®

Table of Contents

Introduction and overview

We have written this data protection declaration (version 19.07.2021-311290822) to explain to you, in accordance with the provisions of the General Data Protection Regulation (EU) 2016/679 and applicable national laws, which personal data (data for short) we as the person responsible - and that of processors commissioned by us (e.g. provider) - process, will process in the future and what legitimate options you have. If you still have questions, we would like to ask you to contact the responsible office named in the imprint.

Scope of application

This data protection declaration applies to all personal data processed by us in the company and to all personal data processed by companies commissioned by us (contract processors). By personal data we mean information within the meaning of Art. 4 No. 1 GDPR such as the name, email address and postal address of a person. The processing of personal data ensures that we can offer and invoice our services and products, be it online or offline. The scope of this data protection declaration includes:

• all online presences (websites, online shops) that we operate

• Social media appearances and email communication

• mobile apps for smartphones and other devices

In short: The data protection declaration applies to all areas in which personal data is processed in a structured manner in the company via the channels mentioned. If we enter into legal relationships with you outside of these channels, we will inform you separately if necessary.

Legal bases

In the following data protection declaration, we provide you with transparent information on the legal principles and regulations, i.e. the legal bases of the General Data Protection Regulation, which enable us to process personal data.
As far as EU law is concerned, we refer to REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of April 27, 2016. You can of course access this EU General Data Protection Regulation online on EUR-Lex, the gateway to the EU -Law, read at https://eur-lex.europa.eu/legal-content/DE/TXT/?uri=celex%3A32016R0679 .

We only process your data if at least one of the following conditions applies:

1. Consent (Article 6 (1) (a) GDPR): You have given us your consent to process data for a specific purpose. An example would be the storage of the data you entered in a contact form.

2. Contract (Article 6 Paragraph 1 lit.b GDPR): We process your data in order to fulfill a contract or pre-contractual obligations with you. For example, if we conclude a sales contract with you, we need personal information in advance.

3. Legal obligation (Article 6 Paragraph 1 lit. c GDPR): If we are subject to a legal obligation, we will process your data. For example, we are legally required to keep invoices for bookkeeping. These usually contain personal data.

4. Legitimate interests (Article 6 Paragraph 1 lit.f GDPR): In the case of legitimate interests that do not restrict your basic rights, we reserve the right to process personal data. For example, we have to process certain data in order to be able to operate our website securely and economically efficiently. This processing is therefore a legitimate interest.

Other conditions such as the taking of recordings in the public interest and the exercise of official authority as well as the protection of vital interests do not usually apply to us. If such a legal basis should be relevant, it will be shown at the appropriate point.

In addition to the EU regulation, national laws also apply:

• In Austria this is the federal law for the protection of natural persons when processing personal data (data protection law), DSG for short.

• In Germany, the Federal Data Protection Act, or BDSG for short, applies.

If other regional or national laws apply, we will inform you about them in the following sections.

Rights according to the General Data Protection Regulation

According to Article 13 GDPR, you have the following rights to ensure that data is processed fairly and transparently:

• According to Article 15 GDPR, you have a right to information as to whether we are processing your data. If so, you have the right to receive a copy of the data and the following information:

  • for what purpose we carry out the processing;

  • the categories, i.e. the types of data that are processed;

  • who receives this data and, if the data is transferred to third countries, how security can be guaranteed;

  • how long the data will be stored;

  • the existence of the right to correction, deletion or restriction of processing and the right to object to processing;

  • that you can complain to a supervisory authority (links to these authorities can be found below);

  • the origin of the data, if we have not collected it from you;

  • whether profiling is carried out, i.e. whether data is automatically evaluated in order to arrive at a personal profile of you.

• According to Article 16 GDPR, you have the right to correct the data, which means that we have to correct the data if you find errors.

• According to Article 17 GDPR, you have the right to deletion ("right to be forgotten"), which specifically means that you can request the deletion of your data.

