Privacy policy
Thank you for visiting our website. The secure handling of your data is particularly important to us. We would therefore like to inform you in detail about the use of your data when you visit our website. However, there is actually nothing you really need to know. You have probably already read the data subject rights and the explanations about the newsletter or technically necessary processing operations everywhere.
I. Responsible body
The responsible body is Fink Brot R. Koch Ges.m.b.H Contact by mail at info@bilddichte.at. You can find our additional contact details in the imprint.
Please read this privacy notice carefully. You are hereby informed about the processing of personal data of persons using this website.
Personal data is any data by which you could be personally identified. These individual details include, for example, your name or your contact details, such as telephone number, address and e-mail address, but also your network address (IP address).
In the following, the EU's General Data Protection Regulation will be abbreviated as DSGVO. The official abbreviation is DS-GVO, but it is a bit more bulky.
II. What data is collected on this website?
1. Access data and log files
During the mere informational use of this website, i.e. if you do not register or otherwise transmit information to me, only such data is collected that your browser transmits to my server for technically necessary reasons. When you call up my website, the following data in particular is collected, which is technically necessary to display the website to you:
IP address (network address)
Address of the web page you came from
Address of the retrieved files (call address = URL)
Date and time of a call
as well as operating system and browser version of your terminal device (user agent)
Collecting data initially only means that we (usually actually only our server) can factually gain knowledge of this data. Collecting data does not mean that data is stored. However, of the data just mentioned, some are stored in log files without any reason. This does not include the IP address. At most, this is logged on an ad hoc basis, for example if so many accesses are made in a short period of time that it can be assumed that there has been misuse or an attack (e.g. denial of service).
If your network address were not transmitted to our server, it would not even know to whom to display the web page. This is analogous to a letter: If the sender is missing, the recipient cannot reply.
IP addresses are stored, if at all, only for specified purposes and for a specified duration. The duration is a maximum of five days, unless otherwise specified. The purposes are only those that are in our legitimate interest to ensure the operation of this website. This includes the defense against malicious attacks or excessive use of our offer.
When using this data, we do not draw any conclusions about your person. Rather, the information collected is only required for the following purposes:
Ensuring a smooth connection of the website
Ensuring comfortable use
Ensuring system security and stability
Other administrative purposes
The statistical evaluation of anonymized data sets is reserved. This means, for example: We would like to know which post on our website was called up how often.
The legal basis for my data processing is Art. 6 para. 1 f DSGVO. The legitimate interest follows in this respect from the purposes for data collection listed above. The data of server log files are always stored separately from any personal data provided by you. A combination is not possible.
2. Cookies
Cookies are used on this website to enable the use of certain functions and to make the visit of this website practicable, especially for administrators and editors.
A cookie stores information. A cookie is created when you visit a website and is stored on your terminal device (smartphone, notebook, tablet, desktop PC, etc.) via your browser. If you visit this website again, your browser sends the previously received cookie back to our website. Our website can evaluate the information obtained through this process. Cookies can, in particular, make it easier to navigate a website. Cookies are necessary in particular to enable the functionality of this website operation (as a legal basis, Art. 6 para. 1 f DSGVO is mentioned, the protection of the legitimate interests of the operator of this website - we use cookies only in agreement with Art. 5 para. 1 a DSGVO, i.e. in accordance with the principles of lawfulness, processing in good faith, transparency).
Unless they are technically necessary cookies (which are kept purely locally and are not further analyzed), you will be asked to consent to the setting of cookies.
This website stores a technically necessary session cookie (name: PHPSESSID) to ensure the functionality of the website. This cookie only ensures that optimized loading is possible when the website is accessed multiple times. The cookie contains a random string of characters that does not allow any conclusion about your person. This cookie becomes invalid after you have closed the website and can no longer be read.
The use of cookies serves our legitimate interest in an optimized presentation of our offer according to Art. 6 para. 1 f DSGVO, which is predominant in the context of a balancing of interests.
3. Hosting of this website
In the context of processing on our behalf, a third-party provider based within a country of the European Union provides us with the services for hosting and displaying the website and, for this purpose, provides infrastructure services, computing capacity, storage space and database services, maintenance services and security services. In doing so, we or our hosting provider process all data that accrue in the context of the use of our website. This is inventory data, content data, usage data, meta and communication data of interested parties and visitors to our online offer.
The processing is based on our legitimate interest in an efficient and secure provision of this online offer (Art. 6 para. 1 f DSGVO in conjunction with Art. 28 DSGVO).
4. Communication by e-mail
If you have a contact with us by mail, the collection of your e-mail address takes place for technically necessary reasons and thus out of legitimate interest. The same applies if we write to you and have received your e-mail address either from you or from a public source.
Your e-mail address and the content of your e-mail will not be disclosed to third parties, unless this is required by the occasion, requested by you or explicitly permitted or this results from another legal provision.
III. How long will your data be stored?
The data processed by me will be processed, deleted or their processing restricted by us in accordance with Art. 17 and Art. 18 DSGVO. As a matter of principle, we only store your personal data, which is generated during the use of this website, as long as this is necessary for the above-mentioned purposes. However, if the deletion conflicts with legal retention obligations, the processing of the data will only be restricted, i.e. it will be blocked for further use and cannot be processed for other purposes.
The following record and retention obligations are particularly relevant: 6 years in accordance with Section 257 (1) HGB (for commercial books, inventories, opening balances, annual financial statements, commercial letters, accounting vouchers, etc.), 10 years in accordance with Section 147 (1) AO (books, records, accounting vouchers, commercial and business letters, documents relevant for taxation, etc.). In addition, personal data may be retained for the period during which claims can be asserted against us (statutory limitation period of three or up to thirty years).
