Der Schutz Ihrer personenbezogenen Daten ist uns ein besonderes Anliegen. Hier können Sie sich einfach und schnell einen Überblick verschaffen, welche personenbezogenen Daten wir von Ihnen erheben und was wir damit machen.

Datenerhebung, Zweck & Rechtsgrundlage

Wir, die Foonkle EOOD, gewähren Interessent*innen Zugang zu KI (künstlichen Intelligenz) gesteuerten bzw. gestützten Sprach- und Chatbots über unsere Website(s). Interessent*innen können mit Chat- und Voicebots kommunizieren und Fragen zum Geschäftsfeld der Overmind.one stellen. Daten werden nicht für das Training der verwendeten KI-Modelle verwendet und nur kurzzeitig verarbeitet (zu den verwendeten KI-Modellen sehen Sie bitte die Informationen zu „Übermittlungsempfänger*innen“) ein. Bitte beachten Sie, dass Sie mit einer KI sprechen und auch die Antworten KI-generierte Inhalte darstellen.
Im Rahmen der Nutzung der Sprach- und Chatbots werden insbesondere folgende personenbezogene Daten verarbeitet:

• Inhaltsdaten:
o Sprach- und Audiodaten bzw. Gesprächsinhalte
o Alle sonstigen Informationen, die Sie als Endnutzer*in im Gespräch mitteilen, wie z.B. den Vornamen
• Nutzungsdaten (Metadaten für Abrechnung und Analyse):
o Eindeutige Kennungen (z.B. Anruf-ID, Session-ID)
o Zeitstempel und Dauer der Interaktion
o Technische Parameter der Übertragung
o IP-Adresse

Die Nutzung der Sprach- und Chatbots ist freiwillig. Es besteht keine Pflicht zur Bereitstellung Ihrer personenbezogenen Daten. Mit der beschriebenen Datenverarbeitung erfolgt keine automatisierte Entscheidungsfindung und kein Profiling.

Grundsätzlich werden die Daten direkt bei Ihnen als Nutzer*in erhoben. Je nach Formulierung Ihrer Interaktionen kann die Verarbeitung jedoch auch Daten natürlicher Personen umfassen – in diesem Fall werden die Daten mit Bekanntgabe durch die Nutzerin*en Nutzer erhoben.

Die im Zuge der Nutzung der Sprach- und Chatbots erfolgende Datenverarbeitung dient insbesondere dem Zweck der Bereitstellung von Informationen zu Overmind.one oder allgemeinen Informationen zum Einsatz von KI. Die Anwendung soll zudem Unternehmen in der Entscheidungsfindung unterstützen und das Interesse potenzieller Unternehmen an unseren Voice Intelligence Lösungen wecken und fördern.
Die Verarbeitung von personenbezogenen Daten basiert auf Grundlage von Art. 6 Abs. 1 lit. b der Datenschutz-Grundverordnung (DSGVO), da die Verarbeitung zur Durchführung von vorvertraglichen Maßnahmen (Informationsbereitstellung vor ggf. stattfindenden Abschluss von Voice Intelligence Verträgen) notwendig ist, die auf Anfragen von Interessent*innen hin erfolgen. Da die Nutzung freiwillig ist, entstehen Ihnen bei einer Nichtbereitstellung Ihrer Daten keine Nachteile – abgesehen davon, dass das die Spach- und Chatbots nicht genutzt werden können.

Bei der Verarbeitung vom gesprochenen Wort handelt es sich zwar grundsätzlich um die Verarbeitung biometrischer Daten, da diese objektiv dafür geeignet ist, Personen zu identifizieren. Nachdem diese biometrischen Daten in diesem Fall allerdings nicht zum Zweck der eindeutigen Identifizierung einer natürlichen Person herangezogen werden, werden keine besonderen Kategorien personenbezogener Daten verarbeitet, eine Rechtsgrundlage nach Art. 9 Abs. 2 DSGVO ist daher nicht erforderlich.

Ihre Daten werden nur so lange verarbeitet, wie es für die Erfüllung der vorvertraglichen Maßnahmen erforderlich ist. Nach der Interaktion werden Ihre Inhaltsdaten umgehend gelöscht. Ausgenommen davon sind einzelne abrechnungsrelevante Metadaten (z.B. Anruf-ID, Dauer), die zum Zwecke der Abrechnung gemäß der gesetzlichen Aufbewahrungsfristen von 7 Jahren (§ 132 BAO) aufbewahrt werden, sowie technische Metadaten (insb. IP-Adresse), die für Sicherheitszwecke 14 Tage gespeichert und danach gelöscht werden.

Übermittlungsempfänger*innen

Bitte beachten Sie, dass wir diese Datenschutzerklärung von Zeit zu Zeit aktualisieren (zB. aufgrund von Änderungen gesetzlicher Vorschriften oder dem Einsatz neuer Technologien). Wir empfehlen Ihnen deshalb, diese Datenschutzerklärung regelmäßig auf Neuheiten zu überprüfen.

Ihnen stehen grundsätzlich die Rechte auf Auskunft, Berichtigung, Löschung, Einschränkung, Datenübertragbarkeit, Widerruf und Widerspruch zu.
Bitte wenden Sie sich diesbezüglich gerne jederzeit an uns.

Datenschutz-Koordinationsteam
Overmind.one

data@overmind.one

Dieser Bereich listet die Sub-Auftragsverarbeiter auf, die für die Erbringung der itellico KI-Dienste eingesetzt werden. Die Verarbeitung findet standardmäßig in der EU statt. Bestimmte spezialisierte oder alternative Dienste können auf Wunsch des Kunden aktiviert werden, was eine Datenübertragung in die USA zur Folge haben kann.

Teil 1: Standard-Plattform

Dies sind die Kernkomponenten der itellico-Plattform. Die Datenverarbeitung für diese Dienste findet primär in Rechenzentren innerhalb der EU (Frankfurt) statt.

Amazon Webdienste (EU)

Zweck der Verarbeitung Hosting der Kubernetes-Infrastruktur für die itellico Sprach-KI-Clusterplattform, Bereitstellung von SIP-Kommunikationsdiensten und Speicherung der Gesprächsdaten (Transkripte, Audio-Antworten).

