Introduction and Overview
We have written this privacy policy (version 30.04.2024-122781062) to explain to you, in accordance with the requirements of the General Data Protection Regulation (EU) 2016/679 and applicable national laws, which personal data (hereinafter referred to as data) we as controllers – and the processors commissioned by us (e.g. providers) – process, will process in the future, and what lawful options you have. The terms used are to be understood as gender-neutral.
In short: We inform you comprehensively about the data we process about you.
Privacy policies usually sound very technical and use legal terminology. However, this privacy policy is intended to describe the most important things to you as simply and transparently as possible. Where it serves transparency, technical terms are explained in a reader-friendly way, links to further information are provided, and graphics put into use. We thus inform you in clear and simple language that we only process personal data in the course of our business activities if there is a corresponding legal basis. This is certainly not possible if you provide explanations that are as brief, unclear, and legally-technical as possible, as is often standard on the internet when it comes to data protection. I hope you find the following explanations interesting and informative, and perhaps there is some information here that you did not yet know.
If you still have questions, we kindly ask you to contact the responsible office mentioned below or in the legal notice, to follow the available links, and to view further information on third-party sites. Of course, you will also find our contact details in the legal notice.
Scope of application
This privacy policy applies to all personal data processed by us in the company and to all personal data processed by companies commissioned by us (processors). By personal data, we mean information within the meaning of Art. 4 No. 1 GDPR, such as the name, email address, and postal address of a person. The processing of personal data ensures that we can offer and bill for our services and products, whether online or offline. The scope of this privacy policy includes:
- all online presences (websites, online shops) that we operate
- social media presences and email communication
- mobile apps for smartphones and other devices
In short: The privacy policy applies to all areas in which personal data is processed in the company via the aforementioned channels in a structured manner. Should we enter into legal relationships with you outside of these channels, we will inform you separately if necessary.
Legal bases
In the following privacy policy, we provide you with transparent information about the legal principles and regulations, i.e., the legal bases of the General Data Protection Regulation, which enable us to process personal data.
With regard to EU law, we refer to REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016. Of course, you can read this EU General Data Protection Regulation online on EUR-Lex, the access to EU law, at https://eur-lex.europa.eu/legal-content/DE/ALL/?uri=celex%3A32016R0679 read.
We only process your data if at least one of the following conditions applies:
- Consent (Article 6 paragraph 1 lit. a GDPR): You have given us your consent to process data for a specific purpose. An example would be storing the data you entered in a contact form.
- Contract (Article 6 paragraph 1 lit. b GDPR): In order to fulfill a contract or pre-contractual obligations with you, we process your data. For example, if we conclude a purchase contract with you, we need personal information from you in advance.
- Legal obligation (Article 6 paragraph 1 lit. c GDPR): If we are subject to a legal obligation, we process your data. For example, we are legally required to retain invoices for accounting purposes. These usually contain personal data.
- Legitimate interests (Article 6 paragraph 1 lit. f GDPR): In the case of legitimate interests that do not restrict your fundamental rights, we reserve the right to process personal data. For example, we need to process certain data in order to operate our website securely and economically efficiently. This processing is therefore a legitimate interest.
Other conditions such as the perception of recordings in the public interest and the exercise of official authority as well as the protection of vital interests generally do not apply to us. If such a legal basis should nevertheless be relevant, it will be indicated at the appropriate place.
In addition to the EU regulation, national laws also apply:
- In Austria this is the Federal Act on the Protection of Natural Persons with regard to the Processing of Personal Data (Data Protection Act), abbreviated DSG.
- In Germany applies the Federal Data Protection Act, abbreviated BDSG.
If additional regional or national laws apply, we will inform you about them in the following sections.
Contact details of the responsible party
If you have any questions about data protection or the processing of personal data, you will find the contact details of the responsible person or office below:
Email: office@ritec.at
Phone: 07752/82249
Imprint: https://www.ritec.at/impressum
Retention period
The general criterion for us is that we only store personal data for as long as is absolutely necessary to provide our services and products. This means that we delete personal data as soon as the reason for processing the data no longer exists. In some cases, we are legally obliged to store certain data even after the original purpose has ceased to exist, for example for accounting purposes.
If you wish to have your data deleted or revoke your consent to data processing, the data will be deleted as quickly as possible and as long as there is no obligation to retain it.
We will inform you about the specific duration of the respective data processing further below, provided we have additional information on this.
Rights according to the General Data Protection Regulation
According to Articles 13 and 14 of the GDPR, we inform you about the following rights to which you are entitled, so that data processing is fair and transparent:
- According to Article 15 of the GDPR, you have the right to know whether we process data about you. If this is the case, you have the right to receive a copy of the data and to learn the following information:
- for what purpose we carry out the processing;
- the categories, i.e., the types of data being processed;
- who receives this data and, if the data is transferred to third countries, how security can be guaranteed;
- how long the data is stored;
- the existence of the right to rectification, erasure or restriction of processing and the right to object to processing;
- that you can file a complaint with a supervisory authority (links to these authorities can be found below);
- the origin of the data if we did not collect it from you;
- whether profiling is carried out, i.e., whether data is automatically evaluated to create a personal profile of you.
- According to Article 16 GDPR, you have the right to rectification of data, which means that we must correct data if you find errors.
- According to Article 17 GDPR, you have the right to erasure („right to be forgotten“), which specifically means that you may request the deletion of your data.
- According to Article 18 GDPR, you have the right to restriction of processing, which means that we may only store the data but not use it further.
- According to Article 20 GDPR, you have the right to data portability, which means that we must provide you with your data in a common format upon request.
- According to Article 21 GDPR, you have the right to object, which, once enforced, results in a change in processing.
- If the processing of your data is based on Article 6(1)(e) (public interest, exercise of official authority) or Article 6(1)(f) (legitimate interest), you may object to the processing. We will then check as soon as possible whether we can legally comply with your objection.
- If data is used for direct marketing purposes, you can object to this type of data processing at any time. We may then no longer use your data for direct marketing.
- If data is used for profiling, you can object to this type of data processing at any time. We may then no longer use your data for profiling.
- According to Article 22 GDPR, you may have the right not to be subject to a decision based solely on automated processing (such as profiling).
- According to Article 77 GDPR, you have the right to lodge a complaint. This means you can complain to the data protection authority at any time if you believe that the processing of personal data violates the GDPR.
In short: You have rights – do not hesitate to contact the responsible office listed above!
