Privacy Policy

1. Data Protection at a Glance

General Information

The following information provides an overview of what happens to your personal data when you visit our website. Personal data means any data by which you can be personally identified. Detailed information on data protection can be found in the Privacy Policy set out below.

Data Collection on Our Website

Who is responsible for data collection on this website?

How do we collect your data?

Some data is collected when you provide it to us, for example data entered into a contact form. Other data is collected automatically by our IT systems when you visit the website. This mainly comprises technical data such as browser, operating system and time of page access. Such data is collected automatically as soon as you enter our website.

What do we use your data for?

Some data is collected to ensure that the website is provided without errors. Other data may be used to analyse user behaviour.

What rights do you have regarding your data?

You have the right at any time to receive information free of charge about the origin, recipients and purpose of your stored personal data. You also have the right to request correction, restriction or deletion of this data. You may contact us at the address stated in the Legal Notice. You also have the right to lodge a complaint with the competent supervisory authority and, under certain circumstances, to request restriction of the processing of your personal data.

Analytics and Third-Party Tools

When you visit our website, your browsing behaviour may be statistically evaluated, primarily using cookies and analytics programs. Such analysis is generally anonymous. You may object to this analysis or prevent it by not using certain tools. Details and available opt-out options are set out below.

2. General Information and Mandatory Information

Data Protection

The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data-protection regulations and this Privacy Policy. When you use this website, various personal data is collected. This Privacy Policy explains what data we collect, what we use it for, and how and for what purpose this occurs. Please note that data transmission via the internet, for example by email, may be subject to security vulnerabilities. Complete protection of data against access by third parties is not possible.

Controller

The controller responsible for data processing on this website is:
Dipl.-Ing. Alexander Katzkow & Partner GmbH
Haidingergasse 2
1030 Vienna, Austria
Tel. +43-1-718 11 30
[email protected]

The controller processes your data jointly with companies of the DELTA Group. Affiliated companies can be viewed at www.delta.at/servicekontakt/kontakt/.

Withdrawal of Your Consent to Data Processing

Many data-processing operations are possible only with your express consent. You may withdraw consent already given at any time by sending us an informal email. The lawfulness of processing carried out before the withdrawal remains unaffected.

Right to Object in Specific Cases and to Direct Marketing (Art. 21 GDPR)

Where data is processed on the basis of Art. 6(1)(e) or (f) GDPR, you have the right, on grounds relating to your particular situation, to object at any time to the processing of your personal data, including profiling based on those provisions. If you object, we will no longer process the personal data concerned unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims. Where personal data is processed for direct marketing, you have the right to object at any time to such processing, including related profiling. Following an objection, your personal data will no longer be used for direct-marketing purposes.

Right to Lodge a Complaint

In the event of infringements of data-protection law, data subjects have the right to lodge a complaint with the Austrian Data Protection Authority, Barichgasse 40–42, 1030 Vienna, Austria, or the competent supervisory authority.

Right to Data Portability

You have the right to receive data that we process automatically on the basis of your consent or in performance of a contract in a commonly used, machine-readable format, or to have it transmitted to a third party. Direct transfer to another controller will be made only where technically feasible.

SSL/TLS Encryption

For security reasons and to protect the transmission of confidential content, such as enquiries sent to us, this website uses SSL or TLS encryption. You can recognise an encrypted connection by the change from “http://” to “https://” in the browser address bar and by the lock symbol. When SSL/TLS encryption is activated, data you transmit to us cannot be read by third parties.

Access, Rectification, Restriction and Erasure

Within the scope of applicable law, you have the right at any time to obtain information free of charge about your stored personal data, its origin and recipients and the purpose of processing, and, where applicable, a right to rectification, restriction or erasure. You may contact us at the address stated in the Legal Notice.

Right to Restriction of Processing

You have the right to request restriction of the processing of your personal data, in particular where you contest its accuracy while we verify it; where processing is unlawful and you request restriction instead of erasure; where we no longer need the data but you require it for legal claims; or where you have objected under Art. 21(1) GDPR while the balancing of interests is pending. Where processing has been restricted, such data may, apart from storage, be processed only with your consent, for legal claims, to protect the rights of another person, or for important public-interest reasons of the European Union or a Member State.

Objection to Promotional Emails

We object to the use of contact data published as part of legal notice obligations for sending unsolicited advertising and information materials. The website operators expressly reserve the right to take legal action in the event of unsolicited promotional information, such as spam emails.