• According to Article 18 GDPR, you have the right to restriction of processing, which means that we are only allowed to save the data but no longer use it.

• According to Article 19 GDPR, you have the right to data portability, which means that we will provide you with your data in a common format on request.

• According to Article 21 GDPR, you have a right of objection, which will result in a change in processing after enforcement.

  • If the processing of your data is based on Article 6 (1) (e) (public interest, exercise of official authority) or Article 6 (1) (f) (legitimate interest), you can object to the processing. We will then check as soon as possible whether we can legally comply with this contradiction.

  • If data is used to operate direct mail, you can object to this type of data processing at any time. We are then no longer allowed to use your data for direct marketing.

  • If data is used to carry out profiling, you can object to this type of data processing at any time. We are then no longer allowed to use your data for profiling.

• According to Article 22 GDPR, you may have the right not to be subject to a decision based solely on automated processing (e.g. profiling).

If you believe that the processing of your data violates data protection law or your data protection claims have been violated in any other way, you can complain to the supervisory authority. For Austria this is the data protection authority, whose website you can find at https://www.dsb.gv.at/ and for Germany you can contact the Federal Commissioner for Data Protection and Freedom of Information (BfDI) .

Storage period

That we only store personal data for as long as it is absolutely necessary for the provision of our services and products is a general criterion for us. This means that we delete personal data as soon as the reason for the data processing no longer exists. In some cases, we are legally obliged to store certain data even after the original purpose no longer exists, for example for accounting purposes. If you want your data to be deleted or if you revoke your consent to data processing, the data will be deleted as soon as possible and unless there is an obligation to store it. We will inform you below about the specific duration of the respective data processing, provided we have further information.

Data processing security

In order to protect personal data, we have implemented both technical and organizational measures. Wherever possible, we encrypt or pseudonymize personal data. In doing so, we make it as difficult as possible, as far as possible, for third parties to infer personal information from our data.

Art. 25 GDPR speaks of "data protection through technology design and data protection-friendly default settings" and means that both software (e.g. forms) and hardware (e.g. access to the server room) always think of security and appropriate security measures. If necessary, we will go into specific measures below.

Communication Summary
Affected: Everyone who communicates with us by phone, email or online form
. B. Telephone number, name, email address, entered form data. You will find more details on this under the type of contact used in each case
Purpose: Handling of communication with customers, business partners, etc.
Storage duration: Duration of the business case and the statutory provisions
Legal bases: Art. 6 Para. 1 lit. a GDPR (consent), Art. 6 Para . 1 lit. b GDPR (contract), Art. 6 para. 1 lit.f GDPR (legitimate interests)

If you contact us and communicate by phone, email or online form, personal data may be processed.

The data will be processed for the handling and processing of your question and the related business transaction. The data is stored for the same time or for as long as the law requires.

phone When you call us, the call data is stored in pseudonymized form on the respective end device and by the telecommunications provider used. In addition, data such as name and telephone number can then be sent by e-mail and saved for answering inquiries. The data will be deleted as soon as the business case has ended and legal requirements allow. If you communicate with us by e-mail, data may be stored on the respective end device (computer, laptop, smartphone, ...) and data is saved on the e-mail server. The data will be deleted as soon as the business case has ended and legal requirements allow. If you communicate with us using an online form, data is stored on our web server and, if necessary, forwarded to an email address from us. The data will be deleted as soon as the business case has ended and legal requirements allow.

Legal bases

The processing of the data is based on the following legal bases:

• Article 6 (1) (a) GDPR (consent): You give us your consent to save your data and continue to use it for the purposes of the business case;

• Art. 6 para. 1 lit. b GDPR (contract): There is a need to fulfill a contract with you or a processor such as B. the telephone provider or we have to provide the data for pre-contractual activities, such as B. the preparation of an offer, process;

• Art. 6 Para. 1 lit. f GDPR (legitimate interests): We want to conduct customer inquiries and business communication in a professional manner. For this purpose, certain technical facilities such. B. e-mail programs, Exchange servers and mobile network operators are necessary to be able to operate communication efficiently.

