Privacy policy

Privacy Policy

1) Introduction and Contact Information of the Data Controller

1.1 We are pleased that you are visiting our website and thank you for your interest. Below, we inform you about the handling of your personal data when using our website. Personal data is any data by which you can be personally identified.

1.2 The data controller for data processing on this website, within the meaning of the General Data Protection Regulation (GDPR), is Buben & Zörweg GmbH, Hauptstraße 515, 8962 Gröbming, Austria, Tel.: +43 3685 22480-58, Email: luisi.zoerweg@buben-zorweg.com. The data controller is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data.

2) Data Collection When Visiting Our Website

2.1 When using our website for informational purposes only, i.e., if you do not register or otherwise provide us with information, we only collect data that your browser transmits to the server (so-called "server log files"). When you visit our website, we collect the following data, which is technically necessary for us to display the website:

  • Our visited website

  • Date and time at the moment of access

  • Amount of data sent in bytes

  • Source/reference from which you came to the page

  • Used browser

  • Used operating system

  • Used IP address (if applicable: in anonymized form)

The processing is carried out in accordance with Art. 6(1) lit. f GDPR based on our legitimate interest in improving the stability and functionality of our website. The data will not be transferred or otherwise used. However, we reserve the right to check the server log files retrospectively if there are concrete indications of illegal use.

2.2 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the data controller). You can recognize an encrypted connection by the string "https://" and the lock symbol in your browser line.

3) Hosting & Content Delivery Network

Vercel

For hosting our website and displaying the page content, we use the system of the following provider: Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. All data collected on our website is processed on the provider’s servers. We have concluded a data processing agreement with the provider, ensuring the protection of our site visitors' data and prohibiting unauthorized disclosure to third parties. For data transfers to the USA, the provider is certified under the EU-US Data Privacy Framework, ensuring compliance with the European data protection level based on a decision of adequacy by the European Commission.

4) Cookies

To make the visit to our website attractive and to enable the use of certain functions, we use cookies, i.e., small text files that are stored on your device. Some of these cookies are deleted automatically after the browser is closed (so-called "session cookies"), while others remain on your device for a longer period and enable the storage of site settings (so-called "persistent cookies"). In the latter case, you can find the storage duration in the overview of the cookie settings of your web browser. If personal data is processed by individual cookies implemented by us, the processing is carried out in accordance with Art. 6(1) lit. b GDPR either for the execution of the contract, in accordance with Art. 6(1) lit. a GDPR in the case of consent, or in accordance with Art. 6(1) lit. f GDPR to protect our legitimate interests in the best functionality of the website as well as a customer-friendly and effective design of the page visit. You can set your browser to inform you about the setting of cookies and decide individually about their acceptance or exclude the acceptance of cookies for certain cases or in general. If cookies are not accepted, the functionality of our website may be restricted.

5) Contacting Us

When contacting us (e.g., via contact form or email), personal data is collected. The specific data collected when using a contact form is visible on the respective contact form. This data is stored and used solely for the purpose of responding to your request or for contacting you and the associated technical administration. The legal basis for processing this data is our legitimate interest in responding to your request in accordance with Art. 6(1) lit. f GDPR. If your contact aims to conclude a contract, the additional legal basis for processing is Art. 6(1) lit. b GDPR. Your data will be deleted after the final processing of your request, provided there are no legal storage obligations to the contrary.

6) Online Marketing

Google AdSense

This website uses Google AdSense, a web advertising service of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Google AdSense uses cookies, i.e., text files that are stored on your computer and enable an analysis of the use of the website. In addition, Google AdSense uses so-called web beacons (small invisible graphics) to collect information. Through the use of web beacons, simple actions such as visitor traffic on the website can be recorded, collected, and evaluated. The information generated by the cookie and/or web beacon (including your IP address) about your use of this website is generally transmitted to a Google server and stored there. This may also involve a transmission to the servers of Google LLC. in the USA. Google uses the obtained information to evaluate your use of the website with respect to the AdSense ads. The IP address transmitted by your browser in the context of Google AdSense is not merged with other data from Google. The information collected by Google may be transferred to third parties, if required by law and/or if third parties process this data on behalf of Google. All described processing, especially reading information on the used end device via cookies and/or web beacons, will only be carried out if you have given us your explicit consent according to Art. 6(1) lit. a GDPR. Without this consent, Google AdSense will not be used during your site visit. You can revoke your consent at any time with future effect by disabling this service in the "Cookie-Consent-Tool" provided on the website. For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, ensuring compliance with the European data protection level based on an adequacy decision by the European Commission. Google's privacy policy can be viewed here: https://www.google.de/policies/privacy/

