any questions about data protection or the processing of personal data, you will find the contact details of the responsible body below:

thirdmind GmbH
Mollardgasse 70C/5, 1060 Vienna, Austria
email: office@thirdmind.ai
telephone: +4318908093

Storage period

The fact that we only store personal data for as long as is absolutely necessary to provide our services and products is a general criterion for us. This means that we delete personal data as soon as the reason for the data processing no longer exists. In some cases, we are required by law to store certain data even after the original purpose has ceased to exist, for example for accounting purposes.

Should you wish to delete your data or withdraw your consent to data processing, the data will be deleted as quickly as possible and unless there is an obligation to store it.

We will inform you about the specific duration of the respective data processing below, provided that we have further information about this.

Rights under the General Data Protection Regulation

In accordance with Articles 13, 14 GDPR, we inform you of the following rights that you are entitled to so that data is processed fairly and transparently:

According to Article 15 GDPR, you have the right to information as to whether we process your data. If this is the case, you have the right to receive a copy of the data and to know the following information:

• for what purpose we carry out the processing;
• the categories, i.e. the types of data that are processed;
• Who receives this data and when the data is transferred to third countries, how security can be guaranteed;
• how long the data is stored;
• the existence of the right to correct, delete or restrict processing and the right to object to processing;
• that you can complain to a supervisory authority (links to these authorities can be found below);
• the origin of the data if we did not collect it from you;
• Whether profiling is carried out, i.e. whether data is automatically evaluated in order to obtain a personal profile about you.

• According to Article 16 GDPR, you have the right to correct the data, which means that we must correct data if you find errors.
• According to Article 17 GDPR, you have the right to delete (“right to be forgotten”), which in concrete terms means that you may request the deletion of your data.
• According to Article 18 GDPR, you have the right to restrict processing, which means that we can only store the data but no longer use it.
• According to Article 20 GDPR, you have the right to data portability, which means that we will provide you with your data in a common format upon request.
• According to Article 21 GDPR, you have a right of objection, which, once enforced, entails a change in processing.
  
  
  • If the processing of your data is based on Article 6 (1) (e) (public interest, exercise of official authority) or Article 6 (1) (f) (legitimate interest), you can object to the processing. We will then check as quickly as possible whether we can legally comply with this objection.
  • If data is used for direct marketing purposes, you can object to this type of data processing at any time. We may then no longer use your data for direct marketing.
  • If data is used to carry out profiling, you can object to this type of data processing at any time. We are then no longer allowed to use your data for profiling.
• According to Article 22 GDPR, you may have the right not to be subject to a decision based exclusively on automated processing (for example profiling).
• According to Article 77 GDPR, you have the right to lodge a complaint. This means that you can complain to the data protection authority at any time if you believe that the processing of personal data violates the GDPR.

In short: You have rights — don't hesitate to contact the responsible body listed above!

If you believe that the processing of your data violates data protection law or your data protection claims have been violated in any other way, you can complain to the supervisory authority. For Austria, this is the data protection authority, whose website can be found at https://www.dsb.gv.at/ find. In Germany, there is a data protection officer for every federal state. For more information, you can contact Federal Commissioner for Data Protection and Freedom of Information (BfDI) turn around. The following local data protection authority is responsible for our company:

Austria Data Protection Authority

Leiter: Dr. Andrea Jelinek
address: Barichgasse 40-42, 1030 Vienna
telephone number.: +43 1 52 152-0

email address: dsb@dsb.gv.at

webpage: https://www.dsb.gv.at/

Data transfer to third countries

We only transfer or process data to countries outside the EU (third countries) if you consent to this processing, this is required by law or is contractually necessary and in any case only to the extent generally permitted. In most cases, your consent is the most important reason that we have data processed in third countries. Processing personal data in third countries such as the USA, where many software manufacturers offer services and have their server locations, may mean that personal data is processed and stored in unexpected ways.

We expressly point out that, in the opinion of the European Court of Justice, there is currently no adequate level of protection for data transfer to the USA. Data processing by US services (such as Google Analytics) may result in data not being processed and stored anonymously. In addition, US government authorities may have access to individual data. In addition, collected data may be linked to data from other services from the same provider, provided that you have a corresponding user account. Where possible, we try to use server locations within the EU, if this is offered.

We will inform you in more detail about data transfer to third countries at the appropriate points in this privacy policy, if this applies.

Data processing security

We have implemented both technical and organizational measures to protect personal data. Where possible, we encrypt or pseudonymize personal data. As a result, we make it as difficult as possible for third parties to infer personal information from our data.

Article 25 GDPR here speaks of “data protection through technology design and through privacy-friendly default settings” and means that both software (e.g. forms) and hardware (e.g. access to the server room) are always concerned with security and take appropriate measures. If necessary, we will look at specific measures below.

TLS encryption with https

TLS, encryption, and https sound very technical and they are. We use HTTPS (the Hypertext Transfer Protocol Secure stands for “secure hypertext transfer protocol”) to transfer data securely over the Internet.

This means that the complete transfer of all data from your browser to our web server is secured — no one can “listen”.

We have thus introduced an additional security layer and comply with data protection through technology design (Article 25 paragraph 1 GDPR). By using TLS (Transport Layer Security), an encryption protocol for secure data transmission over the Internet, we can ensure the protection of confidential data.

You can recognize the use of this data transfer security by the small lock symbol

at the top left of the browser, left from the Internet address (e.g. examplepage.de) and the use of the https scheme (instead of http) as part of our Internet address.

If you want to know more about encryption, we recommend Google searching for “Hypertext Transfer Protocol Secure wiki” to get good links to further information.

communications

Communication summary

👥 Affected persons: Anyone who communicates with us via telephone, email or online form

📓 Processed data: e.g. telephone number, name, email address, entered form data. More details can be found under the contact type used

🤝 Purpose: Handling communication with customers, business partners, etc.

📅 Storage period: duration of the transaction and legal regulations

⚖️ Legal bases: Art. 6 para. 1 lit. a DSGVO (consent), Art. 6 para. 1 lit. b DSGVO (contract), Art. 6 para. 1 lit. f GDPR (legitimate interests)

If you contact us and communicate by telephone, e-mail or online form, personal data may be processed.

The data is processed to process and process your question and the related business transaction. The data is stored for just as long as required by law.

Affected persons

Everyone who seeks contact with us via the communication channels provided by us is affected by the processes mentioned above.

telephone

When you call us, the call data is stored pseudonymously on the respective device and by the telecommunications provider used. In addition, data such as name and telephone number can then be sent by e-mail and saved to answer the request. The data is deleted as soon as the transaction has ended and legal requirements allow it.

email

When you communicate with us by e-mail, data may be stored on the respective device (computer, laptop, smartphone,...) and data is stored on the email server. The data is deleted as soon as the transaction has ended and legal requirements allow it.

Online forms

When you communicate with us using an online form, data is stored on our web server and, if necessary, forwarded to an e-mail address from us. The data is deleted as soon as the transaction has ended and legal requirements allow it.

legal bases

The processing of data is based on the following legal bases:

• Art. 6 para. 1 lit. a GDPR (consent): You give us consent to store your data and continue to use it for purposes relevant to the business case;
• Art. 6 para. 1 lit. b GDPR (contract): There is a need to fulfill a contract with you or a processor such as the telephone provider or we must process the data for pre-contractual activities, such as preparing an offer;
• Art. 6 para. 1 lit. f DSGVO (legitimate interests): We want to conduct customer inquiries and business communication in a professional setting. This requires certain technical equipment, such as e-mail programs, Exchange servers and mobile operators, in order to be able to operate communication efficiently.

cookies

Cookies summary

👥 Affected: Visitors to the website

🤝 Purpose: depends on the cookie in question. You can find more details below or contact the manufacturer of the software that sets the cookie.

