Privacy Policy
We have written this privacy statement (version 10.07.2019-221097736) in order to provide you with the information required by the Data Protection Basic Regulation (EU) 2016/679 and the Data Protection Act 2016/679 and the Data Protection Act (DSG) to explain what information we collect, how we use it, and what choices you have as a visitor to this website.
Unfortunately it is in the nature of things that these explanations sound very technical, but we have tried to describe the most important things as simple and clear as possible.
Automatic data storage
When you visit websites nowadays, certain information is automatically generated and stored, including on this website.
When you visit our website as you are doing now, our web server (computer on which this website is stored) automatically saves data such as
- the address (URL) of the called web page
- Browser and browser version
- the operating system used
- the address (URL) of the previously visited page (referrer URL)
- the host name and the IP address of the device from which the access is made
- the date and time
in files (web server log files).
Web server log files are usually stored for two weeks and then automatically deleted. We do not pass on this data, but we cannot rule out the possibility that this data may be viewed in the event of unlawful conduct.
The legal basis is according to Article 6, Paragraph 1 f DSGVO (lawfulness of processing) that there is a legitimate interest in enabling the error-free operation of this website by collecting web server log files.
Cookies
Our website uses HTTP cookies to store user-specific data.
In the following, we explain what cookies are and why they are used so that you can better understand the following privacy statement.
What exactly are cookies?
Whenever you surf the Internet, use a browser. Known browsers include Chrome, Safari, Firefox, Internet Explorer, and Microsoft Edge. Most Web pages store small text files in your browser. These files are called cookies.
One should not be dismissed by hand: Cookies are really useful helpers. Almost all websites use cookies. More precisely, they are HTTP cookies, as there are other cookies for other applications. HTTP cookies are small files that are stored on your computer by our website. These cookie files are automatically placed in the cookie folder, the “brain” of your browser. A cookie consists of a name and a value. When defining a cookie, one or more additional attributes must be specified.
Cookies store certain user data from you, such as language or personal page settings. When you return to our site, your browser sends the “user-related” information back to our site. Thanks to cookies, our website knows who you are and offers you your usual standard settings. In some browsers, each cookie has its own file, in others, such as Firefox, all cookies are stored in a single file.
There are both first-party and third-party cookies. First-party cookies are created directly by our site, third-party cookies are created by partner sites (e.g. Google Analytics). Each cookie is evaluated individually because each cookie stores different information. Cookies are not software programs and do not contain viruses, Trojan horses, or other “malware”. Cookies also cannot access information on your PC.
For example, cookie data may look like this:
- Name: _ga
- Expiry date: 2 years
- Use: Differentiation of website visitors
- Example value: GA1.2.1326744211.152221097736
A browser should support the following minimum sizes:
- A cookie should contain at least 4096 bytes
- A cookie should contain at least 50 cookies per domain
- A total of at least 3000 cookies should be able to be stored
What types of cookies are there?
The question which cookies we use in particular depends on the services used and is clarified in the following sections of the Privacy Policy. At this point we would like to briefly explain the different types of HTTP cookies.
You can distinguish between 4 types of cookies:
Unconditionally necessary cookies
These cookies are necessary to ensure basic functions of the website. For example, these cookies are needed when a user places a product in the shopping cart, then continues surfing on other pages and later only proceeds to checkout. These cookies do not delete the shopping cart, even if the user closes his browser window.
Functional Cookies
These cookies collect information about the user behavior and whether the user gets any error messages. In addition, these cookies are used to measure the loading time and the behavior of the website with different browsers.
Objective cookies
These cookies provide better usability. For example, entered locations, font sizes or form data are saved.
Advertising cookies
These cookies are also called targeting cookies. They are used to deliver customized advertising to the user. This can be very practical, but also very annoying.
When you first visit a website, you are usually asked which of these types of cookies you want to allow. And of course this decision is also stored in a cookie.
How can I delete cookies?
How and whether you want to use cookies is up to you. Regardless of which service or website the cookies originate from, you always have the option of deleting, only partially allowing or deactivating cookies. For example, you can block third party cookies, but allow all other cookies.
