Data policy
Data Policy
This privacy statement informs users about the nature, scope and purpose of the collection and use of personal data by the responsible provider Schatz GmbH, Ing.Bernhard Schatz, Marktplatz 3, 4331 Naarn/Machlande, e-mail: office@tbschatz.at on this website (hereafter “offer”).
Scope of application
This privacy policy is intended to inform the users of this website in accordance with the Federal Data Protection Act and the Telemedia Act about the nature, scope and purpose of the collection and use of personal data by the website operator. The website operator takes your privacy very seriously and treats your personal data confidentially and in accordance with the statutory provisions. Please bear in mind that data transmission on the Internet can always be subject to security vulnerabilities. A full protection against access by third parties is not feasible.
Access data
The website operator or page provider collects data about accesses to the page and stores them as “server log files”. The following data is logged in this way:
- Visited website
- Time at the point of access
- Amount of data sent in bytes
- Source/reference from which you came to the page
- Browser used
- Operating system used
- IP address used
The data collected is only used for statistical analysis and to improve the website. However, the website operator reserves the right to check the server log files at a later date if there are concrete indications of illegal use.
Handling of personal data
The website operator collects, uses and discloses your personal data only if this is permitted by law or if you consent to the data collection.
Personal data is any information that can be used to identify you and that can be traced back to you – for example, your name, e-mail address and telephone number.
Server log files
The provider (or its web space provider) collects data about each access to the offer (so-called server log files). The access data includes: name of the accessed website, file, date and time of access, amount of data transferred, notification of successful access, browser type and version, the user’s operating system, referrer URL (the previously visited page), IP address and the requesting provider.
The provider uses the log data only for statistical analysis for the purpose of operation, security and optimization of the offer. However, the provider reserves the right to check the log data retrospectively if there is a justified suspicion of illegal use based on concrete indications.
Akismet Spamfilter
This website makes use of the Akismet service, an analytical tool from Automattic Inc., 60 29th Street #343, San Francisco, CA 94110-4929, USA. Akismet analyses the interactions of all website visitors with the help of certain patterns in order to show up and, if necessary, delete spam.
For this reason, certain information about the user`s computer (e.g. IP address) as well as content which is collected through interaction at the website will be transferred and processed to a server of Automattic in the USA, where they are stored for four days. This action is necessary in order to deal with the growing number of spam. If necessary, due to legal reasons, or because of processing issues Automattic may transfer this information to third parties.
You can use an alias in order to avoid the processing of your data or you can simply not use our commenting system. In the future you have the opportunity to object the processing of your data via support@wordpress.com, referring to the subject: “deletion of data stored by Akismet” and pointing out the stored data.
Attempt of contact
By contacting the provider (via contact form or email) the user`s data, which is necessary for handling inquiries or responding to questions, will be stored.
Newsletter
With our newsletter service we inform you at your express request about us and our offers.
If you would like to use our newsletter service, we require a valid email address from you as well as information that allows us to verify that you are the owner of the indicated email address or that the owner consents to receiving the newsletter. Further data will not be collected. This data is processed exclusively for the newsletter registration, the newsletter management and the newsletter distribution and is not forwarded to third parties.
When registering for the newsletter, we log your IP address and the date of registration. This logging is purely for evidence in case a third party has misused an email address and registered it for receiving the newsletter without the knowledge of the email address owner.
Any processing of personal data in connection with the receipt of newsletters is performed only on the basis of your prior consent. This is on the understanding that you can withdraw your consent to the processing of your personal data at any time using the above contact options. You can also unsubscribe from our newsletter service at any time. The option to unsubscribe is available via a link directly in the newsletters.
Newsletter – Success measurement
The newsletters contain a so-called “web beacon”, i.e. a pixel-sized file that is retrieved from our server when the newsletter is opened, or if we use a shipping service provider, from their server. Within the scope of this retrieval, technical information, such as information about the browser and your system, as well as your IP address and the time of the retrieval are initially collected.
This information is used for the technical improvement of the services based on the technical data or the target groups and their reading behaviour based on their retrieval locations (which can be determined with the help of the IP address) or the access times. The statistical surveys also include the determination of whether the newsletters are opened, when they are opened and which links are clicked. For technical reasons, this information can be assigned to individual newsletter recipients. However, it is neither our intention nor, if used, that of the dispatch service provider to observe individual users. The evaluations serve us much more to recognize the reading habits of our users and to adapt our content to them or to send different content according to the interests of our users.
Google Maps
We integrate the maps of the service “Google Maps” of the provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy policy: https://www.google.com/policies/privacy/, Opt-Out: https://adssettings.google.com/authenticated.
