1. Controller Information (Impressum / Verantwortlicher)

The controller responsible for the processing of personal data on this website is:

[Company Name]
[Street Address]
[Postal Code] [City], Austria
Email: [email@example.com]
Phone: [+43 …]
Website: [www.yourwebsite.com]

Data Protection Officer (if applicable):
[Name or contact]
Email: [dpo@example.com]

2. Legal Framework

This Privacy Policy is issued in accordance with:

• Regulation (EU) 2016/679 – General Data Protection Regulation (GDPR)
• Datenschutzgesetz (DSG) – Austrian Federal Act on the Protection of Natural Persons with Regard to the Processing of Personal Data (as amended July 2024)
• Telekommunikationsgesetz 2021 (TKG 2021) – Austrian Telecommunications Act 2021, in particular Section 165(3) regarding cookies

3. What Personal Data We Collect

We may collect the following categories of personal data:

Automatically collected data (server logs):

• IP address
• Date and time of access
• Pages visited and files downloaded
• Browser type and version
• Operating system
• Referring URL

This data is stored in server log files for a maximum of [30 days / specify your period] for the sole purpose of ensuring system security and diagnosing technical problems. It is not used to create user profiles.

Data you provide voluntarily:

• Name
• Email address
• Message content (via contact forms)
• [Any other data your site collects — e.g. billing address, phone number]

4. Legal Basis for Processing (Art. 6 GDPR)

We process your personal data on the following legal bases:

5. Cookies and Tracking Technologies

This website uses cookies in accordance with Section 165(3) of the Austrian TKG 2021 and Art. 6 GDPR.

Strictly necessary cookies (no consent required): These are essential for the website to function and are processed on the basis of legitimate interests (Art. 6(1)(f) GDPR).

Optional cookies (consent required): Analytics, marketing, and preference cookies are only placed after you have given your explicit consent via our cookie banner. You may withdraw consent at any time.

We use the following cookies:

Note on Google Analytics / Google Fonts: The Austrian Data Protection Authority (DSB) has found that certain uses of Google Analytics and dynamically embedded Google Fonts may violate the GDPR due to IP address transfers to the USA. We [use / do not use] these services [and take the following supplementary measures: …].

6. Data Retention

We retain personal data only for as long as necessary for the stated purpose or as required by Austrian or EU law:

• Server logs: [30 days]
• Contact form inquiries: [6 months / until matter resolved]
• Contractual data: [7 years] (per Austrian commercial and tax law — §§ 132 BAO, 212 UGB)
• Newsletter subscribers: Until consent is withdrawn

7. Data Transfers to Third Countries

[If applicable] We may transfer personal data to third countries outside the European Economic Area (EEA) only where:

• An adequacy decision exists (Art. 45 GDPR), or
• Appropriate safeguards are in place such as Standard Contractual Clauses (Art. 46 GDPR)

[List specific third-party services used and the transfer mechanism — e.g. “We use [Service X], based in the USA, under the EU–US Data Privacy Framework / Standard Contractual Clauses.”]

If no third-country transfers occur, state: We do not transfer personal data outside the EEA.

8. Your Rights as a Data Subject (Arts. 12–22 GDPR; §§ 42–45 DSG)

You have the following rights regarding your personal data:

• Right of access (Art. 15 GDPR) – You may request confirmation of whether we process your data and obtain a copy.
• Right to rectification (Art. 16 GDPR) – You may request correction of inaccurate or incomplete data.
• Right to erasure (Art. 17 GDPR / “Right to be forgotten”) – You may request deletion when data is no longer necessary, consent is withdrawn, or processing was unlawful. Note: under § 4(4) DSG, immediate deletion may not always be possible for technical or economic reasons; deletion may occur in scheduled batches within a reasonable timeframe.
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR) – You may object to processing based on legitimate interests at any time.
• Right to withdraw consent (Art. 7(3) GDPR) – Withdrawal does not affect the lawfulness of processing before withdrawal.

To exercise any of these rights, contact us at: [email@example.com]

We will respond within one month as required by Art. 12(3) GDPR.

9. Right to Lodge a Complaint

If you believe that the processing of your personal data infringes the GDPR or §§ 1, 7–13 DSG, you have the right to lodge a complaint with the competent supervisory authority:

Österreichische Datenschutzbehörde (DSB)
Barichgasse 40–42
1030 Vienna, Austria
Email: dsb@dsb.gv.at
Website: www.dsb.gv.at

10. Third-Party Services

[List any third-party tools you use — examples below:]

• [Analytics provider]: We use [name] for website analytics. Data is processed under a data processing agreement. [Privacy policy link]
• [Email service]: Contact form messages are processed via [name]. [Privacy policy link]
• [Payment provider]: [If applicable] Payments are handled by [name], which acts as an independent controller. [Privacy policy link]
• [Social media plugins]: [If applicable] This website integrates [Facebook / Instagram / LinkedIn / etc.] plugins. When you interact with these plugins, data may be transferred to [Meta / etc.] under their respective privacy policies.

11. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or destruction, in accordance with Art. 32 GDPR. Data is stored on servers [located in Austria / the EEA].

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The current version is always available on this page. The “Last updated” date at the top of this document indicates when the most recent changes were made.

This Privacy Policy was last reviewed on 22 of june 2026