Web hosting Summary
Affected: Visitors to the website
Purpose: Professional hosting of the website and safeguarding operations.
Processed data: IP address, time of website visit, browser used and other data. You can find more details on this below or at the respective web hosting provider used.
Storage period: depending on the respective provider, but usually 2 weeks
Legal basis: Art. 6 Para. 1 lit.f GDPR (legitimate interests)

What is web hosting?

When you visit websites these days, certain information - including personal data - is automatically created and stored, including on this website. This data should be processed as sparingly as possible and only with justification. By the way, by website we mean the entirety of all websites on a domain, ie everything from the start page (homepage) to the very last subpage (like this one here). By domain we mean example.de or musterbeispiel.com. When you want to view a website on one screen, you use a program called a web browser. You probably know some web browsers by name: Google Chrome, Microsoft Edge, Mozilla Firefox, and Apple Safari. This web browser has to connect to another computer where the website's code is stored: the web server. The operation of a web server is a complicated and time-consuming task, which is why this is usually done by professional providers, the providers. These offer web hosting and thus ensure reliable and error-free storage of website data.

When the browser on your computer (desktop, laptop, smartphone) connects and while data is being transferred to and from the web server, personal data may be processed. On the one hand, your computer stores data, on the other hand, the web server must also store data for a period of time in order to ensure proper operation.

As an illustration:

Why do we process personal data?

The purposes of data processing are:

1. Professional hosting of the website and security of operation

2. to maintain operational and IT security

3. Anonymous evaluation of the access behavior to improve our offer and, if necessary, to prosecute or prosecute claims

Which data are processed?

Even while you are visiting our website, our web server, that is the computer on which this website is saved, usually automatically saves data such as

• the complete Internet address (URL) of the website called up (e.g. https://www.beispielwebsite.de/beispielunterseite.html?tid=311290822)

• Browser and browser version (e.g. Chrome 87)

• the operating system used (e.g. Windows 10)

• the address (URL) of the previously visited page (referrer URL) (e.g. https://www.beispielquellsite.de/vondabinichgekommen.html/)

• the host name and the IP address of the device from which access is made (e.g. COMPUTERNAME and 194.23.43.121)

• Date and Time

• in files, the so-called web server log files

How long will data be stored?

As a rule, the above data is stored for two weeks and then automatically deleted. We do not pass on this data, but we cannot rule out that this data will be viewed by authorities in the event of illegal behavior.

In short: your visit will be logged by our provider (company that runs our website on special computers (servers)), but we will not pass on your data without your consent!

Legal basis

The legality of the processing of personal data in the context of web hosting results from Art. 6 Para. 1 lit.f GDPR (protection of legitimate interests), because the use of professional hosting with a provider is necessary to keep the company safe and user-friendly on the Internet and to be able to track attacks and claims from them if necessary.

Cookies summary
Affected: Visitors to the website
Purpose: depending on the respective cookie. More details can be found below or from the manufacturer of the software that sets the cookie.
Processed data: Depending on the cookie used. More details can be found below or from the manufacturer of the software that sets the cookie.
Storage duration: depending on the respective cookie, can vary from hours to years
Legal bases: Art. 6 Para. 1 lit. a GDPR (consent), Art. 6 Para. 1 lit.f GDPR (legitimate interests)

What are cookies?

Our website uses HTTP cookies to save user-specific data.
In the following we explain what cookies are and why they are used so that you can better understand the following data protection declaration. Whenever you surf the Internet, you are using a browser. Well-known browsers are, for example, Chrome, Safari, Firefox, Internet Explorer and Microsoft Edge. Most websites save small text files in your browser. These files are called cookies. HTTP cookies are files that our website stores on your computer. These cookie files are automatically placed in the cookie folder, which is the “brain” of your browser. A cookie consists of a name and a value. When defining a cookie, one or more attributes must be specified. Cookies store certain user data about you, such as language or personal page settings. When you visit our site again, your browser sends the "user-related" information back to our site. Thanks to cookies, our website knows who you are and offers you the settings that you are used to. In some browsers, each cookie has its own file, in others, such as Firefox, all cookies are stored in a single file.

