Introduction and overview

We have written this data protection declaration (version 16.12.2021-111900854) in order to be able to offer you in accordance with the requirements of General Data Protection Regulation (EU) 2016/679 and applicable national laws to explain which personal data (data for short) we as the controller – and the processors commissioned by us (e.g. providers) – process and will process in the future and which are legitimate options They have. The terms used are to be understood as gender-neutral.
In short: We provide you with comprehensive information about the data that we process about you.

Data protection declarations usually sound very technical and use legal technical terms. However, this data protection declaration is intended to describe the most important things to you as simply and transparently as possible. As far as transparency is beneficial, technical terms are explained in a reader-friendly manner, links to further information are provided and graphics are used. We are thus informing in clear and simple language that we only process personal data in the context of our business activities if there is a corresponding legal basis. This is certainly not possible if you make as brief, unclear and legal-technical statements as possible, as they are often standard on the Internet when it comes to data protection. I hope you find the following explanations interesting and informative and maybe there is one or the other piece of information that you were not familiar with.
If you still have questions, we would like to ask you to contact the responsible body named below or in the legal notice, to follow the existing links and to look at further information on third-party websites. You can of course also find our contact details in the imprint.

scope of application

This data protection declaration applies to all personal data processed by us in the company and to all personal data processed by companies commissioned by us (contract processors). By personal data we mean information within the meaning of Art. 4 No. 1 GDPR, such as the name, email address and postal address of a person. The processing of personal data ensures that we can offer and invoice our services and products, be it online or offline. The scope of this data protection declaration includes:

• all online presences (websites, online shops) that we operate
• Social media appearances and email communication
• mobile apps for smartphones and other devices

In short: The data protection declaration applies to all areas in which personal data is processed in a structured manner in the company via the channels mentioned. If we enter into legal relationships with you outside of these channels, we will inform you separately if necessary.

Legal bases

In the following data protection declaration, we provide you with transparent information on the legal principles and regulations, i.e. the legal bases of the General Data Protection Regulation, which enable us to process personal data.
As far as EU law is concerned, we refer to REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of April 27, 2016. You can of course read this EU General Data Protection Regulation online on EUR-Lex, the access to EU law, at https://eur-lex.europa.eu/legal-content/DE/TXT/?uri=celex%3A32016R0679 .

We only process your data if at least one of the following conditions applies:

1. Consent (Article 6 (1) (a) GDPR): You have given us your consent to process data for a specific purpose. An example would be the storage of the data you entered in a contact form.
2. Contract (Article 6 Paragraph 1 lit.b GDPR): We process your data in order to fulfill a contract or pre-contractual obligations with you. For example, if we conclude a sales contract with you, we need personal information in advance.
3. Legal obligation (Article 6 Paragraph 1 lit. c GDPR): If we are subject to a legal obligation, we will process your data. For example, we are legally required to keep invoices for bookkeeping. These usually contain personal data.
4. Legitimate interests (Article 6 Paragraph 1 lit.f GDPR): In the case of legitimate interests that do not restrict your basic rights, we reserve the right to process personal data. For example, we have to process certain data in order to be able to operate our website securely and economically efficiently. This processing is therefore a legitimate interest.

Further conditions such as the taking of recordings in the public interest and the exercise of official authority as well as the protection of vital interests do not usually arise with us. If such a legal basis should be relevant, it will be shown at the appropriate point.

In addition to the EU regulation, national laws also apply:

• In Austria this is the federal law for the protection of natural persons when processing personal data ( data protection law ), DSG for short.
• In Germany , the Federal Data Protection Act , or BDSG for short, applies.

If other regional or national laws apply, we will inform you about them in the following sections.

Contact details of the person responsible

If you have any questions about data protection, you will find the contact details of the responsible person or office below:
Sample company GmbH
John Doe
Musterstrasse 47, 12312 Musterstadt, Austria
Authorized to represent: Markus Mustermann
Email: mail@musterfirma.at
Phone: +43 4711 12345
Imprint: https://www.musterfirma.at/impressum/

Storage period

The fact that we only store personal data for as long as is absolutely necessary for the provision of our services and products is a general criterion for us. This means that we delete personal data as soon as the reason for the data processing no longer exists. In some cases we are legally obliged to store certain data even after the original purpose no longer exists, for example for accounting purposes.

If you want your data to be deleted or if you revoke your consent to data processing, the data will be deleted as soon as possible and unless there is an obligation to store it.

We will inform you below about the specific duration of the respective data processing, provided we have further information.