If you believe that the processing of your data violates data protection law or your data protection rights have been infringed in any other way, you can lodge a complaint with the supervisory authority. For Austria, this is the data protection authority, whose website you can find at https://www.dsb.gv.at/ find. In Germany, there is a data protection officer for each federal state. For more information, you can contact the Federal Commissioner for Data Protection and Freedom of Information (BfDI) contact. For our company, the following local data protection authority is responsible:
Austria Data Protection Authority
Head: Dr. Matthias Schmidl
Address: Barichgasse 40-42, 1030 Vienna
Phone number: +43 1 52 152-0
Email address: dsb@dsb.gv.at
Website: https://www.dsb.gv.at/
Security of data processing
To protect personal data, we have implemented both technical and organizational measures. Where possible, we encrypt or pseudonymize personal data. This makes it as difficult as possible within our means for third parties to infer personal information from our data.
Art. 25 GDPR refers here to “data protection by design and by default,” meaning that both software (e.g., forms) and hardware (e.g., access to the server room) should always be considered with security in mind and appropriate measures should be taken. Below, we will, if necessary, address specific measures.
TLS encryption with https
TLS, encryption, and https sound very technical—and they are. We use HTTPS (Hypertext Transfer Protocol Secure stands for „secure hypertext transfer protocol“) to transmit data securely over the internet.
This means that the entire transmission of all data from your browser to our web server is secured—no one can “listen in.”.
With this, we have introduced an additional security layer and fulfill data protection by design (Article 25 paragraph 1 GDPR). By using TLS (Transport Layer Security), an encryption protocol for secure data transmission on the internet, we can ensure the protection of confidential data.
You can recognize the use of this secured data transmission by the small lock symbol at the top left in the browser, to the left of the internet address (e.g., examplepage.de) and the use of the https scheme (instead of http) as part of our internet address.
If you want to know more about encryption, we recommend searching Google for “Hypertext Transfer Protocol Secure wiki” to find good links to further information.
Communication
| Communication Summary 👥 Data subjects: All those who communicate with us by phone, email, or online form 📓 Processed data: e.g. phone number, name, email address, entered form data. You can find more details in the respective type of contact used 🤝 Purpose: Handling communication with customers, business partners, etc. 📅 Storage period: Duration of the business case and legal requirements ⚖️ Legal basis: Art. 6 para. 1 lit. a GDPR (consent), Art. 6 para. 1 lit. b GDPR (contract), Art. 6 para. 1 lit. f GDPR (legitimate interests) |
If you contact us and communicate via phone, email, or online form, personal data may be processed.
The data is processed for handling and processing your inquiry and the related business transaction. The data is stored for as long as necessary or as required by law.
Data subjects
All those who seek contact with us via the communication channels we provide are affected by the aforementioned processes.
Phone
If you call us, the call data is pseudonymized and stored on the respective device and by the telecommunications provider used. In addition, data such as name and phone number may subsequently be sent by email and stored for the purpose of responding to the inquiry. The data will be deleted as soon as the business case has been completed and legal requirements allow.
If you communicate with us via email, data may be stored on the respective device (computer, laptop, smartphone, etc.) and data will also be stored on the email server. The data will be deleted as soon as the business transaction has been completed and legal requirements allow it.
Online forms
If you communicate with us via online form, data will be stored on our web server and, if necessary, forwarded to one of our email addresses. The data will be deleted as soon as the business transaction has been completed and legal requirements allow it.
Legal bases
The processing of the data is based on the following legal grounds:
- Art. 6 para. 1 lit. a GDPR (Consent): You give us consent to store your data and to use it further for purposes related to the business transaction;
- Art. 6 para. 1 lit. b GDPR (Contract): It is necessary for the fulfillment of a contract with you or a processor, such as the telephone provider, or we need to process the data for pre-contractual activities, such as preparing an offer;
- Art. 6 para. 1 lit. f GDPR (Legitimate Interests): We want to conduct customer inquiries and business communication in a professional manner. For this, certain technical facilities such as email programs, exchange servers, and mobile network operators are necessary to enable efficient communication.
Cookies
| Cookies summary 👥 Data subjects: Visitors to the website 🤝 Purpose: depends on the respective cookie. You can find more details below or from the manufacturer of the software that sets the cookie. 📓 Processed data: Depends on the cookie used. You can find more details below or from the manufacturer of the software that sets the cookie. 📅 Storage duration: depends on the respective cookie, can vary from hours to years ⚖️ Legal basis: Art. 6 para. 1 lit. a GDPR (consent), Art. 6 para. 1 lit. f GDPR (legitimate interests) |
What are cookies?
Our website uses HTTP cookies to store user-specific data.
Below we explain what cookies are and why they are used, so you can better understand the following privacy policy.
Whenever you surf the internet, you use a browser. Well-known browsers include Chrome, Safari, Firefox, Internet Explorer, and Microsoft Edge. Most websites store small text files in your browser. These files are called cookies.
One thing is undeniable: cookies are really useful little helpers. Almost all websites use cookies. More precisely, they are HTTP cookies, as there are also other cookies for other areas of application. HTTP cookies are small files that are stored on your computer by our website. These cookie files are automatically placed in the cookie folder, basically the “brain” of your browser. A cookie consists of a name and a value. When defining a cookie, one or more attributes must also be specified.
Cookies store certain user data from you, such as language or personal site settings. When you visit our site again, your browser transmits the „user-related“ information back to our site. Thanks to cookies, our website knows who you are and offers you the settings you are used to. In some browsers, each cookie has its own file, in others, such as Firefox, all cookies are stored in a single file.
The following graphic shows a possible interaction between a web browser such as Chrome and the web server. The web browser requests a website and receives a cookie from the server, which the browser uses again as soon as another page is requested.
There are both first-party cookies and third-party cookies. First-party cookies are created directly by our site, third-party cookies are created by partner websites (e.g. Google Analytics). Each cookie must be evaluated individually, as each cookie stores different data. The expiration time of a cookie also varies from a few minutes to several years. Cookies are not software programs and do not contain viruses, trojans, or other „malware.“ Cookies also cannot access information on your PC.
For example, cookie data can look like this:
Name: _ga
Value: GA1.2.1326744211.152122781062-9
Purpose: Distinguishing website visitors
Expiration date: after 2 years
A browser should be able to support at least these minimum sizes:
- At least 4096 bytes per cookie
- At least 50 cookies per domain
- At least 3000 cookies in total
What types of cookies are there?
The question of which cookies we specifically use depends on the services used and is clarified in the following sections of the privacy policy. At this point, we would like to briefly discuss the different types of HTTP cookies.
