We have prepared this privacy statement (version 11/13/2020-111472407) to provide you with an explanation of what information we collect, how we use data, and the choices you have as a visitor to this website, in accordance with the requirements of the General Data Protection Regulation (EU) 2016/679

Unfortunately, these explanations sound rather technical due to their nature, but we have put much effort into describing the most important things as simply and clearly as possible.

Automatic Data Retention

Nowadays, when you visit websites, certain information is automatically created and stored. This website is no exception.

When you visit our website, as you are doing right now, our web server (computer on which this website is stored) automatically stores data such as

  • the address (URL) of the accessed website
  • browser and browser version
  • the used operating system
  • the address (URL) of the previously visited site (referrer URL)
  • the host name and the IP-address of the device the website is accessed from
  • date and time

in files (webserver-logfiles).

As a rule, web server log files are stored for two weeks and then automatically deleted. We do not pass on these data, but we cannot rule out the possibility that these data may be viewed in the event of unlawful behaviour.

Cookies

Our website uses HTTP-cookies to store user-specific data.
Below, we explain what cookies are and why they are used so that you may better understand the following privacy policy.

What exactly are cookies?

Whenever you surf the Internet, you use a browser. Popular browsers include Chrome, Safari, Firefox, Internet Explorer and Microsoft Edge. Most websites store small text-files in your browser. These files are called cookies.

One thing can’t be denied: Cookies are really useful little helpers. Almost all websites use cookies. More precisely, they are HTTP cookies, as there are other cookies for other applications. HTTP cookies are small files that are stored on your computer by our website. These cookie files are automatically placed in the cookie folder, effectively the “brain” of your browser. A cookie consists of a name and a value. A cookie consists of a name and a value. Moreover, to define a cookie, one or multiple attributes must be specified.

Cookies store certain user data about you, such as language or personal page settings. When you return to our site, your browser transmits the “user-related” information back to our site. Thanks to cookies, our site knows who you are and offers you the setting you are accustomed to. In some browsers each cookie has its own file, in others, such as Firefox, all cookies are stored in a single file.

There are both first-party cookies and third-party cookies. First-party cookies are created directly by our site, third-party cookies are created by partner websites (e.g. Google Analytics). Each cookie must be evaluated individually, as each cookie stores different data. Also, the expiration time of a cookie varies from a few minutes to a few years. Cookies are not software programs and do not contain viruses, Trojans or other “pests”. Cookies also cannot access information on your PC.

This is an example of how cookie-files may look like:

Name: _ga
Value: GA1.2.1326744211.152111472407-9
Purpose: to distinguish website visitors
Expiration date: after 2 years

A browser should be able to support these minimum sizes:

  • At least 4096 bytes per cookie
  • At least 50 cookies per domain
  • At least 3000 cookies in total

Which types of cookies are there?

What exact cookies we use, depends on the used services. We will explain this in the following sections of the Privacy Policy statement. Firstly, we will briefly focus on the different types of HTTP-cookies.

There are 4 different types of cookies:

Necessary Cookies
Necessary cookies help make a website usable by enabling basic functions like page navigation and access to secure areas of the website. The website cannot function properly without these cookies.

Preference Cookies
Preference cookies enable a website to remember information that changes the way the website behaves or looks, like your preferred language or the region that you are in.

Statistic Cookies
Statistic cookies help website owners to understand how visitors interact with websites by collecting and reporting information anonymously.

Marketing Cookies
Marketing cookies are used to track visitors across websites. The intention is to display ads that are relevant and engaging for the individual user and thereby more valuable for publishers and third-party advertisers.

Upon your first visit to a website you are usually asked which of these cookie-types you want to accept. Furthermore, this decision will of course also be saved in a cookie.

How can I delete cookies?

You yourself take the decision if and how you want to use cookies. Thus, no matter what service or website cookies are from, you always have the option to delete, deactivate or only partially allow them. For example, you can block third-party cookies but allow all other cookies.

If you want change or delete cookie-settings and would like to determine which cookies have been saved to your browser, you can find this info in your browser-settings:

Chrome: Clear, enable and manage cookies in Chrome

Safari: Manage cookies and website data in Safari

Firefox: Clear cookies and site data in Firefox

Internet Explorer: Delete and manage cookies

Microsoft Edge: Delete cookies in Microsoft Edge

If you do not generally want cookies, you can set up your browser so that it always informs you when a cookie is about to be set. This allows you to decide whether to permit or deny the placement of a cookie. The procedure varies depending on the browser. It is best to search for the instructions in Google with the search term “Delete Cookies Chrome” or “Deactivate Cookies Chrome” in the case of a Chrome browser.

What about my data protection?

The so-called “Cookie policy” has been in place since 2009. It state that the storage of cookies requires your consent. Within the EU countries, however, there are still very different reactions to these guidelines. In Austria, however, this directive was implemented in § 96 para. 3 of the Telecommunications Act (TKG).

If you want to learn more about cookies and do not mind technical documentation, we recommend https://tools.ietf.org/html/rfc6265, the Request for Comments of the Internet Engineering Task Force (IETF) called “HTTP State Management Mechanism”.

Storage of Personal Data

Any personal data you electronically submit to us on this website, such as your name, email address, home address or other personal information you provide via the transmission of a form or via any comments to the blog, are solely used for the specified purpose and get stored securely along with the respective submission times and IP-address.

Therefore, we use personal data for the communication with only those users, who have explicitly requested being contacted, as well as for the execution of the services and products offered on this website. We do not pass your personal data to others without your approval, but we cannot exclude the possibility this data will be looked at in case of illegal conduct.

If you send us personal data via email – and thus not via this website – we cannot guarantee any safe transmission or protection of your data. We recommend you, to never send confidential data via email.

May my data also be shared with third parties in another country (including outside the EU)?