Rights according to the General Data Protection Regulation

According to Article 13 GDPR, you have the following rights to ensure that data is processed fairly and transparently:

• According to Article 15 GDPR, you have a right to information as to whether we are processing your data. If so, you have the right to receive a copy of the data and the following information:
  • for what purpose we carry out the processing;
  • the categories, i.e. the types of data that are processed;
  • who receives this data and, if the data is transferred to third countries, how security can be guaranteed;
  • how long the data will be stored;
  • the existence of the right to correction, deletion or restriction of processing and the right to object to processing;
  • that you can complain to a supervisory authority (links to these authorities can be found below);
  • the origin of the data, if we have not collected it from you;
  • whether profiling is carried out, i.e. whether data is automatically evaluated in order to arrive at a personal profile of you.
• According to Article 16 GDPR, you have the right to correct your data, which means that we have to correct the data if you find errors.
• According to Article 17 GDPR, you have the right to erasure (“right to be forgotten”), which specifically means that you can request the erasure of your data.
• According to Article 18 GDPR, you have the right to restriction of processing, which means that we are only allowed to save the data but no longer use it.
• According to Article 19 GDPR, you have the right to data portability, which means that we will provide you with your data in a common format on request.
• According to Article 21 GDPR, you have a right of objection, which will result in a change in processing after enforcement.
  • If the processing of your data is based on Article 6 Para. 1 lit. e (public interest, exercise of official authority) or Article 6 para. 1 lit. f (legitimate interest), you can object to the processing. We will then check as soon as possible whether we can legally comply with this contradiction.
  • If data is used to operate direct mail, you can object to this type of data processing at any time. We are then no longer allowed to use your data for direct marketing.
  • If data is used to carry out profiling, you can object to this type of data processing at any time. We are then no longer allowed to use your data for profiling.
• According to Article 22 GDPR, you may have the right not to be subject to a decision based solely on automated processing (e.g. profiling).

In short: you have rights – do not hesitate to contact the person in charge listed above!

If you believe that the processing of your data violates data protection law or your data protection claims have been violated in any other way, you can complain to the supervisory authority. This is the data protection authority for Austria, whose website you can find at https://www.dsb.gv.at/ . In Germany there is a data protection officer for each federal state. For more information, please contact the Federal Commissioner for Data Protection and Freedom of Information (BfDI) . The following local data protection authority is responsible for our company:

Austria data protection authority

Head: Mag. Dr. Andrea Jelinek
Address: Barichgasse 40-42, 1030 Vienna
Telephone number: +43 1 52 152-0
Email address: dsb@dsb.gv.at
Website: https://www.dsb.gv.at/

Data processing security

We have implemented both technical and organizational measures to protect personal data. Wherever possible, we encrypt or pseudonymize personal data. As a result, we make it as difficult as possible, as far as possible, for third parties to infer personal information from our data.

Art. 25 GDPR speaks of “data protection through technology design and data protection-friendly default settings” and means that both software (e.g. forms) and hardware (e.g. access to the server room) always think of security and appropriate security Measures. If necessary, we will go into specific measures below.

TLS encryption with https

TLS, encryption and https sound and are very technical. We use HTTPS (the Hypertext Transfer Protocol Secure stands for “secure hypertext transfer protocol”) to transfer data securely on the Internet.
This means that the complete transmission of all data from your browser to our web server is secured – no one can “overhear”.

We have thus introduced an additional security layer and comply with data protection through technology design (Article 25 (1) GDPR ). By using TLS (Transport Layer Security), an encryption protocol for secure data transmission on the Internet, we can ensure the protection of confidential data.
You can recognize the use of this data transmission protection by the small lock symbol top left in the browser, to the left of the Internet address (e.g. examplepage.de) and the use of the https scheme (instead of http) as part of our Internet address.
If you want to know more about encryption, we recommend doing a Google search for “Hypertext Transfer Protocol Secure wiki” for good links to further information.

Cookies

Cookies summary Affected: Visitors to the website Purpose: depending on the respective cookie. You can find more details on this below or from the manufacturer of the software that sets the cookie. Processed data: Depending on the cookie used. You can find more details on this below or from the manufacturer of the software that sets the cookie. Storage duration: depending on the respective cookie, can vary from hours to years Legal basis: Art. 6 para. 1 lit. a GDPR (consent), Art. 6 Para. 1 letter f GDPR (legitimate interests)

What are cookies?

Our website uses HTTP cookies to save user-specific data.
In the following we explain what cookies are and why they are used so that you can better understand the following data protection declaration.

