Privacy Policy
Name and Contact Details of the Data Controller
S.K.M.
E. Schmid – J. Köhl GesmbH
Gewerbestraße 4
8773 Kammern
Tel.: +43 (0)3844-8788
Email: office@s-k-m.at
Your Rights Under the GDPR
Under the GDPR and the Austrian Data Protection Act, you have the following rights:
- Right to rectification (Art. 16 GDPR)
- Right to erasure (“right to be forgotten”) (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to notification (Art. 19 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object (Art. 21 GDPR)
- Right not to be subject to automated decision-making (Art. 22 GDPR)
If you believe that the processing of your data violates data protection law or your data protection rights have been infringed in any way, you may lodge a complaint with the supervisory authority. In Austria, this is the Data Protection Authority: https://www.dsb.gv.at/
Automatic Data Storage
When you visit websites today, certain information is automatically created and stored – this applies to our website too:
- Address (URL) of the accessed webpage
- Browser and browser version
- Operating system
- Referrer URL (the previously visited page)
- Hostname and IP address of the device used
- Date and time
This data is stored in so-called web server log files for two weeks and then automatically deleted. We do not share this data but cannot rule out that it may be viewed in the event of unlawful behavior.
Change Privacy Settings
TLS Encryption with https
We use https to transmit data securely on the internet. By using TLS (Transport Layer Security), we ensure the protection of confidential data. You can recognize the secure connection by the lock symbol in your browser and the use of “https” in the address bar.
Communication
When you contact us via phone, email, or an online form, personal data may be processed. This data is processed for the purpose of handling your inquiry and any related business transactions. Data is stored for as long as necessary or legally required.
Data Subjects
Phone
If you call us, call data is stored pseudonymously on the device and by the telecommunications provider. Your name and phone number may be stored and forwarded via email for the purpose of handling your inquiry. Data will be deleted when the case is closed and legal requirements permit.
Contact Forms
Legal Bases
- Art. 6 para. 1 lit. a GDPR (Consent)
- Art. 6 para. 1 lit. b GDPR (Contract)
- Art. 6 para. 1 lit. f GDPR (Legitimate Interests)
WordPress
We use WordPress.com, a website builder system, for our website. The service provider is the American company Automattic Inc., 60 29th Street #343, San Francisco, CA 94110, USA.
WordPress processes your data in the USA, among other locations. We point out that, in the opinion of the European Court of Justice, there is currently no adequate level of protection for data transfers to the USA. This can entail various risks for the legality and security of data processing.
WordPress uses so-called Standard Contractual Clauses (Art. 46 para. 2 and 3 GDPR) to ensure that your data is processed according to European data protection standards, even when stored in third countries like the USA. You can find the clauses here: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=en
The Data Processing Agreements can be found at: https://wordpress.com/support/data-processing-agreements/
More about how WordPress handles data can be found in their privacy policy: https://automattic.com/privacy/
Cookies
Our website uses HTTP cookies to store user-specific data.
What exactly are cookies?
Cookies are small text files stored in your browser. These files remember certain user data such as language or personal settings and help websites recognize returning visitors. There are first-party and third-party cookies, and each cookie has a defined lifetime.
Types of cookies:
- Essential cookies: Needed for basic website functionality (e.g. shopping cart).
- Functional cookies: Help measure website performance and errors.
- Preference cookies: Store user settings (e.g. location, font size).
- Marketing cookies: Used for targeted advertising.
You can manage or delete cookies anytime via your browser settings. For instructions:
Google Fonts
We use Google Fonts on our website. The fonts are stored locally on the web server of our hosting provider and are not loaded from Google servers.
Cookie Consent Management Platform
What is a Cookie Consent Management Platform?
We use a consent management platform (CMP) on our website to help ensure the correct and legally compliant use of scripts and cookies. The CMP automatically generates a cookie popup, scans and monitors all scripts and cookies, provides the legally required cookie consent functionality, and helps both us and you maintain an overview of all cookies. Most CMPs identify and categorize all active cookies. You as a website visitor can then decide which cookies to allow or reject.
Why do we use a cookie management tool?
Our goal is to offer maximum transparency regarding data protection. Furthermore, we are legally obliged to inform you about all tools and cookies that may process personal data. You have the right to decide which cookies you allow. A cookie management tool enables us to know which cookies are in use and to document your consent as required by law.
Which data is processed?
You can manage each individual cookie through the tool and have full control over the storage and processing of your data. Your consent is stored so we do not have to ask you again every time you visit the website. This is done either via an opt-in cookie or on a server. Depending on the provider, data such as a pseudonymized user ID, consent time, browser and device info, and categories of cookies may be stored for up to two years.
