Data protection

The controller responsible for data processing is

Dr. Robert Bauder, MSc MSc & Partner

DLZ
Jochbergerstrasse 98
A-6370 Kitzbühel

Tel. +43-5356-66669
Fax +43-5356-66669-66

office@zahn-kitz.at
www.zahn-kitz.at

Thank you for your interest in our website. The protection of your privacy is very important to us. Below you will find detailed information on how we handle your data.

Access data and hosting

You can visit our website without providing any personal information. Each time a website is accessed, the web server only automatically saves a so-called server log file, which contains, for example, the name of the requested file, your IP address, the date and time of access, the amount of data transferred and the requesting provider (access data) and documents the access.
This access data is evaluated exclusively for the purpose of ensuring trouble-free operation of the site and improving our offer. In accordance with Art. 6 para. 1 sentence 1 lit. f GDPR, this serves to safeguard our legitimate interests in the correct presentation of our offer, which predominate in the context of a balancing of interests. All access data will be deleted no later than seven days after the end of your visit to our website.

Hosting services by a third-party provider

As part of processing on our behalf, a third-party provider provides us with the services for hosting and displaying the website. All data collected as part of the use of this website or in the forms provided for this purpose in the online store as described below are processed on its servers. Processing on other servers only takes place within the scope described here. This service provider is located within a country of the European Union or the European Economic Area.

Data collection and use for contract processing, making contact

We collect personal data when you provide it to us as part of your order or when you contact us (e.g. via contact form or e-mail). Mandatory fields are marked as such, as in these cases we need the data to process the contract or to process your contact and you cannot complete the order or send the contact without providing it. Which data is collected can be seen from the respective input forms.
We use the data provided by you in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR for contract processing and processing your inquiries. After completion of the contract, your data will be restricted for further processing and deleted after expiry of any retention periods under tax and commercial law, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this declaration.

Data transfer

If you use the contact form to contact us, the data you voluntarily enter there (name, email address, message) will be processed by us in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR for the purpose of answering the inquiry as part of contract processing. In addition, the use of this tool serves to safeguard our legitimate interests in effective and improved customer communication pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR, which predominate in the context of a balancing of interests. The data will then be deleted.
As part of processing on our behalf, the third-party provider Hubspot, Inc. provides us with the services for the provision of the customer database (CRM). All data collected in the course of using the chat tool is processed on its servers.
Hubspot, Inc. is based in the USA and is certified under the EU-US Privacy Shield. Based on this agreement between the USA and the European Commission, the latter has established an adequate level of data protection for companies certified under the Privacy Shield.

E-mail newsletter

Email advertising with registration for the newsletter
If you register for our newsletter, we will use the data required for this or separately provided by you to regularly send you our email newsletter based on your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR.
You can unsubscribe from the newsletter at any time and can do so either by sending a message to the contact option described below or via a link provided for this purpose in the newsletter. After unsubscribing, we will delete your email address from the recipient list, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this declaration.

Email advertising without subscribing to the newsletter and your right to object

If we receive your e-mail address in connection with the sale of a product or service and you have not objected to this, we reserve the right to regularly send you offers for similar products to those you have already purchased from our range by e-mail on the basis of Section 7 (3) UWG. This serves to safeguard our legitimate interests, which predominate in the context of a balancing of interests, in a promotional approach to our customers.
You can object to this use of your e-mail address at any time by sending a message to the contact option described below or via a link provided for this purpose in the advertising e-mail, without incurring any costs other than the transmission costs according to the basic rates.
The newsletter is sent by a service provider to whom we pass on your e-mail address for this purpose as part of processing on our behalf. This service provider is located within a country of the European Union or the European Economic Area.

Cookies and web analysis

To make your visit to our website more engaging and to enable the use of certain features, to display relevant products, or for market research purposes, we use so-called cookies on various pages. This serves to safeguard our legitimate interests—which prevail following a balancing of interests—in optimizing the presentation of our offerings in accordance with Article 6(1)(f) of the GDPR. Cookies are small text files that are automatically stored on your device. Some of the cookies we use are deleted at the end of the browser session—that is, when you close your browser (so-called session cookies). Other cookies remain on your device and allow us to recognize your browser the next time you visit (persistent cookies). You can find the storage duration in the overview within your web browser’s cookie settings. You can configure your browser to notify you when cookies are set and decide on a case-by-case basis whether to accept them, or to block the acceptance of cookies in specific cases or generally. Each browser manages cookie settings differently. This is described in each browser’s Help menu, which explains how you can change your cookie settings. You can find these for the respective browsers at the following links:

Internet Explorer™
Safari™
Chrome™
Firefox™
Opera™
If you do not accept cookies, the functionality of our website may be limited.