Whenever you surf the Internet, you are using a browser. Well-known browsers are, for example, Chrome, Safari, Firefox, Internet Explorer and Microsoft Edge. Most websites save small text files in your browser. These files are called cookies.

One thing cannot be dismissed out of hand: Cookies are really useful little helpers. Almost all websites use cookies. More precisely, they are HTTP cookies, as there are also other cookies for other areas of application. HTTP cookies are small files that our website stores on your computer. These cookie files are automatically placed in the cookie folder, which is the “brain” of your browser. A cookie consists of a name and a value. When defining a cookie, one or more attributes must also be specified.

Cookies store certain user data about you, such as language or personal page settings. When you call up our site again, your browser transmits the “user-related” information back to our site. Thanks to cookies, our website knows who you are and offers you the settings that you are used to. In some browsers each cookie has its own file, in others, such as Firefox, all cookies are stored in a single file.

The following graphic shows a possible interaction between a web browser such as B. Chrome and the web server. The web browser requests a website and receives a cookie back from the server, which the browser uses again as soon as another page is requested.

There are both first-party cookies and third-party cookies. First-party cookies are created directly from our side, third-party cookies are created by partner websites (e.g. Google Analytics). Each cookie must be evaluated individually, as each cookie stores different data. The expiry time of a cookie also varies from a few minutes to a few years. Cookies are not software programs and do not contain viruses, Trojans or other “pests”. Cookies cannot access information on your PC either.

For example, cookie data can look like this:

Name: _ga
Value: GA1.2.1326744211.152111900854-9
Purpose: Differentiation of website visitors
Expiry date: after 2 years

A browser should be able to support these minimum sizes:

• At least 4096 bytes per cookie
• At least 50 cookies per domain
• At least 3000 cookies in total

What types of cookies are there?

The question of which cookies we use in particular depends on the services used and is clarified in the following sections of the data protection declaration. At this point we would like to briefly discuss the different types of HTTP cookies.

There are 4 types of cookies:

Essential cookies
These cookies are necessary to ensure the basic functions of the website. For example, these cookies are needed when a user puts a product in the shopping cart, then continues surfing on other pages and only goes to checkout later. These cookies do not delete the shopping cart, even if the user closes his browser window.

Appropriate cookies
These cookies collect information about user behavior and whether the user receives any error messages. These cookies are also used to measure the loading time and the behavior of the website with different browsers.

Goal-oriented cookies
These cookies ensure better user-friendliness. For example, entered locations, font sizes or form data are saved.

Advertising cookies
These cookies are also called targeting cookies. They serve to deliver customized advertising to the user. That can be very practical, but also very annoying.

Usually, when you visit a website for the first time, you will be asked which of these types of cookies you would like to allow. And of course this decision is also saved in a cookie.

If you want to know more about cookies and are not afraid of technical documentation, we recommend https://tools.ietf.org/html/rfc6265 , the Request for Comments of the Internet Engineering Task Force (IETF) called “HTTP State Management Mechanism”.

Purpose of processing via cookies

The purpose ultimately depends on the respective cookie. More details can be found below or from the manufacturer of the software that sets the cookie.

Which data are processed?

Cookies are little helpers for a wide variety of tasks. Unfortunately, it is not possible to generalize which data is stored in cookies, but we will inform you about the processed or stored data in the context of the following data protection declaration.

Storage duration of cookies

The storage duration depends on the respective cookie and is further specified under. Some cookies are deleted after less than an hour, others can remain on a computer for several years.

You also have an influence on the storage duration yourself. You can manually delete all cookies at any time using your browser (see also “Right to object” below). Furthermore, cookies based on consent will be deleted at the latest after you withdraw your consent, whereby the legality of storage remains unaffected until then.

Right of objection – how can I delete cookies?

You decide for yourself how and whether you want to use cookies. Regardless of which service or website the cookies originate from, you always have the option of deleting, deactivating or only partially accepting cookies. For example, you can block third-party cookies but allow all other cookies.

If you want to find out which cookies have been stored in your browser, if you want to change or delete cookie settings, you can find this in your browser settings:

Chrome: Delete, activate and manage cookies in Chrome

Safari: manage cookies and website data with Safari

Firefox: Delete cookies to remove data that websites have stored on your computer

Internet Explorer: deleting and managing cookies

Microsoft Edge: Deleting and managing cookies

If you generally do not want cookies, you can set up your browser so that it always informs you when a cookie is to be set. For each individual cookie, you can decide whether or not to allow the cookie. The procedure differs depending on the browser. It is best to search for the instructions in Google with the search term “delete cookies Chrome” or “deactivate cookies Chrome” in the case of a Chrome browser.

