Privacy policy

Privacy Policy

Last updated: June 3, 2025

Summary for those in a hurry:

• We do not collect data during normal website visits
• No cookies are used (except for the multilingual cookie: "i18n_redirected")
• Analytics only with privacy-friendly Plausible (100% anonymous)
• Contact form data only with active use (via Basin)
• Videos are loaded via Cloudflare
• All data is transmitted encrypted
• You have rights to access, rectification, and deletion at any time
• We do not use automated decision-making

1. Introduction

This privacy policy applies to the website www.vulkanrot.at, operated by "Imkerei Vulkanrot, Romana Netzberger and Matthias Amon". We take the protection of your personal data very seriously and treat your personal data confidentially and in accordance with legal data protection regulations as well as this privacy policy.

2. Data Controller

Matthias Amon Gschirm 47, 3300 Amstetten, Austria Phone: +43 681 20303240 Email: info@vulkanrot.at

3. General Information on Data Processing

Important: We do not collect or store personal data during normal visits to our website. Data is only processed when you actively contact us.

Legal bases for processing:

• Consent (Art. 6(1)(a) GDPR): For contact forms and newsletters
• Contract performance (Art. 6(1)(b) GDPR): For orders and customer inquiries
• Legitimate interests (Art. 6(1)(f) GDPR): For anonymous web analytics and security

4. Cookies and Tracking

Our website does not use cookies from third parties.

5. Web Analytics with Plausible

We use Plausible Analytics, a privacy-friendly web analytics service that works without cookies and does not collect personal data.

• Plausible only collects anonymized, aggregated data
• No use of cookies or persistent identifiers
• No tracking across different websites or devices
• Hosted in the EU (Germany) More information:Plausible Privacy Policy

6. Contact Form (Basin)

For our contact form, we use the Basin service (Usebasin.com), operated by Moonshot Ventures, Inc., Canada.

Data processing by Basin:

• Basin acts as a processor for your form data
• Storage location: Canada (Digital Ocean)
• Automatic deletion: After 48 months, all data is automatically deleted
• Manual deletion: We delete your inquiries after processing, at the latest after 6 months

Processed data:

• Name (if provided)
• Email address
• Message content
• Timestamp of the message
• IP address (for spam prevention)

Legal basis:

Art. 6(1)(a) GDPR (consent through active form submission)

Data security:

Basin encrypts all data during transmission and storage. Communication is exclusively via HTTPS.

Basin Privacy:Basin Privacy Policy | Basin GDPR Info

7. Hosting by Vercel

Our website is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA.

Processed data:

• IP address (anonymized)
• Browser type and version
• Operating system
• Referrer URL
• Time of access

Data protection for US transfers:

Vercel uses EU Standard Contractual Clauses for data transfers to the USA. Details:Vercel DPA

8. Video Streaming via Cloudflare

Some videos are provided via Cloudflare Stream (m3u8 format). Cloudflare Inc. is based in the USA.

Data processing:

• Data is only transmitted when you click "Play"
• Cloudflare may collect technical data:
• IP address (anonymized)
• Browser type and version
• Operating system
• Time of access
• Cloudflare acts as a processor for streaming content

Data protection for US transfers:

Cloudflare uses various protection mechanisms:

• EU-US Data Privacy Framework certification
• EU Standard Contractual Clauses
• Encryption of all data transfers

Legal basis:

Art. 6(1)(f) GDPR (legitimate interests in efficient video delivery) Details:Cloudflare Privacy Policy

9. YouTube Videos

We embed YouTube videos in enhanced privacy mode. Data is only transmitted to YouTube/Google when you confirm the info banner. Google Privacy:Google Privacy Policy

10. Your Rights

Under the GDPR, you have the following rights:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR)
• Right to withdraw consent (Art. 7(3) GDPR) To exercise these rights, please contact us using the contact details provided above.

11. Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection supervisory authority. In Austria, this is: Austrian Data Protection Authority Barichgasse 40-42 1030 Vienna, Austria Phone: +43 1 52 152-0 Email: dsb@dsb.gv.at

12. Data Security

We take appropriate technical and organizational measures to protect your data:

• Encryption: All data transfers are via HTTPS/TLS
• Access control: Only authorized persons have access to personal data
• Data processing agreements: All service providers are contractually obligated to comply with the GDPR
• Regular review: Our security measures are continuously reviewed and improved Despite all security measures, absolute security of data transmission over the Internet cannot be guaranteed. We recommend transmitting sensitive data only in encrypted form.

13. Protection of Minors

Our website is not directed at persons under 16 years of age. We do not knowingly collect personal data from children. If we discover that we have inadvertently collected data from persons under 16, we will delete it immediately.

14. Automated Decision-Making

We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR. All decisions that have legal effects or significantly affect you are made by humans.

15. Changes to This Privacy Policy

We reserve the right to adapt this privacy policy to comply with changed legal requirements or when changing the service or data processing. The new version applies from the time it is published on our website. For significant changes, we will notify you by email if we have your email address on file.