As of June 25, 2023
Table of Contents
- Responsible
- Overview of processing
- Relevant legal bases
- Security Measures
- Transmission of personal data
- International data transfers
- Deletion of data
- Rights of data subjects
- Use of cookies
- Provision of the online offer and web hosting
- Contact and request management
- Presence in social networks (social media)
- Plugins and embedded functions and content
Responsible person
Michael Ralle
Franz-Fischer-Strasse 26
6020 Innsbruck
Relevant legal bases
Relevant legal basis according to the GDPR: In the following you will receive a Overview of the legal bases of the GDPR on the basis of which we process personal data process. Please note that in addition to the provisions of the GDPR, national Data protection regulations may apply in your or our country of residence or domicile. Should also in If more specific legal bases are relevant in individual cases, we will inform you of them in the Privacy Policy with.
- Consent (Art. 6 Para. 1 S. 1 lit. a) GDPR) - The data subject has their consent to the processing of their personal data for a specific purpose or multiple specific purposes.
- Performance of contract and pre-contractual inquiries (Art. 6 Para. 1 S. 1 lit. b) GDPR) - The processing is necessary for the performance of a contract whose The contracting party is the data subject, or to carry out pre-contractual measures required, which are made at the request of the data subject.
- Legitimate interests (Art. 6 Para. 1 S. 1 lit. f) GDPR) - The Processing is to protect the legitimate interests of the person responsible or one Third parties required, unless the interests or fundamental rights and freedoms of data subject, which require the protection of personal data, prevail.
National data protection regulations in Austria: In addition to the Data protection regulations of the GDPR apply to national data protection regulations in Austria. This includes in particular the Federal Act on the Protection of Natural Persons in Processing personal data (Data Protection Act – DSG). The Data Protection Act contains in particular Special regulations on the right to information, the right to rectification or deletion, the Processing of special categories of personal data, for processing for other purposes and for transmission and automated decision-making in individual cases.
Overview of processing
The overview below summarizes the types of data processed and the purposes for which they are processed Processing together and refers to the data subjects.
Types of data processed
- Inventory data.
- Contact details.
- Content data.
- Usage data.
- Meta, communication and procedural data.
Categories of data subjects
- Communication partner.
- Users.
Purposes of processing
- Contact requests and communication.
- Security measures.
- Managing and responding to requests.
- Feedback.
- Marketing.
- Profiles with user-related information.
- Provision of our online offer and user-friendliness.
- Information technology infrastructure.
Security Measures
We meet in accordance with the legal requirements, taking into account the state of the art, the cost of implementation and the nature, scope, circumstances and purposes of Processing as well as the different probabilities of occurrence and the extent of the Threats to the rights and freedoms of natural persons appropriate technical and organizational measures to ensure a level of protection appropriate to the risk.
The measures include, in particular, ensuring confidentiality, integrity and Availability of data by controlling physical and electronic access to the data as well as the access, input, disclosure, security of the availability and their separation. Furthermore, we have set up procedures that Exercising the rights of data subjects, the deletion of data and reactions to the endangerment of data ensure data. Furthermore, we already take the protection of personal data into account the development or selection of hardware, software and processes according to the principle of Data protection, through technology design and through data protection-friendly default settings.
TLS encryption (https): In order to protect your data transmitted via our online offer, we use TLS encryption. You can recognize such encrypted connections by the Prefix https:// in the address line of your browser.
Transmission of personal data
As part of our processing of personal data, it happens that the data is passed on to others Bodies, companies, legally independent organizational units or persons are transmitted or disclosed to them. The recipients of this data can e.g IT tasks commissioned service providers or providers of services and content, which in a Website are included, belong. In such cases, we observe the legal requirements and in particular conclude corresponding contracts or agreements that protect your Data serve with the recipients of your data.
International data transfers
Data processing in third countries: If we process data in a third country (i.e. outside the European Union (EU), the European Economic Area (EEA)) or the Processing in the context of the use of third-party services or the disclosure or Transmission of data to other persons, bodies or companies takes place, this takes place only in accordance with legal requirements.