Duration of data processing
The storage duration varies depending on the provider and cookie category. In most cases, you can expect data to be stored for several years. Exact details are usually provided in the respective privacy policies of the CMP providers.
Right to object
You can withdraw your consent at any time via the cookie management tool or other opt-out methods. For example, you can disable cookies through your browser settings.
Legal basis
If you consent to cookies, your personal data is processed based on Article 6(1)(a) GDPR (consent). Using a CMP also serves our legitimate interest in legally compliant operation of the website (Article 6(1)(f) GDPR).
BorlabsCookie
We use BorlabsCookie on our website, a tool that stores your cookie consent preferences. The provider is Borlabs – Benjamin A. Bornschein, Rübenkamp 32, 22305 Hamburg, Germany.
For more information about how BorlabsCookie processes data, please see their privacy policy at: https://de.borlabs.io/datenschutz/
Google Analytics
We use the web analytics tool Google Analytics (GA) on our website. This is a tracking service provided by Google Inc., a U.S. company. For users in the European Economic Area (EEA) and Switzerland, the responsible entity is Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland).
Google Analytics collects data about your behavior on our website. For example, if you click a link, this action is recorded and saved by a cookie. These interactions help us analyze how visitors use our site so we can improve our content and services accordingly.
Below, we explain in detail what data is collected, how it is used, and how you can opt out of data collection.
What is Google Analytics?
Google Analytics is a tracking tool that analyzes traffic on our website. It works by embedding a tracking code into the HTML code of our site. When you visit our website, this code records various user actions and interactions.
Each time you interact with our website, the collected data is sent to Google servers, typically in the United States, where it is stored and analyzed. Google then provides us with reports on user activity, enabling us to better understand and optimize our site for your needs.
What reports does Google Analytics generate?
- Audience Reports: Learn more about users’ demographics and interests.
- Acquisition Reports: Understand how users find and reach our website.
- Behavior Reports: Analyze user interactions and navigation paths.
- Conversion Reports: Measure goals, sign-ups, purchases, etc.
- Real-time Reports: See what’s happening on our site right now.
What data is collected by Google Analytics?
Google Analytics uses a unique user ID that is stored in your browser via cookies. This allows the service to recognize returning users. Each interaction (such as page views, clicks, session duration) is linked to this user ID.
Additional identifiers such as app instance IDs or advertising IDs may also be used. If you’re signed in to a Google account, some data may be linked to your personal profile – depending on your account settings. As a rule, however, we do not have access to this personally identifiable information.
Google Analytics cookies in use:
- Name: _ga
Purpose: Distinguishes users
Expiration: 2 years - Name: _gid
Purpose: Distinguishes users
Expiration: 24 hours - Name: _gat / _gat_gtag_UA_<property-id>
Purpose: Throttles request rate
Expiration: 1 minute - Name: AMP_TOKEN
Purpose: Contains a token for retrieving a Client ID from AMP Client ID service
Expiration: 30 seconds to 1 year - Name: __utma
Purpose: Tracks number of visits and time of first/last visit
Expiration: 2 years - Name: __utmt
Purpose: Throttles request rate
Expiration: 10 minutes - Name: __utmb
Purpose: Determines new sessions/visits
Expiration: 30 minutes - Name: __utmc
Purpose: Determines if user is in a new session
Expiration: Session end - Name: __utmz
Purpose: Stores traffic source or campaign
Expiration: 6 months - Name: __utmv
Purpose: Stores custom user data
Expiration: 2 years
Note: The actual names and usage of cookies may change depending on updates by Google.
How long and where is the data stored?
Google operates data centers around the world. Most servers are located in the United States, so your data is usually stored on servers in the USA. You can see a list of data center locations here:
https://www.google.com/about/datacenters/inside/locations/
Your data is distributed across multiple physical devices for faster access and better protection against manipulation. Google uses backup systems to ensure data safety in case of hardware failures or natural disasters.
The standard data retention period for user data in Google Analytics is 26 months. After this period, the data is automatically deleted. You can configure this retention period as needed – available options include:
- 14 months
- 26 months
- 38 months
- 50 months
- No automatic deletion
Once the chosen period has expired, data is deleted monthly. This applies to data linked to cookies, user IDs, or advertising IDs. Aggregated reports remain available since they do not contain personal data.
How can I delete or prevent data collection?
Under EU data protection law, you have the right to access, update, delete, or restrict your personal data. To prevent Google Analytics from collecting your data, you can use the browser add-on:
https://tools.google.com/dlpage/gaoptout?hl=en
This tool disables data collection via JavaScript on websites using Google Analytics.
