1. Privacy at a glance
How to contact us
The person responsible for the processing of personal data is the natural or legal person who, alone or in collaboration with others, decides on the purposes and means of processing personal data. FunderMax GmbH (Klagenfurter Strasse 87 - 89, A-9300 St.Veit / Glan, E-Mail: firstname.lastname@example.org) is responsible for data processing on this website in accordance with Art. 4 para. 7 of the General Data Protection Regulation (GDPR).
If you have any concerns/questions or would like to assert your rights in relation to the processing/use of your personal data, please use the contact info above. (See point 10).
In part, we use external service providers to process personal data (so-called processors). All of whom have been carefully selected and commissioned by us, are bound by our instructions and are regularly inspected.
The following processors/3rd parties are working on our behalf:
Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA (See points 6, 7, 8, 9 below)
Hotjar Ltd, Level 2, St Julian's Business Center, 3, Elia Zammit Street, St Julian's STJ 1000, Malta, Europe (See point 8 below)
Transactions outside the EEA
As a processor, we use, among others, Google LLC ("Google"), located at 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. We will provide Google with your IP address (at most in anonymised form), information about website access (URL) and estimates of demographics and age. The legal basis for this transmission is our legitimate interest in the statistical analysis of user behaviour for the optimisation of our website and for marketing purposes (Art. 6 (1) (f) GDPR).
Google is certified for the US-European Data Protection Convention "Privacy Shield", which ensures compliance with the data protection level applicable in the EU. In addition to our general and group-wide security policies, data will only be transmitted pseudonymously. A specific connection of the data to your person is therefore not possible.
Should any recipients of your data be based in a state outside the European Economic Area (EEA), we will inform you about this fact and the guarantees relating to data security before any of your data is processed (eg. in the case of contract conclusion).
Data collection on our website
How do we collect your data?
Should you merely browse our website to gather information, ie if you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server (so-called "server log files"). When you visit our website, we collect the following information that is technically necessary for us to display the website:
- The pages you visited
- Date and time at the time of access
- Time Zone Difference to Greenwich Mean Time (GMT)
- Amount of data sent in bytes
- Source / reference from which you came to the page
- Access Status / HTTP status code
- Browser details
- Operating system used and its interface
- Language and version of the browser software
- Used IP address
The processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR based on our legitimate interest in improving the stability and functionality of our website. A transfer or other use of data does not take place. However, we reserve the right to retrospectively check the server log files should concrete evidence point to unlawful use.
The data will be deleted as soon as it is no longer necessary for the purpose of its collection. Other personal data will only be saved if you use it by yourself, e.g. in the context of a registration, an application, a survey, a competition, an information request, order or to conclude or execute a contract.
What do we use your data for?
Part of the data is collected to ensure a flawless performance of the website. Other data can be used to analyse your user behaviour.
In order to make the visit to our website as enjoyable as possible, and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your device. Some of the cookies we use are deleted after the end of the browser session, ie after closing your browser (so-called session cookies). Other cookies remain on your device and allow us, or our affiliates (third-party cookies) to recognise your browser on your next visit (persistent cookies). If cookies are set, they collect and process individual user information such as browser and location data as well as IP address values on an individual basis. Persistent cookies are automatically deleted after a specified period, which may differ depending on the cookie.
In some cases, cookies are used to simplify the ordering process by storing settings (for example, remembering the contents of a virtual shopping cart for a later visit to the website). Should personal data be processed using individual cookies implemented by us, the processing is carried out in accordance with Art. 6 para. 1 lit. b GDPR either for the execution of the contract or in accordance with Art. 6 para. 1 lit. f GDPR for safeguarding our legitimate interests and to offer the best possible functionality of the website, as well as ensure a customer-friendly and effective design for visitors.
We may work with advertising partners to help us make our website more interesting to you. In this case, when you visit our website, cookies from partner companies are stored on your hard disk (third-party cookies). If we cooperate with aforementioned advertising partners, you will be informed individually and separately about the use of such cookies and the scope of the information collected in the following paragraphs.