3. Data Collection on Our Website

Cookies

Our website uses cookies. Cookies do not harm your device and do not contain viruses. They help make our website more user-friendly, effective and secure. Cookies are small text files stored on your device by your browser. Most cookies used are session cookies and are automatically deleted after your visit. Other cookies remain stored until you delete them and enable us to recognise your browser on your next visit. You can configure your browser to notify you about cookies, permit them only in individual cases, exclude them in certain cases or generally, and activate automatic deletion when closing the browser. Disabling cookies may limit website functionality.

Cookies required for electronic communications or for functions requested by you are stored on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in storing cookies to provide technically error-free and optimised services. Other cookies, for example analytics cookies, are addressed separately in this Privacy Policy.

Server Log Files

The website provider automatically collects and stores information in server log files transmitted by your browser. This includes browser type and version, operating system, referrer URL, hostname of the accessing device, time of the server request and IP address. This data is not combined with other data sources. Collection is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in technically error-free presentation and optimisation of the website.

Contact Form

If you send us enquiries via the contact form, the information you provide, including your contact details, will be stored for the purpose of processing the enquiry and any follow-up questions. We do not pass on this data without your consent. Processing in connection with your contact is based on pre-contractual measures pursuant to Art. 6(1)(b) GDPR. Data entered in the contact form is retained for the duration of the initiation of the business relationship. Thereafter, only data required under applicable statutory retention obligations is retained, for a maximum of seven years after completion of the contract or termination of the business relationship.

Enquiries by Email, Telephone or Fax

If you contact us by email, telephone or fax, your enquiry including all resulting personal data will be stored and processed for the purpose of handling your request. We do not pass on this data without your consent. Processing is based on Art. 6(1)(b) GDPR where your enquiry relates to a contract or pre-contractual measures; otherwise it is based on your consent under Art. 6(1)(a) GDPR and/or our legitimate interests under Art. 6(1)(f) GDPR in effectively handling enquiries. Data remains with us until you request deletion, withdraw consent, or the purpose for storage ceases to apply, subject to mandatory statutory retention periods.

Comment Function

If a comment function is provided, we store the comment, the time it was created and, if you do not post anonymously, the username you choose. Comments and associated data, such as IP addresses, remain stored until the commented content is completely deleted or the comments must be deleted for legal reasons. Storage is based on your consent pursuant to Art. 6(1)(a) GDPR, which you may withdraw at any time with future effect.

Processing of Customer and Contract Data

We collect, process and use personal data only insofar as necessary to establish, structure or amend the legal relationship. This is based on Art. 6(1)(b) GDPR. Usage data is processed only insofar as necessary to enable use of the service or for billing. Customer data is deleted after completion of the order or termination of the business relationship, subject to statutory retention periods.

Data Transfer When Concluding Contracts for Online Shops, Retailers and Shipping

Personal data is transferred to third parties only where necessary for contract performance, for example to companies entrusted with delivery or a payment-processing institution. No further transfer takes place unless you have expressly consented. Data is not disclosed to third parties for advertising without express consent. Processing is based on Art. 6(1)(b) GDPR.

Data Transfer When Concluding Contracts for Services and Digital Content

Personal data is transferred to third parties only where necessary for contract performance, for example to a payment-processing institution. No further transfer takes place unless you have expressly consented. Data is not disclosed to third parties for advertising without express consent. Processing is based on Art. 6(1)(b) GDPR.

4. Social Media

Social Media Plugins with Shariff

Our website may use social-media plugins, for example Facebook, Instagram, LinkedIn and other platforms. To protect privacy, such plugins are used together with the “Shariff” solution, which prevents integrated plugins from transmitting data to the respective provider when a page is first opened. Only when you activate a plugin by clicking the relevant button is a direct connection established with the provider’s server. The provider then receives information including your IP address and may associate the visit with your account if you are logged in. Activating the plugin constitutes consent within the meaning of Art. 6(1)(a) GDPR. You may withdraw this consent at any time with future effect.

5. Analytics Tools and Advertising

Google Analytics

This website may use functions of the Google Analytics web analytics service. Google Analytics uses cookies that enable analysis of website use. Information generated by the cookie about your use of this website may be transmitted to and stored on Google servers, including servers outside the European Union. The use of analytics cookies and tools is subject to the applicable consent and data-protection requirements. Where processing is based on legitimate interests, the website operator’s interest lies in analysing user behaviour to optimise its website and communications.