📓 Processed data: Depending on the cookie used. You can find more details below or contact the manufacturer of the software that sets the cookie.

📅 Storage period: depending on the cookie in question, can vary from hours to years

⚖️ Legal bases: Art. 6 para. 1 lit. a DSGVO (consent), Art. 6 para. 1 lit. f DSGVO (legitimate interests)

What are cookies?

Our website uses HTTP cookies to store user-specific data.

In the following, we explain what cookies are and why they are used so that you can better understand the following privacy policy.

Whenever you browse the Internet, you use a browser. Well-known browsers include Chrome, Safari, Firefox, Internet Explorer and Microsoft Edge. Most websites store small text files in your browser. These files are called cookies.

One thing is undeniable: Cookies are really useful helpers. Almost all websites use cookies. More specifically, they are HTTP cookies, as there are also other cookies for other areas of application. HTTP cookies are small files that are stored on your computer by our website. These cookie files are automatically stored in the cookie folder, which is the “brain” of your browser. A cookie consists of a name and a value. When defining a cookie, one or more attributes must also be specified.

Cookies store certain user data about you, such as language or personal page settings. When you visit our site again, your browser transmits the “user-related” information back to our site. Thanks to cookies, our website knows who you are and offers you the settings you are used to. In some browsers, each cookie has its own file, in others, such as Firefox, all cookies are stored in a single file.

The graphic below shows a possible interaction between a web browser, such as Chrome, and the web server. The web browser requests a website and receives back a cookie from the server, which the browser uses again as soon as another page is requested.

There are both first-party cookies and third-party cookies. First-party cookies are created directly by our site, third-party cookies are created by partner websites (e.g. Google Analytics). Each cookie must be assessed individually, as each cookie stores different data. The expiration time of a cookie also varies from a few minutes to a few years. Cookies are not software programs and do not contain viruses, Trojans or other “malware.” Cookies also cannot access information on your PC.

For example, cookie data can look like this:

Name: _ga

value: GA1.2.1326744211.152112507125-9

Usage: Distinction of website visitors

Expiration date: after 2 years

A browser should be able to support these minimum sizes:

• At least 4096 bytes per cookie
• At least 50 cookies per domain
• At least 3000 cookies in total

What types of cookies are there?

The question of which cookies we use in particular depends on the services used and is clarified in the following sections of the privacy policy. At this point, we would like to briefly discuss the different types of HTTP cookies.

There are 4 types of cookies:

Essential cookies

These cookies are necessary to ensure basic functions of the website. For example, these cookies are needed when a user places a product in the shopping cart, then continues browsing on other pages and only goes to the checkout later. These cookies do not delete the shopping cart, even if the user closes their browser window.

Purpose-for cookies

These cookies collect information about user behavior and whether the user receives any error messages. These cookies are also used to measure the loading time and behavior of the website with different browsers.

Targeted cookies

These cookies make for a better user experience. For example, entered locations, font sizes, or form data are saved.

advertising cookies

These cookies are also known as targeting cookies. They are used to deliver individually tailored advertising to the user. It can be very practical but also very annoying.

When you visit a website for the first time, you will usually be asked which of these types of cookies you would like to allow. And of course, this decision is also saved in a cookie.

If you want to know more about cookies and don't shy away from technical documentation, we recommend https://datatracker.ietf.org/doc/html/rfc6265, the Internet Engineering Task Force (IETF) Request for Comments called “HTTP State Management Mechanism.”

Purpose of processing via cookies

The purpose ultimately depends on the cookie in question. You can find more details below or contact the manufacturer of the software that sets the cookie.

Which data is processed?

Cookies are small assistants for many different tasks. Unfortunately, it is not possible to generalize which data is stored in cookies, but we will inform you about the processed or stored data as part of the following privacy policy.

Storage period of cookies

The storage period depends on the cookie in question and is explained below. Some cookies are deleted after less than an hour, and others can be stored on a computer for several years.

You also have influence on the storage period yourself. You can manually delete all cookies at any time via your browser (see also “Right of objection” below). In addition, cookies based on consent will be deleted at the latest after you withdraw your consent, although the legality of storage remains unaffected until then.

Right to object — how can I delete cookies?

You decide for yourself how and whether you want to use cookies. Regardless of which service or website the cookies come from, you always have the option to delete, deactivate or only partially allow cookies. For example, you can block third-party cookies but allow all other cookies.

If you want to find out which cookies have been stored in your browser, if you want to change or delete cookie settings, you can find this in your browser settings:

Chrome: Delete, enable, and manage cookies in Chrome

Safari: Managing cookies and website data with Safari

Firefox: Delete cookies to remove data that websites have stored on your computer

Internet Explorer: Delete and manage cookies

Microsoft Edge: Delete and manage cookies

If you generally do not want cookies, you can set up your browser so that it always informs you when a cookie is about to be set. For each individual cookie, you can decide whether to allow the cookie or not. The procedure differs depending on the browser. It is best to search for the instructions in Google with the search term “delete cookies Chrome” or “deactivate cookies Chrome” in the case of a Chrome browser.

legal basis

The so-called “cookie guidelines” have been in place since 2009. It states that the storage of cookies requires your consent (Article 6 (1) (a) GDPR). However, there are still very different responses to these directives within EU countries. In Austria, however, this directive was implemented in Section 96 (3) of the Telecommunications Act (TKG). In Germany, the cookie guidelines have not been implemented as national law. Instead, this guideline was largely implemented in Section 15 (3) of the Telemedia Act (TMG).

For absolutely necessary cookies, even if consent has not been given, there are legitimate interests (Article 6 (1) (f) GDPR), which in most cases are of an economic nature. We want to give visitors to the website a pleasant user experience and certain cookies are often absolutely necessary for this.

Insofar as cookies that are not absolutely necessary are used, this only happens with your consent. The legal basis in this respect is Article 6 (1) (a) GDPR.

In the following sections, you will be informed in more detail about the use of cookies, if the software used uses cookies.

Web hosting introduction

Web hosting summary

👥 Affected: Visitors to the website

🤝 Purpose: professional website hosting and operational security

📓 Processed data: IP address, time of website visit, browser used and other data. More details can be found below or with the respective web hosting provider.

📅 Storage period: depends on the respective provider, but usually 2 weeks

⚖️ Legal basis: Article 6 (1) (f) GDPR (legitimate interests)

What is web hosting?

When you visit websites today, certain information — including personal data — is automatically created and stored, including on this website. This data should be processed as sparingly as possible and only with justification. By website, we mean the entirety of all websites on a domain, i.e. everything from the start page (homepage) to the very last subpage (like this one here). By domain, we mean example.de or musterexample.com, for example.

If you want to view a website on a computer, tablet, or smartphone, use a program called a web browser. You probably know a few web browsers by name: Google Chrome, Microsoft Edge, Mozilla Firefox, and Apple Safari. Let's call it browser or web browser for short.

To view the website, the browser must connect to another computer where the website code is stored: the web server. Operating a web server is a complicated and time-consuming task, which is why this is usually done by professional providers, the providers. They offer web hosting and thus ensure reliable and error-free storage of website data. A whole lot of technical terms, but please stay tuned, it gets even better!

Personal data may be processed when the browser connects to your computer (desktop, laptop, tablet or smartphone) and during data transmission to and from the web server. On the one hand, your computer stores data, and on the other hand, the web server must also store data for a period of time to ensure proper operation.

A picture is worth a thousand words, which is why the following graphic shows the interaction between browser, the Internet and the hosting provider.

Why do we process personal data?