Yes, provided that the European Commission has confirmed that this third country has an adequate data protection level and that adequate data protection guarantees exist 

Provided that you have given your explicit consent, data may be transferred to a third country (Article 49 (1) (a) of the GDPR). This is to inform you about possible risks related to intentional data transfer and a lack of adequate data protection safeguards (item 4.1). On our website, we use, among others, different cookies and similar technologies (hereinafter referred to as “cookies”) that we and third-party providers may rely on to process personal data. These third-party providers include companies such as Google LLC which are headquartered in the USA where they process their data. The European Court of Justice has declared the data protection level in the USA to be inadequate. It highlighted the risk of your data being accessed by US authorities for control and surveillance purposes and the fact that no effective legal remedies against this exist. Before we place cookies and transfer your data to these companies, we will ask you to provide your explicit consent (Article 6 (1) (a) of the GDPR and Article 49 (1) (a) of the GDPR) and we will provide detailed information about all data processing (purpose, data categories, and the storage period, among others). Information about specific cookies is available here. You can revoke your consent at any time with future effect. To do that, go to cookies on our website and change your consent as needed. In addition, please note that we are working hard to implement (additional) adequate safeguards pursuant to Article 46 of the GDPR as an alternative legal basis for the abovementioned data transfer.

Rights in accordance with the General Data Protection Regulation

You are granted the following rights in accordance with the provisions of the GDPR (General Data Protection Regulation) and the Austrian Data Protection Act (DSG):

  • right to rectification (article 16 GDPR)
  • right to erasure (“right to be forgotten“) (article 17 GDPR)
  • right to restrict processing (article 18 GDPR)
  • righ to notification – notification obligation regarding rectification or erasure of personal data or restriction of processing (article 19 GDPR)
  • right to data portability (article 20 GDPR)
  • Right to object (article 21 GDPR)
  • right not to be subject to a decision based solely on automated processing – including profiling – (article 22 GDPR)

If you think that the processing of your data violates the data protection law, or that your data protection rights have been infringed in any other way, you can lodge a complaint with your respective regulatory authority. For Austria this is the data protection authority, whose website you can access at https://www.data-protection-authority.gv.at/.

Evaluation of Visitor Behaviour

In the following Privacy Policy, we will inform you on if and how we evaluate the data of your visit to this website. The evaluation is generally made anonymously, and we cannot link to you personally based on your behaviour on this website.

You can find out more about how to disagree with the evaluation of visitor data, in the Privacy Policy below.

TLS encryption with https

We use https to transfer information on the internet in a tap-proof manner (data protection through technology design Article 25 Section 1 GDPR). With the use of TLS (Transport Layer Security), which is an encryption protocol for safe data transfer on the internet, we can ensure the protection of confidential information. You can recognise the use of this safeguarding tool by the little lock-symbol, which is situated in your browser’s top left corner, as well as by the use of the letters https (instead of http) as a part of our web address.

Google Analytics Privacy Policy

We use the tracking and analysis tool Google Analytics (GA) of the US-American company Google LLC (1600 Amphitheatre Parkway Mountain View, CA 94043, USA). Google Analytics collects data on your actions on our website. Whenever you click a link for example, this action is saved in a cookie and transferred to Google Analytics. With the help of reports which we receive from Google Analytics, we can adapt our website and our services better to your wishes. In the following, we will explain the tracking tool in more detail, and most of all, we will inform you what data is saved and how you can prevent this.

What is Google Analytics?

Google Analytics is a tracking tool used to analyse traffic on our website. In order for Google Analytics to work, a tracking code is built into the code of our website. Upon your visit to our website, this code records various actions you perform on your website. As soon as you leave our website, this data is sent to the Google Analytics server, where it is stored.

Google processes this data and we then receive reports on your user behaviour. These reports can be one of the following:

  • Target audience reports: With the help of target audience reports we can get to know our users better and can therefore better understand who is interested in our service.
  • Advertising reports: Through advertising reports we can analyse our online advertising better and hence improve it.
  • Acquisition reports: Acquisition reports give us helpful information about how we can attract more people to our service.
  • Behavioural reports: This tells us how you interact with our website. We can track your journey on our site and which links you click on.
  • Conversion reports: Conversion is when you take a desired action as a result of a marketing message. An example of this would be transforming you from a mere website visitor into a buyer or a newsletter subscriber. These reports help us learn more about how our marketing efforts are reaching you. This is how we want to increase our conversion rate.
  • Real-time reports: With the help of these reports we can see in real time, what happens on our website. For example, it allows us to see how many users are reading this text in real-time.

Why do we use Google Analytics on our website?

The objective of our website is clear: We want to offer you the best possible service. Google Analytics’ statistics and data help us with reaching this goal.

Statistically evaluated data provides us with a clear picture of the strengths and weaknesses of our website. On the one hand, we can optimise our page in a way, that makes it easier to be found by interested people on Google. On the other hand, the data helps us to get a better understanding of you as our visitor. Therefore, we can very accurately find out what we must improve on our website, in order to offer you the best possible service. The analysis of that data also enables us to carry out our advertising and marketing measures in a more individual and more cost-effective way. After all, it only makes sense to show our products and services exclusively to people who are interested in them.

What data gets stored by Google Analytics?

With the assistance of a tracking code, Google Analytics creates a random, unique ID which is connected to your browser cookie. That way, Google Analytics recognises you as a new user. The next time you visit our site, you will be recognised as a “recurring” user. All data that is collected gets saved together with this very user ID. This is what makes it possible to evaluate pseudonymous user profiles in the first place.

Your interactions on our website are measures by tags such as cookies and app instance IDs. Interactions are all kinds of actions that you perform on our website. If you are also using other Google systems (such as a Google Account), data generated by Google Analytics can be linked with third-party cookies. Google does not pass on any Google Analytics data, unless we as the website owners authorise it. Exceptions may be made if required by law.