Integration of third parties
It is possible that our online offer may incorporate content from third parties, such as videos from YouTube, maps from Google Maps, RSS feeds or graphics from other websites. This always requires that the provider of this content (hereinafter referred to as “third party”) is able to identify the user’s IP address. This is because without the IP address, they would not be able to send the content to the browser of each user. The IP address is thus required in order to present this content. In this context, we only use content where the respective providers use the IP address solely for the delivery of the content.
However, we have no control over whether third parties will log the IP address, e.g. for statistical purposes. Insofar as we are aware of such a procedure, we will inform users accordingly and reassess the integration of the content in question.
Cookies
Cookies are small files that allow storing device-related information to the user’s access device (PC, smartphone, etc.). They enhance the user friendliness of websites and thus serve the user (e.g. by storing login data). On the other hand, they are used to collect statistical data on the website use and analyse them to improve the offer. Users can influence the use of cookies. Most browsers have an option to restrict or completely prevent the storage of cookies. However, it should be noted that the use and particularly the user-friendliness will be limited without cookies.
You can manage many online ad cookies by various companies on the US website http://www.aboutads.info/choices/ or the EU page http://www.youronlinechoices.com/uk/your-ad-choices/
Use of social media buttons with “Shariff”
We use the c’t project “Shariff” on our website. “Shariff” replaces the usual share buttons of social networks and thereby protects surfing behaviour.
“Shariff” embeds these share buttons of the social networks on our website only as a graphic that contains a link to the corresponding social network. By clicking on the corresponding graphic, you will be redirected to the services of the respective network. The Shariff button establishes direct contact between the social network and our visitors only when the visitor actively clicks on the Share button. Only then will your data be transmitted to the respective social network. If, on the other hand, the Shariff button is not clicked, no exchange takes place between you and the social networks. You can find more information about the c’t project “Shariff” at Heise.
We integrate the following social networks with “Shariff” on our website:
Use of Facebook social plugins
We use social plugins (“plugins”) of the social network facebook.com on the basis of our legitimate interests (i.e. interest in the analysis, optimization and economic operation of our online offer within the meaning of Art. 6 (1) lit. f. DSGVO social plugins (“plugins”) of the social network facebook.com, which is operated by Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”). The plugins can display interaction elements or content (e.g. videos, graphics or text contributions) and are recognizable by one of the Facebook logos (white “f” on blue tile, the terms “Like” or a “thumbs up” sign) or are marked with the addition “Facebook Social Plugin”. The list and appearance of Facebook social plugins can be viewed here: https://developers.facebook.com/docs/plugins/.
Facebook is certified under the Privacy Shield agreement and thereby offers a guarantee of compliance with European data protection law
(https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active).
When a user calls up a function of this online offering that contains such a plugin, his or her device establishes a direct connection with the Facebook servers. The content of the plugin is transmitted by Facebook directly to the user’s device and integrated into the online offer by the latter. In the process, usage profiles of the users can be created from the processed data. We therefore have no influence on the scope of the data that Facebook collects with the help of this plugin and therefore inform the users according to our level of knowledge.
By integrating the plugins, Facebook receives the information that a user has accessed the corresponding page of the online offer. If the user is logged into Facebook, Facebook can assign the visit to his Facebook account. If users interact with the plugins, for example by clicking the Like button or posting a comment, the corresponding information is transmitted from your device directly to Facebook and stored there. If a user is not a member of Facebook, there is still the possibility that Facebook will learn and store his or her IP address. According to Facebook, only an anonymized IP address is stored in Germany.
The purpose and scope of the data collection and the further processing and use of the data by Facebook, as well as the related rights and settings options for protecting the privacy of users, can be found in the privacy policy of Facebook: https://www.facebook.com/about/privacy/.
If a user is a Facebook member and does not want Facebook to collect data about him or her via this online offer and link it to his or her membership data stored on Facebook, he or she must log out of Facebook and delete his or her cookies before using our online offer. Further settings and objections to the use of data for advertising purposes, are possible within the Facebook profile settings: https://www.facebook.com/settings?tab=ads or via the US site http://www.aboutads.info/choices/ or the EU site http://www.youronlinechoices.com/. The settings are platform-independent, i.e. they are applied to all devices, such as desktop computers or mobile devices.
This offer uses the buttons of the Twitter service. These buttons are offered by Twitter Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107, USA. They are recognizable by terms such as “Twitter” or “Follow”, combined with a stylized blue bird. With the help of the buttons, it is possible to share a post or page of this offer on Twitter or to follow the provider on Twitter.
