PRIVACY POLICY

As of April 20, 2026

Data controller:
Schrauberblog GmbH

Data Protection Officer:
Marco ten Hagen, office(at)schrauberblog.at
5020 Salzburg, Franz-Wolfram-Scherer-Straße 30

The protection of your personal data is a top priority for us. Your personal data will be treated confidentially in accordance with the data protection regulations and this privacy policy. Your data will not be passed on to third parties without your express consent.

Access to and Deletion of Your Data:
You have the right at any time to access, correct, delete, block, restrict the processing of, and transfer your personal data.
Furthermore, you have the right at any time to withdraw any consent you have given for the use of your personal data. The lawfulness of the processing of personal data remains unaffected until revocation through the exercise of the right of revocation.
If you believe that our processing of your personal data violates applicable data protection regulations or that your data protection rights have been infringed in any other way, you may file a complaint with the competent supervisory authority. The competent authority in terms of subject matter and location is the Data Protection Authority, Barichgasse 40-42, 1030 Vienna, dsb@dsb.gv.at.

Personal data:
Personal data refers to any information relating to an identified or identifiable natural person; A natural person is considered identifiable if they can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person. This includes information such as your name, email address, mailing address, or phone number—that is, information that is directly linked to your identity.

Data Security:
Your personal data is protected by appropriate technical and organizational measures. These measures are designed in particular to protect your personal data against unlawful, unauthorized, and accidental access, loss, use, processing, and manipulation.
Nevertheless, it cannot be ruled out that information you have provided to us via the Internet may be viewed and used by other persons.
Please note that we therefore assume no liability whatsoever for the disclosure of information due to data transmission issues not caused by us and/or unauthorized access by third parties.

Retention period:
Unless an explicit retention period is specified at the time of collection (e.g., in a consent form), we are required under Article 5(1)(e) of the GDPR to erase personal data as soon as the purpose of the processing has been fulfilled. In this context, we would like to point out that statutory retention obligations constitute a legitimate purpose for the processing of personal data.
We generally store and retain data in a personal form until the termination of a business relationship or until the expiration of applicable warranty, guarantee, or statute of limitations periods; furthermore, until the resolution of any legal disputes in which the data is required as evidence; or, in any case, until the end of the third year following the last contact with a business partner.

Transfer of Personal Data:
Your personal data will not be transferred to third parties for purposes other than those listed in this Privacy Policy.
We will only disclose your personal data to third parties if:
you have given your explicit consent pursuant to Art. 6(1)(a) GDPR,
the disclosure is necessary pursuant to Art. 6(1)(f) GDPR to safeguard legitimate interests and to assert, exercise, or defend legal claims, and there is no reason to assume that you have an overriding legitimate interest in the non-disclosure of your data,
there is a legal obligation for the disclosure pursuant to Art. 6(1)(c) GDPR, and this is legally permissible and/or
it is necessary pursuant to Art. 6(1)(b) GDPR for the performance of contractual relationships with you.

Transfer to Third Countries:
If we process data in a third country, or if this occurs in connection with the use of third-party services or the disclosure or transfer of data to other individuals or companies, this is done solely for the reasons outlined above regarding the transfer of data.
Subject to express consent or contractual necessity, we process or have data processed in third countries only if they have a recognized level of data protection (such as the U.S. under the “EU-U.U.S. Data Privacy Framework”) or on the basis of special safeguards, such as contractual obligations through the EU Commission’s Standard Contractual Clauses, the existence of certifications, or binding internal data protection regulations, in accordance with Articles 44–49 of the GDPR.

Server log files:
We analyze the data in these log files in an anonymized form to further improve the website/application and make it more user-friendly, as well as to identify and resolve errors more quickly. In addition, these log files are used to manage server capacities so that we can provide the necessary data volumes when needed, as well as to ensure a smooth connection to our website/application and to ensure the seamless use of our website.
Your data will be deleted as soon as it is no longer required for the purpose for which it was collected. For data used to provide the website, deletion occurs at the end of the respective session.
If your data is stored in log files, it is deleted within 14 days. Storage beyond this period is possible, in which case users’ IP addresses are anonymized so that they can no longer be traced back to specific individuals.

Cookies:
We also use so-called “cookies” on our website/application. These are small text files that are stored on your device via your browser until you delete them.
You can configure your browser to notify you when cookies are set and to allow cookies only on a case-by-case basis, to block the acceptance of cookies in specific cases or generally, and to enable the automatic deletion of cookies when you close your browser. If you disable cookies, the functionality of this website may be limited.
The use of these so-called technically necessary cookies serves to make our website/application more user-friendly. These stored cookies enable us to recognize your browser on your next visit.
Furthermore, cookies are also used to better tailor our website/application to the interests of our website visitors or to generally improve our website in terms of user-friendliness based on statistical analyses. We use these non-essential cookies (e.g., for marketing or analysis) only if you have given us your explicit consent in advance (Art. 6(1)(a) GDPR) via our cookie banner.

