Privacy policy

Below we would like to explain how we process your data.

The controller within the meaning of the GDPR is:

Schlosserei – Zaunbau Nähr GmbH & Co KG
Street: Gewerbepark Harbach 35
Postal code / town: A-5630 Bad Hofgastein, Austria
Phone: +43 6432 8770
Fax: +43 6432 6895

Email: office@naehr.at
Website: www.naehr.at

The data processed includes:

• Your first and last name
• Your email address
• Your phone number

The personal data is processed for the following purposes:

• Arranging appointments
• General contact

We will delete the data as soon as storage is no longer necessary, or restrict processing if statutory retention obligations apply.

Disclosure of data

Your personal data is only passed on to third parties if this is necessary to fulfill our contractual and legal obligations or if you have given us your express consent. Recipients of your data may be service providers that we use to perform contracts with you, external service providers that we use to support IT system maintenance and development, to carry out analyses and to provide marketing services, and with whom we have concluded a data processing agreement, as well as authorities and government institutions, where we are legally obliged to do so.

Security measures and transfers to third countries

We have taken appropriate organizational and technical measures to protect your data against unauthorized access, loss or misuse. Our service providers are obliged by contracts and/or agreements to process the data exclusively in accordance with our instructions and to take appropriate security measures.

Should we pass on your data to third parties outside the European Union (EU) or the European Economic Area (EEA), we will ensure that an adequate level of protection exists, e.g. through the use of EU standard contractual clauses or through certification of the recipient by the EU.

Rights of data subjects

As a data subject, you have the right of access, rectification or erasure, restriction of processing and the right to object to the processing of your personal data. If you have given us your consent, you can withdraw it at any time with effect for

the future. You also have the right to data portability. Please send your requests, objections or withdrawals informally to the email address given above.

Questions and concerns

If you have any questions or concerns regarding the processing of your personal data, please contact our data protection officer at the contact address given in the legal notice. We will process your request as quickly as possible and inform you of the result. You also have the right to lodge a complaint with a supervisory authority. A list of the relevant authorities can be found at: https://www.dsb.gv.at

Cookiebot

We use the consent management service Cookiebot from Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark (Usercentrics). This enables us to obtain and manage website users’ consent to data processing. The processing is necessary to comply with a legal obligation (Art. 7 (1) GDPR) to which we are subject (Art. 6 (1) sentence 1 (c) GDPR). For this purpose, the following data is processed with the help of cookies:

Your IP address (the last three digits are set to ‘0’). Date and time of consent. Browser information. URL from which the consent was sent. An anonymous, random and encrypted key. Your consent status as the end user, as proof of consent.

The key and consent status are stored in the browser for 12 months using the “CookieConsent” cookie. This preserves your cookie preference for subsequent page requests. The key can be used to prove and trace your consent.

If you activate the “bulk consent” service function to enable consent for several websites through a single end-user consent, the service additionally stores a separate, random, unique ID with your consent. If all of the following criteria are met, this key is stored in encrypted form in the third-party cookie “CookieConsentBulkTicket” in your browser: You activate the bulk consent function in the service configuration. You allow third-party cookies in your browser settings. You have deactivated “Do Not Track” in your browser settings. You accept all or at least certain types of cookies when giving consent.

The website cannot be guaranteed to function without this processing.

Usercentrics is the recipient of your personal data and acts as a processor for us.

The processing takes place in the European Union. Further information on your options to object and to have data removed with regard to Usercentrics can be found at: https://www.cookiebot.com/de/privacy-policy/

Your personal data is deleted on a rolling basis after 12 months or immediately after termination of the contract between us and Usercentrics.

Please note our general comments above on deleting and deactivating cookies.

Cloudflare

We use the content delivery network (CDN) of Cloudflare Germany GmbH, Rosental 7, c/o Mindspace, 80331 Munich, Germany (Cloudflare) to increase the security and delivery speed of our website. This corresponds to our legitimate interest (Art. 6 (1) (f) GDPR). A CDN is a network of servers distributed worldwide that is able to deliver content to website users in an optimized way. For this purpose, personal data may be processed in Cloudflare’s server log files. Please see the explanations under “Hosting”.

Cloudflare is the recipient of your personal data and acts as a processor for us. This corresponds to our legitimate interest within the meaning of Art. 6 (1) sentence 1 (f) GDPR in not having to operate a content delivery network ourselves.

You have the right to object to the processing. Whether the objection is successful is to be determined by weighing the interests involved.

The processing of the data specified in this section is not required by law or by contract. The website cannot be guaranteed to function without this processing.

Your personal data is stored by Cloudflare for as long as is necessary for the purposes described.

