Data Protection Statement
This data protection statement informs you with respect to the nature, extent and purpose of the processing of personal data (hereinafter briefly “Data”) within our online services and the websites, functions and content and external online presence, such as our social media profiles (hereinafter collectively “Online Services”). With a view to the terminology used, such as, for example, “processing” or “controller”, we refer to the definitions in Art. 4 of the General Data Protection Regulation (GDPR).
Types of processed data:
– inventory data
– contact data
– content data
– usage data
– meta-/communication data
Categories of affected persons
Visitors and users of the online services (the persons affected are hereinafter referred to in summary as „Users“).
Purpose of processing
– Providing the online services, its functions and contents.
– Answering contact inquiries and communication with users.
– Security measures.
– Coverage measurement/Marketing.
Used Terminology
“Personal data” means any information relating to an identified or identifiable natural person (“data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier (e.g. cookie) or to one or more special factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.
“processing“ means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means. The term has a wide meaning and encompasses practically any dealing with data.
“pseudonymization” means the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organizational measures to ensure that the personal data are not attributed to an identified or identifiable natural person.
“Profiling” means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements.
“Controller” means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.
“Processor” means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.
Relevant legal basis
Pursuant to Article 13 GDPR, we inform you of the legal basis of our processing activities. If the legal basis is not referred to in the data protection statement, the following shall apply: The legal basis for obtaining consents consists of Article 6 (1) (a) and Article 7 GDPR; the legal basis for processing for the purpose of performance of our services and of contractual measures and answering requests consists of Article 6 (1) (b) GDPR; the legal basis for processing for the purpose of performance or our legal obligations consists of Article 6 (1) (c) GDPR; and the legal basis for processing for protecting our justified interests consists of Article 6 (1) (f) GDPR. In the event that vital interests of the person concerned or of another natural person require a processing of personal data, Article 6 (1) (d) GDPR serves as the legal basis.
Security precautions
Pursuant to Article 32 GDPR, we effect suitable technical and organisational measures to ensure a reasonable level of protection in relation to the risk, taking into account the state of the art, the implementation costs, and the nature, scope, context and purposes of processing as well the varying likelihood and severity of risks for the rights and freedoms of natural persons.
These measures in particular include ensuring the confidentiality, integrity and availability of data by controlling physical access to the data, as well as access, entering and transfer of data, and ensuring their availability and their separation. Further, we have implemented procedures ensuring that rights of affected persons will be maintained, and ensuring deletion of data and reaction to data compromise. In addition, we consider the protection of personal data already with the development respectively the selection of hardware, software and procedures, in accordance with the principle of data protection by technology design and by default settings (Article 25 GDPR).
Collaboration with processors and third parties
Insofar as we, in the scope of our processing, disclose data to other persons and companies (processors or third parties), transfer data to them, or otherwise permit them access to the data, then this takes place only on the basis of a legal authority (e.g. if the transfer of data to third parties, such as payment services provider, is required for performance of contractual duties pursuant to Article 6 (1) (b) GDPR), if you consented, if provided by a legal obligation, or on the basis of our justified interests (e.g. in case of using officers, webhosters, etc.).
Insofar as we instruct third parties to process data on the basis of a so-called “processing agreement”, this is done on the basis of Article 28 GDPR.
Transfer to third countries
Insofar as we process data in a third country (i.e. outside of the European Union (EU) or of the European Economic Area (EEA)), or if this is done in the scope of resorting to third party services, or of the disclosure respectively transfer of data to third parties, then this occurs only if required for the performance of our (pre-) contractual obligations, on the basis of your consent, by reason of a legal obligation, or on the basis of our legitimate interests. Subject to statutory or contractual permission, we process, or cause to be processed, data in a third country only if the special prerequisites of articles 44 ff. GDPR are fulfilled. This means that the processing takes place, e.g., on the basis of special guarantees, such as the officially recognized determination of a data protection level corresponding to the EU (e.g. for the USA by the “Privacy Shield”), or compliance with officially recognized special contractual obligations (so-called “standard contractual clauses”).
Rights of data subjects
You are entitled to demand a confirmation as to whether or not data regarding you are being processed, and to information respecting these data and to further information and a copy of the data in accordance with Article 15 GDPR.