The following cookies are used by Google Analytics:

Name: _ga
Value:2.1326744211.152111472407-5
Purpose: By deafault, analytics.js uses the cookie _ga, to save the user ID. It generally serves the purpose of differenciating between website visitors.
Expiration date: After 2 years

Name: _gid
Value:2.1687193234.152111472407-1
Purpose: This cookie also serves the purpose of differentiating between website users
Expiration date: After 24 hours

Name: _gat_gtag_UA_
Value: 1
Purpose: It is used for decreasing the demand rate. If Google Analytics is provided via Google Tag Manager, this cookie gets the name _dc_gtm_ .
Expiration date: After 1 minute

Name: AMP_TOKEN
Value: No information
Purpose: This cookie has a token which is used to retrieve the user ID by the AMP Client ID Service. Other possible values suggest a logoff, a request or an error.
Expiration date: After 30 seconds up to one year

Name: __utma
Value:1564498958.1564498958.1564498958.1
Purpose: With this cookie your behaviour on the website can be tracked and the site performance can be measured. The cookie is updated every time the information is sent to Google Analytics.
Expiration date: After 2 years

Name: __utmt
Value: 1
Purpose: Just like _gat_gtag_UA_ this cookie is used for keeping the requirement rate in check.
Expiration date: Afer 10 minutes

Name: __utmb
Value:3.10.1564498958
Purpose: This cookie is used to determine new sessions. It is updated every time new data or information gets sent to Google Analytics.
Expiration date: After 30 minutes

Name: __utmc
Value: 167421564
Purpose: This cookie is used to determine new sessions for recurring visitors. It is therefore a session cookie, and only stays saved until you close the browser again.
Expiration date: After closing the browser

Name: __utmz
Value: m|utmccn=(referral)|utmcmd=referral|utmcct=/
Purpose: This cookie is used to identify the source of our website’s visitor number. This means, that the cookie saves information on where you came to our website from. This could be another site or an advertisement.
Expiration date: After 6 months

Name: __utmv
Value: No information
Purpose: The cookie is used to store custom user data. It gets updated whenever information is sent to Google Analytics.
Expiration date: After 2 years

Note: This list is by no means exhaustive, since Google are repeatedly changing the use of their cookies.

Below we will give you an overview of the most important data that can be evaluated by Google Analytics:

Heatmaps: Google creates so-called Heatmaps an. These Heatmaps make it possible to see the exact areas you click on, so we can get information on what routes you make on our website.

Session duration: Google calls the time you spend on our website without leaving it session duration. Whenever you are inactive for 20 minutes, the session ends automatically.

Bounce rate If you only look at one page of our website and then leave our website again, it is called a bounce.

Account creation: If you create an account or make an order on our website, Google Analytics collects this data.

IP-Address: The IP address is only shown in a shortened form, to make it impossible to clearly allocate it.

Location: Your approximate location and the country you are in can be defined by the IP address. This process is called IP location determination.

Technical information: Information about your browser type, your internet provider and your screen resolution are called technical information.

Source: Both, Google Analytics as well as ourselves, are interested what website or what advertisement led you to our site.

Further possibly stored data includes contact data, potential reviews, playing media (e.g. when you play a video on our site), sharing of contents via social media or adding our site to your favourites. This list is not exhaustive and only serves as general guidance on Google Analytics’ data retention.

How long and where is the data saved?

Google has servers across the globe. Most of them are located in America and therefore your data is mostly stored on American servers. You can find out exactly where Google’s data centres are located here: https://www.google.com/about/datacenters/inside/locations/?hl=en

Your data is shared across different physical data carriers. This has the advantage that the data can be retrieved more quickly and is better protected against tampering. In every Google data centre, there are corresponding emergency programmes for your data. Hence, in case of a hardware failure at Google or a server error due to natural disasters, the risk for a service interruption stays relatively low.

Google Analytics has a 26 months standardised period of retaining your user data. After this time, your user data is deleted. However, we have the possibility to choose the retention period of user data ourselves. There are the following five options:

  • Deletion after 14 months
  • Deletion after 26 months
  • Deletion after 38 months
  • Deletion after 50 months
  • No automatical deletion

Once the specified period has expired, the data is deleted once a month. This retention period applies to your data linked to cookies, user recognition and advertising IDs (e.g. DoubleClick domain cookies). Reporting results are based on aggregated data and are stored separately from user data. Aggregated data is a merging of individual data into a larger unit.

How can I delete my data or prevent data retention?

Under the provisions of the European Union’s data protection law, you have the right to obtain information on your data and to update, delete or restrict it. With the help of a browser add on that can deactivate Google Analytics’ JavaScript (ga.js, analytics.js, dc.js), you can prevent Google Analytics from using your data. You can download this add on at https://tools.google.com/dlpage/gaoptout?hl=en-GB. Please note that this add-on only disables the data collection by Google Analytics.

Should you generally want to deactivate, delete or manage all cookies (independently of Google Analytics), you can use one of the guides that are available for any browser:

Chrome: Clear, enable and manage cookies in Chrome

Safari: Manage cookies and website data in Safari

Firefox: Clear cookies and site data in Firefox

Internet Explorer: Delete and manage cookies

Microsoft Edge: Delete cookies in Microsoft Edge

Google Analytics is an active participant of the EU-U.S. Privacy Shield Framework, which regulates correct and save transfer of personal data.
You can find more information on this at https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&tid=111472407. We hope we were able to make you more familiar with the most important information on Google Analytics’ data processing. If you want to learn more about the tracking service, we recommend these two links: https://marketingplatform.google.com/about/analytics/terms/gb/ and https://support.google.com/analytics/answer/6004245?hl=en.

Google Analytics IP Anonymisation

We implemented Google Analytics’ IP address anonymisation to this website. Google developed this function, so this website can comply with the applicable privacy laws and the local data protection authorities’ recommendations, should they prohibit the retention of any full IP addresses.
The anonymisation or masking of IP addresses takes place, as soon as they reach Google Analytics’ data collection network, but before the data would be saved or processed.

You can find more information on IP anonymisation at https://support.google.com/analytics/answer/2763052?hl=en.

Google Analytics Reports on demographic characteristics and interests

We have turned on Google Analytics’ functions for advertising reports. These reports on demographic characteristics and interests contain details about age, gender and interests. Through them we can get a better picture of our users – without being able to allocate any data to individual persons. You can learn more about advertising functions at https://support.google.com/analytics/answer/3450482?hl=en&%3Butm_id=ad.

You can terminate the use of your Google Account’s activities and information in “Ads Settings” at https://adssettings.google.com/authenticated via a checkbox.

Google Analytics‘ Data Processing Amendment

By accepting the amendment on data processing in Google Analytics, we entered a contract with Google concerning the use of Google Analytics.