Please note that you can set your browser so that you are informed about the setting of cookies and individually decide on their acceptance or can exclude the acceptance of cookies for specific cases or in general. Each browser differs in the way it manages the cookie settings. This is described in the Help menu of each browser, which explains how to change your cookie settings. These can be found for the respective browser under the following links:
- Internet Explorer: windows.microsoft.com/en-US/windows-vista/Block-or-allow-cookie
- Firefox: support.mozilla.org/en/kb/cookies-learn-and-approve
- Chrome: support.google.com/chrome/bin/answer.py
- Safari: support.apple.com/kb/ph21411
- Opera: help.opera.com/Windows/10.20/en/cookies.html
Please note that if you do not accept cookies, the functionality of our website may be limited.
Specifically, we use the following cookies:
Purpose: This cookie stores your current session with respect to PHP applications, ensuring that all features of this website based on the PHP programming language are fully displayed. Memory duration: Until the end of the browser session (will be cleared when closing your internet browser).
(_ga, _gat, _gat_UAXXXXXX-X, _gid, __utma, __utmb, __utmc, __utmt, __utmz, _gat_UA-56244915-1, _gat_gtag_UA_99753168_1, _hjAbsoluteSessionInProgress)
Purpose: These cookies are used to generate statistical information about our website access in order to generate reports and improve the usability of our website. For detailed information about all Google Analytics cookies, visit policies.google.com/technologies/types.
Storage duration: For details, see developers.google.com/analytics/devguides/collection/analyticsjs/cookie-usage
cookie_notice_accepted / cookie_accept / disableCookieInfo
Purpose: When a user has consented, this cookie stores info on confirming the cookie statement.
Storage duration: 1 month.
Purpose: Saves user selected language setting. Storage duration: 24 hours
Please find detailed information in section 8!
This cookie is set by Facebook to deliver advertisement when they are on Facebook or a digital platform powered by Facebook advertising after visiting this website.
Duration: 3 months
The cookie is set by Facebook to show relevant advertisments to the users and measure and improve the advertisements. The cookie also tracks the behavior of the user across the web on sites that have Facebook pixel or Facebook social plugin.
Duration: 3 months
This is set by Hotjar to identify a new user’s first session. It stores a true/false value, indicating whether this was the first time Hotjar saw this user. It is used by Recording filters to identify new user sessions.
Store duration: 30 min
_cfduid (.fonts.net, .bootsrapcdncom)
The cookie is used by cdn services like CloudFare to identify individual clients behind a shared IP address and apply security settings on a per-client basis. It does not correspond to any user ID in the web application and does not store any personally identifiable information.
Duration: 1 month
This cookie is set by Hotjar. This cookie is set when the customer first lands on a page with the Hotjar script. It is used to persist the random user ID, unique to that site on the browser. This ensures that behavior in subsequent visits to the same site will be attributed to the same user ID.
Duration: 1 years
When contacting us (for example via contact form or e-mail), personal data is collected. The data collected, in the case of a contact form, can be seen from the respective fields within the contact form. This information is stored and used solely for the purpose of answering your request or for establishing contact and the associated technical administration. The legal basis for processing the data is our legitimate interest in answering your request in accordance with Art. 6 para. 1 lit. f GDPR. If your contact is aimed at concluding a contract, then the additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR. Your data will be deleted after final processing of your request, this is the case if it can be inferred from the circumstances that the matter in question is finally clarified and provided that no statutory storage requirements are in conflict.
4. Data processing when opening a customer account and for the execution of the contract
According to Art. 6 para. 1 lit. b GDPR, personal data will continue to be collected and processed when you provide it to us for the purpose of concluding a contract or opening a customer account. The respective input forms detail the information that is being collected. A customer account can be deleted at any time by sending a request to the afore mentioned address of the person responsible. We save and use the data you have provided for the execution of the contract. After completion of the contract or deletion of your customer account, your data will be securely stored until the end of the taxation and commercial retention periods and deleted after expiration of these periods, unless you have expressly consented to a further use of your data or we are legally permitted to further data use from our side, in which case you will be informed accordingly.