If you want to know which cookies are stored in your browser, if you want to change or delete cookie settings, you can find this in your browser settings:
Chrome: Delete, activate and manage cookies in Chrome
Safari: Managing cookies and website data with Safari
Firefox: Delete cookies to remove data that websites have stored on your computer
Internet Explorer: Deleting and managing cookies
Microsoft Edge: Delete and manage cookies
If you do not want cookies, you can set your browser so that it always informs you when a cookie is to be set. This allows you to decide for each individual cookie whether you want to allow the cookie or not. The procedure varies depending on the browser. The best way is to search for the instructions in Google with the search term “Delete cookies Chrome” or “Deactivate cookies Chrome” in the case of a Chrome browser or exchange the word “Chrome” for the name of your browser, e.g. Edge, Firefox, Safari.
What about my privacy?
Since 2009, there have been so-called “cookie guidelines”. These guidelines state that the storage of cookies requires the consent of the website visitor (i.e. you). Within the EU countries, however, there are still very different reactions to these guidelines. In Austria, however, this directive was implemented in § 96 Para. 3 of the Telecommunications Act (TKG).
If you want to know more about cookies and are not afraid of technical documentation, we recommend https://tools.ietf.org/html/rfc6265, the Request for Comments of the Internet Engineering Task Force (IETF) named “HTTP State Management Mechanism”.
Storage of personal data
Personal data that you provide to us electronically on this website, such as your name, e-mail address, address or other personal information in connection with the submission of a form or comments in the blog, will only be used by us together with the time and IP address for the specified purpose, stored securely and not passed on to third parties.
We therefore use your personal data only for communication with those visitors who expressly wish to contact us and for the processing of the services and products offered on this website. We do not pass on your personal data without your consent, but we cannot rule out the possibility that this data may be viewed in the event of unlawful conduct.
When you send us personal information by email – that is, outside of this web site – we cannot guarantee the security of your information. We recommend that you never send confidential data unencrypted by e-mail.
The legal basis according to Article 6 Paragraph 1 a DSGVO (lawfulness of processing) is that you give us your consent to process the data you have entered. You can revoke this consent at any time – an informal e-mail is sufficient, you will find our contact data in the legal notice.
Evaluation of visitor behavior
In the following data protection declaration we inform you whether and how we evaluate data from your visit to this website. As a rule, the data collected is evaluated anonymously and we cannot infer from your behaviour on this website any personal information about you.
You can find out more about the possibilities of contradicting this evaluation of visit data in the following data protection declaration.
TLS Encryption with https
We use https to transmit data securely on the Internet (data protection through technical design Article 25 Paragraph 1 DSGVO). By using TLS (Transport Layer Security), an encryption protocol for secure data transmission on the Internet, we can ensure the protection of confidential data. You can recognize the use of this data transmission security by the small lock symbol in the top left corner of the browser and the use of the https scheme (instead of http) as part of our Internet address.
Newsletter Privacy Policy
If you subscribe to our newsletter you provide the above personal data and give us the right to contact you by e-mail. We use the data stored within the scope of the registration to the newsletter exclusively for our newsletter and do not pass these on.
If you want to unsubscribe from the newsletter – you will find the link at the bottom of every newsletter – then we will delete all data stored with the subscription to the newsletter.
Google Fonts Privacy Policy
We use Google Fonts from Google Inc. (1600 Amphitheatre Parkway Mountain View, CA 94043, USA) on our website.
You do not need to log in or enter a password to use Google fonts. Furthermore, no cookies are stored in your browser. The files (CSS, fonts) are requested via the Google domains fonts.googleapis.com and fonts.gstatic.com. According to Google, requests for CSS and fonts are completely separate from all other Google services. If you have a Google Account, don’t worry that your Google Account information will be transmitted to Google while using Google Fonts. Google collects and stores information about your use of CSS (Cascading Style Sheets) and fonts. We’ll take a closer look at how the data is stored.
What are Google Fonts?
Google Fonts (formerly Google Web Fonts) is an interactive directory of more than 800 fonts that the Google LLC provides for free use.
Many of these fonts are released under the SIL Open Font License, while others are released under the Apache license. Both are free software licenses. So we can use them freely without paying royalties.
Why do we use Google Fonts on our website?
