Data protection

Introduction and overview

We have written this data protection declaration (version 12/18/2021-121901888) to provide you with the requirements of theGeneral Data Protection Regulation (EU) 2016/679and applicable national laws to explain what personal data (short data) we consider Those responsible – and the processors commissioned by us (e.g. providers) – process, will be processed in the future and what legal options you have. The terms used are to be understood as gender-neutral.
In short: We will inform you comprehensively about the data we process about you.

Privacy policies usually sound very technical and use legal terms. This The data protection declaration, on the other hand, should tell you the most important things as simply and transparently as possible describe. To the extent that it promotes transparency, technical terms become reader-friendly explained, links to further information are provided and graphics are used. We inform so in clear and simple language that we only do so in the context of our business activities process personal data if there is a corresponding legal basis. That`s for sure not possible if you make as brief, unclear and legal-technical explanations as possible, as in the Internet are often standard when it comes to data protection. I hope you find the following explanations interesting and informative and perhaps there is one or two pieces of information that you don`t already know knew.
If you still have any questions, we would like to ask you to contact us at the address listed below or in the legal notice contact the responsible body, follow the links provided and obtain further information View third-party sites. You can of course also find our contact details in the legal notice.

Application

This data protection declaration applies to all personal data processed by us in the company and for all personal data that companies commissioned by us (contract processors) process. With By personal data we mean information within the meaning of Article 4 No. 1 GDPR such as name, An individual`s email address and postal address. The processing of personal data ensures that that we can offer and bill our services and products, be it online or offline. The The scope of this data protection declaration includes:

• all online presences (websites, online shops) that we operate
• Social media appearances and email communication
• mobile apps for smartphones and other devices

In short: The data protection declaration applies to all areas in which personal data processed in a structured manner within the company via the channels mentioned. Should we go outside these channels If we enter into legal relationships with you, we will inform you separately if necessary.

Legal basis

In the following data protection declaration we provide you with transparent information about the legal aspects Principles and regulations, i.e. the legal basis of the General Data Protection Regulation, which enable us to to process personal data.
As far as EU law is concerned, we refer to REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of April 27, 2016. You can of course access this EU General Data Protection Regulation online on EUR-Lex, access to EU lawhttps://eur-lex.europa.eu/legal-content/DE/TXT/?uri=celex%3A32016R0679read up.

We only process your data if at least one of the following conditions applies:

1. Consent (Article 6 paragraph 1 lit. a GDPR): You have given us your consent, Process data for a specific purpose. An example would be storing the data you have entered a contact form.
2. Contract (Article 6 paragraph 1 lit. b GDPR): To conclude a contract or pre-contractual To fulfill our obligations to you, we process your data. For example, if we have a sales contract To conclude a contract with you, we need personal information in advance.
3. Legal obligation (Article 6 paragraph 1 lit. c GDPR): If we are subject to a legal obligation We process your data under our obligation. For example, we are legally obliged Keep invoices for accounting. These usually contain personal data.
4. Legitimate interests (Article 6 paragraph 1 lit. f GDPR): In the case of legitimate interests, that do not restrict your fundamental rights, we reserve the right to process personal data. We For example, we need to process certain data to make our website secure and economically efficient to be able to operate. This processing is therefore a legitimate interest.

Further conditions such as the perception of recordings in the public interest and the exercise of public authority As a rule, violence and the protection of vital interests do not occur here. So much for such a thing If the legal basis is relevant, it will be shown in the appropriate place.

In addition to the EU regulation, national laws also apply:

• In Austria this is the federal law for the protection of natural persons Processing of personal data (Data Protection Act), DSG for short.
• In Germany the Federal Data Protection Act, or BDSG for short, applies.

If other regional or national laws apply, we will inform you in the following sections above.

Contact details of the person responsible

If you have any questions about data protection, you will find the contact details of the responsible person below or position:
Peter Öttl
1220 Vienna

Email: hello@peteroettl.com

Imprint:https://peteroettl.com/imprint

Storage duration

That we only store personal data for as long as it is necessary to provide our services and products is absolutely necessary is a general criterion for us. This means that we delete personal data as soon as the reason for data processing no longer exists. In In some cases we are legally obliged to keep certain data even after the original data has been lost For storage purposes, for example for accounting purposes.

