Privacy Policy

Introduction and Overview

We have written this privacy policy (version 01/03/2025-112926478) to explain to you, in accordance with the requirements of the General Data Protection Regulation (EU) 2016/679 and applicable national laws, which personal data (data for short) we as the controller – and the processors commissioned by us (e.g. providers) – process, will process in the future and what legal options you have. The terms used are to be understood as gender-neutral.
In short: We provide you with comprehensive information about data that we process about you.

Privacy policies usually sound very technical and use legal jargon. In contrast, this privacy policy is intended to describe the most important things to you as simply and transparently as possible. Insofar as it is beneficial to transparency, technical terms are explained in a reader-friendly manner, links to further information are provided and graphics are used. We thus inform you in clear and simple language that we only process personal data within the scope of our business activities if there is a corresponding legal basis. This is certainly not possible if you provide explanations that are as concise, unclear and legal-technical as possible, as is often standard on the Internet when it comes to data protection. I hope you find the following explanations interesting and informative and perhaps there is one or the other piece of information that you did not already know.
If you still have questions, please contact the responsible body mentioned below or in the legal notice, follow the existing links and view further information on third-party websites. You will of course also find our contact details in the legal notice.

Scope

This privacy policy applies to all personal data processed by us in the company and to all personal data processed by companies (processors) commissioned by us. Personal data means information within the meaning of Art. 4 No. 1 GDPR, such as a person’s name, e-mail address and postal address. The processing of personal data ensures that we can offer and bill for our services and products, whether online or offline. The scope of this privacy policy includes:

• all online presences (websites, online shops) that we operate
• Social media presences and e-mail communication
• mobile apps for smartphones and other devices

In short: The privacy policy applies to all areas in which personal data is processed in a structured manner within the company via the channels mentioned. Should we enter into legal relationships with you outside of these channels, we will inform you separately if necessary.

Legal Basis

In the following privacy policy, we will provide you with transparent information on the legal principles and regulations, i.e. the legal basis of the General Data Protection Regulation, which enable us to process personal data.
As far as EU law is concerned, we refer to REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016. You can of course read this EU General Data Protection Regulation online on EUR-Lex, the gateway to EU law, at https://eur-lex.europa.eu/legal-content/DE/ALL/?uri=celex%3A32016R0679.

We only process your data if at least one of the following conditions applies:

1. Consent (Article 6 paragraph 1 lit. a GDPR): You have given us your consent to process data for a specific purpose. An example would be the storage of your entered data from a contact form.
2. Contract (Article 6 paragraph 1 lit. b GDPR): In order to fulfill a contract or pre-contractual obligations with you, we process your data. For example, if we conclude a purchase contract with you, we require personal information in advance.
3. Legal obligation (Article 6 paragraph 1 lit. c GDPR): If we are subject to a legal obligation, we process your data. For example, we are legally obliged to keep invoices for accounting purposes. These usually contain personal data.
4. Legitimate interests (Article 6 paragraph 1 lit. f GDPR): In the case of legitimate interests that do not restrict your basic rights, we reserve the right to process personal data. For example, we need to process certain data in order to operate our website securely and economically efficiently. This processing is therefore a legitimate interest.

Other conditions such as the perception of recordings in the public interest and the exercise of public authority as well as the protection of vital interests do not usually occur with us. If such a legal basis should nevertheless be relevant, this will be indicated at the appropriate point.

In addition to the EU regulation, national laws also apply:

• In Austria, this is the Federal Act on the Protection of Natural Persons when Processing Personal Data (Data Protection Act), in short DSG.
• In Germany, the Federal Data Protection Act, in short BDSG, applies.

If further regional or national laws apply, we will inform you about this in the following sections.

Contact Details of the Controller

If you have any questions about data protection or the processing of personal data, you will find the contact details of the controller in accordance with Article 4 paragraph 7 EU General Data Protection Regulation (GDPR) below:
Dr. Ajnacska Rozsasi
Specialist in ENT medicine
Harmoniegasse 3/13, 1090 Vienna (ground floor)

E-mail: hno@harmoniepraxis.com
Telephone: +43 676 7615585
Legal notice: https://www.harmoniepraxis.com/impressum/

Storage Duration

The fact that we only store personal data for as long as is absolutely necessary to provide our services and products is a general criterion for us. This means that we delete personal data as soon as the reason for the data processing no longer exists. In some cases, we are legally obliged to store certain data even after the original purpose has ceased to exist, for example for accounting purposes.

If you wish to have your data deleted or revoke your consent to data processing, the data will be deleted as quickly as possible and provided there is no obligation to store it.

We will inform you about the specific duration of the respective data processing further below, provided we have further information on this.

Rights under the General Data Protection Regulation

In accordance with Articles 13, 14 GDPR, we inform you about the following rights to which you are entitled so that data is processed fairly and transparently:

• According to Article 15 GDPR, you have the right to information about whether we process data about you. If this is the case, you have the right to receive a copy of the data and to know the following information:
  
  • for what purpose we carry out the processing;
  • the categories, i.e. the types of data that are processed;
  • who receives this data and, if the data is transferred to third countries, how security can be guaranteed;
  • how long the data will be stored;
  • the existence of the right to rectification, erasure or restriction of processing and the right to object to processing;
  • that you can complain to a supervisory authority (links to these authorities can be found below);
  • the origin of the data if we have not collected it from you;
  • whether profiling is carried out, i.e. whether data is automatically evaluated in order to arrive at a personal profile of you.
• According to Article 16 GDPR, you have the right to rectification of the data, which means that we must correct data if you find errors.
• According to Article 17 GDPR, you have the right to erasure (“right to be forgotten”), which specifically means that you may request the erasure of your data.
• According to Article 18 GDPR, you have the right to restriction of processing, which means that we may only store the data but not use it further.
• According to Article 20 GDPR, you have the right to data portability, which means that we will provide you with your data in a common format upon request.
• According to Article 21 GDPR, you have the right to object, which, once enforced, will result in a change to the processing.
  