Contact form:
If you contact us via the form on our website or app, the information you provide will be stored for six months to process your inquiry and in case of any follow-up questions. This information will not be shared without your consent.

Google Analytics:
If you have given your consent, our website/application uses Google Analytics, a web analytics service provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter referred to as “Google”). Google Analytics uses so-called “cookies,” text files that are stored on your computer and enable an analysis of your use of the website/application. The information generated by the cookie regarding your use of our website/application is generally transmitted to a Google server in the United States and stored there. However, if IP anonymization is enabled on our website, your IP address will be truncated by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the United States and truncated there. On behalf of the operator of our website/application, Google will use this information to evaluate your use of the website/application, to compile reports on website activity, and to provide other services related to website/application usage and internet usage to the website/application operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
You can also prevent the collection of data generated by the cookie and related to your use of the website/application (including your IP address) by Google, as well as the processing of this data by Google, by downloading and installing the browser plug-in available at the following link (http://tools.google.com/dlpage/gaoptout?hl=de), or by revoking your consent in our cookie settings.

Google Web Fonts:
To ensure that our content is displayed correctly and visually appealing across all browsers, we use “Google Web Fonts” from Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) on this website/application to display fonts.
When you visit our site, your browser loads the required web fonts into its cache to display text and fonts correctly. To do this, the browser you are using must connect to Google’s servers. As a result, Google becomes aware that our website/application has been accessed via your IP address. The use of Google Web Fonts is in the interest of a consistent and visually appealing presentation of our online offerings. This constitutes a legitimate interest within the meaning of Art. 6(1)(f) GDPR.
Further information on Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google’s Privacy Policy: https://www.google.com/policies/privacy/.

Google Maps:
Our website/application uses the Google Maps mapping service. Google Maps is operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter referred to as “Google”).
In order to use the features of Google Maps, it is necessary to store your IP address. This information is generally transmitted to a Google server in the United States and stored there. The use of Google Maps is in the interest of presenting our online offerings in an appealing manner and ensuring that the locations we specify on the website/application are easy to find. This constitutes a legitimate interest within the meaning of Art. 6(1)(f) GDPR.
If you do not consent to the future transmission of your data to Google in connection with the use of Google Maps, you also have the option to completely disable the Google Maps web service by turning off JavaScript in your browser.
For more information on the handling of user data, please refer to Google’s Privacy Policy: https://www.google.de/intl/de/policies/privacy/.

Google AdWords & Google AdWords Remarketing:
If you have given your consent, our website/application uses the services of Google AdWords and AdWords Remarketing provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter referred to as “Google”).
If you arrive at our website via an ad placed by Google, Google AdWords will set a conversion cookie on your computer. The information collected using the conversion cookie is used to generate conversion statistics for AdWords customers.
The remarketing feature allows us to present interest-based ads to website/application visitors within the Google advertising network. A so-called “cookie” is set in the website/application visitor’s browser, which makes it possible to recognize the visitor.
You can adjust the setting of cookies at any time in our cookie settings or opt out of interest-based advertising by Google: www.google.de/settings/ads.
For more information on how user data is handled, please see Google’s Privacy Policy: https://www.google.de/intl/de/policies/privacy/.

Google Search Console:
To continuously optimize the Google rankings of our websites and applications, we use Google Search Console, a web analytics service provided by Google. Google Search Console allows us to conduct search analyses that provide insight into how often our website or application appears in Google search results. No personal user data or tracking data is processed or transmitted to Google in connection with the use of Google Search Console.

LinkedIn Analytics:
If you have given your consent, our website/application uses features of the LinkedIn network. The provider is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland.
Every time you access a page on our website/application that contains LinkedIn features, a connection is established with LinkedIn’s servers. LinkedIn is informed that you have visited our website/application using your IP address. If you click the LinkedIn “Recommend” button while logged into your LinkedIn account, LinkedIn can associate your visit to this website with you and your user account.
For more information on how user data is handled, please refer to LinkedIn’s Privacy Policy: https://www.linkedin.com/legal/privacy-policy.

Shopify Analytics:
Our website/application also uses the services of Shopify International Ltd., 2nd Floor 1-2 Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32 (hereinafter referred to as “Shopify”).
Our online store is operated via the Shopify platform. In doing so, information regarding user behavior on our website—specifically IP address, browser type, pages visited, timestamps, and information regarding completed purchases—is collected and stored (Art. 6(1)(b) and (f) GDPR).
For more information on the handling of user data, please refer to Shopify’s Privacy Policy: https://www.shopify.com/legal/privacy.