Subject to express consent or as required by contract or law We only process or leave the data in third countries with a recognized transmission Level of data protection, contractual obligation through so-called standard protection clauses EU Commission, at
Deletion of data
The data processed by us will be deleted in accordance with the legal requirements as soon as their consent to processing is revoked or other permissions no longer apply (e.g. if the purpose of processing this data no longer applies or if it is used for the purpose are not required). Unless the data is deleted because it is for others and legally permissible purposes are required, their processing will be based on these purposes limited. This means that the data will be blocked and not processed for other purposes. That's true e.g. for data that must be kept for commercial or tax reasons or their storage for the assertion, exercise or defense of legal claims or for Protection of the rights of another natural or legal person is required.
Our data protection information can also contain further information on the storage and deletion of Contain data that apply primarily to the respective processing.
Rights of data subjects
Rights of the data subjects under the GDPR: You are the data subject under the GDPR various rights, which result in particular from Articles 15 to 21 GDPR:
- Right to object: You have the right to object for reasons that arise from your particular situation arise, at any time against the processing of personal data concerning you objection to data collected on the basis of Article 6(1)(e) or (f) GDPR; this also applies to profiling based on these provisions. Will you processed personal data concerned in order to operate direct advertising, you have the right to object at any time to the processing of data concerning you submit personal data for the purpose of such advertising; this also applies to that Profiling to the extent related to such direct marketing.
- Right to withdraw consent: You have the right to revoke granted revoke consent at any time.
- Right of access: You have the right to request confirmation that whether the data in question is being processed and for information about this data and other information Information and copy of the data in accordance with the legal requirements.
- Right to rectification: You have the legal requirements the right to have the data concerning you completed or corrected to request incorrect data in question.
- Right to erasure and restriction of processing: You have after In accordance with the legal requirements, you have the right to demand that data relating to you be deleted immediately, or alternatively in accordance with the legal requirements to demand restriction of the processing of the data.
- Right to data portability: You have the right to data concerning you, that you have provided to us in accordance with the legal requirements in one structured, common and machine-readable format or their transmission to call for someone else to be responsible.
- Complaint to the supervisory authority: Without prejudice to another administrative or judicial remedy, the right to lodge a complaint with a Supervisory authority, in particular in the Member State of your habitual residence, your place of work or the location of the alleged infringement if you believe that the processing of your personal data violates the requirements of GDPR violates.
Use of cookies
Cookies are small text files or other storage notes that store information on end devices save and read information from the end devices. E.g. the login status in a User account, a shopping cart content in an e-shop, the content accessed or used Save functions of an online offer. Cookies can also be used for different purposes be used, e.g. for the purposes of functionality, security and comfort of online offers and the creation of analyzes of visitor flows.
Notes on consent: We set cookies in accordance with the legal regulations. Therefore, we obtain prior consent from users, except if this is not required by law. In particular, consent is not necessary if the saving and reading of the information, including cookies, is unconditional are required in order to provide users with a telemedia service that they have expressly requested (i.e. our online offer). Strictly necessary cookies usually include cookies with functions that enable the display and operability of the Online offer, load balancing, security, storage of preferences and User choices or similar with the provision of the main and Ancillary functions of the online offer requested by the users serve. The revocable consent is clearly communicated to the users and contains the information on the respective use of cookies.
Notes on legal bases under data protection law: On which legal basis under data protection law, we process the personal data of users with the help of Processing cookies depends on whether we ask users for consent. If the users consent, the legal basis for the processing of your data is the declared consent. Otherwise, the data processed using cookies will be based on our legitimate interests (e.g. in the commercial operation of our online offer and improving its usability) or if this is part of the performance of our contractual obligations takes place if the use of cookies is necessary to ensure our to fulfill contractual obligations. For what purposes the cookies are processed by us we will clarify this in the course of this data protection declaration or within the framework of ours consent and processing processes.
Storage period: In terms of storage period, the following types of Cookies differentiated:
- Temporary cookies (also: session or session cookies): Temporary cookies are deleted at the latest after a user has left and be an online offer end device (e.g. browser or mobile application) has closed.
- Persistent cookies: Persistent cookies remain even after you close the device saved. For example, the login status can be saved or preferred content is displayed directly when the user visits a website again. Likewise, the user data collected with the help of cookies can be used to measure range be used. Unless we give users explicit information about the type and storage period of Share cookies (e.g. as part of obtaining consent) if users do so assume that cookies are permanent and the storage period can be up to two years.
