DATA PRIVACY STATEMENT

DATENSCHUTZ

AUTOMATIC DATA STORAGE

• the address (URL) of the website accessed
• Browser and browser version
• the operating system used
• the address (URL) of the previously visited page (referrer URL)
• the host name and IP address of the device from which access is made
• Date and time

COOKIES

What exactly are cookies?

• Name: _ga
• Expiry period: 2 years
• Use: Differentiation of website visitors
• Example value: GA1.2.1326744211.152221096405

• A cookie should be able to contain at least 4096 bytes
• A minimum of 50 cookies should be able to be stored per domain
• A total of at least 3000 cookies should be able to be stored

What types of cookies are there?

How can I delete cookies?

What about my data protection? The so-called „cookie guidelines“ have been in place since 2009. These state that the storage of cookies requires the consent of the website visitor (i.e. you). However, there are still very different reactions to these directives within the EU countries. In Austria, however, this directive has been implemented in Section 96 (3) of the Telecommunications Act (TKG). If you would like to know more about cookies and are not afraid of technical documentation, we recommend https://tools.ietf.org/html/rfc6265, the Request for Comments of the Internet Engineering Task Force (IETF) called „HTTP State Management Mechanism“.

STORAGE OF PERSONAL DATA

Personal data that you transmit to us electronically on this website, such as your name, e-mail address, address or other personal details when submitting a form or comments on the blog, will only be used by us together with the time and IP address for the purpose stated in each case, stored securely and not passed on to third parties. We therefore only use your personal data to communicate with those visitors who expressly request contact and to process the services and products offered on this website. We do not pass on your personal data without your consent, but we cannot rule out the possibility of this data being viewed in the event of unlawful behavior. If you send us personal data by e-mail – i.e. outside of this website – we cannot guarantee the secure transmission and protection of your data. We recommend that you never send confidential data unencrypted by e-mail. According to Article 6(1)(a) GDPR (lawfulness of processing), the legal basis is that you give us your consent to process the data you have entered. You can revoke this consent at any time – an informal e-mail is sufficient, you will find our contact details in the imprint.

EVALUATION OF VISITOR CONDUCT

In the following privacy policy, we inform you whether and how we analyze data from your visit to this website. The evaluation of the collected data is generally anonymous and we cannot draw any conclusions about your person from your behavior on this website. You can find out more about how to object to this analysis of visit data in the following privacy policy.

TLS ENCRYPTION WITH HTTPS

We use https to transmit data tap-proof on the Internet (data protection by technical design Article 25(1) GDPR). By using TLS (Transport Layer Security), an encryption protocol for secure data transmission on the Internet, we can ensure the protection of confidential data. You can recognize the use of this data transmission security by the small lock symbol at the top left of the browser and the use of the https scheme (instead of http) as part of our Internet address.

GOOGLE FONTS LOCAL PRIVACY POLICY

We use Google Fonts from Google Inc (1600 Amphitheatre Parkway Mountain View, CA 94043, USA) on our website. We have integrated the Google fonts locally, i.e. on our web server, not Google’s server. This means that there is no connection to Google’s servers and therefore no data transfer or storage.

What are Google Fonts?

Google Fonts (formerly Google Web Fonts) is an interactive directory with more than 800 fonts that Google LLC provides for free use. With Google Fonts, you could use the fonts without uploading them to your own server. However, in order to prevent any transfer of information to the Google server in this regard, we have downloaded the fonts to our server. In this way, we act in compliance with data protection regulations and do not send any data to Google Fonts. Unlike other web fonts, Google allows us unrestricted access to all fonts. This means we have unlimited access to a sea of fonts and can therefore get the most out of our website. You can find out more about Google Fonts and other questions at https://developers.google.com/fonts/faq?tid=221096405.

GOOGLE FONTS PRIVACY POLICY

We use Google Fonts from Google Inc (1600 Amphitheatre Parkway Mountain View, CA 94043, USA) on our website. You do not need to log in or enter a password to use Google fonts. Furthermore, no cookies are stored in your browser. The files (CSS, fonts) are requested via the Google domains fonts.googleapis.com and fonts.gstatic.com. According to Google, requests for CSS and fonts are completely separate from all other Google services. If you have a Google account, you do not need to worry that your Google account data will be transmitted to Google while using Google Fonts. Google records the use of CSS (Cascading Style Sheets) and the fonts used and stores this data securely. We will take a closer look at exactly how the data is stored.