There are 4 types of cookies:
Essential cookies
These cookies are necessary to ensure basic functions of the website. For example, these cookies are needed when a user adds a product to the shopping cart, then continues browsing other pages, and only later proceeds to checkout. These cookies prevent the shopping cart from being deleted, even if the user closes their browser window.
Functional cookies
These cookies collect information about user behavior and whether the user receives any error messages. In addition, these cookies are used to measure the loading time and the behavior of the website in different browsers.
Target-oriented cookies
These cookies ensure better user-friendliness. For example, entered locations, font sizes, or form data are saved.
Advertising cookies
These cookies are also called targeting cookies. They are used to deliver individually tailored advertising to the user. This can be very practical, but also very annoying.
Usually, when you visit a website for the first time, you are asked which of these types of cookies you want to allow. And of course, this decision is also stored in a cookie.
If you want to know more about cookies and are not afraid of technical documentation, we recommend https://datatracker.ietf.org/doc/html/rfc6265, the Request for Comments from the Internet Engineering Task Force (IETF) called “HTTP State Management Mechanism”.
Purpose of processing via cookies
The purpose ultimately depends on the respective cookie. You can find more details below or from the manufacturer of the software that sets the cookie.
Which data is processed?
Cookies are little helpers for many different tasks. Unfortunately, it is not possible to generalize which data is stored in cookies, but we will inform you about the processed or stored data as part of the following privacy policy.
Storage duration of cookies
The storage duration depends on the respective cookie and is specified further below. Some cookies are deleted after less than an hour, while others can remain stored on a computer for several years.
You also have control over the storage duration yourself. You can manually delete all cookies at any time via your browser (see also below “Right to object”). Furthermore, cookies based on consent will be deleted at the latest after you withdraw your consent, whereby the lawfulness of storage up to that point remains unaffected.
Right to object – how can I delete cookies?
You decide for yourself how and whether you want to use cookies. Regardless of which service or website the cookies come from, you always have the option to delete, deactivate, or only partially allow cookies. For example, you can block third-party cookies but allow all other cookies.
If you want to find out which cookies are stored in your browser, or if you want to change or delete cookie settings, you can find this in your browser settings:
Chrome: Delete, enable, and manage cookies in Chrome
Safari: Manage cookies and website data with Safari
Firefox: Delete cookies to remove data that websites have stored on your computer
Internet Explorer: Delete and manage cookies
Microsoft Edge: Delete and manage cookies
If you generally do not want cookies, you can set your browser to always inform you when a cookie is about to be set. This way, you can decide for each individual cookie whether you want to allow it or not. The procedure varies depending on the browser. The best way is to search for instructions on Google with the keyword “delete cookies Chrome” or “disable cookies Chrome” in the case of a Chrome browser.
Legal basis
Since 2009, there have been the so-called „cookie guidelines.“ These state that storing cookies requires Consent (Article 6 para. 1 lit. a GDPR) your consent. However, there are still very different responses to these guidelines within EU countries. In Austria, the implementation of this guideline took place in § 165 para. 3 of the Telecommunications Act (2021). In Germany, the cookie guidelines were not implemented as national law. Instead, the implementation of this guideline largely took place in § 15 para. 3 of the Telemedia Act (TMG).
For strictly necessary cookies, even if no consent is given, there are legitimate interests (Article 6(1)(f) GDPR), which in most cases are of an economic nature. We want to provide visitors to the website with a pleasant user experience, and certain cookies are often absolutely necessary for this.
If non-essential cookies are used, this only happens with your consent. The legal basis in this respect is Art. 6(1)(a) GDPR.
In the following sections, you will be informed in more detail about the use of cookies, provided that the software used employs cookies.
Web Hosting Introduction
| Web Hosting Summary 👥 Data subjects: Visitors to the website 🤝 Purpose: professional hosting of the website and securing its operation 📓 Data processed: IP address, time of website visit, browser used, and other data. You can find more details below or from the respective web hosting provider used. 📅 Storage period: depends on the respective provider, but usually 2 weeks ⚖️ Legal basis: Art. 6(1)(f) GDPR (Legitimate Interests) |
What is web hosting?
When you visit websites these days, certain information – including personal data – is automatically created and stored, including on this website. This data should be processed as sparingly as possible and only with justification. By website, we mean the entirety of all web pages on a domain, i.e., everything from the homepage to the very last subpage (like this one). By domain, we mean, for example, example.de or sampleexample.com.
If you want to view a website on a computer, tablet, or smartphone, you use a program called a web browser. You probably know some web browsers by name: Google Chrome, Microsoft Edge, Mozilla Firefox, and Apple Safari. We simply call them browsers or web browsers.
To display the website, the browser must connect to another computer where the website's code is stored: the web server. Operating a web server is a complicated and demanding task, which is why it is usually handled by professional providers. These offer web hosting and thus ensure reliable and error-free storage of website data. Quite a lot of technical terms, but please stay tuned, it gets even better!
When the browser on your computer (desktop, laptop, tablet, or smartphone) connects and during the transfer of data to and from the web server, personal data may be processed. On the one hand, your computer stores data, and on the other hand, the web server also needs to store data for a certain period to ensure proper operation.
A picture is worth a thousand words, so the following graphic illustrates the interaction between the browser, the internet, and the hosting provider.
Why do we process personal data?
The purposes of data processing are:
- Professional hosting of the website and securing its operation
- to maintain operational and IT security
- Anonymous analysis of access behavior to improve our services and, if necessary, for criminal prosecution or the enforcement of claims
Which data is processed?
Even while you are visiting our website right now, our web server, which is the computer on which this website is stored, usually automatically saves data such as
- the complete internet address (URL) of the accessed webpage
- browser and browser version (e.g. Chrome 87)
- the operating system used (e.g. Windows 10)
- the address (URL) of the previously visited page (referrer URL) (e.g. https://www.beispielquellsite.de/vondabinichgekommen/)
- the hostname and IP address of the device from which access is made (e.g. COMPUTERNAME and 194.23.43.121)
- date and time
- in files called web server log files
How long is data stored?
As a rule, the above-mentioned data is stored for two weeks and then automatically deleted. We do not pass on this data, but cannot rule out the possibility that these data may be viewed by authorities in the event of unlawful behavior.
In short: Your visit is logged by our provider (the company that runs our website on special computers (servers)), but we do not share your data without your consent!
