Încă indisponibil în versiunea Română – citiți ediția în limba engleză.

Această traducere are caracter pur informativ. Doar versiunea în limba germană are valoare juridică. Versiunea în limba germană

Privacy Policy

Last updated: 21 October 2026

This privacy policy explains which personal data we process when you visit unmannedmagazine.com or use our services, why we do so and what rights you have. It is based on the General Data Protection Regulation (GDPR), the Austrian Data Protection Act (DSG) and the Austrian Telecommunications Act 2021 (TKG 2021). This English version is a translation; the German version is legally binding.

1. Controller

QMN GmbH
Kundmanngasse 39/9
1030 Vienna
Austria

Email (including data protection matters): office@unmannedmagazine.com

Further company details are available in our Legal Notice.

2. Overview

You can read Unmanned Magazine without signing in. In that case we only process what is technically required to deliver the website.
Our own audience count works without cookies and stores neither IP addresses nor browser identifiers.
Google Analytics, embedded videos and social media posts, and advertising material containing third-party code only load if you consent.
Fonts and images are served from our own server; Google Fonts are not used.
We do not sell personal data.

3. Hosting, delivery and server logs

Our website runs on a server operated by Hetzner Online GmbH, Industriestraße 25, 91710 Gunzenhausen, Germany, in its Nuremberg data centre. Encrypted backups are also stored with Hetzner in Germany (Falkenstein).

Requests pass through the Cloudflare network (Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA). Cloudflare answers requests to our domain, delivers cached pages (content delivery network) and protects the website against attacks and overload (firewall, rate limiting). To do so, Cloudflare processes your IP address and the technical details of your request. Cloudflare also tells our server which country a request comes from; we use this country code for the cookie banner and for our statistics. Cloudflare is certified under the EU-US Data Privacy Framework.

When you open a page, our server automatically processes: IP address, date and time, requested address, status code, amount of data transferred, referring page and browser identifier (user agent). This information is kept in technical web server logs that are rotated and overwritten automatically. We use them only to keep the service running and to investigate errors or attacks.

Legal basis: our legitimate interest in a secure, fast and stable website (Art. 6(1)(f) GDPR).

4. Cookies, local storage and your consent

On your first visit from the EU, the EEA, Switzerland or the United Kingdom, a banner asks which services you allow. The categories are:

Necessary – required to operate the website, always active.
Statistics – Google Analytics (see section 6).
Marketing – advertising material supplied by individual advertisers with their own code (see section 8).
External media – embedded content from YouTube and X (see section 7).

Changing or withdrawing consent: Click “Privacy settings” at the bottom of any page or open the privacy settings here. You can change your choice at any time or withdraw it completely with “Withdraw consent”. When you withdraw, we delete the Google Analytics cookies in your browser and reload the page. Withdrawal applies to the future; processing carried out before remains lawful.

If your browser sends the “Global Privacy Control” signal, the optional categories are deselected in the banner from the start.

Visitors outside the EU, the EEA, Switzerland and the United Kingdom do not see a banner; for them the optional services are allowed for the current session without any choice being stored.

Record of your choice: So that we can demonstrate that consent was given (Art. 7(1) GDPR), we store for each choice a randomly generated consent ID, date and time, the version of the settings, the language, your selection and whether your browser sent “Global Privacy Control” – without IP address and without browser identifier. These records are deleted after 12 months. Legal basis: Art. 6(1)(c) in conjunction with Art. 7(1) GDPR.

Necessary cookies and local storage (strictly necessary, Section 165(3) TKG 2021; Art. 6(1)(f) GDPR, for the reader account Art. 6(1)(b)):

um_consent – stores your privacy choice and consent ID; 12 months.
__Host-um_portal – keeps you signed in to your reader account; 30 days or until you sign out.
um_sprache – remembers the website language you chose; 12 months.
um_sprache_hinweis_aus – remembers that you dismissed the language notice; 90 days.
In your browser’s local storage we also remember a few display settings, for example when you close the push notification prompt with “Not now” (30 days) or choose a list view. This information does not leave your device.

5. Our own audience measurement without cookies

We count page views with our own counting pixel on our server. We only store: the day, the page path (without parameters), the article where applicable, the device type (smartphone, tablet or desktop), the domain of the referring website and the country. The device type is derived from the browser identifier at the time of the request; the browser identifier itself is not stored. To count the visitors of a day, we derive a shortened checksum from the IP address, the browser identifier and a random key that is newly generated every day, and store only this checksum. We delete the random key once the day is over; after that the checksum can no longer be attributed to anyone, and the same visitor receives a new value the next day. No cookies are set, no IP addresses are stored and no profiles are created, not even across several days; the data cannot be traced back to you. In the same way we count downloads of magazine issues, page loading times (Web Vitals), error pages and – if you install the web app – how often this happens.

Legal basis: our legitimate interest in understanding how our service is used and improving it technically (Art. 6(1)(f) GDPR).

6. Google Analytics

With your consent we use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).

Purpose: audience measurement. We want to understand which content is read, how visitors find us and which devices they use, in order to improve our service. We do not use Google Analytics for advertising.