The purposes of data processing are:

1. Professional website hosting and operational security
2. to maintain operational and IT security
3. Anonymous evaluation of access behavior to improve our offering and, if necessary, to prosecute or prosecute claims

Which data is processed?

Even while you are visiting our website right now, our web server, which is the computer on which this website is stored, usually automatically stores data such as

• the complete Internet address (URL) of the accessed website
• Browser and browser version (e.g. Chrome 87)
• the operating system used (e.g. Windows 10)
• the address (URL) of the previously visited page (referrer URL) (e.g. https://www.beispielquellsite.de/vondabinichgekommen/)
• the host name and IP address of the device from which access is being made (e.g. COMPUTERNAME and 194.23.43.121)
• date and time
• in files, the so-called web server log files

How long is data stored?

As a rule, the above data is stored for two weeks and then automatically deleted. We do not share this data, but we cannot rule out the possibility that this data will be viewed by authorities in the event of illegal conduct.

In short: Your visit is logged by our provider (company that runs our website on special computers (servers)), but we will not share your data without your consent!

legal basis

The lawfulness of processing personal data in the context of web hosting results from Art. 6 para. 1 lit. f DSGVO (protection of legitimate interests), because the use of professional hosting with a provider is necessary to present the company securely and in a user-friendly manner on the Internet and to be able to prosecute attacks and claims arising from this if necessary.

There is usually a contract between us and the hosting provider for order processing in accordance with Art. 28 f. GDPR, which ensures compliance with data protection and guarantees data security.

Website modular systems introduction

Website modular systems Privacy Policy Summary

👥 Affected: Visitors to the website

🤝 Purpose: Optimizing our service performance

📓 Processed data: Data such as technical usage information such as browser activity, clickstream activity, session heat maps, as well as contact details, IP address, or your geographical location. You can find more details below in this privacy policy and in the privacy policy of the providers.

📅 Storage period: depends on the provider

⚖️ Legal bases: Art. 6 para. 1 lit. f DSGVO (legitimate interests), Art. 6 para. 1 lit. a GDPR (consent)

What are website builder systems?

We use a website builder system for our website. Modular systems are special forms of a content management system (CMS). With a modular system, website operators can create a website very easily and without programming knowledge. In many cases, web hosts also offer modular systems. By using a modular system, personal data from you can also be collected, stored and processed. In this privacy statement, we provide you with general information about data processing using modular systems. You can find more information in the provider's privacy policies.

Why do we use website builder systems for our website?

The biggest advantage of a modular system is its ease of use. We want to offer you a clear, simple and concise website that we ourselves — without external support — can easily operate and maintain. A modular system now offers many helpful functions that we can use even without programming knowledge. This allows us to design our website according to our wishes and offer you an informative and pleasant time on our website.

Which data is stored by a modular system?

Exactly which data is stored depends, of course, on the website builder system used. Each provider processes and collects different data from website visitors. However, technical usage information such as operating system, browser, screen resolution, language and keyboard settings, hosting provider and the date of your website visit is usually collected. Tracking data (e.g. browser activity, click stream activity, session heat maps, etc.) can also be processed. In addition, personal data can also be collected and stored. This usually includes contact information such as email address, telephone number (if you have provided it), IP address, and geographical location data. Exactly which data is stored can be found in the provider's privacy policy.

How long and where is the data stored?

We will inform you about the duration of data processing below in connection with the website modular system used, provided that we have further information about this. You can find detailed information about this in the provider's privacy policy. In general, we only process personal data for as long as is absolutely necessary to provide our services and products. It is possible that the provider stores data about you in accordance with its own instructions, over which we have no influence.

Right to object

You always have the right to access, correct and delete your personal data. If you have any questions, you can also contact those responsible for the website modular system used at any time. Contact details can be found either in our privacy policy or on the website of the relevant provider.

You can delete, deactivate, or manage cookies that providers use for their functions in your browser. Depending on which browser you use, this works in different ways. However, please note that then all functions may no longer work as usual.

legal basis

We have a legitimate interest in using a modular website system to optimize our online service and present it to you in an efficient and user-friendly way. The corresponding legal basis for this is Art. 6 para. 1 lit. f DSGVO (legitimate interests). However, we only use the kit if you have given your consent.

Insofar as the processing of data is not absolutely necessary for the operation of the website, the data will only be processed on the basis of your consent. This applies in particular to tracking activities. The legal basis in this respect is Article 6 (1) (a) GDPR.

With this privacy policy, we have provided you with the most important general information about data processing. If you would like to find out more about this, you can find further information — if available — in the following section or in the provider's privacy policy.

Web analytics introduction

Web Analytics Privacy Policy Summary

👥 Affected: Visitors to the website

🤝 Purpose: Evaluation of visitor information to optimize the website.

📓 Processed data: Access statistics that include data such as access locations, device data, access duration and time, navigation behavior, click behavior and IP addresses. You can find more details about this in the web analytics tool used in each case.

📅 Storage period: depends on the web analytics tool used

⚖️ Legal bases: Art. 6 para. 1 lit. a DSGVO (consent), Art. 6 para. 1 lit. f DSGVO (legitimate interests)

What is web analytics?

WWe use software on our website to evaluate the behavior of website visitors, known as web analytics or web analysis for short. This involves collecting data that the respective analytical tool provider (also known as tracking tool) stores, manages and processes. With the help of the data, analyses of user behavior on our website are created and made available to us as a website operator. In addition, most tools offer various testing options. For example, we can test which offers or content are best received by our visitors. In return, we will show you two different offers for a limited period of time. After the test (so-called A/B test), we know which product or content our website visitors find more interesting. For such test methods, as well as for other analytics methods, user profiles can also be created and the data stored in cookies.

Why do we do web analytics?

With our website, we have a clear goal in mind: we want to deliver the best web offer on the market for our industry. In order to achieve this goal, we want to offer the best and most interesting offer on the one hand and make sure that you feel completely comfortable on our website on the other. With the help of web analysis tools, we can take a closer look at the behavior of our website visitors and then improve our website for you and us accordingly. For example, we can see how old our visitors are on average, where they come from, when our website is most visited, or which content or products are particularly popular. All this information helps us to optimize the website and thus optimally adapt it to your needs, interests and wishes.

Which data is processed?

Exactly which data is stored depends, of course, on the analysis tools used. However, it is usually stored, for example, which content you view on our website, which buttons or links you click on, when you visit a page, which browser you use, with which device (PC, tablet, smartphone, etc.) You visit the website or which computer system you use. If you agreed that location data may also be collected, this can also be processed by the web analysis tool provider.

Your IP address is also stored. According to the General Data Protection Regulation (GDPR), IP addresses are personal data. However, your IP address is usually stored pseudonymized (i.e. in an unrecognizable and abbreviated form). In principle, no direct data, such as your name, age, address or email address, is stored for the purpose of testing, web analysis and web optimization. All this data, if collected, is stored pseudonymized. This prevents you from being identified as a person.

The following example shows schematically how Google Analytics works as an example of client-based web tracking with JavaScript code.

How long the respective data is stored always depends on the provider. Some cookies only store data for a few minutes or until you leave the website, other cookies can store data for several years.

Duration of data processing

We will inform you about the duration of data processing below, provided that we have further information about this. In general, we only process personal data for as long as is absolutely necessary to provide our services and products. If required by law, such as in the case of accounting, this storage period may also be exceeded.

Right to object

You also have the right and option to withdraw your consent to the use of cookies or third parties at any time. This works either via our cookie management tool or via other opt-out features. For example, you can also prevent data collection through cookies by managing, deactivating or deleting cookies in your browser.

legal basis

The use of web analytics requires your consent, which we have obtained with our cookie popup. According to Art. 6 para. 1 lit. a GDPR (consent), this consent is the legal basis for the processing of personal data, as may occur when collected by web analytics tools.