What are Google Fonts?

Google Fonts (formerly Google Web Fonts) is an interactive directory with more than 800 fonts that Google LLC provides for free use. Many of these fonts are published under the SIL Open Font License, while others are published under the Apache License. Both are free software licenses. This means we can use them freely without paying license fees.

Why do we use Google Fonts on our website?

With Google Fonts, we can use fonts on our own website without having to upload them to our own server. Google Fonts is an important component in keeping the quality of our website high. All Google fonts are automatically optimized for the web and this saves data volume and is a great advantage, especially for use on mobile devices. When you visit our site, the low file size ensures a fast loading time. Furthermore, Google Fonts are so-called secure web fonts. Different image synthesis systems (rendering) in different browsers, operating systems and mobile devices can lead to errors. Such errors can sometimes visually distort texts or entire websites. Thanks to the fast Content Delivery Network (CDN), there are no cross-platform problems with Google Fonts. Google Fonts supports all common browsers (Google Chrome, Mozilla Firefox, Apple Safari, Opera) and works reliably on most modern mobile operating systems, including Android 2.2+ and iOS 4.2+ (iPhone, iPad, iPod). We therefore use Google Fonts so that we can present our entire online service as beautifully and uniformly as possible. According to Art. 6 para. 1 f lit. F GDPR, this already constitutes a „legitimate interest“ in the processing of personal data. In this case, „legitimate interest“ means both legal and economic or non-material interests that are recognized by the legal system.

What data is stored by Google?

When you visit our website, the fonts are reloaded via a Google server. This external call transmits data to the Google server. In this way, Google also recognizes that you or your IP address is visiting our website. The Google Fonts API was developed to reduce the collection, storage and use of end user data to what is necessary for the efficient provision of fonts. Incidentally, API stands for „Application Programming Interface“ and serves, among other things, as a data transmitter in the software sector. Google Fonts stores CSS and font requests securely at Google and is therefore protected. Google can determine the popularity of the fonts by collecting usage figures. Google publishes the results on internal analysis pages, such as Google Analytics. Google also uses data from its own web crawler to determine which websites use Google fonts. This data is published in the BigQuery database of Google Fonts. BigQuery is a web service from Google for companies that want to move and analyze large amounts of data. However, it should be noted that every Google Font request also automatically transmits information such as IP address, language settings, browser screen resolution, browser version and browser name to the Google servers. It is not clear whether this data is also stored or whether it is clearly communicated by Google.

How long and where is the data stored?

Google stores requests for CSS assets for one day on your servers, which are mainly located outside the EU. This enables us to use the fonts with the help of a Google stylesheet. A stylesheet is a format template that can be used to quickly and easily change the design or font of a website, for example. The font files are stored by Google for one year. Google’s aim is to fundamentally improve the loading time of websites. If millions of websites refer to the same fonts, they are cached after the first visit and immediately reappear on all other websites visited later. Sometimes Google updates font files to reduce file size, increase language coverage and improve design.

How can I delete my data or prevent data storage? The data that Google stores for one day or one year cannot simply be deleted. The data is automatically transmitted to Google when the page is accessed. To delete this data prematurely, you must contact Google support at https://support.google.com/?hl=de&tid=221096405. In this case, you can only prevent data storage if you do not visit our website. Unlike other web fonts, Google allows us unrestricted access to all fonts. This means we have unlimited access to a sea of fonts and can therefore get the most out of our website. You can find out more about Google Fonts and other questions at https://developers.google.com/fonts/faq?tid=221096405. Although Google addresses data protection issues there, it does not provide any really detailed information about data storage. It is relatively difficult (almost impossible) to obtain really precise information from Google about stored data. You can also find out which data is generally collected by Google and what this data is used for at https://www.google.com/intl/de/policies/privacy/.

GOOGLE MAPS PRIVACY STATEMENT

We use Google Maps from Google Inc (1600 Amphitheatre Parkway Mountain View, CA 94043, USA) on our website. By using the functions of this map, data is transmitted to Google. You can find out what data is collected by Google and what this data is used for at https://www.google.com/intl/de/policies/privacy/.

GOOGLE ANALYTICS PRIVACY STATEMENT

We use Google Analytics from Google LLC (1600 Amphitheatre Parkway Mountain View, CA 94043, USA) on this website to statistically analyze visitor data. Google Analytics uses targeted cookies for this purpose.

