1. Person responsible
Responsible party in accordance with Article 4 Paragraph 7 of EU General Data Protection Regulation (GDPR) is Christian Schreitter, St. Lorenz, 5310 Mondsee, Austria, E-Mail: firstname.lastname@example.org (see also imprint)
2. Information on the collection of personal data
In the following I will inform about the collection of personal data when using my website. Personal data is all data that can be related to you personally, e.g. name, address, email addresses or user behaviour.
If, for individual functions of my offerings I contract service providers, or if I would like to use your data for advertising purposes, I will inform you in detail below of the respective procedures. In doing so I will also state the specified criteria for the duration of storage.
3. Colletion of personal data when visiting my website
3.1. Informational use of he website
When using my website solely for information purposes, i.e. if you do not transmit information in any other form, I and my host provider only collect the personal data that your browser transmits. If you would like to take a look at my website, I collect the following data, which is technically required by me to be able to display my website and to ensure the stability and security (legal basis is Article 6 paragraph 1 S. 1 lit. f GDPR):
• IP address
• Date and time of request
• Time zone difference from Greenwich Mean Time (GMT)
• Content of the request (specific page)
• Request status/HTTP status code
• The amount of data transmitted
• The website making the request
• Operating system and user interface
• Language and version of your browser software.
This data will be stored for 14 days and will be deleted after that period.
In addition to the data mentioned above, cookies are stored on your computer when you use my website. Cookies are small text files that are stored on your hard disk for the browser you’re using which transmit certain information to the organization that sets the cookies (in this case, by me). Cookies cannot run programs or deliver viruses to your computer. They serve to make my site more user-friendly and more effective. The legal basis for this use is Art. 6 Para. 1 S. 1 lit. f GDPR.
This website and our services use the following types of cookies, the scope and functionality of which are explained below:
• Transient cookies
• Persistent cookies
Transient cookies are automatically deleted when you close the browser. These especially include session cookies. These store a session ID which assigns the various requests made by your browser during the joint session. This allows your computer to be recognized when you return to the site. Session cookies are deleted when you log out or close the browser.
Persistent cookies are automatically deleted after a specified period, which may differ depending on the cookie in question. You can delete the cookies at any time by going to your browser’s security settings.
You can configure your browser settings as desired and refuse to accept third-party cookies or all cookies. Please note that you may not be able to use all functions of this website.
The Flash cookies used are not captured by your browser, but by your Flash plug-in. I also use HTML5 storage objects that are stored on your device. These objects store the required data regardless of the browser you are using and do not have an automatic expiration date. If you do not wish the Flash cookies to be processed, you must install an appropriate add-on, e.g. “Better Privacy” for Mozilla Firefox (https://addons.mozilla.org/de/firefox/addon/betterprivacy/) or the Adobe Flash Killer cookie for Google Chrome. You can prevent the use of HTML5 storage objects by using private mode in your browser. I also recommend that you regularly delete your cookies and browser history manually.
3.3. Use of Google Analytics
This website uses Google Analytics, a web analysis service provided by Google Inc. (“Google”). Google Analytics uses so-called “cookies,” text files that are stored on your computer and enable an analysis of how you use the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. However, if IP anonymization is enabled on this website, your IP address will first be truncated by Google within the Member States of the European Union or other parties to the agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide other services related to website activity and internet usage to the website operator.
The IP address transmitted by your browser as part of Google Analytics is not conflated with other Google data.
You can prevent cookies from being stored by selecting the appropriate settings in your browser; however, we wish to point out that by doing so, you may not be able to enjoy the full functionality of this website. You can also prevent the data generated by cookies concerning your use of the website (incl. your IP address) from being passed to Google, and the processing of this data by Google, by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.
This website uses Google Analytics with the extension “_anonymizeIp()”. As a result, IP addresses are further processed in truncated form, so that reference to individuals can be ruled out. If the data collected about you is personally identifiable, it will be blocked immediately, and the personal data deleted as soon as possible, the latest after 14 months by Google.
We use Google Analytics to analyse and regularly improve the use of our website. Using the statistics collected we can improve our offer and make it more interesting for you as a user. For exceptional cases, where personal data is transmitted to the USA, Google has subjugated to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework, https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.
