Privacy Policy in accordance with the GDPR

We only process your personal data within the framework of the General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (Datenschutzgesetz) 2018. 

Note: To make this policy easier to read, the term “data" is generally used, even though personal data is meant. Legal provisions without any details refer exclusively to those in the GDPR, unless stated otherwise.

We inform you below about the nature, scope and purpose of data collection and its use according to the GDPR regulations:

The following data are collected:

• Information on the browser type and version used
• The operating system of the user 
• The IP address of the user
• Date and time of access
• Websites from which the user’s system accessed our Internet pages 
• Websites that were accessed by the user’s system through our website

Legal Basis for Data Processing 
The legal basis for temporary data retention and log files is Art. 6(1) GDPR.

Purpose of Data Processing

Temporary system storage of the IP address is necessary to allow the website to be provided on the computer of the user. The user’s IP address has to be retained for this until the log files are erased. 

Storage in log files occurs to ensure the functionality of the website. In addition, the data serves to optimise the website, and ensure the security of our IT systems. The data will not be evaluated for marketing purposes in this context. 

Such purposes are also the basis for our legitimate interest in personal data processing according to Art. 6(1) Point f GDPR.

Storage Period

The data are erased as soon as they cease to be required for the purpose for which they were collected. In the case of collection of data for the provision of the website, this is the case when the session in question ends. 

In the case of storage in log files, this is the case after four weeks at the latest. Storage beyond this time is possible. In this case, the IP addresses of the users are erased or modified so that they can no longer be associated with the accessing client.

Option of Objection and Elimination

The collection of data for the provision of the website and the storage of the data in log files is essential for the operation of the website. The user therefore has no option of objection.

Use of Cookies

Our website uses cookies. Cookies are text files which are stored in or by the Internet browser in the user’s computer system. If a user accesses a website, a cookie can be stored in the user’s operating system. This cookie contains a distinctive sequence of characters that allows the unique identification of the browser the next time the website is accessed. 
We also use cookies on our website to allow us to analyse how our users surf the web. The following data may be transmitted:

• Search terms entered
• Frequency of page views
• Use of website functions

The data collected in this way is anonymous. It is therefore not possible to assign such data to the user who accessed the web page. The data will not be saved with any other personal data of the user. Upon accessing our website, the user is informed on the use of cookies for analysis purposes and referred to this privacy policy, with an info banner. In this context, notification is also provided on the ways in which the user can prevent the storage of cookies by changing their browser settings. The following cookies are used:

Google Analytics

• _ga
• _gat
• _gid

Facebook

• Fr

Cookie Settings

• acceptedCookies

The legal basis for personal data processing using technically required cookies is Art. 6(1) Point f GDPR. The legal basis for the processing of personal data using cookies for analysis purposes where you have given your consent is Art. 6(1) Point°a°GDPR.

The purpose of the use of technically required cookies is to analyse how users surf. All our website functions can be offered without the use of these cookies.
Analysis cookies are used for the purpose of improving the quality of our website and its content. Via the analysis cookies, we find out how the website is used, allowing us to continually optimise our content.
Such purposes are also the basis for our legitimate interest in data processing acc. to Art. 6(1) Point f GDPR. 

Cookies are stored on the user’s computer and transmitted from this to our page. You, the user, therefore have full control over the use of cookies. By changing the settings in your Internet browser, you can disable or restrict the transfer of cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically. There are several options to manage cookies. The Help button on most browser tool bars shows you how you can stop the acceptance of cookies, how you can be notified when a new cookie is placed and how you can block cookies. If you block cookies it is possible that you may no longer be able to register, log in or use the services to their full extent.
Newsletter

There is the option of subscribing to a free newsletter on our website. When subscribing to the newsletter, the data entered in the input screen is sent to us. We specifically need your email address, first name and last name.
The following data are also collected when subscribing:

• The IP address of the computer accessing the page
• Date and time of registration

Your consent is obtained for the processing of data as part of the registration process and you are referred to this privacy policy.
In the context of data processing to deliver our newsletter, data is disclosed to third parties by sending our newsletter using the MailChimp services provided by Rocket Science Group LLC, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308 USA. These include a web beacon, also called a tracking pixel. This can establish whether the emails have been opened or whether the links in the emails have been clicked on. We use this information to improve our email service and analyse which information is read or clicked on most. We link this data with your actions on our website. The data collected in this way is stored by the newsletter provider MailChimp on its server in the USA. MailChimp is entitled to disclose your user data to third parties in certain cases. You can object to this tracking at any time by clicking the separate link provided in every email or by informing us by email at [office@rickatschwende.com]. 
Mailchimp is a Privacy Shield certified company. These data transfers are permissible as a result of the Adequacy Decisions  by the European Commission (EU) 2016/1250.
For information regarding the purpose and scope of data collection, other processing and use of data by MailChimp and your rights regarding this and settings to protect your privacy please refer to the data protection notice: mailchimp.com/legal/privacy and the MailChimp Terms of Use mailchimp.com/legal/terms.
The web beacon is automatically erased when the email is deleted. Our normal text emails do not contain any web beacons.
With the exception of the use of the MailChimp newsletter tool, your data is only used to send the newsletter and is not disclosed to any third parties by us.