General information on revocation and objection (so-called "opt-out"): Users can revoke the consent you have given at any time and according to the processing contradict the legal requirements. For this purpose, users can, among other things, use Restrict cookies in the settings of your browser (which also affects the functionality of our online offer may be restricted). An objection to the use of Cookies for online marketing purposes can also be set via the websites https://optout.aboutads.info and https://www.youronlinechoices.com/.
- Legal basis: Legitimate interests (Art. 6 Para. 1 S. 1 lit. f) GDPR); Consent (Art. 6 Para. 1 S. 1 lit. a) GDPR).
Further information on processing procedures, procedures and services:
- Processing of cookie data based on consent: We use a procedure for cookie consent management, as part of which the consents the user in the use of cookies, or in the context of the Processing and providers mentioned in the cookie consent management procedure and can be managed and revoked by users. Here the Declaration of consent saved so that you do not have to repeat your query again and to be able to prove the consent according to the legal obligation. The Storage can take place on the server side and/or in a cookie (so-called opt-in cookie or using comparable technologies) in order to obtain the consent of a user or to assign his device. Subject to individual information about the providers of Cookie management services, the following notices apply: The duration of the storage of the Consent can be up to two years. Here, a pseudonymous User identifier formed and with the time of consent, information on the range the consent (e.g. which categories of cookies and/or service providers) and the browser, system and end device used; Legal bases: Consent (Art. 6 Para. 1 S. 1 lit. a) GDPR).
Provision of the online offer and web hosting
We process user data in order to make our online services available to them can. For this purpose we process the IP address of the user, which is necessary to Content and functions of our online services to the browser or the end device of the user submit.
- Types of data processed: Usage data (e.g. websites visited, interest of content, access times); Meta, communication and procedural data (e.g. IP addresses, times, identification numbers, consent status); Content data (e.g. entries in online forms).
- Persons affected: Users (e.g. website visitors, users of online services).
- Purposes of processing: Provision of our online offer and usability; Information technology infrastructure (operation and provision of information systems and technical devices (computers, servers, etc.); Safety measures.
- Legal basis: Legitimate interests (Art. 6 Para. 1 S. 1 lit. f) GDPR).
Further information on processing procedures, procedures and services:
- Provision of online offer on rented storage space: For the To provide our online offer, we use storage space, computing capacity and Software that we rent from an appropriate server provider (also called "web host") or otherwise obtain; Legal basis: Legitimate interests (Art. 6 Paragraph 1 sentence 1 lit. f) GDPR).
- Collection of access data and log files: Access to our Online offer is logged in the form of so-called "server log files". To the Server log files can contain the address and name of the accessed websites and files, date and Time of retrieval, transferred data volume, notification of successful retrieval, browser type along with version, the user's operating system, referrer URL (the previously visited page) and usually include IP addresses and the requesting provider. The server log files can be used for security purposes, e.g avoid overloading the servers (especially in the case of abusive attacks, so-called DDoS attacks) and, on the other hand, the load on the servers and their ensure stability; Legal basis: Legitimate interests (Art. 6 paragraph 1 sentence 1 lit. f) GDPR); Deletion of data: Log file information are stored for a maximum of 30 days and then deleted or made anonymous. Data whose further storage is required for evidentiary purposes are final clarification of the respective incident excluded from the deletion.
- E-mail delivery and hosting: The ones we use Web hosting services also include sending, receiving and storing emails. For these purposes, the addresses of the recipients and senders as well as others Information regarding the e-mail dispatch (e.g. the providers involved) and the content of the respective e-mails processed. The aforementioned data can also be used for the purposes of detection of SPAM are processed. Please note that e-mails in Internet are generally not sent in encrypted form. As a rule, e-mails encrypted on the transport route, but (unless there is a so-called end-to-end encryption method is used) not on the servers from which they be sent and received. We can therefore be responsible for the transmission path of the e-mails assume no responsibility between the sender and receipt on our server; Legal basis: Legitimate interests (Article 6 (1) sentence 1 lit. f) GDPR).
