Introduction and Overview We have drafted this privacy policy (version 04.25.2024-112778859) to explain to you, in accordance with the requirements of the General Data Protection Regulation (EU) 2016/679 and applicable national laws, what personal data (hereinafter referred to as „data“) we, as the responsible entity, and our appointed processors (e.g., service providers) process and will process in the future, and the lawful options available to you. All terms used are intended to be gender-neutral. In short: We comprehensively inform you about the data we process about you.
Privacy policies often sound very technical and use legal jargon. However, this privacy policy aims to describe the most important things as simply and transparently as possible. For the sake of transparency, technical terms are explained in a user-friendly manner, links to further information are provided, and graphics are used. We inform you in clear and simple language that we only process personal data within the scope of our business activities when there is a corresponding legal basis. This would not be possible with the typically brief, unclear, and legal-technical explanations that are standard on the internet regarding data protection. I hope you find the following explanations interesting and informative, and perhaps there is some new information for you. If you still have questions, we ask you to contact the responsible entity mentioned below or in the imprint, follow the existing links, and view further information on third-party sites. Our contact details can also be found in the imprint.
Scope This privacy policy applies to all personal data processed by our company and all personal data processed by firms (processors) we appoint. By personal data, we mean information as defined in Art. 4 No. 1 of the GDPR, such as the name, email address, and postal address of a person. The processing of personal data enables us to offer and bill for our services and products, both online and offline. The scope of this privacy policy includes:
- All online presences (websites, online shops) that we operate
- Social media profiles and email communication
- Mobile apps for smartphones and other devices In short: The privacy policy applies to all areas where personal data is systematically processed by the company through the mentioned channels. Should we enter into legal relations with you outside these channels, we will inform you separately if necessary.
Legal Bases In the following sections, we provide transparent information about the legal principles and regulations, i.e., the legal bases of the General Data Protection Regulation, that enable us to process personal data. Regarding EU law, we refer to REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of April 27, 2016. You can, of course, read this General Data Protection Regulation of the EU online at EUR-Lex, the access to EU law, at https://eur-lex.europa.eu/legal-content/EN/ALL/?uri=celex%3A32016R0679.
We process your data only if at least one of the following conditions applies:
- Consent (Article 6(1)(a) GDPR): You have given us your consent to process data for a specific purpose. An example would be storing the data you entered in a contact form.
- Contract (Article 6(1)(b) GDPR): To fulfill a contract or pre-contractual obligations with you, we process your data. For example, if we are to enter into a purchase contract with you, we require personal information beforehand.
- Legal obligation (Article 6(1)(c) GDPR): If we are subject to a legal obligation, we process your data. For example, we are legally required to retain invoices for accounting purposes, which generally contain personal data.
- Legitimate interests (Article 6(1)(f) GDPR): In the case of legitimate interests that do not override your fundamental rights, we reserve the right to process personal data. For instance, we must process certain data to operate our website securely and economically efficiently. This processing thus constitutes a legitimate interest. Other conditions such as carrying out tasks in the public interest or exercising official authority, as well as protecting vital interests, generally do not occur with us. If such a legal basis should be applicable, it will be indicated at the appropriate place.
In addition to the EU regulation, national laws also apply:
- In Austria, this is the Federal Act on the Protection of Natural Persons with regard to the Processing of Personal Data (Data Protection Act), abbreviated as DSG.
- In Germany, the Federal Data Protection Act, abbreviated BDSG, applies. If further regional or national laws apply, we will inform you in the following sections about them.
Contact Details of the Responsible Party If you have questions about data protection or the processing of personal data, you can find the contact details of the responsible person or entity below: Julija Gabric Feldstraße 16, 4061 Pasching, Austria
Email: izetogbusiness@gmail.com Phone: +43 660 1011096 Imprint: https://www.digitalaicrafts.com/impressum/
Duration of Storage We store personal data only as long as necessary for the provision of our services and products, a criterion that serves as a general rule for us. This means we delete personal data as soon as the reason for the data processing no longer exists. In some cases, we are legally obliged to retain certain data even after the original purpose has ceased, for example for accounting purposes.
If you wish to have your data deleted or withdraw your consent to data processing, we will delete the data as quickly as possible and to the extent that there is no legal obligation to retain it.
We will provide further information on the specific duration of data processing below, should we have additional information available.
Rights According to the General Data Protection Regulation According to Articles 13, 14 GDPR, we inform you about the following rights that you have, ensuring fair and transparent processing of data:
- Right of access by the data subject (Article 15 GDPR): You have the right to obtain confirmation as to whether or not personal data concerning you are being processed. If so, you are entitled to access the data and receive the following information:
- the purposes of the processing;
- the categories of personal data concerned;
- the recipients or categories of recipients to whom the personal data have been or will be disclosed, particularly to recipients in third countries or international organisations;
- where possible, the envisaged period for which the personal data will be stored, or if not possible, the criteria used to determine that period;
- the existence of the right to request the controller to rectify or erase the personal data, or restrict processing of personal data concerning the data subject, or to object to such processing;
- the right to lodge a complaint with a supervisory authority;
- where the personal data are not collected from the data subject, any available information as to their source;
- whether there is automated decision-making, including profiling, and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.
Who receives the data and how is the security guaranteed if the data are transferred to third countries; How long the data are stored; The existence of the right to rectification, erasure, or restriction of processing and the right to object to processing; That you can lodge a complaint with a supervisory authority (links to these authorities can be found below); The origin of the data if we have not collected it from you; Whether profiling is conducted, i.e., whether data are automatically processed to create a personal profile of you.
According to Article 16 of the GDPR, you have the right to rectification of data, which means that we must correct the data if you find any errors. According to Article 17 of the GDPR, you have the right to erasure (‚right to be forgotten‘), which specifically means that you can request the deletion of your data. According to Article 18 of the GDPR, you have the right to restriction of processing, which means that we can only store the data but not use it further. According to Article 20 of the GDPR, you have the right to data portability, which means that we will provide your data in a standard format upon request. According to Article 21 of the GDPR, you have the right to object, which brings a change in processing after enforcement. If the processing of your data is based on Article 6(1)(e) (public interest, exercise of public authority) or Article 6(1)(f) (legitimate interest), you can object to the processing. We will then review as soon as possible whether we can legally comply with this objection. If data is used to conduct direct marketing, you can object to this type of data processing at any time. We may no longer use your data for direct marketing thereafter. If data is used for profiling, you can object to this type of data processing at any time. We may no longer use your data for profiling thereafter. According to Article 22 of the GDPR, you may have the right not to be subject to a decision based solely on automated processing (such as profiling). According to Article 77 of the GDPR, you have the right to lodge a complaint. This means you can lodge a complaint with a data protection authority at any time if you believe that the processing of personal data relating to you violates the GDPR.