In addition to consent, we have a legitimate interest in analyzing the behavior of website visitors and thus technically and economically improving our offering. With the help of web analytics, we can identify website errors, identify attacks and improve profitability. The legal basis for this is Art. 6 para. 1 lit. f DSGVO (legitimate interests). However, we only use the tools if you have given your consent.

Since web analytics tools use cookies, we also recommend that you read our general privacy policy on cookies. To find out exactly which data you store and process, you should read the privacy statements of the respective tools.

Information about specific web analytics tools — if available — is available in the following sections.

Google Analytics privacy policy

Google Analytics privacy policy summary

Affected persons: visitors to the website

Purpose: Evaluation of visitor information to optimize the website.

Processed data: Access statistics, which include data such as access locations, device data, access duration and time, navigation behavior, click behavior and IP addresses. You can find more details about this below in this privacy policy.

Storage time: depends on the properties used

⚖️ Legal bases: Art. 6 para. 1 lit. a DSGVO (consent), Art. 6 para. 1 lit. f DSGVO (legitimate interests)

What is Google Analytics?

On our website, we use the analysis tracking tool Google Analytics (GA) from the American company Google Inc. For Europe, Google Ireland Limited (Gordon House, Barrow Street Dublin 4, Ireland) is responsible for all Google services. Google Analytics collects data about your actions on our website. For example, when you click on a link, this action is saved in a cookie and sent to Google Analytics. With the help of the reports we receive from Google Analytics, we can better tailor our website and service to your needs. In the following, we will go into more detail about the tracking tool and, in particular, inform you about which data is stored and how you can prevent this.

Google Analytics is a tracking tool that is used to analyze our website's traffic. For Google Analytics to work, a tracking code is built into the code on our website. When you visit our website, this code records various actions that you take on our website. As soon as you leave our website, this data is sent to the Google Analytics servers and stored there.

Google processes the data and we receive reports about your user behavior. These may include the following reports:

• Target group reports: Through target group reports, we get to know our users better and know more precisely who is interested in our service.
• Ad reports: Ad reports make it easier for us to analyze and improve our online advertising.
• Acquisition reports: Acquisition reports give us helpful information about how we can get more people excited about our service.
• Behavioral reports: This tells us how you interact with our website. We can understand which path you are taking on our site and which links you click on.
• Conversion reports: Conversion is a process in which you take a desired action based on a marketing message. For example, when you go from just a website visitor to a buyer or newsletter subscriber. With the help of these reports, we learn more about how you are receiving our marketing measures. This is how we want to increase our conversion rate.
• Real-time reports: Here we always find out immediately what is happening on our website. For example, we can see how many users are currently reading this text.

Why do we use Google Analytics on our website?

Our goal with this website is clear: We want to offer you the best possible service. The statistics and data from Google Analytics help us achieve this goal.

The statistically evaluated data gives us a clear picture of the strengths and weaknesses of our website. On the one hand, we can optimize our site so that interested people can find it more easily on Google. On the other hand, the data helps us to better understand you as a visitor. We therefore know exactly what we need to improve on our website in order to offer you the best possible service. The data also helps us to carry out our advertising and marketing measures more individually and cost-effectively. After all, it only makes sense to show our products and services to people who are interested in them.

What data is stored by Google Analytics?

Google Analytics uses a tracking code to create a random, unique ID that is associated with your browser cookie. This is how Google Analytics recognizes you as a new user. The next time you visit our site, you will be recognized as a “returning” user. All collected data is stored together with this user ID. This is the first way it is possible to evaluate pseudonymous user profiles.

In order to be able to analyze our website with Google Analytics, a property ID must be inserted in the tracking code. The data is then stored in the corresponding property. The Google Analytics 4 property is standard for every newly created property. Alternatively, you can also create the Universal Analytics Property. Depending on the property used, data is stored for different lengths of time.

Identifiers such as cookies and app instance IDs measure your interactions on our website. Interactions are all types of actions that you take on our website. If you also use other Google systems (such as a Google account), data generated via Google Analytics can be linked to third-party cookies. Google does not share Google Analytics data unless we, as the website operator, approve it, with exceptions when required by law.

The following cookies are used by Google Analytics:

Nom: _ga

Value: 2.1326744211.152112507125-5

Usage: By default, analytics.js uses the _ga cookie to store the user ID. Basically, it is used to differentiate website visitors.

Expiry date: after 2 years

Namn: _gid

Value: 2.1687193234.152112507125-1

Purpose: The cookie is also used to distinguish website visitors

Expiry date: after 24 hours

Namn: _gat_gtag_ua_ <property-id>

value: 1

Usage: Used to lower the request rate. <property-id>When Google Analytics is provided via Google Tag Manager, this cookie is named _dc_gtm_.

Expiry date: after 1 minute

Namn: AMP_TOKEN

Value: no information

Purpose: The cookie has a token that can be used to retrieve a user ID from the AMP client ID service. Other possible values indicate an unsubscription, a request, or an error.

Expiry date: after 30 seconds up to one year

Namn: __utma

Value: 1564498958.1564498958.1564498958.1

Purpose: This cookie allows you to track your behavior on the website and measure performance. The cookie is updated every time information is sent to Google Analytics.

Expiry date: after 2 years

Namn: __utmt

value: 1

<property-id>Purpose: The cookie is used like _gat_gtag_UA_ to throttle the request rate.

Expiry date: after 10 minutes

Namn: __utmb

Value: 3.10.1564498958

Purpose: This cookie is used to determine new sessions. It is updated every time new data or information is sent to Google Analytics.

Expiry date: after 30 minutes

Namn: __utmc

Value: 167421564

Purpose: This cookie is used to set new sessions for returning visitors. This is a session cookie and is only stored until you close the browser again.

Expiry date: After closing the browser

Namn: __utmz

Value: m|utmccn= (referral) |utmcmd=referral|utmcct=/

Purpose: The cookie is used to identify the source of traffic to our website. This means that the cookie stores where you came to our website from. This could have been another page or an advertisement.

Expiry date: after 6 months

Namn: __utmv

Value: not specified

Purpose: The cookie is used to store user-defined user data. It is always updated when information is sent to Google Analytics.

Expiry date: after 2 years

Note: This list cannot claim to be exhaustive, as Google also changes the choice of cookies over and over again.

Here is an overview of the most important data collected with Google Analytics:

Heat maps: Google creates so-called heat maps. With heat maps, you can see exactly the areas that you click on. This gives us information about where you are “traveling” on our site.

Session duration: Google describes the time you spend on our site without leaving the site as session duration. If you have been inactive for 20 minutes, the session automatically ends.

Bounce rate: We speak of a bounce rate when you only view one page on our website and then leave our website again.

Account creation: When you create an account or place an order on our website, Google Analytics collects this data.

IP address: The IP address is only shown in abbreviated form so that no clear assignment is possible.

Location: The country and your approximate location can be determined using the IP address. This process is also known as IP location determination.

Technical information: Technical information includes your browser type, Internet service provider, or screen resolution.

Source of origin: Google Analytics or we are of course also interested in which website or which advertisement brought you to our site.

Other data includes contact details, any reviews, playing media (e.g. when you play a video via our site), sharing content via social media, or adding to your favorites. The list is not exhaustive and only serves as a general guide to data storage by Google Analytics.

How long and where is the data stored?

Google has spread their servers all over the world. Most servers are located in America and therefore your data is usually stored on American servers. Here you can read exactly where Google's data centers are located: https://www.google.com/about/datacenters/locations/?hl=de

Your data is distributed across various physical data carriers. This has the advantage that the data can be retrieved more quickly and is better protected against manipulation. Every Google data center has appropriate emergency programs for your data. For example, if Google hardware fails or natural disasters paralyze servers, the risk of a service interruption at Google remains low.

