Datenschutzerklärung
Privacy Policy
Last updated: June 3, 2025
Summary for those in a hurry:
- We do not collect data during normal website visits
- No cookies are used (except for the multilingual cookie: "i18n_redirected")
- Analytics only with privacy-friendly Plausible (100% anonymous)
- Contact form data only with active use (via Basin)
- Videos are loaded via Cloudflare
- All data is transmitted encrypted
- You have rights to access, rectification, and deletion at any time
- We do not use automated decision-making
1. Introduction
This privacy policy applies to the website www.vulkanrot.at, operated by "Imkerei Vulkanrot, Romana Netzberger and Matthias Amon". We take the protection of your personal data very seriously and treat your personal data confidentially and in accordance with legal data protection regulations as well as this privacy policy.
2. Data Controller
Matthias Amon Gschirm 47, 3300 Amstetten, Austria Phone: +43 681 20303240 Email: info@vulkanrot.at
3. General Information on Data Processing
Important: We do not collect or store personal data during normal visits to our website. Data is only processed when you actively contact us.
Legal bases for processing:
- Consent (Art. 6(1)(a) GDPR): For contact forms and newsletters
- Contract performance (Art. 6(1)(b) GDPR): For orders and customer inquiries
- Legitimate interests (Art. 6(1)(f) GDPR): For anonymous web analytics and security
4. Cookies and Tracking
Our website does not use cookies from third parties.
5. Web Analytics with Plausible
We use Plausible Analytics, a privacy-friendly web analytics service that works without cookies and does not collect personal data.
- Plausible only collects anonymized, aggregated data
- No use of cookies or persistent identifiers
- No tracking across different websites or devices
- Hosted in the EU (Germany) More information:Plausible Privacy Policy
6. Contact Form (Basin)
For our contact form, we use the Basin service (Usebasin.com), operated by Moonshot Ventures, Inc., Canada.
Data processing by Basin:
- Basin acts as a processor for your form data
- Storage location: Canada (Digital Ocean)
- Automatic deletion: After 48 months, all data is automatically deleted
- Manual deletion: We delete your inquiries after processing, at the latest after 6 months
Processed data:
- Name (if provided)
- Email address
- Message content
- Timestamp of the message
- IP address (for spam prevention)
Legal basis:
Art. 6(1)(a) GDPR (consent through active form submission)
Data security:
Basin encrypts all data during transmission and storage. Communication is exclusively via HTTPS.
Basin Privacy:Basin Privacy Policy | Basin GDPR Info
7. Hosting by Vercel
Our website is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA.
Processed data:
- IP address (anonymized)
- Browser type and version
- Operating system
- Referrer URL
- Time of access
Data protection for US transfers:
Vercel uses EU Standard Contractual Clauses for data transfers to the USA. Details:Vercel DPA
8. Video Streaming via Cloudflare
Some videos are provided via Cloudflare Stream (m3u8 format). Cloudflare Inc. is based in the USA.
Data processing:
- Data is only transmitted when you click "Play"
- Cloudflare may collect technical data:
- IP address (anonymized)
- Browser type and version
- Operating system
- Time of access
- Cloudflare acts as a processor for streaming content
Data protection for US transfers:
Cloudflare uses various protection mechanisms:
- EU-US Data Privacy Framework certification
- EU Standard Contractual Clauses
- Encryption of all data transfers
Legal basis:
Art. 6(1)(f) GDPR (legitimate interests in efficient video delivery) Details:Cloudflare Privacy Policy
9. YouTube Videos
We embed YouTube videos in enhanced privacy mode. Data is only transmitted to YouTube/Google when you confirm the info banner. Google Privacy:Google Privacy Policy
10. Your Rights
Under the GDPR, you have the following rights:
- Right of access (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to erasure (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object (Art. 21 GDPR)
- Right to withdraw consent (Art. 7(3) GDPR) To exercise these rights, please contact us using the contact details provided above.
11. Right to Lodge a Complaint
You have the right to lodge a complaint with a data protection supervisory authority. In Austria, this is: Austrian Data Protection Authority Barichgasse 40-42 1030 Vienna, Austria Phone: +43 1 52 152-0 Email: dsb@dsb.gv.at
12. Data Security
We take appropriate technical and organizational measures to protect your data:
- Encryption: All data transfers are via HTTPS/TLS
- Access control: Only authorized persons have access to personal data
- Data processing agreements: All service providers are contractually obligated to comply with the GDPR
- Regular review: Our security measures are continuously reviewed and improved Despite all security measures, absolute security of data transmission over the Internet cannot be guaranteed. We recommend transmitting sensitive data only in encrypted form.
13. Protection of Minors
Our website is not directed at persons under 16 years of age. We do not knowingly collect personal data from children. If we discover that we have inadvertently collected data from persons under 16, we will delete it immediately.
14. Automated Decision-Making
We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR. All decisions that have legal effects or significantly affect you are made by humans.
15. Changes to This Privacy Policy
We reserve the right to adapt this privacy policy to comply with changed legal requirements or when changing the service or data processing. The new version applies from the time it is published on our website. For significant changes, we will notify you by email if we have your email address on file.