Processing of personal data
As a matter of principle, we only process personal data of our users to the extent that this is necessary to provide a functional website as well as our content and services. As a rule, the processing of personal data of our users is only carried out after the user’s consent. An exception applies in cases in which prior consent is not possible for factual reasons and the processing of the data is permitted by statutory provisions.
Legal basis for processing personal data
Insofar as we obtain the consent of the data subject for processing of personal data, Art. 6 (1) (a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis.
In the case of the processing of personal data that is necessary for the performance of a contract to which the data subject is a party, Art. 6 (1) (b) GDPR serves as the legal basis. This also applies to processing operations that are necessary to carry out pre-contractual measures.
Insofar as the processing of personal data is necessary for the fulfilment of a legal obligation to which our company is subject, Art. 6 (1) (c) GDPR serves as the legal basis.
In the event that the vital interests of the data subject or another natural person necessitate the processing of personal data, Art. 6 (1) (d) GDPR serves as the legal basis.
If the processing is necessary to safeguard a legitimate interest of our company or a third party and the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, Art. 6 (1) (f) GDPR serves as the legal basis for the processing.
Data deletion and storage period
The personal data of the data subject will be deleted or blocked as soon as the purpose of storage no longer applies. Storage may also take place if this has been provided for by the European or national legislator in EU regulations, laws or other regulations to which the controller is subject. The data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or performance of a contract.
Server log files
Every time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer.
The following data is collected:
- Information about the browser type and version used
- User’s operating system
- Date and time of access
- Websites from which the user’s system arrives at our website
- Websites accessed by the user’s system through our website
The data is also stored in the log files of our system. This does not affect the IP addresses of the user or other data that enables the assignment of the data to a user. This data is not stored together with other personal data of the user.
The legal basis for the temporary storage of the data is Art. 6 para. 1 lit. f GDPR.
Purpose of data processing
The data is stored in log files to ensure the functionality of the website. In addition, the data is used to optimise the website and to ensure the security of our information technology systems. The data is not evaluated for marketing purposes in this context.
These purposes also constitute our legitimate interest in data processing in accordance with Art. 6 (1) (f) GDPR.
Duration of storage
The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. In the case of the collection of data for the purpose of providing the website, this will be the case when the session in question has ended.
Objection and removal option
The collection of data for the provision of the website and the storage of the data in log files is absolutely necessary for the operation of the website. Consequently, there is no possibility of objection on the part of the user.
Use of cookies
Our website uses cookies. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user’s computer system. When a user accesses a website, a cookie can be stored on the user’s operating system. This cookie contains a characteristic string of characters that allows the browser to be uniquely identified when the website is accessed again.
On our website, cookies are a technical component of our content management system WordPress, which we use to administer the website. Cookies are only stored for administrative users of this website, but not for you as a visitor to the website.
The following data is stored and transmitted in the cookies:
- Language settings
- Log-in information
The legal basis for the processing of personal data using cookies is Art. 6 para. 1 lit. f GDPR.
Purpose of data processing
The cookies are used for the purpose of ensuring the functioning of the WordPress content management system. No cookies are created for visitors to the website.
These purposes also include our legitimate interest in the processing of personal data in accordance with Art. 6 (1) (f) GDPR.
Contact form
There is a contact form on our website, which can be used to contact us electronically. If a user takes advantage of this option, the data entered in the input mask will be transmitted to us and stored. This data is:
At the time the message is sent, the following data will also be stored:
- Sender’s name
- Email address of the sender
- Date and time of sending the message
Your consent will be obtained for the processing of the data as part of the submission process and reference will be made to this privacy policy.
Alternatively, it is possible to contact us via the e-mail address provided. In this case, the personal data of the user transmitted with the e-mail will be stored.
In this context, the data will not be passed on to third parties. The data will be used exclusively for the processing of the conversation.
The legal basis for the processing of the data is Art. 6 (1) (a) GDPR if the user has consented.
The legal basis for the processing of data transmitted in the course of sending an e-mail is Art. 6 (1) (f) GDPR. If the e-mail contact is aimed at concluding a contract, the additional legal basis for the processing is Art. 6 (1) (b) GDPR.
Purpose of data processing
The processing of the personal data from the input mask serves us solely to process the contact. In the case of contacting us by e-mail, this also constitutes the necessary legitimate interest in processing the data.
The other personal data processed during the submission process serves to prevent misuse of the contact form and to ensure the security of our information technology systems.
Duration of storage
The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. For the personal data from the input mask of the contact form and those sent by e-mail, this is the case when the respective conversation with the user has ended. The conversation is ended when it can be inferred from the circumstances that the relevant facts have been conclusively clarified.
The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.
Objection and removal option
The user has the option of revoking his consent to the processing of personal data at any time. If the user contacts us by e-mail, he can object to the storage of his personal data at any time. In such a case, the conversation cannot be continued.
In this case, all personal data stored in the course of contacting us will be deleted.