7) Web Analysis Services

7.1 Google Analytics 4

This website uses Google Analytics 4, a web analysis service of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which enables an analysis of your use of our website. By default, cookies are set when visiting the website by Google Analytics 4, which are stored on your device and collect certain information. This includes your IP address, which is, however, shortened by Google by the last digits to exclude direct personal reference. The information is transmitted to Google servers and further processed there. This may also involve transmissions to Google LLC. located in the USA. Google uses the collected information on our behalf to evaluate your use of the website, compile reports on website activities for us, and provide other services related to website and internet usage. The IP address transmitted by your browser in the context of Google Analytics 4 is not merged with other data from Google. The data collected during the use of Google Analytics 4 will be stored for two months and then deleted. All described processing, especially setting cookies on the used end device, will only be carried out if you have given us your explicit consent according to Art. 6(1) lit. a GDPR. Without your consent, Google Analytics 4 will not be used during your site visit. You can revoke your consent at any time with future effect by disabling this service in the "Cookie-Consent-Tool" provided on the website. We have concluded a data processing agreement with Google, ensuring the protection of our site visitors' data and prohibiting unauthorized disclosure to third parties. Further legal information on Google Analytics 4 can be found at https://policies.google.com/privacy?hl=de&gl=de and at https://policies.google.com/technologies/partner-sites

Demographic Features

Google Analytics 4 uses the special "demographic features" function and can thereby create statistics that make statements about the age, gender, and interests of site visitors. This is done by analyzing advertising and information from third-party providers. This allows the identification of target groups for marketing activities. The collected data cannot be assigned to a specific person and will be deleted after a storage period of two months.

Google Signals

As an extension to Google Analytics 4, this website may use Google Signals to create cross-device reports. If you have activated personalized ads and linked your devices to your Google account, Google can analyze your usage behavior across devices and database models, including cross-device conversions, subject to your consent to use Google Analytics according to Art. 6(1) lit. a GDPR. We do not receive personal data from Google, only statistics. If you want to stop the cross-device analysis, you can deactivate the "personalized advertising" function in your Google account settings. Follow the instructions on this page: https://support.google.com/ads/answer/2662922?hl=de Further information on Google Signals can be found at: https://support.google.com/analytics/answer/7532985?hl=de

UserIDs

As an extension to Google Analytics 4, this website may use the "UserIDs" function. If you have consented to the use of Google Analytics 4 according to Art. 6(1) lit. a GDPR, created an account on this website, and logged in with this account on different devices, your activities, including conversions, can be analyzed across devices.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, ensuring compliance with the European data protection level based on an adequacy decision by the European Commission.

7.2 Google Tag Manager

This website uses the "Google Tag Manager," a service of the following provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: "Google"). The Google Tag Manager provides a technical basis for bundling various web applications, including tracking and analysis services, and calibrating, controlling, and linking them to conditions via a unified user interface. The Google Tag Manager itself does not store or read information on user devices. Nor does the service perform independent data analyses. However, the Google Tag Manager transmits your IP address to Google upon page access, which may be stored there. A transfer to Google LLC. servers in the USA is also possible. This processing will only take place if you have given us your explicit consent according to Art. 6(1) lit. a GDPR. Without this consent, the Google Tag Manager will not be used during your site visit. You can revoke your consent at any time with future effect by disabling this service in the "Cookie-Consent-Tool" provided on the website. We have concluded a data processing agreement with the provider, ensuring the protection of our site visitors' data and prohibiting unauthorized disclosure to third parties. For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, ensuring compliance with the European data protection level based on an adequacy decision by the European Commission.

8) Java-Scripts

Amazon CloudFront - Content Delivery Network (CDN)

Our website uses Java-Script code from the company Amazon Web Services, Inc., P.O. Box 81226, Seattle, WA 98108, USA (Amazon CloudFront - Content Delivery Network (CDN)). If you have Java Script enabled in your browser and do not have a Java Script blocker installed, your browser may transmit personal information to Amazon CloudFront - Content Delivery Network (CDN). We do not know what data Amazon CloudFront - Content Delivery Network (CDN) links to the data received and for what purposes Amazon CloudFront - Content Delivery Network (CDN) uses these data. For more information, please see the privacy policy of Amazon CloudFront - Content Delivery Network (CDN): https://aws.amazon.com/de/privacy/?nc1=f_prhttps://aws.amazon.com/de/privacy/?nc1=f_pr.

To prevent the execution of Java-Script code from Amazon CloudFront - Content Delivery Network (CDN) altogether, you can install a Java-Script blocker (e.g. www.noscript.nethttps://www.noscript.net/ or www.ghostery.comhttp://www.ghostery.com/).