IV. What do we process your data for (purpose of processing) and on what legal basis?
The data processed from visiting this website or using the contact options offered, we process in accordance with the provisions of the DSGVO and the Federal Data Protection Act (BDSG). Depending on the request for which you contact me via the website, there are different legal bases for this. The specific legal basis for data processing depends on the context in which and the purpose for which we receive your data. As a rule, the legal basis for data processing results from the following possibilities:
Art. 6 (1) a DSGVO serves as our legal basis for processing operations in which we obtain consent for a specific processing purpose. Consent given can be revoked at any time.
If the processing of personal data is necessary for the performance of a contract to which you are a party, the processing is based on Art. 6 (1) b DSGVO.
If we are subject to a legal obligation by which the processing of personal data becomes necessary, such as for compliance with tax obligations, the processing is based on Art. 6 (1) c DSGVO.
Ultimately, processing operations could be based on Art. 6 (1) f DSGVO. Processing operations that are not covered by any of the aforementioned legal bases are based on this legal basis if the processing is necessary to protect our legitimate interests or those of a third party, provided that the interests, fundamental rights and freedoms of the data subject are not overridden.
V. Disclosure of your personal data to third parties?
IP addresses are automatically transmitted to the server where the website is operated when you visit a website. A transfer of these IP addresses to third parties happens inevitably whenever a third party component (a script, an image, a font, any other digital resource) is embedded on the website. Which components are embedded on this website is listed in this privacy notice. The recipients of your IP address or categories of recipients can also be derived from this.
Your personal data will not be transferred to third parties for purposes other than those listed below. We only pass on your personal data to third parties if:
you have given your express consent in accordance with Art. 6 (1) a DSGVO,
the disclosure is necessary for the assertion, exercise or defense of legal claims pursuant to Art. 6 (1) f DSGVO and there is no reason to assume that you have an overriding legitimate interest in not disclosing your data,
in the event that there is a legal obligation for disclosure pursuant to Art. 6 (1) c DSGVO, as well as
this is legally permissible and necessary according to Art. 6 para. 1 b DSGVO for the processing of contractual relationships with you.
VI. Matomo
This website uses Matomo, an open source, self-hosted software to collect anonymous usage data for this website.
The visitor behavior data is collected to find out any problems like pages not found, search engine problems or unpopular pages. Once the data is processed (number of visitors who see error pages or only one page, etc.), Matomo generates reports for website owners to act on. (layout changes, new content, etc.).
Matomo processes the following data:
Anonymized IP addresses by removing the last 2 bytes (i.e. 198.51.0.0 instead of 198.51.100.54)
Pseudo-anonymized location (based on the anonymized IP address
Date and time
Title of the accessed page
URL of the accessed page
URL of the previous page (if it allows it)
Screen resolution
Local time
Files that were clicked and downloaded
External links
Duration of page load
Country, region, city (with low accuracy due to IP address)
Main language of the browser
User agent of the browser
Interactions with forms (but not their content)
VI. What data protection rights do you have?
You have the right to:
in accordance with Art. 15 DSGVO to request information about your personal data processed by us. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of complaint, the origin of your data if it has not been collected by us, as well as the existence of automated decision-making including profiling and, if applicable, meaningful information about its details;
in accordance with Art. 16 DSGVO, to demand the immediate correction of incorrect or completion of your personal data stored by us;
pursuant to Art. 17 DSGVO, to request the erasure of your personal data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defense of legal claims;
pursuant to Art. 18 DSGVO, to request the restriction of the processing of your personal data, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you object to its erasure and we no longer require the data, but you need it for the assertion, exercise or defense of legal claims or you have objected to the processing pursuant to Art. 21 DSGVO;
pursuant to Art. 20 DSGVO, to receive your personal data that you have provided to me in a structured, common and machine-readable format or to request that it be transferred to another controller;
in accordance with Art. 7 (3) DSGVO, to revoke your consent once given to us at any time. This has the consequence that we may no longer continue the data processing based on this consent for the future;
pursuant to Art. 77 DSGVO, you have the right to complain to a supervisory authority, without prejudice to any other administrative or judicial remedy. As a rule, you can contact the supervisory authority of your usual place of residence or place of work or the place of the alleged infringement for this purpose, if you believe that the processing of personal data concerning you violates the GDPR.
Revocation of consent given by you
A given consent can be revoked at any time. You will find revocation options at the appropriate place (such as to the newsletter or where consent is given). Unless you find a consent query (often referred to as a "cookie banner"), there are no processes legitimized by this on the website.
Please note that the revocation is only effective for the future. Processing that took place before the revocation is not affected.
VII. What should I be aware of when linking to other websites?
If you follow a link to any of the websites outside of our responsibility, please be aware that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please review these privacy policies before voluntarily providing any personal information to these websites.
Only when you click on an external link, data is transferred to the link destination.This is technically necessary due to the protocol on which the Internet is based ((TCP/IP = TCP - Transfer Control Protocol + IP - Internet Protocol). The transmitted data are in particular: Your IP address, the time at which you clicked on the link, the page on which you clicked on the link, as well as other information mentioned under Paragraph II No. 1 of this notice.
Individual links may involve a data transfer to non-European countries. As a result, it may be possible that foreign third parties, authorities or secret services receive connection data. If you do not want the aforementioned data to be transferred to the link destination or to the aforementioned third parties or to be tapped by others, do not click on the link.
VIII. Changes to this privacy notice
We reserve the right to change this data protection notice if the legal situation or this online offer or the type of data collection changes. However, this only applies with regard to declarations on data processing. If the user's consent is required or components of the data protection information contain a regulation of the contractual relationship with users, the data protection information will only be changed with the user's consent.
Therefore, please inform yourself about this data protection notice if necessary, especially if you provide personal data.