Legal Notice

Imprint

Information about the service provider.
Virtual Artists
Franz Habegger
Mollenburgweg 7, 3653 Weiten, Austria
Email: info@virtualartists.music

EU Dispute Resolution

In accordance with the Regulation on Online Dispute Resolution in Consumer Matters (ODR Regulation), we would like to inform you about the Online Dispute Resolution Platform (OS platform). Consumers have the opportunity to submit complaints to the European Commission’s Online Dispute Resolution Platform at https://ec.europa.eu/consumers/odr/main/index.cfm?event=main.home2.show&lng=DE. The necessary contact details can be found above in our impressum.
However, we would like to point out that we are neither willing nor obliged to participate in dispute resolution proceedings before a consumer arbitration board.

Image Credits

The images, photos, and graphics on this website are protected by copyright.
The image rights belong to:
Franz Habegger

Privacy Policy

Table of Contents

Introduction and Overview
Scope of Application
Legal Basis
Contact Details of the Controller
Storage Duration
Rights according to the General Data Protection Regulation
Data Processing Agreement (DPA)
Cookies
Website Builder Systems
Introduction
Explanation of Terms Used
Conclusion

Introduction and Overview

We have drafted this privacy policy (Version 02.05.2025-122989094) to explain to you, in accordance with the provisions of the General Data Protection Regulation (EU) 2016/679 and applicable national laws, which personal data (hereinafter referred to as data) we as the controller – and the processors commissioned by us (e.g., providers) – process, will process in the future, and what legal options you have. The terms used are to be understood as gender-neutral. In short: We provide you with comprehensive information about the data we process about you.

Privacy policies usually sound very technical and use legal jargon. This privacy policy, however, is intended to describe the most important things as simply and transparently as possible. To promote transparency, technical terms are explained in a user-friendly way, links to further information are provided, and graphics are used. We thus inform in clear and simple language that, in the course of our business activities, we only process personal data when there is a corresponding legal basis. This is certainly not possible if one provides explanations that are as concise, unclear, and legally technical as they are often standard on the Internet when it comes to data protection. We hope you find the following explanations interesting and informative, and perhaps there is one or more pieces of information you were not yet aware of. If you still have questions, we would like to ask you to contact the controller mentioned below or in the impressum.

follow the existing links and look at further information on third-party sites. Our contact details can, of course, also be found in the impressum.

Scope of Application

This privacy policy applies to all personal data processed by us in the company and to all personal data processed by companies commissioned by us (processors). By personal data, we mean information within the meaning of Art. 4 No. 1 GDPR, such as the name, email address, and postal address of a person. The processing of personal data ensures that we can offer and bill our services and products, whether online or offline. The scope of this privacy policy includes:

• all online presences (websites, online shops) that we operate
• social media presences and email communication
• mobile apps for smartphones and other devices

In short: The privacy policy applies to all areas where personal data is structured and processed within the company via the mentioned channels. Should we enter into legal relationships with you outside of these channels, we will inform you separately if necessary.

Legal Basis

In the following privacy policy, we provide you with transparent information about the legal principles and regulations, i.e., the legal bases of the General Data Protection Regulation, that allow us to process personal data. As far as EU law is concerned, we refer to REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016. You can, of course, read this EU General Data Protection Regulation online on EUR-Lex, the access to EU law, at https://eur-lex.europa.eu/legal-content/DE/ALL/?uri=celex%3A32016R0679.

We only process your data if at least one of the following conditions applies:

1. Consent (Article 6 paragraph 1 lit. a GDPR): You have given us your consent to process data for a specific purpose. An example would be the storage of your data entered in a contact form.
2. Contract (Article 6 paragraph 1 lit. b GDPR): To fulfill a contract or pre-contractual obligations with you, we process your data. For example, if we conclude a purchase agreement with you, we need personal information in advance.
3. Legal Obligation (Article 6 paragraph 1 lit. c GDPR): If we are subject to a legal obligation, we process your data. For example, we are legally obliged to keep invoices for accounting purposes. These usually contain personal data.
4. Legitimate Interests (Article 6 paragraph 1 lit. f GDPR): In the case of legitimate interests that do not restrict your fundamental rights, we reserve the right to process personal data. For example, we must process certain data to operate our website securely and economically efficiently. This processing is therefore a legitimate interest.