  • If the processing of your data is based on Article 6 paragraph 1 lit. e (public interest, exercise of public authority) or Article 6 paragraph 1 lit. f (legitimate interest), you can object to the processing. We will then check as quickly as possible whether we can legally comply with this objection.
  • If data is used to carry out direct advertising, you can object to this type of data processing at any time. We may then no longer use your data for direct marketing.
  • If data is used to carry out profiling, you can object to this type of data processing at any time. We may then no longer use your data for profiling.
• According to Article 22 GDPR, you may have the right not to be subject to a decision based exclusively on automated processing (for example, profiling).
• According to Article 77 GDPR, you have the right to complain. This means that you can complain to the data protection authority at any time if you believe that the processing of personal data violates the GDPR.

In short: You have rights – do not hesitate to contact the responsible body listed above!

If you believe that the processing of your data violates data protection law or that your data protection rights have been violated in any other way, you can complain to the supervisory authority. For Austria, this is the data protection authority, whose website can be found at https://www.dsb.gv.at/. In Germany, there is a data protection officer for each federal state. For more information, you can contact the Federal Commissioner for Data Protection and Freedom of Information (BfDI). The following local data protection authority is responsible for our company:

Austria Data Protection Authority

Head: Dr. Matthias Schmidl
Address: Barichgasse 40-42, 1030 Vienna
Telephone no.: +43 1 52 152-0
E-mail address: dsb@dsb.gv.at
Website: https://www.dsb.gv.at/

Communication

Communication Summary 👥 Affected: All those who communicate with us by telephone, e-mail or online form 📓 Processed data: e.g. telephone number, name, e-mail address, entered form data.

If you contact us and communicate by telephone, e-mail or online form, personal data may be processed.

The data is processed for the handling and processing of your question and the associated business transaction. The data is stored for the same period or as long as required by law.

Affected Persons

All those who seek contact with us via the communication channels provided by us are affected by the processes mentioned.

Phone

If you call us, the call data is stored pseudonymized on the respective end device and at the telecommunications provider used. In addition, data such as name and telephone number can then be sent by e-mail and stored to answer the request. The data will be deleted as soon as the business case has been completed and legal requirements allow.

Email

If you communicate with us by e-mail, data may be stored on the respective end device (computer, laptop, smartphone,…) and data may be stored on the e-mail server. The data will be deleted as soon as the business case has been completed and legal requirements allow.

Online Forms

If you communicate with us using an online form, data is stored on our web server and, if necessary, forwarded to one of our e-mail addresses. The data will be deleted as soon as the business case has been completed and legal requirements allow.

Legal Basis

The processing of the data is based on the following legal bases:

• Art. 6 para. 1 lit. a GDPR (consent): You give us your consent to store your data and to use it further for purposes relating to the business case;
• Art. 6 para. 1 lit. b GDPR (contract): There is a need for the fulfillment of a contract with you or a processor such as the telephone provider or we must process the data for pre-contractual activities, such as the preparation of an offer;
• Art. 6 para. 1 lit. f GDPR (legitimate interests): We want to operate customer inquiries and business communication in a professional framework. For this purpose, certain technical facilities such as e-mail programs, exchange servers and mobile phone operators are necessary in order to operate the communication efficiently.

Data Processing Agreement (DPA)

In this section, we would like to explain to you what a data processing agreement is and why it is needed. Because the word “data processing agreement” is quite a mouthful, we will also often use only the acronym DPA here in the text. Like most companies, we do not work alone, but also make use of services from other companies or individuals. By involving various companies or service providers, it may be necessary for us to pass on personal data for processing. These partners then act as processors, with whom we conclude a contract, the so-called data processing agreement (DPA). The most important thing for you to know is that the processing of your personal data takes place exclusively according to our instructions and must be regulated by the DPA.

Who are Processors?

As a company and website owner, we are responsible for all data that we process from you. In addition to the controllers, there may also be so-called processors. This includes any company or person who processes personal data on our behalf. More precisely and according to the GDPR definition: any natural or legal person, authority, institution or other body that processes personal data on our behalf is considered a processor. Processors can therefore be service providers such as hosting or cloud providers, payment or newsletter providers or large companies such as Google or Microsoft.

To better understand the terminology, here is an overview of the three roles in the GDPR:

Data subject (you as a customer or interested party) → Controller (we as a company and client) → Processor (service providers such as web hosters or cloud providers)

Content of a Data Processing Agreement

As already mentioned above, we have concluded a DPA with our partners who act as processors. Above all, it is stipulated that the processor processes the data to be processed exclusively in accordance with the GDPR. The contract must be concluded in writing, but in this context the electronic conclusion of the contract is also considered “in writing”. The processing of personal data only takes place on the basis of the contract. The contract must contain the following:

• Commitment to us as the controller
• Duties and rights of the controller
• Categories of data subjects
• Type of personal data
• Type and purpose of data processing
• Subject matter and duration of data processing
• Place of data processing

Furthermore, the contract contains all the obligations of the data processor. The most important obligations are:

• To guarantee data security measures
• to take possible technical and organizational measures to protect the rights of the data subject
• to keep a data processing directory
• to cooperate with the data protection supervisory authority upon request
• to carry out a risk analysis with regard to the personal data received
• Sub-processors may only be commissioned with the written consent of the controller

You can see what such a data processing agreement looks like in practice, for example, at https://www.wko.at/service/wirtschaftsrecht-gewerberecht/eu-dsgvo-mustervertrag-auftragsverarbeitung.html. A sample contract is presented here.

Cookies

Cookies Summary 👥 Data subjects: Website visitors 🤝 Purpose: depends on the respective cookie. More details can be found below or from the manufacturer of the software that sets the cookie. 📓 Processed data: Depends on the cookie used. More details can be found below or from the manufacturer of the software that sets the cookie. 📅 Storage period: depends on the respective cookie, can vary from hours to years ⚖️ Legal basis: Art. 6 para. 1 lit. a GDPR (consent), Art. 6 para. 1 lit.f GDPR (legitimate interests)

What are Cookies?

Our website uses HTTP cookies to store user-specific data.
In the following, we will explain what cookies are and why they are used so that you can better understand the following privacy policy.

Whenever you surf the Internet, you use a browser. Well-known browsers include Chrome, Safari, Firefox, Internet Explorer, and Microsoft Edge. Most websites store small text files in your browser. These files are called cookies.

One thing is undeniable: cookies are really useful helpers. Almost all websites use cookies. More specifically, they are HTTP cookies, as there are also other cookies for other application areas. HTTP cookies are small files that our website stores on your computer. These cookie files are automatically stored in the cookie folder, which is like the “brain” of your browser. A cookie consists of a name and a value. When defining a cookie, one or more attributes must also be specified.

