Privacy Policy

Protecting your personal data is important to us. We process personal data exclusively in accordance with the applicable data protection regulations, in particular the General Data Protection Regulation and the Austrian Data Protection Act.

Personal data is information relating to an identified or identifiable natural person. This includes, for example, names, email addresses, telephone numbers, IP addresses or information transmitted when contacting us.

When you access this website, the web server or hosting provider may automatically process technical access data.

This may include, in particular, the following data:

• IP address of the device used
• Date and time of access
• Page or file accessed
• Amount of data transferred
• Browser and operating system used
• Referrer URL
• Access status or HTTP status code

The processing is carried out to provide the website technically, ensure its stability and security, and identify technical faults or unauthorised access.

The legal basis is our legitimate interest in providing a secure and functional website pursuant to Art. 6(1)(f) GDPR.

This website is hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. Server log files are deleted automatically after 14 days.

If you contact us by email, telephone or by another means, we process the data you provide in order to handle your enquiry and communicate with you.

The following data may be processed in particular:

• Name
• Contact details
• Content of the enquiry
• Time of contact
• Other information provided voluntarily

Depending on the content of the enquiry, processing is carried out to take steps prior to entering into a contract or to perform a contract pursuant to Art. 6(1)(b) GDPR, or on the basis of our legitimate interest in handling enquiries pursuant to Art. 6(1)(f) GDPR.

Where statutory retention obligations apply, processing is additionally carried out pursuant to Art. 6(1)(c) GDPR.

The data will be deleted once the enquiry has been fully processed and no statutory retention obligations or legitimate interests require further storage.

On this website you can register for our WIN Event and contact us using a form. The form is provided by the WordPress plugin Contact Form 7.

Mandatory fields are first name, last name and email address. Company, telephone number, website and a message are optional. You also confirm that you have read this Privacy Policy and can agree to receive the WIN newsletter.

After submitting the form, you receive an email with a confirmation link (double opt-in). Only after you have confirmed your email address is your registration or enquiry forwarded to our office by email, and you receive a confirmation. To document the registration and the confirmation, we store your details together with the date and time of registration and confirmation and your IP address in our website system.

To protect the form against spam and misuse, we use a hidden field, a time check and a limit on the number of submissions per IP address. For this limit, a pseudonymised value derived from your IP address is stored for ten minutes. We do not use a CAPTCHA or any other external service for this.

The legal basis is the handling of your registration or enquiry pursuant to Art. 6(1)(b) GDPR and our legitimate interest in protecting the form against misuse pursuant to Art. 6(1)(f) GDPR. If you agree to receive the newsletter, the legal basis is your consent pursuant to Art. 6(1)(a) GDPR, which you can withdraw at any time.

Registrations and enquiries stored in our website system are deleted automatically 12 months after they were submitted.

This website is operated using the WordPress content management system and the Elementor page builder.

WordPress and Elementor are used for the technical creation, presentation and management of the website. Their use alone does not necessarily result in personal data being transferred to the respective providers.

Additional data processing may occur if external extensions, fonts, forms, analytics tools, videos, maps or other third-party services are integrated. These services are described separately in the relevant sections of this Privacy Policy.

This website may use cookies or comparable technologies. Cookies are small files stored in the browser or on the device being used.

Technically necessary cookies may be used to provide essential website functions. Cookies and services that are not technically necessary, particularly for statistics, marketing or external media, are activated only after the appropriate consent has been given.

Consent that has been granted can be changed or withdrawn at any time via the cookie settings with effect for the future.

Cookie banner and your consent

When you first visit this website, we ask for your consent in a cookie banner. Technically necessary cookies are always active. Services for statistics and marketing are only loaded after you have given your consent. Before that, no data is transmitted to Google or Meta.

Your choice is stored in the cookie adyx_consent for six months. This cookie contains only your selection and the time of your decision. The legal basis for storing it is Art. 6(1)(c) GDPR in conjunction with § 165(3) TKG 2021, as we are required to be able to document consent.

You can change or withdraw your consent at any time via Cookie settings in the footer. Withdrawal does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal. If you withdraw consent, the cookies of the services concerned are deleted.

The legal basis for all statistics and marketing services described below is your consent pursuant to Art. 6(1)(a) GDPR and § 165(3) TKG 2021.

Google Tag Manager

We use Google Tag Manager to manage the statistics and marketing services on this website. Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Tag Manager is only loaded after you have consented to statistics or marketing. It does not set its own cookies, but when it is loaded your IP address is processed by Google.

Google Analytics 4

With your consent, we use Google Analytics 4 to understand how our website is used. Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Processed data: pages visited, time and duration of the visit, clicks on buttons and links, submission of our registration and contact form (without its content), referring website, device and browser information and approximate location. According to Google, IP addresses of users in the EU are not stored. We do not transmit names, email addresses or form contents.