You can find out more about the amendment on data processing for Google Analytics here: https://support.google.com/analytics/answer/3379636?hl=en&utm_id=ad

Google Analytics Google Signals Privacy Policy

We have activated Google signals in Google Analytics. Through this, any existing Google Analytics functions (advertising reports, remarketing, cross-device reports and reports on interests and demographic characteristics) are updated, to result in the summary and anonymisation of your data, should you have permitted personalised ads in your Google Account.

The special aspect of this is that it involves cross-device tracking. That means your data can be analysed across multiple devices. Through the activation of Google signals, data is collected and linked to the Google account. For example, it enables Google to recognise when you look at a product on a smartphone and later buy the product on a laptop. Due to activating Google signals, we can start cross-device remarketing campaigns, which would otherwise not be possible to this extent. Remarketing means, that we can show you our products and services across other websites as well.

Moreover, further visitor data such as location, search history, YouTube history and data about your actions on our website are collected in Google Analytics. As a result, we receive improved advertising reports and more useful information on your interests and demographic characteristics. These include your age, the language you speak, where you live or what your gender is. Certain social criteria such as your job, your marital status or your income are also included. All these characteristics help Google Analytics to define groups of persons or target audiences.

Those reports also help us to better assess your behaviour, as well as your wishes and interests. As a result, we can optimise and customise our products and services for you. By default, this data expires after 26 months. Please consider, that this data is only collected if you have agreed to personalised advertisement in your Google Account. The retained information is always exclusively summarised and anonymous data, and never any data on individual persons. You can manage or delete this data in your Google Account.

Google Tag Manager Privacy Policy

We use Google Tag Manager by the company Google Inc. (1600 Amphitheatre Parkway Mountain View, CA 94043, USA) for our website.
This Tag Manager is one of Google’s many helpful marketing products. With it, we can centrally integrate and manage code sections of various tracking tools, that we use on our website.

In this privacy statement we will explain in more detail, what Google Tag Manager does, why we use it and to what extent your data is processed.

What is Google Tag Manager?

Google Tag Manager is an organising tool with which we can integrate and manage website tags centrally and via a user interface. Tags are little code sections which e.g. track your activities on our website. For this, segments of JavaScript code are integrated to our site’s source text. The tags often come from Google’s intern products, such as Google Ads or Google Analytics, but tags from other companies can also be integrated and managed via the manager. Since the tags have different tasks, they can collect browser data, feed marketing tools with data, embed buttons, set cookies and track users across several websites.

Why do we use Google Tag Manager for our website?

Everybody knows: Being organised is important! Of course, this also applies to maintenance of our website. In order to organise and design our website as well as possible for you and anyone who is interested in our products and services, we rely on various tracking tools, such as Google Analytics.
The collected data shows us what interests you most, which of our services we should improve, and which other persons we should also display our services to. Furthermore, for this tracking to work, we must implement relevant JavaScript Codes to our website. While we could theoretically integrate every code section of every tracking tool separately into our source text, this would take too much time and we would lose overview. This is the reason why we use Google Tag Manager. We can easily integrate the necessary scripts and manage them from one place. Additionally, Google Tag Manager’s user interface is easy to operate, and requires no programming skills. Therefore, we can easily keep order in our jungle of tags.

What data is saved by Google Tag Manager?

Tag Manager itself is a domain that neither uses cookies nor stores data. It merely functions as an “administrator“ of implemented tags. Data is collected by the individual tags of the different web analysis tools. Therefore, in Google Tag Manager the data is sent to the individual tracking tools and does not get saved.

However, with the integrated tags of different web analysis tools such as Google Analytics, this is quite different. Depending on the analysis tool used, various data on your internet behaviour is collected, stored and processed with the help of cookies. Please read our texts on data protection for more information on the articular analysis and tracking tools we use on our website.

We allowed Google via the account settings for the Tag Manager to receive anonymised data from us. However, this exclusively refers to the use of our Tag Manager and not to your data, which are saved via code sections. We allow Google and others, to receive selected data in anonymous form. Therefore, we agree to the anonymised transfer of our website data. However, even after extensive research we could not find out what summarised and anonymous data it is exactly that gets transmitted. What we do know is that Google deleted any info that could identify our website. Google combines the data with hundreds of other anonymous website data and creates user trends as part of benchmarking measures. Benchmarking is a process of comparing a company’s results with the ones of competitors. As a result, processes can be optimised based on the collected information.

How long and where is the data saved?

When Google stores data, this is done on Google’s own servers. These servers are located all over the world, with most of them being in America. At https://www.google.com/about/datacenters/inside/locations/?hl=en you can read in detail where Google’s servers are.

In our individual data protection texts on the different tools you can find out how long the respective tracking tools save your data.

How can I delete my data or prevent data retention?

Google Tag Manager itself does not set any cookies but manages different tracking websites’ tags. In our data protection texts on the different tracking tools you can find detailed information on how you can delete or manage your data.

Google actively participates in the EU-U.S. Privacy Shield Framework, which regulates safe transfer of personal data. You can find more information at https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&tid=111472407. If you want to learn more about Google Tag Manager, we recommend you to read https://marketingplatform.google.com/intl/en_uk/about/tag-manager/.

Hotjar Privacy Policy

We use Hotjar of the company Hotjar Limited (Level 2, St Julian’s Business Centre, 3, Elia Zammit Street, St Julian’s STJ 1000, Malta) on our website, to statistically evaluate visitor data. Hotjar is a service that analyses the behaviour and feedback of you as a user on our website through a combination of analytics and feedback tools. We receive reports and visual presentations from Hotjar that show us where and how you “move” on our site. Personal data is anonymised automatically and never reaches Hotjar’s servers. This means you as the website user are not personally identified, while we can still learn much about your user behaviour.

What is Hotjar?

As mentioned in the above paragraph, Hotjar helps us analyse the behaviour of our site visitors. These tools offered by Hotjar include heatmaps, conversion funnels, visitor recording, incoming feedback, feedback polls and surveys (you can find more information about it at https://www.hotjar.com/). In this way, Hotjar helps us to provide you with a better user experience as well as an improved service. On the one hand it offers a good analysis about online behaviour and on the other hand it gives us good feedback on our website’s quality. Apart from the analytical aspects, we of course also want to know your opinion about our website. This is possible thanks to the feedback tool.

Why do we use Hotjar on our website?