- netcup: Services in the field of providing IT infrastructure and related services (e.g. storage space and/or computing capacities); Service provider: netcup GmbH, Daimlerstrasse 25, D-76185 Karlsruhe, Germany; Legal Bases: Legitimate Interests (Art. 6 Para. 1 S. 1 lit. f) GDPR); Site: https://www.netcup.de/; Privacy Policy: https://www.netcup.de/kontakt/datenschutzerklaerung.php; Order processing agreement: https://www.netcup-wiki.de/wiki/ZusatzArrangement_zur_Auftragsverarbeitung.
Presence in social networks (social media)
We maintain online presences within social networks and process within this framework User data in order to communicate with the users active there or to obtain information about to offer us.
We would like to point out that user data outside of the European Union can be processed. This can result in risks for users, because e.g. the enforcement of user rights could be made more difficult.
Furthermore, user data within social networks is usually used for market research and processed for advertising purposes. For example, based on usage behavior and the resulting User profiles are created based on the interests of the users. The usage profiles can in turn used, for example, to serve advertisements inside and outside the networks switch, which presumably correspond to the interests of the users. For these purposes, in As a rule, cookies are stored on the users' computers, in which the usage behavior and the interests of the users are saved. Furthermore, data can also be stored in the usage profiles are stored regardless of the devices used by the users (especially if the users are members of the respective platforms and are logged in to them).
For a detailed description of the respective processing forms and the Possibilities of objection (opt-out) we refer to the data protection declarations and information of the operators of the respective networks.
We also point out in the case of requests for information and the assertion of data subject rights point out that these can be asserted most effectively with the providers. only the Providers have access to the data of the users and can directly corresponding take action and provide information. If you still need help, you can contact us.
- Types of data processed: contact details (e.g. e-mail, telephone numbers); Content data (e.g. entries in online forms); Usage data (e.g. websites visited, interest in content, access times); Meta, communication and procedural data (e.g. IP addresses, times, identification numbers, consent status).
- Persons affected: Users (e.g. website visitors, users of online services).
- Purposes of processing: contact requests and communication; feedback (e.g. collecting feedback via online form); Marketing.
- Legal basis: Legitimate interests (Art. 6 Para. 1 S. 1 lit. f) GDPR).
Further information on processing procedures, procedures and services:
- Instagram: Social network; Service Provider: Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; Legal basis: Legitimate interests (Article 6 (1) sentence 1 lit. f) GDPR); Website: https://www.instagram.com; Privacy Policy: https://instagram.com/about/legal/privacy.
- YouTube: Social network and video platform; Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; Legal basis: Legitimate interests (Art. 6 para. 1 sentence 1 lit. f) GDPR); Privacy Policy: https://policies.google.com/privacy; Opt-out option: https://adssettings.google.com/authenticated.
Plugins and embedded functions and content
We integrate functional and content elements into our online offer that are provided by the servers of your respective provider (hereinafter referred to as "third-party provider"). It can are, for example, graphics, videos or city maps (hereinafter referred to as uniform referred to as “Contents”).
The integration always presupposes that the third-party providers of this content have the IP address of the process users because they do not send the content to their browser without the IP address could. The IP address is therefore responsible for displaying this content or functions necessary. We strive to only use content whose respective providers Only use the IP address to deliver the content. Third-party providers can also so-called pixel tags (invisible graphics, also known as "web beacons") for statistical purposes or use for marketing purposes. The "pixel tags" can information such as the Visitor traffic on the pages of this website are evaluated. The pseudonymous Information can also be stored in cookies on the user's device and under other technical information about the browser and the operating system, to linked websites, about the visit time and further information on the use of our online offer as well as with linked to such information from other sources.
- Types of data processed: Usage data (e.g. websites visited, interest of content, access times); Meta, communication and procedural data (e.g. IP addresses, times, identification numbers, consent status); Inventory data (e.g. names, addresses); Contact information (e.g. email, phone numbers); Content data (e.g. entries in online forms).
- Persons affected: Users (e.g. website visitors, users of online services).
- Purposes of processing: Provision of our online offer and usability; Marketing; Profiles with user-related information (creation of user profiles).