Cookies store certain user data from you, such as language or personal page settings. When you visit our site again, your browser transmits the “user-related” information back to our site. Thanks to cookies, our website knows who you are and offers you the settings you are used to. In some browsers, each cookie has its own file, while in others, such as Firefox, all cookies are stored in a single file.

The following graphic shows a possible interaction between a web browser such as Chrome and the web server. The web browser requests a website and receives a cookie back from the server, which the browser uses again as soon as another page is requested.

There are both first-party cookies and third-party cookies. First-party cookies are created directly by our site, while third-party cookies are created by partner websites (e.g. Google Analytics). Each cookie must be evaluated individually, as each cookie stores different data. The expiration time of a cookie also varies from a few minutes to a few years. Cookies are not software programs and do not contain viruses, Trojans or other “pests”. Cookies also cannot access information on your PC.

For example, cookie data might look like this:

Name: _ga
Value: GA1.2.1326744211.152112926478-9
Purpose: Differentiation of website visitors
Expiration date: after 2 years

A browser should be able to support these minimum sizes:

• At least 4096 bytes per cookie
• At least 50 cookies per domain
• At least 3000 cookies in total

What Types of Cookies are there?

The question of which cookies we use in particular depends on the services used and will be clarified in the following sections of the privacy policy. At this point, we would like to briefly discuss the different types of HTTP cookies.

There are 4 types of cookies:

Essential Cookies
These cookies are necessary to ensure the basic functions of the website. For example, these cookies are needed if a user puts a product in the shopping cart, then continues browsing on other pages and only goes to checkout later. These cookies ensure that the shopping cart is not deleted, even if the user closes their browser window.

Functional Cookies
These cookies collect information about user behavior and whether the user receives any error messages. In addition, these cookies are also used to measure the loading time and behavior of the website on different browsers.

Target-oriented Cookies
These cookies ensure better user-friendliness. For example, entered locations, font sizes or form data are stored.

Advertising Cookies
These cookies are also called targeting cookies. They serve to deliver individually tailored advertising to the user. This can be very practical, but also very annoying.

Usually, when you visit a website for the first time, you will be asked which of these types of cookies you would like to allow. And of course, this decision is also stored in a cookie.

If you want to know more about cookies and are not afraid of technical documentation, we recommend https://datatracker.ietf.org/doc/html/rfc6265, the Request for Comments of the Internet Engineering Task Force (IETF) called “HTTP State Management Mechanism”.

Purpose of Processing via Cookies

The purpose ultimately depends on the respective cookie. More details can be found below or from the manufacturer of the software that sets the cookie.

Which Data is Processed?

Cookies are small helpers for many different tasks. Unfortunately, it is not possible to generalize which data is stored in cookies, but we will inform you about the processed or stored data in the following privacy policy.

Storage Period of Cookies

The storage period depends on the respective cookie and is specified in more detail below. Some cookies are deleted after less than an hour, while others can remain stored on a computer for several years.

You also have influence over the storage period yourself. You can manually delete all cookies at any time via your browser (see also below “Right of objection”). Furthermore, cookies that are based on consent will be deleted at the latest after you revoke your consent, whereby the legality of the storage remains unaffected until then.

Right of Objection – how Can I Delete Cookies?

You decide for yourself how and whether you want to use cookies. Regardless of which service or website the cookies come from, you always have the option of deleting, deactivating or only partially allowing cookies. For example, you can block cookies from third-party providers, but allow all other cookies.

If you want to find out which cookies have been stored in your browser, if you want to change or delete cookie settings, you can find this in your browser settings:

Chrome: Delete, activate and manage cookies in Chrome

Safari: Manage cookies and website data with Safari

Firefox: Delete cookies to remove data that websites have stored on your computer

Internet Explorer: Delete and manage cookies

Microsoft Edge: Delete and manage cookies

If you generally do not want to have any cookies, you can set up your browser so that it always informs you when a cookie is to be set. This allows you to decide whether to allow the cookie or not for each individual cookie. The procedure varies depending on the browser. The best way to find the instructions is to search Google for “Delete cookies Chrome” or “Disable cookies Chrome” in the case of a Chrome browser.

Real Cookie Banner

We use the consent tool “Real Cookie Banner” to manage the cookies and similar technologies (tracking pixels, web beacons, etc.) used and the related consents. Details on how “Real Cookie Banner” works can be found at <a href=“https://devowl.io/de/rcb/datenverarbeitung/” rel=“noreferrer” target=“_blank”>https://devowl.io/de/rcb/datenverarbeitung/</a>.

The legal bases for the processing of personal data in this context are Art. 6 para. 1 lit. c GDPR and Art. 6 para. 1 lit. f GDPR. Our legitimate interest is the management of the cookies and similar technologies used and the related consents.

The provision of personal data is neither contractually required nor necessary for the conclusion of a contract. You are not obliged to provide the personal data. If you do not provide the personal data, we will not be able to manage your consents.

Legal Basis

The so-called “cookie guidelines” have been in place since 2009. They stipulate that the storage of cookies requires consent (Article 6 para. 1 lit. a GDPR) from you. Within the EU countries, however, there are still very different reactions to these guidelines. In Austria, however, this directive was implemented in § 165 para. 3 of the Telecommunications Act (2021). In Germany, the cookie guidelines were not implemented as national law. Instead, this directive was largely implemented in § 15 para. 3 of the Telemedia Act (TMG), which has been replaced by the Digital Services Act (DDG) since May 2024.

For cookies that are absolutely necessary, even if there is no consent, there are legitimate interests (Article 6 para. 1 lit. f GDPR), which are mostly of an economic nature. We want to provide visitors to the website with a pleasant user experience and certain cookies are often absolutely necessary for this.

Insofar as cookies that are not absolutely necessary are used, this only happens with your consent. The legal basis in this respect is Art. 6 para. 1 lit. a GDPR.

In the following sections, you will be informed in more detail about the use of cookies, provided that the software used uses cookies.