If you wish to have your data deleted or revoke your consent to data processing the data will be deleted as quickly as possible and unless there is an obligation to store it.

We will inform you below about the specific duration of the respective data processing, provided we have further information have information about it.

Rights according to the General Data Protection Regulation

According to Article 13 GDPR, you have the following rights to ensure a fair and transparent process Processing of data comes:

• According to Article 15 GDPR, you have a right to information as to whether we are processing your data. should that apply, you have the right to receive a copy of the data and the following information experience:
  • for what purpose we carry out the processing;
  • the categories, i.e. the types of data that are processed;
  • who receives this data and if the data is transferred to third countries, how security can be guaranteed;
  • how long the data is stored;
  • the existence of the right to rectification, deletion or restriction of processing and the Right to object to processing;
  • that you can complain to a supervisory authority (links to these authorities can be found below below);
  • the origin of the data if we did not collect it from you;
  • whether profiling is carried out, i.e. whether data is automatically evaluated in order to create a personal one to get to your profile.
• According to Article 16 GDPR, you have the right to correct the data, which means that we correct the data if you find any errors.
• According to Article 17 GDPR, you have the right to deletion (“right to be forgotten”), which specifically means: that you can request the deletion of your data.
• According to Article 18 GDPR, you have the right to restriction of processing, which means that we Data can only be saved but not used any further.
• According to Article 19 GDPR, you have the right to data portability, which means that we can provide you with it upon request Make your data available in a common format.
• According to Article 21 GDPR, you have a right to object, which, once enforced, requires a change to the processing entails.
  • If the processing of your data is based on Article 6 Para. 1 lit. e (public interest, exercise public authority) or Article 6 Paragraph 1 Letter f (legitimate interest), you can object to this Object to processing. We will then check as quickly as possible whether we have this contradiction can comply legally.
  • If data is used to conduct direct advertising, you can object to this type of advertising at any time Object to data processing. We may then no longer use your data for direct marketing.
  • If data is used to carry out profiling, you can object to this type of processing at any time Object to data processing. We are then no longer allowed to use your data for profiling.
• According to Article 22 GDPR, you may have the right not to rely solely on one to be subject to automated processing (e.g. profiling) decisions.

In short: You have rights – Do not hesitate to contact the responsible person listed above Contact us!

If you believe that the processing of your data violates data protection law or your If your data protection claims have been violated in any other way, you can contact us complain to the supervisory authority. For Austria, this is the data protection authority, whose website you can find athttps://www.dsb.gv.at/find. In Germany there is a data protection officer for each federal state. For more information you can contact theFederal Commissioner for Data Protection and Freedom of Information (BfDI)turn around. The following local data protection authority is responsible for our company:

Austria Data Protection Authority

Mag. Andrea Jelinek
Barichgasse 40-42, 1030 Vienna
+43 1 52 152-0
dsb@dsb.gv.at
https://www.dsb.gv.at/

Security of data processing

To protect personal data, we have both technical and organizational measures implemented. Where possible, we encrypt or pseudonymize personal data. Through this As far as we can, we make it as difficult as possible for third parties to access our data personal information.

Art. 25 GDPR speaks here of “data protection through technology design and through data protection-friendly”. Preferences” and by this means that you can use both software (e.g. forms) and hardware (e.g. access to the server room) always thinks about security and takes appropriate measures. Go to the following If necessary, we will take concrete measures.

TLS encryption with https

TLS, encryption and https sound very technical and they are. We use HTTPS (the hypertext Transfer Protocol Secure stands for “secure hypertext transfer protocol”) to ensure that data cannot be intercepted Internet to transmit.
This means that the complete transmission of all data from your browser to our web server is secured is – no one can “eavesdrop”.