With Google Fonts we can use fonts on our own website, and don’t have to upload them to our own server. Google Fonts is an important building block to keep the quality of our website high. All Google fonts are automatically optimized for the web and this saves data volume and is a big advantage especially for mobile devices. When you visit our site, the small file size ensures fast loading time. Google Fonts are also known as secure web fonts. Different image synthesis systems (rendering) in different browsers, operating systems and mobile devices can lead to errors. Such errors can partially distort texts or entire web pages optically. Thanks to the fast Content Delivery Network (CDN), there are no cross-platform problems with Google Fonts. Google Fonts supports all popular browsers (Google Chrome, Mozilla Firefox, Apple Safari, Opera) and works reliably on most modern mobile operating systems, including Android 2.2+ and iOS 4.2+ (iPhone, iPad, iPod).
We use Google Fonts so that we can present our entire online service as beautifully and uniformly as possible. According to Art. 6 para. 1 f lit. F DSGVO, this already represents a “legitimate interest” in the processing of personal data. By “legitimate interest” one understands in this case both legal and economic or ideational interests which are recognized by the legal system.
What data is stored by Google?
When you visit our website, the fonts are downloaded via a Google server. This external call transmits data to the Google server. In this way, Google also recognises that you or your IP address is visiting our website. The Google Fonts API was developed to reduce the collection, storage and use of end-user information to what is necessary for the efficient delivery of fonts. API also stands for “Application Programming Interface” and is used, among other things, as a data transmitter in the software sector.
Google Fonts stores CSS and font requests securely at Google and is therefore protected. Google can determine the popularity of the fonts through the collected usage figures. Google publishes the results on internal analysis pages such as Google Analytics. Google also uses data from its own web crawler to determine which web pages use Google fonts. This data is published in Google Fonts’ BigQuery database. BigQuery is a Google web service for companies that want to move and analyze large amounts of data.
However, it should be remembered that each Google Font Request also automatically transmits information such as IP address, language settings, screen resolution of the browser, version of the browser and name of the browser to the Google servers. Whether these data are also stored is not clearly ascertainable or is not clearly communicated by Google.
How long and where are the data stored?
Requests for CSS assets are stored for one day by Google on your servers, which are mainly located outside the EU. This allows us to use the fonts using a Google stylesheet. A stylesheet is a style sheet that allows you to change the design or font of a website quickly and easily.
The font files are stored on Google for one year. Google’s goal is to improve the loading time of web pages. If millions of websites refer to the same fonts, they are buffered after the first visit and immediately reappear on all other websites visited later. Sometimes Google updates font files to reduce file size, increase language coverage, and improve design.
How can I delete my data or prevent data storage?
The data that Google stores for a day or a year cannot simply be deleted. The data is automatically transmitted to Google when the page is called up. To be able to delete this data prematurely, you must contact the Google support on https://support.google.com/?hl=de&tid=221097736 contact. In this case, only prevent data storage if you do not visit our site.
Other than other web fonts, Google allows us unlimited access to all fonts. So we can have unlimited access to a sea of fonts and get the most out of our website. You can find out more about Google Fonts and other questions at https://developers.google.com/fonts/faq?tid=221097736. Although Google deals with data protection issues there, it does not contain really detailed information about data storage. It’s relatively difficult (almost impossible) to get really precise information about stored data from Google.
What data is basically collected by Google and for what purpose this data is used, you can also read on https://www.google.com/intl/de/policies/privacy/
Google Maps Privacy Policy
We use Google Maps of the company Google Inc. (1600 Amphitheatre Parkway Mountain View, CA 94043, USA) on our website.
By using the functions of this map, data is transferred to Google. You can find out which data is collected by Google and what this data is used for on https://www.google.com/intl/de/policies/privacy/ page.
Google Analytics Privacy Policy
We use Google Analytics from Google LLC (1600 Amphitheatre Parkway Mountain View, CA 94043, USA) on this website to statistically evaluate visitor data. Google Analytics uses target-oriented cookies for this purpose.
Cookies from Google Analytics
- _ga
- Expiry date: 2 years
- Use: Differentiation of website visitors
- Example value: GA1.2.1326744211.152221097736
- _gid
- Expiry time: 24 hours
- Use: Differentiation of website visitors
- Example value: GA1.2.1687193234.152221097736
- _gat_gtag_UA_<property-id>
- Expiry date: 1 minute
- usage: Used to throttle the request rate. When Google Analytics is provided through the Google Tag Manager, this cookie is named _dc_gtm_ <property-id>.