Legal Basis for Data Processing

The legal basis for personal data processing following subscription to the newsletter where the user has given their consent thereto is Art. 6(1) Point a GDPR.

Purpose of Data Processing
Your email address is collected to send the newsletter.

Storage Period

The data are erased as soon as they cease to be required for the purpose for which they were collected. The user’s email address is retained for as long as the newsletter subscription is active. 
Any other data collected as part of the subscription process are generally erased after a period of seven days.

Option of Objection and Elimination

The newsletter subscription can be cancelled by the user concerned at any time. A suitable link for this purpose can be found in every newsletter. 
The web beacon is automatically erased when the mail is deleted. Our normal text emails do not contain any web beaons.
This also allows for the withdrawal of consent to retain the personal data collected during the subscription process.
Web Analysis Services 

We use different tools on our website to analyse how our users surf. The software places a cookie on the user's computer (see above for information on cookies (see above for cookies). When our website’s individual pages are accessed, the following data is retained:

• Two bytes of the IP address of the user system that has requested the page
• The accessed website
• The website from which the user accessed the accessed website (referrer)
• The subpages accessed from the accessed website
• The duration of the visit to the website
• The frequency of the website visit

Google Analytics
We use various web analysis services including Google Analytics provided by Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043, USA. These analysis services use “cookies", text files that are stored on your computer and allow for analysis of your use of the website. The information about your use of this website (including your IP address) that is generated by the cookie is transferred to a Google server in the USA and stored there. These analysis services will use this information to analyse your use of the website, to compile reports about the website activities for the website operator and to provide other services related to website use andthe Internet. The IP address which is transmitted by the user’s browser will not be combined with other data from Google. 

You can prevent the installation of the cookies by changing the settings of your browser software accordingly; however, please note that in this case you might not be able to use all functions of this website. You can also prevent the collection of the data generated by the cookie and related to your use of the website (including your IP address) as well as the processing of this data by Google by downloading and installing the browser plug-in available under the following link (tools.google.com/dlpage/gaoptout?hl=us).

You can find more information about the Terms of Use and data protection at www.google.com/analytics/terms/us.html or at www.google.com/intl/us/policies/.

We point out that Google Analytics was extended to the code ““anonymizeIp" on this websites to ensure anonymised collection of IP addresses (so-called IP masking).

Google Remarketing
We use the Google Remarketing technology, a service provided by Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043, United States. Using this function we can address you as a visitor to our website with targeted advertising, by placing personalised ads related to your interests when you visit other websites in Google or the DoubleClick display network. Google uses cookies that are stored on your computer to analyse your website use, demographic features and interests. Google uses cookies that are stored on your computer to carry out the analysis of your website use, which is a requirement for the use of interest-related ads. The information generated by the cookie is transmitted to a Google server, stored there and can be analysed by us as part of statistics and used to create interest-related ads. Google will transfer this information to third parties if this is legally required or if third parties process this data on behalf of Google. 
Data collection and storage can be objected to at any time with effect for the future. You can deactivate the use of cookies by accessing the www.google.com/policies/technologies/ads/ page to deactivate Google Ads. Alternatively, you can deactivate the use of cookies by third parties by accessing the Network Advertising Initiative’s opt out page at www.networkadvertising.org/managing/opt_out.asp. You can find more information on the Google data protection regulations at www.google.com/intl/us/privacy.

Custom Audience
We use the Facebook “Custom Audience" technology, a service provided by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA. The data collected by the integration of cookies, web beacons or similar third-party technologies allow us to measure and organise our advertising on Facebook more effectively and, for example, only have posts or ads displayed to visitors to our website. We only use cookies, web beacons and similar, tried and tested and widely used third-party technologies to collect this data. We do not disclose any lists with personal data to Facebook or upload these to Facebook. The data collected in the process are only sent to Facebook encrypted. We cannot see any personal data for individual users. 
Further information is available in the Facebook privacy policy at www.facebook.com/about/privacy. If you do not want any data to be collected through “Custom Audience", you can deactivate “Custom Audience" here.
Web analysis services are used to constantly improve our functions and services. Only non-personal data is used here for analysis and reporting purposes. This data is not combined with any other personal data by us.