The storage period of data depends on the properties used. When using the newer Google Analytics 4 properties, the storage period of your user data is fixed at 14 months. For other so-called event data, we have the option of choosing a storage period of 2 months or 14 months.

With Universal Analytics Properties, Google Analytics has a standardized storage period of 26 months for your user data. Your user data will then be deleted. However, we have the option to choose the storage period of user data ourselves. We have five variants available for this purpose:

• Deletion after 14 months
• Deletion after 26 months
• Deletion after 38 months
• Deletion after 50 months
• No automatic deletion

In addition, there is also the option that data will only be deleted if you no longer visit our website within the period selected by us. In this case, the storage period will be reset every time you visit our website again within the specified period of time.

When the specified period has expired, the data is deleted once a month. This storage period applies to your data that is linked to cookies, user recognition and advertising IDs (e.g. cookies from the DoubleClick domain). Report results are based on aggregated data and are stored independently of user data. Aggregated data is a fusion of individual data into a larger unit.

How can I delete my data or prevent data storage?

According to European Union data protection law, you have the right to obtain information about, update, delete or restrict your data. Use the browser add-on to disable Google Analytics JavaScript (ga.js, analytics.js, dc.js) to prevent Google Analytics from using your data. You can download the browser add-on at https://tools.google.com/dlpage/gaoptout?hl=de Download and install. Please note that this add-on only deactivates data collection by Google Analytics.

If you generally want to deactivate, delete or manage cookies, you will find the corresponding links to the respective instructions for the most popular browsers under the “Cookies” section.

legal basis

The use of Google Analytics requires your consent, which we have obtained with our cookie popup. According to Art. 6 para. 1 lit. a GDPR (consent), this consent is the legal basis for the processing of personal data, as may occur when collected by web analytics tools.

In addition to consent, we have a legitimate interest in analyzing the behavior of website visitors and thus technically and economically improving our offering. With the help of Google Analytics, we can identify website errors, identify attacks and improve profitability. The legal basis for this is Art. 6 para. 1 lit. f DSGVO (legitimate interests). However, we only use Google Analytics if you have given your consent.

Google also processes data from you in the USA, among others. We would like to point out that, in the opinion of the European Court of Justice, there is currently no adequate level of protection for data transfer to the USA. This may involve various risks to the lawfulness and security of data processing.

As a basis for data processing by recipients based in third countries (outside the European Union, Iceland, Liechtenstein, Norway, i.e. in particular in the USA) or for data transfer there, Google uses so-called standard contractual clauses (= Article 46, paragraphs 2 and 3 GDPR). Standard Contractual Clauses (SCCs) are sample templates provided by the EU Commission and are intended to ensure that your data complies with European data protection standards even if they are transferred to third countries (such as the USA) and stored there. Through these clauses, Google undertakes to comply with the European level of data protection when processing your relevant data, even if the data is stored, processed and managed in the USA. These clauses are based on an implementing decision by the EU Commission. You can find the resolution and the corresponding standard contractual clauses here, among others: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de

The Google Ads Data Processing Terms, which refer to the standard contractual clauses, can be found at https://business.safety.google/intl/de/adsprocessorterms/.

We hope we were able to provide you with the most important information about data processing by Google Analytics. If you want to learn more about the tracking service, we recommend these two links: https://marketingplatform.google.com/about/analytics/terms/de/ and https://support.google.com/analytics/answer/6004245?hl=de.

Google Analytics reports on demographics and interests

We have turned on the advertising reporting features in Google Analytics. The reports on demographics and interests include information on age, gender, and interests. This allows us — without being able to assign this data to individuals — to get a better picture of our users. Learn more about advertising features at https://support.google.com/analytics/answer/3450482?hl=de_AT&utm_id=ad.

You can use your Google Account activities and information under “Advertising Settings” on https://adssettings.google.com/authenticated End via checkbox.

Google Analytics in consent mode

Depending on your consent, your personal data will be processed by Google Analytics in so-called consent mode (or “consent mode”). You can choose whether or not to accept Google Analytics cookies. This also allows you to choose which data Google Analytics may process about you. This collected data is mainly used to carry out measurements of user behavior on the website, to display targeted advertising and to provide us with web analysis reports. As a rule, you consent to data processing by Google via a cookie consent tool. If you do not consent to data processing, only aggregated data will be collected and processed. This means that data cannot be assigned to individual users and therefore no user profile is created by you. You can also just agree to the statistical measurement. No personal data is processed and therefore not used for advertising or advertising measurement results.

Google Analytics IP anonymization

We have implemented Google Analytics' IP address anonymization on this website. This feature was developed by Google so that this website can comply with applicable data protection regulations and recommendations from local data protection authorities when they prohibit storage of the full IP address. The anonymization or masking of the IP takes place as soon as the IP addresses arrive in the Google Analytics data collection network and before the data is stored or processed.

More information about IP anonymization can be found at https://support.google.com/analytics/answer/2763052?hl=de.

Social media introduction

Social media privacy policy summary

👥 Affected: Visitors to the website

🤝 Purpose: Presentation and optimization of our service performance, contact with visitors, interested parties, etc., advertising

📓 Processed data: Data such as telephone numbers, email addresses, contact details, user behavior data, information about your device and your IP address.

More details can be found in the respective social media tool used.

📅 Storage period: depends on the social media platforms used

⚖️ Legal bases: Art. 6 para. 1 lit. a DSGVO (consent), Art. 6 para. 1 lit. f DSGVO (legitimate interests)

What is social media?

In addition to our website, we are also active on various social media platforms. User data can be processed so that we can target users who are interested in us via social networks. In addition, elements of a social media platform can also be embedded directly into our website. This is the case, for example, when you click on a so-called social button on our website and are redirected directly to our social media presence. So-called social media or social media are websites and apps that enable registered members to produce content, share content openly or in specific groups, and connect with other members.

Why do we use social media?

For years, social media platforms have been the place where people communicate and get in touch online. With our social media accounts, we can bring our products and services closer to interested parties. The social media elements integrated on our website help you to switch to our social media content quickly and without complications.

The data that is stored and processed through your use of a social media channel is primarily intended to be able to carry out web analyses. The aim of these analyses is to be able to develop more accurate and personal marketing and advertising strategies. Depending on your behavior on a social media platform, the evaluated data can be used to draw appropriate conclusions about your interests and create so-called user profiles. This also enables the platforms to present you with tailor-made advertisements. Cookies are usually set in your browser for this purpose, which store data about your usage behavior.

We generally assume that we remain responsible for data protection, even if we use the services of a social media platform. However, the European Court of Justice has ruled that, in certain cases, the operator of the social media platform may be jointly responsible with us within the meaning of Article 26 GDPR. If this is the case, we will point this out separately and work on the basis of a relevant agreement. The essence of the agreement is then set out below on the affected platform.

Please note that when using social media platforms or our built-in elements, data from you outside the European Union may also be processed, as many social media channels, such as Facebook or Twitter, are American companies. As a result, you may no longer be able to easily claim or enforce your rights with regard to your personal data.

Which data is processed?

Exactly which data is stored and processed depends on the respective provider of the social media platform. But it usually involves data such as telephone numbers, email addresses, data that you enter in a contact form, user data such as which buttons you click, who you like or follow, when you visited which pages, information about your device and your IP address. Most of this data is stored in cookies. Especially if you yourself have a profile on the social media channel you visited and are logged in, data can be linked to your profile.

All data collected via a social media platform is also stored on the providers' servers. This means that only the providers have access to the data and can provide you with the appropriate information or make changes.