- Example value: 1
For more information on the terms of use and data protection, please visit http://www.google.com/analytics/terms/de.html or https://support.google.com/analytics/answer/6004245?hl=de..
Pseudonymization
Our concern in the sense of the DSGVO is the improvement of our offer and our web presence. Since the privacy of our users is important to us, the user data is pseudonymized. The data processing is based on the legal provisions of § 96 Abs 3 TKG as well as Art 6 EU-DSGVO Abs 1 lit a (consent) and/or f (legitimate interest) of the DSGVO.
Deactivation of data acquisition by Google Analytics
Using the Google Analytics JavaScript (ga.js, analytics.js, dc.js) browser deactivation add-on (browser add-on), website visitors can prevent Google Analytics from using their data.
You can prevent Google from collecting the data generated by the cookie and related to your use of the website and Google from processing this data by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de
Google Analytics add-on for data processing
We have concluded a direct customer contract with Google for the use of Google Analytics, in which we have accepted the “addition to data processing” in Google Analytics.
More about the Google Analytics data processing add-on can be found here: https://support.google.com/analytics/answer/3379636?hl=de&utm_id=ad
Google Analytics IP anonymization
We have implemented Google Analytics’ IP address anonymization feature on this website. This feature was developed by Google to enable this website to comply with applicable data protection laws and the recommendations of local data protection authorities when they prohibit the storage of a complete IP address. The anonymization or masking of the IP takes place as soon as the IP addresses arrive on the Google Analytics data collection network and before the data is stored or processed.
More information about IP anonymization can be found on https://support.google.com/analytics/answer/2763052?hl=de.
Rights according to the Basic Data Protection Ordinance
You are entitled to the following rights according to the provisions of the DSGVO and the Austrian data privacy act (DSG) in principle:
- Right to rectification (Article 16 DSGVO)
- Right to cancellation (“right to be forgotten”) (Article 17 DSGVO)
- Right to limitation of processing (Article 18 DSGVO)
- Right to notification – obligation to notify in connection with the rectification or erasure of personal data or the limitation of processing (Article 19 DSGVO)
- right to data transfer (Article 20 DSGVO)
- right to object (Article 21 DSGVO)
- right, not to be subject to a decision based exclusively on automated processing, including profiling (Article 22 DSGVO)
If you believe that the processing of your data violates the data protection law or your data protection claims have otherwise been violated in any way, you can complain to the supervisory authority, which in Austria is the data protection authority whose website you can find at https://www.dsb.gv.at/>
Google Analytics Reports on demographics and interests
We have switched on the functions for advertising reports in Google Analytics. The reports on demographic characteristics and interests contain information on age, gender and interests. This enables us to get a better picture of our users without being able to assign this data to individual persons. Find out more about the advertising functions at https://support.google.com/analytics/answer/3450482?hl=de_AT&utm_id=ad.
You can stop using the activities and information in your Google Account under “Advertising preferences” at https://adssettings.google.com/authenticated via checkbox.
Embedded Social Media Elements Privacy Statement
We include elements of social media services on our website to display images, videos and text.
By visiting pages that display these elements, data is transferred from your browser to the respective social media service and stored there. We do not have access to this data.
The following links will take you to the pages of the respective social media services where we will explain how they handle your data:
- Instagram Privacy Policy:https://help.instagram.com/519522125107875
- YouTube is governed by Google’s Privacy Policy:https://policies.google.com/privacy?hl=de
- Facebook Data Policy: https://www.facebook.com/about/privacy
- Twitter Privacy Policy:https://twitter.com/de/privacy
Facebook Privacy policy
On this website we use functions of Facebook, a social media network of FIrma Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland.
What functions (social plug-ins) Facebook provides, you can read on https://developers.facebook.com/docs/plugins/
By visiting our website information can be transmitted to Facebook. If you have a Facebook account, Facebook may associate this information with your personal account. If you do not want this, please unsubscribe from Facebook.
You can find the privacy policy, what information Facebook collects and how they use it at https://www.facebook.com/policy.php.
YouTube Privacy Statement
We use YouTube, YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA, on this page of the video service YouTube.
By accessing pages on our website that have integrated YouTube videos, data is transferred to YouTube, stored and evaluated.