5. Use of your data for direct marketing Registration for our e-mail newsletter
If you subscribe to our e-mail newsletter, we will send you regular information about our offers. The mandatory information we need for sending the newsletter is your e-mail address alone. The specification of additional data (such as name, salutation and title) is voluntary and will be used to address you personally. For sending the newsletter, we use the so-called double opt-in procedure. This means that we will only send you an e-mail newsletter if you have explicitly confirmed to us that you agree to the sending of newsletters. We will then send you a confirmation e-mail asking you to confirm by clicking on a link that you wish to receive newsletters in the future.
By activating the confirmation link, you give us your consent to the use of your personal data in accordance with Art. 6 para. 1 lit. a GDPR. When registering for the newsletter, we will save your IP address entered by the Internet Service Provider (ISP) as well as the date and time of registration in order to be able to trace a possible misuse of your e-mail address at a later date. The data collected by us when registering for the newsletter will be used exclusively for promotional purposes by means of the newsletter. You can unsubscribe from the newsletter at any time using the link provided in the newsletter or by sending a message to the person in charge (email@example.com). After cancellation, your e-mail address will be deleted from our newsletter distribution immediately, unless you have expressly consented to a further use of your data or we reserve the legal right to further data usage. Further details can be found in this statement.
Sending e-mail newsletters to existing customers
If you have provided us with your e-mail address when purchasing goods or services, we reserve the right to send you regular offers for similar goods or services, such as those already purchased from our range by e-mail. For this we do not have to obtain separate consent from you according to § 107 Abs. 3 TKG. In this respect, data processing takes place solely on the basis of our legitimate interest in personalised direct mail in accordance with Art. 6 (1) lit. f GDPR. If you have initially objected to the use of your e-mail address for this purpose, we will not send you an e-mail. You are entitled to object to the use of your e-mail address for the purpose described above at any time with effect for the future by a message to the person previously named. Upon receipt of your objection, the use of your e-mail address for advertising purposes will cease immediately.
Direct mail advertising
Based on our legitimate interest in personalised direct mail, we reserve the right to choose your first and last name, mailing address and, as far as we have received this additional information from you as part of the contractual relationship, your title, academic degree, year of birth and professional, branch or business name according to Art. 6 para. 1 lit. f GDPR to store and use for sending interesting offers and information about our products by mail.
You can object to the storage and use of your data for this purpose at any time by contacting the afore mentioned person responsible. Upon receipt of your objection, the use of your address for advertising purposes will cease immediately.
6. Use of Social Media: Videos
This site uses Youtube Embedding feature to display and play videos from "Youtube", which is owned by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA ("Google").
Regardless of any playback of the embedded video, every time you visit this website, it will connect to the Google Network "DoubleClick", which may trigger further data processing without our having any influence.
US-based Google LLC is certified under the US Privacy Shield, which ensures compliance with the level of data protection in the EU.
Use of VIMEO videos
Vimeo videos are embedded on our website. Operator of the respective plugins is Vimeo LLC, located at 555 West 18th Street, New York 10011, USA. Vimeo LLC is qualified for the US Privacy Shield, which ensures compliance with data protection levels in the EU. If you visit any of our sites equipped with a Vimeo plugin, you will be connected to Vimeo's servers when you start playing a video. This tells the Vimeo server which of our pages you have visited. We have no influence on possible storage and evaluation of the data and can’t see any data analysis. Further information on Vimeo’s data protection policies can be found at: https://vimeo.com/privacy
Use of Google AdWords Conversion Tracking
This website uses the Google AdWords online advertising program. As part of Google AdWords, Google LLC conversion tracking, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA ("Google"), we use certain offers/Google Adwords to draw attention to our attractive offers, with the help of tailored advertising (so-called Google Adwords) on external websites. In relation to the data of the advertising campaigns, we can determine how successful specific advertising campaigns are. We are keen to show you advertisements that are of interest to you, to make our website more interesting, and to achieve a fair calculation of advertising costs.