The legal basis for processing the user’s personal data is Art.6(1) Point f GDPR.

Purpose of Data Processing

Processing the personal data of users allows us to analyse how our users surf. By analysing the collected data we are able to compile information about the use of our website’s individual components. This helps us to continuously improve our website and its user-friendliness. Such purposes are also the basis for our legitimate interest in data processing acc. to point (f) Art. 6(1) GDPR. The anonymisation of the IP address sufficiently protects the user's interest in the protection of their personal data.

Storage Period
The data are deleted as soon as they cease to be required for our recording purposes.

Option of Objection and Elimination

Cookies are stored on the computer of the user, and transferred from it to our site. You, the user, therefore have full control over the use of cookies. By changing the settings in your Internet browser, you can disable or restrict the transfer of cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may be possible that not all functions of this website may be used to their full extent.
We offer our users the option to opt out of the analysis process on our website. You have to follow the corresponding link for this. This places a cookie in your system that tells our system not to save the user data. If the user deletes the opt-out cookie from their system at any point, they will have to set it again.
Please see the statements above for more detailed information about the privacy settings for the web analysis tools we use.
 
User Rights Nutzers (Rights of Data Subjects)

If your personal data is processed, you are the data subject as defined in the GDPR and you have the following rights vis-à-vis us as the controller:

You have the right to request confirmation from us as to whether personal data concerning you is processed. 
If such processing takes place, you can request the following information from us:
The purposes and categories of personal data that are processed, including the recipients or recipient categories who your data has been is being disclosed to and the planned retention period for the data concerned. If we use profiling technologies, we must provide you with meaningful information about the logic involved as well as the significance and the envisaged consequences of such processing. In addition to that, you have a right to lodge a complaint with the competent supervisory authority.You also have a right to information as to whether the personal data relating to you are transmitted to a third country or to an international organisation. 

Right to Rectification 
You have a right to rectification and/or completion vis-à-vis the controller if the processed personal data related to you is incorrect or incomplete. If this applies, we will rectify the data immediately.
Right to Restriction of Processing
Under the following circumstances, you can request us to restrict processing of the personal data relating to you:

• if you contest the accuracy of the personal data relating to you for a period that enables the Controller to verify accuracy of the personal data;
• if processing is unlawful, but you refuse erasure of the personal data, requesting instead that use of the personal data be restricted;
• we no longer require the personal data for the purposes of processing, but you require them in order to assert, exercise or defend legal claims, or
• you have objected to processing pending the verification of whether our legitimate grounds override those of you.

Where processing has been restricted, such data may only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State. Where processing has been restricted pursuant to the aforementioned conditions, you shall be notified by us before the restriction is lifted.

Right to Erasure
We are obliged to erase your data without undue delay where one of the following grounds applies:

• Your data is no longer necessary in relation to the purposes for which they were collected;
• You withdraw your consent and there is no other legal basis for processing. 
• You object to processing according to Art. 21(1) and there are no overriding legitimate grounds for processing, or you object to processing according to Art. 21(2)°GDPR. 
• Your data has been unlawfully processed. 

The right to erasure does not apply to the extent that processing is necessary

• For compliance with a legal obligation which requires processing (e.g. by official authorities and offices), or for the performance of a task carried out in the public interest or in the exercise of official authority vested in us;
• For the establishment, exercise or defence of legal claims.

Right of Information
If you have asserted the right to rectification, erasure or restriction of processing vis-à-vis the controller, the latter is obliged to notify all recipients, to whom your personal data have been disclosed, of such rectification or erasure of the data or restriction of processing, unless this turns out to be impossible or produces unreasonable burdens.
You have a right to be informed about these recipients.

Right to Objection
You have the right to object, on grounds relating to your particular situation, at any time to any processing of your personal data which is based on Art. 6(1) Point e or f GDPR, including profiling based on those provisions. 
In this case we no longer process your data, unless we demonstrate compelling legitimate grounds for processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.
Where your data is processed for direct marketing purposes, you have the right to object at any time to any processing of your data for such marketing, which includes profiling to the extent that it is related to such direct marketing.
Where you object to processing for direct marketing purposes, your personal data will no longer be processed for such purposes.
Right to Withdraw Consent Given Under Data Protection Law
You have the right to withdraw your consent given under data protection law at any time. The withdrawal of consent does not affect the legality of the previous processing.

Right to Lodge a Complaint with a Supervisory Authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with the Austrian Data Protection Authority, in accordance with Art.°24ff°DSG 2018, if you consider that the processing of your personal data infringes the GDPR. 
The Austrian Data Protection Authority informs the complainant on the progress and the outcome of the complaint including the possibility of a judicial remedy.

Dornbirn, May 2018