Skip to main content

Statement on the Duty to Provide Information
The protection of your personal data is important to us. In this privacy policy, we inform you about what data we process when you use our website, for what purposes this is done, on what legal basis we act, and what rights you have.

Principles of Data Processing
We process personal data exclusively in accordance with applicable data protection regulations, in particular the General Data Protection Regulation (GDPR) and the relevant national data protection and telecommunications regulations. In doing so, we place particular emphasis on lawful, transparent, and purpose-limited processing.
Personal data is processed only to the extent necessary for the respective purposes. We implement appropriate technical and organizational measures to ensure data security and prevent unauthorized or unlawful processing.
Processing is carried out in good faith and in compliance with applicable legal provisions.

Server Log Files and Hosting
When you visit our website, our hosting provider automatically collects information and stores it in server log files. This data is technically necessary to ensure the secure and stable operation of the website.

The data processed may include, in particular:

  • IP address of the requesting device
  • Date and time of access
  • Pages/files accessed
  • amount of data transferred
  • Browser type and version
  • Operating system used
  • Referrer URL

Purpose of processing:
To ensure technical operation, system security, error analysis, and protection against misuse and attacks.
Legal basis:
Art. 6(1)(f) GDPR (legitimate interest in a secure, stable, and fully functional website).
Retention period:
Server log files are stored for a limited period of time and then automatically deleted, unless security-related events require longer retention.
Hosting:
The website is hosted by an external hosting service provider that processes personal data exclusively within the scope of data processing on behalf of the controller in accordance with Art. 28 GDPR.
Hosting Provider:
Camyno GmbH, Aue 144, 6405 Pfaffenhofen, Austria, https://www.camyno.com

Use of Data Processors
To provide our website and its various features, we use external service providers who process personal data on our behalf (so-called data processors).
These service providers are carefully selected, contractually bound, and process data exclusively in accordance with our instructions and applicable data protection regulations.
We have data processing agreements in place with all relevant service providers in accordance with Article 28 of the GDPR.

Contacting Us
If you contact us via a contact form on this website, by email, or by phone, we will process the personal data that you voluntarily provide to us when contacting us. This may include, in particular, your name, email address, phone number, and the content of your inquiry.
This data is processed exclusively for the purpose of handling your inquiry, responding to follow-up questions, carrying out pre-contractual measures, or fulfilling an existing contractual relationship.

Purpose of processing:
Processing and responding to inquiries, communicating with prospective and existing customers, carrying out pre-contractual measures, and maintaining business correspondence.
Legal basis:
Art. 6(1)(b) GDPR (contract or pre-contractual measures) and—if no contractual relationship exists—Art. 6(1)(f) GDPR (legitimate interest in efficient and transparent communication).
Retention period:
The data transmitted when you contact us will be stored only for as long as is necessary to process the inquiry. Storage beyond this period will occur only if statutory retention obligations exist or if the data is necessary to assert, exercise, or defend legal claims.
Recipients:
Your data will be shared exclusively with those internal departments responsible for processing your request. If external service providers (e.g., hosting or IT service providers) are involved, this will take place exclusively within the framework of data processing on behalf of the controller in accordance with Article 28 of the GDPR.

Spam Protection
To prevent spam and the misuse of our contact forms through automated means, we use a standalone, server-based reCAPTCHA that does not store any third-party cookies.
This reCAPTCHA uses technical verification mechanisms to detect automated access. Only the information necessary to ensure the functionality and security of the forms is processed. The data is not shared with third parties.

Purpose of processing:
To protect the website and communication infrastructure from spam, misuse, and automated attacks.
Legal basis:
Art. 6(1)(f) GDPR (legitimate interest in the security and stability of the website).
Data processing:
Processing takes place exclusively within the European Union.

Spam Protection with ALTCHA
We use ALTCHA to protect our website from automated access. ALTCHA is a privacy-friendly, cryptography-based bot detection method that does not rely on tracking, cookies, or profiling.
When using ALTCHA, no personal data is transferred to external third parties. The verification process is anonymous and serves exclusively for the technical validation of form submissions.

Purpose of processing:
To protect the website and contact forms from automated misuse.
Legal basis:
Art. 6(1)(f) GDPR (legitimate interest in the security and uninterrupted operation of the website).
Data processing:
Processing is carried out without creating user profiles and without transferring personal data to third countries.

Spam Protection with captcha.eu
To protect our forms against automated submissions, we use the captcha.eu service. The provider is Captcha GmbH, Muthgasse 36, 1190 Vienna, Austria.
captcha.eu uses data-minimal verification mechanisms to detect and prevent automated access. In doing so, it processes technical information necessary to distinguish between human users and bots. According to the provider, no personal data is transferred to third countries.