We have thus introduced an additional security layer and ensure data protection Technology designArticle 25 paragraph 1 GDPR). By using TLS (Transport Layer Security), an encryption protocol for secure Data transmission over the Internet, we can ensure the protection of confidential data.
You can recognize the use of this data transfer protection by the small lock symboltop left in the browser, to the left of the internet address (e.g. examplepage.de) and the use of the schema https (instead of http) as part of our internet address.
If you would like to know more about encryption, we recommend searching Google for “Hypertext Transfer Protocol Secure wiki” to get good links to further information.

Communication

If you contact us and communicate by telephone, email or online form, this may result in: Processing of personal data comes.

The data is used to process and process your question and the related issues business transaction processed. The data is stored for the same amount of time or as long as the law requires prescribes.

Affected people

The processes mentioned affect everyone who uses the communication channels we provide Find contact with us.

Telephone

When you call us, the call data is stored on the respective device and the device used Telecommunications provider stored pseudonymously. In addition, data such as name and telephone number can be stored in the Subsequently sent by email and saved for answering inquiries. The data will be deleted as soon as the business transaction has been completed and legal requirements allow it.

Email

If you communicate with us via email, data may be stored on the respective device (computer, Laptop, smartphone,…) and data is stored on the email server. The Data will be deleted as soon as the business transaction has ended and legal requirements allow it.

Online forms

If you communicate with us using an online form, data will be stored on our web server If necessary, forwarded to one of our email addresses. The data will be deleted as soon as Business transaction has been ended and legal requirements allow it.

Legal basis

The processing of the data is based on the following legal bases:

• Art. 6 Para. 1 lit. a GDPR (consent): You give us your consent to store and pass on your data to use it for purposes relevant to the business transaction;
• Art. 6 Paragraph 1 Letter b GDPR (contract): There is a need for the fulfillment of a contract with You or a processor such as B. the telephone provider or we need the data for pre-contractual activities, such as B. the preparation of an offer;
• Art. 6 Para. 1 lit. f GDPR (legitimate interests): We want customer inquiries and business Communicate in a professional manner. For this purpose, certain technical facilities such as: E-mail programs, exchange servers and mobile phone operators are necessary to ensure efficient communication to be able to operate.

Cookies

What are cookies?

Our website uses HTTP cookies to store user-specific data.
Below we explain what cookies are and why they are used so that you can: Better understand privacy policy.

Whenever you surf the Internet, you use a browser. Well-known browsers are, for example Chrome, Safari, Firefox, Internet Explorer and Microsoft Edge. Most websites store small ones Text files in your browser. These files are called cookies.

One thing cannot be denied: Cookies are really useful little helpers. Almost all websites use it Cookies. To be more precise, they are HTTP cookies, as there are also other cookies for other areas of application gives. HTTP cookies are small files that our website stores on your computer. This Cookie files are automatically stored in the cookie folder, the “brain” so to speak. your browser, accommodated. A cookie consists of a name and a value. When defining a cookie you must one or more attributes can also be specified.

Cookies store certain user data about you, such as language or personal information Page settings. When you visit our site again, your browser transmits the “user-related” Information back to our site. Thanks to cookies, our website knows who you are and offers you the Setting that you are used to. In some browsers each cookie has its own file, in others like For example, Firefox stores all cookies in a single file.

The following graphic shows a possible interaction between a web browser such as: B. Chrome and that Web server. The web browser requests a website and receives a cookie from the server, which is the Browser reused whenever another page is requested.

There are both first-party cookies and third-party cookies. First-party cookies are set directly by our site, third-party cookies are created by partner websites (e.g. Google Analytics). Each cookie must be evaluated individually because each cookie stores different data. Also the expiration time of one Cookies varies from a few minutes to a few years. Cookies are not software programs and do not contain any viruses, Trojans or other “pests”. Cookies also cannot access your information Access PCs.

For example, cookie data may look like this:

Name: _ga
Value:GA1.2.1326744211.152121901888-9
Purpose: Differentiation of website visitors
Expiry date: after 2 years

A browser should be able to support these minimum sizes:

• At least 4096 bytes per cookie
• At least 50 cookies per domain
• At least 3000 cookies in total

What types of cookies are there?

The question of which cookies we use in particular depends on the services used and is discussed in the clarified in the following sections of the data protection declaration. At this point we would like to briefly address the different types of HTTP cookies.