YouTube

Our site uses Java-Script code from the company YouTube (LLC 901 Cherry Ave., 94066 San Bruno, CA, USA; "YouTube"). We use the provider YouTube to embed videos on our website. If you have Java Script enabled in your browser and do not have a Java Script blocker installed, your browser will where required transmit personal information to YouTube. We do not know what data YouTube links to the data received and for what purposes YouTube uses these data. You can find further information on this in the privacy policy of YouTube (http://www.google.de/intl/de/policies/privacyhttps://www.google.de/intl/de/policies/privacy). To prevent the execution of Java-Script code from YouTube altogether, you can install a Java-Script blocker (e.g. www.noscript.nethttps://www.noscript.net/ or www.ghostery.comhttp://www.ghostery.com/).

reCAPTCHA

This website uses reCAPTCHA from Google Inc, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA ("Google") to protect contact forms on this website. The query serves to differentiate whether the input is made by a human being or improperly by automated, machine processing. It includes the sending of the IP address and any other data required by Google for the service reCAPTCHA to Google. For this purpose your input will be transmitted to Google and processed there. Google uses the information it collects to, among other things, digitise books and printed materials and to update services such as Google Street View and Google Maps.

The IP address transmitted by your browser as part of reCAPTCHA will not be merged with other data from Google, unless you are logged into your Google account at the time of using the reCAPTCHA plug-in. To prevent the transmission and storage of your data, you must log out of Google before you visit our site and use the reCAPTCHA plug-in. These data are subject to Google's differing privacy policy, which can be found at https://www.google.com/policies/privacyhttps://www.google.com/policies/privacy.

9) References and links

In the case of direct or indirect references to external websites ("links") that are outside the author's area of responsibility, a liability obligation would only come into force if the author was aware of the content and it was technically possible and reasonable for him to prevent use in the event of illegal content. The author therefore expressly declares that at the time the links were created, the corresponding linked pages were free of illegal content. The author has no influence on the current and future design and on the content of the linked pages. He therefore expressly distances himself from all content on all linked pages that was changed after the link was created. This statement applies to all links and references set within our website as well as to external entries in guest books, discussion forums and mailing lists set up by the author. For illegal, incorrect or incomplete content and in particular for damage resulting from the use or non-use of information provided in this way, the provider of the page to which reference is made is solely liable, not the person who merely refers to the respective publication via links.

10) Copyright and trademarks

The author endeavors to protect the copyrights of graphics, sound documents, video sequences and texts, to use self created graphics, sound documents, video sequences and texts or to use license-free graphics, sound documents, video sequences and texts in all publications. All brands and trademarks mentioned on the website which may be protected by third parties are subject without restriction to the provisions of the applicable trademark law and the ownership rights of the registered owner. Solely by naming does not mean that trademarks are not protected by the rights of third parties. The copyright for published objects created by the author remains solely with the author. Duplication or use of such graphics, sound documents, video sequences and texts in other electronic or printed publications is not permitted without the author's approval.

11) Sources for images and graphics used:

http://www.istockphoto.de/

http://www.shutterstock.com/

http://www.stock.adobe.com/

http://www.idea-com.de/

https://phamousphotography.de/

http://pix-orange.de/

12) Retargeting/Remarketing and Conversion Tracking

Meta Pixel

Within our online offering, we use the "Meta Pixel" service of the following provider: Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland ("Meta"). When a user clicks on an ad we have placed on Facebook and/or Instagram, the URL of our linked page is extended by a parameter using "Meta Pixel." This URL parameter is then entered into the user’s browser via a cookie set by our linked page. This allows Meta to determine the visitors of our online offering as a target group for the display of ads (so-called "Ads"). Accordingly, we use the service to display the Facebook and/or Instagram ads we have placed only to those users who have shown interest in our online offering or who exhibit certain characteristics (e.g., interests in certain topics or products, determined based on the visited websites) that we transmit to Meta (so-called "Custom Audiences"). Furthermore, "Meta Pixel" can be used to track whether users were redirected to our website after clicking on an ad and what actions they perform there (so-called "Conversion Tracking"). The data collected is anonymous to us, meaning it does not allow us to draw conclusions about the identity of the users. However, the data is stored and processed by Meta, enabling a connection to the respective user profile, and Meta can use the data for its own advertising purposes. All described processing, especially setting cookies for reading information on the used end device, will only be carried out if you have given us your explicit consent according to Art. 6(1) lit. a GDPR. You can revoke your consent at any time with future effect by disabling this service in the "Cookie-Consent-Tool" provided on the website. We have concluded a data processing agreement with the provider, ensuring the protection of our site visitors' data and prohibiting unauthorized disclosure to third parties. The information generated by Meta is generally transmitted to a Meta server and stored there; this may also involve a transfer to Meta Platforms Inc. servers in the USA. For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, ensuring compliance with the European data protection level based on an adequacy decision by the European Commission.