Empfänger der Daten
Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy,
L-1855 Luxembourg.

Rechtsgrundlage
Vertragserfüllung (Art. 6 Abs. 1 lit. b DSGVO).

Speicherdauer
Kundenkonfigurierbar (Standard: 30 Tage, einstellbar von sofortiger Löschung bis zu kundenspezifischen Anforderungen). Weitere Informationen AWS Datenschutzhinweis. Die Verarbeitung erfolgt auf Servern in der EU (Frankfurt).

Microsoft Azure (EU)

Zweck der Verarbeitung
1. Spracherkennung (Speech-to-Text): Transkription von Spracheingaben.
2. Sprachsynthese (Text-to-Speech): Erzeugung von Sprachausgaben.
3. KI-Verarbeitung (LLM): Verarbeitung von Textanfragen durch große Sprachmodelle.

Empfänger der Daten
Microsoft Ireland Operations Limited, One Microsoft Place, South
County Business Park, Leopardstown, Dublin 18, D18 P521, Irland.

Rechtsgrundlage
Vertragserfüllung (Art. 6 Abs. 1 lit. b DSGVO).

Speicherdauer
API-Verarbeitung: Keine Speicherung (Zero-Retention-Policy).
Ergebnisse werden auf dem itellico AWS-Cluster gespeichert.

Weitere Informationen Microsoft Datenschutzerklärung. Die Verarbeitung erfolgt auf der Infrastruktur von Microsoft in der EU.

OpenAI

Zweck der Verarbeitung

1. KI-Verarbeitung (LLM): Verarbeitung von Textanfragen durch große Sprachmodelle (z.B. GPT-Serie).
2. Spracherkennung (Speech-to-Text): Umwandlung von Spracheingaben in Text (z.B. Whisper).

Empfänger der Daten
OpenAI Ireland Limited, 1st Floor, The Liffey Trust Centre, 117-126
Sheriff Street Upper, Dublin 1, D01 YC43 Ireland.

Rechtsgrundlage
Vertragserfüllung (Art. 6 Abs. 1 lit. b DSGVO).

Speicherdauer
API-Verarbeitung: Keine Speicherung (Zero-Retention-Policy für API-Daten). Ergebnisse werden auf dem itellico AWS-Cluster gespeichert.

Weitere Informationen OpenAI Datenschutzerklärung. Die Verarbeitung erfolgt auf der Infrastruktur von Microsoft in der EU.

Live-Kit (EU)

Zweck der Verarbeitung
Echtzeit-Kommunikation (WebRTC & SIP): Bereitstellung der Infrastruktur für die Audio-Kommunikation in Echtzeit und Anbindung an das Telefonnetz (SIP).

Empfänger der Daten
LiveKit, Inc., 981 Mission St, San Francisco, CA 94103, USA.

Rechtsgrundlage
Vertragserfüllung (Art. 6 Abs. 1 lit. b DSGVO).

Speicherdauer
API-Verarbeitung: Keine Speicherung (Zero-Retention). Ergebnisse werden auf dem itellico AWS-Cluster gespeichert.

Teil 2: Optional Spezialdienste (USA)

Diese Dienste sind nicht standardmäßig aktiviert. Sie können auf ausdrücklichen Wunsch des Kunden zur Leistungsoptimierung oder für spezifische Anwendungsfälle (z.B. alternative Sprachmodelle) genutzt werden. Bei Aktivierung werden Inhaltsdaten (Audio/Text) zur Verarbeitung in die USA übermittelt. Für alle hier gelisteten Anbieter gilt eine Zero-Retention-Policy.

Deepgram (USA)

Zweck der Verarbeitung
Alternative Speech-to-Text-Transkription.

Empfänger der Daten
Deepgram Inc., 548 Market St, Suite 25104, San Francisco, CA 94104-5401,
USA. *Übertragung durch SCCs gemäß Art. 46 DSGVO geschützt.*

Rechtsgrundlage
Vertragserfüllung (Art. 6 Abs. 1 lit. b DSGVO).

Speicherdauer
API-Verarbeitung: Keine Speicherung (Zero-Retention). Ergebnisse werden auf dem itellico AWS-Cluster gespeichert.

Weitere Informationen Deepgram Datenschutzerklärung

Cartesia (USA)

Zweck der Verarbeitung
Alternative Text-to-Speech-Sprachsynthese.

Empfänger der Daten
Cartesia, Inc., 1766 18th Street, San Francisco, CA 94107, USA. *Übertragung durch SCCs gemäß Art. 46 DSGVO geschützt.*

Rechtsgrundlage
Vertragserfüllung (Art. 6 Abs. 1 lit. b DSGVO).

Speicherdauer
API-Verarbeitung: Keine Speicherung. Ergebnisse werden auf dem itellico AWS-Cluster gespeichert.

Weitere Informationen Cartesia Datenschutzerklärung

ElevenLabs (USA)

Zweck der Verarbeitung
Alternative Text-to-Speech-Sprachsynthese und Voice Cloning.

Empfänger der Daten
Eleven Labs Inc., 169 Madison Ave #2484, New York, NY 10016,
USA. *Übertragung durch SCCs gemäß Art. 46 DSGVO geschützt.*

Rechtsgrundlage
Vertragserfüllung (Art. 6 Abs. 1 lit. b DSGVO).

Speicherdauer
API-Verarbeitung: Keine Speicherung. Ergebnisse werden auf dem itellico AWS-Cluster gespeichert.

Weitere Informationen ElevenLabs Datenschutzerklärung

Anthropic (USA)

Zweck der Verarbeitung
Alternative KI-Verarbeitung (LLM): Verarbeitung von Textanfragen
durch große Sprachmodelle (z.B. Claude-Serie).

Empfänger der Daten
Anthropic, PBC, PO Box 2318, San Francisco, CA 94126, USA. *Übertragung durch SCCs gemäß Art. 46 DSGVO geschützt.*

Rechtsgrundlage
Vertragserfüllung (Art. 6 Abs. 1 lit. b DSGVO).