If you have a YouTube account and are logged in, this data will be associated with your personal account and the data stored therein.
What data is collected by Google and what this data is used for, you can read on https://www.google.com/intl/de/policies/privacy/
Twitter Privacy Policy
We use on this website functions of Twitter, a social network of Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2 D02 AX07, Ireland.
Personal data can also be transmitted to Twitter as a result of this. We do not monitor this data exchange and do not store any information about it.
If you want to know more about the use of your data by Twitter, you can find all the information in the Twitter Privacy Policy at https://twitter.com/de/privacy.
If you have an account on Twitter, you can change your privacy settings in the account settings under https://twitter.com/settings/account change.
Instagram Privacy Statement
We use on our website functions of the Social Media Network Instagram of the company Instagram LLC, 1601 Willow Rd, Menlo Park CA 94025, USA.
With the functions for embedding instagram content (Embed function) we can display pictures and videos.
When pages that use such functions are accessed, data (IP address, browser data, date, time, cookies) are transmitted to Instagram, stored and evaluated.
If you have an Instagram account and are logged in, this information will be associated with your personal account and the information stored in it.
Privacy policies about what information Instagram collects and how you use it can be found at https://help.instagram.com/519522125107875.
Google+ Privacy policy
On our website we use functions of Google+, the social network of the company Google Inc. (1600 Amphitheatre Parkway Mountain View, CA 94043, USA).
If you want to take full advantage of the features offered, you need a Google Account.
Information will already be transmitted to Google when using the functions (Google +1 Buttons, Google+ Badge, Follow button, Google+ Share button and Link, Sign-In Button, Hangout Button) without Google Account.
If you are logged into your Google Account while using the above features, your information will be published worldwide at https://plus.google.com/settings/ and collected and evaluated by Google, depending on your preferences.
What data is collected by Google and what this data is used for, you can read on https://www.google.com/intl/de/policies/privacy/
LinkedIn Privacy Policy
We use on our website functions of the social media network LinkedIn of the company LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA.
When pages that use such functions are accessed, data (IP address, browser data, date and time, cookies) are transmitted to LinkedIn, stored and evaluated.
If you have a LinkedIn account and you are logged in, this information will be associated with your personal account and the information stored in it.
Privacy policy about what information LinkedIn collects and how they use it can be found at https://www.linkedin.com/legal/privacy-policy.
Pinterest Privacy Policy
On our site we use buttons and widgets of the social media network Pinterest, the company Pinterest Inc.,808 Brannan Street, San Francisco, CA 94103, USA.
By calling pages that use such functions, data (IP address, browser data, date and time, cookies) will be transmitted to Pinterest, stored and evaluated.
Privacy Policy, what information Pinterest collects and how they use it can be found at https://policy.pinterest.com/de/privacy-policy.
Gravatar Privacy Policy
On this website we use Gravatar of the company Automattic Inc. (60 29th Street #343, San Francisco, CA 94110, USA) to assign user images (avatars) on the basis of the e-mail address for contributions and comments.
A Gravatar is a Globally Recognized Avatar – a globally available user image – associated with an email address and used in various online services.
As an image is only displayed when an e-mail address registered with Gravatar is used, and therefore data is transferred to Gravatar, you can prevent the transfer of your data to Gravatar by commenting or posting with an e-mail address not registered with Gravatar.
Legal basis for the use is article 6 (1) f (lawfulness of the processing), because it exists a justified interest to the compositions of contents (contributions, comments,..) of this web page the possibility to offer to assign a picture selected by you own contents to.
Automattic is an active member of the EU-U.S. Privacy Shield Framework which regulates the correct and secure transfer of personal data. You can find more information on this at https://www.privacyshield.gov/participant?id=a2zt0000000CbqcAAC.
For more details on the privacy policy and which data is collected by Gravatar and in what way, please visit https://automattic.com/privacy/, general information about Gravatar on http://de.gravatar.com/.
AddThis Privacy Policy
On this website we use functions of AddThis of the company Oracle America, Inc. (500 Oracle Parkway, Redwood Shores, CA 94065, USA) to enable visitors to share content from this website.
Services of AddThis
By using the AddThis Buttons (see http://www.addthis.com/get/share/de/) of AddThis, visitors are able to share the content of this website in different social networks like Facebook, Twitter, Pinterest, Google+ and many more.