In short: You have rights – do not hesitate to contact the responsible party listed above at our company!
If you believe that the processing of your data violates data protection law or your data protection rights have otherwise been infringed, you can lodge a complaint with the supervisory authority. For Austria, this is the Data Protection Authority, which can be found at https://www.dsb.gv.at/. In Germany, there is a data protection officer for each federal state. For more information, you can contact the Federal Commissioner for Data Protection and Freedom of Information (BfDI). For our company, the following local data protection authority is responsible:
Data transfer to third countries We only transfer or process data in countries outside the scope of the GDPR (third countries) if you consent to this processing or if another legal permission exists. This particularly applies if the processing is legally prescribed or necessary for the fulfillment of a contractual relationship, and only to the extent that this is generally permitted. Your consent is most often the primary reason that we process data in third countries. The processing of personal data in third countries, such as the USA, where many software manufacturers offer services and have server locations, may mean that personal data are processed and stored in unexpected ways.
We specifically note that, according to the opinion of the European Court of Justice, an adequate level of protection for data transfer to the USA exists only if a US company that processes personal data of EU citizens in the USA is an active participant in the EU-US Data Privacy Framework. More information can be found at: https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en
The processing of data by US services that are not active participants in the EU-US Data Privacy Framework may result in data being processed and stored in a non-anonymized manner. Additionally, US governmental authorities may access individual data. Furthermore, it is possible that collected data may be linked with data from other services by the same provider, if you have an appropriate user account. Where possible, we try to use server locations within the EU, if offered. We will provide more detailed information at the appropriate points in this privacy policy regarding data transfer to third countries, if applicable.
Security of data processing To protect personal data, we have implemented both technical and organizational measures. Where possible, we encrypt or pseudonymize personal data. By doing so, we make it as difficult as possible for third parties to derive personal information from our data.
Article 25 GDPR discusses „data protection by design and by default“ and means that one should always consider security in both software (e.g., forms) and hardware (e.g., access to server rooms) and set appropriate measures. We will address specific measures further, if necessary.
Communication When you contact us and communicate via telephone, email, or online form, personal data may be processed.
Data are processed to handle and process your inquiry and the related business transaction. Data are stored for as long as prescribed by law.
Affected persons All those who seek contact with us through the communication channels we provide are affected.
Telephone When you call us, call data are pseudonymized and stored on the respective device and by the telecommunications provider used. Additionally, data such as names and telephone numbers may be sent via email and stored for response to inquiries. Data are deleted as soon as the business case is closed and legal provisions allow.
Email When you communicate with us via email, data may be stored on the respective device (computer, laptop, smartphone, etc.) and data are stored on the email server. Data are deleted as soon as the business case is closed and legal provisions allow.
Online Forms When you communicate with us via online form, data are stored on our web server and may be forwarded to an email address of ours. Data are deleted as soon as the business case is closed and legal provisions allow.
Legal bases Data processing is based on the following legal grounds:
Article 6(1)(a) GDPR (Consent): You give us consent to store your data and use it for purposes related to the business case; Article 6(1)(b) GDPR (Contract): There is a necessity for the fulfillment of a contract with you or a processor such as the telephone provider, or we need to process data for pre-contractual activities, such as preparing an offer; Article 6(1)(f) GDPR (Legitimate Interests): We aim to handle customer inquiries and business communication in a professional framework. For this, certain technical facilities such as email programs, exchange servers, and mobile providers are necessary to operate communication efficiently.
Processing Contract In this section, we want to explain what a processing contract is and why it is needed. Since the term „processing contract“ is quite a mouthful, we will often use just the acronym in this text. Like most companies, we do not work alone but also avail ourselves of services from other companies or individuals. By incorporating various companies or service providers, it may happen that we pass on personal data for processing. These partners then act as processors with whom we sign a contract, the so-called processing contract. It is most important for you to know that the processing of your personal data is exclusively carried out according to our instructions and must be regulated by the processing contract.
Who are processors? We, as the company and website owner, are responsible for all data that we process from you. In addition to the responsible parties, there can also be so-called processors. This includes any company or person who processes personal data on our behalf. More precisely, according to the GDPR definition: any natural or legal person, authority, institution, or other body that processes personal data on our behalf is considered a processor. Processors can therefore be service providers such as hosting or cloud providers, payment or newsletter providers, or large companies such as Google or Microsoft.
For better understanding of the terminology, here is an overview of the three roles in the GDPR:
Data Subject (you as a customer or interested party) → Controller (we as the company and contracting entity) → Processor (service providers such as web hosts or cloud providers)
Contents of a Data Processing Agreement As mentioned above, we have entered into a DPA (Data Processing Agreement) with our partners who act as processors. This agreement primarily stipulates that the processor processes the data exclusively in accordance with the GDPR. The agreement must be in writing, though electronic contracts are also considered „in writing.“ Data processing of personal data only occurs based on this contract. The following must be included in the contract:
- Obligation to us as the controller
- Duties and rights of the controller
- Categories of affected persons
- Types of personal data
- Nature and purpose of data processing
- Subject matter and duration of the data processing
- Place of data processing
The contract also includes all obligations of the processor. The most important obligations are:
- Ensuring data security measures
- Implementing possible technical and organizational measures to protect the rights of the data subject
- Maintaining a record of data processing activities
- Cooperating with the data protection supervisory authority upon request
- Conducting a risk analysis concerning the personal data received
- Sub-processors may only be commissioned with the written consent of the controller
You can see what such a DPA looks like, for example, at https://www.wko.at/service/wirtschaftsrecht-gewerberecht/eu-dsgvo-mustervertrag-auftragsverarbeitung.html. Here, a sample contract is presented.
Cookies What are cookies? Our website uses HTTP cookies to store user-specific data. Below we explain what cookies are and why they are used, to help you better understand the following privacy policy.
Whenever you surf the internet, you use a browser. Well-known browsers include Chrome, Safari, Firefox, Internet Explorer, and Microsoft Edge. Most websites store small text files in your browser. These files are called cookies.