13) Tools and Miscellaneous

Cookie-Consent-Tool

This website uses a "Cookie-Consent-Tool" to obtain effective user consent for consent-requiring cookies and cookie-based applications. The "Cookie-Consent-Tool" is displayed to users as an interactive user interface when the page is accessed, allowing them to grant consent for certain cookies and/or cookie-based applications by ticking a box. All consent-requiring cookies/services will only be loaded if the respective user gives the corresponding consent by ticking the box. This ensures that such cookies are only set on the respective user's end device if consent is given. The tool sets technically necessary cookies to store your cookie preferences. Personal user data is not generally processed in this context. If, in individual cases, the processing of personal data (such as the IP address) occurs for storage, assignment, or logging of cookie settings, this is done in accordance with Art. 6(1) lit. f GDPR based on our legitimate interest in lawful, user-specific, and user-friendly consent management for cookies and thus in a lawful design of our internet presence. An additional legal basis for processing is Art. 6(1) lit. c GDPR. As data controllers, we are legally obliged to make the use of technically unnecessary cookies dependent on the respective user's consent. If necessary, we have concluded a data processing agreement with the provider, ensuring the protection of our site visitors' data and prohibiting unauthorized disclosure to third parties. Further information about the operator and the configuration options of the Cookie-Consent-Tool can be found directly in the corresponding user interface on our website.

14) Rights of the Data Subject

14.1 Applicable data protection law grants you the following data subject rights (information and intervention rights) regarding the processing of your personal data vis-à-vis the data controller, whereby reference is made to the cited legal basis for the respective exercise requirements:

Right to information according to Art. 15 GDPR;

Right to rectification according to Art. 16 GDPR;

Right to erasure according to Art. 17 GDPR;

Right to restriction of processing according to Art. 18 GDPR;

Right to notification according to Art. 19 GDPR;

Right to data portability according to Art. 20 GDPR;

Right to revoke granted consents according to Art. 7(3) GDPR;

Right to complain according to Art. 77 GDPR.

14.2 RIGHT TO OBJECT

IF WE PROCESS YOUR PERSONAL DATA BASED ON OUR PREDOMINANT LEGITIMATE INTEREST IN THE CONTEXT OF A BALANCING OF INTERESTS, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, WITH EFFECT FOR THE FUTURE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED. FURTHER PROCESSING IS RESERVED IF WE CAN PROVE COMPELLING LEGITIMATE REASONS FOR THE PROCESSING THAT OUTWEIGH YOUR INTERESTS, RIGHTS, AND FREEDOMS, OR IF THE PROCESSING SERVES TO ASSERT, EXERCISE, OR DEFEND LEGAL CLAIMS.

IF YOUR PERSONAL DATA IS PROCESSED BY US FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH ADVERTISING PURPOSES AT ANY TIME. YOU CAN EXERCISE THE RIGHT TO OBJECT AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

15) Validity of this disclaimer

This disclaimer is part of the internet publication from which you have been referred to this page. If parts or individual formulations of this text should not, no longer or not completely comply with the applicable legal situation, the remaining parts of the document remain unaffected in their content and validity.

16) Duration of Storage of Personal Data

The duration of storage of personal data is determined by the respective legal basis, the processing purpose, and—if relevant—additionally by the respective legal retention period (e.g., commercial and tax retention periods). When processing personal data based on an explicit consent according to Art. 6(1) lit. a GDPR, the data concerned will be stored until you revoke your consent. If there are legal retention periods for data processed in the context of legal transactions or similar obligations based on Art. 6(1) lit. b GDPR, this data will be routinely deleted after the retention periods have expired, provided that it is no longer required for contract fulfillment or initiation and/or there is no legitimate interest in continued storage on our part. When processing personal data based on Art. 6(1) lit. f GDPR, this data will be stored until you exercise your right to object according to Art. 21(1) GDPR, unless we can prove compelling legitimate grounds for the processing that outweigh your interests, rights, and freedoms, or the processing serves to assert, exercise, or defend legal claims. When processing personal data for the purpose of direct marketing based on Art. 6(1) lit. f GDPR, this data will be stored until you exercise your right to object according to Art. 21(2) GDPR. Unless otherwise specified in the other information of this statement regarding specific processing situations, stored personal data will be deleted when they are no longer necessary for the purposes for which they were collected or otherwise processed.

You can reach us under the following contact details:

BUBEN&ZORWEG GmbH
Tel.: +43 3685 224 80
E-mail: info@buben-zorweg.com