privacy

Privacy Statement

This data protection declaration clarifies the type, scope and purpose of the collection and use of data from visitors and users (hereinafter collectively referred to as "user") by Hafo GmbH (hereinafter "provider") as the body responsible for data protection.

If you have any questions about data protection, please email us at office@hafo.co.at.

Contents
1. Objective and responsible body
2. Basic information on data processing
3. Processing of personal data
4. Collection of access data
5. Cookies & range measurement
6. Google Analytics
7. Integration of services and content from third parties
8. User rights and deletion
9. Changes to the privacy policy

1. OBJECTIVE AND RESPONSIBLE BODY
This data protection declaration clarifies the type, scope and purpose of the processing (including collection, processing and use, as well as obtaining consent) of personal data within our online offer and the websites, functions and content associated with it (hereinafter collectively referred to as “online offer” or “Website”). The dprivacy statement applies regardless of the domains, systems, platforms and devices used (e.g. desktop or mobile) on which the online offer is executed.

The provider of the online offer and the body responsible for data protection is Hafo GmbH, Waidhofen an der Ybbs (hereinafter referred to as “provider”, “we” or “us”). For the contact options, we refer to our imprint

The term “user” includes all customers and visitors to our online offer. The terminology used, e.g. “Users” are to be understood as gender-neutral.

2. BASIC INFORMATION ON DATA PROCESSING
We only process users' personal data in compliance with the relevant data protection regulations in accordance with the requirements of data economy and data avoidance. This means that the data of the users will only be processed if there is legal permission, in particular if the data is necessary for the provision of our contractual services and online services, or is required by law or if consent is given.

We take organizational, contractual and technical security measures in accordance with the state of the art to ensure that the provisions of data protection laws are complied with and so that the data processed by us is protected against accidental or intentional manipulation, loss, destruction or against access by unauthorized persons protect.

If content, tools or other means from other providers (hereinafter collectively referred to as “third-party providers”) are used within the scope of this data protection declaration and their registered office is abroad, it can be assumed that data will be transferred to the home countries of the third-party providers . The transmission of data to third countries takes place either on the basis of a legal permission, the consent of the user or special contractual clauses that guarantee a legally required security of the data.

3. PROCESSING OF PERSONAL DATA
In addition to the use expressly mentioned in this data protection declaration, the personal data are processed for the following purposes on the basis of legal permits or user consent:
- The provision, execution, maintenance, optimization and securing of our services, services and user services;
- Ensuring effective customer service and technical support.

We only transfer user data to third parties if this is necessary for billing purposes (e.g. to a payment service provider) or for other purposes if these are necessary to fulfill our contractual obligations towards users (e.g. address information to suppliers).

When contacting us (via contact form or email), the user's information is stored for the purpose of processing the request and in the event that follow-up questions arise.
Personal data will be deleted provided that they have served their intended purpose and there are no storage obligations to prevent deletion.

4. Collection of access data
We collect data about every access to the server on which this service is located (so-called server log files). The access data include the name of the website accessed, file, date and time of access, amount of data transferred, notification of successful access, browser type and version, the user's operating system, referrer URL (the previously visited page), IP address and the requesting provider .

Viewing this online offer is also possible with the exclusion of cookies. If users do not want cookies to be stored on their computer, they are asked to deactivate the corresponding option in the system settings of their browser. Stored cookies can be deleted in the system settings of the browser. The exclusion of cookies can lead to functional restrictions of this online offer.

5. COOKIES & REICHWEITENMESSUNG
Cookies sind Informationen, die von unserem Webserver oder Webservern Dritter an die Web-Browser der Nutzer übertragen und dort für einen späteren Abruf gespeichert werden. Über den Einsatz von Cookies im Rahmen pseudonymer Reichweitenmessung werden die Nutzer im Rahmen dieser Datenschutzerklärung informiert.

Die Betrachtung dieses Onlineangebotes ist auch unter Ausschluss von Cookies möglich. Falls die Nutzer nicht möchten, dass Cookies auf ihrem Rechner gespeichert werden, werden sie gebeten die entsprechende Option in den Systemeinstellungen ihres Browsers zu deaktivieren. Gespeicherte Cookies können in den Systemeinstellungen des Browsers gelöscht werden. Der Ausschluss von Cookies kann zu Funktionseinschränkungen dieses Onlineangebotes führen.

There is the possibility of many online advertising cookies from companies via the US website http://www.aboutads.info/choices or the EU website http://www.youronlinechoices.com/uk/your-ad -choices / manage.