Purpose of processing via cookies

The purpose ultimately depends on the respective cookie. More details can be found below or from the manufacturer of the software that sets the cookie.

Which data are processed?

Unfortunately, it is not possible to generalize which data is stored in cookies, but we will inform you about the processed or stored data in the context of the following data protection declaration.

Storage duration of cookies

The storage duration depends on the respective cookie and is further specified under. Some cookies are deleted after less than an hour, others can remain on a computer for several years. You also have an influence on the storage duration yourself. You can manually delete all cookies at any time using your browser (see also “Right of objection” below). Furthermore, cookies that are based on consent will be deleted at the latest after you withdraw your consent, whereby the legality of storage remains unaffected until then.

Right of objection - how can I delete cookies?

You decide for yourself how and whether you want to use cookies. Regardless of which service or website the cookies originate from, you always have the option of deleting, deactivating or only partially accepting cookies. For example, you can block third-party cookies but allow all other cookies.

If you want to find out which cookies have been stored in your browser, if you want to change or delete cookie settings, you can find this in your browser settings:

Chrome: Delete, activate and manage cookies in Chrome

Safari: manage cookies and website data with Safari

Firefox: Delete cookies to remove data that websites have stored on your computer

Internet Explorer: deleting and managing cookies

Microsoft Edge: Deleting and managing cookies

Legal basis

The so-called "cookie guidelines" have existed since 2009. It states that the storage of cookies requires your consent (Article 6 (1) (a) GDPR). Within the EU countries, however, there are still very different reactions to these guidelines. In Austria, however, this directive was implemented in Section 96 (3) of the Telecommunications Act (TKG). In Germany, the cookie guidelines have not been implemented as national law. Instead, this guideline was largely implemented in Section 15 (3) of the Telemedia Act (TMG).

For absolutely necessary cookies, even if you have not given your consent. there are legitimate interests (Article 6 Paragraph 1 lit.f GDPR), which in most cases are of an economic nature. We want to provide visitors to the website with a pleasant user experience and for this certain cookies are often absolutely necessary.

Unless absolutely necessary cookies are used, this will only be done with your consent. The legal basis for this is Article 6 (1) (a) GDPR.

In the following sections you will be informed in more detail about the use of cookies, provided that the software used uses cookies.

Wix Privacy Policy

Wix Privacy Policy Summary
Affected parties: Website visitors
Purpose: Optimization of our services
Processed data: Data such as technical usage information such as browser activity, clickstream activities, session heat maps and contact details, IP address or your geographic location. You can find more details on this below in this data protection declaration.
Storage period: no precise information is known
Legal basis: Art. 6 Paragraph 1 lit. a GDPR (consent), Art. 6 Paragraph 1 lit.f GDPR (legitimate interests)

What is wix?

For our website we use the Wix website builder from the Israeli company Wix.com Ltd., 40 Hanamal Tel Aviv St., Tel Aviv 6350671, Israel. In addition to the headquarters in Tel Aviv, there are other company offices such as in Berlin, Dublin, Vancouver and New York. By using Wix, your personal data can also be collected, stored and processed. With this data protection declaration we want to explain to you why we use Wix, which data is stored where and how you can prevent this data storage.

What data does Wix store?

Non-personal data includes technical usage information such as browser activity, clickstream activities, session heat maps and data on your computer, operating system, browser, screen resolution, language and keyboard settings, internet provider and the date of the page visit. In addition, personal data is also recorded. These are primarily contact details (email address or telephone number, if you provide this), IP address or your geographic location.Tracking systems such as cookies are used to collect data on your behavior on our website. For example, it is recorded which sub-pages you particularly like, how long you have been on individual pages, when you leave a page again (bounce rate) or which pre-settings (e.g. language selection) you have made. Based on this data, Wix.com can also better adapt its marketing measures to your interests and your user behavior. The next time you visit our website, our website will be displayed to you as you set it up in advance . Wix.com may also pass on personal data to third parties (such as service providers).