Purpose of processing:
To prevent spam and misuse, and to ensure the proper functioning of the contact forms.
Legal basis:
Art. 6(1)(f) GDPR (legitimate interest in the security and integrity of the website).
Data processing:
Processing takes place within the European Union.
Further information:
Privacy policy of captcha.eu.

Spam Protection with Google reCAPTCHA v2
To protect our contact forms from automated misuse, we use Google reCAPTCHA v2. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
reCAPTCHA analyzes user behavior based on various characteristics (e.g., IP address, mouse movements, time spent on the page, browser and device settings) to determine whether the user is a human or an automated program. Processing takes place in the background or through active user interaction (e.g., selecting a checkbox).

Purpose of processing:
To protect the website and contact forms from spam, misuse, and automated attacks.
Legal basis:
Art. 6(1)(f) GDPR (legitimate interest in protecting the website) and—where necessary—Art. 6(1)(a) GDPR (consent).
Data Transfer:
When using Google reCAPTCHA, data may be transferred to third countries (in particular to the United States). For more information, see the section “Data Transfer to Third Countries.”
Further Information:
Google’s Privacy Policy.

Cookies & Similar Technologies
Our website uses cookies and similar technologies (e.g., local storage). These are small files or pieces of information that can be stored on or read from your device to provide basic functionality, save settings, or enable audience measurement and marketing.

  • Technically necessary cookies: required for the website to function properly (e.g., page navigation, security, storing consent).
  • Optional cookies: Statistics/Marketing/Convenience features (e.g., web analytics, embedded content).

Cookie Consent:
Unless cookies are strictly necessary, we will not set them until you have given your consent via our Consent-Banner.

You may modify or withdraw your consent at any time, effective for the future.
Storage period: depends on the specific cookie (session cookies until the browser is closed; persistent cookies until they expire or are manually deleted).
You can also delete or block cookies through your browser settings. Disabling cookies may limit the functionality of the website.

Consent Management
To manage consent for the use of cookies and similar technologies, we use a consent management tool integrated into the website.
This tool enables us to obtain, manage, and document consent in a differentiated manner. In particular, information regarding the consent status, the time of the decision, and the selected settings is processed to ensure compliance with data protection requirements in a traceable manner. This data is not disclosed to third parties.

Purpose of processing:
Obtaining, managing, and documenting consents in accordance with the legal requirements of the General Data Protection Regulation.
Legal basis:
Art. 6(1)(c) GDPR (compliance with a legal obligation) and Art. 6(1)(f) GDPR (legitimate interest in legally compliant and transparent consent management).
Retention period:
Consent data is stored only for as long as necessary to fulfill the legal obligations to provide evidence.

Consent Management with Cookiebot
We use the consent management service Cookiebot to manage consent for the use of cookies and similar technologies. The provider is Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark.
Cookiebot collects and stores information about the consents you have granted or revoked. In particular, the consent status, the time of the decision, and a pseudonymized identification number are processed in order to demonstrate compliance with data protection requirements.

Purpose of processing:
Obtaining, managing, and documenting consents in accordance with legal requirements.
Legal basis:
Art. 6(1)(c) GDPR (compliance with a legal obligation) and Art. 6(1)(f) GDPR (legitimate interest in legally compliant and traceable consent management).
Retention period:
Consent data is stored for as long as necessary to fulfill the obligations to provide evidence.

Consent Management with consentmanager
We use the consent management tool consentmanager to manage consent for the use of cookies and similar technologies. The provider is consentmanager AB, Håltegelvägen 1b, 72348 Västerås, Sweden.
Consentmanager stores information about consents granted or denied, including the time of the decision and the selection made in each case. This information is used for the legally compliant management and documentation of the services used.

Purpose of processing:
Obtaining, managing, and documenting consents in accordance with the GDPR and applicable data protection regulations.
Legal basis:
Art. 6(1)(c) GDPR and Art. 6(1)(f) GDPR (legitimate interest in ensuring the website complies with legal requirements).
Retention period:
Consent information is stored in accordance with statutory record-keeping requirements.

Consent Management with Usercentrics
We use the Usercentrics consent management tool to manage your consents. The provider is Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich, Germany.
Usercentrics enables us to obtain, manage, and document consent for individual categories of cookies and services. In doing so, information regarding the consent status, the time of the decision, and the selected settings is processed.