Legal basis

The so-called “cookie guidelines” have existed since 2009. It states that the storage of cookies requires your consent (Article 6 (1) (a) GDPR). Within the EU countries, however, there are still very different reactions to these guidelines. In Austria, however, this guideline was implemented in Section 96 Para. 3 of the Telecommunications Act (TKG). In Germany, the cookie guidelines have not been implemented as national law. Instead, this guideline was largely implemented in Section 15 (3) of the Telemedia Act (TMG).

For absolutely necessary cookies, even if you have not given your consent. there are legitimate interests (Article 6 (1) (f) GDPR), which in most cases are of an economic nature. We want to provide visitors to the website with a pleasant user experience and for this certain cookies are often absolutely necessary.

Unless absolutely necessary cookies are used, this will only be done with your consent. The legal basis is Art. 6 Para. 1 lit. a GDPR.

In the following sections you will be informed in more detail about the use of cookies, provided that the software used uses cookies.

Web hosting

Web hosting summary Affected: Visitors to the website Purpose: professional hosting of the website and security of operation Processed data: IP address, time of website visit, browser used and other data. You can find more details on this below or at the respective web hosting provider used. Storage duration: depending on the respective provider, but usually 2 weeks Legal basis: Art. 6 para. 1 letter f GDPR (legitimate interests)

What is web hosting?

When you visit websites these days, certain information – including personal data – is automatically created and stored, including on this website. This data should be processed as sparingly as possible and only with justification. By the way, by website we mean the entirety of all websites on a domain, ie everything from the start page (homepage) to the very last subpage (like this one). By domain we mean example.de or musterbeispiel.com.

When you want to view a website on one screen, you use a program called a web browser. You probably know some web browsers by name: Google Chrome, Microsoft Edge, Mozilla Firefox, and Apple Safari.

This web browser has to connect to another computer where the website’s code is stored: the web server. The operation of a web server is a complicated and time-consuming task, which is why this is usually done by professional providers, the providers. These offer web hosting and thus ensure reliable and error-free storage of website data.

When the browser on your computer (desktop, laptop, smartphone) connects and while data is being transferred to and from the web server, personal data may be processed. On the one hand, your computer stores data, on the other hand, the web server must also store data for a period of time in order to ensure proper operation.

As an illustration:

Why do we process personal data?

The purposes of data processing are:

1. Professional hosting of the website and security of operation
2. to maintain operational and IT security
3. Anonymous evaluation of the access behavior to improve our offer and, if necessary, to prosecute or prosecute claims

Which data are processed?

Even while you are visiting our website, our web server, that is the computer on which this website is saved, usually automatically saves data such as

• the complete Internet address (URL) of the website called up (e.g. B. https://www.beispielwebsite.de/beispielunterseite.html?tid=111900854)
• Browser and browser version (e.g. Chrome 87)
• the operating system used (e.g. Windows 10)
• the address (URL) of the previously visited page (referrer URL) (e.g. B. https://www.beispielquellsite.de/vondabinichgekommen.html/)
• the host name and the IP address of the device from which access is made (e.g. COMPUTERNAME and 194.23.43.121)
• Date and Time
• in files, the so-called web server log files

How long will data be stored?

As a rule, the above data is stored for two weeks and then automatically deleted. We do not pass on this data, but we cannot rule out that this data will be viewed by the authorities in the event of illegal behavior.

In short: your visit will be logged by our provider (company that runs our website on special computers (servers)), but we will not pass on your data without your consent!

Legal basis

The lawfulness of the processing of personal data in the context of web hosting results from Art. 6 Para. 1 lit. f GDPR (safeguarding legitimate interests), because the use of professional hosting with a provider is necessary in order to present the company on the Internet in a safe and user-friendly manner and to be able to pursue attacks and claims from this, if necessary.

There is usually a contract between us and the hosting provider for order processing in accordance with Art. 28 f. GDPR, which guarantees compliance with data protection and data security.

Website modular systems

Website modular systems Privacy statement summary Affected: Visitors to the website Purpose: to optimize our service Processed data: data such as technical usage information such as browser activity, clickstream activities, session heat maps and contact details, IP address or your geographic location. You can find more details on this below in this data protection declaration and in the data protection declaration of the provider. Storage duration: depends on the provider Legal basis: Art. 6 para. 1 lit. f GDPR (Legitimate Interests), Art. 6 Para. 1 lit. a GDPR (consent)

What are website building blocks?