In accordance with Article 16, GDPR, you have the right to demand the completion of data regarding you, or the rectification of incorrect data regarding you.
Pursuant to Article 17 GDPR, you have the right to demand that data regarding you be deleted forthwith, respectively, in the alternative, to demand a restriction of processing pursuant to Article 18 GDPR.
You have the right to demand pursuant to Article 20 GDPR to receive the data regarding you, which you made available to us, and the transfer of such data to other controllers.
Pursuant to Article 77 GDPR, you further have the right to file a complaint with the competent supervisory authority.
Right to withdraw consent
You have the right pursuant to Article 7 (3) GDPR to withdraw your consent with effect for the future.
Right to object
You may at any time object to the future processing of data regarding you pursuant to Article 21 GDPR. The objection may be raised in particular against processing for the purpose of direct marketing.
Cookies and the right to object in case of direct marketing
“Cookies” are small files stored on the computers of users. Various information may be stored within the cookies. A cookie serves primarily the purpose of storing the information concerning a user (respectively concerning the device on which the cookie is stored) during or even after his or her use of an online service. Temporary cookies respectively “session cookies” or “transient cookies” are cookies, which are deleted after a user leaves an online service and closes his browser. In such a cookie, the content of a basket, for example, in an online shop or a log-in status may be stored. “permanent” or “persistent” cookies are those which remain stored even after the browser is closed. Thus, for example, the log-in status may be stored, if the user visits same again after several days. Likewise, the interests of users may be stored in such a cookie, which are used to measure coverage, or for marketing purposes. Cookies offered by other parties than the controller operating the online service are described as “third party cookie” (cookies only of the latter operator are described as “first party cookies”).
We may use temporary and permanent cookies and will inform you accordingly in our data protection statement.
If users do not wish that cookies are stored on their computer, they are requested to deactivate the corresponding option in the system settings of their browser. Stored cookies may be deleted in the system settings of the browser. The exclusion of cookies may lead to limitations of the functions of this Online Service.
A general objection against the use of cookies used for online marketing may be declared in case of many services, primarily in the case of tracking, through the US site http://www.aboutads.info/choices/ or the EU site http://www.youronlinechoices.com/. Further, the storage of cookies may be realized by way of their being turned off on the browser settings. Please note that in such case you perhaps may not be able to use all functions of this Online Service.
Note on data processing: Note on data processing: The processing of your data collected on this website is controlled in the USA by Google, Facebook, LinkedIn, Twitter, Youtube: By clicking on “Accept all”, you also agree to the processing of your data in the USA in accordance with Art. 49 para. 1 sentence 1 lit. a DSGVO. The USA is considered by the European Court of Justice to be a country with an inadequate level of data protection according to EU standards. In particular, there is a risk that your data may be processed by US authorities, for control and monitoring purposes, possibly without the possibility of legal recourse. If you click on “Save”, the transfer described above will not take place.
Deletion of data
Pursuant to Articles 18n and 19 GDPR, the data processed by us will be deleted, or the processing thereof will be restricted. Unless otherwise expressly stated in this data protection statement, the data stored with us are deleted as soon as they are no longer required for their purpose, provided there exist no retention requirement prohibiting deletion. Insofar as the data are not deleted, because they are required for other and legally permitted purposes, their processing will be restricted. I.e. data are blocked and not processed for other purposes. This applies, for example, to data which must be retained for reasons of commercial or tax laws.
Pursuant to Austrian legal requirements, the retention period amounts in particular to seven years, pursuant to section 132 (1) of the Austrian Federal Tax Procedure Code (BAO) (bookkeeping records, vouchers/invoices, accounts, vouchers, business records, statement of income and expense, etc.).
Business-related processing
In addition, we process
– contract data
– payment data
of our customers, prospects, and business partners, for the purpose of providing contractual services, service and customer relations, marketing, advertising, and market research.
Handling of orders in the online shop, and customer accounts
We process data of our customers in the scope of orders in our online shop, in order to enable our customers to select and order the products and services chosen, and to enable payment for same and delivery of products and performance of services chosen.