Further information on your options to object and to have data removed with regard to Cloudflare can be found at: Cloudflare DPA

Cloudflare has implemented compliance measures for international data transfers. These apply to all worldwide activities in which Cloudflare processes personal data of natural persons in the EU. These measures are based on the EU standard contractual clauses (SCCs). Further information can be found at: https://www.cloudflare.com/cloudflare_customer_SCCs-German.pdf

Hosting & content delivery network

If you, as a visitor, neither contact us via the contact form nor make a purchase, we collect the following data transmitted by your browser in so-called log files:

IP address, date and time of the request, time zone difference from Greenwich Mean Time, content of the request, HTTP status code, amount of data transferred, website from which the request comes, and information on the browser and operating system.

This is necessary to display our website and ensure stability and security, so that our hosting provider can bill us for the services provided, and to enable efficient delivery of the website. This corresponds to our legitimate interest within the meaning of Art. 6 (1) sentence 1 (f) GDPR.

We use the following hosting provider to make our website available.

Kinsta Inc.
Attn: Privacy and Data Protection Team
8605 Santa Monica Blvd #92581
West Hollywood, CA 90069
USA
privacy@kinsta.com

For its infrastructure, Kinsta mainly uses the Google Cloud Platform service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (Google).

Kinsta has implemented compliance measures for international data transfers with Google. These apply to all worldwide activities in which Kinsta processes personal data of natural persons in the EU. These measures are based on the EU standard contractual clauses (SCCs).

Kinsta is the recipient of your personal data and acts as a processor for us. This corresponds to our legitimate interest within the meaning of Art. 6 (1) sentence 1 (f) GDPR in not having to maintain a server on our own premises. The server location is Germany.

Further information on your options to object and to have data removed with regard to Kinsta Inc. can be found at: https://kinsta.com/legal/privacy-policy/

You have the right to object to the processing. Whether the objection is successful is to be determined by weighing the interests involved.

The data is deleted after 30 days.

The processing of the data specified in this section is not required by law or by contract. The website cannot be guaranteed to function without this processing.

Google Analytics 4

This website uses Google Analytics 4, a web analytics service provided by Google Inc. (“Google”). Google Analytics 4 uses “cookies”, text files that are stored on your computer and enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there.
IP anonymization is activated on this website, so that your IP address is shortened beforehand by Google within the member states of the European Union or in other states party to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with further services relating to website and internet use.

The data is processed on the basis of your consent in accordance with Art. 6 (1) (a) GDPR, provided you have given it to us. You can withdraw your consent at any time with effect for the future.

In addition, this website uses Google Analytics 4 for a cross-device analysis of visitor flows, which is carried out via a user ID. You can deactivate the cross-device analysis of your usage in your customer account under “My data”, “personal data”.

You can prevent the storage of cookies by setting your browser software accordingly; however, we point out that in this case you may not be able to use all functions of this website to their full extent. You can also prevent the collection of the data generated by the cookie and relating to your use of the website (including your IP address) by Google, as well as the processing of this data by Google, by changing your cookie consent settings via the “Cookie settings” link in the footer of our website.

Further information on the terms of use and data protection can be found at the following links: https://www.google.com/analytics/terms/de.html and https://policies.google.com/privacy.

Google Tag Manager

Google Tag Manager (GTM) is a service provided by Google LLC that makes it possible to manage website tags via an interface. By using GTM, the website can integrate various services and tools, such as Google Analytics, remarketing, conversion tracking and others, more easily and without changes to the website’s source code.

Google Tag Manager uses so-called “cookies”, text files that are stored on your computer and enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there.

IP anonymization has been activated on this website, so that your IP address is shortened beforehand by Google within member states of the European Union or in other states party to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with further services relating to website and internet use.

The IP address transmitted by your browser as part of Google Tag Manager is not merged with other Google data. You can prevent the storage of cookies by setting your browser software accordingly; however, we point out that in this case you may not be able to use all functions of this website to their full extent.

Further information on data protection in connection with Google Tag Manager can be found in Google’s privacy policy at: https://policies.google.com/privacy

Please note that this privacy notice is specific to Google Tag Manager and that a separate privacy policy may apply to any other tool or service integrated into the website.

SSL or TLS encryption

Our website uses SSL (Secure Socket Layer) and TLS (Transport Layer Security) technology to encrypt data transmissions. These technologies safeguard the integrity, confidentiality and authenticity of the transmitted data to ensure that it cannot be read or altered by unauthorized persons.

When you visit our website, your browser automatically establishes a connection to our server that is encrypted by SSL/TLS. You can recognize this by the fact that the address line of your browser changes from “http” to “https” and the lock symbol appears in the address line.

