Source: https://ztirom.at/privacy-policy/
Timestamp: 2019-04-23 15:50:19+00:00

Document:
Visitors and users of the online offer (in the following we refer to the affected persons as “users”).
“Personal data” means any information relating to an identified or identifiable natural person (hereinafter the “data subject”); a natural person is considered as identifiable, if he/she can be identified directly or indirectly, in particular by means of assignment to an identifier such as a name, to an identification number, to location data, to an online identifier (eg cookie) or to one or more special features, that express the physical, physiological, genetic, mental, economic, cultural or social identity of this natural person.
“Processing” means any process performed with or without the aid of automated procedures or any such process associated with personal data. The term has a very broad meaning and includes virtually every handling of data.
“Pseudonymisation” means the processing of personal data in such a way that the personal data can no longer be assigned to a specific data subject without additional information being provided, provided that such additional information is kept separate and subject to technical and organizational measures to ensure that the personal data is not assigned to an identified or identifiable natural person.
“Profiling” means any kind of automated processing of personal data which involves the use of such personal data to evaluate certain personal aspects relating to a natural person, in particular aspects relating to job performance, economic situation, health, personal preferences, or to analyze or predict preferences, interests, reliability, behavior, whereabouts or relocation of that natural person.
“Responsible person” means the natural or legal person, public authority, agency or other body that decides, alone or jointly with others, on the purposes and means of processing personal data.
In accordance with Art. 13 GDPR, we inform you about the legal basis of our data processing. Unless the legal basis in the data protection declaration is mentioned, the following applies: The legal basis for obtaining consent is Article 6 (1) lit. a and Art. 7 DSGVO, the legal basis for the processing for the performance of our services and the execution of contractual measures as well as the response to inquiries is Art. 6 (1) lit. b DSGVO, the legal basis for processing in order to fulfil our legal obligations is Art. 6 (1) lit. c DSGVO, and the legal basis for processing in order to safeguard our legitimate interests is Article 6 (1) lit. f DSGVO. In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 lit. d DSGVO as legal basis.
Measures include, in particular, ensuring the confidentiality, integrity and availability of data by controlling physical access to the data, as well as their access, input, disclosure, availability and separation. In addition, we have established procedures that ensure the management of data subject rights, data erasure and data vulnerability. Furthermore, we consider the protection of personal data already in the development, or selection of hardware, software and procedures, according to the principle of data protection by technology design and by privacy-friendly default settings taken into account (Article 25 GDPR).
If, in the context of our processing, we disclose data to other persons and companies (contract processors or third parties), transmit or otherwise grant access to the data, this will only be done on the basis of a legal permission (eg if a transmission of the data to third parties, as required by payment service providers, pursuant to Art. 6 (1) (b) GDPR to fulfil the contract), in case you gave your consent, on basis of a legal obligation or based on our legitimate interests (eg the use of agents, webhosters, etc.).
If we process data to a third country (ie outside the European Union (EU) or the European Economic Area (EEA)) or in the context of the use of third party services or disclosure or transmission of data to third parties, this will only be done in order to fulfil our (pre) contractual obligations, on the basis of your consent, on the basis of a legal obligation or on the basis of our legitimate interests. Subject to legal or contractual permissions, we process or have the data processed in a third country only under the special conditions of Art. 44 et seq. GDPR. This means that the processing takes place e.g. on the basis of specific guarantees, such as the officially recognized level of data protection (eg for the US through the Privacy Shield) or compliance with officially recognized special contractual obligations (so-called “standard contractual clauses”).
You have, according to. Art. 77 GDPR, the right to file a complaint with the competent supervisory authority.
You have the right to revoke your already given consent in accordance with. Art. 7 para. 3 DSGVO with effect for the future.
“Cookies” are small files that are stored on users’ computers. Different information can be stored within the cookies. A cookie is primarily used to store the information about a user (or the device on which the cookie is stored) during or after his visit to an online offer. Temporary cookies, or “session cookies” or “transient cookies”, are cookies that are deleted after a user leaves an online service and closes his browser. In such a cookie, e.g. the contents of a shopping cart of an online store or a login status can be stored. The term “permanent” or “persistent” refers to cookies that remain stored even after the browser has been closed. Thus, e.g. the login status will be saved if users visit it after several days. Likewise, in such a cookie the interests of the users which are used for range measurement or marketing purposes can be stored. A “third-party cookie” refers to cookies that are offered by providers other than the person who manages the online offer (otherwise, if it is only their cookies, this is called “first-party cookies”).
