Data Security Statement

Privacy policy and consent statement

Table of Contents 1. Objective and responsible body 2. Basic information on data processing 3. Processing of personal data 4. Elicitation of access data 5. Cookies & reach measurement 6. Google Analytics 7. Integration of services and third party content 8. User rights and deletion 9. Changes to the privacy policy

1. Objective and responsible body

This Privacy Policy clarifies the nature, scope and purpose of the processing (including collection, processing, use and consent) of personal information contained in our online offering and the related websites, features and content (collectively referred to as “online offer” or “online offer”) “Website”). The privacy policy applies regardless of the domains, systems, platforms, and devices (such as desktop or mobile) on which the online offering is being run. Provider of the online offer and responsible for the data protection law is Theresa E.. Coreth, owner: Theresa E.. Coreth, Rechte Wienzeile 163 Tür 41, 1050 Vienna (hereinafter referred to as “provider”, “we” or “us”). For the contact possibilities we refer to our imprint. The term “user” includes all customers and visitors of our online offer. The terms used, such as “Users” are to be understood gender-neutral.

2. Basic information on data processing

We only process personal data of users in compliance with the relevant data protection regulations in accordance with the requirements of data minimization and data avoidance. This means that the data of the users are processed only if a legal permission exists, in particular if the data for the performance of our contractual achievements as well as on-line services is required, or prescribed by law or in the presence of a consent. We take state of the art organizational, contractual and technical security measures to ensure that the provisions of the data protection laws are complied with and in order to protect the data processed by us against accidental or intentional manipulation, loss, destruction or against access by unauthorized persons. If, within the framework of this data protection declaration, content, tools or other means are used by other providers (collectively referred to as “third-party providers”) and their registered office is abroad, it can be assumed that data will be transferred to the states of residence of the third-party providers.  The transfer of data to third countries takes place either on the basis of a legal permission, the consent of the users or special contract clauses, which ensure a legally required security of the data.

3. Processing of personal data

In addition to the use expressly stated in this privacy policy, the personal data is processed for the following purposes on the basis of legal permissions or user consent: – The provision, execution, maintenance, optimization and security of our services, services and user services; – Ensuring effective customer service and technical support. We only transfer users’ data to third parties when this is necessary for billing purposes (for example, to a payment service provider) or for other purposes, if necessary, in order to fulfill our contractual obligations towards the users (for example, address information to suppliers). When contacting us (via contact form or e-mail), the details of the user are stored for the purpose of processing the request as well as in the event that follow-up questions arise. Personal data will be deleted if they have fulfilled their purpose and deletion does not conflict with any retention requirements.

4. Elicitation of access data

We collect data about every access to the server on which this service is located (so-called server log files). The access data includes name of the retrieved web page, file, date and time of retrieval, amount of data transferred, message about successful retrieval, browser type and version, the user’s operating system, referrer URL (the previously visited page), IP address and the requesting provider , We use the log data without assignment to the person of the user or other profiling according to the statutory provisions only for statistical evaluations for the purpose of operation, security and optimization of our online offer. However, we reserve the right to retrospectively check the log data, if there is legitimate suspicion of unlawful use, based on concrete evidence.

5. Cookies & reach measurement

Cookies are information transmitted from our web server or third-party web servers to users’ web browsers and stored there for later retrieval. Users are being informed about the use of cookies in the context of pseudonymous range measurement by means of this privacy policy. The use of this online offer is also possible despite the refusal of cookies. If users do not want cookies stored on their computer, they will be asked to disable the option in their browser’s system settings. Saved cookies can be deleted in the system settings of the browser. The refusal of cookies can lead to functional restrictions of this online offer. There is a possibility to manage many commercial online advertising cookies via the US website http://www.aboutads.info/choices or the EU page http://www.youronlinechoices.com/uk/your-ad -choices / .

6. Google Analytics

We use Google Analytics, a web analytics service provided by Google Inc. (“Google”). Google uses cookies. The information generated by the cookie about the use of the online offer by the users are usually transmitted to a Google server in the USA and stored there. Google will use this information on our behalf to evaluate the use of our online offering by users, to compile reports on the activities within this online offering and to provide us with other services related to the use of this online offer and internet usage. In this case, pseudonymous usage profiles of the users can be created from the processed data. We only use Google Analytics with activated IP anonymization. This means that the IP address of the users will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the US and shortened there. The IP address submitted by the user’s browser will not be merged with other data provided by Google. Users can prevent the storage of cookies by setting their browser software accordingly; Users may also prevent the collection by Google of the data generated by the cookie and related to their use of the online offer as well as the processing of such data by Google by downloading and installing the browser plug-in available under the following link: http: // tools.google.com/dlpage/gaoptout?hl=de. For more information about Google’s use of data, hiring and opt-out options, please visit Google’s websites: https://www.google.com/intl/en/policies/privacy/partners (“Google’s use of your data when you use websites or our partners’ apps “), http://www.google.com/policies/technologies/ads (” Use of data for promotional purposes “), http://www.google.com/settings/ads (” Managing information provided by Google used to show you ads “) and http://www.google.com/ads/preferences (” Determine which ads Google shows you “).

7. Integration of services and third party content

It may happen that contents or services of third-party providers, such as maps or fonts from other websites are included in our online offer. The inclusion of content from third-party providers always requires that the third-party providers perceive the IP address of the users, since they could not send the content to the users’ browser without the IP address. The IP address is therefore required for the presentation of this content. Furthermore, providers of third-party content can set their own cookies and process users’ data for their own purposes. In the process, user profiles can be created from the processed data. We will use this content as much as possible in a data-saving and data-avoiding manner and will select reliable third-party providers with regard to data security. The following presentation provides an overview of third-party providers as well as their contents, as well as links to their privacy statements, which further notes on the processing of data and, currently. already mentioned here, contradictory possibilities (so-called opt-out) contain: – External fonts from Google, Inc., https://www.google.com/fonts (“Google Fonts”). The integration of Google fonts is done by a server call on Google (usually in the US). Privacy Policy: https://www.google.com/policies/privacy/, Opt-out: https://www.google.com/settings/ads/. – Maps of the “Google Maps” service provided by the third-party Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. Privacy Policy: https://www.google.com/policies/privacy/, Opt-out: https://www.google.com/settings/ads/. – Third-party Google Inc.’s YouTube Platforms, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. Privacy Policy: https://www.google.com/policies/privacy/, Opt-out: https://www.google.com/settings/ads/.

8. User rights and deletion

Users have, upon request, the right to receive information free of charge about the personal data that we have stored about them. In addition, users have the right to correct inaccurate data, revoke consent, block and delete their personal information, and to file a complaint with the appropriate regulatory authority in the event of unlawful processing. The data stored with us are deleted as soon as they are no longer necessary for their purpose and the deletion does not conflict with any statutory storage requirements.

9. Changes to the privacy policy

We reserve the right to change the privacy policy in order to adapt it to changed legal situations, or to changes in the service and data processing. However, this only applies to declarations of data processing. If users’ consent is required or elements of the privacy policy contain provisions of the contractual relationship with the users, the changes will only be made with the consent of the users. Users are requested to inform themselves regularly about the content of the privacy policy. Version: 07.10.2019 18:01