Rechtsgrundlage
Vertragserfüllung (Art. 6 Abs. 1 lit. b DSGVO).

Weitere Informationen Anthropic Datenschutzerklärung

<p style=“text-align: left;“><strong>Introduction and overview</strong></p>
<p style=“text-align: left;“>We have prepared this privacy policy (version 20.06.2025-113016739) to explain to you in accordance with<br />the requirements of the General Data Protection Regulation (EU) 2016/679 and applicable national<br />laws which personal data (data for short) we as the controller – and<br />the processors (e.g. providers) commissioned by us – process, will process in the future<br />and which lawful options you have. The terms used are<br />to be understood as gender-neutral.</p>
<p style=“text-align: left;“>In short, we provide you with comprehensive information about the data we process about you.</p>
<p style=“text-align: left;“>Data protection declarations usually sound very technical and use legal<br />terminology. This privacy policy, on the other hand, is intended to describe the most important things to you as simply and<br />transparently as possible. Where it is conducive to transparency, technical<br />terms are explained in a reader-friendly way, links to further information are provided and graphics<br />are used. We thus inform you in clear and simple language that we only process personal data as part of<br />our business activities if there is a legal basis for doing so. This is certainly not possible by providing<br />with explanations that are as concise, unclear and legally technical as possible, as is often standard on the Internet<br />when it comes to data protection.<span style=“font-size: 20px;“></span></p>
<p style=“text-align: left;“>I hope you find the following explanations interesting and informative and perhaps there is some information that you did not know about.</p>
<p style=“text-align: left;“>If you still have any questions, please contact the responsible body named below or in the legal notice, follow the links provided and take a look at further<br />information on third-party websites. Our contact details can of course also be found at<br />in the legal notice.</p>
<p style=“text-align: left;“><strong>Scope of application</strong></p>
<p style=“text-align: left;“>This privacy policy applies to all personal data processed by us in the company<br />and to all personal data processed by companies commissioned by us<br />(processors). By personal data, we mean information within the meaning of<br />in accordance with Art. 4 No. 1 GDPR, such as the name, email address and postal address<br />of a person. The processing of personal data ensures that we can offer and bill our<br />services and products, whether online or offline. The<br />scope of application of this privacy policy includes:<br />all online presences (websites, online stores) that we operate<br />social media presences and email communication<br />mobile apps for smartphones and other devices<br />In short: the privacy policy applies to all areas in which personal data is processed in a structured manner in the<br />company via the channels mentioned. If we enter into legal relationships with you outside<br />of these channels, we will inform you separately<br />if necessary.</p>
<p style=“text-align: left;“><strong>Legal basis</strong></p>
<p style=“text-align: left;“>In the following privacy policy, we provide you with transparent information on the<br />legal principles and regulations, i.e. the legal bases of the General Data Protection Regulation, which enable us to process personal data.<br />As far as EU law is concerned, we refer to REGULATION (EU) 2016/679 OF THE<br />EUROPEAN PARLIAMENT AND OF THE COUNCIL of April 27, 2016. You can of course read this EU General Data Protection Regulation online at EUR-Lex, the access point to EU law, at https://eur-lex.europa.eu/legal-content/DE/ALL/?uri=celex%3A32016R0679.<br />We only process your data if at least one of the following conditions applies:</p>
<p style=“text-align: left;“>1. consent (Article 6(1)(a) GDPR): You have given us your consent to process data<br />for a specific purpose. An example would be the storage of your<br />contact form data.</p>
<p style=“text-align: left;“>2. contract (Article 6(1)(b) GDPR): In order to fulfill a contract or pre-contractual<br />obligations with you, we process your data. For example, if we conclude a purchase contract with you at, we need personal information in advance.</p>
<p style=“text-align: left;“>3. legal obligation (Article 6(1)(c) GDPR): If we are subject to a legal<br />obligation, we process your data. For example, we are required by law<br />to keep invoices for accounting purposes. These usually contain<br />personal data.</p>
<p style=“text-align: left;“>4. legitimate interests (Article 6(1)(f) GDPR): In the case of legitimate interests that do not restrict<br />your fundamental rights, we reserve the right to process personal<br />data. For example, we need to process certain data in order to operate our website<br />securely and efficiently. This processing is therefore a legitimate<br />interest.</p>
<p style=“text-align: left;“>Other conditions such as the performance of recordings in the public interest and<br />the exercise of official authority and the protection of vital interests do not generally apply to us at. If such a legal basis should be relevant, it will be indicated at.<br />In addition to the EU Regulation, national laws also apply:<br />In Austria, this is the Federal Act on the Protection of Natural Persons with regard to the<br />Processing of Personal Data (Data Protection Act), or DSG for short.<br />In Germany, the Federal Data Protection Act (BDSG) applies.<br />If other regional or national laws apply, we will inform you about them in the following sections about it.<strong></strong></p>
<p style=“text-align: left;“><strong>Contact details of the controller</strong></p>
<p style=“text-align: left;“>If you have any questions about data protection or the processing of personal data,<br />you will find below the contact details of the controller in accordance with Article 4 (7) of the EU General Data Protection Regulation (GDPR):</p>
<p style=“text-align: left;“>Foonkle EOOD<br />Email: data@overmind.one</p>
<p style=“text-align: left;“><strong>Storage period</strong></p>
<p style=“text-align: left;“>It is a general criterion for us that we only store personal data for as long as is absolutely necessary for the provision of our<br />services and products. The<br />means that we delete personal data as soon as the reason for the data processing<br />no longer exists. In some cases, we are legally obliged to store certain data<br />even after the original purpose no longer applies, for example for the purposes of<br />accounting.</p>
<p style=“text-align: left;“>If you wish your data to be deleted or revoke your consent to data processing, the data will be deleted as soon as possible and insofar as there is no obligation to store.</p>
<p style=“text-align: left;“>We will inform you about the specific duration of the respective data processing below, provided that<br />we have further information on this.</p>
<p style=“text-align: left;“><strong>Rights under the General Data Protection Regulation</strong></p>