There are 4 types of cookies:

Essential cookies
These cookies are necessary to ensure basic functions of the website. For example, it needs These cookies when a user puts a product in the shopping cart, then continues surfing on other sites and later just go to the checkout. These cookies do not delete the shopping cart, even if the user is Browser window closes.

Purposeful cookies
These cookies collect information about user behavior and whether the user receives any error messages. In addition These cookies also determine the loading time and behavior of the website on different browsers measured.

Targeting cookies
These cookies ensure better user experience. For example, entered locations, Font sizes or form data saved.

Advertising cookies
These cookies are also called targeting cookies. They serve to provide individually tailored advertising to the user to deliver. This can be very practical, but also very annoying.

When you first visit a website, you will usually be asked which of these types of cookies you allow want. And of course this decision is also saved in a cookie.

If you would like to know more about cookies and are not afraid of technical documentation, we recommendhttps://tools.ietf.org/html/rfc6265, the Request for Comments from the Internet Engineering Task Force (IETF) called “HTTP State Management Mechanism”.

Purpose of processing via cookies

The purpose ultimately depends on the respective cookie. You can find more details below or at Manufacturer of the software that sets the cookie.

What data is processed?

Cookies are little helpers for many different tasks. What data is stored in cookies Unfortunately, we cannot generalize, but we will inform you in the following data protection declaration inform you about the processed or stored data.

Storage period of cookies

The storage period depends on the respective cookie and is further specified below. Some cookies are stored after deleted in less than an hour, others can remain stored on a computer for several years.

You also have an influence on the storage period. You can access all cookies via your browser Delete manually at any time (see also “Right to object” below). Furthermore, cookies that are on are based on consent, deleted at the latest after revocation of your consent, whereby the legality of the Storage remains unaffected until then.

Right to object – how can I delete cookies?

You decide for yourself how and whether you want to use cookies. Regardless of which service or which one From the website where cookies come from, you always have the option to delete cookies, deactivate them or just partially allow. For example, you can block third-party cookies but all other cookies allow.

If you would like to find out which cookies have been stored in your browser when you If you want to change or delete cookie settings, you can do this in your browser settings:

Chrome: Delete, enable and manage cookies in Chrome

Safari: Manage cookies and site data with Safari

Firefox: Delete cookies to remove data that websites have placed on your computer

Internet Explorer: Deleting and managing cookies

Microsoft Edge: Deleting and managing cookies

If you generally do not want cookies, you can set your browser so that it always allows you to do so informs you when a cookie is to be set. This means you can decide for each individual cookie whether you Allow the cookie or not. The procedure varies depending on the browser. The best thing to do is look for them Instructions in Google with the search term “Delete cookies Chrome” or “Deactivate cookies Chrome” in the case of a Chrome browser.

Legal basis

The so-called “Cookie Guidelines” have existed since 2009. It states that the storage of cookies consent (Article 6 Para. 1 lit. a GDPR) is required from you. Within the EU countries there are However, there are still very different reactions to these guidelines. But this happened in Austria Implementation of this directive in Section 96 Paragraph 3 of the Telecommunications Act (TKG). In Germany they were Cookie policy not implemented as national law. Instead, this directive was implemented largely in Section 15 Paragraph 3 of the Telemedia Act (TMG).

For absolutely necessary cookies, even if consent is not given. there are legitimate ones Interests (Article 6 Para. 1 lit. f GDPR), which in most cases are of an economic nature. We would like Provide visitors to the website with a pleasant user experience and certain cookies are often used for this purpose indispensable.

If non-essential cookies are used, this only happens in your case Consent. The legal basis in this respect is Article 6 Paragraph 1 Letter a GDPR.

In the following sections you will be informed in more detail about the use of cookies, if any Software uses cookies.

Web hosting introduction

What is web hosting?

When you visit websites these days, certain information – also personal data – automatically created and saved, including on this website. This data should be as possible processed sparingly and only with justification. By the way, by website we mean the entirety of everything Websites on a domain, i.e. everything from the start page (homepage) to the very last subpage (like this one here). By domain we mean, for example, example.de or musterexample.com.

