Privacy policy

Declaration on the duty to inform (privacy policy)

The protection of your personal data is of particular concern to us. We therefore process your data exclusively on the basis of the statutory provisions for the protection of personal data, in particular the Austrian Data Protection Act (DSG, 2018), the General Data Protection Regulation (GDPR, 2016) and the Telecommunications Act (TKG, 2003). In this data protection information, we inform you about the most important aspects of data processing on our website.

Personal data

The subject of data protection is personal data. According to Art. 4 (1) GDPR, this includes all information relating to an identified or identifiable natural person.

The personal data processed by us includes:

Master data (e.g. name, address, contact details, etc.)
Usage data (e.g. referral pages, access times, etc.)
Meta/communication data (e.g. device information, IP addresses in anonymized form, etc.)
Billing data (e.g. invoice details, bank details, etc.)

Purpose limitation, legal basis and storage duration

Your personal data is collected, stored, processed and used exclusively for contract processing, to improve our website (customer service) and for advertising purposes.

Data processing is carried out on the basis of the legal provisions of § 96 para. 3 TKG and Art. 6 para. 1 lit a (consent) and/or f (legitimate interest) GDPR.

We do not store your data for longer than is necessary to achieve the purposes mentioned in point 1 and beyond that in accordance with the statutory retention and documentation obligations and until the assertion, exercise or defense of legal claims.

Contact form

If you contact us by e-mail or using the form on the website, the data you provide will be stored by us for six months for the purpose of processing the inquiry and in the event of follow-up questions. We will not pass on this data without your consent.

Cookies

Our website uses so-called cookies. These are small data packets that are stored on your end device with the help of the browser. They do not cause any damage. We use cookies to make our website more user-friendly. Some cookies remain stored on your device until you delete them. They enable us to recognize your browser on your next visit.

When you visit the website for the first time, a banner is displayed asking you to accept or reject cookies and external content. If you reject cookies, the functionality of our website may be restricted.

Web analysis

Use of Google Analytics

Our website uses functions of the web analysis service Google Analytics, operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Cookies are used for this purpose, which enable your use of the website to be analyzed. The information generated in this way is sent to the provider's server in the USA and stored there. Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf.

You can prevent this by configuring your browser so that no cookies are stored. By using this website, you consent to the processing of data about you by Google in the manner and for the purposes set out above.

You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de

IP anonymization is used on this website. Users' IP addresses are recorded, but pseudonymized within the member states of the EU and the European Economic Area by immediately deleting the last 8 bits. This means that only a rough localization is possible.

We have concluded a corresponding contract with the provider for commissioned data processing. The relationship with the web analytics provider is based on standard contractual clauses of the European Commission.

Further information and the applicable data protection provisions of Google can be found under the following links:

Google Analytics is explained in more detail at https://www.google.com/intl/de_de/analytics/

Use of Google reCaptcha

We use the Google reCaptcha service to determine whether a human or a computer is making a specific entry in our contact or newsletter form. Google uses the following data to check whether you are a human or a computer IP address of the end device used, the website that you visit on our site and on which the captcha is integrated, the date and duration of the visit, the identification data of the browser and operating system type used, Google account if you are logged in to Google, mouse movements on the reCaptcha areas and tasks in which you have to identify images. The legal basis for the data processing described is Article 6(1)(f) of the General Data Protection Regulation. We have a legitimate interest in this data processing to ensure the security of our website and to protect us from automated entries (attacks).

Social plugins

Privacy policy for the use of Instagram

Functions of the social network Instagram are integrated on our website. The functions are offered by Facebook Inc, 1601 South California Avenue, Palo Alto, CA 94025, USA. If you are logged into your Instagram account, you can link the content of our pages to your Instagram profile by clicking on the Instagram button. This allows Instagram to associate your visit to our pages with your user account. We would like to point out that, as the provider of the pages, we have no knowledge of the content of the transmitted data or its use by Instagram. Further information on this can be found in Instagram's privacy policy at https://help.instagram.com/519522125107875.

If you do not want Instagram to be able to associate your visit to our pages with your Instagram user account, please log out of your Instagram user account.

Use of links

If the website contains links to third-party websites or incorporates content from other websites, we have no influence on this and cannot check that other providers comply with the applicable data protection and data security legislation.

Disclosure of personal data to third parties

In order to provide this website and for the aforementioned purposes, your data may be passed on to technical service providers who support us (e.g. website hosting and support), which we have of course carefully selected and commissioned in writing. These service providers are bound by our instructions and are regularly monitored by us. Otherwise, your data will only be passed on to other third parties if this is expressly stated in this data protection notice or if we are legally obliged to do so.

The disclosure of personal data to state institutions and authorities is carried out in accordance with the statutory provisions.

In other cases, we will inform you if personal information is to be passed on to third parties and thus give you the opportunity to give your consent.

Our newsletter

You can register for our newsletter on the website using the double opt-in procedure. After registering, you will receive an e-mail asking you to confirm your registration. It is not possible to send our newsletter without providing this data. You can unsubscribe from the newsletter by clicking on the unsubscribe link at the end of each newsletter.

Other information

Data protection policy for applications

The applicant agrees that the personal data provided and transmitted by him/her in paper or electronic form may be used and processed by our company for specific purposes as part of the overall application process. This personal data is processed exclusively for the purpose of processing the application or applicant selection.

Only the persons responsible for filling vacancies have access to stored personal data within our company. Within the scope of the intended use, these persons ensure that the confidentiality of the data is maintained in accordance with the GDPR. The data is stored on the company's internal servers. Your data is protected against unauthorized access by physical protection measures on the server.

Your data will be stored for the duration of the application process and for a maximum of one year for record-keeping purposes if no employment relationship is established. As soon as an employment relationship is established, we will retain your data for the duration of your employment and delete it after your employment has ended or after the statutory retention obligations have expired

Data security

We use technical and organizational security measures to protect the stored personal data, in particular against accidental or intentional manipulation, loss, destruction or against attacks by unauthorized third parties. Our security measures are continuously improved in line with technological developments. When using our website, your personal data is encrypted using SSL/TLS technology to prevent access by unauthorized third parties.

Your rights

Right to information (Art 15 GDPR): You have the right to information about the data stored about you at any time and to the information listed in detail in Art 15 GDPR.
Right to rectification (Art 16 GDPR): You have the right to obtain from us without undue delay the rectification of inaccurate personal data concerning you and, where applicable, the completion of incomplete personal data.
Right to erasure (Art. 17 GDPR): You have the right to obtain from us the erasure of personal data concerning you without undue delay where one of the grounds listed in detail in Art 17 GDPR applies.
Right to restriction (Art. 18 GDPR): You have the right to demand that we restrict processing if one of the conditions listed in Art 18 GDPR is met.
Right to data portability (Art 20 GDPR): You have the right to receive from us the data concerning you that you have provided to us in a structured, commonly used and machine-readable format. You can also transmit this data to other bodies or have it transmitted by us.
Right to object (Art. 21 GDPR): You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you. We will then no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defense of legal claims.

Further information and contacts

If you have any questions about this privacy policy, please contact us.

The contact details are:

Isabella and Bernhard Stemberger
Bruggen 49, St. Veit im Defereggental, A-9962
Phone: +43664 216 13 99
E-Mail: info@biohof-stemberger.at

We reserve the right to change this privacy policy at any time with effect for the future.