Privacy policy
1. Privacy at a glance
General information
The following information provides an overview of what happens to your personal data when you visit this website. Personal data means any data that can be used to identify you personally. More detailed information is provided in this privacy policy.
Data collection on this website
Who is responsible?
The website operator is responsible for processing data on this website. Contact details are provided under “Controller” below.
How do we collect your data?
Some data is collected when you provide it to us, for example when you enter information in a contact form. Other data is collected automatically, or after you give consent, by our IT systems when you visit the website. This mainly consists of technical data, such as your browser, operating system and the time of your visit. This data is collected automatically when you access the website.
What do we use your data for?
Some data is collected to ensure that the website functions reliably. Other data may be used to analyse how visitors use the website.
What rights do you have?
You may obtain information free of charge about the origin, recipients and purposes of your stored personal data at any time. You may also request its rectification or erasure. You may withdraw consent to data processing at any time with effect for the future. In certain circumstances, you may request restriction of processing. You also have the right to lodge a complaint with the competent supervisory authority. You can contact us at any time about these rights or other privacy questions.
Analytics and third-party tools
Your browsing behaviour may be statistically analysed when you visit this website, primarily using analytics software. Details are provided below.
2. Hosting
IONOS
We host this website with IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany (“IONOS”). When you visit our website, IONOS records various log files, including your IP address. Further information is available in the IONOS privacy policy.
We use IONOS on the basis of Article 6(1)(f) GDPR. We have a legitimate interest in presenting our website as reliably as possible. Where corresponding consent has been requested, processing takes place exclusively on the basis of Article 6(1)(a) GDPR and Section 25(1) TDDDG, insofar as that consent covers storing cookies or accessing information on the user’s device, for example device fingerprinting, within the meaning of the TDDDG. Consent may be withdrawn at any time.
3. General and mandatory information
Data protection
We take the protection of your personal data seriously. We treat it confidentially and in accordance with applicable data protection legislation and this privacy policy. This policy explains what personal data we collect, how and why we collect it, and how we use it.
Data transmission over the internet, for example communication by email, can have security vulnerabilities. Complete protection against access by third parties cannot be guaranteed.
Controller
The controller responsible for processing personal data on this website is:
Peter Windhofer
Wien, Österreich
Contact form
A controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data, such as names or email addresses.
Retention periods
Unless a more specific retention period is stated in this policy, we retain your personal data until the purpose for processing it no longer applies. If you make a valid erasure request or withdraw your consent, your data will be deleted unless we have another legally permissible reason for retaining it, such as retention obligations under tax or commercial law. In that case, it will be deleted when those reasons no longer apply.
Legal bases for processing
If you consent to processing, we process your personal data under Article 6(1)(a) GDPR or, where special categories of data under Article 9(1) GDPR are processed, Article 9(2)(a) GDPR. If you explicitly consent to transferring personal data to third countries, processing also takes place under Article 49(1)(a) GDPR. If you consent to storing cookies or accessing information on your device, for example through device fingerprinting, processing additionally takes place under Section 25(1) TDDDG. Consent may be withdrawn at any time.
Where data is required to perform a contract or take steps prior to entering into one, we process it under Article 6(1)(b) GDPR. Where processing is necessary to meet a legal obligation, Article 6(1)(c) GDPR applies. Processing may also be based on our legitimate interests under Article 6(1)(f) GDPR. The applicable bases are described in the relevant sections of this policy.
Recipients of personal data
In the course of our activities, we work with external organisations, which may require personal data to be shared. We disclose personal data only where necessary to perform a contract, where legally required, for example to tax authorities, where we have a legitimate interest under Article 6(1)(f) GDPR, or where another legal basis permits disclosure. Personal data is shared with processors only under a valid data processing agreement. Where data is processed jointly, a joint controllership agreement is concluded.
Withdrawal of consent
Many processing operations require your explicit consent. You may withdraw consent already given at any time. Withdrawal does not affect the lawfulness of processing carried out before it was withdrawn.
Right to object in particular circumstances and to direct marketing — Article 21 GDPR
If processing is based on Article 6(1)(e) or (f) GDPR, you have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data, including profiling based on those provisions. The legal basis for each operation is described in this policy. If you object, we will no longer process the personal data concerned unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or processing serves the establishment, exercise or defence of legal claims (Article 21(1) GDPR).