Further conditions such as the performance of tasks carried out in the public interest and the exercise of official authority, as well as the protection of vital interests, do not generally occur in our case. Should such a legal basis nevertheless be relevant, it will be indicated at the appropriate place.

In addition to the EU regulation, national laws also apply:

• In Austria, this is the Federal Act on the Protection of Natural Persons with regard to the Processing of Personal Data (Datenschutzgesetz), or DSG for short.
• In Germany, the Federal Data Protection Act, or BDSG for short, applies.

If further regional or national laws apply, we will inform you about them in the following sections.

Contact Details of the Controller

Should you have any questions about data protection or the processing of personal data, you will find the contact details of the controller according to Article 4 paragraph 7 of the EU General Data Protection Regulation (GDPR) below: Franz Habegger.

Email: info@virtualartists.music

Storage Duration

That we only store personal data for as long as it is absolutely necessary for the provision of our services and products is a general criterion for us. This means that we delete personal data as soon as the reason for the data processing no longer exists. In some cases, we are legally obliged to store certain data even after the original purpose has ceased to exist, for example for accounting purposes.

Should you wish for your data to be deleted or revoke your consent to data processing, the data will be deleted as quickly as possible and insofar as there is no obligation to store it.
We will inform you about the specific duration of the respective data processing further below, if we have further information on it.

Rights according to the General Data Protection Regulation

According to Articles 13, 14 GDPR, we inform you about the following rights you are entitled to, so that fair and transparent data processing occurs:

• According to Article 15 GDPR, you have a right of access as to whether we process your data. If this is the case, you have the right to receive a copy of the data and to know the following information:
  • for what purpose we carry out the processing;
  • the categories, i.e., the types of data, that are processed;
  • who receives this data and, if the data is transferred to third countries, how security can be guaranteed;
  • how long the data will be stored;
  • the existence of the right to rectification, erasure or restriction of processing and the right to object to processing;
  • that you can lodge a complaint with a supervisory authority (links to these authorities can be found below);
  • the origin of the data, if we did not collect it from you;
  • whether profiling is carried out, i.e., whether data is automatically evaluated to arrive at a personal profile of you.
• According to Article 16 GDPR, you have a right to rectification of data, which means that we must correct data if you find errors.
• According to Article 17 GDPR, you have the right to erasure (“right to be forgotten”), which specifically means that you may request the deletion of your data.
• According to Article 18 GDPR, you have the right to restriction of processing, which means that we may only store the data but not use it further.
• According to Article 20 GDPR, you have the right to data portability, which means that we will provide you with your data in a common format upon request.
• According to Article 21 GDPR, you have a right to object, which, once exercised, leads to a change in processing.

If the processing of your data is based on Article 6 para. 1 lit. e (public interest, exercise of official authority) or Article 6 para. 1 lit. f (legitimate interest), you can object to the processing. We will then check as quickly as possible whether we can legally comply with this objection. If data is used for direct marketing, you can object to this type of data processing at any time. We may then no longer use your data for direct marketing. If data is used for profiling, you can object to this type of data processing at any time. We may then no longer use your data for profiling.

• According to Article 22 GDPR, you may, under certain circumstances, have the right not to be subject to a decision based solely on automated processing (e.g., profiling).
• According to Article 77 GDPR, you have the right to lodge a complaint. This means that you can complain to the data protection authority at any time if you believe that the processing of personal data violates the GDPR.

In short: You have rights – do not hesitate to contact the responsible body listed above!