Undoubtedly, cookies are very useful little helpers. Nearly all websites use cookies. More precisely, they are HTTP cookies, as there are other cookies for other uses. HTTP cookies are small files that our website stores on your computer. These cookie files are automatically placed in the cookie folder, the „brain“ of your browser. A cookie consists of a name and a value. When defining a cookie, one or more attributes must also be specified.
Cookies store certain user data from you, such as language or personal page settings. When you revisit our site, your browser sends the „user-related“ information back to our site. Thanks to the cookies, our website knows who you are and offers you your usual settings. In some browsers, each cookie has its own file; in others, like Firefox, all cookies are stored in a single file.
The following graphic shows a possible interaction between a web browser, such as Chrome, and the web server. Here, the web browser requests a website and receives a cookie from the server, which the browser then reuses whenever another page is requested.
There are both first-party cookies and third-party cookies. First-party cookies are created directly by our site, third-party cookies are created by partner websites (e.g., Google Analytics). Each cookie must be evaluated individually, as each cookie stores different data. Also, the expiration time of a cookie varies from a few minutes to a few years. Cookies are not software programs and do not contain viruses, trojans, or other „pests.“ Cookies also cannot access information on your PC.
Purpose of processing via cookies The purpose ultimately depends on the respective cookie. More details can be found below or from the software manufacturer that sets the cookie.
What data are processed? Cookies are small helpers for many different tasks. Unfortunately, it is not possible to generalize what data are stored in cookies, but we will inform you about the processed or stored data within the scope of the following privacy policy.
Storage duration of cookies The storage duration depends on the respective cookie and is specified further below. Some cookies are deleted after less than an hour, others can remain stored on a computer for several years.
You also have control over the storage duration. You can manually delete all cookies at any time using your browser (see also below „Right to object“). Furthermore, cookies based on consent are deleted at the latest after you revoke your consent, although the lawfulness of the storage remains unaffected until then.
Legal basis Since 2009, there are the so-called „Cookie Guidelines.“ These guidelines state that the storage of cookies requires your consent (Article 6(1)(a) GDPR). However, reactions to these guidelines vary considerably within EU countries. In Austria, however, the implementation of this directive occurred in § 165 paragraph 3 of the Telecommunications Act (2021). In Germany, the Cookie Guidelines were not implemented as national
Web Hosting Introduction
What is Web Hosting? Nowadays, when you visit websites, certain information—including personal data—is automatically created and stored, just as on this website. These data should be processed as sparingly as possible and only with justification. By „website,“ we mean the entirety of all webpages on a domain, i.e., everything from the home page to the very last subpage (like this one). By „domain,“ we mean, for example, example.com or sampleexample.com.
When you want to view a website on a computer, tablet, or smartphone, you use a program called a web browser. You probably know some web browsers by name: Google Chrome, Microsoft Edge, Mozilla Firefox, and Apple Safari. We simply refer to it as the browser or web browser.
To display the website, the browser must connect to another computer where the website’s code is stored: the web server. Operating a web server is a complicated and demanding task, which is why it is usually taken over by professional providers, known as hosts. These hosts offer web hosting and thus ensure reliable and error-free storage of website data. Quite a few technical terms, but please hang on, it gets even better!
When your browser on your computer (desktop, laptop, tablet, or smartphone) connects and during the data transmission to and from the web server, personal data may be processed. On one hand, your computer stores data; on the other hand, the web server must also store data for a while to ensure proper operation.
Why do we process personal data? The purposes of data processing are:
- Professional hosting of the website and securing operations
- To maintain operational and IT security
- Anonymous evaluation of access behavior to improve our offerings and, if necessary, for prosecution or pursuit of claims
What data are processed? Even as you visit our website right now, our web server, which is the computer on which this webpage is stored, typically automatically saves data such as:
- the complete Internet address (URL) of the accessed webpage
- Browser and browser version (e.g., Chrome 87)
- the operating system used (e.g., Windows 10)
- the address (URL) of the previously visited page (referrer URL) (e.g., https://www.examplequellensite.de/fromwhereIcame/)
- the hostname and the IP address of the device from which access is made (e.g., COMPUTERNAME and 194.23.43.121)
- Date and time
- in files, the so-called web server log files
How long are data stored? Typically, the data mentioned above are stored for two weeks and then automatically deleted. We do not share this data, but we cannot exclude that these data could be viewed by authorities in the event of unlawful behavior.
In short: Your visit is logged by our provider (the company that runs our website on special computers, known as servers), but we do not share your data without consent!
Legal Basis The legality of processing personal data in the context of web hosting arises from Art. 6 (1) (f) GDPR (protection of legitimate interests), as the use of professional hosting with a provider is necessary to present the company securely and user-friendly on the internet and to possibly pursue attacks and demands arising from this.
There is typically a data processing agreement according to Art. 28 GDPR between us and the hosting provider, ensuring compliance with data protection and guaranteeing data security.
Data Processing Agreement (DPA) with IONOS In accordance with Article 28 of the General Data Protection Regulation (GDPR), we have concluded a data processing agreement (DPA) with IONOS. What exactly a DPA is and most importantly what it must contain can be read in our general section „Data Processing Agreement (DPA).“
This contract is legally required because IONOS processes personal data on our behalf. It clarifies that IONOS may only process data they receive from us according to our instructions and must comply with the GDPR. The link to the Data Processing Agreement (DPA) can be found at https://www.ionos.com/help/data-protection/general-information-on-the-general-data-protection-regulation-gdpr/data-processing/.
External Web Hosting Provider Privacy Policy Below you will find the contact details of our external hosting provider, where you can learn more about data processing, in addition to the information above:
hello GmbH Rainerstraße 25, 4020 Linz, Austria
More about data processing by this provider can be found in their privacy policy.

Digital Craft Helper
Website Builder Systems Introduction
What are Website Builder Systems? We use a website builder system for our website. Builder systems are special forms of a Content Management System (CMS). With a builder system, website operators can easily create a website without any programming knowledge. In many cases, web hosts also offer builder systems. Using a builder system can also involve the collection, storage, and processing of your personal data. In this privacy text, we provide you with general information about data processing through builder systems. For more detailed information, please see the privacy policies of the provider.
