Privacy Policy
Version Date: 10.09.2024
In accordance with Articles 13 and 14 of Regulation (EU) 2016/679 (General Data Protection Regulation; “GDPR”), the controller is obligated to inform the data subject about the processing of personal data. This document provides information about the personal data processed by us.
1. Definitions
To improve the understanding of this privacy policy, we provide a brief explanation of the terms used.
1.1 Personal data includes all information about the personal or factual circumstances of natural persons, such as name, address, email address, phone number, date of birth, age, gender, social security number, video recordings, photos, etc. Data related to legal entities is not subject to the provisions of the GDPR.
1.2 Processing refers to any operation or set of operations performed on personal data, whether by automated means or not, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination, or other forms of making available, alignment or combination, restriction, erasure, or destruction.
1.3The controller is the natural or legal person, authority, institution, or other entity that alone or jointly determines the purposes and means of processing personal data.
1.4 A processor is a natural or legal person, authority, institution, or other entity that processes personal data on behalf of the controller.
1.5 A recipient is a natural or legal person, authority, institution, or other entity to which personal data is disclosed, regardless of whether it is a third party or not.
2. My Contact Data
Name: Petr Richter | Richter Visuals
Email: info@richter-visuals.com
Tel. Number: + 41 76 564 45 49
Registered Address: Amraser Straße 63, Top 4, 6020 Innsbruck, Austria
3. Purposes and Legal Basis for Processing
3.1 Data may only be processed for a specific purpose and if such processing is based on a corresponding legal basis. The processing may be justified for the following reasons:
3.2 I process your data for the following purposes based on the following legal bases:
• Art. 6(1)(a) GDPR: Based on your voluntary consent for a specific purpose.
• Art. 6(1)(b) GDPR: For fulfilling a contract with you or for pre-contractual measures initiated by your request.
• Art. 6(1)(c) GDPR: Due to a legal obligation we are subject to.
• Art. 6(1)(d) GDPR: To protect your vital interests or those of another person.
• Art. 6(1)(e) GDPR: For tasks carried out in the public interest or in the exercise of official authority.
• Art. 6(1)(f) GDPR: Based on a balance of interests between our legitimate interests or those of a third party in processing your data and your rights or freedoms.
- Applicant Data: This includes personal details such as name, date of birth, place of birth, address, email address, phone number, and other information from your resume. These are necessary for utilizing our services and pre-contractual measures. They are collected directly from you.
- Contact Data: This includes name, address, email address, and phone number. These are necessary for service utilization and pre-contractual measures, especially when you contact us directly.
- Technical Information: This includes details like your IP address and operating system. These are necessary to ensure that our website is displayed correctly when accessed by you.
4. Recipients
4.1 Recipients assist me in fulfilling legal or regulatory obligations, initiating or fulfilling contracts, providing services requiring your consent, or carrying out processing activities in my legitimate interest. I may transfer or disclose data to the following recipients (data processors or controllers):
4.2 I transfer your data to other recipients only if you have given your explicit consent under Article 6(1)(a) GDPR, if it is legally permissible and necessary for fulfilling a contractual relationship with you under Article 6(1)(b) GDPR, if I am legally obligated to do so under Article 6(1)(c) GDPR, or if such transfer is required to protect my legitimate interests under Article 6(1)(f) GDPR, provided there is no overriding interest on your part in the non-disclosure of your data.
4.3 I intend to transfer data to the following third countries: the United States of America.
4.4 For the United States, the European Commission has issued an adequacy decision (C(2023) 4745 final, dated July 10, 2023), confirming that the United States provides an adequate level of data protection under Article 45 GDPR if my contractual partner is listed under the EU-US Data Privacy Framework. Information on the registration of specific providers can be found in the respective sections of this privacy policy.
4.5 If there is no adequacy decision, I may only transfer data based on appropriate safeguards, such as standard contractual clauses, binding corporate rules, approved codes of conduct, or certification mechanisms. Transfers may also be permissible under the conditions of Article 49 GDPR. Copies of these safeguards for your specific case are available upon request.
4.6 I do not intend to transfer data to any international organizations.
5. Retention Period
5.1 Data is generally stored only as long as required by statutory retention obligations. Beyond this, data may be retained if necessary for asserting or defending claims from third parties. Key retention periods are as follows:
• Corporate retention obligations under §§ 190, 212 UGB: 7 years.
