Privacy Policy

Responsible Party:
Mag. Katarina Schmidl
Brunnengasse 75/10
A-1160 Vienna
Austria
Email: mail@katarinaschmidl.net
Imprint: https://www.katarinaschmidl.net/wordpress/imprint


Overview of Data Processing
The following overview summarizes the types of data processed, the purposes of their processing, and the affected individuals.


Types of Data Processed:

  • Contact details
  • Content data
  • Usage data

Categories of Affected Individuals:

  • Users

Purposes of Processing:

  • Responding to inquiries and communication
  • Security measures
  • Feedback
  • Marketing
  • Providing our online offerings and enhancing user-friendliness
  • IT infrastructure

Legal Basis for Processing
Below is an overview of the legal bases under the GDPR upon which we process personal data. Please note that national data protection regulations in your country or our country of residence may apply in addition to the provisions of the GDPR. If more specific legal bases apply in a particular case, we will inform you in the privacy policy.

  • Legitimate interests (Art. 6 para. 1 sentence 1 lit. f) GDPR): Processing is necessary to protect the legitimate interests of the data controller or a third party unless those interests are overridden by the interests or fundamental rights and freedoms of the data subject that require the protection of personal data.

In addition to the provisions of the General Data Protection Regulation (GDPR), national data protection regulations apply in Austria, including the Federal Act for the Protection of Natural Persons in the Processing of Personal Data (Data Protection Act – DSG). The DSG includes special provisions regarding the right to access, rectify, or delete data, the processing of specific categories of personal data, processing for other purposes, and the transmission and automated decision-making in individual cases.


Security Measures
We take appropriate technical and organizational measures to ensure a level of security appropriate to the risk, considering the state of the art, implementation costs, the nature, scope, context, and purposes of processing, and the varying likelihood and severity of risks to individuals’ rights and freedoms.

Measures include securing the confidentiality, integrity, and availability of data by controlling physical and electronic access to data and the access, input, transmission, availability, and separation of data. We also have procedures in place to ensure the exercise of individuals‘ rights, data deletion, and responses to data breaches. We consider data protection when developing or selecting hardware, software, and procedures based on the principles of data protection by design and default.


SSL Encryption (https): To protect your data transmitted via our online offerings, we use SSL encryption. You can recognize encrypted connections by the prefix „https://“ in your browser’s address bar.


Transfer of Personal Data
In the course of our processing of personal data, it may happen that data is transmitted to other entities, companies, legally independent organizational units, or persons, or disclosed to them. Recipients of this data may include IT service providers or providers of services and content that are integrated into a website. In such cases, we observe legal requirements and enter into agreements with recipients of your data to protect your data.


Data Processing in Third Countries
If we process data in a third country (i.e., outside the European Union (EU) or the European Economic Area (EEA)), or if this occurs within the context of using services of third parties or disclosing or transmitting data to other persons, entities, or companies, we do so only in accordance with legal requirements.


Deletion of Data
Data processed by us is deleted in accordance with legal requirements, as soon as the consent allowing their processing is revoked or other permissions cease to apply (e.g., when the purpose for processing the data no longer exists or they are no longer necessary for that purpose). If the data is not deleted because it is required for other legally permissible purposes, its processing will be limited. This applies, for example, to data that must be retained for commercial or tax reasons, or data that must be retained to assert, exercise, or defend legal claims or protect the rights of another natural or legal person.


Use of Cookies
Cookies are small text files or other types of storage markers that store information on devices and read information from devices. For example, cookies can store the login status of a user account, the contents of a shopping cart in an online shop, visited content, or used functions of an online offering. Cookies can also be used for various purposes, such as ensuring the functionality, security, and comfort of online services and creating analyses of visitor traffic.


Provision of Online Offerings and Web Hosting
We process users‘ data to provide them with our online services. To this end, we process the users‘ IP addresses, which are necessary to transmit the content and features of our online services to their browsers or devices.

  • Processed data types: Usage data (e.g., visited websites, interest in content, access times);
  • Affected individuals: Users (e.g., website visitors, users of online services).
  • Purposes of processing: Providing our online offerings and enhancing user-friendliness; IT infrastructure (operation and provision of IT systems and devices, such as computers and servers); Security measures.
  • Legal basis: Legitimate interests (Art. 6 para. 1 sentence 1 lit. f) GDPR).

Changes and Updates to the Privacy Policy
We ask you to regularly review the content of our privacy policy. We adapt the privacy policy as soon as changes in data processing make this necessary. We will inform you when changes require your cooperation (e.g., consent) or other individual notification.


Rights of Affected Individuals
You have the right to access, rectify, or delete your data, as well as to restrict its processing and to data portability under the GDPR. You also have the right to lodge a complaint with a supervisory authority.


Created with Datenschutz-Generator.de by RA Dr. Thomas Schwenke