Why do we use website builder systems for our website? The greatest advantage of a builder system is its ease of use. We aim to provide you with a clear, simple, and well-organized website that we can manage and maintain ourselves without external support. A builder system now offers many useful features that we can use without any programming knowledge. This allows us to design our web presence according to our wishes and offer you an informative and pleasant time on our website.
What data is stored by a builder system? The exact data stored depends, of course, on the website builder system used. Each provider processes and collects different data from website visitors. However, technical usage information such as operating system, browser, screen resolution, language and keyboard settings, hosting provider, and the date of your website visit are typically collected. Additionally, tracking data (e.g., browser activity, clickstream activities, session heatmaps, etc.) may be processed. Personal data may also be collected and stored. This mostly includes contact information such as email addresses, telephone numbers (if provided), IP addresses, and geographic location data. You can find out exactly what data is stored in the privacy policy of the provider.
How long and where are the data stored? We will inform you about the duration of data processing later in connection with the website builder system used, if we have further information. Detailed information can be found in the provider’s privacy policy. In general, we only process personal data for as long as necessary to provide our services and products. The provider may store data about you according to their own policies, over which we have no control.
Right to Object You always have the right to access, correct, and delete your personal data. If you have any questions, you can also contact the responsible party of the used website builder system at any time. Contact details can be found either in our privacy policy or on the website of the respective provider.
You can delete, disable, or manage cookies used by the provider for their functions in your browser. Depending on which browser you use, this can be done in different ways. However, please be aware that if cookies are disabled or deleted, not all functions may work as usual.
Legal Basis We have a legitimate interest in using a website builder system to optimize our online service and to present it efficiently and appealingly to you. The corresponding legal basis is Article 6 (1) (f) GDPR (Legitimate Interests). We only use the builder system to the extent that you have given consent.
Where the processing of data is not strictly necessary for the operation of the website, the data is processed only based on your consent. This particularly applies to tracking activities. The legal basis in this case is Article 6 (1) (a) GDPR.
With this privacy policy, we have provided you with the most important general information about data processing. If you want more detailed information, further details – if available – can be found in the following section or in the privacy policy of the provider.
Web Analytics Introduction
What is Web Analytics? On our website, we use software to analyze the behavior of website visitors, known as web analytics or web analysis. This involves collecting data that the respective analytics tool provider (also known as a tracking tool) stores, manages, and processes. With the help of this data, analyses are made regarding user behavior on our website, and the results are provided to us as website operators. Additionally, most tools offer various testing opportunities. For instance, we can test which offers or content are most appealing to our visitors. We might display two different offers to you for a limited time period. After the test (known as an A/B test), we understand which product or content is more interesting to our website visitors. Such testing procedures, as well as other analytics processes, can involve the creation of user profiles and the data may be stored in cookies.
Why do we conduct Web Analytics? Our website has a clear goal: we aim to deliver the best web offer in our industry. To achieve this goal, we want to provide the best and most interesting offers and ensure that you feel completely comfortable on our website. Web analytics tools allow us to closely examine the behavior of our website visitors and then improve our web offer for you and us accordingly. For example, we can determine the average age of our visitors, where they come from, when our website is most visited, or which contents or products are particularly popular. All this information helps us to optimize the website and thus tailor it perfectly to your needs, interests, and wishes.
What data is processed? The exact data stored depends on the analytics tools used. Generally, for example, it is recorded which content you view on our website, which buttons or links you click on, when you access a page, which browser you use, with which device (PC, tablet, smartphone, etc.) you visit the website, or which computer system you use. If you agreed that location data could also be collected, these may also be processed by the web analytics tool provider.
Your IP address is also stored. According to the General Data Protection Regulation (GDPR), IP addresses are personal data. However, your IP address is usually anonymized (i.e., stored in a non-identifiable and truncated form). For the purposes of testing, web analytics, and web optimization, direct data, such as your name, age, address, or email address, are generally not stored. All these data, if collected, are stored in a pseudonymized manner. Thus, it is not possible to identify you as a person.
Duration of Data Storage The duration for which the respective data are stored always depends on the provider. Some cookies store data only for a few minutes or until you leave the website, while other cookies can store data for several years.
Right to Object You always have the right and the possibility to revoke your consent to the use of cookies or third-party providers. This can be done either through our cookie management tool or through other opt-out functions. For example, you can also prevent data collection by cookies by managing, disabling, or deleting cookies in your browser.
Legal Basis The use of web analytics requires your consent, which we have obtained through our cookie popup. This consent forms, according to Article 6 (1) lit. a GDPR (Consent), the legal basis for the processing of personal data that can occur during the collection by web analytics tools.
In addition to consent, we have a legitimate interest in analyzing the behavior of website visitors to technically and economically improve our offer. With the help of web analytics, we detect errors on the website, can identify attacks, and improve economic efficiency. The legal basis for this is Article 6 (1) lit. f GDPR (Legitimate Interests). We use the tools only to the extent that you have given consent.
Since web analytics tools involve the use of cookies, we also recommend reading our general privacy policy on cookies. To find out exactly which data are stored and processed, you should read the privacy statements of the respective tools.
Information on specific web analytics tools, if available, is provided in the following sections.
MonsterInsights Privacy Policy
What is MonsterInsights? We use the „Google Analytics Plugin for WordPress“ by the American company MonsterInsights LLC (7732 Maywood Crest Dr, West Palm Beach, Florida, 33412, USA) on our website. This plugin is commonly referred to simply as MonsterInsights. With the help of this plugin, your user data can be stored, managed, and processed by Google Analytics. For example, when you click on a link, Google Analytics records this „click“ via the embedded plugin, providing insightful web analytics from such collected data. In this privacy policy, we delve into MonsterInsights and inform you about which data are stored where and how.
MonsterInsights utilizes the Google Analytics Reporting API to collect data about our website and visitor behavior. This data is evaluated and then displayed as diagrams, graphics, and tables directly on our WordPress dashboard. For the plugin to function, a Google Analytics tracking code is integrated into our WordPress site. The plugin provides features such as page analyses, statistics, or ad tracking. Thus, with the help of the plugin, we can easily set up tracking features such as event tracking, eCommerce tracking, or outbound link tracking for our website without any programming knowledge. We see all key statistics compiled in one place directly on our dashboard.
Why do we use MonsterInsights? MonsterInsights makes handling Google Analytics much easier for us, as it allows us to see the most important analyses right on our dashboard without constantly switching to Google Analytics. Google Analytics provides us with many essential data about visitor behavior on our website. With these data, we can better tailor our website and offerings to your preferences. We use the obtained statistics to make our website more interesting and to target advertisements effectively.