If you believe that the processing of your data violates data protection law or your data protection rights have been violated in any other way, you can lodge a complaint with the supervisory authority. For Austria, this is the Data Protection Authority, whose website you can find at https://www.dsb.gv.at/. In Germany, there is a data protection officer for each federal state. For further information, you can contact the Federal Commissioner for Data Protection and Freedom of Information (BfDI). For our company, the following local data protection authority is responsible:

Austrian Data Protection Authority

Head: Dr. Matthias Schmidl
Address: Barichgasse 40-42, 1030 Vienna
Phone No.: +43 1 52 152-0
Email address: dsb@dsb.gv.at
Website: https://www.dsb.gv.at/

Data Processing Agreement (DPA)

In this section, we would like to explain what a data processing agreement is and why it is needed. Because the word “Auftragsverarbeitungsvertrag” (data processing agreement) is quite a mouthful, we will often only use the acronym DPA here in the text. Like most companies, we do not work alone, but also use the services of other companies or individuals ourselves. By involving various companies or service providers, we may pass on personal data for processing. These partners then act as processors, with whom we conclude a contract, the so-called Data Processing Agreement (DPA). The most important thing for you to know is that the processing of your personal data is carried out exclusively according to our instructions and must be regulated by the DPA.

Who are processors?
As a company and website owner, we are responsible for all data we process from you. In addition to the controllers, there can also be so-called processors. This includes any company or person who processes personal data on our behalf. More precisely and according to the GDPR definition: any natural or legal person, public authority, agency or other body which processes personal data on our behalf is considered a processor. Processors can therefore be service providers such as hosting or cloud providers, payment or newsletter providers, or large companies such as Google or Microsoft.

For a better understanding of the terminology, here is an overview of the three roles in the GDPR:
Data Subject (You as a customer or interested party) → Controller (We as a company and client) → Processor (Service provider such as web hosters or cloud providers)

Content of a Data Processing Agreement
As already mentioned above, we have concluded a DPA with our partners who act as processors. This agreement primarily states that the processor shall process the data exclusively in accordance with the GDPR. The agreement must be concluded in writing, although in this context, electronic contract conclusion also counts as “written”. The processing of personal data only takes place on the basis of the contract. The contract must contain the following:

• Binding to us as the controller
• Duties and rights of the controller
• Categories of data subjects
• Type of personal data
• Nature and purpose of data processing
• Subject matter and duration of data processing
• Location of data processing

Furthermore, the contract contains all the obligations of the processor. The most important obligations are:

• to ensure data security measures
• to take possible technical and organizational measures to protect the rights of the data subject
• to maintain a data processing record
• to cooperate with the data protection supervisory authority upon request
• to conduct a risk analysis regarding the personal data received
• sub-processors may only be commissioned with the written permission of the controller

You can view an example of what such a DPA looks like, for instance, at https://www.wko.at/service/wirtschaftsrecht-gewerberecht/eu-dsgvo-mustervertrag-auftragsverarb eitung.html. A sample contract is presented there.

Cookies

Cookies Summary
Data subjects: Website visitors
Purpose: depends on the respective cookie. More details can be found below or with the manufacturer of the software that sets the cookie.
Processed data: Depends on the specific cookie used. More details can be found below or with the manufacturer of the software that sets the cookie.
Storage duration: depends on the respective cookie, can vary from hours to years
Legal bases: Art. 6 para. 1 lit. a GDPR (Consent), Art. 6 para. 1 lit. f GDPR (Legitimate interests)

What are cookies?
Our website uses HTTP cookies to store user-specific data. Below, we explain what cookies are and why they are used, so that you can better understand the following privacy policy.

Whenever you surf the Internet, you use a browser. Well-known browsers include Chrome, Safari, Firefox, Internet Explorer, and Microsoft Edge. Most websites store small text files in your browser. These files are called cookies.
One thing is undeniable: cookies are really useful helpers. Almost all websites use cookies. More precisely, they are HTTP cookies, as there are also other cookies for other application areas. HTTP cookies are small files that are stored by our website on your computer. These cookie files are automatically placed in the cookie folder, which is like the “brain” of your browser. A cookie consists of a name and a value. When defining a cookie, one or more attributes must also be specified.

Cookies store certain user data from you, such as language or personal page settings. When you revisit our site, your browser transmits the “user-related” information back to our site. Thanks to cookies, our website knows who you are and offers you the settings you are used to. In some browsers, each cookie has its own file; in others, such as Firefox, all cookies are stored in a single file.
The following graphic shows a possible interaction between a web browser, such as Chrome, and the web server. The web browser requests a website and receives a cookie back from the server, which the browser uses again as soon as another page is requested.