If you have given your consent in accordance with Article 6(1)(a) of the GDPR, this website also uses the so-called DoubleClick cookie for advertising purposes as part of its use of Google Analytics (see below), which enables your browser to be recognized when you visit other websites. The information automatically generated by the cookie regarding your visit to this website is generally transmitted to a Google server in the United States and stored there. The IP address is truncated prior to transmission within the member states of the European Union or in other contracting states of the Agreement on the European Economic Area by activating IP anonymization on this website. Only in exceptional cases is the full IP address transmitted to a Google server in the United States and truncated there. The anonymized IP address transmitted by your browser as part of Google Analytics is not combined with other data held by Google.

Google will use this information to compile reports on website activity and to provide other services related to website usage. Google may also transfer this information to third parties where required by law or where such third parties process the data on Google’s behalf. Once the purpose for which the data was collected no longer applies and we have ceased using Google DoubleClick, the data collected in this context will be deleted.

Google DoubleClick is a service provided by Google Ireland Limited, a company incorporated and operating under Irish law, with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland. (www.google.de).
To the extent that information is transferred to and stored on Google’s servers in the United States, the U.S. company Google LLC is certified under the EU-U.S. Privacy Shield. A current certificate can be viewed here. Based on this agreement between the United States and the European Commission, the latter has determined that companies certified under the Privacy Shield provide an adequate level of data protection.

You can revoke your consent at any time with future effect by disabling the DoubleClick cookie via this link. In addition, you can learn more about the use of cookies and adjust your settings through the Digital Advertising Alliance. Finally, you can configure your browser to notify you when cookies are set and allow you to decide on a case-by-case basis whether to accept them, or to block cookies in specific cases or generally. If you do not accept cookies, the functionality of our website may be limited.

Use of Google (Universal) Analytics for web analysis

To the extent that you have given your consent pursuant to Article 6(1), first sentence, letter a of the GDPR, this website uses Google (Universal) Analytics for the purpose of website analytics. The web analytics service is provided by Google Ireland Limited, a company incorporated and operating under Irish law, with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland. (www.google.de). Google (Universal) Analytics uses methods that enable an analysis of your use of the website, such as cookies. The information automatically collected about your use of this website is generally transmitted to a Google server in the United States and stored there. By enabling IP anonymization on this website, the IP address is truncated within the member states of the European Union or in other signatory states to the Agreement on the European Economic Area prior to transmission. Only in exceptional cases is the full IP address transmitted to a Google server in the United States and truncated there. The anonymized IP address transmitted by your browser as part of Google Analytics is generally not combined with other data held by Google. Once the purpose for which the data was collected has been fulfilled and we have ceased using Google Analytics, the data collected in this context will be deleted.

To the extent that information is transferred to and stored on Google’s servers in the United States, the U.S. company Google LLC is certified under the EU-U.S. Privacy Shield. A current certificate can be viewed here. Based on this agreement between the United States and the European Commission, the latter has determined that companies certified under the Privacy Shield provide an adequate level of data protection.

You can revoke your consent at any time with future effect by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de. This prevents the collection of data generated by the cookie and related to your use of the website (including your IP address), as well as the processing of this data by Google.

As an alternative to the browser plugin, you can click this link to prevent Google Analytics from tracking your activity on this website in the future. This will place an opt-out cookie on your device. If you delete your cookies, you will be asked to give your consent again.