Which data is processed AddThis?
When visitors share content with AddThis in services where they have an account and are logged in, the visit and sharing can be assigned to the user.
AddThis uses cookies, pixel tags, HTTP header and browser identifiers to collect information about visitor behavior and shares this information after pseudonymization with third parties.
Here is an example list of the data that may be processed:
- Unambiguous ID of a cookie placed in the web browser
- Address of the visited web page
- Time of the web page visit
- Search requests that a visitor used to get to the page with AddThis
- Length of stay on a web page
- The IP address of the visitor is the IP address of the web page.Address of computer or mobile device
- Mobile advertising IDs (Apple IDFA or Google AAID)
- Which program was used on the computer (browser) or which operating system (iOS)
Cookies from AddThis
AddThis uses cookies which we list in the following exemplary and in extracts. More to the AddThis Cookies find you under http://www.addthis.com/privacy/privacy-policy.
- bt2
- term: 255 days
- usage: Used to record parts of the visited website to recommend other parts of the website
- Example value: 8961a7f179d87qq69V69221097736
- bku
- Expiry time: 179 days
- Use: Records anonymized user data such as IP address, geographic location, sites visited, and ads clicked by the user to optimize the ad based on user movement on sites using the same ad network
- Example value: ra/99nTmYN+fZWX7221097736
Disclosure of data to third parties by AddThis
AddThis shares information it collects with third parties – see details at http://www.addthis.com/privacy/privacy-policy#section5.
Storage time at AddThis
AddThis retains data collected for a period of up to 13 months from the date of data collection.
AddThis Opt-out
If you no longer wish to see advertisements based on data collected by AddThis, you can use the Opt Out button on http://www.addthis.com/privacy/opt-out . This will set an opt-out cookie, which you must not delete to keep this setting.
You can also set your preferences for use-based online advertising via http://www.youronlinechoices.com/at/ in preference management.
If you want to know more about the processing of your data by AddThis, you can find all the information at http://www.addthis.com/privacy/privacy-policy.
Google reCAPTCHA Privacy policy
Our primary goal is to ensure that our website is protected and secure for you and for us in the best possible way. In order to guarantee this, we use Google reCAPTCHA from Google Inc. (1600 Amphitheatre Parkway Mountain View, CA 94043, USA). With reCAPTCHA, we can determine if you are a flesh and blood person and not a robot or other spam software. By spam we mean any unsolicited information that we receive electronically. With the classic CAPTCHAS, you usually had to solve text or image puzzles to check them. With reCAPTCHA from Google, we usually don’t have to bother you with such puzzles. In most cases it is enough to simply tick the box and confirm that you are not a bot. With the new Invisible reCAPTCHA version you don’t even have to set a checkmark anymore. You can find out exactly how this works and, above all, which data is used for it in the course of this privacy policy.
The legal basis for its use is Article 6 (1) f (lawfulness of processing), because there is a legitimate interest to protect this site from bots and spam software.
What is reCAPTCHA?
reCAPTCHA is a free captcha service from Google that protects websites from spam software and abuse by non-human visitors. This service is most commonly used when you fill out forms on the Internet. A captcha service is an automatic Turing test designed to ensure that an action on the Internet is performed by a human and not by a bot. In the classic Turing test (named after the computer scientist Alan Turing), a human being makes a distinction between a bot and a human being. With Captchas, this is also done by the computer or a software program. Classic captchas work with small tasks that are easy for humans to solve, but have considerable difficulties for machines. With reCAPTCHA you don’t have to actively solve any more puzzles. The tool uses modern risk techniques to distinguish people from bots. Here you only have to tick the text field “I am not a robot” or with Invisible reCAPTCHA even this is no longer necessary. With reCAPTCHA a JavaScript element is integrated into the source code and then the tool runs in the background and analyzes your user behavior. From these user actions, the software calculates a so-called captcha score. Google uses this score to calculate how high the probability is that you are a human being even before captcha input. ReCAPTCHA or captchas in general are always used when bots could manipulate or abuse certain actions (e.g. registrations, surveys etc.).
Why do we use reCAPTCHA on our website?