Web Hosting Introduction

Web Hosting Summary 👥 Data subjects: Website visitors 🤝 Purpose: professional hosting of the website and safeguarding of operations 📓 Processed data: IP address, time of website visit, browser used and other data. More details can be found below or from the respective web hosting provider. 📅 Storage period: depends on the respective provider, but usually 2 weeks ⚖️ Legal basis: Art. 6 para. 1 lit.f GDPR (Legitimate Interests)

What is Web Hosting?

When you visit websites these days, certain information – including personal data – is automatically created and stored, including on this website. This data should be processed as sparingly as possible and only with justification. By the way, by website we mean the entirety of all web pages on a domain, i.e. everything from the start page (homepage) to the very last subpage (like this one here). By domain we mean, for example, example.de or musterbeispiel.com.

If you want to view a website on a computer, tablet or smartphone, you use a program called a web browser. You probably know some web browsers by name: Google Chrome, Microsoft Edge, Mozilla Firefox and Apple Safari. We will call them browser or web browser for short.

To display the website, the browser must connect to another computer where the code of the website is stored: the web server. Operating a web server is a complicated and time-consuming task, which is why it is usually taken over by professional providers. These offer web hosting and thus ensure reliable and error-free storage of website data. A whole lot of technical terms, but please stay tuned, it gets even better!

When the browser on your computer (desktop, laptop, tablet or smartphone) establishes a connection and during the data transfer to and from the web server, personal data may be processed. On the one hand, your computer stores data, and on the other hand, the web server must also store data for a certain period of time in order to ensure proper operation.

A picture is worth a thousand words, so the following graphic illustrates the interaction between the browser, the Internet and the hosting provider.

Why Do We Process Personal Data?

The purposes of data processing are:

1. Professional hosting of the website and safeguarding of operations
2. to maintain operational and IT security
3. Anonymous evaluation of access behavior to improve our offer and, if necessary, for criminal prosecution or pursuit of claims

Which Data is Processed?

Even while you are visiting our website right now, our web server, which is the computer on which this website is stored, usually automatically stores data such as

• the complete internet address (URL) of the website accessed
• Browser and browser version (e.g. Chrome 87)
• the operating system used (e.g. Windows 10)
• the address (URL) of the previously visited page (referrer URL) (e.g. https://www.beispielquellsite.de/vondabinichgekommen/)
• the host name and IP address of the device from which access is made (e.g. COMPUTERNAME and 194.23.43.121)
• Date and time
• in files, the so-called web server log files

How Long Will Data be Stored?

As a rule, the above-mentioned data is stored for two weeks and then automatically deleted. We do not pass on this data, but we cannot rule out that this data may be viewed by authorities in the event of illegal behavior.

In short: Your visit is logged by our provider (company that runs our website on special computers (servers)), but we do not pass on your data without your consent!

Legal Basis

The lawfulness of the processing of personal data in the context of web hosting results from Art. 6 para. 1 lit. f GDPR (protection of legitimate interests), because the use of professional hosting with a provider is necessary to present the company securely and user-friendly on the Internet and to be able to prosecute attacks and claims arising from this if necessary.

As a rule, there is a contract between us and the hosting provider for order processing in accordance with Art. 28 f. GDPR, which guarantees compliance with data protection and guarantees data security.

Web Hosting Provider External Privacy Policy

Below you will find the contact details of our external hosting provider, where you can find out more about data processing in addition to the information above:

Alterax IT-Dienstleistungen
by Socialized Alpha GmbH
Hofzeile 3/Top 10, 1190 Vienna

You can find out more about data processing at this provider in the privacy policy.

Website Modular Systems Introduction

Website Modular Systems Privacy Policy Summary 👥 Data subjects: Website visitors 🤝 Purpose: Optimization of our service 📓 Processed data: Data such as technical usage information such as browser activity, clickstream activities, session heatmaps as well as contact data, IP address or your geographical location. More details can be found below in this privacy policy and in the privacy policy of the providers. 📅 Storage period: depends on the provider ⚖️ Legal bases: Art. 6 para. 1 lit. f GDPR (Legitimate Interests), Art. 6 para. 1 lit. a GDPR (Consent)

What are Website Modular Systems?

We use a website modular system for our website. Modular systems are special forms of a content management system (CMS). With a modular system, website operators can easily create a website without programming knowledge. In many cases, web hosts also offer modular systems. By using a modular system, your personal data may also be collected, stored and processed. In this data protection text, we give you general information about data processing by modular systems. You can find more information in the privacy policies of the provider.

Why Do We Use Website Modular Systems for our Website?

The biggest advantage of a modular system is its ease of use. We want to offer you a clear, simple and well-organized website that we can easily operate and maintain ourselves – without external support. A modular system now offers many helpful functions that we can use even without programming knowledge. This allows us to design our web presence according to our wishes and offer you an informative and pleasant time on our website.

What Data is Stored by a Modular System?

The exact data that is stored naturally depends on the website builder system used. Each provider processes and collects different data from website visitors. However, technical usage information such as operating system, browser, screen resolution, language and keyboard settings, hosting provider and the date of your website visit are usually collected. Furthermore, tracking data (e.g. browser activity, clickstream activities, session heatmaps, etc.) can also be processed. In addition, personal data can also be collected and stored. This is usually contact information such as email address, telephone number (if you have provided it), IP address and geographical location data. You can find out exactly which data is stored in the provider’s privacy policy.

How Long and where is the Data Stored?

We will inform you about the duration of data processing further below in connection with the website builder system used, provided we have further information on this. You can find detailed information in the provider’s privacy policy. In general, we only process personal data for as long as is absolutely necessary for the provision of our services and products. It is possible that the provider stores data about you according to its own specifications, over which we have no influence.

Right to Object

You always have the right to information, correction and deletion of your personal data. If you have any questions, you can also contact the person responsible for the website builder system used at any time. Contact details can be found either in our privacy policy or on the website of the respective provider.

Cookies that providers use for their functions can be deleted, deactivated or managed in your browser. Depending on which browser you use, this works in different ways. Please note, however, that some functions may no longer work as usual.

Legal Basis

We have a legitimate interest in using a website builder system to optimize our online service and present it to you in an efficient and user-friendly manner. The corresponding legal basis for this is Art. 6 Para. 1 lit. f GDPR (Legitimate Interests). However, we only use the website builder if you have given your consent.