There are both first-party cookies and third-party cookies. First-party cookies are created directly by our site; third-party cookies are created by partner websites (e.g., Google Analytics). Each cookie must be evaluated individually, as each cookie stores different data.
The expiration time of a cookie also varies from a few minutes to a few years. Cookies are not software programs and do not contain viruses, Trojans, or other “malware”. Cookies also cannot access information on your PC.

For example, cookie data can look like this:
Name: _ga
Value: GA1.2.1326744211.152122989094-9
Purpose: Distinction of website visitors
Expiration date: after 2 years

A browser should be able to support these minimum sizes:
Minimum 4096 bytes per cookie
Minimum 50 cookies per domain
Minimum 3000 cookies in total

What types of cookies are there?
The question of which specific cookies we use depends on the services used and will be clarified in the following sections of the privacy policy. At this point, we would like to briefly discuss the different types of HTTP cookies.

There are 4 types of cookies:

• Essential Cookies: These cookies are necessary to ensure basic functions of the website. For example, these cookies are needed if a user puts a product in the shopping cart, then continues browsing on other pages, and only later goes to checkout. These cookies ensure that the shopping cart is not deleted, even if the user closes their browser window.
• Functional Cookies: These cookies collect information about user behavior and whether the user receives any error messages. In addition, these cookies are also used to measure the loading time and the behavior of the website in different browsers.
• Targeting Cookies: These cookies ensure a better user experience. For example, entered locations, font sizes, or form data are stored.
• Advertising Cookies: These cookies are also called targeting cookies. They are used to deliver individually tailored advertising to the user. This can be very practical, but also very annoying.

Usually, when you visit a website for the first time, you are asked which of these cookie types you want to allow. And, of course, this decision is also stored in a cookie.

If you want to know more about cookies and are not afraid of technical documentation, we recommend https://datatracker.ietf.org/doc/html/rfc6265, the Request for Comments of the Internet Engineering Task Force (IETF) called “HTTP State Management Mechanism”.

Purpose of processing via cookies
The purpose ultimately depends on the respective cookie. More details can be found below or with the manufacturer of the software that sets the cookie.

What data is processed?
Cookies are small helpers for many different tasks. Unfortunately, it is not possible to generalize what data is stored in cookies, but we will inform you about the processed or stored data in the context of the following privacy policy.

Storage duration of cookies
The storage duration depends on the respective cookie and will be specified further below. Some cookies are deleted after less than an hour, others can remain stored on a computer for several years.
You also have an influence on the storage duration yourself. You can manually delete all cookies at any time via your browser (see also “Right to object” below). Furthermore, cookies based on consent will be deleted at the latest after revocation of your consent, whereby the legality of the storage until then remains unaffected.

Right to object – how can I delete cookies?
You decide how and whether you want to use cookies. Regardless of which service or website the cookies come from, you always have the option to delete, deactivate, or only partially allow cookies. For example, you can block third-party cookies, but allow all other cookies.
If you want to find out which cookies have been stored in your browser, or if you want to change or delete cookie settings, you can find this in your browser settings:

• Chrome: Delete, enable, and manage cookies in Chrome
• Safari: Manage cookies and website data with Safari
• Firefox: Clear cookies and site data to remove information websites have stored on your computer
• Internet Explorer: Delete and manage cookies
• Microsoft Edge: Delete and manage cookies

If you generally do not want cookies, you can set your browser to always inform you when a cookie is to be set. This way, you can decide for each individual cookie whether you want to allow it or not. The procedure varies depending on the browser. It is best to search for the instructions on Google with the search term “delete cookies Chrome” or “disable cookies Chrome” in the case of a Chrome browser.

Legal basis
Since 2009, there have been the so-called “Cookie Directives”. These state that the storage of cookies requires your consent (Article 6 para. 1 lit. a GDPR). However, there are still very different reactions to these directives within EU countries. In Austria, this directive was implemented in § 165 para. 3 of the Telecommunications Act (2021). In Germany, the Cookie Directives were not implemented as national law. Instead, this directive was largely implemented in § 15 para. 3 of the Telemedia Act (TMG), which has been replaced by the Digital Services Act (DDG) since May 2024.