We use a modular website system for our website. Modular systems are special forms of a content management system (CMS). With a modular system, website operators can create a website very easily and without programming knowledge. In many cases, web hosts also offer modular systems. By using a modular system, your personal data can also be collected, stored and processed. In this data protection text we give you general information about data processing using modular systems. You can find more information in the provider’s privacy policy.

Why do we use modular website systems for our website?

The greatest advantage of a modular system is its ease of use. We want to offer you a clear, simple and well-arranged website that we can operate and maintain ourselves without any external support. A modular system now offers many helpful functions that we can use even without programming knowledge. This enables us to design our website according to our wishes and to offer you an informative and pleasant time on our website.

Which data is saved by a modular system?

Which data is saved depends of course on the modular website system used. Each provider processes and collects different data from the website visitor. However, technical usage information such as the operating system, browser, screen resolution, language and keyboard settings, hosting provider and the date of your website visit are usually collected. Tracking data (e.g. browser activity, clickstream activities, session heat maps, etc.) can also be processed. Personal data can also be recorded and saved. These are mostly contact details such as email address, telephone number (if you have provided one), IP address and geographic location data. You can find out exactly which data is saved in the provider’s data protection declaration.

How long and where will the data be stored?

We will inform you below about the duration of the data processing in connection with the modular website system used, provided we have further information on this. You can find detailed information about this in the provider’s data protection declaration. In general, we only process personal data for as long as is absolutely necessary for the provision of our services and products. It is possible that the provider stores your data according to its own requirements, over which we have no influence.

Right to object

You always have the right to information, correction and deletion of your personal data. If you have any questions, you can always contact those responsible for the modular website system used. You can find contact details either in our data protection declaration or on the website of the relevant provider.

You can delete, deactivate or manage cookies that providers use for their functions in your browser. This works in different ways depending on which browser you are using. Please note, however, that not all functions may then work as usual.

Legal basis

We have a legitimate interest in using a modular website system to optimize our online service and to present it to you in an efficient and user-friendly manner. The corresponding legal basis for this is Art. 6 Para. 1 lit. f GDPR (legitimate interests). Nevertheless, we only use the kit if you have given your consent.

If the processing of data is not absolutely necessary for the operation of the website, the data will only be processed on the basis of your consent. This particularly applies to tracking activities. The legal basis is Art. 6 Para. 1 lit. a GDPR.

With this data protection declaration we have given you the most important general information about data processing. If you want to find out more about this, you will find further information – if available – in the following section or in the provider’s data protection declaration.

WordPress.com privacy policy

We use WordPress.com, a modular website system, for our website. The service provider is the American company Automattic Inc., 60 29th Street # 343, San Francisco, CA 94110, USA.

WordPress processes your data in the USA, among others. We would like to point out that, in the opinion of the European Court of Justice, there is currently no adequate level of protection for data transfer to the USA. This can be associated with various risks to the legality and security of the data processing.

WordPress uses so-called standard contractual clauses (= Art. 46, Paragraphs 2 and 3 GDPR) as the basis for data processing for recipients based in third countries (outside the European Union, Iceland, Liechtenstein, Norway, especially in the USA) or for data transfer there. Standard Contractual Clauses (SCC) are templates provided by the EU Commission and are intended to ensure that your data comply with European data protection standards even if they are transferred to third countries (such as the USA) and stored there. With these clauses, WordPress undertakes to comply with the European level of data protection when processing your relevant data, even if the data is stored, processed and managed in the USA. These clauses are based on an implementation decision by the EU Commission. You can find the decision and the corresponding standard contractual clauses here: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de

The data processing agreements, which correspond to the standard contractual clauses, can be found at https://wordpress.com/support/data-processing-agreements/ .

You can find out more about the data processed by using WordPress.com in the data protection declaration at https://automattic.com/de/privacy/ .

Instagram privacy policy

Instagram privacy policy summary Affected: Visitors to the website Purpose: to optimize our service Processed data: data such as data on user behavior, information about your device and your IP address. More details can be found below in the privacy policy. Storage period: until Instagram no longer needs the data for its purposes Legal basis: Art. 6 para. 1 lit. a GDPR (consent), Art. 6 Para. 1 lit. f GDPR (legitimate interests)

What is Instagram

We have built in Instagram functions on our website. Instagram is a social media platform operated by Instagram LLC, 1601 Willow Rd, Menlo Park CA 94025, USA. Instagram has been a subsidiary of Facebook Inc. since 2012. and belongs to the Facebook products. Embedding Instagram content on our website is called embedding. This enables us to show you content such as buttons, photos or videos from Instagram directly on our website. When you visit our website that has an integrated Instagram function, data is transmitted to Instagram, stored and processed. Instagram uses the same systems and technologies as Facebook. Your data will thus be processed across all Facebook companies.

