DRAFT – not yet legally reviewed. Placeholders are marked [PLATZHALTER] or [to be checked].
Privacy policy
Last updated: [PLATZHALTER: Datum]
1. Controller
[PLATZHALTER: Firmenwortlaut laut Firmenbuch], [PLATZHALTER: Straße und Hausnummer], [PLATZHALTER: PLZ] [PLATZHALTER: Ort], Austria
Email: [PLATZHALTER: E-Mail]
Data protection requests: [PLATZHALTER: Kontakt für Datenschutzanfragen]
2. Hosting and server logs
This site is operated via Cloudflare (Cloudflare, Inc., San Francisco, USA; certified under the EU-US Data Privacy Framework). When you visit it, Cloudflare processes technically necessary data, in particular your IP address, the requested address, time and browser details. When the form is submitted, these details are logged for troubleshooting for up to [to be checked: retention of Cloudflare logs]. The legal basis is our legitimate interest in secure and stable operation (Art. 6(1)(f) GDPR).
3. Enquiry form
When you contact us through the form, we process your details (name, email address and, if provided, company, phone number and message), the page you sent the form from and campaign parameters from the address (e.g. utm_source, gclid) in order to handle your enquiry. The legal basis is taking steps prior to entering into a contract (Art. 6(1)(b) GDPR) or our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR).
The enquiry is stored in our CRM system Odoo (Odoo S.A., Belgium, as processor [address to be checked]). If, exceptionally, it cannot be stored there, it is sent to an internal Microsoft Teams channel (Microsoft Ireland Operations Ltd., Ireland) so that it is not lost. Retention: [PLATZHALTER].
To protect against automated submissions we use Cloudflare Turnstile. Turnstile checks characteristics of your browser and your IP address, but sets no cookies for this. The legal basis is our legitimate interest in preventing abuse (Art. 6(1)(f) GDPR).
4. Cookies and consent
We use the services listed below only with your consent (Art. 6(1)(a) GDPR, § 165(3) TKG 2021). Without consent they are not loaded. We store your choice in the cookie "lp_consent" for six months; this cookie is technically necessary and needs no consent. You can withdraw your consent at any time with effect for the future:
4.1 Leadinfo
Provider: Leadinfo B.V., Rotterdam, the Netherlands [address to be checked].
Purpose: Leadinfo uses the IP address to recognise which companies visit our site and shows us publicly available company data (e.g. company name, industry). Individuals are not identified.
Data processed: IP address, pages visited, time, device and browser.
Legal basis: your consent (Art. 6(1)(a) GDPR, § 165(3) TKG 2021), which you can withdraw at any time via "Cookie settings".
Retention: [to be checked].
| Cookie | Lifetime |
|---|---|
| _li_id | 2 years [to be checked] |
| _li_ses | session [to be checked] |
4.2 Google Ads conversion tracking
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Data may be transferred to Google LLC in the USA; Google LLC is certified under the EU-US Data Privacy Framework.
Purpose: measuring whether a click on one of our ads led to an enquiry through the form, and showing personalised advertising. Google Ads is only loaded after your consent (Google Consent Mode, basic variant).
Data processed: IP address, ad click identifier (gclid), pages visited, time, device and browser, the fact that the form was submitted.
Legal basis: your consent (Art. 6(1)(a) GDPR, § 165(3) TKG 2021), which you can withdraw at any time via "Cookie settings".
Google sets its cookies on the highest level of our domain, so they also apply to other pages under the same main domain. Google Ads also stores an entry in your browser's local storage and sets the cookie "IDE" on Google's own domain doubleclick.net. When you withdraw consent, we delete the cookies and entries on our domain. Cookies on Google's own domains can only be deleted by your browser; you can also switch off personalised advertising at https://myadcenter.google.com/.
| Cookie | Lifetime |
|---|---|
| _gcl_au | 90 days |
| _gcl_aw (only after a click on an ad) | 90 days |
| _gcl_ls (local storage, not a cookie) | until withdrawal or deletion |
| IDE (domain doubleclick.net, set by Google) | 13 months |
5. Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability and objection, and the right to withdraw consent at any time. Please contact [PLATZHALTER: Kontakt für Datenschutzanfragen]. If you believe that the processing of your data violates data protection law, you can lodge a complaint with the Austrian Data Protection Authority (Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at).