Only with your consent: Google Analytics is only loaded once you consent to the “Statistics” category or to the “Google Analytics 4” service. Before that, your browser does not connect to Google. We use Google’s consent mode (Consent Mode v2): only storage for analytics purposes is granted; ad storage, sending user data for advertising and ad personalisation remain denied.

Data processed: pages and addresses visited, date and time, time spent on the site, referring website, information about device, operating system, browser and screen resolution, approximate location (country, region) and a random identifier stored in a cookie. Your IP address is technically transmitted to Google when the service is loaded. IP anonymisation is enabled; according to Google, Google Analytics 4 does not store IP addresses.

Cookies:

_ga – distinguishes visitors by a random identifier; 2 years.
_ga_<ID> – stores the session state; 2 years.

Transfer to the USA: Google may transfer the data to Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google LLC is certified under the EU-US Data Privacy Framework. The transfer is based on the European Commission’s adequacy decision of 10 July 2023 (Art. 45 GDPR). Information on the certification: www.dataprivacyframework.gov.

Legal basis: your consent (Art. 6(1)(a) GDPR; for storing and reading information on your device Section 165(3) TKG 2021).

Withdrawal: You can withdraw your consent at any time in the privacy settings. We then delete the _ga and _ga_<ID> cookies in your browser and reload the page without Google Analytics.

Further information: policies.google.com/privacy.

7. Embedded content (YouTube and X)

Some articles and company profiles show videos from YouTube and posts from X (formerly Twitter). This content is blocked at first. Only when you consent to the “External media” category or load the content with a click does your browser connect to the provider. In particular, your IP address and the page you are viewing are transmitted; if you are logged in there, the provider can link the visit to your account. The provider may set cookies.

YouTube: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. We embed videos via youtube-nocookie.com. Preview images are fetched from YouTube by our own server, so merely displaying a preview does not connect your browser to Google. Transfer to Google LLC in the USA is possible (EU-US Data Privacy Framework). Privacy: policies.google.com/privacy.
X: Twitter International Unlimited Company, One Cumberland Place, Fenian Street, Dublin 2, Ireland; parent company X Corp., USA. Transfer to the USA is possible. Privacy: x.com/privacy.

Legal basis: your consent (Art. 6(1)(a) GDPR, Section 165(3) TKG 2021), which you can withdraw at any time in the privacy settings.

8. Advertising

Our own image banners and sponsorship notices work without cookies. We only count how often a banner was displayed and clicked – with the banner ID and the time, without any data about you. A click is routed via our server to the advertiser’s website. Legal basis: our legitimate interest in billing and measuring advertising (Art. 6(1)(f) GDPR).

Some advertisers supply advertising material with their own code. This material only loads if you consent to the “Marketing” category, and it runs in an isolated frame without access to our page or our cookies. The code may transmit data to the advertiser or its service providers and set cookies. Legal basis: your consent (Art. 6(1)(a) GDPR, Section 165(3) TKG 2021), which you can withdraw at any time.

9. Newsletter and magazine subscription

For the newsletter and for receiving the digital magazine issues, we process your email address, your chosen language and – for the magazine – your first and last name. You may optionally provide your country, date of birth and areas of interest. We only evaluate date of birth, country and interests in aggregated form (for example age groups) and do not show groups of fewer than five people.

Double opt-in: After signing up you receive an email with a confirmation link. We only send newsletters or magazine issues once you have confirmed. We store the time of sign-up and confirmation and the source of the sign-up as proof.

Open and click tracking: Our newsletters contain a small image that is loaded from our server when the email is opened, and links are routed via our server. This tells us whether and when a newsletter was opened and which link was clicked. This information is linked to your subscription. We also store a rough device group, the email program (for example Gmail or Outlook) and the country, but not your IP address or browser identifier. We use this to improve our content and to send a single reminder to subscribers who have not opened an issue. If you do not want this, you can disable image loading in your email program or unsubscribe.

Unsubscribing: Every email contains an unsubscribe link; your email program can also unsubscribe you with one click. You can also unsubscribe at any time by emailing us.

If you are already a customer, we may exceptionally send you information about our own similar offers without prior consent (Section 174(4) TKG 2021). You can object to this at any time free of charge, for example via the unsubscribe link.

Legal basis: your consent (Art. 6(1)(a) GDPR, Section 174 TKG 2021), which you can withdraw at any time; for keeping proof of the sign-up Art. 6(1)(c) and (f) GDPR. We use an email delivery service as a processor for sending. After you unsubscribe we send nothing further and only record that and when you unsubscribed, so that you are not contacted again.

10. Reader account and sign-in

You can create a reader account. You sign in without a password via a link we send to your email address; the link is valid for 20 minutes and can be used once. We process your email address, first and last name, country, time of sign-in and, for each session, the browser identifier so that you can see in your account on which devices you are signed in. A session ends after 30 days or when you sign out.

You can delete your account yourself at any time. This also deletes your newsletter and magazine subscriptions. We keep invoices because of legal obligations (see section 11).

Legal basis: contract for the use of the reader account (Art. 6(1)(b) GDPR).