Legal basis
The legality of processing personal data in the context of web hosting arises from Art. 6 para. 1 lit. f GDPR (protection of legitimate interests), as the use of professional hosting with a provider is necessary to present the company securely and user-friendly on the Internet and to be able to pursue attacks and claims arising from this if necessary.
There is usually a contract for order processing between us and the hosting provider in accordance with Art. 28 et seq. GDPR, which ensures compliance with data protection and guarantees data security.
Web Hosting Provider External Privacy Policy
Below you will find the contact details of our external hosting provider, where you can learn more about data processing in addition to the information above:
Cloudways Ltd., 52 Springvale, Pope Pius XII Street, Mosta MST2653, Malta
You can find out more about data processing at this provider in the Privacy Policy.
Website Builder Systems Introduction
| Website Builder Systems Privacy Policy Summary 👥 Data subjects: Visitors to the website 🤝 Purpose: Optimization of our service performance 📓 Processed data: Data such as technical usage information like browser activity, clickstream activities, session heatmaps as well as contact data, IP address, or your geographic location. You can find more details below in this privacy policy and in the provider's privacy policy. 📅 Storage duration: depends on the provider ⚖️ Legal bases: Art. 6 para. 1 lit. f GDPR (Legitimate Interests), Art. 6 para. 1 lit. a GDPR (Consent) |
What are website builder systems?
We use a website builder system for our website. Builder systems are special forms of content management systems (CMS). With a builder system, website operators can easily create a website without programming knowledge. In many cases, web hosts also offer builder systems. By using a builder system, personal data about you may also be collected, stored, and processed. In this privacy text, we provide you with general information about data processing by builder systems. More detailed information can be found in the provider's privacy policies.
Why do we use website builder systems for our website?
The biggest advantage of a builder system is its ease of use. We want to offer you a clear, simple, and well-structured website that we can operate and maintain ourselves—without external support. A builder system now offers many helpful functions that we can use even without programming knowledge. This allows us to design our web presence according to our wishes and offer you an informative and pleasant experience on our website.
What data is stored by a builder system?
The exact data that is stored naturally depends on the website builder system used. Each provider processes and collects different data from website visitors. However, as a rule, technical usage information such as operating system, browser, screen resolution, language and keyboard settings, hosting provider, and the date of your website visit is collected. Furthermore, tracking data (e.g., browser activity, clickstream activities, session heatmaps, etc.) may also be processed. In addition, personal data may also be collected and stored. This usually involves contact details such as email address, telephone number (if you have provided it), IP address, and geographic location data. You can find out exactly which data is stored in the provider's privacy policy.
How long and where is the data stored?
We inform you about the duration of data processing further below in connection with the website builder system used, provided we have further information on this. You can find detailed information about this in the provider's privacy policy. In general, we only process personal data for as long as is absolutely necessary to provide our services and products. It may be that the provider stores data about you at their own discretion, over which we have no influence.
Right to object
You always have the right to access, correct, and delete your personal data. If you have any questions, you can also contact the responsible parties of the website builder system used at any time. You can find contact details either in our privacy policy or on the website of the respective provider.
You can delete, deactivate, or manage cookies that providers use for their functions in your browser. Depending on which browser you use, this works in different ways. Please note, however, that not all functions may work as usual afterwards.
Legal basis
We have a legitimate interest in using a website builder system to optimize our online service and present it to you efficiently and in a user-friendly way. The corresponding legal basis for this is Art. 6 para. 1 lit. f GDPR (Legitimate Interests). Nevertheless, we only use the builder if you have given your consent.
Insofar as the processing of data is not absolutely necessary for the operation of the website, the data is only processed on the basis of your consent. This particularly concerns tracking activities. The legal basis in this respect is Art. 6 para. 1 lit. a GDPR.
With this privacy policy, we have provided you with the most important general information about data processing. If you would like more detailed information on this, you will find further information – if available – in the following section or in the provider's privacy policy.
Elementor Privacy Policy
We use the website builder system Elementor for our website. The service provider is the Israeli company Elementor Ltd., Rehov Tuval 40, 5252247 Ramat Gan, Israel.
Your data may be transferred to Israel. Israel is outside the scope of the GDPR. However, the European Commission has decided, based on Art. 45 para. 1 GDPR, that Israel offers a level of protection comparable to the standard of the GDPR. You can view the decision here: https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32011D0061
You can find out more about the data processed through the use of Elementor in the privacy policy at https://elementor.com/about/privacy/.
Web Analytics Introduction
| Web Analytics Privacy Policy Summary 👥 Data subjects: Visitors to the website 🤝 Purpose: Evaluation of visitor information to optimize the web offering. 📓 Processed data: Access statistics, which include data such as locations of accesses, device data, duration and time of access, navigation behavior, click behavior, and IP addresses. You can find more details in the respective web analytics tool used. 📅 Storage duration: depends on the web analytics tool used ⚖️ Legal bases: Art. 6 para. 1 lit. a GDPR (consent), Art. 6 para. 1 lit. f GDPR (legitimate interests) |
What is web analytics?
We use software on our website to analyze the behavior of website visitors, commonly referred to as web analytics or web analysis. In this process, data is collected, which is stored, managed, and processed by the respective analytics tool provider (also called tracking tool). With the help of this data, analyses of user behavior on our website are created and made available to us as website operators. In addition, most tools offer various testing options. For example, we can test which offers or content are most popular with our visitors. To do this, we show you two different offers for a limited period of time. After the test (so-called A/B test), we know which product or content our website visitors find more interesting. For such testing procedures, as well as for other analytics procedures, user profiles can also be created and the data can be stored in cookies.
Why do we use web analytics?
With our website, we have a clear goal in mind: we want to deliver the best web offering on the market for our industry. To achieve this goal, we want to offer the best and most interesting content on the one hand, and on the other hand, ensure that you feel completely comfortable on our website. With the help of web analytics tools, we can take a closer look at the behavior of our website visitors and then improve our web offering for you and us accordingly. For example, we can see how old our visitors are on average, where they come from, when our website is most visited, or which content or products are particularly popular. All this information helps us optimize the website and thus perfectly adapt it to your needs, interests, and wishes.
Which data is processed?
Exactly which data is stored depends, of course, on the analytics tools used. But as a rule, for example, it is stored which content you view on our website, which buttons or links you click on, when you access a page, which browser you use, with which device (PC, tablet, smartphone, etc.) you visit the website, or which computer system you use. If you have agreed that location data may also be collected, this can also be processed by the web analytics tool provider.
