Privacy Policy
1. Introduction
The protection of your personal data is very important to us, DPM Holzdesign GmbH. This privacy policy explains which personal data we collect, how we use it, and what rights you have as a user.
Responsible Entity:
DPM Holzdesign GmbH
Mitterfeld 14, Betriebsgebiet Kasten 201
3072 Kasten, Austria
Phone: +43 664 88146614
Email: office@iso-stroh.net
2. What Data We Collect and Why
Automatic Data Collection by Hosting
Our website is externally hosted. When using the website, technical and, if applicable, personal data is generated and collected on the servers of our hosting provider:
- Browser type and version
- Operating system
- IP address (anonymized)
- Time of access
- Referrer URL
Legal Basis: Ensuring the secure and error-free operation of the website as well as the efficient provision of the online services
(Article 6(1)(b) and (f) GDPR).
Our Hosting Provider:
easyname GmbH
Canettistraße 5/10
A-1100 Vienna
We have entered into a data processing agreement with our hosting provider (Article 28 GDPR) to ensure compliance with data protection regulations.
Data Collected Through the Contact Form
When you use our contact form, we collect the following data:
- Your name
- Your email address
- Your message
- Your IP address
To securely process and transmit your message, we use the email delivery tool PHPMailer. Your entered data (name, email address, message, and IP address) is processed through a server-side script upon submission. The email is sent via an external SMTP service with encrypted TLS/SSL transmission. Your IP address is also analyzed by Google reCAPTCHA to prevent spam (see sections 5 & 6).
Legal Basis: Processing your inquiry (Article 6(1)(b) GDPR).
Further information: PHPMailer Project | PHPMailer License (LGPL/MIT)
3. Google Tag Manager
We use the Google Tag Manager to centrally manage tools and third-party cookies. This service itself does not store any personal data but enables the loading of other tools.
Provider: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA, USA.
Further information: Google Privacy Policy & Google Terms of Service.
4. Consent to Cookies
Cookiebot
As mentioned above, the Google Tag Manager loads additional services, including the tool Cookiebot by Usercentrics, a cookie banner (Cookie Consent Manager) that helps us manage your consent for the acceptance and storage of cookies.
Cookies are small text files used by websites and, in some cases, stored on your device. For this, we require your explicit consent unless the cookies are strictly necessary for the operation of this website. This website uses different types of cookies:
- Necessary: These are essential for the operation of the website and do not require explicit consent. In our case, this includes cookies used for security, such as to prevent bots (Google reCAPTCHA), and for storing your cookie preferences (Cookiebot).
- Preferences: Preference cookies allow a website to remember information that changes how the website behaves or looks, such as your preferred language or region. To enhance your user experience and avoid relying on your consent for displaying our chosen font, we integrate Google-provided fonts locally. Therefore, we do not use this type of cookie.
- Statistics: Statistics cookies help website owners understand how visitors interact with their website by collecting and reporting information anonymously. For this purpose, we use tools such as Google Analytics (see below).
- Marketing: Marketing cookies are used to track visitors across websites. The intention is to display ads that are relevant and engaging for the individual user and therefore more valuable to publishers and third-party advertisers. For this, we use tools such as Google Ads, or Google services that correlate your search interest with the content of YouTube videos (see below).
Note: Preference, statistics, and marketing cookies are only activated after you give your consent (Article 6(1)(a) GDPR). You can change or withdraw your cookie consent preferences at any time on our website.
5. Use of Third-Party Services
Google reCAPTCHA
We use Google reCAPTCHA to ensure that inputs in the contact form are made by a person and not by automated programs (bots). When you submit the contact form, your IP address is sent directly to Google's servers, which may be located in the United States.
- Data: IP address, browser data, referrer URL, and other technical information.
- Provider: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA, USA.
Legal Basis: Protection against abuse by automated systems (Article 6(1)(f) GDPR).
Further information: Google reCAPTCHA.
Google Analytics
With your consent, we use Google Analytics to analyze your website usage.
- Data: IP address (anonymized), usage data (page visits, duration of stay).
- Provider: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA, USA.
Legal Basis: Your consent (Article 6(1)(a) GDPR).
Further information: Google Privacy Policy & Google Terms of Service.
Google Ads
With your consent (marketing cookies), we use Google Ads to analyze the effectiveness of our advertisements and to identify relevant search terms.
- Data: IP address, browser data, referrer URL (Ads ID), and other technical information.
- Provider: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA, USA.
Legal Basis: Your consent (Article 6(1)(a) GDPR).
Further information: Google Privacy Policy & Google Terms of Service.
YouTube Videos
We embed no-cookie videos from YouTube's privacy-enhanced domain on our website. When you access a YouTube video, your identity may be transferred to YouTube—for example, if you are logged into your Google account (YouTube's parent company).
For this reason, we load YouTube videos only after your explicit consent to marketing cookies.
- Data: IP address, browser data, and other technical information.
- Provider: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA, USA.
Legal Basis: Your consent (Article 6(1)(a) GDPR).
Further information: Google Privacy Policy & Google Terms of Service.
6. Transfer of Personal Data to Third Countries
Services such as Google Analytics and YouTube may result in the transfer of personal data to third countries where the level of data protection may not be equivalent to that of the European Union. There is an unavoidable risk that authorities may gain access to this data—so please make your cookie choices carefully and open YouTube videos only with full understanding of the possible consequences.
7. Your Rights
You have the right to:
- Access information about your stored data (Article 15 GDPR)
- Request correction of inaccurate data (Article 16 GDPR)
- Request deletion of your data, provided no legal obligations prevent this (Article 17 GDPR)
- Restrict the processing of your data (Article 18 GDPR)
- Object to data processing (Articles 19 & 20 GDPR)
- Withdraw your consent for data processing (Article 21 GDPR)
You can change or withdraw your consent to cookie preferences at any time on our website or request the status of your consent. Please provide your consent ID and date when contacting us about your consent—this information is stored by your browser.
Right to file a complaint: If you believe your data protection rights have been violated, you can file a complaint with the Austrian Data Protection Authority: www.dsb.gv.at.
8. Data Security
Our website uses SSL or TLS encryption to ensure secure data transmission.
You can identify this by the "https://" prefix and the lock symbol in your browser's address bar.
9. Updates to this Statement
This privacy policy is reviewed regularly and updated as needed. Last updated: December 2024.
If you have any questions or wish to exercise your rights, please contact us at office@iso-stroh.net.