<p style=“text-align: left;“>In accordance with Articles 13, 14 GDPR, we inform you of the following rights to which you are entitled,<br />so that data is processed fairly and transparently:<br />In accordance with Article 15 GDPR, you have a right to information as to whether we are processing your data. If this is the case, you have the right to receive a copy of the data<br />and the following information:</p>
<p style=“text-align: left;“>the purpose for which we carry out the processing</p>
<p style=“text-align: left;“>the categories, i.e. the types of data that are processed</p>
<p style=“text-align: left;“>who receives this data</p>
<p style=“text-align: left;“>and if the data is transferred to third countries,</p>
<p style=“text-align: left;“>how security can be guaranteed</p>
<p style=“text-align: left;“>how long the data will be stored;</p>
<p style=“text-align: left;“>the existence of the right to rectification, erasure or restriction of processing<br />and the right to object to processing</p>
<p style=“text-align: left;“>that you can lodge a complaint with a supervisory authority (links to these authorities can be found below)</p>
<p style=“text-align: left;“>the origin of the data if we have not collected it from you</p>
<p style=“text-align: left;“>whether profiling is carried out, i.e. whether data is automatically evaluated in order to create a personal profile of you</p>
<p style=“text-align: left;“>According to Article 16 GDPR, you have a right to rectification of the data, which means that we must correct<br />data if you find errors.</p>
<p style=“text-align: left;“>According to Article 17 GDPR, you have the right to erasure (“right to be forgotten”), which<br />specifically means that you may request the erasure of your data.</p>
<p style=“text-align: left;“>According to Article 18 GDPR, you have the right to restriction of processing, which<br />means that we may only store the data but not use it any further.</p>
<p style=“text-align: left;“>According to Article 20 GDPR, you have the right to data portability, which means that we<br />will provide you with your data in a commonly used format upon request.</p>
<p style=“text-align: left;“>According to Article 21 GDPR, you have the right to object, which entails a<br />change in processing after enforcement.</p>
<p style=“text-align: left;“>If the processing of your data is based on Article 6(1)(e) (public interest,<br />exercise of official authority) or Article 6(1)(f) (legitimate interest),<br />you can object to the processing.</p>
<p style=“text-align: left;“>We will then check as quickly as possible<br />whether we can legally comply with this objection.</p>
<p style=“text-align: left;“>If data is used for direct marketing purposes, you can object to this type of data processing at any time at. We may then no longer use your data<br />for direct marketing.</p>
<p style=“text-align: left;“>If data is used for profiling, you can object to this type of data processing at any time.</p>
<p style=“text-align: left;“>object to this type of data processing at any time. We may then no longer use your data for<br />profiling.</p>
<p style=“text-align: left;“>If data is used for profiling, you can object to this type of data processing at any time.</p>
<p style=“text-align: left;“>type of data processing at any time. We may then no longer use your data for profiling.</p>
<p style=“text-align: left;“>Under Article 22 GDPR, you may have the right not to be subject to a decision based solely on<br />automated processing (e.g. profiling).</p>
<p style=“text-align: left;“>According to Article 77 GDPR, you have the right to lodge a complaint. This means that you can complain to the data protection authority at any time if you believe that the<br />data processing of personal data violates the GDPR.</p>
<p style=“text-align: left;“>In short: you have rights – do not hesitate to contact the controller listed above at!</p>
<p style=“text-align: left;“>If you believe that the processing of your data violates data protection law or your data protection claims have been violated in any other way, you can complain to the supervisory authority. For Austria, this is the data protection authority, whose website<br />can be found at https://www.dsb.gv.at/. In Germany, there is a data protection officer for each federal state at. For more information, you can contact the Federal Commissioner for Data Protection and Freedom of Information (BfDI) at.</p>
<p style=“text-align: left;“><strong>Security of data processing</strong></p>
<p style=“text-align: left;“>In order to protect personal data, we have implemented both technical and organizational<br />measures. Where possible, we encrypt or pseudonymize<br />personal data. In this way, we make it as difficult as possible for third parties to infer personal information from our data.</p>
<p style=“text-align: left;“>Art. 25 GDPR refers to “data protection through technology design and through data protection-friendly default settings” and means that we always think about security both in terms of software (e.g. forms) and hardware (e.g. access to the server room) and take appropriate measures. If necessary, we will discuss specific measures below.<strong></strong></p>
<p style=“text-align: left;“><strong>TLS encryption with https</strong></p>
<p style=“text-align: left;“>TLS, encryption and https sound very technical – and they are. We use HTTPS (the<br />Hypertext Transfer Protocol Secure stands for “secure hypertext transfer protocol”) for our website and subpages (such as for our voicebots) to transmit<br />data tap-proof on the Internet.</p>
<p style=“text-align: left;“>This means that the complete transmission of all data from your browser to our<br />web server is secured – nobody can “eavesdrop”.<br />We have thus introduced an additional layer of security and comply with data protection through<br />technology design (Article 25 (1) GDPR). By using TLS (Transport Layer<br />Security), an encryption protocol for secure data transmission on the Internet, we can ensure<br />the protection of confidential data.</p>
<p style=“text-align: left;“>You can recognize the use of this data transmission security by the small lock symbol<br />at the top left of the browser, to the left of the Internet address (e.g. examplepage.com) and the use<br />of the https scheme (instead of http) as part of our Internet address.</p>
<p style=“text-align: left;“>If you would like to know more about encryption, we recommend searching Google<br />for “Hypertext Transfer Protocol Secure wiki” to obtain good links to further information on.</p>
<p style=“text-align: left;“><strong>Communication</strong><br />Communication Summary</p>
<p style=“text-align: left;“>Data subjects: Anyone who communicates with us by telephone, email or online form<br />Data processed: e.g. telephone number, name, email address, form data entered. More details<br />can be found in the respective contact type used<br />Purpose: Processing of communication with customers, business partners, etc.</p>
<p style=“text-align: left;“>Storage period: Duration of the business case and the statutory provisions<br />Legal basis: Art. 6 para. 1 lit. a GDPR (consent), Art. 6 para. 1 lit. b GDPR (contract), Art. 6 para. 1 lit. f<br />GDPR (legitimate interests).</p>
