Privacy Policy

Protecting your personal data matters to us. This privacy policy explains the type, scope and purpose of processing personal data within our online offering and the associated websites, functions and content. Your data is processed exclusively on the basis of applicable law (GDPR, Austrian TKG 2003).

Data Security

We take all necessary and appropriate technical and organisational security measures to protect your personal data from loss and misuse. Access to our websites is secured via HTTPS, so communication between your device and our servers is encrypted.

Statistical Evaluation

When you visit our websites, the web server logs each access, including: the requesting computer’s IP address, date and time of access, name and URL of the file retrieved, amount of data transferred, whether the request succeeded, and browser/operating-system identification data. This is processed to enable use of the website, ensure system security, administer the network infrastructure and optimise the site. The IP address is only evaluated in emergencies — for example, investigating attacks.

Hosting

Our hosting provider is Hosttech GmbH, based in Salzburg, which provides infrastructure and platform services, computing capacity, storage, database services and security/maintenance services, on the basis of our legitimate interest in an efficient and secure online offering (Art. 6(1)(f) GDPR in conjunction with Art. 28 GDPR).

Contacting Us

If you contact us by email, we store the information you provide in order to process your enquiry and any follow-up questions. We do not pass this data on without your consent. Please note that the confidentiality of email content cannot be technically guaranteed unless specific security measures are taken.

Contact Form

When you use the contact form, we receive the following data: your name, company, email address, subject and message; if you reach the form from our configurator, also the answers you gave there, which are pre-filled in the form; and your confirmation that you have read this privacy policy.

The form is operated with the service Web3Forms of Web3Creative. Your browser sends the form data directly to Web3Forms, which receives it on its servers and forwards it to us by email. As the receiving server, Web3Forms also sees your IP address and technical information about your browser. Web3Forms acts as our processor under Art. 28 GDPR. Apart from Web3Forms, we do not pass this data on without your consent.

We use this data solely to process your enquiry and any follow-up questions. The legal basis is Art. 6(1)(b) GDPR where your enquiry concerns an existing or prospective contract, and otherwise Art. 6(1)(f) GDPR (our legitimate interest in answering enquiries). Providing the data is voluntary, but without it we cannot answer your enquiry.

Web3Forms is operated by Web3Creative from India and uses cloud infrastructure and sub-processors in several countries, including the United States. These countries are outside the EU/EEA. The transfer is based on the EU Standard Contractual Clauses (Commission Implementing Decision (EU) 2021/914), which are part of our data processing agreement with Web3Forms (web3forms.com/dpa). Web3Forms also uses sub-processors for email delivery and spam filtering; the spam-filtering providers receive your IP address and email address.

We keep your enquiry only as long as needed to process it and for any follow-up questions, and delete it afterwards. If the enquiry leads to a contract, or statutory retention obligations apply, we keep the data for as long as the law requires. In our Web3Forms account, your submission is stored until we delete it; we delete it there at the same time as the copy in our mailbox. In any case, Web3Forms’ systems remove stored submissions automatically after three years at the latest. You can ask us to delete your enquiry at any time (see “Your Rights”).

Spam Protection (hCaptcha)

To protect the contact form against spam and automated abuse, we use hCaptcha, a service of Intuition Machines, Inc., integrated through Web3Forms. The hCaptcha widget is loaded as soon as you open the contact page, not only when you submit the form. For this, your browser connects to servers of Web3Forms and hCaptcha, which thereby receive your IP address as well as technical and behavioural information about your browser and your interaction with the widget; hCaptcha uses this to tell human visitors from automated ones. When you submit the form, the result of this check is sent to Web3Forms together with your enquiry.

hCaptcha and the bot-protection service it uses may set cookies in your browser to tell human visitors from automated ones. The legal basis is Art. 6(1)(f) GDPR — our legitimate interest in protecting the form against abuse.

Cookies

Our website uses cookies — small text files stored on your device via your browser — to make our offering more user-friendly. You can configure your browser to notify you when cookies are set, or to reject them entirely; doing so may limit the site’s functionality.

Google Analytics

Where this website uses Google Analytics, a web analytics service provided by Google LLC (“Google”), on the basis of our legitimate interest in analysing, optimising and operating our online offering (Art. 6(1)(f) GDPR), your browser may store a cookie enabling analysis of your use of the site. The resulting information is transmitted to and processed on Google’s servers, and pseudonymous usage profiles may be created. You can prevent the storage of cookies via your browser settings, and object to the collection of cookie-generated data by installing the browser add-on available at tools.google.com/dlpage/gaoptout. See Google’s privacy policy for more information.

Google Fonts

We embed fonts (“Google Fonts”) provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy policy: google.com/policies/privacy.

Embedding Third-Party Services and Content

On the basis of our legitimate interest in analysing, optimising and operating our online offering (Art. 6(1)(f) GDPR), we may embed content or service offerings from third parties. This requires the respective third-party provider to see the user’s IP address, since otherwise it could not deliver the content to their browser.

Working with Processors and Third Parties

We only disclose, transmit or otherwise grant access to data to other persons or companies on the basis of a legal permission, your consent, a legal obligation or our legitimate interests. Where we engage third parties under a data processing agreement, this is done in accordance with Art. 28 GDPR.

Your Rights

You generally have the right to access, rectification, erasure, restriction, data portability and objection. If you believe processing of your data violates data protection law, you may lodge a complaint with the Austrian Data Protection Authority.

Right of Withdrawal

You have the right to withdraw consent already given, with effect for the future, under Art. 7(3) GDPR — please use the details on our contact page.

Right to Object

You may object at any time to future processing of your data under Art. 21 GDPR, in particular processing for direct marketing purposes — please use the details on our contact page.