Insofar as the processing of data is not absolutely necessary for the operation of the website, the data will only be processed on the basis of your consent. This applies in particular to tracking activities. The legal basis in this respect is Art. 6 Para. 1 lit. a GDPR.

With this privacy policy, we have provided you with the most important general information about data processing. If you would like to find out more about this, you will find further information – if available – in the following section or in the provider’s privacy policy.

Web Design Introduction

Web design privacy policy summary 👥 Affected: Website visitors 🤝 Purpose: Improving the user experience 📓 Processed data: Which data is processed depends heavily on the services used. This usually includes IP address, technical data, language settings, browser version, screen resolution and browser name. You can find more details on this in the web design tools used. 📅 Storage period: depends on the tools used ⚖️ Legal bases: Art. 6 Para. 1 lit. a GDPR (Consent), Art. 6 Para. 1 lit. f GDPR (Legitimate Interests)

What is Web Design?

We use various tools on our website that serve our web design. Web design is not, as is often assumed, just about making our website look pretty, but also about functionality and performance. But of course, the right look for a website is also one of the major goals of professional web design. Web design is a sub-area of media design and deals with both the visual and the structural and functional design of a website. The aim is to improve your experience on our website with the help of web design. In web design jargon, this is referred to as user experience (UX) and usability. User experience refers to all the impressions and experiences that a website visitor has on a website. A sub-item of user experience is usability. This is about the user-friendliness of a website. Particular emphasis is placed on ensuring that content, sub-pages or products are clearly structured and that you can easily and quickly find what you are looking for. In order to offer you the best possible experience on our website, we also use so-called web design tools from third-party providers. In this privacy policy, the category “web design” therefore includes all services that improve the design of our website. This can be, for example, fonts, various plugins or other integrated web design functions.

Why Do We Use Web Design Tools?

How you absorb information on a website depends very much on the structure, functionality and visual perception of the website. Therefore, good and professional web design has become increasingly important for us. We are constantly working on improving our website and see this as an extended service for you as a website visitor. Furthermore, a beautiful and functioning website also has economic advantages for us. After all, you will only visit us and make use of our offers if you feel completely comfortable.

What Data is Stored by Web Design Tools?

When you visit our website, web design elements may be integrated into our pages that can also process data. The exact data involved naturally depends heavily on the tools used. Below you can see exactly which tools we use for our website. We also recommend that you read the respective privacy policy of the tools used for more information about data processing. There you will usually find out which data is processed, whether cookies are used and how long the data is stored. Fonts such as Google Fonts, for example, automatically transmit information such as language settings, IP address, browser version, browser screen resolution and browser name to the Google servers.

Duration of Data Processing

How long data is processed is very individual and depends on the web design elements used. If cookies are used, for example, the retention period can be just one minute, but also a few years. Please find out about this. We recommend that you read our general text section on cookies and the privacy policies of the tools used. There you will usually find out exactly which cookies are used and what information is stored in them. Google Font files, for example, are stored for one year. This is intended to improve the loading time of a website. In principle, data is always only stored for as long as is necessary for the provision of the service. Data may also be stored for longer if required by law.

Right to Object

You also have the right and the option to revoke your consent to the use of cookies or third-party providers at any time. This works either via our cookie management tool or via other opt-out functions. You can also prevent the collection of data by cookies by managing, deactivating or deleting the cookies in your browser. However, there is also data under web design elements (mostly with fonts) that cannot be deleted so easily. This is the case when data is automatically collected and transmitted to a third-party provider (such as Google) directly when a page is accessed. In this case, please contact the support of the corresponding provider. In the case of Google, you can reach support at https://support.google.com/?hl=de.

Legal Basis

If you have consented to the use of web design tools, the legal basis for the corresponding data processing is this consent. According to Art. 6 Para. 1 lit. a GDPR (Consent), this consent constitutes the legal basis for the processing of personal data, as may occur when collected by web design tools. We also have a legitimate interest in improving the web design on our website. After all, we can only provide you with a beautiful and professional web offering. The corresponding legal basis for this is Art. 6 Para. 1 lit. f GDPR (Legitimate Interests). However, we only use web design tools if you have given your consent. We would definitely like to emphasize this again here.

Information on Special Web Design Tools Can be Found – if Available – in the Following Sections.

Adobe Fonts Privacy Policy

We use Adobe Fonts, a web font hosting service, on our website. The service provider is the American company Adobe Inc. The Irish company Adobe Systems Software Ireland Companies, 4-6 Riverwalk, Citywest Business Campus, Dublin 24, Ireland, is responsible for the European region.

Adobe also processes data from you in the USA, among other places. Adobe is an active participant in the EU-US Data Privacy Framework, which regulates the correct and secure transfer of personal data from EU citizens to the USA. You can find more information on this at https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en.

In addition, Adobe uses so-called standard contractual clauses (= Art. 46. Para. 2 and 3 GDPR). Standard contractual clauses (SCC) are model templates provided by the EU Commission and are intended to ensure that your data also complies with European data protection standards when it is transferred to and stored in third countries (such as the USA). Through the EU-US Data Privacy Framework and the standard contractual clauses, Adobe undertakes to comply with the European data protection level when processing your relevant data, even if the data is stored, processed and managed in the USA. These clauses are based on an implementing decision of the EU Commission. You can find the decision and the corresponding standard contractual clauses, among other things, here: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de

You can find more information about the standard contractual clauses at Adobe at https://www.adobe.com/at/privacy/eudatatransfers.html.

You can find out more about the data processed through the use of Adobe Fonts in the Privacy Policy at https://www.adobe.com/at/privacy.html .

Google Fonts Privacy Policy

Google Fonts privacy policy summary 👥 Affected: Website visitors 🤝 Purpose: Optimization of our service 📓 Processed data: Data such as IP address and CSS and font requests You can find more details on this further down in this privacy policy. 📅 Storage period: Font files are stored on Google for one year ⚖️ Legal bases: Art. 6 Para. 1 lit. a GDPR (Consent), Art. 6 Para. 1 lit. f GDPR (Legitimate Interests)

What are Google Fonts?

We use Google Fonts on our website. These are the “Google fonts” from Google Inc. The company Google Ireland Limited (Gordon House, Barrow Street Dublin 4, Ireland) is responsible for all Google services in the European region.

