Data protection
Introduction and Overview
This privacy policy informs you, in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and the applicable national data protection laws, about the processing of personal data by our company and by commissioned service providers (e.g., hosting providers). All terms in this document are to be understood as gender-neutral.
Our goal is to provide you with the necessary information in a transparent and understandable manner. We strive to minimize legal jargon and present relevant content clearly and in a structured format. If you still have questions, please feel free to contact the responsible party listed in the legal notice or below.
2. Scope
This privacy policy applies to the processing of personal data in the course of our business activities, particularly in the following areas:
-
Our online presence (websites, online shops)
-
Social media channels and email communication
-
Mobile applications for smartphones and other devices
If personal data is processed in other contexts, you will receive separate information regarding that data processing.
3. Legal Basis for Data Processing
The processing of personal data only takes place when there is a legal basis for it under the GDPR. Specifically, we rely on the following legal bases:
-
Consent (Art. 6(1)(a) GDPR): You have given your consent for the processing of your data for a specific purpose, e.g., when using a contact form.
-
Contract performance (Art. 6(1)(b) GDPR): Your data is processed when necessary to fulfill a contract or pre-contractual measures.
-
Legal obligation (Art. 6(1)(c) GDPR): In certain cases, we are legally required to retain personal data, e.g., for tax compliance.
-
Legitimate interests (Art. 6(1)(f) GDPR): Processing may occur if it is necessary for the purposes of our legitimate interests and does not override your interests or fundamental rights—for example, ensuring IT security.
In addition to the GDPR, national data protection laws apply, such as the Datenschutzgesetz (DSG) in Austria or the Federal Data Protection Act (BDSG) in Germany.
4. Storage Duration of Personal Data
We store personal data only for as long as necessary to fulfill the relevant processing purpose or as required by statutory retention periods. Once the processing purpose no longer applies or legal deadlines expire, the data is deleted. If you withdraw your consent to processing or request deletion, we will examine whether any legal obligations prevent us from deleting your data.
5. Your Rights Under the GDPR
Under the General Data Protection Regulation, you have the following rights regarding your personal data:
-
Right of access (Art. 15 GDPR): You have the right to know whether and to what extent we process your personal data.
-
Right to rectification (Art. 16 GDPR): If your data is incorrect or incomplete, you can request it be corrected.
-
Right to erasure ("Right to be forgotten", Art. 17 GDPR): You can request the deletion of your personal data, provided there are no legal retention obligations.
-
Right to restriction of processing (Art. 18 GDPR): In certain cases, you can request that your data be stored but not further processed.
-
Right to data portability (Art. 20 GDPR): You have the right to receive your data in a structured, commonly used format or to have it transferred to a third party.
-
Right to object (Art. 21 GDPR): You can object to the processing of your data, especially if it is based on legitimate interests or used for direct marketing.
-
Right to lodge a complaint (Art. 77 GDPR): If you believe that your data is being processed in violation of data protection laws, you can lodge a complaint with the appropriate supervisory authority.
In Austria, the responsible authority is the Data Protection Authority (www.dsb.gv.at). In Germany, each federal state has its own data protection authority. More information is available from the Federal Commissioner for Data Protection and Freedom of Information (www.bfdi.bund.de).
6. Contact
If you have any questions about the processing of your personal data or wish to exercise your rights, please contact the responsible party listed in our legal notice.