General Data protection
This privacy policy clarifies the nature, scope and purpose of the processing of personal data (hereinafter referred to as »data«) within our online offer and its related websites, features and content, as well as external online presence, such as our Social Media Profile (hereafter collectively referred to as »online offer«). With regard to the terms used, such as »processing« or »responsible«, we refer to the definitions in Article 4 of the General Data Protection Regulation (GDPR).
Responsible
Gerhard P. HirschTypes of processed data:
- Inventory data (eg, names, addresses).
- Contact details (eg, e-mail, telephone numbers).
- Content data (eg, text input, photographs, videos).
- Usage data (eg, visited websites, interest in content, access times).
- Meta / communication data (eg, device information, IP addresses).
Categories of affected persons
Visitors and users of the online offer (hereinafter we refer to the affected persons as »users«).
Used terms
»Personal Information« means any information relating to an identified or identifiable natural person (hereinafter the »affected person»); a natural person is considered as identifiable, which can be identified directly or indirectly, in particular by means of assignment to an identifier such as a name, to an identification number, to location data, to an online identifier (eg cookie) or to one or more special features, that express the physical, physiological, genetic, mental, economic, cultural or social identity of this natural person. »Processing« means any process performed with or without the aid of automated procedures, or any such process associated with personal data. The term goes far and includes virtually every handling of data. »Responsible» means the natural or legal person, public authority, body or other body that, alone or in concert with others, decides on the purposes and means of processing personal data.
Relevant legal bases
In accordance with Art. 13 GDPR, we inform you about the legal basis of our data processing. Unless the
legal basis in the data protection declaration is mentioned, the following applies: The legal basis for
obtaining consent is Article 6 (1) lit. a and Art. 7 GDPR, the legal basis for the processing for the performance
of our services and the execution of contractual measures as well as the response to inquiries is Art. 6 (1) lit. b GDPR
the legal basis for processing in order to fulfill our legal obligations is Art. 6 (1) lit. c GDPR, and the legal basis for
processing in order to safeguard our legitimate interests is Article 6 (1) lit. f GDPR.
In the event that vital interests of the data subject or another natural person require the processing of
personal data, Art. 6 para. 1 lit. d DSGVO as legal basis.
Collaboration with processors and third parties
If, in the context of our processing, we disclose data to other persons and companies (processors or third parties),
transmit them to them or otherwise grant them access to the data, this will only be done on the basis of legal permission
(eg if a transmission of the data to third parties, as to payment service providers, pursuant to Art. 6 (1) (b)
GDPR is required for performance of the contract), you have consented to a legal obligation or on the basis of
our legitimate interests (eg the use of agents, webhosters, etc.).
Insofar as we commission third parties to process data on the basis of a so-called
»contract processing contract«, this is done on the basis of Art. 28 GDPR.
Transfers to third countries
If we process data in a third country (ie outside the European Union (EU) or the European Economic Area (EEA)) or in the context of the use of third party services or disclosure or transmission of data to third parties, this will only be done if it is to fulfill our (pre) contractual obligations, on the basis of your consent, on the basis of a legal obligation or on the basis of our legitimate interests. Subject to legal or contractual permissions, we process or have the data processed in a third country only in the presence of the special conditions of Art. 44 et seq. GDPR. This means, for example, that the processing takes place on the basis of special guarantees, such as the officially recognized level of data protection (eg for the USA through the »Privacy Shield«) or compliance with officially recognized special contractual obligations (so-called »standard contractual clauses«).
Rights of data subjects
You have the right to ask for confirmation as to whether the data in question is being processed and for information
about this data as well as for further information and a copy of the data in accordance with Art. 15 GDPR.
You have accordingly. Art. 16 GDPR the right to demand the completion of the data concerning you or the
correction of the incorrect data concerning you.
In accordance with Art. 17 GDPR, they have the right to demand that the relevant data be deleted immediately or,
alternatively, to require a restriction of the processing of data in accordance with Art. 18 GDPR.
You have the right to demand that the data relating to you, which you have provided to us, be obtained in
accordance with Art. 20 GDPR and request their transmission to other persons responsible.