What data are stored by MonsterInsights and Google Analytics? By installing the MonsterInsights plugin, a Google Analytics tracking code is integrated into our WordPress website. This code creates a random, unique ID linked to your browser cookie. In this way, you are recognized as a new visitor to our website. If you visit us again, you will be recognized as a so-called „returning“ user. All collected data are then stored with this user ID. This allows pseudonymous user profiles to be created and evaluated. Your actions on our website are stored in cookies and app instance IDs. If linked with other Google services, the generated data can also be connected to third-party cookies.
All tracking is carried out and stored by Google Analytics. MonsterInsights passes all data directly to Google Analytics to process it on behalf of MonsterInsights. Google only shares this data if we allow it or if it is legally required. MonsterInsights does not use its own cookies to store data, but the code added by MonsterInsights loads Google Analytics, which adds cookies.
For example, it is recorded from which website you came to us, which buttons and links you click, how long you stay on a particular page, and when you leave the website. Furthermore, your IP address is displayed and stored in a shortened form so that no unique assignment is possible. It is also possible to determine your approximate location via the IP address, and technical information such as device type, browser type, internet provider, or screen resolution is also stored.
If you want to know more about data storage and data processing, we recommend our general privacy policy for Google Analytics.
How long and where are the data stored? MonsterInsights does not store the collected data but forwards them to Google Analytics. There, the data are stored on Google servers. These servers are distributed worldwide, but most are located in the USA. You can see exactly where the data centers are located at https://www.google.com/about/datacenters/locations/?hl=de. By default, your data are retained by Google for 26 months, but you also have the option to choose between different retention times. See also our Google Analytics privacy policy for this. The retention period applies to data linked with cookies, user identification, and advertising ID. Web analytics that appear in the form of reports are created through aggregated data and are stored independently of your user data.
How can I delete my data or prevent data storage? You have the right at any time to access, update, delete, and restrict your data. If you download and install the browser add-on at https://tools.google.com/dlpage/gaoptout?hl=de, you can prevent Google Analytics JavaScript from using your data by deactivating it.
If you generally want to disable, delete, or manage cookies, you can find the relevant links to the instructions for the most common browsers in the section „Cookies.“
Legal Basis The use of MonsterInsights requires your consent, which we have obtained through our cookie popup. This consent, according to Article 6(1)(a) GDPR (Consent), forms the legal basis for the processing of personal data that can occur during the collection by web analytics tools.
In addition to consent, we have a legitimate interest in analyzing the behavior of website visitors to technically and economically improve our offer. With the help of MonsterInsights, we detect errors on the website, can identify attacks, and improve economic efficiency. The legal basis for this is Article 6(1)(f) GDPR (Legitimate Interests). We use MonsterInsights only to the extent that you have given consent.
Google processes data including in the USA. We note that, according to the European Court of Justice, there is currently no adequate level of protection for data transfer to the USA. This can be associated with various risks for the legality and security of data processing.
As a basis for data processing with recipients located in third countries (outside the European Union, Iceland, Liechtenstein, Norway, especially in the USA) or for data transfer there, Google uses standard contractual clauses approved by the EU Commission (= Art. 46, Paras. 2 and 3 GDPR). These clauses obligate Google to maintain the EU level of data protection in processing relevant data, even if the data are stored, processed, and managed in the USA. These clauses are based on an implementing decision of the EU Commission. You can find the decision and the relevant standard contractual clauses here: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=en
If you want to learn more about the WordPress plugin MonsterInsights, we recommend visiting the website https://www.monsterinsights.com/. For more information about data processing by Google Analytics, we recommend our Google Analytics privacy policy, Google’s information page at https://support.google.com/analytics/answer/6004245?hl=en, and the website for the Google Analytics terms of use at https://marketingplatform.google.com/about/analytics/terms/us/.
Social Media Introduction
What is Social Media? In addition to our website, we are also active on various social media platforms. Data from users may be processed so that we can specifically target users who are interested in us through social networks. Additionally, elements of a social media platform may be directly embedded into our website. This occurs, for example, when you click a so-called social button on our website and are directly redirected to our social media presence. Social media, or social networks, refer to websites and apps through which registered members can produce content, share content openly or within specific groups, and connect with other members.
Why do we use social media? For years, social media platforms have been the places where people communicate and connect online. With our social media presence, we can introduce our products and services to interested parties. The social media elements embedded on our website help you switch quickly and effortlessly to our social media content.
The data that are stored and processed through your use of a social media channel are primarily intended to conduct web analytics. The aim of these analyses is to develop more accurate and personalized marketing and advertising strategies. Depending on your behavior on a social media platform, evaluated data can lead to appropriate conclusions about your interests and so-called user profiles can be created. This also enables platforms to present you with customized advertisements. Typically, cookies are set in your browser for this purpose, storing data about your user behavior.
We generally assume that we remain responsible for data protection, even when we use services of a social media platform. However, the European Court of Justice has decided that in certain cases, the operator of the social media platform can be jointly responsible with us in the sense of Art. 26 GDPR. Where this is the case, we will point it out separately and operate based on a corresponding agreement. The essentials of the agreement are then reproduced below in the section concerning the affected platform.
Please note that when using social media platforms or our embedded elements, data about you may also be processed outside the European Union, as many social media channels, such as Facebook or Twitter, are American companies. This may make it more difficult for you to assert or enforce your rights concerning your personal data.
What data are processed? The exact data stored and processed depends on the respective provider of the social media platform. But typically, data such as phone numbers, email addresses, data that you enter in a contact form, user data like which buttons you click, who you like or follow, when you visited which pages, information about your device, and your IP address are collected. Most of this data is stored in cookies. Especially if you have a profile on the visited social media channel and are logged in, data can be linked to your profile.
All data collected via a social media platform are also stored on the providers‘ servers. Thus, only the providers have access to the data and can provide you with the appropriate information or make changes.
If you want to know exactly which data are stored and processed by the social media providers and how you can object to data processing, you should carefully read the respective company’s privacy policy. If you have questions about data storage and data processing or want to exercise corresponding rights, we recommend contacting the provider directly.
