DATA PROTECTION
We have written this data protection declaration (version 06/23/2019-221096552) in order to explain to you in accordance with the requirements of the General Data Protection Regulation (EU) 2016/679 and the Data Protection Act (DSG) what information we collect, how we use data and what decision-making options You as a visitor to this website have.
Unfortunately, it is in the nature of things that these explanations sound very technical, but when creating them we have tried to describe the most important things as simply and clearly as possible.
AUTOMATIC DATA STORAGE
When you visit websites these days, certain information is created and stored automatically, including this website.
When you visit our website as you are now, our web server (computer on which this website is stored) automatically saves data such as
the address (URL) of the website accessed
- Browser and browser version
- the operating system used
- the address (URL) of the previously visited page (referrer URL)
- the hostname and IP address of the device from which it is accessed
- Date and time
in files (web server log files).
As a rule, web server log files are stored for two weeks and then automatically deleted. We do not pass on this data, but we cannot rule out that this data will be viewed if illegal behavior occurs.
According to Article 6 Paragraph 1 f of the GDPR (lawfulness of processing), the legal basis is that there is a legitimate interest in enabling the error-free operation of this website by recording web server log files.
STORAGE OF PERSONAL DATA
Personal data that you submit to us electronically on this website, such as name, email address, address or other personal information when submitting a form or comments in the blog, will be processed by us together with the time and IP address. Address will only be used for the specified purpose, stored securely and not passed on to third parties.
We therefore only use your personal data to communicate with those visitors who expressly request contact and to process the services and products offered on this website. We will not pass on your personal data without your consent, but we cannot rule out that this data will be viewed in the event of unlawful behavior.
If you send us personal data by email – away from this website – we cannot guarantee the secure transmission and protection of your data. We recommend that you never send confidential data unencrypted via email.
According to Article 6 Paragraph 1 a of the GDPR (lawfulness of processing), the legal basis is that you give us your consent to process the data you have entered. You can revoke this consent at any time – an informal email is sufficient; you will find our contact details in the legal notice.
RIGHTS ACCORDING TO THE BASIC DATA PROTECTION REGULATION
According to the provisions of the GDPR and the Austrian Data Protection Act (DSG), you are generally entitled to the following rights:
- Right to rectification (Article 16 GDPR)
- Right to deletion (“right to be forgotten”) (Article 17 GDPR)
- Right to restriction of processing (Article 18 GDPR)
- Right to notification – obligation to notify in connection with the correction or deletion of personal data or the restriction of processing (Article 19 GDPR)
- Right to data portability (Article 20 GDPR)
- Right to object (Article 21 GDPR)
- Right not to be subject to a decision based solely on automated processing, including profiling (Article 22 GDPR)
If you believe that the processing of your data violates data protection law or your data protection rights have been violated in any other way, you can complain to the supervisory authority, which in Austria is the data protection authority, whose website you can visit at https://www. dsb.gv.at/find.
COOKIES
Our website uses HTTP cookies to store user-specific data.
Below we explain what cookies are and why they are used so that you can better understand the following privacy policy.
What exactly are cookies?
Whenever you surf the Internet, you use a browser. Well-known browsers include Chrome, Safari, Firefox, Internet Explorer and Microsoft Edge. Most websites store small text files in your browser. These files are called cookies.
One thing cannot be denied: Cookies are really useful little helpers. Almost all websites use cookies. To be more precise, they are HTTP cookies, as there are also other cookies for other areas of application. HTTP cookies are small files that our website stores on your computer. These cookie files are automatically stored in the cookie folder, the “brain” of your browser. A cookie consists of a name and a value. When defining a cookie, one or more attributes must also be specified.
Cookies store certain user data about you, such as language or personal page settings. When you visit our site again, your browser sends the “user-related” information back to our site. Thanks to cookies, our website knows who you are and offers you your usual default settings. In some browsers each cookie has its own file, in others, such as Firefox, all cookies are stored in a single file.