You have gem. Art. 77 GDPR the right to file a complaint with the competent supervisory authority.
Withdrawal
You have the right to grant consent in accordance with. Art. 7 para. 3 GDPR with effect for the future
We can use temporary and permanent cookies and clarify this in the context of our privacy policy.
If users do not want cookies stored on their computer, they will be asked to disable the option in their browser's
system settings. Saved cookies can be deleted in the system settings of the browser. The exclusion of
cookies can lead to functional restrictions of this online offer.
A general contradiction to the use of cookies used for online marketing purposes can be found in a variety of
services, especially in the case of tracking, via the US website
http://www.aboutads.info/choices/ or in the EU http://www.youronlinechoices.com/
be explained. Furthermore, the storage of cookies can be achieved by
switching them off in the settings of the browser. Please note that not all features of this online offer may be used.
Deletion of data
The data processed by us are deleted or limited in their processing in accordance with Articles 17 and 18 GDPR.
Unless explicitly stated in this privacy policy, the data stored by us are deleted as soon as they are no longer
required for their purpose and the deletion does not conflict with any statutory storage requirements. Unless the data
is deleted because it is required for other and legitimate purposes, its processing will be restricted. This means
that the data is blocked and not processed for other purposes. This applies, for example, to data that must be kept
for commercial or tax reasons.
According to legal requirements in Germany, the storage takes place in particular for 6 years pursuant to § 257 Abs. 1 HGB
(trading books, inventories, opening balance sheets, annual accounts, trade letters, accounting documents, etc.)
and for 10 years pursuant to § 147 Abs. 1 AO (books, Records, management reports, accounting records, trade and
business letters, tax documents, etc.).
According to legal requirements in Austria, the storage takes place in particular for 7 years according
to § 132 paragraph 1 BAO (accounting documents, receipts / invoices, accounts, receipts, business papers,
statement of income and expenses, etc.), for 22 years in connection with real estate and for 10 years for
documents related to electronically supplied services, telecommunications, broadcasting and television services
provided to non-EU companies in EU Member States for which the Mini-One-Stop-Shop (MOSS) is used.
Hosting
The hosting services we use serve to provide the following services:
Infrastructure and Platform Services, Computing Capacity, Storage and Database Services, Security Services, and
Technical Maintenance Services we use to operate this Online Service.
Here we, or our hosting provider, process inventory data, contact data, content data, contract data, usage data,
meta and communication data of customers, interested parties and visitors to this online offer on the basis of our
legitimate interests in an efficient and secure provision of this online offer acc. Art. 6 para. 1 lit. f GDPR
in conjunction with Art. 28 GDPR (conclusion of contract processing contract).
Collection of access data and log files
We, or our hosting provider, collects on the basis of our legitimate interests within the meaning of Art. 6
para. 1 lit. f. GDPR Data on every access to the server on which this service is located (so-called server log files).
The access data includes name of the retrieved web page, file, date and time of retrieval, amount of data transferred,
message about successful retrieval, browser type and version, the user's operating system, referrer URL
(the previously visited page), IP address and the requesting provider.
Logfile information is stored for security reasons (eg to investigate abusive or fraudulent activities) for
a maximum of 7 days and then deleted. Data whose further retention is required for evidential purposes shall
be exempted from the cancellation until final clarification of the incident.
Amazon Affiliate Program
On the basis of our legitimate interests (ie interest in the economic operation of our online offer
within the meaning of Art. 6 (1) lit. GDPR), we are participants in the Amazon EU Affiliate Program, which
was designed to provide a medium for websites by means of which the placement of advertisements and links to
Amazon.de advertising fee refund can be earned (so-called affiliate system). Amazon uses cookies to track the
origin of orders. Among other things, Amazon may recognize that you have clicked the affiliate link on this site
and subsequently purchased a product from Amazon.