For absolutely necessary cookies, even if no consent is given, there are legitimate interests (Article 6 para. 1 lit. f GDPR), which in most cases are of an economic nature. We want to provide website visitors with a pleasant user experience, and certain cookies are often absolutely necessary for this.
Insofar as not strictly necessary cookies are used, this only happens with your consent. The legal basis in this respect is Art. 6 para. 1 lit. a GDPR.

In the following sections, you will be informed more precisely about the use of cookies, if the software used employs cookies.

Website Builder Systems Introduction

Website Builder Systems Privacy Policy Summary
Data subjects: Website visitors
Purpose: Optimization of our service
Processed data: Data such as technical usage information like browser activity, clickstream activities, session heatmaps, as well as contact details, IP address, or your geographical location. More details can be found below in this privacy policy and in the privacy policy of the providers.

Storage duration: depends on the provider
Legal bases: Art. 6 para. 1 lit. f GDPR (Legitimate interests), Art. 6 para. 1 lit. a GDPR (Consent)

What are website builder systems?
We use a website builder system for our website. Builder systems are special forms of a Content Management System (CMS). With a builder system, website operators can easily create a website without programming knowledge. In many cases, web hosters also offer builder systems. By using a builder system, personal data about you can also be collected, stored, and processed. In this privacy text, we provide you with general information about data processing by builder systems. More detailed information can be found in the privacy policies of the provider.

Why do we use website builder systems for our website?
The biggest advantage of a builder system is its ease of use. We want to offer you a clear, simple, and well-structured website that we can easily operate and maintain ourselves – without external support. A builder system now offers many helpful functions that we can use without programming knowledge. This allows us to design our web presence according to our wishes and offer you an informative and pleasant time on our website.

What data is stored by a builder system?
Which data is precisely stored depends, of course, on the website builder system used. Each provider processes and collects different data from the website visitor. However, technical usage information such as operating system, browser, screen resolution, language and keyboard settings, hosting provider, and the date of your website visit are usually collected. Furthermore, tracking data (e.g., browser activity, clickstream activities, session heatmaps, etc.) can also be processed. In addition, personal data can also be collected and stored. This mostly includes contact details such as email address, phone number (if you have provided it), IP address, and geographical location data. You can find out exactly what data is stored in the provider’s privacy policy.

How long and where is the data stored?
We will inform you about the duration of data processing below in connection with the website builder system used, if we have further information on it. You will find detailed information on this in the provider’s privacy policy. In general, we only process personal data for as long as it is absolutely necessary for the provision of our services and products. It is possible that the provider stores data from you according to its own standards, over which we have no influence.

Right to object
You always have the right to information, rectification, and erasure of your personal data. If you have any questions, you can also contact the responsible party of the website builder system used at any time. Contact details can be found either in our privacy policy or on the website of the respective provider.
Cookies that providers use for their functions can be deleted, deactivated, or managed in your browser. Depending on which browser you use, this works in different ways. Please note, however, that not all functions may then work as usual.

Legal basis
We have a legitimate interest in using a website builder system to optimize our online service and present it efficiently and appealingly to you. The corresponding legal basis for this is Art. 6 para. 1 lit. f GDPR (Legitimate interests). Nevertheless, we only use the builder system if you have given your consent.
Insofar as the processing of data is not absolutely necessary for the operation of the website, the data will only be processed based on your consent. This particularly applies to tracking activities. The legal basis in this respect is Art. 6 para. 1 lit. a GDPR.

With this privacy policy, we have provided you with the most important general information regarding data processing. If you would like to inform yourself even more precisely in this regard, you will find further information – if available – in the following section or in the provider’s privacy policy.

WordPress.com Privacy Policy

WordPress.com Privacy Policy Summary
Data subjects: Website visitors
Purpose: Optimization of our service
Processed data: Data such as technical usage information like browser activity, clickstream activities, session heatmaps, as well as contact details, IP address, or your geographical location. More details can be found below in this privacy policy.
Storage duration: It depends mainly on the type of data stored and the specific settings.
Legal bases: Art. 6 para. 1 lit. a GDPR (Consent), Art. 6 para. 1 lit. f GDPR (Legitimate interests)

What is WordPress?
We use the well-known Content Management System WordPress.com for our website. The service provider is the American company Automattic Inc., 60 29th Street #343, San Francisco, CA 94110, USA.