Duration of data processing We will inform you below about the duration of data processing, as far as we have further information. For example, the social media platform Facebook stores data until they are no longer needed for their purposes. Customer data, which are matched with their own user data, are deleted within two days. In general, we process personal data only as long as it is absolutely necessary for providing our services and products. If, for example, in the case of accounting, it is legally required, this storage period can be exceeded.
Right to object You also have the right and the opportunity to withdraw your consent to the use of cookies or third-party providers such as embedded social media elements at any time. This can be done either through our cookie management tool or other opt-out functions. For example, you can also prevent data collection by cookies by managing, disabling, or deleting cookies in your browser.
Since social media tools may involve the use of cookies, we recommend that you also read our general privacy policy about cookies. To find out exactly which data are stored and processed, you should read the privacy policies of the respective tools.
Legal Basis If you have consented to data being processed and stored by embedded social media elements, this consent is the legal basis for data processing (Art. 6 Abs. 1 lit. a GDPR). Generally, your data are also stored and processed based on our legitimate interest (Art. 6 Abs. 1 lit. f GDPR) in fast and effective communication with you or other customers and business partners. We use embedded social media elements only to the extent that you have given consent. Most social media platforms also set cookies in your browser to store data. Therefore, we recommend that you carefully read our privacy text about cookies and view the privacy statement or cookie policy of the respective service provider.
AddThis processes data, including in the USA. We note that according to the European Court of Justice, there is currently no adequate level of protection for data transfer to the USA. This can be associated with various risks for the legality and security of data processing.
As the basis for data processing with recipients located in third countries (outside the European Union, Iceland, Liechtenstein, Norway, especially in the USA) or data transfer there, AddThis uses standard contractual clauses approved by the EU Commission (= Art. 46. Abs. 2 and 3 GDPR). These clauses obligate AddThis to maintain the EU level of data protection in processing relevant data even outside the EU. These clauses are based on an implementing decision of the EU Commission. You can find the decision and the relevant standard contractual clauses here: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=en
If you want to learn more about how your data is processed by AddThis, you can find more information at https://www.oracle.com/legal/privacy/.
Instagram Privacy Policy
What is Instagram? We have integrated functions of Instagram on our website. Instagram is a social media platform owned by Instagram LLC, 1601 Willow Rd, Menlo Park CA 94025, USA. Since 2012, Instagram has been a subsidiary of Meta Platforms Inc. and is part of the Facebook products. Embedding Instagram content on our website allows us to show you content such as buttons, photos, or videos from Instagram directly on our site. When you visit web pages of our website that have an Instagram function integrated, data are transmitted, stored, and processed by Instagram. Instagram uses the same systems and technologies as Facebook, meaning your data are processed across all Facebook companies.
Below, we aim to provide you with a detailed insight into why Instagram collects data, what data are involved, and how you can largely control data processing. Since Instagram belongs to Meta Platforms Inc., we derive our information from both the Instagram policies and Meta’s own privacy policies.
Instagram is one of the most famous social media networks globally, combining the advantages of a blog with those of audiovisual platforms like YouTube or Vimeo. On „Insta“ (as many users casually call the platform), you can upload photos and short videos, apply various filters, and also share them on other social networks. Even if you don’t want to be active yourself, you can follow other interesting users.
Why do we use Instagram on our website? Instagram has really taken off in the last few years, and of course, we have responded to this boom. We want you to feel as comfortable as possible on our website, so providing a variety of content is essential for us. The embedded Instagram features allow us to enrich our content with helpful, amusing, or exciting content from the world of Instagram. Since Instagram is a subsidiary of Facebook, the data collected can also be useful for personalized advertising on Facebook, ensuring that our advertisements are only shown to people who are genuinely interested in our products or services.
Instagram also uses the collected data for measurement and analysis purposes. We receive aggregated statistics that give us more insight into your preferences and interests. It is important to mention that these reports do not personally identify you.
What data does Instagram store? When you interact with any of our pages that have integrated Instagram features (such as Instagram images or plugins), your browser automatically connects to Instagram’s servers. This sends data to Instagram, which are stored and processed by Instagram, regardless of whether you have an Instagram account. This includes information about our website, your computer, purchases made, advertisements you see, and how you use our offerings. Moreover, the date and time of your interaction with Instagram are stored. If you have an Instagram account or are logged in, Instagram stores much more data about you.
Facebook differentiates between customer data and event data. We assume that this is the case with Instagram as well. Customer data includes name, address, phone number, and IP address. These customer data are transmitted to Instagram only after they have been „hashed“. Hashing means that a data set is turned into a string, making it possible to encrypt the contact data. The aforementioned „event data“ are also transmitted. Facebook – and consequently Instagram – defines event data as data about your user behavior. It is also possible for contact data to be combined with event data. The collected contact data are matched with the data Instagram already has about you.
Data are transmitted to Facebook via small text files (cookies), which are usually set in your browser. Depending on the Instagram features used and whether you have an Instagram account, different amounts of data are stored.
We assume that data processing by Instagram works the same as with Facebook. This means that if you have an Instagram account or have visited www.instagram.com, Instagram has set at least one cookie. If this is the case, your browser sends information to Instagram via the cookie as soon as you come into contact with an Instagram function. This data is deleted or anonymized no later than 90 days (after reconciliation). Although we have studied Instagram’s data processing intensively, we cannot precisely state what data Instagram exactly collects and stores.
Below we show you cookies that are at least set in your browser when you interact with an Instagram function (like a button or an Instagram image). In our test, we assume that you do not have an Instagram account. If you are logged into Instagram, significantly more cookies will be set in your browser.
Note: Please keep in mind that this is a sample list, and we cannot guarantee its completeness. The cookies set in an individual case depend on the embedded functions and your use of Instagram.
How long and where are the data stored? Instagram shares the information obtained between Facebook companies with external partners and with people you connect with globally. Data processing complies with their own data policy. Your data are distributed across Facebook servers worldwide for security reasons. Most of these servers are located in the USA.
How can I delete my data or prevent data storage? Under the General Data Protection Regulation, you have the right to access, portability, correction, and deletion of your data. You can manage your data in the Instagram settings. If you want to completely delete your data on Instagram, you need to permanently delete your Instagram account.
Here’s how to delete your Instagram account: First, open the Instagram app. On your profile page, scroll down and click on „Help Area“. You are now on the company’s website. On the website, click on „Manage Account“ and then on „Delete Your Account“.
If you delete your account completely, Instagram deletes posts such as your photos and status updates. Information that others have shared about you is not part of your account and therefore not deleted.