<p style=“text-align: left;“>If you contact us and communicate by telephone, e-mail or online form, personal data may be processed.<br />The data is processed for the handling and processing of your question and the associated business transaction. The data is stored for as long as or as required by law.<strong></strong></p>
<p style=“text-align: left;“><strong>Affected persons</strong></p>
<p style=“text-align: left;“>All those who contact us via the<br />communication channels provided by us are affected by the aforementioned processes.</p>
<p style=“text-align: left;“>E-mail</p>
<p style=“text-align: left;“>If you communicate with us by email, data may be stored on the respective<br />end device (computer, laptop, smartphone, etc.) and<br />data may be stored on the email server. The data will be deleted as soon as the business transaction has been completed<br />and legal requirements permit.</p>
<p style=“text-align: left;“>Online forms</p>
<p style=“text-align: left;“>If you communicate with us using an online form, data is stored on our web server<br />and may be forwarded to one of our e-mail addresses. The data will be deleted<br />as soon as the business transaction has been completed and legal requirements permit.</p>
<p style=“text-align: left;“>Legal basis</p>
<p style=“text-align: left;“>The processing of the data is based on the following legal bases:<br />Art. 6 para. 1 lit. a GDPR (consent): You give us your consent to store your data at<br />and to continue to use it for purposes relating to the business case;<br />Art. 6 para. 1 lit. b GDPR (contract): It is necessary for the fulfillment of a<br />contract with you or a processor such as the telephone provider or we<br />must process the data for pre-contractual activities, such as the preparation of an offer;</p>
<p style=“text-align: left;“>Art. 6 para. 1 lit. f GDPR (legitimate interests): We want to handle customer inquiries and<br />business communication in a professional manner. This requires certain<br />technical facilities such as email programs, exchange servers and<br />mobile network operators in order to be able to operate communication efficiently.</p>
<p style=“text-align: left;“><strong>Data processing agreement (DPA)</strong></p>
<p style=“text-align: left;“>In this section, we would like to explain what an order processing contract is and<br />why it is needed. Because the word “data processing agreement” is quite a<br />tongue twister, we will often only use the acronym DPA in this text. Like<br />most companies, we do not work alone, but also use the services<br />of other companies or individuals. By involving various<br />companies or service providers, we may pass on personal data to<br />for processing. These partners then act as processors with whom we enter into a contract, known as a data processing agreement (DPA).</p>
<p style=“text-align: left;“>The most important thing for you to know about<br />is that the processing of your personal data takes place exclusively in accordance with our<br />instructions and must be regulated by the DPA.<br />Who are processors?<br />As a company and website owner, we are responsible for all data that we process from you. In addition to controllers, there may also be so-called processors.<br />This includes any company or person who processes personal data<br />on our behalf. More precisely and according to the GDPR definition: any natural or legal<br />person, public authority, agency or any other body which processes personal<br />data on our behalf is considered a processor. Processors can therefore be service providers such as<br />hosting or cloud providers, payment or newsletter providers or large companies such as<br />Google or Microsoft, for example.</p>
<p style=“text-align: left;“>To make the terminology easier to understand, here is an overview of the three roles in the<br />GDPR<br />Data subject (you as a customer or interested party) → Controller (we as a company and<br />client) → Processor (service provider such as a web host or cloud provider)<br />Content of a data processing agreement<br />As mentioned above, we have concluded a DPA with our partners who act as processors<br />. This states above all that the processor processes the data to be processed at<br />exclusively in accordance with the GDPR.</p>
<p style=“text-align: left;“>Commitment to us as the controller</p>
<p style=“text-align: left;“>Obligations and rights of the controller</p>
<p style=“text-align: left;“>Categories of data subjects</p>
<p style=“text-align: left;“>Type of personal data</p>
<p style=“text-align: left;“>Type and purpose of data processing</p>
<p style=“text-align: left;“>Subject and duration of data processing</p>
<p style=“text-align: left;“>Place of data processing</p>
<p style=“text-align: left;“>The contract also contains all the obligations of the processor. The most important obligations are</p>
<p style=“text-align: left;“>to ensure data security measures<br />to take possible technical and organizational measures to protect the rights of the<br />data subject</p>
<p style=“text-align: left;“>to maintain a data processing register<br />to cooperate with the data protection supervisory authority at its request</p>
<p style=“text-align: left;“>carry out a risk analysis in relation to the personal data received</p>
<p style=“text-align: left;“>Sub-processors may only be commissioned with the written consent of the controller</p>
<p style=“text-align: left;“>You can find out what a DPA looks like in concrete terms at<br />https://www.wko.at/service/wirtschaftsrecht-gewerberecht/eu-dsgvo-mustervertrag-auftragsverarb<br />eitung.html. A sample contract is presented here.</p>
<p style=“text-align: left;“><strong></strong></p>
<p style=“text-align: left;“><strong>Cookies</strong><br />Cookies Summary</p>
<p style=“text-align: left;“>Affected parties: Visitors to the website</p>
<p style=“text-align: left;“>Purpose: depending on the cookie. More details can be found below or from the manufacturer of the software that sets the cookie.</p>
<p style=“text-align: left;“>Processed data: Depending on the cookie used. You can find more details on this at<br />below or from the manufacturer of the software that sets the cookie.</p>
<p style=“text-align: left;“>Storage period: depending on the cookie, can vary from hours to years</p>
<p style=“text-align: left;“>Legal basis: Art. 6 para. 1 lit. a GDPR (consent), Art. 6 para. 1 lit.f GDPR<br />(legitimate interests)</p>
<p style=“text-align: left;“>What are cookies?</p>
<p style=“text-align: left;“>Our website uses HTTP cookies to store user-specific data.<br />Below we explain what cookies are and why they are used so that you can better understand the following<br />privacy policy.</p>