Cookies from Google Analytics

• _ga
  • Expiry term: 2 years
  • Use: Differentiation of website visitors
  • Example value: GA1.2.1326744211.152221096405
• _gid
  • Expiration time: 24 hours
  • Use: Differentiation of website visitors
  • Example value: GA1.2.1687193234.152221096405
• _gat_gtag_UA_
  • Runtime: 1 minute
  • Verwendung: Used to throttle the request rate. If Google Analytics is provided via Google Tag Manager, this cookie is named _dc_gtm_ .
  • Example value: 1

You can find more information on terms of use and data protection at http://www.google.com/analytics/terms/de.html or at https://support.google.com/analytics/answer/6004245?hl=de.

Pseudonymisierung

Our concern in terms of the GDPR is the improvement of our offer and our website. As the privacy of our users is important to us, user data is pseudonymized. Data processing is carried out on the basis of the statutory provisions of Section 96 (3) TKG and Art. 6 EU GDPR (1) (a) (consent) and/or (f) (legitimate interest) of the GDPR.

Deactivation of data collection by Google Analytics

With the help of the browser add-on to deactivate Google Analytics JavaScript (ga.js, analytics.js, dc.js), website visitors can prevent Google Analytics from using their data. You can prevent Google from collecting the data generated by the cookie and relating to your use of the website and from processing this data by Google by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de

RIGHTS UNDER THE BASIC DATA PROTECTION REGULATION

According to the provisions of the GDPR and the Austrian Datenschutzgesetz (DSG), you have the following rights:

• Right to rectification (Article 16 GDPR)
• Right to erasure („right to be forgotten“) (Article 17 GDPR)
• Right to restriction of processing (Article 18 GDPR)
• Right to notification – Obligation to notify in connection with rectification or erasure of personal data or restriction of processing (Article 19 GDPR)
• Right to data portability (Article 20 GDPR)
• Right to object (Article 21 GDPR)
• Right not to be subject to a decision based solely on automated processing, including profiling (Article 22 GDPR)

If you believe that the processing of your data violates data protection law or your data protection claims have otherwise been violated in any way, you can complain to the supervisory authority, which in Austria is the data protection authority, whose website you can find at https://www.dsb.gv.at/.

EMBEDDED SOCIAL MEDIA ELEMENTS DATA PRIVACY STATEMENT

We integrate elements of social media services on our website to display images, videos and texts. When you visit pages that display these elements, data is transferred from your browser to the respective social media service and stored there. We have no access to this data. The following links will take you to the pages of the respective social media services where it is explained how they handle your data:

• Instagram-Datenschutzrichtlinie: https://help.instagram.com/519522125107875
• The Google privacy policy applies to YouTube: https://policies.google.com/privacy?hl=de
• Facebook privacy policy: https://www.facebook.com/about/privacy
• Twitter privacy policy: https://twitter.com/de/privacy

FACEBOOK PRIVACY POLICY

On this website we use functions of Facebook, a social media network of Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland. You can find out which functions (social plug-ins) Facebook provides at https://developers.facebook.com/docs/plugins/. Information may be transmitted to Facebook when you visit our website. If you have a Facebook account, Facebook can assign this data to your personal account. If you do not wish this to happen, please log out of Facebook. The privacy policy, what information Facebook collects and how they use it can be found at https://www.facebook.com/policy.php.

YOUTUBE PRIVACY STATEMENT

We use the video service YouTube, YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA, on this website. When you access pages on our website that have integrated YouTube videos, data is transmitted to YouTube, stored and analyzed. If you have a YouTube account and are logged in, this data will be assigned to your personal account and the data stored in it. You can find out what data is collected by Google and what this data is used for at https://www.google.com/intl/de/policies/privacy/.

INSTAGRAM PRIVACY POLICY

We use functions of the social media network Instagram of Instagram LLC, 1601 Willow Rd, Menlo Park CA 94025, USA on our website. We can display images and videos using the functions for embedding Instagram content (embed function). When you access pages that use such functions, data (IP address, browser data, date, time, cookies) is transmitted to Instagram, stored and analyzed. If you have an Instagram account and are logged in, this data will be assigned to your personal account and the data stored in it. The privacy policy, what information Instagram collects and how they use it can be found at https://help.instagram.com/519522125107875.