11. Subscriptions and payment

For paid services we use the payment service Stripe (Stripe Payments Europe, Limited, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland). Payment takes place on a Stripe page to which we redirect you; Stripe does not pass your payment details (for example card details) to us. We send Stripe your email address, your name and an internal account number; from Stripe we receive name, email address, billing address, country, VAT identification number where applicable, amount and term. Stripe may transfer data to Stripe, Inc. in the USA; Stripe, Inc. is certified under the EU-US Data Privacy Framework.

If you provide a VAT identification number, we check it via the European Commission’s VAT Information Exchange System (VIES) and store the result.

We send invoices to you by email and in copy to our accounting department. Invoices and accounting records are kept for seven years (Section 132 Austrian Federal Fiscal Code, BAO).

Legal basis: performance of a contract (Art. 6(1)(b) GDPR) and legal obligations, in particular under tax law (Art. 6(1)(c) GDPR).

12. Push notifications

If you activate push notifications via the bell icon on our website and confirm this in your browser, we store the delivery address your browser generates for this, the associated technical keys and the language – without any link to your name, email address or IP address. Notifications are delivered via the push service of your browser vendor (for example Google, Mozilla or Apple). You can switch notifications off at any time via the bell icon or in your browser settings; we then delete the delivery address, or as soon as the push service reports it as invalid.

Legal basis: your consent (Art. 6(1)(a) GDPR, Section 165(3) TKG 2021).

13. Giveaways

For taking part in a giveaway we process your name, email address, your answer, whether you would like the newsletter, the country and the time of entry. To prevent multiple and spam entries we store, instead of your IP address, only a check value derived from it that changes every day. We notify winners by email. A sponsor whose logo appears with the giveaway does not receive any participant data from us unless the giveaway terms provide otherwise.

Entries are deleted 90 days after the draw; unconfirmed entries after 14 days. If you request the newsletter when entering, section 9 also applies. Details are set out in the Giveaway Terms.

Legal basis: running the giveaway (Art. 6(1)(b) GDPR), protection against abuse (Art. 6(1)(f) GDPR).

14. Requests and contact

Our forms allow you to request, change or remove a company listing or to have an event featured. For this we process the type of request, company, name, position (optional), email address and your message. To prevent spam we store, instead of your IP address, only a check value that changes daily. You receive a confirmation by email; the request is forwarded to our editorial team.

If you email us, we process your address and your message in order to reply. Our mailboxes are operated by Microsoft (Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland) as a processor.

We keep requests for as long as needed to handle them and for possible follow-up questions, and beyond that only where statutory retention obligations apply.

Legal basis: steps prior to entering into or performance of a contract (Art. 6(1)(b) GDPR), otherwise our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR).

15. Search, web app and fonts

Search: We only use your search terms to display results; we do not store them.
Web app: You can install Unmanned Magazine as a web app. Your browser then keeps program files, fonts and icons in a local cache so that pages load faster and an offline notice can be shown. No data is sent to us in the process.
Fonts: All fonts are hosted on our own server. No connection is made to Google Fonts or other font providers.

16. Recipients and transfers to third countries

Within our company, only the people who need the data for their tasks have access to it. External recipients are the service providers named in this policy: Hetzner (hosting, backups), Cloudflare (delivery, protection), our email delivery service, Microsoft (mailboxes), Stripe (payment), with your consent Google, X and advertisers with their own code, and the push services of browser vendors. Authorities only receive data where we are legally obliged to provide it.

Where data is transferred to the USA, we rely on the European Commission’s adequacy decision for the EU-US Data Privacy Framework (Art. 45 GDPR) if the recipient is certified, otherwise on the European Commission’s standard contractual clauses (Art. 46(2)(c) GDPR).

17. Retention

We store personal data only for as long as necessary for the respective purpose or as required by statutory retention obligations. The periods for individual processing operations are given in the sections above. After deletion, data may remain in our encrypted backups for up to 12 months until these are overwritten in the regular cycle.

18. Your rights

You have the following rights towards us:

Access to the data we process about you (Art. 15 GDPR)
Rectification of inaccurate data (Art. 16 GDPR)
Erasure (Art. 17 GDPR)
Restriction of processing (Art. 18 GDPR)
Data portability (Art. 20 GDPR)
Objection to processing based on legitimate interests (Art. 21(1) GDPR) and at any time to direct marketing (Art. 21(2) GDPR)
Withdrawal of consent with effect for the future (Art. 7(3) GDPR) – for cookies and embedded services via the privacy settings, for newsletters via the unsubscribe link

To exercise these rights, simply contact office@unmannedmagazine.com or write to our postal address. So that we do not disclose data to unauthorised persons, we may ask you to verify your identity.

19. Right to lodge a complaint

If you believe that we are not processing your data lawfully, you can lodge a complaint with a supervisory authority. In Austria this is the Data Protection Authority (Datenschutzbehörde), Barichgasse 40–42, 1030 Vienna, email: dsb@dsb.gv.at, www.dsb.gv.at. We would appreciate it if you contacted us first.

20. Changes

We update this privacy policy when our services or the legal situation change. The version published here applies. Last updated: 21 October 2026.