<p style=“text-align: left;“>Whenever you surf the internet, you use a browser. Well-known browsers include<br />Chrome, Safari, Firefox, Internet Explorer and Microsoft Edge. Most websites<br />store small text files in your browser. These files are called cookies.<br />One thing cannot be denied: Cookies are really useful little helpers. Almost all websites<br />use cookies. More precisely, they are HTTP cookies, as there are also other cookies<br />for other areas of application. HTTP cookies are small files that are stored on your computer by our website<br />. These cookie files are automatically stored in the cookie folder, the “brain” of your browser, so to speak. A cookie consists of a name and<br />a value. When defining a cookie, one or more attributes<br />must also be specified.</p>
<p style=“text-align: left;“>Cookies store certain user data about you, such as language or personal<br />page settings. When you visit our site again, your browser transmits the<br />“user-related” information back to our site. Thanks to cookies, our website<br />knows who you are and offers you the settings you are used to. In some browsers, each<br />cookie has its own file; in others, such as Firefox, all cookies are stored in a single file.</p>
<p style=“text-align: left;“>A possible interaction between a web browser such as Chrome and the web server could look like this. The web browser requests a website and receives a<br />cookie back from the server, which the browser uses again as soon as another page is requested.<br />There are both first-party cookies and third-party cookies. First-party cookies are created directly by our website, third-party cookies are created by partner websites (e.g. Google<br />Analytics). Each cookie must be evaluated individually, as each cookie stores different data.<br />The expiry time of a cookie also varies from a few minutes to a few years. Cookies<br />are not software programs and do not contain viruses, Trojans or other “malware”.<br />Cookies also cannot access information on your PC.<br />Cookie data can look like this, for example:<br />Name: _ga<br />Value: GA1.2.1326744211.152113016739-9<br />Purpose: To distinguish between website visitors<br />Expiry date: After 2 years<br />A browser should be able to support these minimum sizes:<br />At least 4096 bytes per cookie<br />At least 50 cookies per domain<br />At least 3000 cookies in total</p>
<p style=“text-align: left;“>What types of cookies are there?</p>
<p style=“text-align: left;“>The question of which cookies we use in particular depends on the services used<br />and is clarified in the following sections of the privacy policy. At this point,<br />we would like to briefly explain the different types of HTTP cookies.<br />There are 4 types of cookies:</p>
<p style=“text-align: left;“>Essential cookies</p>
<p style=“text-align: left;“>These cookies are necessary to ensure basic website functions. For example,<br />needs these cookies when a user places a product in the shopping cart, then continues surfing on other<br />pages and only later goes to the checkout. Thanks to these cookies, the shopping cart is not deleted<br />even if the user closes their browser window.</p>
<p style=“text-align: left;“>Purposeful cookies</p>
<p style=“text-align: left;“>These cookies collect information about user behavior and whether the user receives any error messages. These cookies are also used to measure the loading time and the behavior of the website<br />with different browsers.</p>
<p style=“text-align: left;“>Targeted cookies</p>
<p style=“text-align: left;“>These cookies ensure better user-friendliness. For example, entered<br />locations, font sizes or form data are saved.</p>
<p style=“text-align: left;“>Advertising cookies</p>
<p style=“text-align: left;“>These cookies are also called targeting cookies. They are used to deliver customized advertising to the user. This can be very practical, but also very annoying.<br />When you visit a website for the first time, you are usually asked which of these<br />cookie types you would like to allow. And of course, this decision is also stored in a cookie.</p>
<p style=“text-align: left;“>If you want to know more about cookies and do not shy away from technical documentation,<br />we recommend https://datatracker.ietf.org/doc/html/rfc6265, the Request for Comments of the<br />Internet Engineering Task Force (IETF) called “HTTP State Management Mechanism”.<br />Purpose of processing via cookies<br />The purpose ultimately depends on the cookie in question. You can find more details on this at<br />below or from the manufacturer of the software that sets the cookie.</p>
<p style=“text-align: left;“>What data is processed?</p>
<p style=“text-align: left;“>Cookies are little helpers for many different tasks. Unfortunately, it is not possible to generalize which data is stored in cookies, but we will inform you about the processed or stored data in the following privacy policy about it.</p>
<p style=“text-align: left;“>Storage duration of cookies</p>
<p style=“text-align: left;“>The storage period depends on the cookie in question and is specified below. Some<br />cookies are deleted after less than an hour, others can remain stored on a<br />computer for several years.<br />You can also influence the storage period yourself. You can delete all cookies manually at any time via your browser<br />(see also “Right to object” below). Furthermore,<br />cookies that are based on consent will be deleted at the latest after you withdraw your consent, whereby the legality of the storage until then remains unaffected.</p>
<p style=“text-align: left;“>Right to object – how can I delete cookies?</p>
<p style=“text-align: left;“>You decide how and whether you want to use cookies. Regardless of which<br />service or website the cookies originate from, you always have the option of deleting, deactivating or only partially accepting cookies at. For example, you can block cookies from third-party providers, but allow all other cookies.<br />If you want to find out which cookies have been stored in your browser, if you want to change or delete<br />cookie settings, you can find this in your browser settings:<br />Chrome: Delete, activate and manage cookies in Chrome<br />Safari: Manage cookies and website data with Safari<br />Firefox: Delete cookies to remove data that websites have placed on your computer<br />Internet Explorer: Delete and manage cookies<br />Microsoft Edge: Delete and manage cookies</p>
<p style=“text-align: left;“>If you generally do not want to have cookies, you can set up your browser so that<br />always informs you when a cookie is to be set. In this way, you can decide for each individual<br />cookie whether or not to allow it. The procedure differs depending on the browser. It is best to search for the instructions in Google using the search term “delete cookies Chrome” or “deactivate cookies Chrome” in the case of a Chrome browser.</p>
<p style=“text-align: left;“><strong>Legal basis</strong></p>
<p style=“text-align: left;“>The so-called “cookie guidelines” have been in place since 2009. This states that the storage<br />of cookies requires your consent (Article 6(1)(a) GDPR). However, there are still very different reactions to these directives within the EU countries. In Austria<br />, however, this directive was implemented in Section 165 (3) of the Telecommunications Act<br />(2021). In Germany, the cookie directives have not been implemented as national law.<br />Instead, this directive was largely implemented in Section 15 (3) of the<br />Telemedia Act (TMG), which has been replaced by the Digital Services Act (DDG) since May 2024</p>
