Privacy Policy

1. Controller

2. General information & your rights

Personal data is only processed on this website to the extent necessary for operating the site or handling your enquiry (Art. 6(1)(b) and Art. 6(1)(f) GDPR).

You have the right at any time to:

• Access your stored data (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure of your data (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Object to processing and withdraw consent (Art. 7, 21 GDPR)

Simply contact us using the details above.

3. Right to lodge a complaint with a supervisory authority

If you believe that the processing of your data violates data protection law, you can lodge a complaint with the Austrian Data Protection Authority:
Österreichische Datenschutzbehörde
Barichgasse 40-42, 1030 Vienna, Austria
E-mail: dsb@dsb.gv.at · www.dsb.gv.at

4. Hosting & server log files

This website is operated on servers within the European Union (data centre: netcup GmbH, Daimlerstraße 25, 76185 Karlsruhe, Germany) by our technical IT service provider under a data processing agreement pursuant to Art. 28 GDPR. When pages are accessed, technically necessary data (IP address, date and time of the request, requested page/file, browser type and operating system, referrer URL) is stored in server log files. This processing is based on Art. 6(1)(f) GDPR (legitimate interest in secure, stable operation and protection against misuse and attacks). Log data is not merged with other data sources and is automatically deleted after 14 days at the latest.

5. Contacting us (e-mail, phone, contact form)

If you contact us by e-mail, phone or via the contact form, we process your details (name, contact data, message content) exclusively to handle your enquiry and possible follow-up questions on the basis of Art. 6(1)(b) GDPR (pre-contractual measures and performance of a contract) and Art. 6(1)(f) GDPR (legitimate interest in answering enquiries).

Your data is deleted once your enquiry has been conclusively resolved (usually after 6 months), unless statutory retention obligations (7 years pursuant to § 132 BAO / § 212 UGB, Austria) apply.

For the technical delivery of the contact form we use our IT hosting service provider and the European sending provider Brevo (Sendinblue GmbH), Köpenicker Straße 126, 10179 Berlin, Germany. Processing takes place within the European Union on the basis of data processing agreements pursuant to Art. 28 GDPR.

6. WhatsApp contact link

This website optionally offers contacting us via WhatsApp. This is a simple link: only when you actively click the WhatsApp button will you be redirected to the service WhatsApp Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland). Until you click, no data is transmitted to WhatsApp. Please note that when using WhatsApp, metadata may also be transferred to the parent company Meta Platforms Inc. (USA), which is certified under the EU-US Data Privacy Framework. WhatsApp's own privacy policy (whatsapp.com/legal/privacy-policy-eea) applies to the subsequent communication.

7. No tracking cookies, locally hosted fonts

This website uses no cookies, no analytics or marketing tools and loads no content from external CDN servers. All fonts are hosted locally on our own server – no connection to Google Fonts or other third parties takes place. The embedded map graphic is a static, locally stored preview image; only when you actively click the external link “Open route in Google Maps” is data transmitted to Google Maps.