According to legal regulations in Austria the storage takes place especially for 7 years according to § 132 Abs 1 BAO (accounting documents, receipts / invoices, accounts, receipts, business papers, statement of income and expenses, etc.), for 22 years in connection with real estate and for 10 years in the case of documents relating to electronically supplied services, telecommunications, broadcasting and television services provided to non-entrepreneurs in EU Member States and for which the Mini-One-Stop-Shop (MOSS) is used.
Within our online offer, we rely on our legitimate interests (i.e., interest in the analysis, optimization and economic operation of our online offer) acc. Art. 6 para. 1 lit. f GDPR industry-standard tracking measures as required for the operation of the affiliate system. Below we offer an explanation to the user regarding the technical background.
In summary, our online offering requires us to be able to keep track of whether users who are interested in affiliate links and / or the offers available to us then take advantage of the offers on the affiliate links or on our online platform. For this, the affiliate links and our offers are supplemented by certain values ​​that are part of the link or otherwise, e.g. in a cookie. The values ​​include in particular the source website (referrer), time, an online identifier of the operator of the website on which the affiliate link was located, an online identifier of the respective offer, an online identifier of the user, as well as tracking specific values ​​such as Ad ID, affiliate ID, and categorizations.
The online user IDs used by us are pseudonymous values. The online identifiers themselves do not contain personal data such as names or e-mail addresses. They only help us determine whether the same user who clicked on an affiliate link or was interested in an offer through our online offer, perceived the offer, i. e.g. has signed a contract with the provider. However, the online identification is personal in so far as that to the partner company and also to us, the online identification together with other user data are available. Only then can the partner company tell us whether the user has accepted the offer and we, for example, can pay the bonus.
If users leave comments or other contributions, their IP addresses may be, based on our legitimate interests within the meaning of Art. 6 para. 1 lit. f. GDPR, stored for 7 days. This is for our own safety, if someone leaves illegal content in comments and contributions (insults, prohibited political propaganda, etc.). In this case, we ourselves can be prosecuted for the comment or post and are therefore interested in the identity of the author.
Furthermore, we reserve the right, in accordance with our legitimate interests according to Art. 6 para. 1 lit. f. GDPR, to process the information of users for the purpose of spam detection.
Users may subscribe to ongoing comments with their consent in accordance with. Art. 6 para. 1 lit. a GDPR. Users will receive a confirmation email to verify that they own the email address they entered. Users can unsubscribe from ongoing comment subscriptions at any time. The confirmation email will contain notes on the revocation options. For the purpose of proving the consent of the users, we store the logon deadline along with the IP address of the users and delete this information when users log out of the subscription.
You can terminate the receipt of our subscriptions at any time, ie. revoke your consent. We may save the submitted email addresses for up to three years based on our legitimate interests before we delete them, for the purpose of providing prior consent. The processing of this data is limited to the purpose of a possible defense against claims. An individual request for cancellation is possible at any time, provided that at the same time the former existence of a consent is confirmed.
We, or our hosting provider, process inventory data, contact data, content data, contract data, usage data, meta and communication data of customers, interested parties and visitors to this online offer on the basis of our legitimate interests in an efficient and secure provision of this online offer acc. Art. 6 para. 1 lit. f GDPR i.V.m. Art. 28 GDPR (conclusion of contract processing contract).
We, or our hosting provider, collect on the basis of our legitimate interests within the meaning of Art. 6 para. 1 lit. f. GDPR data on every access to the server on which this service is located (so-called server log files). The access data includes name of the retrieved web page, file, date and time of retrieval, amount of data transferred, message about successful retrieval, browser type and version, the user’s operating system, referrer URL (the previously visited page), IP address and the requesting provider.
We use the services of Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043 on the basis of our legitimate interests (ie interest in the analysis, optimization and economic operation of our online service within the meaning of Art. 6 (1) lit. f GDPR) , USA, (“Google”).
Based on our legitimate interests (ie interest in the analysis, optimization and economic operation of our online offer within the meaning of Art. 6 (1) lit. f GDPR) we use the plugin Jetpack (here the subfunction “WordPress Stats”), which includes Visitor Access Statistical Evaluation Tool and Automattic Inc., 60 29th Street # 343, San Francisco, CA 94110, USA. Jetpack uses so-called “cookies”, text files that are stored on your computer and that allow an analysis of the use of the website by you.
Based on our legitimate interests (ie interest in the analysis, optimization and economic operation of our online offer within the meaning of Art. 6 (1) lit. f GDPR), we make use of content or services offered by third-party providers in order to provide their content and services, such as include videos or fonts (collectively referred to as “content”).

References: Art. 13
 Art. 7
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 44
 Art. 77
 Art. 7
 § 132
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 28
 Art. 6
 Art. 6
 Art. 6
 Art. 6