<p style=“text-align: left;“>For strictly necessary cookies, even if no consent has been given, there are legitimate<br />interests (Article 6(1)(f) GDPR), which in most cases are of an economic nature. We<br />would like to provide visitors to the website with a pleasant user experience and for this<br />certain cookies are often absolutely necessary.<br />Insofar as cookies that are not absolutely necessary are used, this only happens in the case of<br />your consent. The legal basis in this respect is Art. 6 para. 1 lit. a GDPR.</p>
<p style=“text-align: left;“>In the following sections, you will be informed in more detail about the use of cookies if<br />uses cookies.</p>
<p style=“text-align: left;“>Web hosting introduction<br />Web hosting summary</p>
<p style=“text-align: left;“>Data subjects: Visitors to the website</p>
<p style=“text-align: left;“>Purpose: professional hosting of the website and securing its operation</p>
<p style=“text-align: left;“>Processed data: IP address, time of website visit, browser used and<br />other data. You can find more details on this below or at the<br />web hosting provider used in each case.</p>
<p style=“text-align: left;“>Storage period: depends on the respective provider, but usually 2 weeks<br />Legal basis: Art. 6 para. 1 lit.f GDPR (legitimate interests)</p>
<p style=“text-align: left;“>What is web hosting?</p>
<p style=“text-align: left;“>When you visit websites these days, certain information – including<br />personal data – is automatically created and stored, including on this website. This<br />data should be processed as sparingly as possible and only with justification. By website<br />we mean the entirety of all web pages on a domain, i.e. everything from the start page<br />(homepage) to the very last subpage (like this one). By domain we mean, for example,<br />example.de or sampleexample.com.<br />If you want to view a website on a computer, tablet or smartphone,<br />you use a program called a web browser. You probably know some<br />web browsers by name: Google Chrome, Microsoft Edge, Mozilla Firefox and Apple Safari. We<br />call them browsers or web browsers for short.</p>
<p style=“text-align: left;“>To display the website, the browser must connect to another computer where the website’s<br />code is stored: the web server. Operating a web server is a<br />complicated and time-consuming task, which is why this is usually done by professional providers,<br />providers. They offer web hosting and thus ensure that<br />website data is stored reliably and error-free. A lot of technical terms,<br />but please stay tuned, it will get even better!</p>
<p style=“text-align: left;“>When connecting the browser on your computer (desktop, laptop, tablet or<br />smartphone) and during data transfer to and from the web server,<br />may process personal data. On the one hand, your computer stores data,<br />on the other hand, the web server must also store data for a period of time in order to ensure proper<br />operation.</p>
<p style=“text-align: left;“>Why do we process personal data?</p>
<p style=“text-align: left;“>The purposes of data processing are</p>
<p style=“text-align: left;“>1. professional hosting of the website and securing its operation</p>
<p style=“text-align: left;“>2. to maintain operational and IT security</p>
<p style=“text-align: left;“>3. anonymous evaluation of access behavior to improve our offer and, if necessary,<br />for criminal prosecution or prosecution of claims</p>
<p style=“text-align: left;“>What data is processed?</p>
<p style=“text-align: left;“>Even while you are currently visiting our website, our web server, which is the<br />computer on which this website is stored, usually automatically saves data such as<br />the complete Internet address (URL) of the website accessed<br />browser and browser version (e.g. Chrome 87)<br />the operating system used (e.g. Windows 10)<br />the address (URL) of the previously visited page (referrer URL) (e.g.<br />https://www.beispielquellsite.de/vondabinichgekommen/)<br />the host name and IP address of the device from which access is made (e.g.<br />COMPUTERNAME and 194.23.43.121) date and time in files, the so-called web server log files<br />How long is data stored?<br />As a rule, the above-mentioned data is stored for two weeks and then automatically deleted. We do not pass this data on, but we cannot rule out the possibility that this data may be viewed by the authorities in the event of unlawful conduct.</p>
<p style=“text-align: left;“>In short: Your visit is logged by our provider (company that runs our website on special<br />computers (servers)), but we do not pass on your data without the consent of!</p>
<p style=“text-align: left;“>Legal basis</p>
<p style=“text-align: left;“>The lawfulness of the processing of personal data in the context of web hosting results<br />from Art. 6 para. 1 lit. f GDPR (protection of legitimate interests), because the use of<br />professional hosting with a provider is necessary in order to present the company securely on the Internet<br />and in a user-friendly manner and to be able to pursue attacks and claims from this if necessary.</p>
<p style=“text-align: left;“>There is a contract between us and our hosting provider IONOS for<br />order processing in accordance with Art. 28 f. GDPR, which guarantees compliance with data protection<br />and data security.</p>
<p style=“text-align: left;“>1&amp;1 IONOS web hosting privacy policy</p>
<p style=“text-align: left;“><strong>Summary of data protection</strong></p>
<p style=“text-align: left;“>Data subject: Visitors to the website</p>
<p style=“text-align: left;“>Purpose: Website storage and accessibility on the Internet<br />Processed data: IP address, but primarily also technical data</p>
<p style=“text-align: left;“>Storage period: Visitor data is deleted after 8 weeks</p>
<p style=“text-align: left;“>Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interests)</p>
<p style=“text-align: left;“>What is 1&amp;1 IONOS Webhosting?</p>
<p style=“text-align: left;“>To host our website, we use the web hosting services of the company IONOS by<br />1&amp;1. In Germany, 1&amp;1 IONOS SE is based at Elgendorfer Str. 57 in 56410 Montabaur.<br />In Austria, you will find 1&amp;1 IONOS SE at Gumpendorfer Straße 142/PF 266 in 1060 Vienna.<br />IONOS offers the following web hosting services: Domain, Website &amp; Shop, Hosting &amp;<br />WordPress, Marketing, E-Mail &amp; Office, IONOS Cloud and Server. With over 22 million domains,<br />almost 9 million customer contracts and 100,000 servers, IONOS is one of the largest German<br />top dogs in the web hosting sector.</p>
<p style=“text-align: left;“>We have already mentioned it in our introductory words on the subject of web hosting:<br />hosting also stores data about you or your end device on the IONOS servers.<br />First and foremost, your IP address, which is known to be personal data, is stored. In addition, technical data such as the URL of our website, the name<br />of your internet browser or which operating system you are using is also stored.</p>
