cyberknife logo darkblue rgb 1 2 1

Data security

Our website uses many technical measures to ensure the secure transmission and storage of all collected data and to protect it against manipulation or unauthorised access. All data transfers between your device, this website and other services take place using (SSL) encryption. You can recognise an encrypted connection by the padlock symbol in your browser’s address bar. All data is stored on the servers of our processors. The collection and processing of this data is based on contracts that we have concluded with these providers (in accordance with Article 28 GDPR).

Browser storage (cookies, etc.)

Websites often use functions of your web browser (such as “cookies”) to store and read information in order to ensure certain functionalities. Our website and the associated data processing do not use any such technologies.

Collection and use of data

When you visit our website and use the functionalities and services offered, a wide range of data is transmitted by you to us and our processors. Certain data processing operations are necessary for the basic technical functionality of the website or for the fulfilment of contractual or pre-contractual measures and are therefore carried out without your further consent. Other data processing operations only take place when you use certain functions of the website. In these cases, we explicitly inform you about the data processing or request your explicit consent. All data processing is carried out on the basis of a contract between us and the processors listed. In any case, we do not carry out any data processing without a lawful basis. All data processing therefore takes place in accordance with Article 6 GDPR. The transfer and processing of your data may also take place outside the European Union (EU) or the European Economic Area (EEA). In this case, we ensure that the transfer and processing of your data only takes place in countries with an adequate level of data protection. In particular, for US companies we ensure that they meet the requirements of the EU-U.S. Data Privacy Framework.

Web hosting

When you visit a website, your web browser automatically sends information to the server and infrastructure on which it is hosted in order to download the website and associated resources (such as images or fonts). The following types of data may be transmitted:
  • IP (Internet Protocol) address of your device,
  • time, date and duration of your visit,
  • pages visited,
  • type, version and language of your web browser and operating system.
This data is transmitted and logged automatically to ensure the accessibility, functionality, security and stability of our website. The data remains stored until the log file is deleted. The data collected is technically necessary for the operation and maintenance of this website and is not used in any way to identify you as a person or to track you. The collection and processing of this data takes place in accordance with Article 6(1) GDPR. Below you will find the data processing operations carried out in this category, including the processors and any entries used in browser storage:

Web hosting (operated by Domaintechnik – Ledl.net GmbH, AT)

Processor
Domaintechnik – Ledl.net GmbH Lederergasse 6 5204 Straßwalchen Austria Link to the privacy policy
Purposes
  • HTML documents: HTML documents of the website.
  • Stylesheets: Style definitions responsible for the appearance of the website.
  • Fonts: Fonts used on the website.
  • Scripts: Scripts required for various website functionalities.
  • Images: Images embedded on the website.
  • Database: Database required for operating the website.
  • Videos: Videos embedded on the website.
Processed data categories
  • Usage data: E.g. which websites were visited, when and for how long.
  • Online identifiers: Such as IP/MAC address, cookies, advertising IDs, pixel tags, device fingerprints.

Tag Manager

We use a so-called Tag Manager on our site. This is an external service that enables us to integrate various other scripts and content on our site. If you accept the data processing for the Tag Manager, data is loaded from the relevant processor and data processing is carried out by them. All other content relevant under data protection law that is integrated by the Tag Manager is listed separately in the data processing information. Please note that no data is transferred to the provider of the Tag Manager unless you explicitly consent in the privacy notice that appears when you first visit the site. This type of consent is also called “OPT-IN”. The data processing therefore takes place in accordance with Article 6(1a) GDPR. Below you will find the data processing operations carried out in this category, including the processors and any entries used in browser storage:

Google Tag Manager (operated by Google Ireland Limited, IE)

Processor:
Google Ireland Limited Gordon House, Barrow Street D4 Dublin Ireland Link to the privacy policy
Processed data categories:
  • Online identifiers: Such as IP/MAC address, cookies, advertising IDs, pixel tags, device fingerprints.
  • Usage data: E.g. which websites were visited, when and for how long.