IP Anonymisation

Where IP anonymisation is activated, your IP address is shortened within the European Union or European Economic Area before transmission. Only in exceptional cases is the full IP address transmitted and shortened on the receiving server. Google uses the information on behalf of the website operator to evaluate website use and compile reports. The IP address transmitted by your browser is not combined with other Google data within Google Analytics where the relevant configuration applies.

Browser Settings and Opt-Out

You can prevent cookies from being stored by configuring your browser. Depending on the analytics setup, additional opt-out options or browser add-ons may be available. Disabling cookies may mean that not all website functions can be used in full. Further information is available in Google’s privacy information.

Google Advertising Services / Remarketing / Conversion Tracking

Where Google advertising, remarketing or conversion-tracking services are used, cookies and similar technologies may be used to measure campaign performance, create statistics or display interest-based advertising. Depending on the configuration and your consent settings, information may be linked across devices or with a Google account. You can manage personalised advertising in your Google account and browser settings. Further information is available in Google’s privacy and advertising policies.

Meta / Facebook Pixel

Where the Meta/Facebook Pixel is used, visitor actions may be measured after users click on a Facebook or Meta advertisement. This allows the effectiveness of advertisements to be evaluated for statistical and market-research purposes and future advertising to be optimised. Data collected is processed by Meta in accordance with its own privacy terms and may be associated with user profiles. Available privacy and advertising settings can be managed through Meta’s services.

6. Newsletter

Newsletter Data

If a newsletter is offered and you subscribe, we require an email address and information enabling us to verify that you are the owner of the email address and consent to receiving the newsletter. Additional data is collected only on a voluntary basis. The data is used exclusively to send the requested information and is not passed on to third parties without a legal basis. Processing is based on your consent pursuant to Art. 6(1)(a) GDPR. You may withdraw your consent at any time, for example via the unsubscribe link in the newsletter. Data stored for newsletter purposes is retained until you unsubscribe and is then deleted, unless it is stored for other lawful purposes.

7. Plugins and Tools

YouTube with Enhanced Privacy

Our website may use YouTube plugins. Where enhanced privacy mode is used, YouTube states that information about visitors is not stored before they watch a video; however, data may still be transmitted to YouTube partners. When you start a YouTube video, a connection to YouTube servers is established and information about the pages you visited may be transmitted. If you are logged into your YouTube account, YouTube may associate your browsing behaviour with your profile. You can prevent this by logging out. Starting a video may also cause cookies or similar technologies to be stored on your device. Further processing may be triggered over which we have no control. Further information is available in Google/YouTube’s Privacy Policy.

Vimeo

Our website may use plugins from the Vimeo video portal. When you visit a page containing a Vimeo plugin, a connection to Vimeo servers may be established. Vimeo may receive information about the pages visited and your IP address, including if you are not logged in. If you are logged into Vimeo, browsing behaviour may be associated with your profile. You can prevent this by logging out. Further information is available in Vimeo’s Privacy Policy.

Google Web Fonts

This website may use web fonts provided by Google to ensure consistent display of fonts. When a page is loaded, your browser may connect to Google servers to load the required fonts. Google may thereby receive information that the website was accessed via your IP address. If web fonts are not supported, a standard font installed on your device will be used. Further information is available in Google’s privacy information.

Google Maps

This website may use Google Maps via an API. To use Google Maps functions, it may be necessary to process your IP address and transmit information to Google servers. The website operator has no control over this data transmission. Further information is available in Google’s Privacy Policy.

Google reCAPTCHA

Where Google reCAPTCHA is used, its purpose is to determine whether data entered on our websites, for example in a contact form, is entered by a human or an automated program. reCAPTCHA analyses various characteristics of website visitors, such as IP address, time spent on the website and mouse movements, and transmits data to Google. Processing takes place in the background. The website operator has a legitimate interest in protecting online services against abusive automated access and spam, subject to applicable consent requirements. Further information is available in Google’s Privacy Policy and reCAPTCHA information.

Cloudflare Turnstile

Cloudflare Turnstile is used for automated detection and prevention of bot activity and provides a CAPTCHA-like service designed to minimise interruptions for genuine users. Data may be collected and analysed to distinguish human from automated access. Service provider: Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. Legal basis: legitimate interests pursuant to Art. 6(1)(f) GDPR, subject to applicable consent requirements. Third-country transfers may be based on the EU-U.S. Data Privacy Framework and/or Standard Contractual Clauses. Further information is available in Cloudflare’s Privacy Policy and data-processing documentation.