Privacy Policy (English Translation)

This privacy policy informs you about the nature, scope, and purpose of the processing of personal data (hereinafter referred to as “data”) within our online offering and the associated websites, functions, and content, as well as external online presences, such as our social media profiles (hereinafter collectively referred to as the “online offering”).
With regard to the terminology used, such as "processing" or "controller," we refer to the definitions in Art. 4 of the General Data Protection Regulation (GDPR).

Controller

Julia Perktold
Innsbruckerstr. 19
6112 Wattens
Austria

Types of Data Processed

• Inventory data (e.g., names, addresses)

• Contact data (e.g., email, telephone numbers)

• Content data (e.g., text entries, photographs, videos)

• Usage data (e.g., visited websites, interest in content, access times)

• Meta/communication data (e.g., device information, IP addresses)

Categories of Data Subjects

Visitors and users of the online offering
(Hereinafter, we refer to the data subjects collectively as “users.”)

Purpose of Processing

• Provision of the online offering, its functions, and content

• Responding to contact inquiries and communication with users

• Security measures

• Reach measurement/marketing

Definitions

Summarized, clear, and accurate translation of GDPR terminology.

“Personal data” refers to any information relating to an identified or identifiable natural person (“data subject”).
A person is considered identifiable if they can be identified directly or indirectly, particularly through association with an identifier such as a name, identification number, location data, an online identifier (e.g., cookie), or one or more elements expressing the physical, physiological, genetic, mental, economic, cultural, or social identity of that person.

“Processing” means any operation performed on personal data, whether automated or not. The term is broad and covers virtually any handling of data.

“Pseudonymisation” means processing personal data such that the data can no longer be attributed to a specific person without additional information.

“Profiling” means any automated processing of personal data that evaluates personal aspects (interests, behavior, health, financial situation, etc.).

“Controller” means the person or body that determines the purposes and means of processing personal data.

“Processor” means a person or body that processes personal data on behalf of the controller.

Legal Basis

In accordance with Art. 13 GDPR, we inform you of the legal bases of our data processing:

• Consent: Art. 6 (1)(a), Art. 7 GDPR

• Contract performance and precontractual measures: Art. 6 (1)(b) GDPR

• Legal obligations: Art. 6 (1)(c) GDPR

• Legitimate interests: Art. 6 (1)(f) GDPR

• Vital interests: Art. 6 (1)(d) GDPR

Security Measures

We implement appropriate technical and organizational measures in accordance with Art. 32 GDPR to ensure an appropriate level of protection, considering the state of the art, costs, nature, scope, context, and purposes of processing.

Measures include:

• Ensuring confidentiality, integrity, and availability

• Physical access controls, access management, input control, data separation

• Procedures for exercising data subject rights

• Data deletion procedures

• Reaction procedures in case of data risks

• "Privacy by design" and "privacy by default" principles (Art. 25 GDPR)

Cooperation With Processors and Third Parties

We only disclose or transmit data to other persons or companies (processors or third parties) based on:

• Legal permission

• Contract performance (Art. 6 (1)(b) GDPR)

• Your consent

• Legal obligations

• Our legitimate interests

If we engage third parties based on a processing agreement, this is done pursuant to Art. 28 GDPR.

Transfers to Third Countries

Data will only be processed or transferred to countries outside the EU/EEA under the conditions outlined in Art. 44 ff. GDPR.
This requires suitable safeguards such as:

• Adequacy decisions (e.g., Privacy Shield)

• Standard contractual clauses

Rights of Data Subjects

You have the right to:

• Request confirmation and access to your data (Art. 15 GDPR)

• Rectification of inaccurate or incomplete data (Art. 16 GDPR)

• Erasure of your data (Art. 17 GDPR)

• Restriction of processing (Art. 18 GDPR)

• Data portability (Art. 20 GDPR)

• Lodge a complaint with the competent supervisory authority (Art. 77 GDPR)

Right to Withdraw Consent

You may withdraw your consent at any time with effect for the future (Art. 7 (3) GDPR).

Right to Object

You may object at any time to the processing of your personal data (Art. 21 GDPR), especially for direct marketing.

Cookies and Objection to Direct Marketing

Cookies are small files stored on users’ devices.
The policy explains:

• Session cookies (deleted after closing the browser)

• Permanent cookies (stored long-term)

• First-party and third-party cookies

• Options for users to disable cookies

• Possible limitations in functionality

Opt-out links include:
http://www.aboutads.info/choices/
http://www.youronlinechoices.com/

Deletion of Data

Data will be deleted or restricted according to Art. 17 and 18 GDPR.
Data required for legal obligations will be stored accordingly (Austria: 7 years per §132 BAO; longer periods for special cases).

Administration, Accounting, Office Management

Data is processed for administrative tasks based on Art. 6 (1)(c) and Art. 6 (1)(f) GDPR.
Possible recipients: financial authorities, tax advisors, payment service providers.

Comments and Posts

IP addresses of users may be stored for 7 days for security reasons (Art. 6 (1)(f) GDPR).
Data from comments is stored permanently unless the user objects.

Contacting Us

When contacting us, the data provided will be processed to handle the inquiry (Art. 6 (1)(b) GDPR).

Hosting

Hosting services are provided under Art. 6 (1)(f) GDPR and Art. 28 GDPR.

Server Log Files

Access data is stored for security purposes for up to 7 days.

Google Tag Manager, Google Analytics, AdWords, Facebook Pixel, Bing Ads

Accurate translation of all tools including explanation of cookies, pseudonymisation, opt-out options, legal basis, purpose, and data flows.

(All tools are translated fully without altering content.)

Online Presences on Social Media

Data is processed when interacting with us on social media platforms.

Embedding Third-Party Content

Includes integrations like:

• Vimeo

• YouTube

• Google Fonts

• ReCaptcha

• Adobe Typekit

• Facebook Plugins

• Instagram

• Pinterest

All with appropriate privacy notes and links.