In addition, your IP address is also stored. According to the General Data Protection Regulation (GDPR), IP addresses are personal data. However, your IP address is usually stored in a pseudonymized form (i.e., in an unrecognizable and shortened form). For the purpose of testing, web analysis, and web optimization, no direct data such as your name, age, address, or email address is generally stored. All this data, if collected, is stored in a pseudonymized form. This way, you cannot be identified as a person.
The following example schematically shows how Google Analytics works as an example of client-based web tracking with JavaScript code.
How long the respective data is stored always depends on the provider. Some cookies store data only for a few minutes or until you leave the website again, while other cookies can store data for several years.
Duration of data processing
We inform you about the duration of data processing further below, provided we have further information on this. In general, we process personal data only as long as it is absolutely necessary for the provision of our services and products. If, as in the case of accounting, it is required by law, this storage period may also be exceeded.
Right to object
You also have the right and the opportunity at any time to revoke your consent to the use of cookies or third-party providers. This works either via our cookie management tool or via other opt-out functions. For example, you can also prevent data collection by cookies by managing, deactivating, or deleting cookies in your browser.
Legal basis
The use of web analytics requires your consent, which we have obtained with our cookie popup. According to Art. 6 para. 1 lit. a GDPR (Consent) this consent constitutes the legal basis for the processing of personal data, as may occur when collected by web analytics tools.
In addition to consent, we also have a legitimate interest in analyzing the behavior of website visitors in order to improve our offering technically and economically. With the help of web analytics, we can detect website errors, identify attacks, and improve profitability. The legal basis for this is Art. 6 para. 1 lit. f GDPR (Legitimate Interests). Nevertheless, we only use the tools if you have given your consent.
Since cookies are used in web analytics tools, we also recommend that you read our general privacy policy on cookies. To find out exactly what data about you is stored and processed, you should read the privacy policies of the respective tools.
Information about specific web analytics tools can be found—if available—in the following sections.
Matomo On-Premise Privacy Policy
| Matomo On-Premise Privacy Policy Summary 👥 Data subjects: Visitors to the website 🤝 Purpose: Evaluation of visitor information to optimize the web offering. 📓 Processed data: Data such as the number of website visitors, page views, dwell time, or search terms used. More details can be found below and in the privacy policy of Matomo On-Premise. 📅 Storage duration: In principle, we store the data for as long as required for business purposes. ⚖️ Legal bases: Art. 6 para. 1 lit. a GDPR (consent), Art. 6 para. 1 lit. f GDPR (legitimate interests) |
What is Matomo On-Premise?
We use the privacy-friendly analytics program Matomo On-Premise on our website. With the On-Premise version, Matomo is installed on our own server. This means we act as the operator of the software and any data we may collect from you is stored directly with us. Data processing thus remains entirely in our hands. The tool is developed by the New Zealand company InnoCraft Ltd, 7 Waterloo Quay PO625, 6140 Wellington, New Zealand.
Matomo On-Premise is a web analytics platform that takes privacy very seriously and still provides us as website operators with accurate statistics about your behavior on our website. A major difference from other analytics programs is the ability to store data on our own server. Matomo On-Premise also offers various options to anonymize the IP addresses of our website visitors and to deactivate cookies.
Why do we use Matomo On-Premise?
Many of the usual analytics tools collect vast amounts of personal data and may also share it with third parties. This means that control over your data becomes very difficult to maintain. Data protection is very important to us, which is why we have chosen Matomo On-Premise and thus a significantly more privacy-friendly alternative. However, we do not want to completely forgo web analytics. After all, with the help of statistics about website behavior, we can optimize our service and tailor it to your individual needs.
What data is stored by Matomo On-Premise?
In addition to personal data such as your IP address or information about yourself (e.g., name, address, date of birth) that you actively provide to us, information about your visitor behavior is mainly stored. This usually does not involve personal data, but rather information such as the number of website visitors, page views, dwell time, or search terms used. Furthermore, technical data such as browser type, operating system used, and screen resolution can also be stored. Matomo On-Premise can also collect information about which website you came to us from. The collected data is stored with us and is not shared with or sold to third parties.
How long and where is the data stored?
Matomo On-Premise is a self-hosted analytics platform, meaning we store all collected data directly on our own servers. Our server is located in Europe, so data is not processed in third countries, i.e., in countries outside the scope of the GDPR.
In principle, we store data for as long as required for business purposes. Unfortunately, we cannot provide exact retention periods at this point, as these depend heavily on our individual configurations. If you would like to learn more about our data retention periods and our configurations, please do not hesitate to contact us.
How can I delete my data or prevent data storage?
You have the right and the opportunity at any time to access your personal data and to object to its use and processing. You can also file a complaint at any time with a government supervisory authority or simply with us.
In your browser, you also have the option to manage, delete, or deactivate cookies individually. Please note, however, that deactivated or deleted cookies may have negative effects on the functions of our website. Depending on which browser you use, cookie management works a little differently. In the section „Cookies“ you will find the corresponding links to the instructions for the most popular browsers. If you would like to request data deletion, you are also welcome to contact us.
Legal basis
The use of Matomo On-Premise requires your consent, which we have obtained with our consent management tool (popup). According to Art. 6 para. 1 lit. a GDPR (consent), this consent constitutes the legal basis for the processing of personal data, as may occur when collected by web analytics tools.
In addition to consent, we also have a legitimate interest in analyzing the behavior of website visitors in order to improve our offering technically and economically. With the help of Matomo On-Premise, we identify optimization potential for our website and can improve profitability. The legal basis for this is Art. 6 para. 1 lit. f GDPR (legitimate interests). Nevertheless, we only use Matomo On-Premise if you have given your consent.
If you would like to know more about data processing by Matomo On-Premise, you are also welcome to contact us. We also recommend Matomo's privacy policy at https://matomo.org/privacy-policy/.
Cookie Consent Management Platform Introduction
| Cookie Consent Management Platform Summary 👥 Affected: Website visitors 🤝 Purpose: Obtaining and managing consent for certain cookies and thus the use of certain tools 📓 Processed data: Data for managing the set cookie preferences such as IP address, time of consent, type of consent, individual consents. You can find more details with each tool used. 📅 Storage duration: Depends on the tool used, you should expect periods of several years ⚖️ Legal basis: Art. 6 para. 1 lit. a GDPR (consent), Art. 6 para. 1 lit. f GDPR (legitimate interests) |
What is a Cookie Consent Management Platform?