In recent years, the importance of websites’ user experience has increased significantly. And for good reason. And justifiably so – a website should be structured in a way that makes the user feel comfortable, while making it easy to navigate. Thanks to Hotjar’s analysis and the feedback tools, we can make our website and our offer more attractive. To us, Hotjar’s Heatmaps have proven particularly valuable to us. Heatmaps are a form of representation for the visualisation of data.Through Hotjar’s Heatmaps, we can see very precisely what you like to click on, tap on and where you scroll to, for example.

What data is saved by Hotjar?

Hotjar automatically collects information on your user behaviour while you surf our website. In order to be able to collect this information, we implemented a tracking code. We integrated a tracking code, to be able to collect this information. The following data can be gathered via your computer or your browser:

  • Your computer’s IP address (is collected and saved in an anonymous format)
  • Screen size
  • Browser information (which browser and version etc.)
  • Your location (but only the country)
  • Your language preference
  • Visited websites (subpages)
  • Date and time of access to one of our subpages (websites)

Moreover, cookies also save data that have been placed on your computer (mostly your browser), although no personal data is collected. Generally, Hotjar does not pass on collected data to third parties. However, Hotjar explicitly emphasises that it is sometimes necessary to share data with Amazon Web Services. Parts of your information are saved on its servers. In this case, parts of your information are stored on their servers. However, Amazon is bound by a confidentiality obligation not to disclose these data.

Only a limited number of people (employees of Hotjar) have access to the stored information. Furthermore, Hotjar’s servers are protected by firewalls and IP restrictions (only authorised IP addresses have access). Firewalls are security systems which protect computers from unwanted network accesses. They serve as barriers between Hotjar’s secure internal network and the internet. Moreover, Hotjar also uses third-party companies for their services, such as Google Analytics or Optimizely. These companies may also store information that your browser sends to our website.

The following cookies are used by Hotjar. Since we refer to the cookie list in Hotjar’s privacy statement at https://www.hotjar.com/legal/policies/cookie-information, not every cookie has a sample value. The list shows examples of utilised Hotjar cookies and does not claim to be exhaustive.

Name: ajs_anonymous_id
Value: %2258832463-7cee-48ee-b346-a195f18b06c3%22111472407-5
Purpose: This cookie is generally used for analysis purposes and helps with counting our website’s visitors by tracking whether they have been to the website before.
Expiry date: after one year

Name: ajs_group_id
Value: 0
Purpose: This cookie collects data on user behaviour. Based on the similarities between website visitors, the data can then be assigned to a specific visitor group.
Expiry date: after one year

Name: _hjid
Value: 699ffb1c-4bfb-483f-bde1-22cfa0b59c6c
Purpose: The cookie is used to maintain a Hotjar user ID that is unique to the website in the browser. This allows user behaviour to be associated with the same user ID on subsequent visits.
Expiry date: after one year

Name: _hjMinimizedPolls
Value: 462568111472407-8
Purpose: Whenever you minimize a Feedback Poll widget, Hotjar sets this cookie. The cookie ensures that the widget really stays minimised when you browse our pages.
Expiry date: after one year

Name: _hjIncludedInSample
Value: 1
Purpose: This session cookie is used to inform Hotjar if you are part of the selected individuals (sample), who are used for the creation of funnels.
Expiry date: after one year

Name: _hjClosedSurveyInvites
Purpose: This cookie is set when you see an invitation to a feedback poll in a popup window. It is used to ensure that this invitation appears to you only once.
Expiry date: after one year

Name: _hjDonePolls
Purpose: As soon as you finish a feedback “question round” with the so-called Feedback Poll Widget, this cookie is set in your browser. This prevents Hotjar from sending you the same surveys again in the future.
Expiry date: after one year

Name: _hjDoneTestersWidgetsPurpose: This cookie is used when you enter your data in the “recruit user tester” widget. With this widget we want to recruit you as a tester. The cookie is used to prevent the form from reappearing repeatedly.
Expiry date: after one year

Name: _hjMinimizedTestersWidgets
Purpose: This cookie is set so that the “Recruit User Tester” remains minimized on all our pages once you have minimized it.
Expiry date: after one year

Name: _hjShownFeedbackMessage
Purpose: This cookie is set if you minimize or complete the incoming feedback. This is done so the feedback is instantly loaded as minimized when you navigate to another page, on which it is displayed.
Expiry date: after one year

How long and where is the data saved?

We integrated a tracking code to our website, which is transmitted to Hotjar’s servers in Ireland (EU). This tracking code contacts Hotjar’s servers and sends a script to your computer or any terminal device with which you are accessing our website. The script collects certain data concerning your interaction with our website. Then, the data is sent to Hotjar’s servers for processing. Moreover, Hotjar imposed a limit of retaining data for up to 365 days on itself. This means that all data collected by Hotjar that is older than one year is automatically deleted.

How can I delete my data or prevent data storage?

Hotjar saves none of your personal data for its analysis. The company even advertises with the slogan “We track behaviour, not individuals“. In addition, it is always possible for you to prevent the collection of your data. For this you simply need to visit Hotjar’s “Opt-out page“ and click on “deactivate Hotjar”. Please note that deleting cookies, using your browser’s private mode or utilising a different browser will result in the collection of data again. Furthermore, you can activate the “Do Not Track” button in your browser. To do this in Chrome for example, you must click on the three bars and select “Settings”. In the section “Data Protection“ you will find the option “Send a ‘Do Not Track’ request with your browsing traffic”. Finally, you must click on this button and no data will be collected by Hotjar.

You can find more details on the privacy policy and on what data Hotjar uses and how it is utilised at https://www.hotjar.com/legal/policies/privacy?tid=111472407.

Newsletter Privacy Policy

When you subscribe to our Newsletter you submit your personal data and give us the right to contact you via email. We use the data that is stored for the registration for the Newsletter exclusively for our Newsletter and do not pass them on.

If you unsubscribe from the newsletter – you will find the link for this at the bottom of each newsletter – we will delete all the data that was stored with the subscription to the newsletter.

Sendinblue Privacy Policy

On our website you can subscribe to our newsletter for free. For this to work, we use the Sendinblue email service for our newsletter. This is a service of the German company Sendinblue GmbH, Köpenicker street 126, 10179 Berlin.

