<\/svg><\/span>.<\/p>\n<\/li>\n<\/ul>\n<\/h2>\n6. Cookies & Consent Management (CookieYes | GDPR Cookie Consent)<\/h2>\n This website uses cookies and similar technologies to ensure the proper functioning of the website, analyse usage and improve the user experience.<\/p>\n
a) Necessary cookies<\/strong>b) Non-essential cookies (e.g. analytics)<\/strong>after you have given your consent.<\/strong><\/p>\nFor managing consent, I use CookieYes | GDPR Cookie Consent<\/strong>. This tool typically stores your selection (consent\/withdrawal) in the form of a cookie on your device so that your decision can be taken into account on future visits. <\/p>\nRevocation<\/strong>: You can withdraw your consent at any time with effect for the future by accessing the cookie settings<\/strong> and changing your selection.<\/p>\n<\/h2>\n7. Google Tag Manager<\/h2>\n I use Google Tag Manager<\/strong> (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). The Google Tag Manager is used for the technical management of website tags <\/strong>(e.g. integration of analytics tools). <\/p>\nThe Tag Manager itself is a management tool<\/strong> and does not necessarily create user profiles<\/strong>; however, it may establish a connection to Google servers when loading, during which technical data<\/strong> (e.g. IP address) may be processed.<\/p>\nConsent-based tools <\/strong>(e.g. Analytics) are only loaded after consent<\/strong> has been granted.<\/p>\n<\/h2>\n8. Google Analytics 4 (GA4)<\/h2>\n If you have given your consent, this website uses Google Analytics 4<\/strong>, a web analytics service.<\/p>\n Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.<\/strong><\/p>\nGoogle Analytics <\/strong>allows us to analyse the use of our website and improve its functionality and content.<\/p>\nLegal bases:<\/strong><\/p>\n\n\nConsent pursuant to Art. 6(1)(a) GDPR (processing)<\/p>\n<\/li>\n
\nConsent pursuant to Section 165(3) TKG 2021 (cookies\/device access)<\/p>\n<\/li>\n<\/ul>\n
What data is processed?<\/strong>Recipients \/ Data processing on behalf:
Third-country transfer:
Retention period:
Revocation:
I do not use Google Ads features<\/strong> and Google Signals<\/strong> for remarketing\/cross-device advertising.<\/p>\n<\/h2>\n9. Google Search Console<\/h2>\n I use Google Search Console to monitor the technical performance and visibility of my website in Google Search (e.g. indexing, crawling errors, search queries in aggregated form).<\/p>\n
As a rule, no personal data of website visitors is collected directly on the website for this tool; Search Console is an administration and analysis tool for website operators. I mention its use for transparency reasons. <\/p>\n
<\/h2>\n10. Server log files (website operation)<\/h2>\n When visiting my website, server log files are processed to ensure operation and for security purposes (e.g. IP address, time of access, pages accessed, browser information).<\/p>\n
Purpose: technical provision, stability, error analysis, defense against attacks
<\/h2>\n11. Who has access to your data?<\/h2>\n As the controller, I generally have access to personal data. In addition, it may be necessary for data processors (e.g. IT\/hosting\/tool providers) to have access insofar as this is required to provide the website\/services. These service providers are contractually obliged to comply with the GDPR. <\/p>\n
<\/h2>\n12. Do I share your data with third parties?<\/h2>\n Your data will not be shared without a legal basis. A transfer may occur in particular: <\/p>\n
\n\nto data processors (e.g. technical service providers, website tools) if this is necessary for operation\/service<\/p>\n<\/li>\n
\nto authorities\/public bodies if I am legally obliged to do so<\/p>\n<\/li>\n<\/ul>\n
Data will not be shared for advertising purposes.<\/p>\n
<\/h2>\n13. Where is your data stored?<\/h2>\n Data is stored \u2013 insofar as required for my activities \u2013 on my work devices (PC\/laptop) and\/or with the technical service providers used, insofar as this is necessary for service provision, administration, and secure processing.<\/p>\n