LINKEDIN PRIVACY POLICY

We use functions of the social media network LinkedIn of LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA on our website. By accessing pages that use such functions, data (IP address, browser data, date and time, cookies) is transmitted to LinkedIn, stored and analyzed. If you have a LinkedIn account and are logged in, this data will be assigned to your personal account and the data stored in it. The privacy policy, what information LinkedIn collects and how they use it can be found at https://www.linkedin.com/legal/privacy-policy.

GOOGLE RECAPTCHA PRIVACY STATEMENT

Our primary goal is to ensure that our website is as secure and safe as possible for you and for us. To ensure this, we use Google reCAPTCHA from Google Inc (1600 Amphitheatre Parkway Mountain View, CA 94043, USA). With reCAPTCHA we can determine whether you are really a flesh-and-blood person and not a robot or other spam software. By spam, we mean any unsolicited information that is sent to us electronically. With the classic CAPTCHAs, you usually had to solve text or picture puzzles for verification. With reCAPTCHA from Google, we don’t usually have to bother you with such puzzles. In most cases, all you have to do is tick a box to confirm that you are not a bot. With the new Invisible reCAPTCHA version, you no longer even have to tick the box. You can find out exactly how this works and, above all, which data is used for this in the course of this privacy policy. The legal basis for the use is Article 6 (1) f (lawfulness of processing), because there is a legitimate interest in protecting this website from bots and spam software.

What is reCAPTCHA?

reCAPTCHA is a free captcha service from Google that protects websites from spam software and abuse by non-human visitors. This service is most commonly used when you fill out forms on the Internet. A Captcha service is an automatic Turing test designed to ensure that an action on the Internet is performed by a human and not by a bot. In the classic Turing test (named after the computer scientist Alan Turing), a human determines the difference between a bot and a human. With captchas, the computer or a software program also does this. Classic captchas work with small tasks that are easy for humans to solve but present considerable difficulties for machines. With reCAPTCHA, you no longer have to actively solve puzzles. The tool uses modern risk techniques to distinguish humans from bots. All you have to do here is tick the „I am not a robot“ text field, and with Invisible reCAPTCHA even this is no longer necessary. With reCAPTCHA, a JavaScript element is integrated into the source code and then the tool runs in the background and analyzes your user behaviour. The software calculates a so-called captcha score from these user actions. Google uses this score to calculate the probability that you are human even before you enter the captcha. ReCAPTCHA or captchas in general are always used when bots could manipulate or abuse certain actions (such as registrations, surveys, etc.).

Why do we use reCAPTCHA on our website?

We only want to welcome flesh and blood people to our site. Bots and spam software of all kinds can safely stay at home. That’s why we do everything we can to protect ourselves and offer you the best possible user experience. For this reason, we use Google reCAPTCHA from Google. This way we can be pretty sure that we remain a „bot-free“ website. By using reCAPTCHA, data is transmitted to Google, which Google uses to determine whether you are actually a human being. reCAPTCHA therefore serves to ensure the security of our website and, by extension, your security. For example, without reCAPTCHA it could happen that a bot registers as many e-mail addresses as possible during registration in order to subsequently „spam“ forums or blogs with unwanted advertising content. With reCAPTCHA we can avoid such bot attacks.

What data is stored by reCAPTCHA?

ReCAPTCHA collects personal data from users in order to determine whether the actions on our website actually originate from people. The IP address and other data that Google requires for the reCAPTCHA service can therefore be sent to Google. IP addresses are almost always truncated within the member states of the EU or other signatory states to the Agreement on the European Economic Area before the data is sent to a server in the USA. The IP address is not combined with other Google data unless you are logged in with your Google account while using reCAPTCHA. First, the reCAPTCHA algorithm checks whether Google cookies from other Google services (YouTube, Gmail, etc.) have already been placed on your browser. Then reCAPTCHA places an additional cookie in your browser and takes a snapshot of your browser window. The following list of collected browser and user data is not intended to be exhaustive. Rather, they are examples of data that, to our knowledge, are processed by Google.