The conversion tracking cookie is set when a user clicks on a Google-served AdWords ad. Cookies are small text files that are stored on your computer system. These cookies usually lose their validity after 30 days and are not used for personal identification. If the user visits certain pages of this website and the cookie has not expired yet, Google and FunderMax can recognise that the user clicked on the ad and was redirected to this page. Each Google AdWords customer receives a different cookie. Cookies cannot be tracked through AdWords advertisers' websites. The information gathered using the conversion cookie is used to generate conversion statistics for AdWords advertisers who have opted for conversion tracking. Customers are told the total number of users who clicked on their ad and were redirected to a conversion tracking tag page. However, they do not receive information that personally identifies users. If you do not want to participate in tracking, you can block this usage by disabling the Google Conversion Tracking cookie through its Internet browser under User Preferences. You will not be included in the conversion tracking statistics. We use Google Adwords based on our legitimate interest in a targeted advertising gem. Art. 6 para. 1 lit. f GDPR.
US-based Google LLC is certified under the US Privacy Shield, which ensures compliance with the level of data protection in the EU.
You can permanently deactivate cookies by: blocking them; setting your browser software accordingly; or by downloading and installing the browser plug-in available at the following link: www.google.com/settings/ads/plugin
Using Google Tag Manager
This website uses a Google Tag manager (a solution of Google Inc. "Google") to manage website tags over a user interface. The provider is Google Inc., 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. The Google tag manager s a cookieless domain which doesn't collect any personally identifiable information. The tool makes it possible to trigger other tags, which may in turn collect data. The Google tag Manager does not access this data. If a deactivation has been made at the domain or cookie level, it will remain for all tracking tags that are implemented with Google tag manager.
8. Web analytics services
Google (Universal) Analytics
- Google Analytics
This website uses Google Analytics, a web analytics service of Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA ("Google"). Google Analytics uses so-called "cookies", text files that are stored on your computer and allow an analysis of website use. The information generated by the cookie about your use of this website (including the shortened IP address) is usually transmitted to a Google server in the USA and stored there.
This website uses Google Analytics exclusively with the extension "_anonymizeIp ()", which ensures anonymisation of the IP address by curtailment and excludes a direct personal reference. The extension will truncate your IP address beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the US and shortened there. In these exceptional cases, this processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR based on our legitimate interest in the statistical analysis of user behaviour for optimisation and marketing purposes.
Google will use this information on our behalf to evaluate your use of the website, to compile reports on website activity, and to provide us with other services related to website activity and internet usage. The IP address provided by Google Analytics will not be merged with other Google data.
You can prevent the storage of cookies by a corresponding setting of your browser software; however, please note that if you do this you may not be able to use all the features of this website to the fullest extent possible. In addition, you may prevent Google collecting this data related to your use of the website, including your IP address, and the processing of data, by downloading and installing the browser plug-in available under the following link: tools.google.com/dlpage/gaoptout
- Hotiar (hotjar Ltd.)
This website uses the web analysis service Hotjar of Hotjar Ltd. Hotjar Ltd. is a European company based in Malta (Hotjar Ltd, Level 2, St Julian's Business Center, 3, Elia Zammit Street, St Julian's STJ 1000, Malta, Europe Tel: +1 (855) 464-6788).
With this tool, Hotiar tracks specific movements on the websites in order to understand user behaviour (so-called heat maps). For example, you can see how far users are scrolling and which buttons users click on often. Furthermore, the tool also allows feedback to be obtained directly from users of the website. In this way, we gain valuable information to make our websites faster and more customer-friendly. The above analysis is based on our legitimate interests for optimisation and marketing purposes, as well as to ensure an engaging website experience, in accordance with Art. 6 para. 1 lit. f GDPR.
When using this tool, we pay particular attention to the protection of your personal data. So we can only understand which buttons you click and how far they scroll. Areas of the websites, in which your personal data, or third party data is stored, are automatically hidden by Hotjar, and are thus untraceable at all times.
Hotjar offers every user the option of using a "Do Not Track header" to prevent the use of the tool Hotjar, so that no data on the visit of the respective website are recorded. This is a setting which is supported by all common browsers in current versions. To do this, your browser sends a request to Hotjar, with the instruction to disable the tracking of the respective user. If you use our website with different browsers / computers, you must set up the "Do Not Track Header" for each of these browsers / computers separately.
