This privacy policy informs you about the nature, scope, and purpose of the processing of personal data (hereinafter "data") within our online offer and the associated websites, functions, and content as well as external online presences (e.g. our social media profiles) – hereinafter jointly referred to as "online offer".

Definitions such as "processing" or "controller" are based on the definitions in Art. 4 GDPR.

Controller

Types of Data Processed

• Basic data (e.g., names, addresses)
• Contact data (e.g., email addresses, phone numbers)
• Content data (e.g., text entries, photos, videos)
• Usage data (e.g., visited websites, interest in content, access times)
• Meta and communication data (e.g., device information, IP addresses)

Categories of Data Subjects

Visitors and users of our online offer (hereinafter "users").

Purposes of Processing

• Provision of the online offer, its functions and content
• Answering contact inquiries and communication with users
• Security measures
• Reach measurement and marketing

Legal Basis of Processing

The legal bases are according to Art. 6 GDPR:

• Consent (Art. 6 (1) lit. a)
• Performance of a contract and pre-contractual measures (Art. 6 (1) lit. b)
• Legal obligations (Art. 6 (1) lit. c)
• Legitimate interests (Art. 6 (1) lit. f)
• Vital interests (Art. 6 (1) lit. d)

Disclosure and Transfer of Data

Data is only disclosed to third parties on the basis of legal permissions, your consent, or for contract fulfillment. If we commission third parties with data processing, this is done according to Art. 28 GDPR by means of data processing agreements.

Transfers of data to countries outside the EU/EEA only take place with appropriate safeguards, e.g., adequacy decision, standard contractual clauses, or other legal basis.

Storage Duration and Deletion

Data will be deleted as soon as it is no longer necessary for the purpose, unless legal retention obligations prevent this. In such case, processing will be restricted.

Storage durations follow mainly the following regulations:

• Germany: Commercially 6 years (§ 257 HGB), tax-related 10 years (§ 147 AO)
• Austria: 7 years (§ 132 BAO), 22 years for real estate, 10 years for electronically provided services (MOSS)

Data Subject Rights

You have the right to:

• Access (Art. 15 GDPR)
• Rectification (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Withdraw consent (Art. 7 (3) GDPR)
• Object to processing (Art. 21 GDPR)
• Complain to a supervisory authority (Art. 77 GDPR)

Cookies and Tracking

We use cookies that can be stored temporarily (session cookies) or permanently (persistent cookies). These serve to improve user experience, for marketing purposes, or reach measurement.

You can prevent cookie storage by adjusting your browser settings. Please note that this may limit the functionality of the online offer.

For general opt-out of tracking cookies, we recommend:

http://www.aboutads.info/choices/
http://www.youronlinechoices.com/

Access Data and Log Files

Our hosting provider collects access data (server log files) based on legitimate interests pursuant to Art. 6 (1) lit. f GDPR. This includes IP addresses, browser type, access time, and is stored for up to 7 days.

Contact

When contacting us (e.g. via form, email, phone), we process your data for handling and communication based on Art. 6 (1) lit. b GDPR.

Comments and Contributions

IP addresses of users who leave comments are stored based on legitimate interests (Art. 6 (1) lit. f GDPR) for 7 days.

Social Media

We operate online presences in social networks. Data processing there follows the terms of the respective platforms.

External Services

We embed content from the following providers:

• YouTube (Google LLC)
• Google Maps (Google LLC)
• Google Fonts (Google LLC)
• Adobe Typekit (Adobe Systems Software Ireland Limited)
• OpenStreetMap

Privacy policies and opt-out options are linked accordingly.