The legal basis for the use of Google Analytics is Article 6 paragraph 1 S. 1 lit. f GDPR.
Information about the third party provider:
3.4. Use of Google Adwords Conversion
I use the services of Google Adwords to draw attention to our attractive offers with the help of advertising media (so-called Google Adwords) on external websites. In relation to the data of the advertising campaigns, I can determine how successful the individual advertising measures are. I pursue thereby the interest to indicate to you advertisement which is of interest for you to arrange my Website for you more interestingly and to achieve a fair calculation of advertising costs.
These advertising media are delivered by Google via so-called “Ad Servers”. For this I use Ad Server Cookies, through which certain parameters can be measured to measure success, such as insertion of ads or clicks by users. If you access my website via a Google advertisement, Google Adwords stores a cookie in your PC. These cookies usually lose their validity after 30 days and are not intended to identify you personally. For this cookie, the unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions) and opt-out information (marking that the user no longer wishes to be addressed) are usually stored as analysis values.
These cookies enable Google to recognize your Internet browser. If a user visits certain pages of an Adwords customer’s website and the cookie stored on their computer has not yet expired, Google and the customer may recognize that the user clicked on the ad and was directed to that page. Each Adwords customer is assigned a different cookie. Cookies cannot therefore be traced via the websites of Adwords customers. I myself do not collect or process any personal data in the aforementioned advertising measures. Google only provides me with statistical evaluations. On the basis of these evaluations I can see which of the advertising measures used are particularly effective. I do not receive any further data from the use of the advertising media, in particular I cannot identify the users on the basis of this information.
Due to the marketing tools used, your browser automatically establishes a direct connection with the Google server. I have no influence on the scope and further use of the data collected by Google through the use of this tool and therefore inform you according to my state of knowledge: By integrating AdWords Conversion, Google receives the information that you have called the relevant part of my website or clicked on an advertisement from me. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, it is possible that the provider may find out and store your IP address.
You can prevent participation in this tracking process in various ways: a) by making the appropriate settings in your browser software, in particular by suppressing third-party cookies so that you do not receive any third-party advertisements; b) by deactivating cookies for conversion tracking by setting your browser to block cookies from the domain “www.googleadservices.com”, https://www.google.de/settings/ads, whereby these settings are deleted when you delete your cookies; c) by disabling the interest-based ads of the providers that are part of the “About Ads” self regulatory campaign via the link http://www.aboutads.info/choices, whereby this setting is deleted when you delete your cookies; d) by permanently disabling it in your Firefox, Internet Explorer or Google Chrome browsers via the link http://www.google.com/settings/ads/plugin. I would like to point out that in this case you may not be able to make full use of all the functions of this offer.
The legal basis for the processing of your data is Art. 6 Para. 1 S. 1 lit. f DS-GVO. Further information on data protection at Google can be found here: http://www.google.com/intl/de/policies/privacy and https://services.google.com/sitestats/de.html. Alternatively, you can visit the Network Advertising Initiative (NAI) web site at http://www.networkadvertising.org Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
3.5. Google Fonts
I also use external fonts from Google, Inc., https://www.google.com/fonts (“Google Fonts”) on my website. The use of the IP address by Google is required for the presentation of these Google fonts. Third parties may also use small, invisible graphics (also called “pixel tags” or “web beacons”) for statistical or marketing purposes. As a result, information such as visitor traffic on the pages of my website can be evaluated. The pseudonymous information may also be stored in cookies on the user’s device and may include, but is not limited to, technical information about the browser and operating system, referring web sites, visit time, and other information regarding the use of my online offer. The use of these fonts is intended to optimize my website and improve its usability for the user. Legal basis is thus Article 6 paragraph 1 lit. f. GDPR). The integration of Google fonts is done by a server call on Google (usually in the US).
3.6. Social Media
I currently use the following social-media links: Facebook, Twitter, LinkedIn, Xing, Google+ und Instagram.
I use the so-called two-click solution. This means that when you visit my website, no personal data is initially passed on to the social media providers. You can recognize the respective provider by the marking on the box above his initial letter or logo. I offer you the possibility to communicate directly with the provider via a link. To my knowledge, no data is sent to any of the social media services or data is requested.