Detailed instructions, concerning information about your browser, can be found at: https://www.hotjar.com/opt-out
More information about Hotjar Ltd. and its tools, can be found via: www.hotjar.com
9. Tools and Miscellaneous
We use Google Maps on our website (API) from Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA ("Google"). Google Maps is a web service for displaying interactive (land) maps to visually display geographic information. The use of this service will show you our location and facilitate your arrival.
When you visit any of the subpages where Google Maps map is incorporated, information about your use of our website (such as your IP address) is transmitted to Google's servers in the United States and stored there. This is done regardless of whether Google provides a user account that you are logged in to, or if there is no user account. When you're logged-in to Google, your data will be assigned directly to your account. If you do not wish to be associated with your profile on Google, you must log out before activating the button. Google stores your data (even for non-logged-in users) as usage profiles and evaluates them. According to Art. 6 (1) (f) of the GDPR, such an evaluation is based on the legitimate interests of Google to display personalised adverts, market research and / or to tailor the design of its website. You have the right to object to this and should do so directly via Google.
US-based Google LLC is certified under the US Privacy Shield, which ensures compliance with the level of data protection in the EU.
Google's terms of service can be viewed at www.google.com/intl/en/policies/terms/regional.html, and the additional Google Maps terms of service can be found at https://www.google.com/intl/en_US/help/terms_maps.html
10. Right of Data Subjects
The applicable data protection law grants you comprehensive data protection rights (information and intervention rights) over the person responsible with regard to the processing of your personal data, which you can learn more about below:
- Right of access by the data subject according to Art. 15 GDPR: In particular, you have the right to obtain information about the personal data processed by us, the processing purposes, the categories of processed personal data, the recipients or categories of recipients to whom your data was or is being disclosed, the planned Period of storage or the criteria for determining the duration of storage, the right of rectification, deletion, limitation of processing, objection to processing, complaint to a supervisory authority, the origin of your data, (if it was not collected by us), the existence of automated decision-making including profiling and possibly meaningful information on the logic involved and the scope and intended impact of such processing, as well as your right to be informed of what guarantees under Art. 46 GDPR can be given should your data be shared in third countries
- Right to recitifcation according to Art. 16 GDPR: You have the right to immediate correction of incorrect data concerning you and / or completion of your incomplete data stored by us.
- Right to erasure according to Art. 17 GDPR: You have the right to demand the deletion of your personal data if the requirements of Art. 17 (1) GDPR are met. However, that right does not apply, in particular, where the processing is necessary for the exercise of the right of freedom to expression and information, for the fulfilment of a legal obligation, for reasons of public interest or for the pursuit, exercise or defence of legal claims.
- Right to restriction of processing according to Art. 18 GDPR: You have the right to demand the restriction of the processing of your personal data for as long as it takes to ascertain the correctness of your data, if you ask not to delete your data due to inadmissible data processing and instead opt to restrict the processing of your data, if you need your data for the assertion, exercise or defence of legal claims, after we no longer need the data because the original purpose is fulfilled or if you have objected for reasons of your particular situation, as long as it is not certain, whether our valid reasons predominate.
- Notification obligation in accordance with Art. 19 GDPR: If you have exerted your right and requested from the person responsible that your data should be rectified or deleted or that its processing is to be limited, than s/he is obliged to inform all recipients to whom your personal data has been disclosed about the requested to rectify or delete or limit its processing, unless this proves to be impossible or involves a disproportionate effort. You have the right to be informed about these recipients.
- Right to data portability according to Art. 20 GDPR: You have the right to receive your personal data provided to us in a structured, common and machine-readable format or to request transmission to another person responsible, insofar as this is technically feasible.
- Right to withdraw consent according to Art. 7 para. 3 GDPR: You have the right to withdraw your consent once given in the processing of data at any time with effect for the future. Should you revoke your consent, all data concerned will be deleted immediately, as long as further processing is not supported by any legal basis for consentless processing. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.
