We are committed to protecting the privacy of users of our website. This Privacy Policy therefore sets out in detail what personal data are processed when you use our website and how we protect that data. Data is processed on the basis of the applicable statutory provisions.

A) Visiting our website

1. When you visit our website, we temporarily save and process the following (log) data:

• IP address of the accessing computer
• Date and time of access
• Name and URL of the file accessed
• Volume of data transferred
• Notification of whether access was successful (HTTP status code)
• Identifiers of the browser and operating system used

The data recorded are stored for three days. The legal basis for the storage of these data is our legitimate interest, as they serve in particular to ensure the smooth operation of the server and system security (Art. 6 (1)(f) GDPR). IP addresses are only evaluated in the event of attacks on our network infrastructure.

2. We shall not disclose data that are saved following access to our website to third parties without your consent unless we are required to do so by law or by a court order, or disclosure is necessary for the purposes of investigation or criminal prosecution in the event of attacks on our Internet infrastructure. Data shall not be disclosed for any other non-commercial purposes or for commercial ends.

3. We do not carry out all processing of the log files and cookies saved ourselves; we also use the services of reliable, carefully selected partners (= Processors), namely Outline Pictures e.U. Our partners also ensure the security of your data with suitable technical and organizational measures that correspond to the state of the art. Our partners are not authorised to use the personal data provided to them for anything but the specified purposes.

Your personal data are also transferred to Google Inc. in the USA:

• if you view a video embedded on our site with a YouTube plugin
• if geographical information is displayed using a map from “Google Maps”
• When figures are shown graphically in the form of a “Google Chart”

Google Inc. is certified in accordance with the EU-US Privacy Shield framework. The certificate can be viewed online at https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI. You can find more information on data processing by Google in the Google privacy policy at: http://www.google.com/privacypolicy.html. Select the appropriate settings in the privacy centre to manage and protect your data.

4. Our website uses cookies in several places to make it more effective and user-friendly. Cookies are small text files that your browser saves on your computer. Data are collected and saved in anonymous or pseudonymised form only.
Our website uses the following cookies:

1. Technically necessary cookies: Cookies that are necessary for the functionality of the website and cannot be deactivated: The “session” cookie stores your personal session ID over several page views and is automatically deleted when you close your browser. The “cookies” cookie saves the cookie settings you have made.
2. Functional cookies: Cookies that enhance the usability of the website and thus are highly recommended: The “language” cookie saves the language in which you were viewing our website. At some points on our website we embed videos from YouTube, maps from Google Maps as well as charts from Google Charts. Among other things, Google stores a unique user ID, information about your Google account and details on the use of Google services in cookies.

In the Cookie Settings on our website and in your browser settings, you can specify whether or not to allow cookies of any type. You can prevent cookies from being installed on your device by changing your settings; however, please be aware that if you do so, you may not have full access to all the functions of our website.

B) Rights of data subjects

Please note that you also have the following rights relating to your personal data as a data subject pursuant to the GDPR:

• The right to information from the Controller on the personal data held concerning you pursuant to Art 15 GDPR
• The right to rectification pursuant to Art 16 GDPR
• The right to erasure pursuant to Art 17 GDPR
• The right to restriction of processing pursuant to Art 18 GDPR
• The right to data portability pursuant to Art 20 GDPR
• The right to object to processing pursuant to Art 21 GDPR

You also have the right to lodge a complaint with the data protection authority. Please also see the website of the data protection authority, which can be accessed here: https://www.dsb.gv.at/

C) Links to other providers
Our website may contain links to other providers and links to our social media pages. This Privacy Policy applies to websites and services that belong to us and are operated by us. We have no control over external pages or content to which our services provide links. We are not responsible for ensuring that such providers or the operators of the social media platforms comply with statutory data protection provisions.

D) Technical data protection
We employ technical and organizational measures to safeguard the personal data concerning you that are processed by us from accidental and deliberate manipulation, loss, destruction and access by unauthorized persons. We are continuously improving our security measures in accordance with technological developments.

E) Scope and validity of this Privacy Policy
This Privacy Policy applies with immediate effect and supersedes all previous privacy policies. We reserve the right to amend this Privacy Policy if reasonable or necessary.