<\/h2>\n14. How do I protect your data?<\/h2>\n I implement appropriate technical and organizational security measures to protect data against loss, misuse, or unauthorized access (e.g. access controls, secure passwords, encryption of data carriers, antivirus protection, regular updates).<\/p>\n
<\/h2>\nSSL\/TLS encryption<\/h2>\n For security reasons and to protect the transmission of confidential content, this website uses SSL\/TLS encryption. You can recognize an encrypted connection by the browser\u2019s address line changing from \u201chttp:\/\/\u201d to \u201chttps:\/\/\u201d and by the lock symbol. <\/p>\n
<\/h2>\n16. How long is data stored?<\/h2>\n I generally store personal data only for as long as necessary:<\/p>\n
\n\nas long as a customer\/client\/prospect relationship exists or for the purpose of processing inquiries<\/p>\n<\/li>\n
\nas long as statutory retention obligations apply (e.g. tax law obligations)<\/p>\n<\/li>\n
\nuntil you withdraw your consent (e.g. newsletter, analytics) or \u2013 where possible \u2013 request deletion<\/p>\n<\/li>\n<\/ul>\n
<\/h2>\n17. Your rights as a data subject<\/h2>\n Under the GDPR, you generally have the following rights:<\/p>\n
\n\nAccess (Art. 15 GDPR)<\/p>\n<\/li>\n
\nRectification (Art. 16 GDPR)<\/p>\n<\/li>\n
\nErasure (Art. 17 GDPR)<\/p>\n<\/li>\n
\nRestriction of processing (Art. 18 GDPR)<\/p>\n<\/li>\n
\nData portability (Art. 20 GDPR)<\/p>\n<\/li>\n
\nObjection to processing (Art. 21 GDPR)<\/p>\n<\/li>\n
\nWithdrawal of consent at any time (Art. 7(3) GDPR), without affecting the lawfulness of processing carried out up to that point.<\/p>\n<\/li>\n<\/ul>\n
To exercise your rights, please contact me at: office@ecstaticbusiness.com<\/svg><\/span><\/a><\/strong><\/p>\n<\/h2>\n18. Right to Lodge a Complaint<\/h2>\n If you believe that the processing of your data violates data protection law or that your rights have otherwise been infringed, you may lodge a complaint with the supervisory authority.<\/p>\n
In Austria, this is the Austrian Data Protection Authority (DSB).<\/p>\n
<\/h2>\n19. Obligation to Provide Data<\/h2>\n The provision of personal data depends on the context:<\/p>\n
\n\nContract conclusion\/service provision: Yes, data necessary for contract fulfilment and billing must be provided.<\/p>\n<\/li>\n
\nWebsite visits: No, generally not; however, technical data (e.g. IP address) is generated for technical reasons.<\/p>\n<\/li>\n
\nNewsletter: Only if you subscribe \u2013 then email address (and possibly name) are required.<\/p>\n<\/li>\n<\/ul>\n
<\/h2>\n20. Automated Decision-Making \/ Profiling<\/h2>\n No automated decision-making including profiling within the meaning of Art. 22 GDPR takes place.<\/p>\n
<\/h2>\n21. Status of This Privacy Policy<\/h2>\n This privacy policy will be updated if necessary to reflect legal or technical changes.<\/p>\n
[\/et_pb_text][\/et_pb_column][\/et_pb_row][\/et_pb_section]<\/p>\n","protected":false},"excerpt":{"rendered":"
Privacy Policy \/ Information pursuant to Articles 13 and 14 GDPR Protecting your personal data is a matter of course for me. I process your data exclusively on the basis of the applicable legal provisions \u2013 in particular the General Data Protection Regulation (GDPR) and the Telecommunications Act 2021 (TKG 2021). In this privacy […]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"_et_pb_use_builder":"on","_et_pb_old_content":"","_et_gb_content_width":"","footnotes":""},"class_list":["post-2194","page","type-page","status-publish","hentry"],"acf":[],"_links":{"self":[{"href":"https:\/\/www.ecstaticbusiness.com\/en\/wp-json\/wp\/v2\/pages\/2194","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.ecstaticbusiness.com\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.ecstaticbusiness.com\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.ecstaticbusiness.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.ecstaticbusiness.com\/en\/wp-json\/wp\/v2\/comments?post=2194"}],"version-history":[{"count":9,"href":"https:\/\/www.ecstaticbusiness.com\/en\/wp-json\/wp\/v2\/pages\/2194\/revisions"}],"predecessor-version":[{"id":2586,"href":"https:\/\/www.ecstaticbusiness.com\/en\/wp-json\/wp\/v2\/pages\/2194\/revisions\/2586"}],"wp:attachment":[{"href":"https:\/\/www.ecstaticbusiness.com\/en\/wp-json\/wp\/v2\/media?parent=2194"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}