We are of course very pleased if you subscribe to our newsletter.This way, we can always keep you up to date and inform you first-hand about what’s going on in our company. However, you should know that when you sign up for the newsletter, all data you enter (such as your email address or your first and last name) will be saved and managed on our server as well as at Sendinblue. This also applies to personal data. For example, in addition to the time and date of registration, your IP address is also saved. During registration, you also consent to us sending you our newsletter. Moreover, you will also find a reference to the privacy policy there. The newsletter service also offers us helpful options for analysis. This means that if we send a newsletter, we can for example find out whether and when you opened the newsletter. The software also detects and records which link you click in the newsletter. This information helps us enormously to adapt and optimise our service to your wishes and concerns. After all, we naturally want to offer you the best possible service. In addition to the data already mentioned above, data about your user behaviour is also stored.

You can revoke your consent to this data processing at any time. You can do so by for example clicking the unsubscribe link directly in the newsletter. After you have unsubscribed, your personal data will be deleted from our server and from Sendinblue’s servers located in Germany. You reserve the right to free information about your stored data and, if necessary, a right to deletion, blocking or rectification.

If you would like more information about data processing, we recommend the company’s privacy policy at https://www.sendinblue.com/legal/privacypolicy/.

Google reCAPTCHA Privacy Policy

Our primary goal is to provide you an experience on our website that is as secure and protected as possible. To do this, we use Google reCAPTCHA from Google Inc. (1600 Amphitheater Parkway Mountain View, CA 94043, USA). With reCAPTCHA we can determine whether you are a real person from flesh and bones, and not a robot or a spam software. By spam we mean any electronically undesirable information we receive involuntarily. Classic CAPTCHAS usually needed you to solve text or picture puzzles to check. But thanks to Google’s reCAPTCHA, we usually don’t have to bother you with such riddles. Most of the times it is enough to simply tick a box and confirm you are not a bot. With the new Invisible reCAPTCHA version you don’t even have to tick a box. In this privacy policy you will find out how exactly this works, and what data is used for it.

What is reCAPTCHA?

reCAPTCHA is a free captcha service from Google that protects websites from spam software and misuse by non-human visitors. The most common use of this service is when you fill in forms on the internet. A captcha service is a kind of automatic Turing test designed to ensure that an action on the internet is performed by a human and not a bot. During the classic Turing-test (named after computer scientist Alan Turing), a person differentiates between bot and human. With Captchas, a computer or software program does the same. Classic captchas work with small tasks that are easy for humans to solve, but present considerable difficulties for machines. With reCAPTCHA, you no longer must actively solve riddles. The tool uses modern risk techniques to distinguish people from bots. Here you only have to tick the text field “I am not a robot”. However, with Invisible reCAPTCHA, even this is no longer necessary. reCAPTCHA, integrates a JavaScript element into the source text, after which the tool then runs in the background and analyses your user behaviour. The software calculates a so-called captcha score from your user actions. Google uses this score to calculate the likelihood of you being a human, before entering the captcha. reCAPTCHA and Captchas in general are used every time bots could manipulate or misuse certain actions (such as registrations, surveys, etc.).

Why do we use reCAPTCHA on our website?

We only want to welcome people of flesh and blood on our side. That’s why we pull out all the stops to protect ourselves and offer the best possible user experience for you. For this reason, we use Google reCAPTCHA from the company Google. This way we can be pretty sure that we remain a “bot-free” website. By using reCAPTCHA, data is transmitted to Google to determine whether you are actually a human being. reCAPTCHA therefore serves the security of our website and, by extension, your security. For example, without reCAPTCHA it could happen that a bot registers as many email addresses as possible during registration in order to “spam” forums or blogs with unwanted advertising content. With reCAPTCHA, we can avoid such bot attacks.

What data is stored by reCAPTCHA?

reCAPTCHA collects personal data from users in order to determine whether the actions on our website are actually performed by people. The IP address and other data required by Google for the reCAPTCHA service may therefore be sent to Google. IP addresses are almost always truncated beforehand within the member states of the EU or other contracting states to the Agreement on the European Economic Area before the data ends up on a server in the USA. The IP address is not combined with other data from Google unless you are logged in with your Google account while using reCAPTCHA. First, the reCAPTCHA algorithm checks whether Google cookies from other Google services (YouTube. Gmail, etc.) are already placed on your browser. Then, reCAPTCHA sets an additional cookie in your browser and captures a snapshot of your browser window.

The following list of collected browser and user data is not exhaustive. Rather, it provides examples of data, which to our knowledge, is processed by Google.

  • Referrer URL (the address of the page the visitor has come from)
  • IP-address (z.B. 256.123.123.1)
  • Information on the operating system (the software that enables the operation of your computers. Popular operating systems are Windows, Mac OS X or Linux)
  • Cookies (small text files that save data in your browser)
  • Mouse and keyboard behaviour (every action you take with your mouse or keyboard is stored)
  • Date and language settings (the language and date you have set on your PC is saved)
  • All Javascript objects (JavaScript is a programming language that allows websites to adapt to the user. JavaScript objects can collect all kinds of data under one name)
  • Screen resolution (shows how many pixels the image display consists of)

Google may use and analyse this data even before you click on the “I am not a robot” checkmark. In the Invisible reCAPTCHA version, there is no need to even tick at all, as the entire recognition process runs in the background. Google does not provide details of how much and which data it stores.