In the following we show you exemplary cookies that are used by Wix:

Name: XSRF-TOKEN
Value: 1591628008 | P01ovn-JtsrK Purpose : This cookie is a security cookie and prevents so-called Cross Site Request Forgery. This is an attack on a computer system. Expiration date: after the session ends 

Name: _wixCIDX
Value: b2474394-b64f-4c7a-a598-16b9043a8938311290822-9 Purpose : This cookie enables you to log in to our website with the corresponding data storage in order to shorten the login process the next time. Expiry date: after 3 months 

Name: AWSELB
Value: EB626B5A40C80CEFD0EB26286F9684716FECD023880992D31DEC38311290822-1 Purpose : This cookie is used to distribute the load on the website across multiple servers. This increases the loading speed of the page. Expiry date: after one hour 

Name: AWSELBCORS
Value: 85FDC7C91873988D19D2D53305AA8CAB73AF02FCEAEB626B5A40C Purpose
: We have not yet been able to find out more information about this cookie. As soon as we know more, you will be informed.
Expiry date: after one hour

Note: Please note that the cookies displayed above are examples and that this list does not claim to be exhaustive.

How long and where will the data be stored?

The data can be stored on various servers that are distributed around the world. For example, the data can be stored in the USA, Ireland, South Korea, Taiwan or Israel. Wix always stores data until it is no longer required for the service provided. We have not yet been able to find out more details about the duration of data storage.

How can I delete my data or prevent data from being saved?

You have the option to update, correct or delete your personal data at any time. You can also contact the data protection department at Wix directly at privacy@wix.com .

To deactivate, delete or manage cookies, all you have to do is select the appropriate settings in your browser. This works a little differently depending on the browser. The following instructions show how you can set or manage cookies in the most common browsers according to your wishes.

Chrome: Delete, activate and manage cookies in Chrome

Safari: manage cookies and website data with Safari

Firefox: Delete cookies to remove data that websites have stored on your computer

Internet Explorer: deleting and managing cookies

Microsoft Edge: Deleting and managing cookies

Wix.com Ltd. is headquartered in Israel. Israel is recognized by the European Commission as a country that offers adequate protection for personal data of EU citizens. Please note that when you use this tool, your data can also be stored and processed outside the EU. Most third countries (including the USA) are not considered secure under current European data protection law. Data to insecure third countries may not simply be transferred, stored and processed there unless there are suitable guarantees (such as EU standard contractual clauses) between us and the non-European service provider.

Legal basis

If you have consented to the use of Wix, the legal basis for the corresponding data processing is this consent. According to Art. 6 Para. 1 lit. a GDPR (consent), this consent represents the legal basis for the processing of personal data, as it can occur when it is collected by Wix.

We also have a legitimate interest in using Wix to optimize our online service and present it nicely for you. The corresponding legal basis for this is Article 6 (1) lit.f GDPR (legitimate interests). Nevertheless, we only use Wix if you have given your consent. With this data protection declaration we have brought you the most important information about data processing by Wix.com. If you want to find out more about this, we recommend the company's data protection guidelines at https://de.wix.com/about/privacy .

Google Maps privacy policy

Summary of those affected: Visitors to the website
Purpose: Optimization of our services
Processed data: Data such as entered search terms, your IP address and also the latitude and longitude coordinates.
You can find more details on this below in this data protection declaration.
Storage period: depending on the stored data
Legal basis: Art. 6 Para. 1 lit. a GDPR (consent), Art. 6 Para. 1 lit.f GDPR (legitimate interests)

Which data is saved by Google Maps?