If you want to know exactly which data is stored and processed by social media providers and how you can object to data processing, you should carefully read the company's respective privacy policy. Even if you have questions about data storage and data processing or would like to assert appropriate rights, we recommend that you contact the provider directly.

Duration of data processing

We will inform you about the duration of data processing below, provided that we have further information about this. For example, the social media platform Facebook stores data until it is no longer needed for its own purpose. However, customer data that is compared with your own user data will be deleted within just two days. In general, we only process personal data for as long as is absolutely necessary to provide our services and products. If required by law, such as in the case of accounting, this storage period may also be exceeded.

Right to object

You also have the right and option to withdraw your consent to the use of cookies or third parties such as embedded social media elements at any time. This works either via our cookie management tool or via other opt-out features. For example, you can also prevent data collection through cookies by managing, deactivating or deleting cookies in your browser.

Since social media tools may use cookies, we also recommend our general privacy policy about cookies. To find out exactly which data you store and process, you should read the privacy statements of the respective tools.

legal basis

If you have agreed that your data can be processed and stored through integrated social media elements, this consent is considered the legal basis for data processing (Art. 6 para. 1 lit. a GDPR). In principle, if you have given your consent, your data will also be stored and processed on the basis of our legitimate interest (Art. 6 para. 1 lit. f DSGVO) in fast and good communication with you or other customers and business partners. However, we only use the tools if you have given your consent. Most social media platforms also set cookies in your browser to store data. We therefore recommend that you read our privacy policy on cookies carefully and view the privacy policy or cookie policy of the respective service provider.

Information on specific social media platforms — if available — can be found in the following sections.

Content Delivery Networks Introduction

Content Delivery Networks Privacy Statement Summary

👥 Affected: Visitors to the website

🤝 Purpose: Optimizing our service performance (to make the website load faster)

📓 Processed data: Data such as your IP address

More details can be found below and in the individual data protection texts.

📅 Storage period: In most cases, the data is stored until it is no longer needed to perform the service

⚖️ Legal bases: Art. 6 para. 1 lit. a DSGVO (consent), Art. 6 para. 1 lit. f DSGVO (legitimate interests)

What is a content delivery network?

We use a so-called content delivery network on our website. Most often, such a network is just called a CDN. A CDN helps us load our website quickly and easily, regardless of your location. Your personal data is also stored, managed and processed on the servers of the CDN provider used. In the following, we will go into more detail about the service and its data processing. Detailed information about the handling of your data can be found in the provider's respective privacy policy.

Each content delivery network (CDN) is a network of regionally distributed servers that are all connected to each other via the Internet. Through this network, content from websites (especially very large files) can be delivered quickly and smoothly even during heavy load peaks. To do this, the CDN creates a copy of our website on your servers. Since these servers are spread all over the world, the website can be delivered quickly. The CDN therefore significantly shortens data transmission to your browser.

Why do we use a content delivery network for our website?

A fast-loading website is part of our service. We know, of course, how annoying it is when a website loads at a snail's pace. In most cases, you even lose patience and search for the distance before the website is fully loaded. We want to avoid that, of course. That is why a fast-loading website is part of our website offering as a matter of course. With a content delivery network, our website loads significantly faster in your browser. Using the CDN is particularly helpful if you are abroad because the website is delivered from a server near you.

Which data is processed?

When you request a website or the content of a website and it is cached in a CDN, the CDN forwards the request to the server closest to you and that server delivers the content. Content delivery networks are built in such a way that JavaScript libraries can be downloaded and hosted on npm and Github servers. Alternatively, WordPress plugins can also be loaded with most CDNs if they are on WordPress.org be hosted. Your browser can send personal data to the content delivery network we use. This includes data such as IP address, browser type, browser version, which website is loaded, or the time and date of the page visit. This data is collected and stored by the CDN. Whether cookies are used to store data depends on the network used. To do so, please read the data protection texts of the respective service.

Right to object

If you want to completely prevent this data transfer, you can use a JavaScript blocker (see for example https://noscript.net/) install on your PC. Of course, our website will then no longer be able to offer the usual service (such as fast loading speed).

legal basis

If you have agreed that a content delivery network may be used, the legal basis for the corresponding data processing is this consent. According to Art. 6 para. 1 lit. a GDPR (consent), this consent is the legal basis for the processing of personal data, as may occur when collected by a content delivery network.

We also have a legitimate interest in using a content delivery network to optimize our online service and make it more secure. The corresponding legal basis for this is Art. 6 para. 1 lit. f DSGVO (legitimate interests). However, we only use the tool if you have given your consent.

Information about specific content delivery networks — if available — is available in the following sections.

Cloudflare privacy policy

Cloudflare privacy policy summary

👥 Affected: Visitors to the website

🤝 Purpose: Optimizing our service performance (to make the website load faster)

📓 Processed data: Data such as IP address, contact and log information, security fingerprints, and performance data for websites

You can find more details about this below in this privacy policy.

📅 Storage time: Most data is stored for less than 24 hours

⚖️ Legal bases: Art. 6 para. 1 lit. a DSGVO (consent), Art. 6 para. 1 lit. f DSGVO (legitimate interests)

What is Cloudflare?

On this website, we use Cloudflare from Cloudflare, Inc. (101 Townsend St., San Francisco, CA 94107, USA) to make our website faster and more secure. Cloudflare uses cookies and processes user data. Cloudflare, Inc. is an American company that offers a content delivery network and various security services. These services are located between the user and our hosting provider. We will try to explain in more detail below what all this means.

A content delivery network (CDN), as provided by Cloudflare, is nothing more than a network of connected servers. Cloudflare has such servers all over the world to bring websites to your screen faster. Simply put, Cloudflare creates copies of our website and places them on their own servers. When you visit our website now, a load distribution system ensures that most of our website is delivered by the server that can display our website to you the fastest. The route of data transmission to your browser is significantly shortened by a CDN. This means that Cloudflare delivers the content of our website to you not only from our hosting server, but from servers from all over the world. The use of Cloudflare is particularly helpful for users from abroad, as the page can be delivered from a nearby server. In addition to delivering websites quickly, Cloudflare also offers various security services, such as DDoS protection or the web application firewall.

Why do we use Cloudflare on our website?

Of course, we want to offer you the best possible service with our website. Cloudflare helps us make our website faster and more secure. Cloudflare offers us both web optimizations and security services, such as DDoS protection and web firewall. This also includes a Reverse proxy and the content distribution network (CDN). Cloudflare blocks threats and limits abusive bots and crawlers that waste our bandwidth and server resources. By saving our website on local data centers and blocking spam software, Cloudflare allows us to reduce our bandwidth usage by around 60%. Delivering content from a data center near you and some web optimizations carried out there reduces the average load time of a website by around half. According to Cloudflare, the “I'm Under Attack Mode” setting can mitigate further attacks by displaying a JavaScript math task that you must solve before a user can access a website. Overall, this makes our website significantly more powerful and less susceptible to spam or other attacks.

What data does Cloudflare process?

Cloudflare generally only forwards data that is controlled by website operators. The content is therefore not determined by Cloudflare, but always by the website operator himself. Cloudflare may also collect certain information about the use of our website and process data that is sent by us or for which Cloudflare has received appropriate instructions. In most cases, Cloudflare receives data such as IP address, contact and log information, security fingerprints, and performance data for websites. Log data helps Cloudflare identify new threats, for example. In this way, Cloudflare can guarantee a high level of security protection for our website. Cloudflare processes this data as part of the services in compliance with applicable laws. Of course, this also includes the General Data Protection Regulation (GDPR). Cloudflare also works with third-party providers. They may only process personal data under the direction of Cloudflare and in accordance with privacy policies and other confidentiality and security measures. Cloudflare does not share any personal data without our explicit consent.