In the following, we want to give you a more detailed insight into why Instagram collects data, what data it is and how you can largely control the data processing. Since Instagram becomes Facebook Inc. heard, we obtain our information on the one hand from the Instagram guidelines, but on the other hand also from the Facebook data guidelines themselves.

Instagram is one of the most famous social media networks in the world. Instagram combines the advantages of a blog with the advantages of audiovisual platforms such as YouTube or Vimeo. You can upload photos and short videos to “Insta” (as many of the users casually call the platform), edit them with various filters and also distribute them on other social networks. And if you don’t want to be active yourself, you can just follow other interesting users.

Why do we use Instagram on our website?

Instagram is the social media platform that has really gone through the roof in recent years. And of course we have also reacted to this boom. We want you to feel as comfortable as possible on our website. That is why a varied preparation of our content is a matter of course for us. Thanks to the embedded Instagram functions, we can enrich our content with helpful, funny or exciting content from the Instagram world. Since Instagram is a subsidiary of Facebook, the data collected can also be used for personalized advertising on Facebook. Our advertisements are only given to people who are really interested in our products or services.

Instagram also uses the collected data for measurement and analysis purposes. We get summarized statistics and thus more insight into your wishes and interests. It is important to note that these reports do not personally identify you.

What data is stored by Instagram?

If you come across one of our pages that has Instagram functions (such as Instagram images or plug-ins) installed, your browser automatically connects to the Instagram servers. In doing so, data is sent to Instagram, stored and processed. Regardless of whether you have an Instagram account or not. This includes information about our website, about your computer, about purchases made, about advertisements that you see and how you use our offer. The date and time of your interaction with Instagram are also saved. If you have an Instagram account or are logged in, Instagram stores significantly more data about you.

Facebook differentiates between customer data and event data. We assume this is exactly the case with Instagram. Customer data are, for example, name, address, telephone number and IP address. This customer data will only be transmitted to Instagram if it has been “hashed” beforehand. Hashing means that a data record is converted into a character string. This allows you to encrypt the contact details. In addition, the above-mentioned “event data” are also transmitted. Facebook – and consequently Instagram – understands “event data” to mean data about your user behavior. It can also happen that contact data is combined with event data. The contact details collected are compared with the data Instagram already has about you.

The collected data is transmitted to Facebook via small text files (cookies), which are usually set in your browser. Depending on the Instagram functions used and whether you have an Instagram account yourself, different amounts of data are stored.

We assume that data processing on Instagram works in the same way as on Facebook. This means: if you have an Instagram account or have visited www.instagram.com , Instagram has set at least one cookie. If this is the case, your browser sends information to Instagram via the cookie as soon as you come into contact with an Instagram function. This data will be deleted or anonymized after 90 days at the latest (after comparison). Although we have dealt intensively with data processing by Instagram, we cannot say exactly which data Instagram collects and stores.

In the following we show you cookies that are set in your browser at least when you click on an Instagram function (such as a button or an Insta picture). Our test assumes that you do not have an Instagram account. If you are logged in to Instagram, significantly more cookies will of course be set in your browser.

These cookies were used in our test:

Name: csrftoken
Value: “”
Purpose: This cookie is set with a high degree of probability for security reasons in order to prevent falsification of inquiries. However, we could not find out more precisely.
Expiry date: after one year

Name: mid
Value: “”
Purpose: Instagram sets this cookie in order to optimize its own services and offers in and outside of Instagram. The cookie defines a unique user ID.
Expiration date: after the end of the session

Name: fbsr_111900854124024
Value: no information
Purpose: This cookie saves the log-in request for users of the Instagram app.
Expiration date: after the end of the session

Name: rur
Value: ATN
Purpose: This is an Instagram cookie that ensures functionality on Instagram.
Expiration date: after the end of the session

Name: urlgen
Value: “{” 194.96.75.33 ”: 1901}: 1iEtYv: Y833k2_UjKvXgYe111900854”
Purpose: This cookie is used by Instagram for marketing purposes.
Expiration date: after the end of the session

Note: We cannot claim to be complete here. Which cookies are set in the individual case depends on the embedded functions and your use of Instagram.

How long and where will the data be stored?

Instagram shares the information received between the Facebook companies with external partners and with people with whom you connect worldwide. The data processing takes place in compliance with the own data guideline. For security reasons, among other things, your data is distributed on Facebook servers around the world. Most of these servers are in the USA.

How can I delete my data or prevent data storage?