In order for Google Maps to be able to offer its full service, the company must record and save data from you. This includes the search terms entered, your IP address and the latitude and longitude coordinates. If you use the route planner function, the entered start address is also saved. However, this data storage takes place on the Google Maps website. We can only inform you about this, but we cannot influence it. Since we have integrated Google Maps into our website, Google places at least one cookie (name: NID) in your browser. This cookie stores data about your user behavior. Google uses this data primarily to optimize its own services and to provide you with individual, personalized advertising.

The following cookie is set in your browser due to the integration of Google Maps:

Name: NID
value: 188 = h26c1Ktha7fCQTx8rXgLyATyITJ311290822-5 Purpose
: NID is used by Google to adapt advertisements to your Google search. With the help of the cookie, Google “remembers” your most frequently entered search queries or your previous interaction with advertisements. So you always get customized advertisements. The cookie contains a unique ID that Google uses to collect your personal settings for advertising purposes.
Expiry date: after 6 months

Note: We cannot guarantee that the information stored is complete. Changes can never be ruled out, especially when using cookies. In order to identify the NID cookie, a separate test page was created, where only Google Maps was integrated.

How long and where will the data be stored?

The Google servers are located in data centers all over the world. Most of the servers are located in America, however. For this reason, your data is also increasingly stored in the USA. Here you can read exactly where the Google data centers are located: https://www.google.com/about/datacenters/inside/locations/?hl=de

Google distributes the data on various data carriers. This means that the data can be accessed more quickly and is better protected against any attempt at manipulation. Each data center also has special emergency programs. If, for example, there are problems with the Google hardware or a natural disaster paralyzes the servers, the data will still be protected almost certainly. Google stores some data for a specified period of time. For other data, Google only offers the option of manually deleting them. The company also anonymizes information (such as advertising data) in server logs by deleting part of the IP address and cookie information after 9 and 18 months, respectively.

How can I delete my data or prevent data storage?

With the automatic deletion function of location and activity data introduced in 2019, information on location determination and web / app activity - depending on your decision - is stored for either 3 or 18 months and then deleted. In addition, you can manually delete this data from the history at any time via the Google account. If you want to completely prevent your location from being recorded, you must pause the "Web and app activity" section in your Google account. Click Data & Personalization, then click the Activity Settings option. Here you can turn the activities on or off. You can also deactivate, delete or manage individual cookies in your browser. Depending on which browser you are using, this always works a little differently. The following instructions show how to manage cookies in your browser:

Chrome: Delete, activate and manage cookies in Chrome

Safari: manage cookies and website data with Safari

Firefox: Delete cookies to remove data that websites have stored on your computer

Internet Explorer: deleting and managing cookies

Microsoft Edge: Deleting and managing cookies

If you generally do not want cookies, you can set up your browser so that it always informs you when a cookie is to be set. You can decide for each individual cookie whether or not to allow it. Please note that when you use this tool, your data can also be stored and processed outside the EU. Most third countries (including the USA) are not considered secure under current European data protection law. Data to insecure third countries may not simply be transferred, stored and processed there unless there are suitable guarantees (such as EU standard contractual clauses) between us and the non-European service provider.

Legal basis

If you have consented to the use of Google Maps, the legal basis for the corresponding data processing is this consent. According to Art. 6 Para. 1 lit. a GDPR (consent), this consent represents the legal basis for the processing of personal data, as it can occur when it is collected by Google Maps.

We also have a legitimate interest in using Google Maps to optimize our online service. The corresponding legal basis for this is Article 6 (1) lit.f GDPR (legitimate interests). Nevertheless, we only use Google Maps if you have given your consent. We would like to point out that, in the opinion of the European Court of Justice, there is currently no adequate level of protection for data transfer to the USA. The data processing is mainly done by Google Maps. This can lead to data not being processed and stored anonymously. Furthermore, US government authorities may have access to individual data. It can also happen that this data is linked to data from other possible Google services with which you have a user account. If you want to find out more about data processing by Google, we recommend the company's own data protection declaration at https://policies.google.com/privacy?hl=de .

All texts are copyrighted.

Source: Created with the data protection generator from AdSimple.