You do not need to register or enter a password to use Google fonts. Furthermore, no cookies are stored in your browser. The files (CSS, fonts) are requested via the Google domains fonts.googleapis.com and fonts.gstatic.com. According to Google, the requests for CSS and fonts are completely separate from all other Google services. If you have a Google account, you don’t need to worry that your Google account data will be transmitted to Google while using Google Fonts. Google collects the use of CSS (Cascading Style Sheets) and the fonts used and stores this data securely. We will take a closer look at what the data storage looks like in detail.

Google Fonts (formerly Google Web Fonts) is a directory with over 800 fonts that Google makes available to its users free of charge.

Many of these fonts are published under the SIL Open Font License, while others are published under the Apache License. Both are free software licenses.

Why Do We Use Google Fonts on our Website?

With Google Fonts, we can use fonts on our own website without having to upload them to our own server. Google Fonts is an important component in maintaining the high quality of our website. All Google fonts are automatically optimized for the web, which saves data volume and is a great advantage, especially for use on mobile devices. When you visit our site, the small file size ensures a fast loading time. Furthermore, Google Fonts are secure web fonts. Different image synthesis systems (rendering) in different browsers, operating systems and mobile devices can lead to errors. Such errors can sometimes visually distort texts or entire websites. Thanks to the fast Content Delivery Network (CDN), there are no cross-platform problems with Google Fonts. Google Fonts supports all common browsers (Google Chrome, Mozilla Firefox, Apple Safari, Opera) and works reliably on most modern mobile operating systems, including Android 2.2+ and iOS 4.2+ (iPhone, iPad, iPod). We use Google Fonts so that we can present our entire online service as beautifully and uniformly as possible.

What Data is Stored by Google?

When you visit our website, the fonts are reloaded via a Google server. This external call transmits data to the Google servers. This also tells Google that you or your IP address has visited our website. The Google Fonts API was developed to reduce the use, storage and collection of end-user data to what is necessary for the proper provision of fonts. API stands for “Application Programming Interface” and serves, among other things, as a data transmitter in the software sector.

Google Fonts stores CSS and font requests securely at Google and is therefore protected. Google can use the collected usage figures to determine how well the individual fonts are received. Google publishes the results on internal analysis pages, such as Google Analytics. In addition, Google also uses data from its own web crawler to determine which websites use Google fonts. This data is published in the BigQuery database of Google Fonts. Companies and developers use the Google web service BigQuery to examine and move large amounts of data.

However, it should also be noted that every Google Font request also automatically transmits information such as language settings, IP address, browser version, browser screen resolution and browser name to the Google servers. It is not clear whether this data is also stored or is not clearly communicated by Google.

How Long and where is the Data Stored?

Google stores requests for CSS assets on its servers for one day, which are mainly located outside the EU. This enables us to use the fonts with the help of a Google stylesheet. A stylesheet is a format template that can be used to quickly and easily change the design or font of a website, for example.

The font files are stored on Google for one year. Google’s goal is to improve the loading time of websites in general. If millions of websites refer to the same fonts, they are cached after the first visit and immediately reappear on all other websites visited later. Google sometimes updates font files to reduce the file size, increase language coverage, and improve the design.

How Can I Delete My Data or Prevent Data Storage?

The data that Google stores for one day or one year cannot simply be deleted. The data is automatically transmitted to Google when the page is accessed. In order to be able to delete this data prematurely, you must contact Google support at https://support.google.com/?hl=de&tid=112926478. In this case, you can only prevent data storage if you do not visit our site.

Unlike other web fonts, Google allows us unrestricted access to all fonts. We can therefore access an unlimited sea of fonts and thus get the optimum out of our website. You can find more about Google Fonts and other questions at https://developers.google.com/fonts/faq?tid=112926478. There, Google addresses data protection-related matters, but really detailed information about data storage is not included. It is relatively difficult to get really precise information about stored data from Google.

Legal Basis

If you have consented to the use of Google Fonts, the legal basis for the corresponding data processing is this consent. According to Art. 6 para. 1 lit. a GDPR (Consent) the legal basis for the processing of personal data, as may occur during collection by Google Fonts.

From our side, there is also a legitimate interest in using Google Font to optimize our online service. The corresponding legal basis for this is Art. 6 para. 1 lit. f GDPR (Legitimate Interests) . Nevertheless, we only use Google Font if you have given your consent.

Google also processes data from you in the USA, among other places. Google is an active participant in the EU-US Data Privacy Framework, which regulates the correct and secure transfer of personal data from EU citizens to the USA. More information can be found at https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en.

In addition, Google uses so-called standard contractual clauses (= Art. 46 para. 2 and 3 GDPR). Standard contractual clauses (SCC) are model templates provided by the EU Commission and are intended to ensure that your data also complies with European data protection standards when it is transferred to and stored in third countries (such as the USA). Through the EU-US Data Privacy Framework and the standard contractual clauses, Google undertakes to comply with the European level of data protection when processing your relevant data, even if the data is stored, processed and managed in the USA. These clauses are based on an implementing decision of the EU Commission. You can find the decision and the corresponding standard contractual clauses here, among other places: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de

The Google Ads Data Processing Terms, which refer to the standard contractual clauses, can be found at https://business.safety.google/intl/de/adsprocessorterms/.

You can also read about what data is generally collected by Google and what this data is used for at https://www.google.com/intl/de/policies/privacy/.

Online Map Services Introduction

Online map services privacy policy summary 👥 Affected: Website visitors 🤝 Purpose: Improving the user experience 📓 Processed data: Which data is processed depends heavily on the services used. This usually includes IP address, location data, search items and/or technical data. More details can be found in the tools used. 📅 Storage period: depends on the tools used ⚖️ Legal basis: Art. 6 para. 1 lit. a GDPR (Consent), Art. 6 para. 1 lit. f GDPR (Legitimate Interests)

What are Online Map Services?

We also use online map services for our website as an extended service. Google Maps is probably the service you are most familiar with, but there are also other providers that specialize in creating digital maps. Such services make it possible to display locations, route plans or other geographical information directly via our website. With an integrated map service, you no longer have to leave our website to view the route to a location, for example. In order for the online map to work on our website, map sections are integrated using HTML code. The services can then display road maps, the earth’s surface or aerial or satellite images. If you use the built-in map service, data will also be transferred to the tool used and stored there. This data may also include personal data.

Why Do We Use Online Map Services on our Website?