The processed data include inventory data, communication data, contract data, payment data; the persons affected by the processing include our customers, prospects and other business partners. Data are processed for the purpose of performing contractual duties in the scope of an online shop, invoicing, delivery, and customer service. In this regard we use session cookies for the storage of the basket content, and permanent cookies for the storage of log-in status.
Data are being processed on the basis of Article 6 (1) (b) (completion of orders) and (c) (legally required archiving) GDPR. In this regard, the statements marked required are required for the formation and the performance of the contract. We disclose the data to third parties only in the scope of delivery, payment, or as legally permitted or obligated, to legal advisers and authorities. The data are processed in third countries only if required for the purpose of contract performance (e.g. upon customer request, at delivery or payment).
Users have the option to set up a user account, in which they may in particular view their orders. In the scope of registration, users are informed of the required mandatory information. User accounts are not public and cannot be indexed by search engines. If users terminate their user accounts, their data in view of the customer account will be deleted, unless their retention is required on grounds of commercial or tax laws in accordance with Article 6 (1) GDPR. Information in the customer account shall remain until its deletion, with subsequent archiving in case of a legal obligation. In case of notice of termination having been given, it is up to the users to secure their data prior to termination of the contract.
In the scope of registration and renewed log-in and use of our Online Services, we store the IP address and the time of the user action concerned. The storage takes place on the basis of our legitimate interests, as well as of those of the users in protection from abuse and other unauthorized use. In principle these data are not transferred to third parties, unless this is required in order to maintain our rights, or there is a legal requirement to do so pursuant to Article 6 (1) (c) GDPR.
Data re deleted after the expiry of statutory warranty obligations and comparable obligations; the necessity to keep the data is reviewed every three years; in case of the statutory archiving obligations, data will be deleted after the expiry thereof (at the end of the commercial law retention period (6 years) and of the tax law retention period (10 years)).
External payment service provider
We use the external payment service provider mPAY24 GmbH (data protection: https://www.mpay24.com/web/datenschutz/); the users and we are able to perform payment transactions through its platform.
In the scope of the performance of contracts, we use payment service providers on the basis of Article 6 (1) (b) GDPR. Otherwise, we use external payment service providers on the basis of our legitimate interests pursuant to Article 6 (1) (f) GDPR, in order to offer effective and safe payment methods to our users.
The data processed by the payment service providers include inventory data, such as, for example, the name and the address, bank data, such as, for example, account numbers or credit card numbers, passwords, TANs and check sums, as well as information related to contracts, totals, and recipients. The information is required in order to process the transactions. The data entered, however, will be processed only by, and stored only at, the payment service providers. This means that we do not receive any account or credit card related information, but only information with confirmation or rejection of payment. In certain circumstances, the data are transferred by the payment service provider to credit agencies. Such transfer is done for the purpose of checking identity and creditworthiness. In this regard, we refer to the general conditions and data protection information of the payment service provider.
The payment transactions are subject to the business conditions and data protection information of the payment service provider concerned, which may be retrieved from the respective websites, respectively transaction applications. We refer to these also for the purpose of additional information and for the assertion of rights of withdrawal, information, and other rights of data subjects.
Administration, financial accounting, office organization, contact administration
We process data in the scope of administrative tasks and organization of our company, financial accounting, and compliance with legal obligations, such as archiving, for example. In this regard we process the same data processed in the scope of performing our contractual services. The basis of the processing is Article 6 (1) (c) GDPR, Article 6 (1) (f) GDPR. The processing affects customers, prospects, business partners, and website visitors. The purpose of and our interest in the processing lies in the administration, financial accounting, office organization, archiving of data, thus tasks serving the upkeep of our business activities, performing our tasks, and providing our services. The deletion of data in view of contractual services and the contractual communication corresponds to the information set out with these processing activities.
In this regard we disclose or transfer data to the fiscal administration, advisors, such as tax accountants or certified accountants, as well as other fee offices and payment service providers.
In addition, we store, on the basis of our business interests, information with respect to suppliers, organizers, and other business partners, for example for the purpose of taking up contact at a later time. We generally store these in the majority business-related data on a permanent basis.
Participation in affiliate partner programs
Within our online services, we use, on the basis of our legitimate interests (i.e. interest in the analysis, optimizing, and economic operation of our online services) pursuant to Article 6 (1) (f) GDPR, tracking measures customary in the trade, insofar as these are required for the operation of the affiliate system. In the following paragraphs, we inform users of the technical background.