When a user calls up a web page of this website that contains such a button, his browser establishes a direct connection with the servers of Twitter. The content of the Twitter button is transmitted by Twitter directly to the user’s browser. The provider therefore has no influence on the scope of the data that Twitter collects with the help of this plugin and informs the users according to its state of knowledge. According to this, only the IP address of the user the URL of the respective website is transmitted when the button is referred to, but not used for purposes other than the display of the button.
Further information on this can be found in Twitter’s privacy policy at http://twitter.com/privacy.
Privacy policy on the use and application of YouTube
The controller has integrated YouTube components on this website. YouTube is an Internet video portal that allows video publishers to post video clips free of charge and other users to view, rate and comment on them, also free of charge. YouTube allows the publication of all types of videos, which is why complete film and television programs, but also music videos, trailers or videos made by users themselves can be accessed via the Internet portal. The operating company of YouTube is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.
By each call of one of the individual pages of this website, which is operated by the controller and on which a YouTube component (YouTube video) has been integrated, the Internet browser on the information technology system of the data subject is automatically caused by the respective YouTube component to download a representation of the corresponding YouTube component from YouTube. Further information on YouTube can be found at https://www.youtube.com/intl/de/about/. Within the scope of this technical procedure, YouTube and Google receive knowledge of which specific sub-page of our website is visited by the data subject.
If the data subject is logged into YouTube at the same time, YouTube recognizes which specific sub-page of our website the data subject is visiting by calling up a sub-page that contains a YouTube video. This information is collected by YouTube and Google and assigned to the respective YouTube account of the data subject.
YouTube and Google always receive information via the YouTube component that the data subject has visited our website if the data subject is simultaneously logged into YouTube at the time of calling up our website; this takes place regardless of whether the data subject clicks on a YouTube video or not. If the data subject does not want this information to be transmitted to YouTube and Google, he or she can prevent the transmission by logging out of his or her YouTube account before accessing our website.
The privacy policy published by YouTube, which can be found at https://www.google.de/intl/de/policies/privacy/, provides information about the collection, processing and use of personal data by YouTube and Google.
Use of the Xing recommendation components
We use components of the XING.com network on our site. These components are a service of XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany.
With each individual call-up of our website that is equipped with such a component, this component causes the browser you are using to download a corresponding representation of the component from XING.
To our knowledge, XING does not store any personal data of the user about the call of our website. XING also does not store any IP addresses. In addition, there is also no evaluation of usage behaviour via the use of cookies in connection with the “XING Share button”. Further information on this can be found in the data protection information for the XING Share button at: https://www.xing.com/app/share?op=data_protection
Use of the LinkedIn recommendation components
We use components of the LinkedIn network on our site. LinkedIn is a service of LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA. With each individual call-up of our website that is equipped with such a component, this component causes the browser you are using to download a corresponding representation of the component from LinkedIn.
This process informs LinkedIn which specific page of our website is currently being visited. If you click the LinkedIn “Recommend Button” while you are logged into your LinkedIn account, you can link the content of our pages on your LinkedIn profile. This enables LinkedIn to assign the visit to our pages to your LinkedIn user account.
We have no influence on the data that LinkedIn collects through this, nor on the scope of this data collected by LinkedIn. We also have no knowledge of the content of the data transmitted to LinkedIn. Details on data collection by LinkedIn as well as your rights and setting options can be found in LinkedIn’s privacy notices. You can find these notes at http://www.linkedin.com/legal/privacy-policy
Data protection during applications and the application process
The controller collects and processes the personal data of applicants for the purpose of handling the application procedure. The processing may also take place electronically. This is the case, in particular, when an applicant submits relevant application documents to the controller by electronic means, for example, by e-mail or via a web form located on the website. If the controller concludes an employment contract with an applicant, the transmitted data will be stored for the purpose of processing the employment relationship in compliance with the statutory provisions. If the controller does not conclude an employment contract with the applicant, the application documents will be automatically deleted two months after notification of the rejection decision, provided that no other legitimate interests of the controller conflict with such deletion. Other legitimate interest in this sense is, for example, a duty to provide evidence in proceedings under the General Equal Treatment Act (AGG).
User`s rights
Data subjects have the right to access their personal data processed by Schatz GmbH, to have the data rectified, erased and port to other data controllers as well as to object to and to restrict the processing of their personal data. If the data processing is based on consent, they also have the right to withdraw the consent. Data subjects can assert their mentioned personal rights at any time at office@tbschatz.at
State: October 2019