I have no influence on the collected data and data processing operations, nor am I aware of the full extent of data collection, the purpose of the processing, or the retention periods. I also have no information for the deletion of collected data through the networks and platforms.
Via these links I offer you the possibility to interact with the social networks and other users, so that I can improve my content and make it more interesting for you as a user. The legal basis for the use of these links is Art. 6 Par. 1 S. 1 lit. f GDPR.
For more information on the purpose and scope of their collection and processing, and related rights and ways to protect your privacy, see the privacy statements of these providers.
I am also present in social networks and other communication platforms (Facebook, Twitter, LinkedIn, Xing, Google+ and Instagram). If you contact me, post or interact with my posts on these channels, I will process your details there to answer your requests. The legal basis is Article 6 paragraph 1 sentence 1 lit. b GDPR.
I currently use the following links: Facebook, Twitter, LinkedIn, Xing, Google+ und Instagram. I have no influence on the collected data and data processing operations, nor am I aware of the full extent of data collection, the purpose of the processing, or the retention periods. I also have no information for the deletion of collected data through the networks and platforms. For more information on the purpose and scope of their collection and processing, and related rights and ways to protect your privacy, see the privacy statements of these providers:
Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA; http://www.facebook.com/policy.php; further information about the data collection:http://www.facebook.com/help/186325668085084.
Facebook has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework, https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active.
Twitter, Inc., 1355 Market St, Suite 900, San Francisco, California 94103, USA; https://twitter.com/privacy. Twitter has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/participant?id=a2zt0000000TORzAAO&status=Active.
LinkedIn Corporation, 2029 Stierlin Court, Mountain View, California 94043, USA; http://www.linkedin.com/legal/privacy-policy.
LinkedIn has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/participant?id=a2zt0000000L0UZAA0&status=Active.
Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA („Google“), (https://policies.google.com/technologies/ads). Google has submitted to the EU-US Privacy Shield, (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).
Instagram LLC, 1601 Willow Rd, Menlo Park CA 94025, USA; further information about the data collection: http://instagram.com/about/legal/privacy/.
3.7. Use of Vimeo-plugins
For the integration of videos I use the provider Vimeo. Vimeo is marketed by Vimeo, LLC with head office in 555 West 18th Street, New York, New York 10011, USA.
On my website I use plugins from the provider Vimeo. If you call up a website in my internet presence with such a plugin – for example my media library – a connection to the Vimeo servers is created and, in doing so, the plugin is displayed. Hereby the information on which of my webpages you have visited is transmitted to the Vimeo servers. Thereby you are logged in as a member of Vimeo, Vimeo assigns this information to your personal user account. When using the plugin, e.g. by clicking on the start button of a video, this information is also assigned to your user account. You can prevent this assignment by logging out of your Vimeo user account and deleting the corresponding Vimeo cookies before using my internet site.
You can find further information on data processing and information on data protection by Vimeo under https://vimeo.com/privacy. The legal basis for the use of Vimeo is Article 6 paragraph 1 lit. f. GDPR.
3.8. Integration of YouTube videos
I have included YouTube videos in my online offering that are stored at http://www.YouTube.com and can be played directly from our website. These are all integrated in the “extended data protection mode”, i.e. no data about you as a user is transferred to YouTube if you do not play the videos. Only when you play the videos will the data mentioned in paragraph 2 be transferred. I have no influence on this data transfer.
By visiting the website, YouTube receives the information that you have accessed the corresponding subpage of our website. In addition, the data referred to in Section 3 (1) of this declaration will be transmitted. This occurs regardless of whether YouTube provides a user account that you are logged in to or whether there is no user account. If you are logged in to Google, your data will be assigned directly to your account. If you do not want your profile to be associated with YouTube, you must log out before activating the button. YouTube stores your data as user profiles and uses them for advertising, market research and/or the design of its website to meet your needs. Such evaluation is carried out in particular (even for users who are not logged in) to provide demand-oriented advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this right.
3.9. Use of Soundcloud-plugins
For the integration of videos I use the provider SoundCloud. SoundCloud is marketed by SoundCloud Limited, c/o JAG Shaw Baker, Berners House, 47-48 Berners Street, London W1T 3NF, UK.