The following cookies are used by reCAPTCHA: With the following list we are referring to Google’s reCAPTCHA demo version at https://www.google.com/recaptcha/api2/demo.
For tracking purposes, all these cookies require a unique identifier. Here is a list of cookies that Google reCAPTCHA has set in the demo version:

Name: IDE
Value: WqTUmlnmv_qXyi_DGNPLESKnRNrpgXoy1K-pAZtAkMbHI-111472407-8
Purpose:This cookie is set by DoubleClick (which is owned by Google) to register and report a user’s interactions with advertisements. With it, ad effectiveness can be measured, and appropriate optimisation measures can be taken. IDE is stored in browsers under the domain doubleclick.net.
Expiry date: after one year

Name: 1P_JAR
Value: 2019-5-14-12
Purpose: This cookie collects statistics on website usage and measures conversions. A conversion occurs, for example, when a user becomes a buyer. The cookie is also used to display relevant advertisements to users. Furthermore, the cookie can be used to prevent a user from seeing the same ad more than once.
Expiry date: after one month

Name: ANID
Value: U7j1v3dZa1114724070xgZFmiqWppRWKOr
Purpose: We were unable to find out much about this cookie. In Google’s privacy statement, the cookie is mentioned in connection with “advertising cookies” such as “DSID”, “FLC”, “AID” and “TAID”. ANID is stored under the domain google.com.
Expiry date: after 9 months

Name: CONSENT
Value: YES+AT.de+20150628-20-0
Purpose: This cookie stores the status of a user’s consent to the use of various Google services. CONSENT also serves to prevent fraudulent logins and to protect user data from unauthorised attacks.
Expiry date: after 19 years

Name: NID
Value: 0WmuWqy111472407zILzqV_nmt3sDXwPeM5Q
Purpose: Google uses NID to customise advertisements to your Google searches. With the help of cookies, Google “remembers” your most frequently entered search queries or your previous ad interactions. Thus, you always receive advertisements tailored to you. The cookie contains a unique ID to collect users’ personal settings for advertising purposes.
Expiry date: after 6 months

Name: DV
Value: gEAABBCjJMXcI0dSAAAANbqc111472407-4
Purpose: This cookie is set when you tick the “I am not a robot” checkmark. The cookie is used by Google Analytics for personalized advertising. DV collects anonymous information and is also used to distinguish between users.
Expiry date: after 10 minutes

Note: This list cannot claim to be exhaustive, as experience has shown that Google changes its choice of cookies from time to time.

How long and where are the data stored?

Due to the integration of reCAPTCHA, your data will be transferred to the Google server. Google have not disclosed where exactly this data is stored, despite repeated inquiries. But even without confirmation from Google, it can be assumed that data such as mouse interaction, length of stay on a website or language settings are stored on the European or American Google servers. The IP address that your browser transmits to Google does generally not get merged with other Google data from the company’s other services.
However, the data will be merged if you are logged in to your Google account while using the reCAPTCHA plug-in. Google’s diverging privacy policy applies for this.

How can I delete my data or prevent data storage?

If you want to prevent any data about you and your behaviour to be transmitted to Google, you must fully log out of Google and delete all Google cookies before visiting our website or use the reCAPTCHA software. Generally, the data is automatically sent to Google as soon as you visit our website. To delete this data, you must contact Google Support at https://support.google.com/?hl=en-GB&tid=111472407.

If you use our website, you agree that Google LLC and its representatives automatically collect, edit and use data.

You can find out more about reCAPTCHA on Google’s Developers page at https://developers.google.com/recaptcha/. Google does go into more detail here about the technical development of reCAPTCHA, but you will search in vain for precise information about data storage and privacy-related topics there as well. A good overview of Google’s basic use of data can be found in the company’s own privacy policy at https://policies.google.com/privacy?hl=en-GB.

Cookiebot Privacy Policy

We use functions of Cookiebot on our website. The company behind Cookiebot is Cybot A/S, Havnegade 39, 1058 Copenhagen, DK. Cookiebot offers us the opportunity to provide you with an extensive cookie notice (also known as a cookie banner or cookie notice).
By using this feature, data from you may be sent to, stored and processed by Cookiebot or Cybot. In this privacy policy, we inform you why we use Cookiebot, what data is transferred and how you can prevent this data transfer.

What is Cookiebot?

Cookiebot is a software product from Cybot. The software automatically creates a GDPR-compliant cookie notice for our website visitors. The technology behind Cookiebot also scans, controls and evaluates all cookies and tracking measures on our website.

Why do we use Cookiebot on our website?

We take data protection very seriously. We want to show you exactly what is happening on our website and which of your data is stored. Cookiebot helps us to get a good overview of all our cookies (first- and third-party cookies). This enables us to be transparent and to inform you precisely on the use of cookies on our website. Cookiebot ensures you always receive an up-to-date and GDPR compliant cookie notice, so you can decide yourself which cookies you allow or deny.

What data are stored by Cookiebot?

If you allow cookies, the following data will be transmitted to Cybot, where it is stored and processed.

  • IP address (in anonymous form, the last 3 digits are replaced with 0)
  • date and time of your consent
  • our website‘s URL
  • technical browser data
  • encrypted, anonymous key
  • the cookies you allowed (as status of consent)

If you have allowed the use of cookies, the following cookies get set by Cookiebot:

Name: CookieConsent
Value: {stamp:’P7to4eNgIHvJvDerjKneBsmJQd9111472407-2
Purpose:Your consent status is stored in this cookie. This allows our website to read and follow the current status on future visits.
Expiry date: after one year

Name: CookieConsentBulkTicket
Value: kDSPWpA%2fjhljZKClPqsncfR8SveTnNWhys5NojaxdFYBPjZ2PaDnUw%3d%3111472407-6
Purpose:This cookie is placed if you allow all cookies and thus have activated “collective consent”. The cookie then stores its own, random and unique ID.
Expiry date: after one year

Note: Please keep in mind that this is an exemplary list and that we do not claim for this list to be exhaustive. In the cookie statement at https://www.cookiebot.com/en/cookie-declaration/ you can see which other cookies may be used.

According to Cybot’s privacy policy, the company does not sell any personal information. However, Cybot shares data with trustworthy third-parties or subcontractors who help the company achieve its business goals. Data may also be transferred if it is legally required.

How long and where is the data stored?

All collected data is only transferred and stored within the European Union. The data is saved in an Azure data centre (with the cloud provider Microsoft). At https://azure.microsoft.com/en-gb/global-infrastructure/regions/ you can find out more on all “Azure regions”. All user data will be deleted by Cookiebot 12 months after registration (cookie consent) or immediately after termination of the Cookiebot service.

How can I delete my data or prevent data retention?