The services offered by our contractual partners may be advertised and linked as well on other websites (so-called affiliate links or after buy systems, if for example links or services of third parties are offered after the conclusion of a contract). The operators of the website concerned receive a commission, if the user follows the affiliate links and subsequently make use of the offers.
In summary, it is required for our online service that we be able to trace whether users interested in affiliate links and/or the goods available at our business, subsequently make use of the offers at the initiative of the affiliate link or our online platform. For this purpose, the affiliate links and our offers are supplemented with certain values which may be placed as a part of the link or otherwise, e.g. in a cookie. The values include in particular the referrer website, time, an online ID of the operator of the website on which the affiliate link was situated, an online ID of the offer concerned, an online ID of the user, and values specific to tracking such as advertising material ID, partner ID, and categorization.
The online IDs of users used by us are pseudonym values. This means that the online ID itself does not contain personal data such as name or e-mail address. The only assist us in determining whether the same user who clicked on an affiliate link, or who, though our website, took an interest in one of our products, made use of the offer, i.e. concluded a contract with the provider. However, the online ID is personal insofar as the online ID together with other user data are available to the partner business and also to us. Only in this way is the partner business able to inform us whether such user accepted the offer and whether we may pay out the bonus.
Affilinet partner program
On the basis of our legitimate interest (i.e. interest in the economic operation of our online services in the meaning of Article 6 (1) (f) GDPR) we participate in the partner program of affilinet GmbH, Sapporobogen 6-8, 80637 Munich, Germany, which was designed to make available a medium for websites, with which advertisement cost reimbursement can be earned by placement of ads and links to Affilinet (so-called affiliate system). Affilinet uses cookies in order to determine the origin of the conclusion of contract. Among others, Affilinet is able to recognize that you clicked the partner link on this website, and subsequently concluded a contract at or through Affilinet.
You can obtain further information on the data use through Affilinet, and rights to object, in the data protection statement of the company: https://www.affili.net/de/footeritem/datenschutz.
Contact
If you take up contact with us (e.g. by contact form, e-mail, phone, or via social media), the user statements are processed for processing the contact request and the handling thereof pursuant to Article 6 (1) (b) GDPR. The statements of users may be stored in a customer relationship management system (“CRM system”), or in a comparable request organizer.
We delete requests, if these are no longer required. Every two years, we review if requests are still required; in addition, statutory retention requirements apply.
Hosting and e-mail dispatch
We use hosting services to make available the following services: infrastructure and platform services, computer capacity, storage capacity and data base services, e-mail dispatch, security services, and technical maintenance services, deployed by us for the purpose of the operation of our online services.
In this regard we, respectively our hosting provider, processes inventory data, contact data, content data, contract data, use data, meta and communication data of customers, prospects and visitors of this Online Service, on the basis of our legitimate interests in an efficient and safe provision of this Online Service pursuant to Article 6 (1) (f) GDPR in connection with Article 28 GDPR (conclusion of a data processing agreement).
Collection of access data and log files
We, respectively our hosting provider, on the basis of our legitimate interests in the meaning of Article 6 (1) (f) GDPR, collects data with respect to every access to the server on which this service is located (so-called server log files). The access data include the name of the accessed website, file, date, and time of the access, the amount of data transferred, report on the successful access, browser type and version, the user’s operating system, referrer URL (the site previously visited), IP address, and the requesting provider.
Logfile information will be stored for security reasons (e.g. for solving abuse or fraud activities) for the duration of at most 7 days and will be deleted thereafter. Data needed to be kept further for evidence purposes will not be deleted until final clarification of the incident concerned.
Google Tag Manager
Google Tag Manager is a solution with which we are able to administer so-called website tags using a surface (and thereby including, for example, Google Analytics as well as other Google Marketing services in our Online Services). The tag manager itself (which implements the tags) does not process personal data of users. In view of the processing of personal data of users, we refer to the following information relating to Google services. Usage policy: https://www.google.com/intl/de/tagmanager/use-policy.html.
