1. General Information The protection of your personal data is of particular concern to us. We process your data exclusively on the basis of the legal regulations (GDPR/DSGVO, TKG 2003). In this data protection information, we inform you about the most important aspects of data processing on our website.
Responsible Body (Controller) Fabio Gerhold, Froschaugasse 7, 8010 Graz
2. Your Rights You have the right to information, correction, deletion, restriction, data portability, revocation, and objection regarding your stored data. If you believe that the processing of your data violates data protection law or your data protection claims have been violated in any other way, you can complain to the supervisory authority. In Austria, this is the Austrian Data Protection Authority (Österreichische Datenschutzbehörde).
3. Data Collection on Our Website
Server Log Files The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:
- Browser type and browser version
- Operating system used
- Referrer URL
- Hostname of the accessing computer
- Time of the server request
- IP address
This data is not merged with other data sources. This data is recorded on the basis of Art. 6 Para. 1 lit. f GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimization of their website – for this purpose, the server log files must be recorded.
Contacting Us If you contact us via the form on the website or by e-mail, the data you provide (Name, Email, Message content) will be stored by us for the purpose of processing the request and in case of follow-up questions. We do not pass on this data without your consent. The processing of this data is based on Art. 6 Para. 1 lit. b GDPR (if your request is related to the fulfillment of a contract or pre-contractual measures) or on our legitimate interest (Art. 6 Para. 1 lit. f GDPR) in effectively processing the inquiries addressed to us.
4. Newsletter (Brevo) If you would like to receive the newsletter offered on the website, we require an e-mail address from you as well as information that allows us to verify that you are the owner of the e-mail address provided and that you agree to receive the newsletter. We use Brevo (formerly Sendinblue) to send newsletters. The provider is Sendinblue GmbH, Köpenicker Str. 126, 10179 Berlin, Germany. Brevo is a service with which the dispatch of newsletters can be organized and analyzed. The data you enter for the purpose of newsletter subscription (e.g. e-mail address) is stored on Brevo’s servers in the EU.
Data Analysis by Brevo When we send newsletters with Brevo, we can determine whether a newsletter message has been opened and which links have been clicked. This allows us to tailor our content to our readers’ interests.
Legal Basis The data processing is based on your consent (Art. 6 Para. 1 lit. a GDPR). You can revoke this consent at any time by unsubscribing from the newsletter. The legality of the data processing operations already carried out remains unaffected by the revocation. For more details, please refer to Brevo’s Privacy Policy: https://www.brevo.com/legal/privacypolicy/
5. Third-Party Tools & Security
Google reCAPTCHA We use “Google reCAPTCHA” (hereinafter “reCAPTCHA”) on our website. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. The purpose of reCAPTCHA is to check whether the data entry on our website (e.g. in a contact form) is made by a human or by an automated program. To do this, reCAPTCHA analyzes the behavior of the website visitor based on various characteristics. This analysis begins automatically as soon as the website visitor enters the website. The data collected during the analysis (e.g. IP address, time spent on the website, or mouse movements made by the user) is forwarded to Google. Data processing is carried out on the basis of Art. 6 Para. 1 lit. f GDPR. The website operator has a legitimate interest in protecting its web offers from abusive automated spying and from SPAM.
Cloudflare (Content Delivery Network & Security) We use the Content Delivery Network (CDN) and security services provided by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. Cloudflare helps to optimize the loading speeds of our website and protects it from malicious attacks (such as DDoS attacks). To provide this service, the data transfer between your browser and our website is routed through Cloudflare’s network. This involves the processing of your IP address and access logs. The use of Cloudflare is based on our legitimate interest in providing a secure, fast, and efficient website in accordance with Art. 6 Para. 1 lit. f GDPR. For more details, please refer to Cloudflare’s Privacy Policy: https://www.cloudflare.com/privacypolicy/
Backblaze (Data Backups) To prevent data loss and ensure the security of our website, we use the cloud storage service Backblaze (Backblaze, Inc., 500 Ben Franklin Ct, San Mateo, CA 94401, USA) to create encrypted backups of our website and databases. These backups may temporarily include personal data submitted via our website (e.g., contact form inquiries or newsletter signups). The processing of this data is based on our legitimate interest in data security and business continuity according to Art. 6 Para. 1 lit. f GDPR. For more details, please refer to Backblaze’s Privacy Policy: https://www.backblaze.com/company/privacy.html
SSL/TLS Encryption For security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator, this site uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.