As mentioned above, Instagram primarily stores your data through cookies. You can manage, disable, or delete these cookies in your browser. Depending on your browser, cookie management works slightly differently. You can find the appropriate links to the instructions for the most popular browsers in the „Cookies“ section.
You can also set up your browser so that you are always informed when a cookie is to be set. Then you can always decide individually whether to allow the cookie or not.
Legal Basis If you have consented to data processing by embedded social media elements, this consent serves as the legal basis for data processing (Art. 6 Abs. 1 lit. a GDPR). Generally, your data are also stored and processed based on our legitimate interest (Art. 6 Abs. 1 lit. f GDPR) in fast and effective communication with you or other customers and business partners. We only use the embedded social media elements to the extent that you have given your consent. Most social media platforms also set cookies in your browser to store data. Therefore, we recommend that you carefully read our privacy text about cookies and view the privacy statement or cookie policies of the respective service provider.
Instagram processes data including in the USA. Instagram, or Meta Platforms, is an active participant in the EU-US Data Privacy Framework, which regulates the correct and secure data transfer of personal data of EU citizens to the USA. More information can be found at https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en.
Furthermore, Instagram uses so-called standard contractual clauses (= Art. 46. Abs. 2 and 3 GDPR). Standard contractual clauses are templates provided by the EU Commission and are intended to ensure that your data meet European data protection standards even when transferred to third countries (such as the USA). By using these clauses, Instagram commits to maintaining the European level of data protection in processing your relevant data, even if the data are stored, processed, and managed in the USA. These clauses are based on an implementing decision by the EU Commission. You can find the decision and the relevant standard contractual clauses here: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=en
We have tried to provide you with the most important information about data processing by Instagram. You can delve deeper into Instagram’s data policies at https://privacycenter.instagram.com/policy/.
Pinterest Privacy Policy What is Pinterest? We use buttons and widgets from the social media network Pinterest on our site, owned by Pinterest Inc., 808 Brannan Street, San Francisco, CA 94103, USA. In Europe, the Irish company Pinterest Europe Ltd. (Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland) is responsible for all data protection-related matters.
Pinterest is a social network that specializes in graphic representations or photography. The name is derived from the words „pin“ and „interest“. Users can exchange ideas about various hobbies and interests and view each other’s profiles with images either openly or within defined groups.
Why do we use Pinterest? Pinterest has been around for several years and still ranks as one of the most visited and appreciated platforms. Especially for our industry, Pinterest is suitable because the platform is primarily known for beautiful and interesting images. Therefore, we are also present on Pinterest to properly showcase our content even beyond our website. The collected data can also be used for advertising purposes, allowing us to show advertising messages precisely to those people who are interested in our services or products.
What data does Pinterest process? So-called log data can be stored. This includes information about your browser, IP address, the address of our website and the activities carried out on it (for example, when you click the Remember or Pin button), search histories, date and time of the request, and cookie and device data. If you interact with an embedded Pinterest function, cookies that store various data can also be set in your browser. Most of the above log data, preset language settings, and clickstream data are stored in cookies. Pinterest refers to clickstream data as information about your website behavior.
If you have a Pinterest account and are logged in, the data collected via our site can be added to your account and used for advertising purposes. If you interact with our embedded Pinterest functions, you are usually redirected to the Pinterest page.
How long and where is the data stored? Pinterest generally stores the collected data as long as they are needed for the company’s purposes. Once data storage is no longer necessary to meet legal requirements, for example, the data are either deleted or anonymized so you can no longer be identified as a person. Data may also be stored on servers in the United States.
Right to object You always have the right to revoke your consent to the use of cookies or third parties such as embedded Pinterest elements. This can be done either through our cookie management tool or other opt-out functions. For example, you can also prevent data collection by cookies by managing, disabling, or deleting cookies in your browser.
Since embedded Pinterest elements can involve cookies, we recommend that you also read our general privacy statement about cookies. To find out exactly what data is stored and processed, you should read the privacy statements of the respective tools.
Legal Basis If you have consented to data processing by embedded social media elements, this consent serves as the legal basis for data processing (Art. 6 Abs. 1 lit. a GDPR). Generally, your data are also stored and processed based on our legitimate interest (Art. 6 Abs. 1 lit. f GDPR) in fast and effective communication with you or other customers and business partners. We only use the embedded social media elements to the extent that you have given your consent. Most social media platforms also set cookies in your browser to store data. Therefore, we recommend that you carefully read our privacy text about cookies and view the privacy statement or cookie policies of the respective service provider.
Pinterest processes data including in the USA. We point out that according to the European Court of Justice, there is currently no adequate level of protection for data transfer to the USA. This can involve various risks for the legality and security of data processing.
As a basis for data processing with recipients located in third countries (outside the European Union, Iceland, Liechtenstein, Norway, especially in the USA) or for data transfer thereto, Pinterest uses standard contractual clauses approved by the EU Commission (= Art. 46. Abs. 2 and 3 GDPR). These clauses oblige Pinterest to maintain the EU level of data protection in processing your relevant data, even if the data are stored, processed, and managed outside the EU. These clauses are based on an implementing decision by the EU Commission. You can find the decision and the relevant standard contractual clauses here: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=en.
For more information on standard contractual clauses at Pinterest, see https://policy.pinterest.com/en/privacy-policy.
We have tried to provide you with the most important information about data processing by Pinterest. For a more in-depth exploration of Pinterest’s data policies, visit https://policy.pinterest.com/en/privacy-policy.
TikTok Privacy Policy
What is TikTok? We utilize TikTok integration on our website. The service provider is the Chinese company Beijing Bytedance Technology Ltd. For Europe, the responsible company is TikTok Technology Limited, located at 10 Earlsfort Terrace, Dublin, D02 T380, Ireland. TikTok is a popular social media platform among young people, where users can create, share, and view short video clips.
In this privacy policy, we inform you about the data processed by TikTok, how long the data is stored, and how you can manage your privacy settings.
Why do we use TikTok on our website? We have integrated TikTok into our website so that you can watch TikTok videos and potentially interact with them if you wish. TikTok is known for its fun and creative content, and we naturally want to share such content with you. After all, we enjoy watching the occasional creative TikTok video ourselves.
What data does TikTok process? When you watch or interact with TikTok videos on our website, TikTok may collect information about your usage behavior and your device. This may include data such as your IP address, browser type, operating system, location, and other technical information. TikTok may also use cookies and similar technologies to collect information and personalize your user experience.