There are both first-party cookies and third-party cookies. First-party cookies are created directly by our site, third-party cookies are created by partner websites (e.g. Google Analytics). Each cookie must be evaluated individually because each cookie stores different data. The expiry time of a cookie also varies from a few minutes to a few years. Cookies are not software programs and do not contain viruses, Trojans or other “malicious” things. Cookies also cannot access information on your PC.
For example, cookie data might look like this:
- Name: _ga
- Expiry time: 2 years
- Use: Differentiation of website visitors
- Example value: GA1.2.1326744211.152221096552
A browser should support the following minimum sizes:
- A cookie should contain at least 4096 bytes
- At least 50 cookies should be able to be stored per domain
A total of at least 3000 cookies should be able to be stored.
What types of cookies are there?
The question of which cookies we use in particular depends on the services used and is clarified in the following sections of the data protection declaration. At this point we would like to briefly discuss the different types of HTTP cookies.
There are 4 types of cookies:
- Strictly necessary cookies
These cookies are necessary to ensure basic functions of the website. For example, these cookies are needed when a user puts a product in the shopping cart, then continues surfing on other pages and only later checks out. These cookies do not delete the shopping cart, even if the user closes their browser window.
- Functional cookies
These cookies collect information about user behavior and whether the user receives any error messages. These cookies are also used to measure the loading time and behavior of the website on different browsers.
- Target-oriented cookies
These cookies ensure better user experience. For example, entered locations, font sizes or form data are saved.
- Advertising cookies
These cookies are also called targeting cookies. They serve to provide the user with individually tailored advertising. This can be very practical, but also very annoying.
Typically, when you first visit a website, you will be asked which of these types of cookies you would like to allow. And of course this decision is also saved in a cookie.
How can I delete cookies?
You decide for yourself how and whether you want to use cookies. Regardless of which service or website the cookies come from, you always have the option of deleting cookies, only partially allowing them or deactivating them. For example, you can block third-party cookies but allow all other cookies.
If you would like to find out which cookies have been stored in your browser, if you want to change or delete cookie settings, you can do this in your browser settings:
Chrome: Delete, enable and manage cookies in Chrome
Safari: Manage cookies and site data with Safari
Firefox: Delete cookies to remove data that websites have placed on your computer
Internet Explorer: Deleting and managing cookies
Microsoft Edge: Deleting and managing cookies
If you generally do not want cookies, you can set your browser so that it always informs you when a cookie is to be set. This means you can decide for each individual cookie whether you allow the cookie or not. The procedure varies depending on the browser. It is best to search for the instructions in Google with the search term “delete cookies Chrome” or “deactivate cookies Chrome” in the case of a Chrome browser or replace the word “Chrome” with the name of your browser, e.g. Edge, Firefox, Safari.
What about my data protection?
The so-called “Cookie Guidelines” have existed since 2009. This states that the storage of cookies requires the consent of the website visitor (i.e. you). However, there are still very different reactions to these guidelines within the EU countries. In Austria, however, this directive was implemented in Section 96 Paragraph 3 of the Telecommunications Act (TKG).
If you want to know more about cookies and are not afraid of technical documentation, we recommend https://tools.ietf.org/html/rfc6265, the Request for Comments from the Internet Engineering Task Force (IETF) called “HTTP State Management Mechanism”.
Evaluation of visitor behavior
In the following data protection declaration we inform you whether and how we evaluate data from your visit to this website. The data collected is usually evaluated anonymously and we cannot identify you personally from your behavior on this website.
You can find out more about the options for objecting to this evaluation of visit data in the following data protection declaration.
TLS ENCRYPTION WITH HTTPS
We use https to transmit data securely on the Internet (data protection through technical design Article 25 paragraph 1 GDPR). By using TLS (Transport Layer Security), an encryption protocol for secure data transmission over the Internet, we can ensure the protection of confidential data. You can recognize the use of this data transfer protection by the small lock symbol at the top left of the browser and the use of the https scheme (instead of http) as part of our internet address.
GOOGLE FONTS PRIVACY POLICY
We use Google Fonts from Google Inc. (1600 Amphitheater Parkway Mountain View, CA 94043, USA) on our website.