We use a Consent Management Platform (CMP) software on our website, which makes it easier for us and you to handle scripts and cookies correctly and securely. The software automatically creates a cookie popup, scans and controls all scripts and cookies, provides you with the legally required cookie consent, and helps both us and you keep track of all cookies. Most cookie consent management tools identify and categorize all existing cookies. As a website visitor, you then decide for yourself which scripts and cookies you allow or do not allow. The following graphic shows the relationship between browser, web server, and CMP.
Why do we use a cookie management tool?
Our goal is to offer you the best possible transparency in the area of data protection. In addition, we are also legally obliged to do so. We want to inform you as well as possible about all tools and all cookies that can store and process your data. It is also your right to decide for yourself which cookies you accept and which you do not. To grant you this right, we must first know exactly which cookies have landed on our website. Thanks to a cookie management tool that regularly scans the website for all existing cookies, we are aware of all cookies and can provide you with information about them in accordance with the GDPR. Through the consent system, you can then accept or reject cookies.
Which data is processed?
Within our cookie management tool, you can manage each individual cookie yourself and have complete control over the storage and processing of your data. Your declaration of consent is stored so that we do not have to ask you again every time you visit our website and so that we can prove your consent if legally required. This is stored either in an opt-in cookie or on a server. Depending on the provider of the cookie management tool, the storage duration of your cookie consent varies. Usually, this data (such as pseudonymous user ID, consent time, detailed information about cookie categories or tools, browser, device information) is stored for up to two years.
Duration of data processing
We will inform you about the duration of data processing further below, provided we have further information on this. In general, we only process personal data for as long as is absolutely necessary to provide our services and products. Data stored in cookies is stored for varying lengths of time. Some cookies are deleted as soon as you leave the website, others can remain stored in your browser for several years. The exact duration of data processing depends on the tool used; in most cases, you should expect a storage period of several years. In the respective privacy policies of the individual providers, you will usually find precise information about the duration of data processing.
Right to object
You also have the right and the possibility at any time to withdraw your consent to the use of cookies. This can be done either via our cookie management tool or through other opt-out functions. For example, you can also prevent data collection by cookies by managing, deactivating, or deleting cookies in your browser.
Information about specific cookie management tools, if available, can be found in the following sections.
Legal basis
If you consent to cookies, personal data about you will be processed and stored via these cookies. If we are permitted to use cookies through your Consent (Article 6(1)(a) GDPR), this consent is also the legal basis for the use of cookies or the processing of your data. In order to manage cookie consent and to enable you to give your consent, a cookie consent management platform software is used. The use of this software enables us to operate the website in a legally compliant manner efficiently, which is a legitimate interest (Article 6(1)(f) GDPR).
AdSimple Consent Manager Privacy Policy
| AdSimple Consent Manager Privacy Policy Summary 👥 Affected: Website visitors 🤝 Purpose: Obtaining consent for certain cookies and thus the use of specific tools 📓 Processed data: Data for managing the set cookie preferences such as IP address, time of consent, type of consent, individual consents. You can find more details further below in this privacy policy. 📅 Storage duration: the cookie used expires after one year ⚖️ Legal basis: Art. 6 para. 1 lit. a GDPR (consent), Art. 6 para. 1 lit. f GDPR (legitimate interests) |
What is the AdSimple Consent Manager?
We use the AdSimple Consent Manager from the software development and online marketing company AdSimple GmbH, Fabriksgasse 20, 2230 Gänserndorf, on our website. The AdSimple Consent Manager offers us, among other things, the opportunity to provide you with a comprehensive and GDPR-compliant cookie notice, so that you can decide for yourself which cookies you allow and which you do not. By using this software, data from you is sent to and stored by AdSimple. In this privacy policy, we inform you why we use the AdSimple Consent Manager, which data is transmitted and stored, and how you can prevent this data transfer.
The AdSimple Consent Manager is software that scans our website and identifies and categorizes all existing cookies. In addition, as a website visitor, you are informed about the use of cookies via a cookie notice script and can decide for yourself which cookies you allow and which you do not.
Why do we use the AdSimple Consent Manager on our website?
We want to offer you maximum transparency in the area of data protection. To ensure this, we first need to know exactly which cookies have ended up on our website over time. Because the Consent Manager from AdSimple regularly scans our website and identifies all cookies, we have full control over these cookies and can act in compliance with the GDPR. This allows us to inform you precisely about the use of cookies on our website. Furthermore, you always receive an up-to-date and GDPR-compliant cookie notice and decide for yourself, via a checkbox system, which cookies you accept or block.
Which data is stored by the AdSimple Consent Manager?
If you consent to cookies on our website, the following cookie is set by the AdSimple Consent Manager:
Name: acm_status
Value: “:true,”statistics”:true,”marketing”:true,”socialmedia”:true,”settings”:true}
Purpose: This cookie stores your consent status. This allows our website to read and comply with the current status on future visits as well.
Expiration date: after one year
How long and where is the data stored?
All data collected by the AdSimple Consent Manager is transmitted and stored exclusively within the European Union. The collected data is stored on AdSimple's servers at Hetzner GmbH in Germany. Only AdSimple GmbH and Hetzner GmbH have access to this data.
How can I delete my data or prevent data storage?
You have the right to access and delete your personal data at any time. You can prevent data collection and storage, for example, by refusing the use of cookies via the cookie notice script. Another way to prevent or manage data processing according to your preferences is through your browser. Cookie management works a little differently depending on the browser. In the „Cookies“ section, you will find the relevant links to the instructions for the most popular browsers.
Legal basis
If you consent to cookies, personal data about you will be processed and stored via these cookies. If we are permitted to use cookies through your Consent (Article 6 para. 1 lit. a GDPR) may use cookies, this consent is also the legal basis for the use of cookies or the processing of your data. In order to manage cookie consent and to enable you to give your consent, the AdSimple Consent Manager is used. The use of this software enables us to operate the website in a legally compliant manner in an efficient way, which is a legitimate interest (Article 6(1)(f) GDPR).
We hope we have given you a good overview of the data traffic and data processing by the AdSimple Consent Manager. If you want to learn more about this tool, we recommend the description page at https://www.adsimple.at/consent-manager/.
Cloud services
| Cloud Services Privacy Policy Summary 👥 Affected: We as website operators and you as website visitors 🤝 Purpose: Security and data storage 📓 Processed data: Data such as your IP address, name, or technical data such as browser version You can find more details below and in the individual privacy texts or in the privacy policies of the providers 📅 Storage duration: most data is stored as long as it is needed to fulfill the service ⚖️ Legal bases: Art. 6 para. 1 lit. a GDPR (consent), Art. 6 para. 1 lit. f GDPR (legitimate interests) |
What are cloud services?