We only want to welcome people of flesh and blood on our site. Bots or spam software of all kinds can stay at home. That’s why we do everything we can to protect ourselves and offer you the best possible usability. That’s why we use Google reCAPTCHA from Google. So we can be pretty sure that we will remain a “bot-free” website. By using reCAPTCHA, data is transmitted to Google, which uses Google to determine whether you are really a human being. reCAPTCHA therefore serves the security of our website and consequently also your security. For example, without reCAPTCHA it could happen that during registration a bot registers as many e-mail addresses as possible in order to subsequently “spam” forums or blogs with unwanted advertising content. With reCAPTCHA we can avoid such bot attacks.
What data is stored by reCAPTCHA?
ReCAPTCHA collects personal data from users in order to determine whether the actions on our website really originate from people. The IP address and other data required by Google for the reCAPTCHA service can therefore be sent to Google. IP addresses are almost always truncated within the EU Member States or other countries party to the European Economic Area Agreement before the data ends up on a server in the US. The IP address will not be combined with any other data held by Google unless you are signed in to your Google Account while using reCAPTCHA. First, the reCAPTCHA algorithm checks whether Google cookies from other Google services (YouTube, Gmail, etc.) have already been placed on your browser. Then reCAPTCHA places an additional cookie in your browser and takes a snapshot of your browser window.
The following list of collected browser and user data does not claim to be complete. Rather, they are examples of data which, according to our knowledge, are processed by Google.
- Referrer URL (the address of the page from which the visitor came)
- IP address (e.g. 256.123.123.1)
- Infos about the operating system (the software that enables the operation of your computer. Known operating systems are Windows, Mac OS X or Linux)
- Cookies (small text files that store data in your browser)
- Mouse and keyboard behavior (every action you perform with the mouse or keyboard is stored)
- Date and language settings (which language or language you want to use). which date you have preset on your PC will be saved)
- All Javascript objects (JavaScript is a programming language that allows web pages to adapt to the user. JavaScript objects can collect all kinds of data under one name)
- screen resolution (shows how many pixels the image consists of)
It is indisputable that Google uses this data and analyzes it before you click on the check mark “I am not a robot”. With the Invisible reCAPTCHA version even the ticking is omitted and the whole recognition process runs in the background. How much and which data Google stores exactly, you don’t get to know from Google in detail.
The following cookies are used by reCAPTCHA: Here we refer to the reCAPTCHA demo version of Google at https://www.google.com/recaptcha/api2/demo. All these cookies require a unique identifier for tracking purposes. Here is a list of cookies that Google reCAPTCHA has set on the demo version:
Name: IDE
Expiry date: after one year
Use: This cookie is set by the company DoubleClick (also owned by Google) to register and report a user’s actions on the website in handling ads. In this way, the advertising effectiveness can be measured and appropriate optimisation measures can be taken. IDE is stored in browsers under the domain doubleclick.net.
Example value: WqTUmlnmv_qXyi_DGNPLESKnRNrpgXoy1K-pAZtAkMbHI-221097736
Name: 1P_JAR
Expiry time: after one month
Use: This cookie collects website usage statistics and measures conversions. Conversion occurs, for example, when a user becomes a buyer. The cookie is also used to display relevant advertisements to users. The cookie can also be used to prevent a user from seeing the same ad more than once.
Example value: 2019-5-14-12
Name: ANID
Expiry date: after 9 months
Use: We could not find out much information about this cookie. In Google’s privacy policy, the cookie is mentioned in connection with “promotional cookies” such as “DSID”, “FLC”, “AID”, “TAID”. ANID is stored under domain google.com.
Example value: U7j1v3dZa2210977360xgZFmiqWppRWKOr
Name: CONSENT
Expiry date: after 19 years
Use: The cookie stores the status of a user’s consent to use different Google services. CONSENT also serves security purposes, such as checking users, preventing fraudulent logon credentials, and protecting user data from unauthorized attacks.
Example value: YES+AT.de+20150628-20-0
Name: NID
Expiry: after 6 months
Use: NID is used by Google to match ads to your Google search. The cookie helps Google “remember” your most typed searches or your previous interaction with ads. You’ll always get customized ads. The cookie contains a unique ID that Google uses to collect the user’s personal information for advertising purposes.
Example value: 0WmuWqy221097736zILzqV_nmt3sDXwPeM5Q
Name: DV
Expiry time: after 10 minutes
Use: As soon as you have checked the “I am not a robot” checkbox, this cookie will be set. The cookie is used by Google Analytics for personalized advertising. DV collects information in anonymous form and is also used to make user decisions.