<p style=“text-align: left;“>Why do we use 1&amp;1 IONOS web hosting?</p>
<p style=“text-align: left;“>IONOS was founded in Germany back in 1988 and therefore has over 30 years of experience at. However, this does not mean that the company is not constantly evolving in technological terms. It is precisely this combination of experience and innovative spirit that we believe provides a good basis for our website at. After all, we want our website to function smoothly 24 hours a day at<br />and guarantee a high level of security. Since IONOS<br />does not limit the monthly data traffic and provides plenty of storage space, our website remains powerful even with many visitors.</p>
<p style=“text-align: left;“>What data is processed by 1&amp;1 IONOS Webhosting?</p>
<p style=“text-align: left;“>1&amp;1 IONOS Webhosting may also process your personal data. When you visit our website, the following data about you or your computer is stored by IONOS:</p>
<p style=“text-align: left;“>the previously visited website (also called referrer)<br />the requested website (in this case our website)</p>
<p style=“text-align: left;“>Browser type and browser version</p>
<p style=“text-align: left;“>Your operating system and device type used<br />Time of page access</p>
<p style=“text-align: left;“>Your IP address in anonymized form</p>
<p style=“text-align: left;“>The data collected is used to increase the security of the website, to detect possible<br />errors and also to carry out anonymous statistical analyses. According to IONOS,<br />only uses the anonymized IP address to determine the location of access.</p>
<p style=“text-align: left;“>How long and where is the data stored?</p>
<p style=“text-align: left;“>The data is stored on IONOS‘ own servers. In principle, IONOS stores the data for as long as is necessary to fulfill its obligations. Visitor data is stored for 8<br />weeks. However, data may also be stored for longer, for example to provide with evidence for possible legal disputes. Visitor data will not be passed on to third parties and will not be transferred to a country outside the EU.<br />How can I delete my data or prevent data storage?<br />You have the right to information, correction or deletion and restriction of processing of your personal data at any time. You can also withdraw your consent<br />to the processing of data at any time.<br />If you generally want to deactivate, delete or manage cookies, you can find the relevant links to the instructions for the most popular browsers at<br />the section browsers.</p>
<p style=“text-align: left;“>Legal basis</p>
<p style=“text-align: left;“>We have a legitimate interest in using IONOS in order to be able to offer our online service. Professional hosting with a provider is necessary in order to present our<br />company securely and in a user-friendly manner on the Internet and to be able to track possible cyber attacks. The legal basis for this is Art. 6 para. 1 lit. f GDPR<br />(legitimate interests).<br />You can find much more information about data protection at IONOS in the<br />privacy policy at https://www.ionos.de/terms-gtc/datenschutzerklaerung/. If you have any further questions about data protection at, you can also contact the data protection team at<br />IONOS by emailing datenschutz@ionos.de.<br />Data processing agreement (DPA) IONOS<br />We have concluded a data processing agreement (DPA) with IONOS in accordance with Article 28 of the General Data Protection Regulation (GDPR). You can find out exactly what a DPA is and, in particular, what must be included in a DPA at in our general section<br />“Data processing agreement (DPA)”.</p>
<p style=“text-align: left;“>This contract is required by law because IONOS processes personaldata on our behalf. It clarifies that IONOS may only process data that it receives from us in accordance with our instructions and must comply with the GDPR. You can find the link to the<br />order processing contract (AVV) at<br />https://www.ionos.de/hilfe/datenschutz/allgemeine-informationen-zur-datenschutz-grundverordnu<br />ng-dsgvo/auftragsverarbeitung/.</p>
<p style=“text-align: left;“><strong>Explanation of terms used</strong></p>
<p style=“text-align: left;“>We always endeavor to write our privacy policy as clearly and comprehensibly as possible. However, this is not always easy, especially when it comes to technical and legal topics. It often makes sense to use legal terms (such as personal data) or certain<br />technical terms (such as cookies, IP address). However, we do not want to use these<br />without explanation. Below you will find an alphabetical list of important<br />terms that we may not have sufficiently addressed in the previous privacy policy. If these terms have been taken from the GDPR and are<br />definitions, we will also quote the GDPR texts here and add our own explanations to<br />where necessary.</p>
<p style=“text-align: left;“>Profiling</p>
<p style=“text-align: left;“>Definition in accordance with Article 4 of the GDPR<br />For the purposes of this Regulation, the term:<br />“profiling” means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal<br />aspects relating to a natural person, in particular to<br />analyze or predict aspects concerning that natural person’s performance at work, economic situation, health, personal preferences, interests,<br />reliability, behavior, location or movements;<br />Explanation: Profiling involves the collection of various pieces of information about a person<br />in order to learn more about that person. In the web sector, profiling<br />is often used for advertising purposes or for credit checks. For example, web or<br />advertising analysis programs collect data about your behaviour and interests<br />on a website. This results in a special user profile that can be used to target advertising to<br />a specific target group.</p>
<p style=“text-align: left;“>Closing words</p>
<p style=“text-align: left;“>Congratulations! If you are reading these lines, you have really “fought” your way through our entire privacy policy at or at least scrolled this far. As you can see from the<br />scope of our privacy policy, we take the protection of your personal data, anything but lightly.<br />It is important to us to inform you about the processing of<br />personal data to the best of our knowledge and belief. However, we not only want to tell you which<br />data is processed, but also explain the reasons for using various software programs. As a rule, privacy policies sound very technical and legal. However, as most of you are not web developers or lawyers, we wanted to take a different approach to and explain the facts in simple and clear language.<br />Of course, this is not always possible due to the subject matter. Therefore, the most important<br />terms are explained in more detail at the end of the privacy policy.<br />If you have any questions about data protection on our website, please do not hesitate to contact us or the<br />controller. We wish you a pleasant time and hope to welcome you back to our website<br />soon.<br />All texts are protected by copyright.</p>
<p style=“text-align: left;“>Source: Data protection declaration created with the data protection generator for Austria by AdSimple</p>