Thanks to the General Data Protection Regulation, you have the right to information, portability, correction and deletion of your data. You can manage your data in the Instagram settings. If you want to completely erase your data on Instagram, you have to delete your Instagram account permanently.

And this is how the deletion of the Instagram account works:

First, open the Instagram app. On your profile page, go down and click on “Help Center”. You are now on the company’s website. On the website, click on “Manage Your Account” and then on “Delete Your Account”.

If you delete your account entirely, Instagram will delete posts such as your photos and status updates. Information that other people have shared about you does not belong to your account and therefore will not be deleted.

As already mentioned above, Instagram stores your data primarily via cookies. You can manage, deactivate or delete these cookies in your browser. Management always works a little differently depending on your browser. Here we show you the instructions for the most important browsers.

Chrome: Delete, activate and manage cookies in Chrome

Safari: manage cookies and website data with Safari

Firefox: Delete cookies to remove data that websites have stored on your computer

Internet Explorer: deleting and managing cookies

Microsoft Edge: Deleting and managing cookies

You can also set up your browser so that you are always informed when a cookie is to be set. Then you can always decide individually whether you want to allow the cookie or not.

Legal basis

If you have consented that your data can be processed and stored through integrated social media elements, this consent is considered the legal basis for data processing (Art. 6 Para. 1 lit. a GDPR) . In principle, your data will also be stored and processed on the basis of our legitimate interest (Art. 6 Para. 1 lit. f GDPR) in quick and good communication with you or other customers and business partners. We only use the integrated social media elements if you have given your consent. Most social media platforms also set cookies on your browser to save data. We therefore recommend that you read our data protection text about cookies carefully and take a look at the data protection declaration or the cookie policy of the respective service provider.

Instagram and Facebook also process data in the USA, among others. We would like to point out that, in the opinion of the European Court of Justice, there is currently no adequate level of protection for data transfer to the USA. This can be associated with various risks to the legality and security of the data processing.

As a basis for data processing by recipients based in third countries (outside the European Union, Iceland, Liechtenstein, Norway, especially in the USA) or data transfer there, Facebook uses standard contractual clauses approved by the EU Commission (= Art. 46, Paragraph 2 and 3 GDPR). These clauses oblige Facebook to comply with the EU level of data protection when processing relevant data outside the EU. These clauses are based on an implementation decision by the EU Commission. You can find the decision and the clauses here: https://ec.europa.eu/germany/news/20210604-datentransfers-eu_de .

We have tried to give you the most important information about data processing by Instagram. On https://help.instagram.com/519522125107875
you can take a closer look at Instagram’s data guidelines.

Google Maps privacy policy

Google Maps privacy policy summary Affected: Visitors to the website Purpose: to optimize our service Processed data: data such as entered search terms, your IP address and also the latitude and longitude coordinates. You can find more details on this below in this data protection declaration. Storage duration: depending on the stored data Legal basis: Art. 6 para. 1 lit. a GDPR (consent), Art. 6 Para. 1 lit. f GDPR (legitimate interests)

What is Google Maps?

We use Google Maps from Google Inc. on our website. Google Ireland Limited (Gordon House, Barrow Street Dublin 4, Ireland) is responsible for all Google services for the European region. With Google Maps we can show you locations better and thus adapt our service to your needs. By using Google Maps, data is transmitted to Google and stored on Google’s servers. Here we want to go into more detail about what Google Maps is, why we use this Google service, which data is stored and how you can prevent this.

Google Maps is an internet map service from Google. With Google Maps you can search for exact locations of cities, sights, accommodations or companies online using a PC, tablet or app. If companies are represented on Google My Business, additional information about the company is displayed in addition to the location. In order to show how to get there, map sections of a location can be integrated into a website using HTML code. Google Maps shows the earth’s surface as a road map or as an aerial or satellite image. Thanks to the Street View images and the high-quality satellite images, very precise representations are possible.

Why do we use Google Maps on our website?

All of our efforts on this page are aimed at providing you with a useful and meaningful time on our website. By integrating Google Maps, we can provide you with the most important information about various locations. You can see at a glance where we are based. The route description always shows you the best or fastest way to get to us. You can find the route for routes by car, public transport, on foot or by bike. For us, the provision of Google Maps is part of our customer service.

Which data is saved by Google Maps?

In order for Google Maps to be able to offer its full service, the company has to record and save data from you. This includes the search terms entered, your IP address and the latitude and longitude coordinates. If you use the route planner function, the entered start address is also saved. However, this data storage takes place on the Google Maps website. We can only inform you about this, but we cannot influence it. Since we have integrated Google Maps into our website, Google places at least one cookie (name: NID) in your browser. This cookie stores data about your user behavior. Google uses this data primarily to optimize its own services and to provide you with individual, personalized advertising.

