Controller for data processing

The controller responsible for the processing of your personal data on our website is:

General information on data processing

When you visit our website, personal data is processed only to the extent necessary for the technical operation of the website, for handling your enquiries, for providing the requested content and functions, or for fulfilling legal and contractual obligations.

We explain in the following sections which data is processed in detail, for what purposes this is done, and on which legal basis the processing is carried out.

Hosting & web server logs

Our website is operated by a professional hosting provider. When our website is accessed, certain data is automatically processed and stored by the web server in so-called server log files:

  • IP address of the requesting device
  • Date and time of access
  • Name and URL of the retrieved file
  • Browser type and version
  • Operating system

This data is processed exclusively to ensure the stable operation of the website and for error analysis, and is automatically deleted after 30 days. This data is not combined with other data sources.

The legal basis for this processing is Art. 6(1)(f) GDPR based on our legitimate interest in the secure operation of our website.

SSL/TLS encryption

Our website uses SSL or TLS encryption to ensure the security of data transmission. You can recognise an encrypted connection by the fact that "https://" and a padlock symbol are displayed in your browser's address bar.

Contact

If you contact us by email, telephone or by other means, we process the personal data that you provide to us in the course of your enquiry. This includes, in particular, your name, your contact details and the content of your message.

The processing is carried out for the purpose of handling your enquiry, further communication with you and, where applicable, for the implementation of pre-contractual measures.

The legal basis for the processing is Art. 6(1)(b) GDPR if your enquiry is aimed at the conclusion or performance of a contract, or Art. 6(1)(f) GDPR based on our legitimate interest in the efficient handling of enquiries.

The data will only be stored for as long as this is necessary to process your enquiry or as long as statutory retention obligations apply.

Cookies

We use cookies on our website. These are small text files that are stored in your device's browser. We distinguish between technically necessary cookies and optional cookies.

  • Technically necessary cookies are required for the operation of our website and cannot be deactivated via our cookie banner. The legal basis for their use is Art. 6(1)(f) GDPR.
  • Optional cookies, for example for analytics or marketing purposes, are only set on the basis of your consent in accordance with Art. 6(1)(a) GDPR.

To manage and document your consent, we use the Cookies Manager of the Bakehouse CMS as a consent management tool (cookie banner). The provider is Cookis GmbH, Franz-Xaver-RennstraĂźe 4, 6460 Imst, Austria. It records whether and to which types of data processing you have given your consent. The processing is carried out for the purpose of managing, documenting and storing the consents granted on the basis of Art. 6(1)(c) GDPR and Art. 6(1)(f) GDPR. The storage period depends on the respective session and the technically necessary settings of the cookie banner.

You can adjust your cookie settings and withdraw your consent at any time via the designated button or link. In addition, you can delete cookies in your browser at any time or prevent their storage.

Disable cookies

Web analytics with Matomo

For statistical evaluation of the use of our website, we use Matomo, a web analytics service. Matomo is operated on servers of Cookis GmbH, Franz-Xaver-Renn-StraĂźe 4, 6460 Imst, Austria.

Cookies are used as part of the analysis to enable an analysis of how our website is being used. Information about the use of our website is processed in order to improve our online offering technically and in terms of content. Your IP address is anonymised before being stored.

The processing is carried out exclusively on the basis of your consent in accordance with Art. 6(1)(a) GDPR via our cookie banner in the "Statistics" category.

No third-country transfer takes place, as the processing is carried out on servers in Austria.

You can withdraw your consent at any time with effect for the future via the settings of our cookie banner.

Further information on data protection at Matomo can be found at: matomo.org/privacy-policy

Recipients

For the technical provision and support of our website, we use Cookis GmbH as an external service provider. This concerns in particular hosting, maintenance, technical support and central functions in connection with the Bakehouse CMS.

A transfer of personal data to this service provider only takes place to the extent that this is necessary for the operation of the website, the handling of enquiries or the fulfilment of legal or contractual obligations.

If additional external services are used on our website, we provide information about this in the respective sections of this privacy policy.

Contact and enquiry forms

If you submit an enquiry to us via a contact or enquiry form on our website, we process the personal data you enter for the purpose of handling your enquiry and responding to any follow-up questions.

The specific data collected depends on the respective form. As a rule, this includes in particular your name, your email address, your telephone number, the content of your message and any other information you provide in the form.

Before submitting the form, confirmation of the relevant data protection notice by means of a checkbox is required. Without this confirmation, the enquiry cannot be submitted to us.

The legal basis for the processing is Art. 6(1)(b) GDPR if your enquiry is aimed at the conclusion or performance of a contract, or Art. 6(1)(f) GDPR based on our legitimate interest in the efficient handling and documentation of enquiries.

The personal data transmitted as part of the contact or enquiry form will be stored to the extent necessary for handling your enquiry, for further communication with you and for internal documentation purposes, provided that no statutory retention obligations prevent this.

Google Maps

We integrate map material from the Google Maps service on our website, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

The integration takes place via an iFrame or a comparable technical embed solution. If you access a page with an embedded map, personal data may be processed by Google, in particular your IP address and technical usage data.

Processing is carried out exclusively on the basis of your consent in accordance with Art. 6(1)(a) GDPR via our cookie banner. You can withdraw your consent at any time with effect for the future via the settings of our cookie banner.

The storage period depends on the systems used in each case and the configurations selected there.

In the context of the use of Google Maps, personal data may also be transferred to third countries, in particular to the USA. Further information on data processing by Google can be found at: policies.google.com/privacy

Storage period

As a general rule, we store personal data only for as long as this is necessary to fulfil the respective purposes or as long as statutory retention obligations apply.

If no separate storage period is specified in the individual sections of this Privacy Policy, personal data will be deleted as soon as the purpose of the processing no longer applies and there is no legal basis for further storage.

Where statutory retention periods, contractual obligations or legitimate interests – for example for the assertion, exercise or defence of legal claims – prevent deletion, the data will only be deleted after these periods have expired.

Your rights

Under the applicable legal provisions, you have the following rights:

  • Right of access to the personal data we process
  • Right to rectification of inaccurate or incomplete data
  • Right to erasure of your personal data
  • Right to restriction of processing
  • Right to data portability
  • Right to object to the processing of your personal data
  • Right to withdraw consent previously given with effect for the future

If you wish to exercise any of these rights, you may contact us at any time using the contact details provided in this Privacy Policy.

Right to lodge a complaint

If you believe that the processing of your personal data violates data protection law, you have the right to lodge a complaint with the competent supervisory authority. In Austria, this is:

  • Ă–sterreichische Datenschutzbehörde (Austrian Data Protection Authority)
  • Barichgasse 40–42, 1030 Vienna, Austria
  • dsb.gv.at

Version of this Privacy Policy

Version: August 2026

We reserve the right to amend this Privacy Policy where necessary, in particular in the event of technical changes to our website or changes in legal requirements.