The company saw the light of day in 2003 and quickly developed into one of the most famous Content Management Systems (CMS) worldwide. A CMS is software that helps us design our website and display content beautifully and orderly. The content can be text, audio, and video. By using WordPress, personal data about you can also be collected, stored, and processed. Typically, mainly technical data such as operating system, browser, screen resolution, or hosting provider are stored. However, personal data such as IP address, geographical data, or contact data can also be processed.

Why do we use WordPress on our website?
We have many strengths, but real programming is not one of our core competencies. Nevertheless, we want to have a powerful and attractive website that we can manage and maintain ourselves. This is exactly what is possible with a website builder system or a Content Management System like WordPress. With WordPress, we don’t have to be programming aces to offer you a beautiful website. Thanks to WordPress, we can operate our website quickly and easily even without technical knowledge. If technical problems occur or we have special wishes for our website, there are always our specialists who feel at home in HTML, PHP, CSS, and co.

Thanks to the ease of use and the comprehensive functions of WordPress, we can design our web presence according to our wishes and offer you good user-friendliness.

What data is processed by WordPress?
Non-personal data includes technical usage information such as browser activity, clickstream activities, session heatmaps, and data about your computer, operating system, browser, screen resolution, language and keyboard settings, internet provider, and date of page visit.

In addition, personal data is also collected. This primarily includes contact data (email address or phone number, if you provide them), IP address, or your geographical location.
WordPress can also use cookies to collect data. This often includes data about your behavior on our website. For example, it can record which sub-pages you particularly like to view, how long you stay on individual pages, when you leave a page again (bounce rate), or which pre-settings (e.g., language selection) you have made. Based on this data, WordPress can also better adapt its own marketing measures to your interests and user behavior. The next time you visit our website, our website will therefore be displayed to you as you have previously set it up.

WordPress can also use technologies such as pixel tags (web beacons) to, for example, clearly identify you as a user and potentially offer interest-based advertising.

How long and where is the data stored?
How long the data is stored depends on various factors. So it depends primarily on the type of data stored and the specific settings of the website. In principle, data on WordPress is deleted when it is no longer needed for its own purposes. Of course, there are exceptions, especially when legal obligations require a longer retention of data. Web server logs containing your IP address and technical data are deleted by WordPress or Automattic after 30 days. Automattic uses the data for this long to analyze traffic on its own websites (e.g., all WordPress pages) and to fix potential problems. Deleted content on WordPress websites is also kept in the trash for 30 days to allow for recovery, after which it may remain in backups and caches until they are deleted. The data is stored on American servers of Automattic.

How can I delete my data or prevent data storage?
You have the right and the possibility at any time to access your personal data and to object to its use and processing. You can also lodge a complaint with a state supervisory authority at any time.
In your browser, you also have the option to manage, delete, or deactivate cookies individually. Please note, however, that deactivated or deleted cookies may have negative effects on the functions of our WordPress site. Depending on which browser you use, managing cookies works slightly differently. Under the “Cookies” section, you will find the corresponding links to the respective instructions of the most well-known browsers.

Legal basis
If you have consented to the use of WordPress, the legal basis for the corresponding data processing is this consent. According to Art. 6 para. 1 lit. a GDPR (Consent), this consent constitutes the legal basis for the processing of personal data, as may occur when collected by WordPress.
From our side, there is also a legitimate interest in using WordPress to optimize our online service and to present it beautifully to you. The corresponding legal basis for this is Art. 6 para. 1 lit. f GDPR (Legitimate interests). Nevertheless, we only use WordPress if you have given your consent.