You can also control and manage cookies in your browser. Here are helpful links for common browsers:
Google Analytics IP anonymization
We use IP anonymization in Google Analytics. This means Google shortens your IP address before storing it, so it cannot be traced back to an individual. This complies with European data protection standards.
More information:
https://support.google.com/analytics/answer/2763052?hl=en
Google Analytics demographic & interest reports
We have enabled advertising features in Google Analytics, such as demographic and interest reports. These include anonymized data such as age, gender, and interests, helping us better understand our users.
You can deactivate the use of this data in your Google account settings:
https://adssettings.google.com/authenticated
Google Analytics Data Processing Addendum
We have entered into a data processing agreement with Google by accepting the “Google Analytics Data Processing Amendment”.
More info:
https://support.google.com/analytics/answer/3379636?hl=en
Google Tag Manager
Google Tag Manager
We use the Google Tag Manager by Google Inc. on our website. For the European area, the company responsible for all Google services is Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). This Tag Manager is one of many helpful marketing tools from Google. With the Google Tag Manager, we can centrally integrate and manage code sections of various tracking tools we use on our website.
In this privacy policy, we want to explain what the Google Tag Manager does, why we use it, and how data is processed.
What is the Google Tag Manager?
The Google Tag Manager is an organizational tool that allows us to centrally and user-friendly integrate and manage website tags. Tags are small code sections that, for example, record your activities on our website (tracking). For this purpose, JavaScript code sections are inserted into the source code of our site. Tags often come from Google internal products like Google Ads or Google Analytics, but tags from other companies can also be integrated and managed via the manager. These tags serve different functions. They can collect browser data, feed marketing tools with data, integrate buttons, set cookies, and also track users across several websites.
Why do we use the Google Tag Manager on our website?
As the saying goes: organization is half the battle! This also applies to the maintenance of our website. To make our website as good as possible for you and for everyone interested in our products and services, we need various tracking tools such as Google Analytics. The data collected from these tools shows us what interests you most, where we can improve our services, and to which people we should show our offers. And for this tracking to work, we need to integrate the relevant JavaScript codes into our website. Basically, we could add each tracking tool’s code section separately to our source code, but that would take a lot of time and be quite confusing. That’s why we use the Google Tag Manager. We can easily embed the necessary scripts and manage them from a single location. Additionally, the Google Tag Manager offers a user-friendly interface and requires no programming knowledge. This helps us keep our tag jungle in order.
What data is stored by the Google Tag Manager?
The Tag Manager itself is a domain that does not set cookies or store data. It acts merely as a “manager” of the implemented tags. The individual tags of the various web analysis tools collect the data. In this sense, the data is passed through the Google Tag Manager to the individual tracking tools, but it is not stored by the Manager itself.
However, things are different with the embedded tags from the various web analysis tools such as Google Analytics. Depending on the analysis tool, various data is collected, stored, and processed via cookies. For more information, please read our privacy policies regarding the individual analysis and tracking tools we use on our website.
In the account settings of the Tag Manager, we have allowed Google to receive anonymized data from us. However, this only concerns the use and utilization of our Tag Manager and not your data, which is stored via the code sections. We enable Google and others to receive selected data in anonymous form. Thus, we agree to the anonymous sharing of our website data. What exact aggregated and anonymous data is shared was not clearly determined despite thorough research. However, Google deletes all information that could identify our website. Google aggregates the data with hundreds of other anonymous website data and creates user trends as part of benchmarking measures. Benchmarking compares own results with those of competitors. Based on the collected information, processes can be optimized.
How long and where are the data stored?
When Google stores data, this data is stored on Google’s own servers. The servers are distributed worldwide, mostly in the United States. You can see exactly where the Google data centers are located at https://www.google.com/about/datacenters/inside/locations/?hl=en.
How long the individual tracking tools store your data can be found in our specific privacy texts for the respective tools.
How can I delete my data or prevent data storage?
The Google Tag Manager itself does not store any personal data. It only manages the tags of various tracking tools. To find out how to delete or manage your data, please refer to our privacy texts for the individual tracking tools.
Google is an active participant in the EU-U.S. Privacy Shield Framework, which regulates the proper and secure transfer of personal data. More information can be found at https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&tid=111607701. If you want to learn more about the Google Tag Manager, we recommend the FAQs at https://www.google.com/intl/en/tagmanager/faq.html.
Privacy Policy – Copyright Notice
This privacy policy was created in cooperation with the data protection generator provided by AdSimple®
Link to AdSimple®