For more information about Amazon's data usage and opt-out opportunities, please visit the company's privacy
policy: http://www.amazon.de/gp/help/customer/display.html/ref=footer_privacy?ie=UTF8&nodeId=3312401.
contact
When contacting us (eg via contact form, e-mail, telephone or via social media),
the information provided by the user to process the contact request and its processing acc. Art. 6 para. 1 lit. b) DSGVO
processed. User information can be stored in a Customer Relationship Management System (»CRM System«)
or comparable request organization.
We delete the requests, if they are no longer required. We check the necessity every two years;
Furthermore, the legal archiving obligations apply.
Google-Re/Marketing-Services
Based on our legitimate interests (ie interest in the analysis, optimization and economic operation
of our online offer within the meaning of Art. 6 (1) lit. GDPR), we use the marketing and remarketing services
(short »Google Marketing Services«) Of Google LLC, 1600 Amphitheater Parkway, Mountain View,
CA 94043, USA, (»Google«).
Google Marketing Services allows us to better target advertisements for and on our website so that we only present
ads to users that potentially match their interests. If, for example, a user sees ads for products that he is interested
in on other websites, this is referred to as remarketing. For these purposes, when Google and our other websites
that have Google Marketing Services are active, Google will immediately execute Google code and become so-called
(re) marketing tags (invisible graphics or code, also known as »Web Beacons«) incorporated into the website.
Google is certified under the Privacy Shield Agreement, which provides a guarantee to comply with European privacy
legislation (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).
With their help, the user can store an individual cookie, ie a small file (instead of cookies, comparable
technologies can also be used). The cookies can be set by different domains, including google.com, doubleclick.net,
invitemedia.com, admeld.com, googlesyndication.com or googleadservices.com. In this file is noted which web
pages the user visited, for what content he is interested and what offers he has clicked, as well as technical
information about the browser and operating system, referring web pages, visit time and other information on
the use of the online offer. The IP address of the users is also recorded, whereby in the context of Google
Analytics we announce that the IP address is shortened within member states of the European Union or
other parties to the Agreement on the European Economic Area and only in exceptional cases to one Google
server in the US is transmitted and shortened there. The IP address will not be merged with data of the user
within other offers from Google. The above information may also be linked by Google with such information
from other sources. If the user then visits other websites, they can be displayed according to his interests,
the ads tailored to him.
The data of the users are pseudonym processed in the context of the Google marketing services.
For example, Google does not store and process users' names or e-mail addresses, but processes the relevant
data in a cookie-related manner within pseudonymous user profiles. That is, from the perspective of Google,
the ads are not managed and displayed to a specifically identified person, but to the cookie owner, regardless
of who that cookie owner is. This does not apply if a user has explicitly allowed Google to process the data
without this pseudonymization. The information collected about users through Google Marketing Services
is transmitted to Google and stored on Google's servers in the United States.
Among the Google marketing services we use is the online advertising program »Google AdWords«. In the case
of Google AdWords, every advertiser receives a different conversion cookie. Cookies can not be tracked through
AdWords advertisers' websites. The information collected through the cookie is used to generate conversion
statistics for AdWords advertisers who have opted for conversion tracking. Advertisers will see the total
number of users who clicked on their ad and were redirected to a conversion tracking tag page. However,
they do not receive information that personally identifies users.
We can engage third-party ads based on the Google AdSense marketing service. AdSense uses cookies that enable
Google and its affiliate sites to serve ads based on users' visits to this site or other sites on the Internet.
We can also use Google Tag Manager to integrate and manage the Google Analytics and Marketing services on
our website.
For more information about Google's data usage for marketing, see the overview page:
https://www.google.com/policies/technologies/ads , Google's Privacy Policy located at
https://www.google.com/policies/privacy available.
If you wish to opt-out of interest-based advertising through Google Marketing Services, you can take advantage
of Google's recruitment and opt-out options: http://www.google.com/ads/preferences .
Online presence in social media
We maintain online presence within social networks and platforms in order to communicate with customers,
prospects and users active there and to inform them about our services. When calling the respective networks and
platforms, the terms and conditions and the data processing guidelines of the respective operators apply.
Unless otherwise stated in our privacy policy, we process the users' data as far as they communicate with us within
the social networks and platforms, eg write articles on our online presence or send us messages.