Generally speaking, it is our aim to offer you a pleasant time on our website. And of course, your time is only pleasant if you can easily find your way around our website and quickly and easily find all the information you need. That’s why we thought an online map system could be a significant optimization of our service on the website. Without leaving our website, you can easily view route descriptions, locations or even sights with the help of the map system. Of course, it is also super practical that you can see at a glance where our company headquarters are so that you can find us quickly and safely. You see, there are simply many advantages and we clearly see online map services on our website as part of our customer service.

What Data is Stored by Online Map Services?

When you open a page on our website that has an online map function built in, personal data can be transmitted to the respective service and stored there. This is usually your IP address, which can also be used to determine your approximate location. In addition to the IP address, data such as entered search terms and longitude and latitude coordinates are also stored. If you enter an address for route planning, this data will also be stored. The data is not stored with us, but on the servers of the integrated tools. You can imagine it like this: you are on our website, but when you interact with a map service, this interaction actually happens on their website. In order for the service to function properly, at least one cookie is usually set in your browser. Google Maps, for example, also uses cookies to record user behavior and thus optimize its own service and display personalized advertising. You can find out more about cookies in our “Cookies” section.

How Long and where is the Data Stored?

Each online map service processes different user data. If we have further information, we will inform you about the duration of data processing further down in the corresponding sections on the individual tools. In principle, personal data is always only stored for as long as is necessary for the provision of the service. Google Maps, for example, stores certain data for a fixed period, while you have to delete other data yourself. With Mapbox, for example, the IP address is stored for 30 days and then deleted. As you can see, each tool stores data for different lengths of time. We therefore recommend that you take a close look at the privacy statements of the tools used.

The providers also use cookies to store data about your user behavior with the map service. You can find more general information about cookies in our “Cookies” section, but you can also find out which cookies can be used in the data protection texts of the individual providers. In most cases, however, this is only an example list and is not complete.

Right to Object

You always have the option and also the right to access your personal data and to object to its use and processing. You can also revoke your consent, which you have given us, at any time. As a rule, the easiest way to do this is via the cookie consent tool. But there are also other opt-out tools that you can use. You can also manage, delete or deactivate possible cookies that are set by the providers used yourself with just a few mouse clicks. However, it may then happen that some functions of the service no longer work as usual. How you manage cookies in your browser also depends on the browser you are using. In the “Cookies” section you will also find links to the instructions for the most important browsers.

Legal Basis

If you have consented to the use of an online map service, the legal basis for the corresponding data processing is this consent. According to Art. 6 Para. 1 lit. a GDPR (consent), this consent constitutes the legal basis for the processing of personal data, as can occur when it is collected by an online map service.

We also have a legitimate interest in using an online map service to optimize our service on our website. The corresponding legal basis for this is Art. 6 Para. 1 lit. f GDPR (legitimate interests). However, we only ever use an online map service if you have given your consent. We would like to emphasize this again at this point.

Information on Special Online Map Services is Available – if Available – in the Following Sections.

Google Maps Privacy Policy

Google Maps privacy policy summary 👥 Affected: Website visitors 🤝 Purpose: Optimization of our service 📓 Processed data: Data such as entered search terms, your IP address and also the latitude and longitude coordinates. More details can be found further down in this privacy policy. 📅 Storage period: depends on the stored data ⚖️ Legal basis: Art. 6 para. 1 lit. a GDPR (Consent), Art. 6 para. 1 lit. f GDPR (Legitimate Interests)

What is Google Maps?

We use Google Maps from Google Inc. on our website. For the European area, the company Google Ireland Limited (Gordon House, Barrow Street Dublin 4, Ireland) is responsible for all Google services. With Google Maps, we can show you locations better and thus adapt our service to your needs. By using Google Maps, data is transferred to Google and stored on the Google servers. Here we would now like to go into more detail about what Google Maps is, why we use this Google service, what data is stored and how you can prevent this.

Google Maps is an internet map service from Google. With Google Maps, you can search online via a PC, tablet or app for exact locations of cities, sights, accommodations or companies. If companies are represented on Google My Business, additional information about the company is displayed in addition to the location. To display the directions, map sections of a location can be integrated into a website using HTML code. Google Maps shows the earth’s surface as a road map or as an aerial or satellite image. Thanks to the Street View images and the high-quality satellite images, very precise representations are possible.

Why Do We Use Google Maps on our Website?

All our efforts on this page are aimed at offering you a useful and meaningful time on our website. By integrating Google Maps, we can provide you with the most important information about various locations. You can see at a glance where our company headquarters are. The directions always show you the best or fastest way to us. You can retrieve the directions for routes by car, public transport, on foot or by bicycle. For us, the provision of Google Maps is part of our customer service.

What Data is Stored by Google Maps?

In order for Google Maps to be able to offer its service in full, the company must collect and store data from you. This includes the search terms you enter, your IP address and also the latitude and longitude coordinates. If you use the route planner function, the start address you enter will also be saved. However, this data storage happens on the Google Maps websites. We can only inform you about this, but cannot influence it. Since we have integrated Google Maps into our website, Google sets at least one cookie (name: NID) in your browser. This cookie stores data about your user behavior. Google primarily uses this data to optimize its own services and to provide you with individual, personalized advertising.

The following cookie is set in your browser due to the integration of Google Maps:

Name: NID
Value: 188=h26c1Ktha7fCQTx8rXgLyATyITJ112926478-5
Purpose: NID is used by Google to tailor advertisements to your Google search. With the help of the cookie, Google “remembers” your most frequently entered search queries or your previous interaction with advertisements. This way you always get tailor-made advertisements. The cookie contains a unique ID that Google uses to collect your personal settings for advertising purposes.
Expiration date: after 6 months

Note: We cannot guarantee the completeness of the information on the stored data. Changes can never be ruled out, especially when using cookies. To identify the cookie NID, a separate test page was created where only Google Maps was integrated.

How Long and where is the Data Stored?

The Google servers are located in data centers all over the world. However, most servers are located in America. For this reason, your data is also increasingly stored in the USA. Here you can read exactly where the Google data centers are located: https://www.google.com/about/datacenters/locations/?hl=de

Google distributes the data across various data carriers. This makes the data quicker to retrieve and better protected against any manipulation attempts. Each data center also has special emergency programs. For example, if there are problems with the Google hardware or a natural disaster paralyzes the servers, the data will remain pretty safe anyway.