If you want to view a website on a screen, use a program that is Web browser called. You probably know a few web browsers by name: Google Chrome, Microsoft Edge, Mozilla Firefox and Apple Safari.

This web browser needs to connect to another computer where the website code is stored: the Web server. Operating a web server is a complicated and time-consuming task, which is why this is the case As a rule, it is taken over by professional providers, the providers. They offer and provide web hosting This ensures reliable and error-free storage of website data.

When connecting to the browser on your computer (desktop, laptop, smartphone) and during Data transmission to and from the web server may result in the processing of personal data. On the one hand your computer stores data, on the other hand the web server also has to store data for a while in order to to ensure proper operation.

For illustrative purposes:

Why do we process personal data?

The purposes of data processing are:

1. Professional hosting of the website and security of operations
2. to maintain operational and IT security
3. Anonymous evaluation of access behavior to improve our offering and, if necessary, for criminal prosecution or pursuing claims

What data is processed?

Even while you are visiting our website, our web server, which is the computer on which This website usually automatically stores data such as

• the complete Internet address (URL) of the website accessed (e.g. https://www.examplewebsite.de/exampleunterseite.html?tid=121901888)
• Browser and browser version (e.g. Chrome 87)
• the operating system used (e.g. Windows 10)
• the address (URL) of the previously visited page (referrer URL) (e.g. https://www.beispielquellsite.de/vondabinichkommen.html/)
• the host name and IP address of the device from which access is made (e.g. COMPUTERNAME and 194.23.43.121)
• Date and time
• in files, the so-called web server log files

How long is data stored?

As a rule, the above-mentioned data is stored for two weeks and then automatically deleted. We do not pass on this data, but cannot rule out that this data is available illegal behavior can be viewed by authorities.

In short: Your visit is managed by our provider (company that runs our website on a specific basis computers (servers)), logged, but we will not pass on your data without your consent!

Legal basis

The lawfulness of the processing of personal data in the context of web hosting results from Article 6 Paragraph 1 lit. f GDPR (protection of legitimate interests), because the use of professional hosting A provider is necessary to present the company on the Internet in a secure and user-friendly manner To be able to pursue attacks and claims resulting from them if necessary.

There is usually a contract for order processing between us and the hosting provider in accordance with Art. 28 f. GDPR, which ensures compliance with data protection and guarantees data security.

Vercel

We use Vercel, a cloud deployment platform, on our website. Service provider is the American one Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789.

Vercel also processes your data in the USA, among other places. We would like to point out that, in the opinion of... According to the European Court of Justice, there is currently no adequate level of protection for data transfer to the USA. This can pose various risks to the lawfulness and security of data processing.

As the basis for data processing for recipients based in third countries (outside the European Union, Iceland, Liechtenstein, Norway, especially in the USA) or a data transfer there We use Vercel, a cloud deployment platform, on our website. so-called standard contractual clauses (= Art. 46 Paragraphs 2 and 3 GDPR). Standard Contractual Clauses (SCC) are from the The sample templates provided by the EU Commission are intended to ensure that your data is still available comply with European data protection standards if they are sent to third countries (such as the USA) transmitted and stored there. Through these clauses, Vercel undertakes to process the data Your relevant data to comply with the European data protection level, even if the data is in the USA stored, processed and managed. These clauses are based on an implementing decision of the EU Commission. You can find the resolution and the corresponding standard contractual clauses here:https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de

The Data Processing Addendum, which corresponds to the standard contractual clauses, can be found athttps://vercel.com/legal/Vercel_Inc_-_Data_Processing_Addendum.pdf.

You can find out more about the data processed through the use of Vercel in the Privacy Policy policyhttps://vercel.com/legal/privacy-policy.

The data processing conditions (Data Processing Addendum), which correspond to the standard contractual clauses, can be found athttps://sentry.io/legal/dpa/

You can find out more about the data processed through the use of Sentry in the Data protection declarationhttps://sentry.io/privacy/

All texts are protected by copyright.

Source: Created with thePrivacy Generatorby AdSimple