Web analytics

If you accept the data processing in the Web analytics category in the privacy notice, statistical data about the use of the website is collected in order, for example, to improve the user guidance on our site. All collected data is pseudonymised (by deleting part of your IP address). The data is stored for a period of 26 months. Please note that no data is transferred unless you explicitly consent in the privacy notice that appears when you first visit the site. This type of consent is also called “OPT-IN”. The data processing therefore takes place in accordance with Article 6(1a) GDPR. Below you will find the data processing operations carried out in this category, including the processors and any entries used in browser storage:

Google Analytics (operated by Google Ireland Limited, IE)

Processor:
Google Ireland Limited Gordon House, Barrow Street D4 Dublin Ireland Link to the privacy policy
Processed data categories:
  • Online identifiers: Such as IP/MAC address, cookies, advertising IDs, pixel tags, device fingerprints.
  • Usage data: E.g. which websites were visited, when and for how long.
  • Location data: Location data (e.g. geo-coordinates).
  • Pseudonymised data: Anonymised personally identifiable data (e.g. by hashing) which can become identifiable when combined with other data.
Browser storage:
  • _ga: Created by a third-party domain Type: Cookie Time of creation: When using the respective service Validity period: 2 years Purpose: Use of the associated service
  • _gat: Created by a third-party domain Type: Cookie Time of creation: When using the respective service Validity period: 24 hours Purpose: Use of the associated service
  • _gid: Created by a third-party domain Type: Cookie Time of creation: When using the respective service Validity period: 1 minute Purpose: Use of the associated service

Videos

Our website embeds videos on request that are provided by external processors. In doing so, data is transferred to the provider of the respective service. The videos are only displayed once you consent to the associated data processing. In doing so, personal data (such as usage data or online identifiers) is also sent to the processor and data may be stored in your browser’s storage. Please note that no data is transferred unless you explicitly consent to the data processing for the purpose of displaying videos. This type of consent is also called “OPT-IN”. The data processing therefore takes place in accordance with Article 6(1a) GDPR. Below you will find the data processing operations carried out in this category, including the processors and any entries used in browser storage:

YouTube (operated by Google LLC, US)

Processor:
Google LLC 1600 Amphitheatre Parkway CA 94043 Mountain View United States of America Link to the privacy policy Link to the EU-U.S. Data Privacy Framework entry
Processed data categories:
  • Online identifiers: Such as IP/MAC address, cookies, advertising IDs, pixel tags, device fingerprints.
  • Location data: Location data (e.g. geo-coordinates).
Browser storage:
  • DV: Created by a third-party domain Type: Cookie Time of creation: When using the respective service Validity period: 7 minutes Purpose: Use of the associated service
  • 1P_JAR, OTZ: Created by a third-party domain Type: Cookie Time of creation: When using the respective service Validity period: 1 month Purpose: Use of the associated service
  • NID: Created by a third-party domain Type: Cookie Time of creation: When using the respective service Validity period: 6 months Purpose: Use of the associated service
  • CONSENT, __Secure-ENID, AEC, OGPC: Created by a third-party domain Type: Cookie Time of creation: When using the respective service Validity period: Unknown Purpose: Use of the associated service
  • SAPISID, APISID, SSID, HSID, SID, SIDCC, __Secure-*: Created by a third-party domain Type: Cookie Time of creation: When using the respective service Validity period: 1 year Purpose: Use of the associated service
  • yt-remote-device-id, yt-remote-connected-devices, yt.innertube::nextId, yt.innertube::requests: Created by a third-party domain Type: Local Storage Time of creation: When using the respective service Validity period: Unlimited Purpose: Use of the associated service
  • yt-remote-session-app, yt-remote-cast-installed, yt-remote-session-name, yt-remote-cast-available, yt-remote-fast-check-period: Created by a third-party domain Type: Session Storage Time of creation: When using the respective service Validity period: Until the end of the browser session Purpose: Use of the associated service
  • YtIdbMeta: Created by a third-party domain Type: IndexedDB Time of creation: When using the respective service Validity period: Unlimited Purpose: Use of the associated service

Email sending

Our website provides functionalities for sending emails to you or to us. In doing so, all data specified in the email (such as your name, your email address, etc.) is transferred to the respective processors and delivered to the destination mailbox via their mail servers. We only send emails with your explicit consent or where contractually or pre-contractually necessary. The data processing therefore takes place in accordance with Article 6 GDPR. Below you will find the data processing operations carried out in this category, including the processors and any entries used in browser storage:

Emails (operated by Domaintechnik – Ledl.net GmbH, AT)

Processor
Domaintechnik – Ledl.net GmbH Lederergasse 6 5204 Straßwalchen Austria Link to the privacy policy

Purposes

  • Contact form: Email form used to get in touch.

Processed data categories

  • Personally identifiable data: Such as name, address, phone number, email address.
  • Online identifiers: Such as IP/MAC address, cookies, advertising IDs, pixel tags, device fingerprints.

Outbound links

Our website contains links to other websites that are not operated by us. If you click on such an outbound link, you will be redirected to that website. We have no influence over these websites and their data protection practices and therefore accept no responsibility for their content and behaviour. Further details can be found in the privacy policies of those sites.