• Retention for VAT invoices under § 11(2) UStG: 7 years.
• Retention for export documents under § 7(7) UStG: 7 years.
• Warranty claims under § 933 ABGB: 2 years.
• Claims for movable goods under § 1062 iVm § 1486 ABGB: 3 years.
• Claims from contracts under § 1486 ABGB: 3 years.
• General compensation claims under § 1489 ABGB: 3/30 years.
• Liability claims under § 13 PHG: 10 years.
6. WordPress and Hosting
6.1 I use the WordPress platform and the Elementor tool for my website. Web hosting is provided by WEDOS Internet, a.s., Masarykova 1230, 373 41 Hluboká nad Vltavou, Czech Republic.
6.2More information about how WEDOS processes personal data can be found in their privacy policy at: https://www.wedos.com/conditions/.
7. Google Services
7.1 Google Ireland Limited, Gordon House, Barrow Street, Dublin, D04 E5W5, Ireland, provides the following services. The privacy policy for Google can be found here.
Some services (e.g., Google Search, Google Maps) are provided or processed by Google LLC, 1600 Amphitheatre Pkwy, Mountain View, California 94043-1351, USA. Google LLC is listed under the EU-US Data Privacy Framework.
7.2 I use Google Ads for online marketing to promote my products and services.
7.3 Google Tag Manager is used as an organizational tool to centrally manage website tags through a user interface. These tags can record your activities on the website, and they are typically sourced from Google products such as Google Ads or Google Analytics.
7.4 Google Tag Manager does not set cookies or store data itself. It functions solely as a manager for the tags implemented within the system. The data is captured by the tags of the web analytics tools and is passed through to the respective tracking tools without being stored.
8. Cookies
8.1 Cookies are text files stored on your device to recognize it. They may contain information about your use of my services. Based on the European Court of Justice (ECJ) ruling in the Planet49 GmbH case, consent is required for cookies, even if they do not process personal data.
8.2 Some cookies are stored only while you are using the website (session cookies), while others remain stored for a longer period to recognize your device upon your return (persistent cookies). Certain cookies are essential for the website’s functionality (necessary cookies), while others collect data about visits and visitor origins without linking to your identity (performance cookies). Some cookies are used for marketing purposes (marketing cookies).
8.3 If cookies process personal data, this is done based on Article 6(1)(b) GDPR for contract performance, Article 6(1)(a) GDPR if consent is provided, or Article 6(1)(f) GDPR to protect my legitimate interests in ensuring optimal website functionality and a user-friendly experience.
8.4 Upon your first visit to the website, you can select which cookies to allow via the cookie declaration. Consent is required for marketing cookies. If you wish to withdraw your consent or adjust your cookie settings, you can do so directly in your browser.
8.5 I use cookies to enhance your experience and track interactions with our website:
• Conversion Cookie: Stored for 3 months to track conversions made on our website after clicking on a Google Ad.
• _gac Cookie: Stored for 3 months to track various user actions on our website.
• _fbp Cookie: Stored for 3 months and used to display advertising products.
• fr Cookie: Stored for 3 months to ensure the functionality of Meta Pixel.
• Comment_author Cookie: Stored for 12 months and saves the text and username when you leave a comment.
• Comment_author_url Cookie: Stored for 12 months and saves the URL entered in a text field on our website.
• Comment_author_email Cookie: Stored for 12 months and saves the user’s email address if provided.
9. Rights
9.1 You have the right to request confirmation of whether personal data is processed and to access such data, including details about the processing purposes, categories of data, and recipients.
9.2 You have the right to request corrections or completion of inaccurate or incomplete personal data.
9.3 You may request the deletion of personal data under certain conditions, such as when it is no longer needed for its original purpose or if consent is withdrawn.
9.4 You may request processing restrictions under specific conditions, such as disputing the accuracy of your data.
9.5 You have the right to receive personal data in a structured, commonly used format and to transmit it to another controller.
9.6 You may object to data processing based on legitimate interests or for direct marketing purposes.
9.7 You have the right to withdraw consent at any time without affecting the legality of prior processing.
9.8 If you believe processing violates data protection laws, you can file a complaint with the Austrian Data Protection Authority, Barichgasse 40-42, 1030 Vienna, Austria.
If you have further questions or need additional details, feel free to reach out.