You do not need to register or provide a password to use Google fonts. Furthermore, no cookies are stored in your browser. The files (CSS, fonts/fonts) are requested via the Google domains fonts.googleapis.com and fonts.gstatic.com. According to Google, requests for CSS and fonts are completely separate from all other Google services. If you have a Google Account, you do not need to worry that your Google Account information will be transmitted to Google while using Google Fonts. Google records the use of CSS (Cascading Style Sheets) and the fonts used and stores this data securely. We will take a closer look at what data storage looks like.
What are Google Fonts?
Google Fonts (formerly Google Web Fonts) is an interactive directory with more than 800 fonts that Google LLC provides for free use.
Many of these fonts are released under the SIL Open Font License, while others are released under the Apache License. Both are free software licenses. This means we can use them freely without paying license fees.
Why do we use Google Fonts on our website?
With Google Fonts we can use fonts on our own website and do not have to upload them to our own server. Google Fonts is an important component in keeping the quality of our website high. All Google fonts are automatically optimized for the web and this saves data volume and is a big advantage, especially for use on mobile devices. When you visit our site, the low file size ensures a fast loading time. Furthermore, Google Fonts are so-called secure web fonts. Different image synthesis systems (rendering) in different browsers, operating systems and mobile devices can lead to errors. Such errors can visually distort some texts or entire websites. Thanks to the fast Content Delivery Network (CDN), there are no cross-platform issues with Google Fonts. Google Fonts supports all major browsers (Google Chrome, Mozilla Firefox, Apple Safari, Opera) and works reliably on most modern mobile operating systems, including Android 2.2+ and iOS 4.2+ (iPhone, iPad, iPod).
We use Google Fonts so that we can display our entire online service as beautifully and consistently as possible. According to Article 6 Para. 1 f lit legal system be recognized.
What data does Google store?
When you visit our website, the fonts are downloaded via a Google server. Through this external call, data is transmitted to the Google servers. This is how Google also recognizes that you or your IP address visits our website. The Google Fonts API is designed to reduce the collection, storage, and use of end-user data to what is necessary for efficient font delivery. By the way, API stands for “Application Programming Interface” and serves, among other things, as a data transmitter in the software sector.
Google Fonts securely stores CSS and font requests on Google and is therefore protected. Google can determine the popularity of the fonts through the collected usage figures. Google publishes the results on internal analysis sites, such as Google Analytics. Google also uses data from its own web crawler to determine which websites use Google fonts. This data is published in the Google Fonts BigQuery database. BigQuery is a web service from Google for companies that want to move and analyze large amounts of data.
However, it should also be remembered that with every Google Font request, information such as IP address, language settings, browser screen resolution, browser version and browser name are automatically transmitted to the Google servers. Whether this data is also stored cannot be clearly determined or is not clearly communicated by Google.
How long and where is the data stored?
Google stores requests for CSS assets for one day on its servers, which are mainly located outside the EU. This allows us to use the fonts using a Google stylesheet. A style sheet is a format template that you can use to quickly and easily change the design or font of a website, for example.
The font files are stored by Google for one year. Google’s goal is to fundamentally improve the loading time of websites. When millions of websites reference the same fonts, they are cached after the first visit and immediately appear on all other websites visited later. Sometimes Google updates font files to reduce file size, increase language coverage, and improve design.
How can I delete my data or prevent data storage?
The data that Google stores for a day or a year cannot simply be deleted. The data is automatically transmitted to Google when the page is accessed. In order to delete this data early, you must contact Google Support at https://support.google.com/?hl=de&tid=221096552. In this case, you can only prevent data storage if you do not visit our site.
Unlike other web fonts, Google allows us unlimited access to all fonts. So we have unlimited access to a sea of fonts and get the best for our website. You can find out more about Google Fonts and other questions at https://developers.google.com/fonts/faq?tid=221096552. Although Google addresses data protection-related matters there, it does not contain any really detailed information about data storage. It is relatively difficult (almost impossible) to get really precise information about stored data from Google.
You can also find out which data is generally collected by Google and what this data is used for at https://www.google.com/intl/de/policies/privacy/.
Source: Created with the data protection generator from www.adsimple.at in cooperation with aboutbusiness.at