Cloud services provide us as website operators with storage space and computing power via the Internet. Data can be transferred, processed, and stored to an external system via the Internet. The management of this data is handled by the respective cloud provider. Depending on the requirements, an individual or a company can choose the storage size or computing power. Access to cloud storage is via an API or storage protocols. API stands for Application Programming Interface and refers to a programming interface that connects software with hardware components.
Why do we use cloud services?
We use cloud services for several reasons. A cloud service gives us the opportunity to store our data securely. In addition, we have access to the data from different locations and devices, giving us more flexibility and making our work processes easier. Cloud storage also saves us costs because we do not have to build and manage our own infrastructure for data storage and data security. By centrally storing our data in the cloud, we can also expand our fields of application and manage our information much better.
As website operators or as a company, we primarily use cloud services for our own purposes. For example, we use the services to manage our calendar, to store documents or other important information in the cloud. However, personal data from you may also be stored in the process. This is the case, for example, if you provide us with your contact details (such as name and email address) and we store our customer data with a cloud provider. Consequently, data that we process from you can also be stored and processed on external servers. If we offer certain forms or content from cloud services on our website, cookies may also be set for web analysis and advertising purposes. Furthermore, such cookies remember your settings (such as the language used), so that you will find your usual web environment the next time you visit our website.
What data is processed by cloud services?
Many of the data we store in the cloud is not personally identifiable, but some data, according to the definition of the GDPR, is personal data. Often these are customer data such as name, address, IP address, or telephone number, or technical device information. Videos, images, and audio files can also be stored in the cloud. How the data is collected and stored depends on the respective service. We try to use only services that handle the data very reliably and professionally. In principle, services such as Amazon Drive have access to the stored files in order to be able to offer their own service accordingly. For this, the services require permissions such as the right to copy files for security reasons. This data is processed and managed as part of the services and in compliance with applicable laws. This also includes the GDPR for US providers (via the standard contractual clauses). In some cases, these cloud services also work with third-party providers who can process data under instruction and in accordance with privacy policies and other security measures. At this point, we would like to emphasize again that all well-known cloud services (such as Amazon Drive, Google Drive, or Microsoft Onedrive) obtain the right to access stored content in order to be able to offer and optimize their own service accordingly.
Duration of data processing
We inform you about the duration of data processing further below, provided we have additional information on this. In general, cloud services store data until you or we revoke the data storage or delete the data again. In general, personal data is only stored for as long as is absolutely necessary for the provision of the services. However, final deletion of data from the cloud can take several months. This is because the data is usually not stored on just one server, but distributed across different servers.
Right to object
You also have the right and the opportunity at any time to revoke your consent to data storage in a cloud. If cookies are used, you also have a right of revocation here. This works either via our cookie management tool or through other opt-out functions. For example, you can also prevent data collection by cookies by managing, deactivating, or deleting cookies in your browser. We also recommend our general privacy policy regarding cookies. To find out exactly which data of yours is stored and processed, you should read the privacy policies of the respective cloud providers.
Legal basis
We primarily use cloud services on the basis of our legitimate interests (Art. 6 para. 1 lit. f GDPR) in a good security and storage system.
Certain processing operations, in particular the use of cookies and storage functions, require your consent. If you have consented to your data being processed and stored by cloud services, this consent serves as the legal basis for data processing (Art. 6 para. 1 lit. a GDPR). Most of the services we use set cookies in your browser to store data. Therefore, we recommend that you read our privacy text on cookies carefully and review the privacy policy or cookie guidelines of the respective service provider.
Information about specific tools can be found – if available – in the following sections.
Web Design Introduction
| Web Design Privacy Policy Summary 👥 Data subjects: Visitors to the website 🤝 Purpose: Improving the user experience 📓 Processed data: Which data is processed depends heavily on the services used. Usually, this includes IP address, technical data, language settings, browser version, screen resolution, and the name of the browser. You can find more details in the respective web design tools used. 📅 Storage duration: depends on the tools used ⚖️ Legal bases: Art. 6 para. 1 lit. a GDPR (consent), Art. 6 para. 1 lit. f GDPR (legitimate interests) |
What is web design?
We use various tools on our website that serve our web design. Web design is not, as often assumed, just about making our website look pretty, but also about functionality and performance. But of course, the right look of a website is also one of the main goals of professional web design. Web design is a subfield of media design and deals with both the visual as well as the structural and functional design of a website. The goal is to use web design to improve your experience on our website. In web design jargon, this is referred to as user experience (UX) and usability. User experience refers to all impressions and experiences that a website visitor has on a website. A sub-point of user experience is usability. This is about the user-friendliness of a website. The focus here is mainly on ensuring that content, subpages, or products are clearly structured and that you can easily and quickly find what you are looking for. To offer you the best possible experience on our website, we also use so-called web design tools from third-party providers. In this privacy policy, the category „web design“ therefore includes all services that visually enhance our website. These can be, for example, fonts, various plugins, or other integrated web design functions.
Why do we use web design tools?
How you absorb information on a website depends very much on the structure, functionality, and visual perception of the website. Therefore, good and professional web design has become increasingly important to us. We are constantly working to improve our website and see this as an extended service for you as a website visitor. Furthermore, a beautiful and functioning website also has economic advantages for us. After all, you will only visit us and use our offers if you feel completely comfortable.
What data is stored by web design tools?
When you visit our website, web design elements may be integrated into our pages that can also process data. Exactly what data is involved depends, of course, heavily on the tools used. Further below you can see exactly which tools we use for our website. For more information about data processing, we also recommend reading the respective privacy policy of the tools used. Most of the time, you will find out there which data is processed, whether cookies are used, and how long the data is stored. For example, with fonts such as Google Fonts, information such as language settings, IP address, browser version, browser screen resolution, and browser name are automatically transmitted to Google servers.
Duration of data processing
How long data is processed is very individual and depends on the web design elements used. If cookies are used, for example, the retention period can be only one minute, but also a few years. Please inform yourself accordingly. For this, we recommend both our general section on cookies and the privacy policies of the tools used. There you will usually find out which cookies are used and what information is stored in them. Google font files, for example, are stored for one year. This is intended to improve the loading time of a website. In principle, data is always kept only as long as it is necessary to provide the service. In the case of legal requirements, data may also be stored for longer.