Online marketing

Google AdSense

Our website uses Google AdSense to display ads from third-party providers and advertising networks. These ads appear in various locations on this website. If you have given us your consent for this pursuant to Art. 6(1)(a) of the GDPR, Google will set the so-called DoubleClick cookie as part of the integration of Google AdSense.
This enables the display of interest-based advertising through the automatic assignment of a pseudonymous user ID, which is used to determine interests based on visits to this and other websites. Once the purpose has been fulfilled and we have ceased using Google AdSense, the data collected in this context will be deleted.
Google AdSense is a service provided by Google Ireland Limited, a company incorporated and operating under Irish law with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland (www.google.de).
To the extent that information is transferred to and stored on Google’s servers in the United States, the U.S. company Google LLC is certified under the EU-U.S. Privacy Shield. A current certificate can be viewed here: https://www.privacyshield.gov/list. Based on this agreement between the United States and the European Commission, the latter has determined that companies certified under the Privacy Shield provide an adequate level of data protection.
You can revoke your consent at any time with future effect by disabling the DoubleClick cookie via this link. In addition, you can learn more about the use of cookies and adjust your settings through the Digital Advertising Alliance.

Google Ads Remarketing

We use Google Ads to advertise this website in Google search results and on third-party websites. To do this, when you visit our website, Google sets a so-called remarketing cookie, which automatically enables interest-based advertising using a pseudonymous cookie ID and based on the pages you have visited. This serves to safeguard our legitimate interests—which prevail following a balancing of interests—in the optimal marketing of our website, in accordance with Article 6(1)(f) of the GDPR. Once the purpose has been fulfilled and we have ceased using Google Ads Remarketing, the data collected in this context will be deleted.
Any further data processing will only take place if you have consented to Google linking your web and app browsing history to your Google Account and using information from your Google Account to personalize the ads you see on the web. In this case, if you are signed in to Google while visiting our website, Google will use your data in conjunction with Google Analytics data to create and define audience lists for cross-device remarketing. To do this, Google temporarily links your personal data with Google Analytics data to form target audiences.
Google Ads is a service provided by Google Ireland Limited, a company incorporated and operating under Irish law, with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland (www.google.de).
To the extent that information is transferred to and stored on Google’s servers in the United States, the U.S. company Google LLC is certified under the EU-U.S. Privacy Shield. A current certificate can be viewed here. Based on this agreement between the U.S. and the European Commission, the latter has determined that companies certified under the Privacy Shield provide an adequate level of data protection.
You can disable the remarketing cookie via this link. In addition, you can learn more about the use of cookies and adjust your settings at the Digital Advertising Alliance.

HubSpot Live Chat Tool

If you use the live chat tool to contact us, the data you voluntarily enter there (name, email address, message) will be processed by us in accordance with Article 6(1), sentence 1, subparagraph (b) of the GDPR for the purpose of responding to your inquiry as part of contract fulfillment. Furthermore, the use of this tool serves to safeguard our legitimate interests—which prevail following a balancing of interests—in effective and improved customer communication in accordance with Article 6(1)(f) of the GDPR. The data is subsequently deleted.
As part of processing on our behalf, the third-party provider Hubspot, Inc. provides us with services to make the live chat tool available. All data collected through the use of the chat tool is processed on its servers.
HubSpot, Inc. is based in the United States and is certified under the EU-U.S. Privacy Shield. Based on this agreement between the United States and the European Commission, the latter has determined that companies certified under the Privacy Shield provide an adequate level of data protection.

Google Maps

This website uses Google Maps to visually display geographic information. Google Maps is a service provided by Google Ireland Limited, a company incorporated and operating under Irish law, with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland (www.google.de). This serves to safeguard our legitimate interests—which prevail following a balancing of interests—in the optimized presentation of our offerings and in ensuring easy access to our locations, in accordance with Article 6(1)(f) of the GDPR.
When using Google Maps, Google transmits and processes data regarding website visitors’ use of the Maps functions, which may include, in particular, the IP address and location data. We have no influence over this data processing.
To the extent that information is transferred to and stored on Google’s servers in the United States, the U.S. company Google LLC is certified under the EU-U.S. Privacy Shield. A current certificate can be viewed here. Based on this agreement between the U.S. and the European Commission, the latter has determined that companies certified under the Privacy Shield provide an adequate level of data protection.
To disable the Google Maps service and thereby prevent data transmission to Google, you must disable the JavaScript function in your browser. In this case, Google Maps cannot be used, or can only be used to a limited extent.
Further information about data processing by Google can be found in Google’s Privacy Policy. The Terms of Service for Google Maps contain detailed information about the map service.
Data processing is carried out on the basis of an agreement between joint controllers pursuant to Art. 26 of the GDPR, which you can view here.