- Right to complain under Art. 77 GDPR: If you are of the opinion that the processing of your personal data violates the GDPR, you have the right (without prejudice to any other administrative or judicial remedy) to complain to a supervisory authority, in particular within your own Member State, place of work or place of alleged infringement. In Austria, the competent supervisory authority is the Data Protection Authority.
- Right to object: If we process your personal data in the context of a balance of interests based on our predominant legitimate interest, you have the right at any time, for reasons that arise from your particular situation, to object to this processing from that point forward.
If you exercise your right of objection, we will stop the processing of the data concerned. We reserve the right to further processing, if we have compelling overriding reasons for processing that outweigh your interests, fundamental rights and fundamental freedoms or if the processing serves the assertion, exercise or defence of legal claims.
If your personal data is processed by ourselves for the purpose of direct mail, you have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising. You can exercise the fight to object as described above.If you exercise your right of objection, we will stop the processing of the data concerned for direct marketing purposes.
For inquiries please contact firstname.lastname@example.org.
11. Duration of storage of personal data
The duration of the storage of personal data is based on the respective legal retention period (eg commercial and tax retention periods). At the end of a retention period, the corresponding data is routinely deleted, if no longer required to fulfil a contract or to initiate a contract and / or no legitimate interest in continued storage persists on our part.
12. Data Protection Notice for Contract Partners
In the context of contractual relationships and in support of our business processes, FunderMax GmbH (hereinafter "we", "us" or "our") processes – in its capacity as the controller within the meaning of Article 4(7) of the General Data Protection Regulation (Regulation (EU) 2016/679; hereinafter "GDPR") – the personal data of contract partners and their employees and/or their corporate bodies (hereinafter "you" or "your"). Personal data is understood to be all content that relates to a specific or identifiable person, such as his or her name, date of birth, address and phone number (hereinafter "data"). For further clarification, refer to the contact details at the end of this data protection notice.
Please bring this data protection notice to the attention of all your employees.
- For what purposes do we process your data
We process your data for the following purposes: Performing and executing the contract concluded with your business, accounting, operating a database (CRM), marketing purposes and complying with legal provisions and industry standards. Processing the data made available in the course of the contractual relationship is necessary to implement the contractual relationship or to meet statutory obligations.
The processing of your data for marketing purposes is necessary for the purpose of pursuing our legitimate interest enshrined under Article 6(1)(f) GDPR to inform you about our products.
- Who receives your data?
Where necessary, your data is disclosed in particular to the following recipients: IT service providers, such as providers of content management services, banks, insurance companies, lawyers, courts and authorities as well as tax consultants. If personal data is transmitted to a third country outside the EU or EEA, we will use standard EU model clauses, if necessary.
- How long will your personal data be retained?
In principle, we retain your data until the contractual relationship is fulfilled or has ended. Furthermore, we are subject to multiple retention obligations, in accordance with the type of data that is also required to be retained beyond the term of the contract, as stipulated for instance on the basis of retention periods provided under tax law. We also retain your data, where appropriate, as long as legal claims can be made in connection with your agreement. In the case of pending administrative or judicial proceedings, your data will be retained until termination of the respective proceedings.
- Your rights in connection with the processing of your data:
You have a right to request information from us regarding the data we have processed about you (Right of access, Article 15 GDPR). You are also entitled to request that incorrect data is corrected (Right to rectification, Article 16 GDPR) and that data processed unlawfully is deleted (Right to erasure, Article 17 GDPR). Furthermore, subject to certain conditions, you are entitled to restrict the processing (Right to restriction of processing, Article 18 GDPR) and portability of data (Right to data portability, Article 20 GDPR) and you have the right to object (Right to object, Article 21 GDPR). To invoke and exercise these rights, see contact details below.If, in your opinion, processing the personal data relating to you breaches the provisions of the GDPR, please do not hesitate to communicate your concerns to us. In addition, in such a case you have the right to appeal to a supervisory body.
Please send all your inquiries for the subject of data protection to email@example.com or contact our Legal Department, Address:
Klagenfurter Straße 87-89
9300 St. Veit/Glan.