Purpose of processing:
Obtaining, managing, and documenting consent in compliance with the law.
Legal basis:
Art. 6(1)(c) GDPR (legal obligation) and Art. 6(1)(f) GDPR (legitimate interest in compliance with data protection regulations).
Retention period:
The stored consent data is retained only for as long as necessary to fulfill the legal obligations to provide evidence.

Consent-Management mit CookieYes
Zur Verwaltung der Einwilligungen in Cookies und ähnliche Technologien verwenden wir das Consent-Management-Tool CookieYes. Anbieter ist Mozilor Limited, 3 Warren Yard, Wolverton Mill, Milton Keynes, MK12 5NW, Vereinigtes Königreich.
CookieYes speichert Informationen über Ihre Cookie-Einstellungen, einschließlich der erteilten oder widerrufenen Einwilligungen sowie des Zeitpunkts der Entscheidung. Diese Daten werden genutzt, um die Cookie-Nutzung auf der Website entsprechend Ihrer Auswahl zu steuern und zu dokumentieren.

Zweck der Verarbeitung:
Einholung, Verwaltung und Dokumentation von Cookie-Einwilligungen.
Rechtsgrundlage:
Art. 6 Abs. 1 lit. c DSGVO sowie Art. 6 Abs. 1 lit. f DSGVO (berechtigtes Interesse an einer datenschutzkonformen Website-Gestaltung).
Speicherdauer:
Die Einwilligungsdaten werden entsprechend der gesetzlichen Nachweispflichten gespeichert.

Web Analytics with Google Analytics 4 (GA4)
Provided you have given your express consent, we use the web analytics service Google Analytics 4 (GA4) on our website. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics 4 uses cookies and similar technologies to collect and analyze information about website usage. The reports generated by Google Analytics 4 are provided exclusively in aggregated form. In particular, the following data may be processed:

  • Pages Viewed and Interactions
  • Technical information about the device (e.g., browser type, operating system)
  • truncated IP address
  • approximate location information

The information collected is used to analyze user behavior on the website, generate reports on website activity, and continuously improve our online offerings.

Purpose of processing:
Audience measurement, analysis of user behavior, and optimization of the website’s content, structure, and performance.
Legal basis:
Art. 6(1)(a) GDPR (consent). Processing takes place exclusively with your active consent via the consent management tool used.
Recipients / Data processing:
Google processes the data on our behalf. When using Google Analytics 4, data may be transferred to third countries (in particular to the U.S.). For more information on this, please see the section “Data Transfer to Third Countries.”
Retention Period:
The retention period for the collected data depends on the settings configured in Google Analytics 4 and does not exceed the periods specified by Google. Event data is automatically deleted once the specified retention period has elapsed.
Withdrawal of Consent:
You may withdraw your consent at any time with future effect via the cookie settings on this website.
Further Information:
Details regarding data processing by Google can be found in Google’s Privacy Policy.
Note: Details regarding data processing by Google can be found in Google’s Privacy Policy:
https://policies.google.com/privacy?hl=de

Web Analytics with Matomo
Provided you have given your explicit consent, we use the web analytics service Matomo on our website. Matomo is open-source software for the statistical analysis of visitor traffic.
Matomo processes information about website usage to analyze user behavior anonymously and continuously improve our online offerings. In particular, the following data may be processed:

  • Pages Viewed and Interactions
  • truncated IP address
  • Technical information about the device (e.g., browser type, operating system)
  • Date and time of access

Die IP-Adresse wird vor der Speicherung anonymisiert, sodass ein direkter Personenbezug ausgeschlossen ist.

Zweck der Verarbeitung:
Reichweitenmessung, Analyse des Nutzerverhaltens sowie Optimierung von Inhalten, Struktur und Performance der Website.
Rechtsgrundlage:
Art. 6 Abs. 1 lit. a DSGVO (Einwilligung). Die Verarbeitung erfolgt ausschließlich nach Ihrer aktiven Zustimmung über das eingesetzte Consent-Management-Tool.
Datenverarbeitung / Hosting:
Matomo wird entweder auf eigenen Servern oder bei einem externen Hostinganbieter betrieben. In beiden Fällen erfolgt die Verarbeitung der Daten ausschließlich in unserem Auftrag und gemäß den geltenden datenschutzrechtlichen Bestimmungen.
Eine Übermittlung personenbezogener Daten in Drittstaaten findet nicht statt.
Speicherdauer:
Die Speicherdauer der erhobenen Daten richtet sich nach den in Matomo vorgenommenen Einstellungen. Besuchsdaten werden nur so lange gespeichert, wie dies für die Analysezwecke erforderlich ist, und anschließend gelöscht oder anonymisiert.
Widerruf der Einwilligung:
Sie können Ihre Einwilligung jederzeit mit Wirkung für die Zukunft über die Cookie-Einstellungen auf dieser Website widerrufen.
Weitere Informationen:
Weitere Informationen zur Datenverarbeitung durch Matomo finden Sie auf der Website des Anbieters.
https://matomo.org/gdpr-analytics/