Google Ads and Google conversion tracking

Our website uses Google Ads, an online advertising program from Google Inc. With Google Ads, we also use conversion tracking. When you click on an ad placed by Google, a cookie is set that is valid for 30 days and is not used to personally identify users. The cookie enables us and Google to recognize that you clicked on the ad and were redirected to our site. Each Google Ads customer receives a different cookie, and the cookies cannot be tracked across the websites of Google Ads customers. You can object to the use of conversion tracking at any time by deactivating the cookie in your browser. Please note that deactivating cookies may limit the functionality of our website. Further information can be found in Google’s privacy policy.

We would also like to point out that our website uses Google conversion tracking. Conversion tracking is an analysis tool from Google that allows us to find out whether a particular action on our website, such as a purchase or a registration, was triggered by a click on an ad placed by Google. When you click on an ad placed by Google, a cookie is stored on your computer or mobile device. These cookies generally expire after 30 days and are not used to personally identify users. You can object to the collection of data by Google conversion tracking at any time by deactivating the corresponding cookie in your internet browser. Further information on Google Ads and Google conversion tracking can be found in Google’s privacy policy.

Facebook Pixel

To measure the effectiveness of our advertising campaigns, we use a so-called visitor action pixel from Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”) on our website. This pixel enables us to track the behavior of visitors who have reached our website via a Facebook ad. This allows us to evaluate the effectiveness of the Facebook ads and improve our advertising measures in the future.

The data collected is anonymous to us, and we cannot draw any conclusions about the identity of users. However, Facebook stores and processes the data, which means that a connection to the respective user profile can be established. Facebook can then use this data for its own advertising purposes, as described in Facebook’s data use policy. As the site operator, we cannot influence this use of the data.

Further information on protecting your privacy can be found in Facebook’s privacy notice. You can also deactivate the “Custom Audiences” remarketing function by logging in to Facebook and opening the settings for ads. If you do not have a Facebook account, you can deactivate usage-based advertising from Facebook on the website of the European Interactive Digital Advertising Alliance.

Google reCAPTCHA

Our website uses the services of “Google reCAPTCHA”, a product of Google Inc., to ensure that data is entered by a person and not by an automated program. To do this, reCAPTCHA analyzes the behavior of the visitor on the website on the basis of various characteristics, such as IP address, time spent on the website and mouse movements. The data obtained is forwarded to Google. This analysis takes place entirely in the background, and the visitor is not notified of it. The data is processed on the basis of the website operator’s legitimate interest in protecting its web pages from misuse and spam. Further information on Google reCAPTCHA and its privacy policy can be found at the following links: https://www.google.com/intl/de/policies/privacy/ and https://www.google.com/recaptcha/intro/android.html.

Use of Google Signals

On our website, we use Google Signals, a service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Signals enables us to carry out an extended analysis of user behavior across different devices (cross-device tracking).
If you have a Google account and have agreed to Google’s “personalized advertising” service, Google Signals can link your usage patterns across different devices by using temporary Google IDs for cross-device tracking, which are anonymized in our Google Analytics traffic. However, your data is only analyzed in this way if you have also activated the “personalized advertising” setting in your Google account.
We use Google Signals for marketing and optimization purposes, in particular to analyze the use of our website and make continuous improvements. The statistical evaluation of user behavior allows us to improve our offering and make it more interesting for you as a user.

Please note that data collected via Google Signals may be transferred to the USA and processed there. However, as Google is certified under the EU-U.S. Data Privacy Framework, the European Commission has confirmed that the transfer of data to the USA is permitted under the same conditions as within the EU.

Further information on Google Signals can be found in Google’s privacy policy: https://policies.google.com/privacy.

You can refuse the use of Google Signals by deactivating the “personalized advertising” setting in your Google account: https://adssettings.google.com/.

Transfer of data to the USA and application of the Trans-Atlantic Data Privacy Framework

On our website, we use services that may send data about your use of this website, including third-party content, to the United States. These transfers now take place under the protection of the new Trans-Atlantic Data Privacy Framework, which was confirmed by the European Commission on 10 July 2023 as the successor to the “Privacy Shield”. This framework offers a level of data protection comparable to that in the EU. The transfer of personal data to the USA is therefore permitted under the same criteria as if the data recipient were based in the EU, provided the data recipient is certified under the EU-U.S. Data Privacy Framework.
It is important to note that only companies certified under the EU-U.S. Data Privacy Framework can guarantee an adequate level of data protection. We ensure that all service providers we use that transfer data to the USA are on the official list of certified companies: https://www.privacyshield.gov/list. This factor is strictly taken into account when selecting our service providers in order to guarantee the protection of your data.

Withdrawal of consent and objection to data processing

You can withdraw your consent to the use of marketing cookies and smart pixels at any time. You will find the link to the cookie settings in the footer of our website. In addition, you can control the management of marketing cookies by using self-regulation programs developed in many countries, such as https://www.aboutads.info/choices/ (USA) or https://www.youronlinechoices.com/uk/your-ad-choices (EU).

Copyright: Gipfelgold GmbH
Last updated: 21 November 2024