Google stores some data for a fixed period. For other data, Google only offers the option of deleting it manually. Furthermore, the company also anonymizes information (such as advertising data) in server logs by deleting part of the IP address and cookie information after 9 or 18 months.

How Can I Delete My Data or Prevent Data Storage?

With the automatic deletion function for location and activity data introduced in 2019, information on location and web/app activity is stored for either 3 or 18 months – depending on your decision – and then deleted. In addition, you can also manually delete this data from the history via the Google account at any time. If you want to completely prevent your location from being recorded, you must pause the “Web and App Activity” section in your Google account. Click “Data and Personalization” and then on the “Activity Setting” option. Here you can switch the activities on or off.

You can also deactivate, delete or manage individual cookies in your browser. Depending on which browser you use, this always works a little differently. Under the section “Cookies” you will find the corresponding links to the respective instructions for the most well-known browsers.

If you do not want any cookies at all, you can set up your browser so that it always informs you when a cookie is to be set. This allows you to decide whether to allow each individual cookie or not.

Legal Basis

If you have consented to the use of Google Maps, the legal basis for the corresponding data processing is this consent. According to Art. 6 para. 1 lit. a GDPR (Consent) the legal basis for the processing of personal data, as may occur during collection by Google Maps.

From our side, there is also a legitimate interest in using Google Maps to optimize our online service. The corresponding legal basis for this is Art. 6 para. 1 lit. f GDPR (Legitimate Interests) . Nevertheless, we only use Google Maps if you have given your consent.

Google also processes data from you in the USA, among other places. Google is an active participant in the EU-US Data Privacy Framework, which regulates the correct and secure transfer of personal data from EU citizens to the USA. More information can be found at https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en.

In addition, Google uses so-called standard contractual clauses (= Art. 46 para. 2 and 3 GDPR). Standard contractual clauses (SCC) are model templates provided by the EU Commission and are intended to ensure that your data also complies with European data protection standards when it is transferred to and stored in third countries (such as the USA). Through the EU-US Data Privacy Framework and the standard contractual clauses, Google undertakes to comply with the European level of data protection when processing your relevant data, even if the data is stored, processed and managed in the USA. These clauses are based on an implementing decision of the EU Commission. You can find the decision and the corresponding standard contractual clauses here, among other places: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de

The Google Ads Data Processing Terms, which refer to the standard contractual clauses, can be found at https://business.safety.google/intl/de/adsprocessorterms/.

If you would like to find out more about data processing by Google, we recommend that you read the company’s own privacy policy at https://policies.google.com/privacy?hl=de.

Explanation of Terms Used

We always strive to write our privacy policy as clearly and understandably as possible. However, this is not always easy, especially with technical and legal topics. It often makes sense to use legal terms (such as personal data) or certain technical terms (such as cookies, IP address). However, we do not want to use these without explanation. Below you will now find an alphabetical list of important terms used that we may not have addressed sufficiently in the previous privacy policy. If these terms were taken from the GDPR and are definitions, we will also list the GDPR texts here and add our own explanations if necessary.

Processor

Definition according to Article 4 of the GDPR

For the purposes of this Regulation, the term:

“processor” means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller;

Explanation: As a company and website owner, we are responsible for all data that we process from you. In addition to the controllers, there may also be so-called processors. This includes any company or person who processes personal data on our behalf. Processors can therefore be, in addition to service providers such as tax consultants, also hosting or cloud providers, payment or newsletter providers or large companies such as Google or Microsoft.

Consent

Definition according to Article 4 of the GDPR

For the purposes of this Regulation, the term:

“consent” of the data subject means any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her;

Explanation: As a rule, such consent is given on websites via a cookie consent tool. You probably know this. Whenever you visit a website for the first time, you are usually asked via a banner whether you agree to the data processing or give your consent. In most cases, you can also make individual settings and decide for yourself which data processing you allow and which you do not. If you do not consent, no personal data may be processed from you. In principle, consent can of course also be given in writing, i.e. not via a tool.

Personal Data

Definition according to Article 4 of the GDPR

For the purposes of this Regulation, the term:

“personal data” means any information relating to an identified or identifiable natural person (“data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;

Explanation: Personal data is therefore all data that can identify you as a person. This is usually data such as:

• Name
• Address
• E-mail address
• Postal address
• Telephone number
• Date of birth
• Identification numbers such as social security number, tax identification number, identity card number or matriculation number
• Bank details such as account number, credit information, account balances, etc.

According to the European Court of Justice (ECJ), your IP address is also considered personal data. IT experts can use your IP address to determine at least the approximate location of your device and, subsequently, you as the connection owner. Therefore, storing an IP address also requires a legal basis within the meaning of the GDPR. There are also so-called “special categories” of personal data, which are also particularly worthy of protection. These include:

• racial and ethnic origin
• political opinions
• religious or philosophical beliefs
• trade union membership
• genetic data such as data taken from blood or saliva samples
• biometric data (this is information on psychological, physical or behavioral characteristics that can identify a person).
  Health data
• Data on sexual orientation or sex life

Profiling

Definition according to Article 4 of the GDPR

For the purposes of this Regulation, the term:

“profiling” means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects concerning that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behavior, location or movements;

Explanation: Profiling involves collecting various pieces of information about a person in order to find out more about that person. In the web area, profiling is often used for advertising purposes or also for credit checks. Web or advertising analysis programs, for example, collect data about your behavior and your interests on a website. This results in a special user profile, which can be used to target advertising to a target group.

Controller

Definition according to Article 4 of the GDPR

For the purposes of this Regulation, the term:

“controller” means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law;

Explanation: In our case, we are responsible for the processing of your personal data and are therefore the “controller”. If we pass on collected data to other service providers for processing, these are “processors”. A “data processing agreement (DPA)” must be signed for this.

Processing

Definition according to Article 4 of the GDPR

For the purposes of this Regulation, the term:

“processing” means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;

Note: When we speak of processing in our privacy policy, we mean any type of data processing. As mentioned above in the original GDPR declaration, this includes not only the collection but also the storage and processing of data.

All texts are protected by copyright.

Source: Privacy policy created with the privacy policy generator for Austria from AdSimple