• Cookies: _ga and _ga_<ID>, retention 13 months
• Analytics data is deleted after 14 months
• Google Signals and ad personalisation are deactivated

We have concluded data processing terms with Google. Data may be transferred to Google LLC in the USA. Google LLC is certified under the EU-US Data Privacy Framework; transfers are based on the European Commission’s adequacy decision of 10 July 2023 (Art. 45 GDPR). More information: policies.google.com/privacy

Meta Pixel

With your consent, we use the Meta Pixel to measure the effectiveness of our advertising on Facebook and Instagram and to show more relevant ads. Provider: Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland.

Processed data: pages visited, referring website, browser and device information, IP address, cookie IDs and events such as the submission of our registration or contact form or a click on our email address or phone number (without content).

• Cookies: _fbp and _fbc, retention 3 months

For the collection and transmission of this data we are jointly responsible with Meta (Art. 26 GDPR). The agreement on joint controllership is available at facebook.com/legal/controller_addendum. Meta is solely responsible for any further processing. Data may be transferred to Meta Platforms, Inc. in the USA, which is certified under the EU-US Data Privacy Framework (Art. 45 GDPR). More information: facebook.com/privacy/policy

This website contains links to our profiles on social networks, particularly LinkedIn and Instagram.

Where these are standard external links only, displaying the link itself does not establish a direct connection to the respective platform. You leave our website and are redirected to the relevant platform only when you click the link.

From that point, the platform operator may process personal data. This may include the IP address, browser and device information, and information about the page visit. If you are logged in to the platform at the same time, the visit may be associated with your user account.

We do not use social media plugins or embedded feeds on this website. The Meta Pixel, which is only loaded with your consent, is described in section 06.

This website does not load any fonts from external providers such as Google Fonts.

Text is displayed in fonts that are already available on your device or that are delivered by our own web server. No connection to an external font provider is established when you visit this website.

Apart from the statistics and marketing services described in section 06, which are only loaded with your consent, no external content or services are embedded on this website.

In particular, we do not embed videos (for example from YouTube or Vimeo), maps, CAPTCHA services, appointment scheduling tools, chat systems or content from social networks.

Should we integrate such services in the future, we will describe them in this Privacy Policy.

We store personal data only for as long as necessary for the respective processing purpose.

Data may also be stored where statutory retention obligations apply, consent permits a longer retention period, or the data is needed to establish, exercise or defend legal claims.

Once the respective purpose no longer applies and the applicable retention periods have expired, the data will be deleted or anonymised.

As part of operating this website, personal data may be transferred to technical service providers. These may include hosting, IT, maintenance, email and web service providers.

These service providers receive personal data only to the extent necessary to provide their services.

Where service providers process personal data on our behalf, the required data processing agreements are concluded.

When certain external services are used, personal data may be transferred to countries outside the European Union or the European Economic Area.

Such a transfer takes place only where the legal requirements are met. The transfer may be based, in particular, on an adequacy decision by the European Commission, appropriate safeguards such as standard contractual clauses, or explicit consent.

Specifically, personal data may be transferred to the USA in the following cases:

• Google Tag Manager and Google Analytics 4 (Google LLC), only with your consent
• Meta Pixel (Meta Platforms, Inc.), only with your consent
• Email communication via Microsoft 365, which we use to receive and answer enquiries and registrations (Microsoft Corporation)

These companies are certified under the EU-US Data Privacy Framework. Transfers are based on the European Commission’s adequacy decision of 10 July 2023 (Art. 45 GDPR). This website itself is hosted in the European Union.

We take appropriate technical and organisational measures to protect personal data against loss, unauthorised access, alteration or disclosure.

These measures may include encrypted data transmission, access restrictions, regular updates to the systems used, backups and organisational safeguards.

The specific measures are selected with due regard to the state of the art, the nature and scope of the processing, and the respective risk.

Subject to the applicable legal requirements, you have the following rights in particular:

• Right to information
• Right of access
• Right to rectification
• Right to erasure
• Right to restriction of processing
• Right to data portability
• Right to object
• Right to withdraw consent
• Right not to be subject to a decision based solely on automated processing

You can send requests to exercise your rights to the following address:

Where processing is based on your consent, you may withdraw that consent at any time with effect for the future. The lawfulness of the processing carried out before the withdrawal remains unaffected.

Where processing is based on legitimate interests, you may object to the processing on grounds relating to your particular situation. You may object to processing for direct marketing purposes at any time.

If you believe that the processing of your personal data infringes data protection law, you may lodge a complaint with the competent data protection authority.

This Privacy Policy will be updated if the website, the services used or the legal and technical framework conditions change.

Last updated: September 2026