Right to object
You also have the right and the opportunity at any time to revoke your consent to the use of cookies or third-party providers. This works either via our cookie management tool or via other opt-out functions. You can also prevent data collection by cookies by managing, disabling, or deleting cookies in your browser. However, with web design elements (mostly with fonts), there is also data that cannot be deleted quite so easily. This is the case when data is automatically collected directly upon a page visit and transmitted to a third-party provider (such as Google). In that case, please contact the support of the respective provider. In the case of Google, you can reach support at https://support.google.com/?hl=de.
Legal basis
If you have consented to the use of web design tools, the legal basis for the corresponding data processing is this consent. According to Art. 6 para. 1 lit. a GDPR (consent), this consent constitutes the legal basis for the processing of personal data, as may occur when collected by web design tools. On our part, there is also a legitimate interest in improving the web design on our website. After all, we can only provide you with a beautiful and professional web offering if this is the case. The corresponding legal basis for this is Art. 6 para. 1 lit. f GDPR (legitimate interests). Nevertheless, we only use web design tools if you have given your consent. We definitely want to emphasize this again here.
Information about specific web design tools can be found – if available – in the following sections.
Google Fonts Local Privacy Policy
On our website, we use Google Fonts from Google Inc. For the European region, the company responsible is Google Ireland Limited (Gordon House, Barrow Street Dublin 4, Ireland). We have integrated the Google fonts locally, i.e., on our web server – not on Google's servers. This means there is no connection to Google servers and therefore no data transmission or storage.
What are Google Fonts?
Google Fonts used to be called Google Web Fonts. It is an interactive directory with over 800 fonts that Google provides free of charge. With Google Fonts, you could use fonts without uploading them to your own server. However, to prevent any information from being transmitted to Google servers, we have downloaded the fonts to our server. In this way, we act in compliance with data protection regulations and do not send any data to Google Fonts.
Explanation of terms used
We always strive to make our privacy policy as clear and understandable as possible. Especially with technical and legal topics, this is not always easy. It often makes sense to use legal terms (such as personal data) or certain technical expressions (such as cookies, IP address). However, we do not want to use these without explanation. Below you will find an alphabetical list of important terms used, which we may not have sufficiently explained in the previous privacy policy. If these terms are taken from the GDPR and are definitions, we will also cite the GDPR texts here and, if necessary, add our own explanations.
Processor
Definition according to Article 4 of the GDPR
For the purposes of this Regulation, the term means:
„Processor“ a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller;
Explanation: As a company and website owner, we are responsible for all data we process from you. In addition to controllers, there can also be so-called processors. This includes any company or person who processes personal data on our behalf. Processors can therefore include, in addition to service providers such as tax consultants, hosting or cloud providers, payment or newsletter providers, or large companies such as Google or Microsoft.
Consent
Definition according to Article 4 of the GDPR
For the purposes of this Regulation, the term means:
„Consent“ of the data subject, any freely given, specific, informed and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her;
Explanation: As a rule, such consent on websites is obtained via a cookie consent tool. You are probably familiar with this. Whenever you visit a website for the first time, you are usually asked via a banner whether you agree to data processing or consent to it. Usually, you can also make individual settings and thus decide for yourself which data processing you allow and which you do not. If you do not consent, no personal data about you may be processed. Of course, consent can also be given in writing, i.e. not via a tool.
Personal data
Definition according to Article 4 of the GDPR
For the purposes of this Regulation, the term means:
„personal data“ all information relating to an identified or identifiable natural person (hereinafter referred to as the „data subject“); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;
Explanation: Personal data is therefore all data that can identify you as a person. These are usually data such as:
- Name
- Address
- Email address
- Postal address
- Telephone number
- Date of birth
- Identification numbers such as social security number, tax identification number, identity card number or matriculation number
- Bank data such as account number, credit information, account balances and much more.
According to the European Court of Justice (ECJ), your IP address is also considered personal data. IT experts can use your IP address to determine at least the approximate location of your device and, subsequently, you as the connection owner. Therefore, storing an IP address also requires a legal basis under the GDPR. There are also so-called „special categories“ of personal data, which are particularly worthy of protection. These include:
- racial and ethnic origin
- political opinions
- religious or philosophical beliefs
- trade union membership
- genetic data, such as data obtained from blood or saliva samples
- biometric data (these are information about psychological, physical, or behavioral characteristics that can identify a person).
health data - data on sexual orientation or sex life
profiling
Definition according to Article 4 of the GDPR
For the purposes of this Regulation, the term means:
„profiling“ any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects concerning that natural person's work performance, economic situation, health, personal preferences, interests, reliability, behavior, location, or movements;
Explanation: Profiling involves collecting various pieces of information about a person in order to learn more about them. In the web sector, profiling is often used for advertising purposes or for credit checks. Web or advertising analysis programs, for example, collect data about your behavior and interests on a website. This results in a specific user profile, which can be used to target advertising to a particular audience.
controller
Definition according to Article 4 of the GDPR
For the purposes of this Regulation, the term means:
„controller“ the natural or legal person, authority, agency, or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union law or the law of the Member States, the controller or the specific criteria for its nomination may be provided for by Union law or by the law of the Member States;
Explanation: In our case, we are responsible for processing your personal data and are therefore the “Controller.” If we pass on collected data for processing to other service providers, they are “Processors.” For this, a “Data Processing Agreement (DPA)” must be signed.
Processing
Definition according to Article 4 of the GDPR
For the purposes of this Regulation, the term means:
„Processing“ any operation or set of operations which is performed on personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;
Note: When we refer to processing in our privacy policy, we mean any kind of data processing. As mentioned above in the original GDPR statement, this includes not only the collection but also the storage and processing of data.
Final Word
Congratulations! If you are reading these lines, you have really „fought“ your way through our entire privacy policy or at least scrolled down to here. As you can see from the scope of our privacy policy, we take the protection of your personal data very seriously.
It is important to us to inform you about the processing of personal data to the best of our knowledge and belief. However, we do not just want to tell you which data is processed, but also explain the reasons for using various software programs. Privacy policies usually sound very technical and legal. However, since most of you are neither web developers nor lawyers, we wanted to take a different linguistic approach and explain the facts in simple and clear language. Of course, this is not always possible due to the subject matter. Therefore, the most important terms are explained in more detail at the end of the privacy policy.
If you have any questions about data protection on our website, please do not hesitate to contact us or the responsible office. We wish you a pleasant time and hope to welcome you back to our website soon.
All texts are protected by copyright.