Privacy Policy

Last updated: [DD/MM/YYYY]

​

1. Controller
   The controller responsible for processing personal data on this website is:
   [First name Last name / Business name]
   [Address]
   Email: [Email address]
   Phone: [Phone number]

2. Contact for data protection requests
   For any questions regarding data protection and for exercising your rights, please contact us using the details listed in section 1.

3. General principles
   We process personal data only in accordance with applicable data protection laws, in particular the GDPR. Personal data means any information relating to an identified or identifiable individual.

4. Purposes and legal bases
   We process personal data for the following purposes and on the following legal bases:
   Handling enquiries and taking steps prior to entering into a contract under Art. 6(1)(b) GDPR.
   Compliance with legal obligations, especially accounting and retention duties, under Art. 6(1)(c) GDPR.
   Operating, securing and maintaining the website under Art. 6(1)(f) GDPR.
   Where consent is required, under Art. 6(1)(a) GDPR.

5. Categories of data
   Depending on how you use the website, we may process in particular:
   Contact details (e.g., name, email address).
   Message content (e.g., information you provide in your enquiry).
   Files (e.g., uploaded plans, scans, photos).
   Payment and transaction data (depending on the payment method).
   Usage and log data (e.g., IP address, timestamps, pages accessed) where technically necessary.

6. Hosting and website platform (Wix)
   This website is operated via Wix. Wix processes data as a service provider and/or processor for the technical provision and maintenance of the website. In this context, technically necessary log data may be generated.

7. Server log data
   When you access the website, data transmitted by your browser is processed for technical reasons. This includes in particular IP address, date and time of access, requested page, referrer URL, browser type/version and operating system. Processing is carried out to ensure technical operation, troubleshoot errors and protect against attacks based on our legitimate interests under Art. 6(1)(f) GDPR.

8. Cookies and similar technologies
   Our website may use cookies and similar technologies that are necessary for operating and displaying the website. Where additional cookies (e.g., for analytics or marketing) are used, this will only occur with your consent where required by law. You can adjust your cookie settings at any time via your browser settings and/or a cookie banner provided on the website.

9. Enquiry form and contact
   If you contact us via the enquiry form, we process your details to handle your request, prepare a quote and communicate with you. The legal basis is Art. 6(1)(b) GDPR (pre-contractual steps) and, where applicable, Art. 6(1)(f) GDPR (efficient communication).

10. File uploads
    You may upload files (e.g., PDF, JPG, PNG, DWG) as part of your enquiry. We process these files solely to review your materials, prepare a quote and provide our services. The legal basis is Art. 6(1)(b) GDPR.

11. Storage and internal handling (e.g., cloud storage)
    For organisational purposes, enquiries and uploaded files may be stored and processed in a cloud storage solution (e.g., Google Drive). Data is processed only to the extent necessary and protected against unauthorised access through appropriate technical and organisational measures.

12. Quotes, engagement and service delivery
    If you place an order, we process the necessary data to perform the contract, manage the project, coordinate revisions and deliver the results. The legal basis is Art. 6(1)(b) GDPR.

13. Payment processing
    Depending on the chosen payment method, we process the data required to handle payments. If external payment providers are used (e.g., PayPal or card payments via a payment service provider), processing is also carried out by the respective provider in accordance with their own privacy policies. The legal basis is Art. 6(1)(b) GDPR.

14. Email communication
    We typically communicate by email to handle enquiries and fulfil contracts. This involves processing your contact details and the content of the communication. The legal basis is Art. 6(1)(b) GDPR and, where applicable, Art. 6(1)(f) GDPR.

15. Recipients and categories of recipients
    We only share personal data where required for contract performance, to comply with legal obligations or where we use service providers. Recipients may include in particular:
    Hosting/website provider (Wix).
    Cloud storage provider (e.g., Google).
    Payment providers (e.g., PayPal) and banks.
    Tax advisors/public authorities where legally required.

16. International transfers
    Depending on the service providers used, data may be processed outside the EEA. Where this is the case, we ensure appropriate safeguards where required, in particular by using recognised standard contractual clauses or comparable mechanisms.

17. Retention period
    We store personal data only for as long as necessary for the purposes stated. Enquiries that do not lead to a contract are deleted after an appropriate period unless legal retention obligations apply. Contract and invoicing data is stored in line with statutory retention requirements and deleted thereafter.

18. Your rights
    Under the GDPR you have, in particular, the right of access, rectification, erasure, restriction of processing, data portability and the right to object to certain processing. To exercise your rights, please contact us using the details in section 1.

19. Withdrawal of consent
    Where processing is based on your consent, you may withdraw it at any time with effect for the future. This does not affect the lawfulness of processing carried out prior to withdrawal.

20. Right to lodge a complaint
    You have the right to lodge a complaint with a supervisory authority. In Austria, this is in particular the Austrian Data Protection Authority.

21. Data security
    We implement appropriate technical and organisational measures to protect personal data against loss, manipulation and unauthorised access. However, complete security of data transmitted over the internet cannot be guaranteed.

22. Changes to this Privacy Policy
    We may update this Privacy Policy if legal requirements, our website or our data processing activities change. The current version published on the website applies.