Where personal data is processed for direct marketing, you may object at any time to its processing for that purpose, including profiling related to direct marketing. If you object, your personal data will no longer be used for direct marketing (Article 21(2) GDPR).
Right to lodge a complaint
If the GDPR is infringed, you may lodge a complaint with a supervisory authority, particularly in the Member State of your habitual residence, place of work or place of the alleged infringement. This right applies without prejudice to any other administrative or judicial remedy.
Data portability
You may request that data we process automatically on the basis of your consent or in performance of a contract be provided to you or a third party in a commonly used, machine-readable format. Direct transfer to another controller will take place only where technically feasible.
Access, rectification and erasure
Subject to applicable law, you may at any time obtain free information about your stored personal data, its origin and recipients, and the purpose of processing. Where applicable, you may request rectification or erasure. You can contact us about these rights or any other personal data questions.
Restriction of processing
You may contact us to request restriction of processing in the following circumstances:
- You contest the accuracy of your personal data, for the period needed to verify it.
- Processing is unlawful and you request restriction instead of erasure.
- We no longer need the data, but you need it to establish, exercise or defend legal claims.
- You have objected under Article 21(1) GDPR, pending verification of whether our legitimate grounds override yours.
Where processing has been restricted, the data may, apart from storage, be processed only with your consent, to establish, exercise or defend legal claims, to protect the rights of another natural or legal person, or for reasons of important public interest of the European Union or a Member State.
SSL/TLS encryption
This website uses SSL/TLS encryption for security and to protect the transmission of confidential content, such as enquiries you send to us. An encrypted connection is indicated by “https://” in your browser’s address bar and the browser’s connection-security indicator. Encryption protects transmitted data against interception by third parties.
4. Data collection on this website
Cookies
Websites use small data packages known as cookies, which do not damage your device. Session cookies are stored temporarily and deleted after your visit. Persistent cookies remain on your device until you delete them or your browser deletes them automatically.
Cookies may originate from us (first-party cookies) or from third-party companies. Third-party cookies allow external services to be integrated into websites, for example payment services. Cookies have different functions: some are technically necessary for features such as shopping carts or video display; others may be used to analyse visitor behaviour or for advertising.
Necessary cookies required for electronic communication, for functions you request or to optimise the website are stored under Article 6(1)(f) GDPR unless another legal basis is stated. The operator has a legitimate interest in providing technically reliable, optimised services. If consent to cookies or comparable recognition technologies has been requested, processing takes place exclusively on that basis under Article 6(1)(a) GDPR and Section 25(1) TDDDG. Consent may be withdrawn at any time.
You can configure your browser to notify you about cookies, allow them individually, reject them in certain cases or entirely, or delete them automatically when you close the browser. Disabling cookies may limit website functionality. This policy describes the cookies and services used on this website.
5. Analytics and advertising
Matomo
This website uses the open-source web analytics service Matomo.
You may choose to prevent this website from aggregating and analyzing the actions you take here. Doing so will protect your privacy, but will also prevent the owner from learning from your actions and creating a better experience for you and other users.
Matomo enables us to collect and analyse data about visits to our website. This includes when pages were accessed and the regions from which visits originated. It also records log data such as IP addresses, referrers, browsers and operating systems, and can measure actions taken by visitors, such as clicks or purchases.
Use of this analytics tool is based on Article 6(1)(f) GDPR. The operator has a legitimate interest in analysing user behaviour to optimise the website and advertising. Where corresponding consent has been requested, processing takes place exclusively under Article 6(1)(a) GDPR and Section 25(1) TDDDG, insofar as consent covers storing cookies or accessing information on the user’s device, for example device fingerprinting, within the meaning of the TDDDG. Consent may be withdrawn at any time.
IP anonymisation
We use IP anonymisation with Matomo. Your IP address is shortened before analysis so that it can no longer be attributed to you unambiguously.
Cookieless analytics
We have configured Matomo so that it does not store analytics cookies in your browser.
Hosting
We host Matomo exclusively on our own servers. Analytics data remains with us and is not passed on to third parties.
6. Plugins and tools
Font Awesome — local hosting
This website uses Font Awesome for a consistent appearance of fonts and icons. Font Awesome is installed locally; no connection to the servers of Fonticons, Inc. is established for this purpose. Further information is available in the Font Awesome privacy policy.