The following cookie is set in your browser due to the integration of Google Maps:

Name: NID
Value: 188 = h26c1Ktha7fCQTx8rXgLyATyITJ111900854-5
Purpose: NID is used by Google to adapt advertisements to your Google search. With the help of the cookie, Google “remembers” your most frequently entered search queries or your previous interaction with advertisements. So you always get tailor-made advertisements. The cookie contains a unique ID that Google uses to collect your personal settings for advertising purposes.
Expiry date: after 6 months

Note: We cannot guarantee that the data stored is complete. Changes can never be ruled out, especially when using cookies. In order to identify the NID cookie, a separate test page was created, where only Google Maps was integrated.

How long and where will the data be stored?

The Google servers are located in data centers all over the world. Most of the servers are located in America, however. For this reason, your data is also increasingly stored in the USA. Here you can read exactly where the Google data centers are located: https://www.google.com/about/datacenters/inside/locations/?hl=de

Google distributes the data on various data carriers. This means that the data can be accessed more quickly and is better protected against any attempts at manipulation. Each data center also has special emergency programs. If, for example, there are problems with the Google hardware or a natural disaster paralyzes the servers, the data will still remain protected, almost certainly.

Google stores some data for a specified period of time. For other data, Google only offers the option of manually deleting them. The company also anonymizes information (such as advertising data) in server logs by storing part of the IP address and cookie information according to 9 and 18 respectively Months clears.

How can I delete my data or prevent data storage?

With the automatic deletion function of location and activity data introduced in 2019, information on location determination and web / app activity – depending on your decision – is stored for either 3 or 18 months and then deleted. In addition, you can manually delete this data from the history at any time via the Google account. If you want to completely prevent your location from being recorded, you must pause the “Web and app activity” section in your Google account. Click Data & Personalization, then click the Activity Settings option. Here you can switch the activities on or off.

You can also deactivate, delete or manage individual cookies in your browser. Depending on which browser you are using, this always works a little differently. The following instructions show how to manage cookies in your browser:

Chrome: Delete, activate and manage cookies in Chrome

Safari: manage cookies and website data with Safari

Firefox: Delete cookies to remove data that websites have stored on your computer

Internet Explorer: deleting and managing cookies

Microsoft Edge: Deleting and managing cookies

If you generally do not want cookies, you can set up your browser so that it always informs you when a cookie is to be set. You can decide for each individual cookie whether or not to allow it.

Please note that when you use this tool, your data can also be stored and processed outside the EU. Most third countries (including the USA) are not considered secure under current European data protection law. Data to insecure third countries may not simply be transferred, stored and processed there unless there are suitable guarantees (such as EU standard contractual clauses) between us and the non-European service provider.

Legal basis

If you have consented to the use of Google Maps, the legal basis for the corresponding data processing is this consent. This consent puts out loud Art. 6 para. 1 lit. a GDPR (consent) the legal basis for the processing of personal data as it can occur when it is collected by Google Maps.

We also have a legitimate interest in using Google Maps to optimize our online service. The corresponding legal basis for this is Art. 6 para. 1 lit. f GDPR (legitimate interests). Nevertheless, we only use Google Maps if you have given your consent.

Google processes your data in the USA, among other places. We would like to point out that, in the opinion of the European Court of Justice, there is currently no adequate level of protection for data transfer to the USA. This can be associated with various risks to the legality and security of the data processing.

Google uses so-called standard contractual clauses (= Art. 46, Paragraphs 2 and 3 GDPR) as the basis for data processing for recipients based in third countries (outside the European Union, Iceland, Liechtenstein, Norway, especially in the USA) or for data transfer there. Standard Contractual Clauses (SCC) are templates provided by the EU Commission and are intended to ensure that your data comply with European data protection standards even if they are transferred to third countries (such as the USA) and stored there. With these clauses, Google undertakes to comply with the European level of data protection when processing your relevant data, even if the data is stored, processed and managed in the USA. These clauses are based on an implementation decision by the EU Commission. You can find the decision and the corresponding standard contractual clauses here: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de

The Google Ads Data Processing Terms, which correspond to the standard contractual clauses, can be found at https://business.safety.google/adsprocessorterms/ .

If you want to find out more about data processing by Google, we recommend the company’s own data protection declaration at https://policies.google.com/privacy?hl=de .

All texts are copyrighted.

Source: Created with the data protection generator from AdSimple