• Referrer URL (the address of the page from which the visitor came)
• IP address (e.g. 256.123.123.1)
• Information about the operating system (the software that enables your computer to operate. Common operating systems are Windows, Mac OS X or Linux)
• Cookies (small text files that store data in your browser)
• Mouse and keyboard behavior (every action you perform with the mouse or keyboard is saved)
• Date and language settings (which language or date you have preset on your PC is saved)
• All JavaScript objects (JavaScript is a programming language that enables websites to adapt to the user. JavaScript objects can collect all kinds of data under one name)
• Screen resolution (indicates how many pixels the image display consists of)

It is undisputed that Google uses and analyzes this data even before you click on the „I am not a robot“ checkbox. With the Invisible reCAPTCHA version, you don’t even have to check the box and the entire recognition process runs in the background. Google does not tell you in detail exactly how much and what data it stores. The following cookies are used by reCAPTCHA: Here we refer to the reCAPTCHA demo version from Google at https://www.google.com/recaptcha/api2/demo. All these cookies require a unique identifier for tracking purposes. Here is a list of cookies that Google reCAPTCHA has set on the demo version: Name: IDE Expiry date: after one year Use: This cookie is set by the company DoubleClick (also owned by Google) to register and report the actions of a user on the website when interacting with advertisements. This allows the effectiveness of advertising to be measured and appropriate optimization measures to be taken. IDE is stored in browsers under the domain doubleclick.net. Example value: WqTUmlnmv_qXyi_DGNPLESKnRNrpgXoy1K-pAZtAkMbHI-221096405 Name: 1P_JAR Expiry date: after one month Usage: This cookie collects statistics on website usage and measures conversions. A conversion occurs, for example, when a user becomes a buyer. The cookie is also used to display relevant advertisements to users. The cookie can also be used to prevent a user from seeing the same ad more than once. Beispielwert: 2019-5-14-12 Name: ANID Expiry date: after 9 months Use: We were unable to find out much information about this cookie. In Google’s privacy policy, the cookie is mentioned in connection with „advertising cookies“ such as „DSID“, „FLC“, „AID“, „TAID“. ANID is stored under domain google.com. Beispielwert: U7j1v3dZa2210964050xgZFmiqWppRWKOr Name: CONSENT Expiry date: after 19 years Usage: The cookie stores the status of a user’s consent to the use of various Google services. CONSENT is also used for security purposes to verify users, prevent fraudulent login information and protect user data from unauthorized attacks. Beispielwert: YES+AT.de+20150628-20-0 Name: NID Expiry date: after 6 months Use: NID is used by Google to customize ads to your Google search. With the help of the cookie, Google „remembers“ your most frequently entered search queries or your previous interaction with ads. So you always get customized ads. The cookie contains a unique ID that Google uses to collect the user’s personal settings for advertising purposes. Example value: 0WmuWqy221096405zILzqV_nmt3sDXwPeM5Q Name: DV Expiration time: after 10 minutes Usage: As soon as you have checked the „I am not a robot“ box, this cookie is set. The cookie is used by Google Analytics for personalized advertising. DV collects information in anonymized form and is also used to make user distinctions. Example value: gEAABBCjJMXcI0dSAAAANbqc221096405 Note: This list cannot claim to be exhaustive, as experience has shown that Google changes its choice of cookies from time to time.

How long and where is the data stored?

By inserting reCAPTCHA, data is transferred from you to the Google server. Where exactly this data is stored is not made clear by Google, even after repeated requests. Without having received confirmation from Google, it can be assumed that data such as mouse interaction, time spent on the website or language settings are stored on the European or American Google servers. The IP address that your browser transmits to Google is not merged with other Google data from other Google services. However, if you are logged in to your Google account while using the reCAPTCHA plug-in, the data will be merged. The deviating data protection provisions of Google apply.

How can I delete my data or prevent data storage? If you do not want any data about you and your behavior to be transmitted to Google, you must log out of Google completely and delete all Google cookies before you visit our website or use the reCAPTCHA software. In principle, the data is automatically transmitted to Google as soon as you visit our website. To delete this data again, you must contact Google support at https://support.google.com/?hl=de&tid=221096405. By using our website, you consent to the automatic collection, processing and use of data by Google LLC and its representatives. You can find out more about reCAPTCHA on Google’s web developer page at https://developers.google.com/recaptcha/. Although Google goes into more detail here about the technical development of reCAPTCHA, you will search in vain for precise information about data storage and data protection issues. A good overview of the basic use of data at Google can be found in the company’s own privacy policy at https://www.google.com/intl/de/policies/privacy/. Source: Created with the imprint generator from firmenwebseiten.at in cooperation with limegreen.at