WordPress and/or Automattic also processes your data in the USA, among other places. Automattic is an active participant in the EU-US Data Privacy Framework, which regulates the correct and secure transfer of personal data of EU citizens to the USA. You can find more information on this at https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en.
In addition, Automattic uses so-called standard contractual clauses (= Art. 46 para. 2 and 3 GDPR). Standard Contractual Clauses (SCC) are model templates provided by the EU Commission and are intended to ensure that your data complies with European data protection standards even when it is transferred to and stored in third countries (such as the USA). Through the EU-US Data Privacy Framework and the standard contractual clauses, Automattic commits to maintaining the European data protection level when processing your relevant data, even if the data is stored, processed, and managed in the USA. These clauses are based on an implementing decision of the EU Commission. You can find the decision and the corresponding standard contractual clauses, among other places, here: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de.
More details on the privacy policy and what data is processed by WordPress in what way can be found at https://automattic.com/privacy/.

Data Processing Agreement (DPA) WordPress.com

We have concluded a Data Processing Agreement (DPA) with WordPress.com in accordance with Article 28 of the General Data Protection Regulation (GDPR). What a DPA is exactly and, above all, what must be contained in a DPA, you can read in our general section “Data Processing Agreement (DPA)”.
This contract is legally required because WordPress.com processes personal data on our behalf. It clarifies that WordPress.com may only process data it receives from us according to our instructions and must comply with the GDPR. The link to the Data Processing Agreement (DPA) can be found at https://wordpress.com/support/data-processing-agreements/.

Explanation of Terms Used

We always strive to write our privacy policy as clearly and understandably as possible. However, especially with technical and legal topics, this is not always easy. It often makes sense to use legal terms (such as personal data) or certain technical terms (such as cookies, IP address). However, we do not want to use them without explanation. Below you will find an alphabetical list of important terms used that we may not have sufficiently addressed in the privacy policy so far. If these terms are taken from the GDPR and are definitions, we will also list the GDPR texts here and add our own explanations if necessary.

Processor

Definition according to Article 4 of the GDPR
For the purposes of this Regulation:
“‘processor’ means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller;”
Explanation: As a company and website owner, we are responsible for all data we process from you. In addition to the controllers, there can also be so-called processors. This includes any company or person who processes personal data on our behalf. Processors can therefore be, in addition to service providers such as tax consultants, also hosting or cloud providers, payment or newsletter providers, or large companies such as Google or Microsoft.

Consent

Definition according to Article 4 of the GDPR
For the purposes of this Regulation:
“‘consent’ of the data subject means any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her;”
Explanation: On websites, such consent is usually given via a cookie consent tool. You are certainly familiar with this. Whenever you visit a website for the first time, you are usually asked via a banner whether you agree or consent to data processing. Usually, you can also make individual settings and thus decide for yourself which data processing you allow and which you do not. If you do not consent, no personal data about you may be processed. In principle, consent can, of course, also be given in writing, i.e., not via a tool.

Controller

Definition according to Article 4 of the GDPR
For the purposes of this Regulation:
“‘controller’ means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law;”
Explanation: In our case, we are responsible for the processing of your personal data and therefore the “controller”. If we pass on collected data for processing to other service providers, these are “processors”. A “Data Processing Agreement (DPA)” must be signed for this.

Processing

Definition according to Article 4 of the GDPR
For the purposes of this Regulation:
“‘processing’ means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;”
Note: When we speak of processing in our privacy policy, we mean any type of data processing. This includes, as mentioned above in the original GDPR explanation, not only the collection but also the storage and processing of data.

Conclusion

Congratulations! If you are reading these lines, you have truly “fought” your way through our entire privacy policy or at least scrolled this far. As you can see from the scope of our privacy policy, we take the protection of your personal data anything but lightly. It is important to us to inform you to the best of our knowledge and belief about the processing of personal data. In doing so, we not only want to tell you what data is processed, but also to explain the reasons for using various software programs. As a rule, privacy policies sound very technical and legal. However, since most of you are neither web developers nor lawyers, we also wanted to take a different linguistic approach and explain the facts in simple and clear language. This is, of course, not always possible due to the subject matter. Therefore, the most important terms are explained in more detail at the end of the privacy policy. If you have any questions about data protection on our website, please do not hesitate to contact us or the responsible body. We wish you a pleasant time and hope to welcome you back to our website soon.

All texts are protected by copyright.
Source: Privacy policy created with the privacy policy generator for Austria by AdSimple.

Quelle: Datenschutzerklärung erstellt mit dem Datenschutz Generator für Österreich von AdSimple