IP Anonymization
We use Google Analytics with IP anonymization enabled. This truncates your IP address before further processing, so that it cannot be easily linked to you personally.
In exceptional cases, a full IP address may be transmitted to a Google server and truncated there. Google uses the processed information to evaluate website usage, compile reports on website activity, and provide other services related to website usage.

Browser Plugin
Regardless of whether you have given your consent via the consent banner, you can also prevent Google Analytics from collecting and processing your usage data by installing the browser add-on provided by Google:
https://tools.google.com/dlpage/gaoptout?hl=de
Please note: If blockers or restrictions are enabled, certain website features may be limited.

Demographic Characteristics
If enabled and provided you have given your consent, Google Analytics may provide reports on demographic characteristics (e.g., age ranges, gender, interests). According to Google, this information is derived from sources such as interest-based advertising and third-party data, and is typically presented in aggregated form.

  • Purpose: To better understand the target audience's interests and optimize content.
  • Legal basis: Article 6(1)(a) of the GDPR (consent).
  • Opting Out: You can reduce or disable personalized ads in your Google Account or through Google's ad settings. Click here to visit the Google Safety Center: https://safety.google/intl/de_ALL/settings/privacy-settings/

Google Maps
Maps from the Google Maps service may be embedded on our website. The provider is generally Google Ireland Limited (see above). OpenCorpData
When you visit pages with embedded maps, data (in particular your IP address and technical information; and, if applicable, location data, provided you have given your consent on your device) may be transmitted to Google and processed there. Processing in third countries is possible.

  • Purpose: Convenient display of maps and locations, route planning.
  • Legal basis: Art. 6(1)(a) GDPR (consent)—provided that the integration occurs only after consent is given; otherwise, Art. 6(1)(f) GDPR applies only if the integration is technically necessary (which is generally not required in practice).
  • For more information: Google Privacy Policy: https://policies.google.com/privacy?hl=de

OpenStreetMap
Our website may include maps from the OpenStreetMap service. OpenStreetMap is a collaborative project for creating freely usable geographic data.
When you visit a page with embedded OpenStreetMap maps, personal data—in particular your IP address and technical information about the device you are using—may be processed for technical reasons. This data is required to display the map content correctly.

Purpose of processing:
To display geographic information, maps, and locations, and to improve user-friendliness.
Legal basis:
Art. 6(1)(f) GDPR (legitimate interest in the user-friendly display of locations and information).
Data processing:
Processing takes place within the scope of using publicly available OpenStreetMap services. No targeted profiling takes place.
Further information:
Information on data protection at OpenStreetMap can be found in the OpenStreetMap Foundation’s privacy policy.

Contwise Maps (General Solutions)
Our website may incorporate map services from Contwise Maps. The provider is General Solutions Steiner GmbH, Austria.
Contwise Maps enables the display of interactive maps and location information. During use, technically necessary data may be processed—in particular, the IP address and device-related information—in order to provide the map content.

Purpose of processing:
Display of maps, locations, and additional geographic information, as well as support for user navigation.
Legal basis:
Art. 6(1)(f) GDPR (legitimate interest in a functional and user-friendly map display).
Data Processing:
Processing is carried out in accordance with data protection regulations within the European Union. No personal data is transferred to third countries.
Further Information:
For further information on data processing, please refer to the provider’s privacy policy. https://www.general-solutions.eu/php/datenschutz,22860.html

YouTube
We can embed videos from YouTube. YouTube is a Google service.
Google Datenschutz & Nutzungsbedingungen
When you visit a page with embedded YouTube content, a connection is established with YouTube/Google servers. In the process, personal data (e.g., IP address, device information, page visited) may be processed. If you are logged into your YouTube/Google account, YouTube may associate your usage with your profile; you can prevent this by logging out.