Meta Ads/Meta Pixel:
Provided you have given your explicit consent (Art. 6(1)(a) GDPR), our website/application uses the Meta Ads and Meta Pixel services provided by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5 (hereinafter referred to as “Meta”).
This data is used to measure the effectiveness of our advertisements, particularly on Facebook and Instagram. Data regarding page views, purchases, or shopping cart actions is collected and forwarded to Meta in pseudonymized form. Meta may link this collected data to your Facebook account and process it for its own purposes.
For more information on how user data is handled, please refer to Meta’s Privacy Policy: https://www.facebook.com/privacy/policy.

TikTok Analytics/TikTok Pixel:
Provided that you have given your explicit consent (Art. 6(1)(a) GDPR), our website/application uses the TikTok Analytics/TikTok Pixel services provided by TikTok Technology Limited, The Sorting Office, Ropemaker Place, Dublin 2, Dublin, D02 HD23, Ireland (hereinafter referred to as “TikTok”).
We use the TikTok Pixel tool to analyze marketing activities. This is a tracking tool that records user interaction on our website/application (e.g., page views, purchases, etc.). The personal data collected in this process may be processed by TikTok and linked to your TikTok account.
For more information on how user data is handled, please refer to TikTok’s Privacy Policy: https://www.tiktok.com/legal/privacy-policy-eea.

SSL Encryption:
Our website/application uses SSL encryption to ensure the security of data processing and to protect the transmission of confidential information, such as orders, login credentials, or contact requests, that you send to us as the operator. You can recognize an encrypted connection by the fact that “https://” appears in the browser’s address bar instead of “http://,” and by the lock icon in your browser bar.
When SSL encryption is enabled, the data you transmit to us cannot be read by third parties.

Use of Artificial Intelligence:
Our website/application uses the services of Google Gemini, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as “Google Gemini”), OpenAI, provided by OpenAI Ireland Ltd., 1st Floor, The Liffey Trust Centre, 117-126 Sheriff Street Upper, Dublin 1, D01 YC43, Ireland (hereinafter referred to as “OpenAI”) and AzureAI from Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA (hereinafter referred to as “AzureAI”).

Use of Artificial Intelligence (AI Processing): Our website/application uses third-party artificial intelligence, specifically Google Gemini, OpenAI, and Azure AI. To automatically answer questions, the text data provided by the user is securely transmitted to these services. Technical data such as make, model, engine type, year of manufacture, error descriptions, symptoms, or repair histories are used to generate customer-oriented answers (such as solutions for a stuck screw). Users decide for themselves whether to provide only technical data or also personal data. The AI service providers process this data exclusively for the purpose of generating responses and expressly do not use it for advertising purposes. The data transmitted to the AI services is stored there only for the duration of the response generation. For more information on how user data is handled, please refer to the providers’ privacy policies: Google: https://policies.google.com/privacy OpenAI: https://openai.com/de-DE/policies/row-privacy-policy/ AzureAI: https://azure.microsoft.com/de-de/explore/trusted-cloud/privacy

Vehicle Scanner (App): The Vehicle Scanner allows you to scan vehicle registration documents and submit data. When using the Vehicle Scanner, personal data—such as the owner’s name, license plate number, VIN, etc.—may be recognized and, if necessary, processed.

Voice Input/Photo Upload (APP): Uploaded image data, which may contain personal information, is analyzed and processed. When you use voice input, the audio signal is converted to text before processing. Audio recordings are not stored. The resulting text data may be processed to respond to your inquiries.

ShakeBugs: Our website/application uses the services of ShakeBugs provided by Shake Ltd., Radnicka 47, Zagreb, Croatia (hereinafter referred to as “Shake”). Shake is used to analyze and resolve errors in our application. In doing so, technical data such as device type, operating system, app version, log files, and, in some cases, screenshots and screen recordings are collected. This data may also contain personal information if it is visible within the application/website. For more information on the handling of user data, please refer to Shake’s Privacy Policy: https://www.shakebugs.com/privacy/

Firebase (Google): Our website/application uses Firebase features, provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter referred to as “Google”). This feature is used for authentication and data storage, specifically email addresses and passwords, device information (e.g., operating system, model, app version, etc.), app usage data and app interactions, as well as location data, with the user having the option to delete this data independently. See the following link for more information: https://ehrenschrauber-app-prod.web.app/

Ehrenschrauber (APP):
You can delete your account and all your data here: https://ehrenschrauber–app–prod.web.app/