Social Media

Use of social plugins from Facebook and Instagram via the Shariff solution.

Our website uses social media buttons from social networks.
This serves to safeguard our legitimate interests—which, following a balancing of interests, take precedence—in the optimal marketing of our offerings in accordance with Article 6(1), sentence 1, letter f of the GDPR. To enhance the protection of your data when you visit our website, these buttons are not integrated as plugins without restriction, but are embedded in the page solely via HTML links. This integration ensures that when you access a page on our website that contains such buttons, no connection is yet established with the servers of the respective social network provider.
When you click one of the buttons, a new browser window will open and take you to the respective service provider’s page, where you can (after entering your login credentials, if necessary) click the “Like” or “Share” button, for example.
For information on the purpose and scope of data collection, as well as the further processing and use of the data by the providers on their websites, contact information, and your related rights and privacy settings, please refer to the providers’ privacy policies:
https://www.facebook.com/policy.php
https://help.instagram.com/155833707900388
https://policies.google.com/privacy

Our online presence on Facebook and Instagram

Our presence on social networks and platforms is intended to facilitate better, active communication with our customers and prospective customers. We use these platforms to provide information about our products and current special promotions. When you visit our social media profiles, your data may be automatically collected and stored for market research and advertising purposes. Using pseudonyms, this data is used to create so-called user profiles. These profiles may be used, for example, to display advertisements—both on and off the platforms—that are presumed to match your interests. Cookies are generally used on your device for this purpose. These cookies store visitor behavior and user interests. In accordance with Article 6(1)(f) of the GDPR, this serves to safeguard our legitimate interests—which prevail following a balancing of interests—in optimizing the presentation of our offerings and communicating effectively with customers and prospective customers. If you are asked by the respective social media platform operators for consent to data processing—for example, via a checkbox—the legal basis for the data processing is Article 6(1)(a) of the GDPR.
To the extent that the aforementioned social media platforms have their headquarters in the United States, the following applies: An adequacy decision by the European Commission is in place for the United States. This is based on the EU-U.S. Privacy Shield. A current certificate for the respective company can be viewed here.
For detailed information on the processing and use of data by the providers on their websites, as well as contact information, your rights in this regard, and settings to protect your privacy—in particular, opt-out options—please refer to the providers’ privacy policies linked below. If you still need assistance with this, please feel free to contact us.

Facebook: https://www.facebook.com/about/privacy/
Data processing is carried out on the basis of an agreement between joint controllers in accordance with Article 26 of the GDPR, which you can view here.
Further information on data processing in connection with visiting a Facebook fan page (information on Insights data) can be found here.
Instagram: https://help.instagram.com/519522125107875
Opt-out option:
Facebook: https://www.facebook.com/settings?tab=ads

Contact options and your rights

As a data subject, you have the following rights:

pursuant to Article 15 of the GDPR, the right to request information, to the extent specified therein, regarding your personal data processed by us;
pursuant to Article 16 of the GDPR, the right to request, without delay, the rectification of inaccurate personal data or the completion of your personal data stored by us;
Pursuant to Article 17 of the GDPR, you have the right to request the erasure of your personal data stored by us, unless further processing
to exercise the right to freedom of expression and information;
to comply with a legal obligation;
for reasons of public interest, or
is necessary to assert, exercise, or defend legal claims;
Pursuant to Article 18 of the GDPR, you have the right to request the restriction of the processing of your personal data, provided that
you dispute the accuracy of the data;
the processing is unlawful, but you object to its erasure;
we no longer need the data, but you need it to assert, exercise, or defend legal claims; or
you have objected to the processing pursuant to Article 21 of the GDPR;
pursuant to Article 20 of the GDPR, the right to receive your personal data that you have provided to us in a structured, commonly used, and machine-readable format, or to request that it be transmitted to another controller;
pursuant to Article 77 of the GDPR, the right to lodge a complaint with a supervisory authority. As a general rule, you may contact the supervisory authority at your usual place of residence, place of work, or our company headquarters.
If you have any questions regarding the collection, processing, or use of your personal data, or if you wish to request information, correction, restriction, or erasure of data, or to withdraw your consent or object to a specific use of your data, please contact us directly using the contact information provided in our legal notice. https://www.zahn-kitz.at/impressum/