On my website I use plugins from the provider SoundCloud. If you call up a website in my internet presence with such a plugin – for example my audio library – a connection to the SoundCloud servers is created and, in doing so, the plugin is displayed. Hereby the information on which of our webpages you have visited is transmitted to the SoundCloud servers. Thereby you are logged in as a member of SoundCloud, SoundCloud assigns this information to your personal user account. When using the plugin, e.g. by clicking on the start button of an audio file, this information is also assigned to your user account. You can prevent this assignment by logging out of your SoundCloud user account and deleting the corresponding SoundCloud cookies before using my internet site.
You can find further information on data processing and information on data protection by SoundCloud under https://soundcloud.com/pages/privacy. The legal basis for the use of SoundCloud is Article 6 paragraph 1 lit. f. GDPR.
4. Data processing in the context of customer relations
Furthermore, I process various data of my existing and future customers as well as participating service providers, suppliers and third parties (in particular specified contact data, bank details and order-related data) pursuant to Art. 6 Para. 1 lit. b. DSGVO, in order to provide them with my contractual or pre-contractual services, unless I separately refer to further uses. The required scope, type and duration of processing depend on the underlying purpose of the respective contractual relationship. The data will only be passed on to third parties if this is necessary for the fulfilment of my contractual obligations and the execution of the contract or if I am legally obliged to do so, e.g. by authorities.
Unless otherwise agreed with my customers, I will delete any data collected in this context after the storage is no longer necessary, usually after expiry of contractual or legal claims by me or my customers, or restrict the processing if legal storage obligations exist.
In order to prevent unauthorized access by third parties to your personal data, in particular financial data, I encrypt order transactions using TLS technology.
5. Making contact by email
When you contact me by email, the data you provide (your name, your email address, and if applicable your address and your telephone number) will be stored by me in order to answer your questions. Legal basis is Article 6 paragraph 1 sent. 1 lit. b) GDPR. I will delete the data collected in this context after the storage is no longer required by law or otherwise limit its further processing if I am required by law to continue archiving it.
Rights of objection and possibilities of deletion:
You have, at all times, the possibility of objecting to the use of your data by me in future. For this you can contact me by sending your email to email@example.com, in writing to Christian Schreitter, St. Lorenz, 5310 Mondsee, Austria. This results in your request not being processed (any further).
6. Your rights
With regard to personal data concerning you, you have the right to:
• revoke your consent given to me in accordance with Article 7 paragraph 3 GDPR at any time. As a result, I am no longer allowed to continue the data processing based on this consent for the future.
• demand information about your personal data processed by me pursuant to Article 15 GDPR. In particular, you can demand information on the processing purposes, the category of personal data, the categories of recipients to whom your data has been disclosed, the planned retention period, the right to rectification, deletion, limitation of processing or opposition, the right to complain, the source of your data, if it was not collected from me, as well as the existence of an automated decision-making including profiling and, if necessary, meaningful information about their details.
• immediately demand the correction of incorrect or completion of your personal data stored by me under Article 16 GDPR.
• request the deletion of your personal data stored by me, under Article 17 GDPR, except as far as the processing for the exercise of the right to freedom of expression and information, for the fulfilment of a legal obligation, for reasons of public interest or for the assertion, exercise or defence of legal claims is required.
• demand the limitation of the processing of your personal data, under Article 18 GDPR, as far as the accuracy of the data is disputed by you, the processing is unlawful, but you reject their deletion and I no longer need the data, but you this for assertion, exercise or defence of legal claims or you have objected to the processing in accordance with Article 21 GDPR.
• receive any personal information you have provided to me in a structured, common and machine-readable format or to request that you send it to another person in charge, under Article 20 GDPR.
In addition to the possibilities of contradiction already described, you can send an e-mail to firstname.lastname@example.org, in writing to Christian Schreitter, St. Lorenz, 5310 Mondsee, Austria, if you would like to exercise your rights, in particular your right to object.
You also have the right to complain to a data protection supervisory authority about the processing of your personal data by me.
8. Copyright Notice
This website and its contents are protected by copyright and/or design law. Any duplication or other use of the contents, even in extracts, is only permitted with prior written consent.