5. COOKIES & RANGE MEASUREMENT
Cookies are information that is transmitted from our web server or third-party web servers to the user's web browser and stored there for later retrieval. Users are informed about the use of cookies in the context of pseudonymous range measurement in the context of this data protection declaration.

We only use Google Analytics with activated IP anonymization. This means that the IP address of the user is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there.

The IP address transmitted by the user's browser is not merged with other Google data. Users can prevent the storage of cookies by setting their browser software accordingly; Users can also prevent Google from collecting the data generated by the cookie and relating to their use of the online offer and from processing this data by Google by downloading and installing the browser plug-in available under the following link: http: // tools.google.com/dlpage/gaoptout?hl=de.

You can find further information on the use of data for advertising purposes by Google, setting and objection options on the Google website: https://www.google.com/intl/de/policies/privacy/partners (“Use of data by Google when using websites or apps from our partners ”), http://www.google.com/policies/technologies/ads (“ Use of data for advertising purposes ”), http://www.google.de/settings/ads (“ Manage information that Google used to show you advertisements ”) and http://www.google.com/ads/preferences (“ Determine which advertisements Google shows you ”).

7. INCLUDING THIRD PARTY SERVICES AND CONTENT
It may happen that content or services from third-party providers, such as city maps or fonts from other websites, are integrated into our online offer. The integration of content from third-party providers always presupposes that the third-party provider perceives the IP address of the user, since without the IP address they could not send the content to the user's browser. The IP address is therefore required to display this content. Furthermore, the providers of third-party content can set their own cookies and process user data for their own purposes. User profiles of the users can be created from the processed data. We will use this content as sparingly as possible and avoid data, and choose reliable third-party providers with regard to data security.

The following illustration provides an overview of third-party providers and their content, along with links to their data protection declarations, which provide further information on the processing of data and, in part. already mentioned here, options to object (so-called opt-out) include:

– Externe Schriftarten von Google, Inc., https://www.google.com/fonts (“Google Fonts”). Die Einbindung der Google Fonts erfolgt durch einen Serveraufruf bei Google (in der Regel in den USA). Datenschutzerklärung: https://www.google.com/policies/privacy/, Opt-Out: https://www.google.com/settings/ads/.

- Maps of the “Google Maps” service provided by third-party provider Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. Data protection declaration: https://www.google.com/policies/privacy/, opt-out: https://www.google.com/settings/ads/.

- Videos from the “YouTube” platform of the third-party provider Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. Data protection declaration: https://www.google.com/policies/privacy/, opt-out: https://www.google.com/settings/ads/.

8. USER RIGHTS AND DELETION OF DATA
Users have the right to request information free of charge about the personal data that we have stored about them.
In addition, users have the right to correct inaccurate data, revoke their consent, block and delete their personal data, as well as the right to file a complaint with the responsible supervisory authority in the event that illegal data processing is accepted.

The data stored by us will be deleted as soon as they are no longer required for their intended purpose and the deletion does not conflict with any statutory retention requirements.

9. CHANGES TO THE PRIVACY POLICY
We reserve the right to change the data protection declaration in order to adapt it to changes in the legal situation or in the event of changes to the service and data processing. However, this only applies to explanations of data processing. If user consent is required or parts of the data protection declaration contain provisions of the contractual relationship with the users, the changes will only be made with the consent of the user.
Users are asked to inform themselves regularly about the content of the data protection declaration.

Hotjar privacy policy
On this website we use Hotjar from the company Limited (Level 2, St Julian’s Business Center, 3, Elia Zammit Street, St Julian’s STJ 1000, Malta) to statistically evaluate visitor data. Hotjar is a service that analyzes the behavior and feedback of users on websites through a combination of analysis and feedback tools. Hotjar-based websites have integrated a tracking code on their websites, which is transmitted to our servers located in Ireland (EU). This tracking code contacts the Hotjar servers and sends a script to the computer or device that you use to access the Hotjar-based website. The script collects certain data related to the interaction of the user with the corresponding website. This data is then sent to Hotjar's servers for processing.

You can find more details on the data protection guideline and which data is collected by Hotjar in what way at https://www.hotjar.com/legal/policies/privacy.

Deaktivierung von Hotjar
Falls Sie nicht möchten, dass Hotjar Ihre Daten erhebt, können Sie den Hotjar Opt Out aktivieren. Sie haben dort die Möglichkeit, durch einen einfachen Klick auf den roten Hotjar deaktivieren Button, die Erhebung von Daten durch Hotjar zu deaktivieren oder wieder zu aktivieren. Achtung: Das Löschen von Cookies, die Nutzung des Inkognito/Privatmodus ihres Browsers, oder die Nutzung eines anderen Browsers führt dazu, dass wieder Daten erhoben werden.