If you have a TikTok account, additional information may also be collected and processed. This includes user information (such as name, date of birth, or your email address) and data about your interactions with other TikTok users.
How long and where is the data stored? The storage duration and locations for the data collected by TikTok can vary greatly and are subject to TikTok’s privacy policies. TikTok may also store data on servers in the USA and other countries. The storage duration generally adheres to the respective legal requirements and internal policies. We have not yet been able to determine exactly how long data is stored. As soon as we have more information, we will inform you accordingly.
How can I delete my data or prevent data storage? If you have a TikTok account, you can manage your privacy settings directly on TikTok. For example, in the settings of your TikTok account, you can specify which information may be shared and which may not. You can also manage and disable cookies in your web browser to limit data collection. This is also possible without a TikTok account. Please note, however, that this may affect the functionality of our website and your TikTok experience.
Legal Basis If you have consented to data processing by TikTok, this consent serves as the legal basis for data processing (Art. 6 Abs. 1 lit. a GDPR). Generally, your data are also stored and processed based on our legitimate interest (Art. 6 Abs. 1 lit. f GDPR) in fast and effective communication with you or other customers and business partners. We only use the integrated social media elements to the extent that you have given your consent. TikTok may also set cookies in your browser to store data. Therefore, we recommend that you read our privacy text about cookies carefully and review the privacy statement or cookie policies of the respective service provider.
TikTok processes data including in the USA. We point out that according to the European Court of Justice, there is currently no adequate level of protection for data transfer to the USA. This can involve various risks for the legality and security of data processing.
As a basis for data processing with recipients located in third countries (outside the European Union, Iceland, Liechtenstein, Norway, particularly in the USA) or for data transfer thereto, TikTok uses standard contractual clauses approved by the EU Commission (= Art. 46. Abs. 2 and 3 GDPR). These clauses oblige TikTok to maintain the EU level of data protection in processing your relevant data, even if the data are stored, processed, and managed outside the EU. These clauses are based on an implementing decision by the EU Commission. You can find the decision and the relevant standard contractual clauses here: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=en
For more information on TikTok’s privacy policy and data collection, please visit TikTok’s website at https://www.tiktok.com/legal/page/eea/privacy-policy/en and the general information about TikTok at https://www.tiktok.com/en/.
Explanation of Used Terms We strive to make our privacy policy as clear and understandable as possible. Especially with technical and legal topics, this is not always entirely simple. It often makes sense to use legal terms (such as „personal data“) or certain technical expressions (such as „cookies, IP address“). We do not want to use these without explanation. Below you will find an alphabetical list of important terms used in the privacy policy that we may not have sufficiently addressed previously. If these terms are taken from the GDPR and are definitions, we will also provide the GDPR texts and possibly add our own explanations.
Processor Definition according to Article 4 of the GDPR
In this regulation, the term:
„Processor“ means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller;
Explanation: We, as a company and website owner, are responsible for all data we process from you. Besides those responsible, there may also be so-called processors. These include any company or person who processes personal data on our behalf. Processors could include service providers like tax advisors, as well as hosting or cloud providers, payment or newsletter providers, or large companies such as Google or Microsoft.
Consent Definition according to Article 4 of the GDPR
In this regulation, the term:
„Consent“ of the data subject means any freely given, specific, informed, and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her;
Explanation: Typically, on websites, such consent is obtained via a cookie-consent tool. You are probably familiar with this. Whenever you visit a website for the first time, you are usually asked via a banner whether you consent to data processing. You can often make individual settings and decide which data processing you allow and which you do not. If you do not give your consent, no personal data can be processed. Of course, consent can also be given in writing, not just through a tool.
Personal Data Definition according to Article 4 of the GDPR
In this regulation, the term:
„Personal data“ means any information relating to an identified or identifiable natural person (‚data subject‘); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;
Explanation: Personal data are thus all data that can identify you as a person. According to the European Court of Justice (ECJ), your IP address is also considered personal data. IT experts can at least determine the approximate location of your device and consequently you as the connection holder based on your IP address. Therefore, storing an IP address also requires a legal basis in terms of the GDPR. There are also so-called „special categories“ of personal data, which are particularly sensitive and thus require higher protection. These include:
racial and ethnic origin political opinions religious or philosophical beliefs trade union membership genetic data, such as data derived from blood or saliva samples biometric data (data about physical, physiological, or behavioral characteristics that can identify a person). health data data concerning a natural person’s sex life or sexual orientation Profiling Definition according to Article 4 of the GDPR
In this regulation, the term:
„Profiling“ means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements;
Explanation: Profiling involves gathering various pieces of information about a person to learn more about them. In the web context, profiling is often used for advertising purposes or credit checks. Web or advertising analysis programs, for example, collect data about your behavior and interests on a website. From this, a specific user profile is created, with the help of which advertising can be targeted to a specific audience.
Controller Definition according to Article 4 of the GDPR
In this regulation, the term:
„Controller“ means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law;
Explanation: In our case, we are responsible for the processing of your personal data and thus the „Controller“. If we pass on collected data for processing to other service providers, they are „Processors“. An „Order Processing Agreement (AVV)“ must be signed for this.
Processing Definition according to Article 4 of the GDPR
In this regulation, the term:
„Processing“ means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;
Note: When we talk about processing in our privacy policy, we mean any kind of data processing. This includes, as mentioned in the original GDPR explanation, not only collecting but also storing and processing data.
Closing Word Congratulations! If you are reading these lines, you have really „fought“ through our entire privacy policy or at least scrolled down to here. As you can see from the extent of our privacy policy, we take the protection of your personal data very seriously. It is important to us to inform you as accurately and consciently as possible about the processing of personal data. In doing so, we not only want to inform you about which data is processed, but also explain the reasons for the use of various software programs. Privacy policies usually sound very technical and legal. Since most of you are neither web developers nor lawyers, we wanted to take a different linguistic approach and explain the matter in simple and clear language. Of course, due to the subject matter, this is not always possible. Therefore, the most important terms are explained in more detail at the end of the privacy policy. If you have any questions about data protection on our website, please do not hesitate to contact us or the responsible office. We wish you a pleasant time and hope to welcome you back to our website soon.
All texts are copyrighted.
Source: Created with the Datenschutz Generator Österreich by AdSimple