How long and where is the data stored?

Cloudflare stores your information primarily in the USA and the European Economic Area. Cloudflare can transfer and access the information described above from around the world. In general, Cloudflare stores user-level data for Free, Pro, and Business domains for less than 24 hours. For enterprise domains that have activated Cloudflare Logs (formerly Enterprise LogShare or ELS), the data can be stored for up to 7 days. However, if IP addresses trigger security warnings on Cloudflare, there may be exceptions to the storage period listed above.

How can I delete my data or prevent data storage?

Cloudflare only keeps data logs for as long as necessary and this data is also deleted within 24 hours in most cases. Cloudflare also does not store any personal data, such as your IP address. However, there is information that Cloudflare stores indefinitely as part of its permanent logs in order to improve the overall performance of Cloudflare Resolver and identify any security risks. Exactly which permanent logs are saved can be found at https://www.cloudflare.com/application/privacypolicy/ Read up. All data that Cloudflare collects (temporarily or permanently) is cleaned of all personal data. All permanent logs are also anonymized by Cloudflare.

Cloudflare states in their privacy policy that they are not responsible for the content they receive. For example, if you ask Cloudflare whether they can update or delete your content, Cloudflare generally refers to us as the website operator. You can also completely prevent Cloudflare from collecting and processing your data by deactivating the execution of script code in your browser or by including a script blocker in your browser.

legal basis

If you have agreed that Cloudflare may be used, the legal basis for the corresponding data processing is this consent. According to Art. 6 para. 1 lit. a GDPR (consent), this consent is the legal basis for the processing of personal data, as may occur when Cloudflare collects it.

We also have a legitimate interest in using Cloudflare to optimize our online service and make it more secure. The corresponding legal basis for this is Art. 6 para. 1 lit. f DSGVO (legitimate interests). However, we only use Cloudflare if you have given your consent.

Cloudflare also processes data in the USA, among others. We would like to point out that, in the opinion of the European Court of Justice, there is currently no adequate level of protection for data transfer to the USA. This may involve various risks to the lawfulness and security of data processing.

Cloudflare uses standard contractual clauses approved by the EU Commission (= Article 46, Paragraph 2 and 3 GDPR) as the basis for data processing by recipients based in third countries (outside the European Union, Iceland, Liechtenstein, Norway, i.e. in particular in the USA). These clauses oblige Cloudflare to comply with the EU level of data protection when processing relevant data outside the EU. These clauses are based on an implementing decision by the EU Commission. You can find the resolution and clauses here, among others: https://germany.representation.ec.europa.eu/index_de.

You can find more information about data protection at Cloudflare at https://www.cloudflare.com/de-de/privacypolicy/

Cookie Consent Management Platform Introduction

Cookie Consent Management Platform Summary

👥 Affected: Website visitors

🤝 Purpose: Obtaining and managing consent to certain cookies and therefore the use of certain tools

📓 Processed data: Data to manage the cookie settings set, such as IP address, time of consent, type of consent, individual consents. You can find more details about this with the tool you are using.

📅 Storage period: Depends on the tool used, you have to be prepared for periods of several years

⚖️ Legal bases: Art. 6 para. 1 lit. a DSGVO (consent), Art. 6 para. 1 lit. f DSGVO (legitimate interests)

What is a cookie consent management platform?

We use Consent Management Platform (CMP) software on our website, which makes it easier for us and you to handle the scripts and cookies used correctly and securely. The software automatically creates a cookie pop-up, scans and controls all scripts and cookies, provides you with the cookie consent required under data protection law and helps us and you to keep track of all cookies. Most cookie consent management tools identify and categorize all existing cookies. As a website visitor, you then decide for yourself whether and which scripts and cookies you allow or do not allow. The following graph shows the relationship between browser, web server, and CMP.

Why do we use a cookie management tool?

Our goal is to offer you the best possible transparency in the area of data protection. We are also legally obliged to do so. We want to provide you with as much information as possible about all tools and cookies that can store and process your data. It is also your right to decide for yourself which cookies you accept and which you do not. In order to grant you this right, we first need to know exactly which cookies have ended up on our website in the first place. Thanks to a cookie management tool, which regularly scans the website for all existing cookies, we know about all cookies and can provide you with information about them in accordance with GDPR. You can then accept or reject cookies via the consent system.

Which data is processed?

As part of our cookie management tool, you can manage each individual cookie yourself and have full control over the storage and processing of your data. Your declaration of consent is stored so that we do not have to ask you every time you visit our website and we can also prove your consent, if required by law. This is stored either in an opt-in cookie or on a server. Depending on the provider of the cookie management tool, the storage period of your cookie consent varies. This data (such as pseudonymous user ID, time of consent, detailed information on cookie categories or tools, browser, device information) is usually stored for up to two years.

Duration of data processing

We will inform you about the duration of data processing below, provided that we have further information about this. In general, we only process personal data for as long as is absolutely necessary to provide our services and products. Data stored in cookies is stored for different lengths of time. Some cookies are deleted after you leave the website, others may be stored in your browser for a few years. The exact duration of data processing depends on the tool used; in most cases, you should expect a storage period of several years. In the respective data protection declarations of the individual providers, you will usually find detailed information about the duration of data processing.

Right to object

You also have the right and option to withdraw your consent to the use of cookies at any time. This works either via our cookie management tool or via other opt-out features. For example, you can also prevent data collection through cookies by managing, deactivating or deleting cookies in your browser.

Information about specific cookie management tools — if available — can be found in the following sections.

legal basis

If you accept cookies, these cookies will process and store your personal data. If we are allowed to use cookies with your consent (Article 6 (1) (a) GDPR), this consent is also the legal basis for using cookies or processing your data. Cookie consent management platform software is used to be able to manage your consent to cookies and to enable you to give your consent. The use of this software enables us to efficiently operate the website in a legally compliant manner, which represents a legitimate interest (Article 6 (1) (f) GDPR).

Survey and survey systems Introduction

Survey and Survey Systems Privacy Policy Summary

👥 Affected: Visitors to the website

🤝 Purpose: Evaluation of surveys on the website

📓 Processed data: contact details, device data, access time and time, IP addresses. You can find more details about this in the respective survey and survey system.

📅 Storage period: depends on the tool used

⚖️ Legal bases: Art. 6 para. 1 lit. a DSGVO (consent), Art. 6 para. 1 lit. f DSGVO (legitimate interests)

What are survey and survey systems?

We are also happy to conduct various surveys and surveys via our website. These are always evaluated anonymously. A survey or survey system is a tool integrated into our website that asks you questions (such as about our products or services), which you can answer if you participate. Your answers are always evaluated anonymously. However, with your consent to data processing, personal data may also be stored and processed.

Why do we use survey and survey systems?

We want to offer you the best products and services in our industry. With surveys, we get perfect feedback from you and find out what you expect from us and our services. Based on these anonymous evaluations, we can optimally adapt our products and services to your wishes and ideas. Furthermore, the information also helps us to target our advertising and marketing measures in a more targeted manner to people who are really interested in our offer.

Which data is processed?

Personal data is only processed if it is necessary for technical implementation or if you have agreed that personal data may be processed. Your IP address, for example, is then saved so that, for example, the survey can be displayed in your browser. Cookies may also be used so that you can easily continue your survey after a later date.

If you have consented to data processing, contact data such as your e-mail address or telephone number may also be processed in addition to your IP address. Data that you enter into an online form, for example, is also stored and processed. Some providers also save information about the websites you have visited (on our website), when you started and completed the survey, and various technical information about your computer.

How long is data stored?