  • Purpose: To display video content.
  • Legal basis: Art. 6(1)(a) of the GDPR (consent) – recommended in particular for active embeds/tracking.
  • For more information: Google/YouTube Privacy Policy:

Meta Plugins (Facebook, Instagram, WhatsApp)
Our website may include features or plugins from Meta’s social networks. The data controller in the EU is generally Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland.
https://opencorporates.com/companies/ie/462932
When you visit a page that includes a Meta plugin, a direct connection may be established between your browser and Meta’s servers. In the process, data (e.g., IP address, device/browser information, page visited) may be transmitted to Meta. If you are logged into Facebook, Meta may associate your visit with your user account. If you do not want this to happen, please log out before visiting our website.

  • Purpose: Interaction and reach through social media features.
  • Legal basis: Art. 6(1)(a) of the GDPR (consent), provided that the plugin is loaded only after consent is given (recommended, e.g., a two-click solution or consent-based loading).
  • For more information: Meta (Facebook) Privacy Policy

Social Media Links Only
Our website contains links to external social networks (e.g., Facebook, Instagram, LinkedIn). These are links only and not plugins that transmit data to the respective providers as soon as the website loads.
A connection to the servers of the respective social network is established only when you click on the relevant link. In doing so, personal data (e.g., IP address, page visited) may be transmitted to the respective provider.
The processing of this data falls exclusively under the responsibility of the respective social network. For information on data processing, please refer to the privacy policies of the respective providers.

Data Transfer to Third Countries
When using certain services and features on our website (in particular analytics, marketing, and multimedia services such as Google, Meta, or YouTube offerings), personal data may be transferred to countries outside the European Union or the European Economic Area (so-called third countries), particularly to the United States.
Such data transfers take place exclusively if you have given your express prior consent or if they are absolutely necessary for technical reasons.

Consent-Based Data Transfers
For services requiring consent (e.g., web analytics, embedded content, social media plugins), data transfers to third countries take place exclusively on the basis of your explicit consent pursuant to Article 6(1)(a) of the GDPR, which you provide via the consent management tool used and may revoke at any time with future effect.

Technically Necessary Data Transfers
In exceptional cases where a transfer to a third country is absolutely necessary for the technically secure operation of the website, this is carried out on the basis of our legitimate interest pursuant to Article 6(1)(f) of the GDPR, in particular to ensure the security, stability, and functionality of our online offering.

Safeguards
For data transfers to third countries, appropriate safeguards are implemented—where necessary—including, in particular:

  • Adequacy decisions by the European Commission (e.g., the EU-U.S. Data Privacy Framework) and/or
  • Standard contractual clauses approved by the European Commission pursuant to Article 46 of the GDPR.

Despite these measures, it cannot be ruled out that authorities in the respective third country may access personal data. By giving your consent, you expressly acknowledge this residual risk.

Legal Basis for Data Processing
We process personal data exclusively in accordance with legal provisions. Depending on the nature and purpose of the processing, the following legal bases apply in particular:

  • Art. 6 Abs. 1 lit. a DSGVO – Consent
  • Art. 6 Abs. 1 lit. b DSGVO – Contract or Precontractual Measures
  • Art. 6 Abs. 1 lit. c DSGVO – legal obligation
  • Art. 6 Abs. 1 lit. f DSGVO – legitimate interest

Our legitimate interest lies, in particular, in the efficient operation, security, optimization, and user-friendly design of our online services.

Storage and Deletion
We process personal data only for as long as is necessary for the respective purposes or as required by statutory retention obligations.
If the purpose of the processing no longer applies or if consent has been withdrawn, the relevant data will be deleted, provided that no legal obligations or overriding legitimate interests preclude such deletion.
Statutory retention periods arise in particular from tax and corporate law regulations.

Your Rights
In accordance with the GDPR, you have the following rights in particular:

  • Right of Access (Art. 15 of the GDPR)
  • Rectification (Art. 16 of the GDPR)
  • Erasure (Art. 17 of the GDPR)
  • Restriction of Processing (Art. 18 GDPR)
  • Data Portability (Art. 20 of the GDPR)
  • Objection to Processing Based on Legitimate Interests (Art. 21 GDPR)
  • Withdrawal of Consent with Future Effect (Art. 7(3) GDPR)

If you believe that the processing of your personal data violates data protection laws, you may file a complaint with a supervisory authority. In Austria, this is the Data Protection Authority.
Exercising Your Rights:
Please direct your inquiry to: {Insert data protection contact}

Updates and Changes to This Privacy Policy
This Privacy Policy will be updated as needed to reflect changes in the law, technical advancements, or new services.
The most current version is available on this website at any time.

Final Provision
Should any individual provisions of this Privacy Policy be or become invalid, the validity of the remaining provisions shall remain unaffected.
This Privacy Policy applies in its current version and is available on our website at any time.