Google Analytics
On the basis of our legitimate interest (i.e. the interest in the analysis, optimization, and economic operation of our Online Services in the meaning of Article 6 (1) (f) GDPR), we employ Google Analytics, a web analysis service of Google LLC (“Google”). Google uses cookies. The information generated by the cookie on the use of the online services as a rule will be transferred to a server of Google in the USA and will be stored there.
Google is certified under the Privacy Shield treaty and thereby offers a guarantee to comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).
Google will use this information on our behalf in order to evaluate the use of our Online Services by users, in order to compile reports on the activities within this Online Service, and to provide other services to us connected with the use of this Online Service and internet use. In this connection, pseudonymous user profiles of users may be generated from the processed data.
We use Google Analytics only with activated IP anonymization. This means that the IP address of users will be abbreviated by Google within member states of the European Union or in other contract states of the treaty on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a server of Google in the USA and abbreviated there.
The IP address submitted by the browser of the user will not be joined with other data of Google. The users are able to prevent the storage of cookies by a corresponding setting in their browser software: moreover, users may prevent the recording of data generated by the cookie and related to their use of the online services to Google, and the processing of these data by Google, by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.
You may obtain additional information on the data use by Google, possibilities of settings, and of objection, in the data protection statement of Google (https://policies.google.com/technologies/ads) and in the settings for the display of advertisement inserts by Google (https://adssettings.google.com/authenticated).
Personal data of users are deleted or anonymized after 26 months.
Google AdWords and conversion measurement
On the basis of our legitimate interest (i.e. the interest in the analysis, optimization, and economic operation of our Online Services in the meaning of Article 6 (1) (f) GDPR), we employ the services of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, („Google“).
Google is certified under the Privacy Shield treaty and thereby offers a guarantee to comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).
We use the online marketing procedure Google “AdWords” in order to place ads in the Google ad network (e.g. in search results, in videos, on websites, etc.), so that these are displayed to users who presumably are interested in the ads. This permits us to target ads for and within our online services, in order to present only ads to users, which potentially correspond with their interests. In case a user is shown, for example, ads for products for which the users interested himself on other online services, we refer in this context to “remarketing”. For these purposes, if our website and other websites on which the Google ad network is active, are accessed, a code is executed directly by Google, and so-called (re-)marketing tags (invisible grafics or code, also described as “web beacons”) will be included in the website. With their aid, an individual cookie, i.e. a small file, will be stored on the user’s device (instead of cookies, comparable technologies may be used). In this file it is noted, which websites the user visits, in which content he is interested, and on which offers the users has clicked, and further technical information concerning the browser and the operating system, referring websites, visit time, as well as further information on the use of the online services.
Further we receive an individual “conversion cookie”. The information obtained with the aid of the cookie is used by Google to prepare conversion statistics for us. We are only informed of the anonymous total number of users who clicked on our Online Services and who were referred to a page having a conversion tracking tag. However, we do not receive any information with which users can be personally identified.
User data are processed pseudonymously in the scope of the google ad network. I.e. Google does not store and process, for example, the name or e-mail address of users, but processes the relevant data cookie related within pseudonymous user profiles. This means from Google’s point of view, the ads are not managed and shown for a specifically identified person, but for the cookie holder, regardless of who is this cookie holder. This does not apply where a user has expressly authorized Google to process these data without such anonymization. The information collected on the user is transferred to Google and stored on Google’s servers in the USA.
You may obtain additional information on the data use by Google, possibilities of settings, and of objection, in the data protection statement of Google (https://policies.google.com/technologies/ads) and in the settings for the display of advertisement inserts by Google (https://adssettings.google.com/authenticated).
Facebook pixel, custom audiences, und Facebook conversion
Within our online service we utilize, by reason of our legitimate interest in the analysis, optimization, and economic operation of our Online Services, and for these purposes, the so-called “Facebook pixel” of the social network Facebook, operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA, respectively, if you reside in the EU, by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”).
Facebook is certified under the Privacy Shield treaty and thereby offers a guarantee to comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active).