How long the data is processed and stored depends primarily on the tools we use. You can find out more about the data processing of the individual tools below. The providers' privacy policies usually state exactly which data is stored and processed and for how long. In principle, personal data is only processed for as long as is necessary to provide our services. When data is stored in cookies, the storage period varies significantly. The data can be deleted immediately after leaving a website, but it can also be stored for several years. You should therefore look at each individual cookie in detail if you want to know more about data storage. In most cases, you will also find informative information about the individual cookies in the privacy policies of the individual providers.

Right to object

You also have the right and option to withdraw your consent to the use of cookies or embedded survey systems at any time. This works either via our cookie management tool or via other opt-out features. For example, you can also prevent data collection through cookies by managing, deactivating or deleting cookies in your browser.

Since survey systems may use cookies, we also recommend our general privacy policy about cookies. To find out exactly what data you store and process, you should read the privacy statements of the respective tools.

legal basis

The use of survey systems requires your consent, which we have obtained with our cookie popup. According to Art. 6 para. 1 lit. a GDPR (consent), this consent is the legal basis for the processing of personal data, as may occur when collected by survey and survey systems.

In addition to consent, we have a legitimate interest in carrying out surveys on our topic. The legal basis for this is Article 6 (1) (f) GDPR (legitimate interests). However, we only use the tools if you have given your consent.

Since survey systems use cookies, we also recommend that you read our general privacy policy on cookies. To find out exactly which data you store and process, you should read the privacy statements of the respective tools.

Information about the individual survey systems — if available — is available in the following sections.

Explanation of terms used

We always strive to make our privacy policy as clear and understandable as possible. However, this is not always easy, especially when it comes to technical and legal topics. It often makes sense to use legal terms (such as personal data) or certain technical terms (such as cookies, IP address). However, we do not want to use them without explanation. Below is an alphabetical list of important terms used, which we may not have addressed sufficiently in the previous privacy policy. If these terms have been taken from the GDPR and they are definitions, we will also quote the GDPR texts here and, if necessary, add our own explanations.

supervisory authority

Definition under Article 4 of the GDPR

For the purposes of this Regulation, the term means:

“supervisory authority” means an independent public authority established by a Member State in accordance with Article 51;

Explanation: “Supervisory authorities” are always state, independent institutions that are also authorized to issue instructions in certain cases. They are used to carry out so-called state supervision and are located in ministries, special departments or other authorities. For data protection in Austria, there is an Austrian Data protection authority, for Germany, there is a separate data protection authority for each federal state.

Contract processor

Definition under Article 4 of the GDPR

For the purposes of this Regulation, the term means:

“processor” means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the person responsible;

Explanation: As a company and website owner, we are responsible for all data that we process from you. In addition to those responsible, there may also be so-called contract processors. This includes every company or person that processes personal data on our behalf. Contract processors can therefore include, in addition to service providers such as tax consultants, hosting or cloud providers, payment or newsletter providers or large companies such as Google or Microsoft.

Supervisory authority concerned

Definition under Article 4 of the GDPR

For the purposes of this Regulation, the term means:

“supervisory authority concerned” means a supervisory authority that is affected by the processing of personal data because

a)

the controller or processor is established in the territory of the Member State of that supervisory authority,

b)

this processing has or may have significant effects on data subjects residing in the Member State of that supervisory authority, or

c)

a complaint has been lodged with that supervisory authority;

Explanation: In Germany, each federal state has its own supervisory authority for data protection. If your company headquarters (head office) is therefore in Germany, the respective supervisory authority of the federal state is generally your point of contact. In Austria, there is only one for the entire country Data Protection Supervisory Authority.

consent

Definition under Article 4 of the GDPR

For the purposes of this Regulation, the term means:

“consent” of the data subject means any voluntary, informed and unambiguous statement of intent in the specific case, in the form of a statement or other clear affirmative act by which the data subject indicates that he or she agrees to the processing of personal data concerning him or her;

Explanation: Websites generally provide such consent via a cookie consent tool. I'm sure you know that. Whenever you visit a website for the first time, you will usually be asked via a banner whether you agree or consent to data processing. In most cases, you can also make individual settings and thus decide for yourself which data processing you allow and which you do not. If you do not consent, no personal data about you may be processed. In principle, consent can of course also be given in writing, i.e. not via a tool.

personal data

Definition under Article 4 of the GDPR

For the purposes of this Regulation, the term means:

“personal data”

any information relating to an identified or identifiable natural person (hereinafter “data subject”); identifiable is a natural person who, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more specific characteristics, expresses the physical, physiological, genetic, psychological, economic, cultural or social identity of that natural person, can be identified;

Explanation: Personal data is therefore all data that can identify you as a person. This is usually data such as:

• name
• address
• email address
• postal address
• phone number
• birthdate
• Identification numbers such as social security number, tax identification number, identity card number or student ID number
• Bank details such as account number, credit information, account balances, etc.

According to the European Court of Justice (ECJ), your IP address is also considered personal data. Based on your IP address, IT experts can determine at least the approximate location of your device and then you as the connection owner. Therefore, saving an IP address also requires a legal basis within the meaning of the GDPR. There are also so-called “special categories” of personal data, which are also particularly worthy of protection. These include:

• racial and ethnic origin
• political opinions
• religious or ideological convictions
• trade union membership
• genetic data, such as data taken from blood or saliva samples
• biometric data (this is information about psychological, physical or behavioral characteristics that can identify a person) .health data
• Data on sexual orientation or sex life

profiling

Definition under Article 4 of the GDPR

For the purposes of this Regulation, the term means:

“profiling” means any type of automated processing of personal data that consists of using such personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects relating to that natural person's performance at work, economic situation, health, personal preferences, interests, reliability, behavior, whereabouts or changes of location;

Explanation: Profiling collects various pieces of information about a person in order to learn more about that person. In the web sector, profiling is often used for advertising purposes or even for credit checks. For example, web or advertising analysis programs collect data about your behavior and interests on a website. This results in a special user profile, which can be used to display advertising specifically to a target group.

person responsible

Definition under Article 4 of the GDPR

For the purposes of this Regulation, the term means:

“controller” means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of processing personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law;

Explanation: In our case, we are responsible for processing your personal data and are therefore the “controller.” When we share collected data with other service providers for processing, these are “contract processors.” For this, an “Order Processing Agreement (AVV)” must be signed.

workmanship

Definition under Article 4 of the GDPR

For the purposes of this Regulation, the term means:

“Processing”

any process or series of operations carried out with or without the aid of automated processes relating to personal data, such as collecting, collecting, organizing, storing, adapting or modifying, reading, querying, using, disclosing through transmission, dissemination or any other form of provision, reconciliation or linking, restriction, deletion or destruction;

Note: When we talk about processing in our privacy policy, we mean any type of data processing. As mentioned in the original GDPR statement above, this includes not only the collection but also the storage and processing of data.

Conclusion

Congratulations! If you're reading these lines, you've really “fought” your way through our entire privacy policy, or at least scrolled all the way to here. As you can see from the scope of our privacy policy, we take the protection of your personal data anything but lightly.

It is important to us to inform you in good faith about the processing of personal data. However, we not only want to tell you which data is being processed, but also to explain the reasons for using various software programs. Privacy policies usually sound very technical and legal. However, since most of you are not web developers or lawyers, we also wanted to take a different linguistic approach and explain the facts in simple and clear language. Of course, this is not always possible due to the subject matter. The most important terms are therefore explained in more detail at the end of the privacy policy.

If you have any questions about data protection on our website, please do not hesitate to contact us or the responsible body. We wish you a great time and hope to see you again on our website soon.

All texts are protected by copyright.

Source: Created with Privacy generator by AdSimple