- Legal basis: Legitimate interests (Art. 6 Para. 1 S. 1 lit. f) GDPR).
Further information on processing procedures, procedures and services:
- Integration of third-party software, scripts or frameworks (e.g. jQuery): We integrate software into our online offer that we call up from the servers of other providers (e.g. function libraries that we use for the purpose of display or user-friendliness of our use online offer). The respective providers collect the IP address of the Users and can use them for the purpose of transmitting the software to the user's browser as well as for security purposes, as well as for the evaluation and optimization of your offer process. - We integrate software into our online offer that we use from the servers of others Retrieve providers (e.g. function libraries that we use for the purpose of display or user-friendliness of our online offer). Here, the respective Providers the IP address of the users and can use this for the purpose of transmitting the software to the user's browser and for security purposes, as well as for evaluation and Process optimization of your offer; Legal basis: Authorized parties Interests (Art. 6 Para. 1 S. 1 lit. f) GDPR).
- Google Fonts (provision on own server): Provision of Font files for a user-friendly presentation of our online offer; Service Provider: The Google Fonts are hosted on our server, es no data will be transmitted to Google; Legal basis: Authorized parties Interests (Art. 6 Para. 1 S. 1 lit. f) GDPR).
- Instagram Plugins and Content: Instagram Plugins and Content - Here can e.g. include content such as images, videos or text and buttons with which Users can share content from this online offering within Instagram. - We are jointly with Meta Platforms Ireland Limited for collection or receipt under a transmission (but not further processing) of "event data" that Facebook using features of Instagram (e.g. embedding features for content) that are on our Online offer are executed, raises or in the context of a transmission to the following purposes, jointly responsible: a) display of content and advertising information, which correspond to the presumed interests of users; b) Delivery of commercial and transaction-related messages (e.g. addressing users via Facebook Messenger); c) Improving ad delivery and personalizing features and content (eg. B. Improving the recognition of what content or advertising information is suspected of correspond to the interests of the users). We have a special agreement with Facebook completed ("Addition for those responsible", https://www.facebook.com/legal/controller_addendum), in which it is regulated in particular which security measures Facebook must observe (https://www.facebook.com/legal/terms/data_security_terms) and in which Facebook has agreed to fulfill the rights of the data subject (i.e. user can e.g. B. Send information or deletion requests directly to Facebook). Note: If Facebook provides us with metrics, analytics and reports (which are aggregated, i.e. not received information about individual users and is anonymous to us), then this takes place Processing not within the framework of joint responsibility, but on the basis of a Order processing contract ("Data processing conditions", https://www.facebook.com/legal/terms/dataprocessing) , the "Data Security Conditions" (https://www.facebook.com/legal/terms/data_security_terms) as well as with regard to processing in the USA on the basis of standard contractual clauses ("Facebook EU data transfer addendum, https://www.facebook.com/legal/EU_data_transfer_addendum). The rights of users (in particular to information, deletion, objection and complaints with competent supervisory authority), are not affected by the agreements with Facebook restricted; Service Provider: Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; Legal bases: Legitimate interests (Art. 6 Para. 1 S. 1 lit. f) GDPR); Site: https://www.instagram.com; Privacy Policy: https://instagram.com/about/legal/privacy.
- YouTube videos: video content; Service Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; Legal basis: Legitimate interests (Article 6 (1) sentence 1 lit. f) GDPR); Website: https://www.youtube.com; Privacy Policy: https://policies.google.com/privacy; Opt-out option: Opt-out plugin: https://tools.google.com/dlpage/gaoptout?hl=en, Settings for the display of advertisements: https://adssettings.google.com/authenticated.
- YouTube videos: video content; YouTube videos are made using a special Domain (recognizable by the component "youtube-nocookie") in the so-called "extended Data protection mode" integrated, whereby no cookies are collected on user activities in order to personalize video playback. Nevertheless, information on user interaction saved with the video (e.g. remembering the last playback point); Service Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; Legal bases: Legitimate interests (Art. 6 Para. 1 S. 1 lit. f) GDPR); Site: https://www.youtube.com; Privacy Policy: https://policies.google.com/privacy.
Created with free Datenschutz-Generator.de by Dr. Thomas Schwenke
Translated with Google Translator