With the aid of the Facebook pixel, it is possible on the one side to designate visitors of our online services as a target group for the display of ads (so-called “Facebook ads”). Accordingly, we use the Facebook pixel in order to display our Facebook ads only to those users who have shown an interest in our Online Services, or who display certain criteria (e.g. interest in certain themes or products determined with reference to the websites visited), which we forward to Facebook (so-called “custom audience”). With the aid of the Facebook pixel, we also would like to ensure that our Facebook ads are in line with the potential interest of users and do not cause annoyance. With the aid of the Facebook pixel, we are further able to determine the effectiveness of Facebook ads for statistical and market research purposes, by seeing whether users, after a click on a Facebook ad, are forwarded to our website (so-called “conversion”).
Facebook processes data in the scope of Facebook’s data use policy. Accordingly, general information on the display of Facebook ads in Facebook’s data use policy: https://www.facebook.com/policy.php. You may obtain special Information and details on Facebook pixel and its function in the help area of Facebook: https://www.facebook.com/business/help/651294705016616.
You may object to the recording of your data by the Facebook pixel and the use thereof for the display of Facebook ads. In order to adjust, which kind of ads will be shown to you within Facebook, you may call up the page setup by facebook and there follow the instructions for the settings of userbased ads: https://www.facebook.com/settings?tab=ads. The settings work regardless of the platform used, i.e. they are accepted for all devices, such as desktop computers or mobile devices.
In addition, you may object to the use of cookies serving coverage measurement and advertising purposes through the deactivation page of the network ad initiative (http://optout.networkadvertising.org/) and further the US website (http://www.aboutads.info/choices) or the European website (http://www.youronlinechoices.com/uk/your-ad-choices/).
Online presence in social media
We maintain online presences in social media and platforms in order to communicate with customers, prospects und users active there, and to inform them about our services. When viewing the respective networks and platforms, the business conditions and data processing policies of the respective operators apply.
Unless otherwise stated in the scope of our data protection statement, we process data of users, if they communicate with us within the social networks and platforms, e.g. if they create contributions to our online presence, or if they forward messages to us.
Inclusion of third party services and content
Within our online services, we use, on the basis of our legitimate interests (i.e. the interest in the analysis, optimization, and economic operation of our online services in the meaning of Article 6 (1) (f) GDPR), content and services offered by third parties, in order to include their content and services such as, for example, videos or fonts (hereinafter uniformly described as “contents”).
This always presupposes that the third party offering these contents use the IP addresses of users, since without the IP address the third party will be unable to send the content to their browsers. Thus, the IP address is required for the display of these contents. We make an effort to use only such content, the respective provider of which will use the IP address only for delivering the contents. Third party providers further may use so-called pixel tags (invisible grafics, also described as “web beacons”) for statistical or marketing purposes. With the “pixel tags” certain information, such as visitor traffic on the pages of a website, may be evaluated. The pseudonymized information further may be stored in cookies on user devices and may contain, among others, technical information on the browser and operating system, referring websites, visit time as well as other information on the use of our Online Services, and may be connected with such information from other sources.
YouTube
We include the videos of the platform “YouTube” of the provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Data protection statement: https://www.google.com/policies/privacy/, Opt-Out: https://adssettings.google.com/authenticated.
Google ReCaptcha
We include the function for the recognition of bots, for example with entries on online forms (“ReCaptcha”) of the provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, ein. Data protection statement: https://www.google.com/policies/privacy/, Opt-Out: https://adssettings.google.com/authenticated.
Google Maps
We include the maps of the service “Google Maps” of the provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. The processed data may include in particular IP addresses and location data of users, which, however, cannot be recorded without their consent (as a rule in the scope of the settings of their mobile devices). The data may be processed in the US. Data protection statement: https://www.google.com/policies/privacy/, Opt-Out: https://adssettings.google.com/authenticated.
Sharing functions of AddThis
Within our online services, the service “AddThis” (1595 Spring Hill Rd Suite 300 Vienna, VA 22182, USA) is used for sharing of content of this Online Service within social networks (so-called sharing).
We use same on the basis of our legitimate interests, i.e. the interest in the spreading of our online services pursuant to Article 6 (1) (f) GDPR.
AddThis uses personal information of users to make sharing functions available and execute them. In addition, AddThis is able to use pseudonymized information of users for marketing purposes. These data are stored on computers of users with the aid of so-called “cookie” text files. Data protection statement: http://www.addthis.com/privacy, Opt-Out: http://www.addthis.com/privacy/opt-out.