You have the right to access and delete your personal data at any time. You can prevent data collection and storage, for example, by rejecting the use of cookies via the cookie notice. Furthermore, your browser offers another option to prevent data processing or to manage it according to your wishes. Depending on the browser, the cookie settings work a little differently. Here you will find the instructions for the most popular browsers:

Chrome: Clear, enable and manage cookies in Chrome

Safari: Manage cookies and website data in Safari

Firefox: Clear cookies and site data in Firefox

Internet Explorer: Delete and manage cookies

Microsoft Edge: Delete cookies in Microsoft Edge

If you want to learn more about the data protection guidelines of “Cookiebot” or the company Cybot, we recommend the privacy policy at https://www.cookiebot.com/en/privacy-policy/.

Stripe Privacy Policy

On our website we use a payment tool by Stripe, an American technology company and online payment service. Stripe Payments Europe (Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland) is responsible for customers within the EU. Therefore, if you choose Stripe as your payment method, your payment will be processed via Stripe Payments. Hence, the data required for the payment process is forwarded to Stripe where it is then stored. In this privacy policy we will give you an overview of Stripe’s data processing and retention. Moreover, we will explain why we use Stripe on our website.

What is Stripe?

The technology company Stripe offers payment solutions for online payments. Stripe enables us to accept credit and debit card payments in our webshop while it handles the entire payment process. A major advantage of Stripe is that you never have to leave our website or shop during the payment process. Moreover, payments are processed very quickly via Stripe.

Why do we use Stripe on our website?

We of course want to offer the best possible service with both our website and our integrated online shop. After all, we would like you to feel comfortable on our site and take advantage of our offers. We know that your time is valuable and therefore, payment processing in particular must work quickly and smoothly. In addition to our other payment providers, with Stripe we have found a partner that guarantees secure and fast payment processing.

What data are stored by Stripe?

If you choose Stripe as your payment method, your personal data (transaction data) will be transmitted to Stripe where it will be stored. These data include the payment method (i.e. credit card, debit card or account number), bank sort code, currency, as well as the amount and the payment date. During a transaction, your name, email address, billing or shipping address and sometimes your transaction history may also be transmitted. These data are necessary for authentication. Furthermore, Stripe may also collect relevant data for the purpose of fraud prevention, financial reporting and for providing its services in full. These data may include your name, address, telephone number as well as your country in addition to technical data about your device (such as your IP address).

Stripe does not sell any of your data to independent third parties, such as marketing agencies or other companies that have nothing to do with Stripe. However, data may be forwarded to internal departments, a limited number of Stripe’s external partners or for legal compliance reasons. What is more, Stripe uses cookies to collect data. Here is a selection of cookies that Stripe may set during the payment process:

Name: m
Value: edd716e9-d28b-46f7-8a55-e05f1779e84e040456111472407-5
Purpose: This cookie appears when you select your payment method. It saves and recognises whether you are accessing our website via a PC, tablet or smartphone.
Expiry date: after 2 years

Name: __stripe_mid
Value: fc30f52c-b006-4722-af61-a7419a5b8819875de9111472407-1
Purpose: This cookie is required for carrying out credit card transactions. For this purpose, the cookie stores your session ID.
Expiry date: after one year

Name: __stripe_sid
Value: 6fee719a-c67c-4ed2-b583-6a9a50895b122753fe
Purpose: This cookie also stores your ID. Stripe uses it for the payment process on our website.
Expiry date: after end of the session

How long and where are the data stored?

Generally, personal data are stored for the duration of the provided service. This means that the data will be stored until we terminate our cooperation with Stripe. However, in order to meet legal and official obligations, Stripe may also store personal data for longer than the duration of the provided service. Furthermore, since Stripe is a global company, your data may be stored in any of the countries Stripe offers its services in. Therefore, your data may be stored outside your country, such as in the USA for example.

How can I delete my data or prevent data retention?

Stripe is still a participant of the EU-U.S. Privacy Shield Framework which regulated correct and secure transfer of personal data until July 16, 2020. However, since the European Court of Justice declared the agreement to be invalid, the company no longer relies on this agreement, but still acts according to the principles of Privacy Shield.

You always reserve the right to information, correction and deletion of your personal data. Should you have any questions, you can contact the Stripe team at https://support.stripe.com/contact/email.

You can delete, deactivate or manage cookies in your browser that Stripe uses for its functions. This works differently depending on which browser you are using. Please note, however, that if you do so the payment process may no longer work. The following instructions will show you how to manage cookies in your browser:

Chrome: Clear, enable and manage cookies in Chrome

Safari: Manage cookies and website data in Safari

Firefox: Clear cookies and site data in Firefox

Internet Explorer: Delete and manage cookies

Microsoft Edge: Delete cookies in Microsoft Edge

We have now given you a general overview of Stripe’s data processing and retention. If you want more information, Stripe’s detailed privacy policy at https://stripe.com/at/privacy is a good source.

LogRocket Privacy Policy

This website uses functions of the web analysis service LogRocket. The provider is LogRocket Inc, B6201, One Kendall Square, Cambridge, MA 02139, USA.

LogRocket is a JavaScript based service, which records the behaviour of a user in an anonymous form and makes it available for analysis.

The storage of this user behaviour is based on Art. 6 para. 1 lit. f DSGVO. The website operator has a legitimate interest in the analysis of the user behaviour in order to optimise the offer on this website.

All data is stored anonymously on the servers of LogRocket Inc. in the USA. No conclusions about your person can be drawn from the collected data.

More information on the handling of user data can be found in the LockRocket privacy policy: https://logrocket.com/privacy/.

tawk.to Privacy Policy

Our website optionally offers the use of Tawk.to (a live chat software from Tawk.to ltd). The chat is integrated into the source code of the website via a plugin. By using the chat, you automatically use the services of Tawk.to. The data collected includes: chat history, IP address at the time of the chat and country of origin. These data are not passed on to third parties and are only used for protection and internal statistics. By using the chat, you agree that you agree to it. The data collected with the Tawk.to technologies are not used to personally identify the visitor to this website. They are not saved and deleted after the chat. The purpose and scope of the data collection and the further processing and use of the data by Tawk.to as well as your related rights and setting options to protect your privacy can be found in the data protection information from Tawk.to: https://www.tawk.to/privacy-policy

Source: Created with the Datenschutz Generator by AdSimple® Blog Marketing in cooperation with schoenheitsmagazin.at

© 2023 Calipio

© 2023 Calipio