Example value: gEAABBCjJMXcI0dSAAAANbqc221097736
Note: This enumeration cannot claim to be complete, as experience has shown that Google changes the choice of its cookies time and again.
How long and where are the data stored?
By inserting reCAPTCHA data is transferred from you to the Google server. Where exactly this data is stored, Google, even after repeated requests, is not clear. Without having received confirmation from Google, it can be assumed that data such as mouse interaction, time spent on the website or language settings are stored on the European or American Google servers. The IP address that your browser transmits to Google is generally not merged with other Google data from other Google services. However, if you are logged into your Google account while using the reCAPTCHA plug-in, the data will be merged in accordance with Google’s privacy policy.
How can I delete my data or prevent data storage?
If you do not want any information about yourself or your behaviour to be transmitted to Google, you must log out of Google completely and delete all Google cookies before visiting our website or using the reCAPTCHA software. In principle, the data is automatically transmitted to Google as soon as you call up our site. In order to delete this data, you must contact Google support at https://support.google.com/?hl=de&tid=221097736.
Therefore, by using our website, you consent to Google LLC and its agents automatically collecting, processing and using information.
You can learn more about reCAPTCHA on Google’s web developer page at https://developers.google.com/recaptcha/. Although Google will go into the technical development of reCAPTCHA in more detail here, you won’t find exact information about data storage and data protection relevant topics there either. A good overview of the basic use of data by Google can be found in the company’s privacy policy at https://www.google.com/intl/de/policies/privacy/.
ShareThis Privacy Policy
We use functions of ShareThis of the company ShareThis (4005 Miranda Ave, Suite 100, Palo Alto, 94304 California, USA) on this website to enable visitors to share content from this website.
Services from ShareThis
By using the social plugins of ShareThis visitors are able to share the content of this website in different social networks like Facebook, Twitter, Google+ and many more.
Which data does ShareThis process?
When visitors share content with ShareThis in services where they have an account and are logged in, the visit and sharing can be assigned to the user.
ShareThis uses cookies, pixel tags, HTTP header and browser identifiers to collect information about visitor behavior and shares this information after pseudonymization with third parties.
Here is a list of possibly processed data:
- Unambiguous ID of a cookie placed in the web browser
- General click behaviour
- Addresses of visited web pages
- Search requests that a visitor used to get to the page with ShareThis
- Navigation from web page to web page in case ShareThis services expired
- Length of stay on a web page
- Which elements were clicked on or highlighted
- The IP addressAddress of computer or mobile device
- Mobile advertising IDs (Apple IDFA or Google AAID)
- Information contained in HTTP headers or other transmission protocols used
- Which program was used on the computer (browser) or which operating system (iOS)
Cookies from ShareThis
ShareThis uses cookies which we list in the following example. More about the ShareThis Cookies can be found at https://www.sharethis.com/privacy/.
- __unam
- Expiry date: 9 months
- Use: Counts clicks and shares on a web page
- Example value: 8961a7f179d1d017ac27lw87qq69V69221097736
Disclosure of data to third parties by ShareThis
ShareThis shares collected information after pseudonymization with third parties.
Storage time for ShareThis
ShareThis keeps collected data for a period of up to 14 months from the date of data collection. ShareThis cookies expire 13 months after the last update.
ShareThis Opt-out
If you no longer want to see advertisements based on data collected by ShareThis, you can use the Opt Out button on https://www.sharethis.com/privacy/ . This will set an opt-out cookie, which you must not delete to keep this setting.
You can also set your preferences for use-based online advertising via http://www.youronlinechoices.com/at/ in preference management.
If you want to know more about the processing of your data by ShareThis, you can find all the information at https://www.sharethis.com/privacy/.
XING Privacy Statement
We use on our website functions of the social media network XING of the company XING SE, Dammtorstraße 30, 20354 Hamburg, Germany.
When pages that use such functions are called up, data (IP address, browser data, date and time, cookies) are transmitted to XING, stored and evaluated.
If you have an XING account and are logged in, this information will be associated with your personal account and the information stored in it.
The privacy policy, what information XING collects and how they use it can be found at https://www.xing.com/privacy/.