Privacy policy
Data protection information
Information on the processing of your personal data in accordance with Art 13 GDPR
The protection of your privacy is important to us. We strictly adhere to the legal provisions of the EU General Data Protection Regulation (GDPR), the Data Protection Act and other applicable legislation on the protection, lawful handling and confidentiality of personal data.
In the following, we would like to inform you about the processing of your personal data. If you have any questions, please contact us using the contact details provided.
1. responsible person
1.1 Name and address of the controller
The controller within the meaning of the EU General Data Protection Regulation (GDPR) is
STORE ROOM Ltd.
Heinrich Bablik-Straße 17
A-2345 Brunn am Gebirge
Phone: 0800 300 880
E-mail: info@storeroom.at
Contact:
Nadine Böttger
Phone: 0800 300 880
E-mail: nadine.boettger@storeroom.at
2. purposes of processing and legal basis Website
2.1 Logging of activities on our website
When you visit our website, we collect and store access data in log files (so-called log files or access logs) in order to ensure the permanent functionality of the website. We process the following data in this context:
– IP address
– Date and time of access
– Browser
– Browser version
– Operating system
The legal basis for data processing is our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR. This lies in ensuring the functionality, security and accessibility of the website for all site visitors and, if necessary, in the establishment, defense and assertion of legal claims.
You have the right to object to this data processing (data subject’s right to object to data processing in the legitimate interest pursuant to Art. 21 (1) GDPR). In this case, we will only process your data if we have compelling legitimate grounds for further processing.
It is not possible to draw any direct conclusions about your identity from this information. The data will be deleted automatically once the aforementioned purposes have been achieved.
Data transfer: As a rule, we only pass on your data collected on the basis of the use of our website to the extent that this is absolutely necessary to fulfill the stated purposes (e.g. operation and maintenance of the website via external service providers). However, we may also be legally or officially obliged to pass on data to third parties (e.g. passing on data to law enforcement authorities).
Storage period: We store log file data for a period of 12 months from the end of your website visit.
Storage of personal data in the WordPress database
In addition to the log files, personal data is stored in the WordPress database when you use certain functions of our website, such as registering, leaving comments or filling out forms. This data may include the following information:
- User names
- E-mail addresses
- IP addresses
- Encrypted passwords
- Comments (including name and e-mail)
- Profile data and metadata on user activities
This personal data is processed in accordance with Art. 6 para. 1 lit. b GDPR for the fulfillment of contracts (e.g. for user registration) and in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in ensuring the functionality and security of the website and interaction with users. You have the right to access, correct or delete your personal data at any time.
2.2 Map display Google Maps
We use the “Google Maps” service on our website. Google Maps is an application of the company Google Ireland Limited (hereinafter “Google”) that makes it easier for you to locate our company and our locations.
We obtain your consent for data processing (legal basis Art. 6 para. 1 lit. a GDPR). This is voluntary and can be revoked at any time with effect for the future without giving reasons by deactivating it in the website cookie banner. You can access the cookie banner in the footer of the website under “Cookie settings”.
Data transfer: When using Google Maps services, data is automatically transmitted to Google Ireland Limited (Google). Google subsequently uses the data for its own purposes (advertising, market research, further development of the services, etc.). For information on data processing by Google, see https://policies.google.com/privacy?hl=de.
Please note that we cannot rule out the possibility of your personal data being transferred to the USA. The “Adequacy decision for the EU-US Data Privacy Framework” exists in this regard.
Storage duration: The personal data collected by the Google Maps service is not stored/not retained by us. For the duration of data storage by Google Ireland Limited, see https://policies.google.com/privacy?hl=de.
2.3 YouTube
We have embedded videos on our website from “YouTube”, which belongs to Google Inc. When you play videos, a direct connection is established between your browser and YouTube. We therefore have no influence on what data is collected by the plug-in and transmitted to YouTube, nor on the subsequent data processing by YouTube. Cookies can be set by Google via this integration if you have given your consent via the Google cookie banner. You can find more information on data processing in the context of YouTube at https://policies.google.com/privacy?hl=de&gl=de.
We obtain your consent for the transfer of data (legal basis Art. 6 para. 1 lit. a in conjunction with Art. 49 para. 1 lit. a GDPR). No data will be transmitted to Google before consent is given. The granting of consent is voluntary and can be revoked at any time with effect for the future. It is not possible to use Google services without granting the required consent.
Data transfer: We forward your data to Google.
Please note that we cannot rule out the possibility of your personal data being transferred to the USA. The “Adequacy decision for the EU-US Data Privacy Framework” exists in this regard.
Storage duration: The personal data collected by the Google service is not stored/not retained by us. For the duration of data storage by Google Ireland Limited, see https://policies.google.com/privacy?hl=de.
2.4 Vimeo
We use the services of Vimeo.com, Inc., which is based in the USA, for videos on our website. Cookies can be set by Vimeo via this integration if you have given your consent via the cookie banner. You can find more information on data processing in the context of Vimeo at https://vimeo.com/privacy.
We obtain your consent for the transfer of data (legal basis Art. 6 para. 1 lit. a in conjunction with Art. 49 para. 1 lit. a GDPR). No data will be transmitted to Vimeo before consent is granted. The granting of consent is voluntary and can be revoked at any time with effect for the future. It is not possible to use Vimeo services without granting the required consent.
Data transfer: We forward your data to Vimeo.
Please note that we cannot rule out the possibility of your personal data being transferred to the USA. The “Adequacy decision for the EU-US Data Privacy Framework” exists in this regard.
Storage period: The personal data collected by the Vimeo service is not stored/not retained by us. For the duration of data storage by Vimeo, see https://vimeo.com/privacy.
2.5. Contact form
We provide a contact form on our website for easy contact with us. To use this form, please provide us with the information requested so that we can process or respond to your request.
We process your personal data exclusively for the purpose of responding to your inquiry or contacting you. The data is used on the basis of the legal basis (provision and use of low-threshold electronic contact and communication options as well as the traceability of the communication process) and, if applicable, on the legal basis of contract fulfillment Art 6 para 1 lit b GDPR.
You have the right to object to data processing on the basis of legitimate interest (data subject’s right to object pursuant to Art. 21 (1) GDPR). In this case, we will only process your data if we have compelling legitimate grounds for further processing.
As an alternative to using the contact form, you can contact us via the e-mail address provided, by phone or by post.
Data transfer: We only pass on your data to third parties to the extent that this is necessary to process the communication. The data is passed on to HubSpot, Inc. based in the USA as part of our CRM system.
Please note that we cannot rule out the possibility of your personal data being transferred to the USA. The “Adequacy decision for the EU-US Data Privacy Framework” exists in this regard.
Storage period: Data transmitted to us via the electronic contact form will be stored for a period of 3 years from the end of the calendar year in which the communication took place.
2.6 Online appointment booking
You have the option of booking an appointment online. We process your data for the purpose of appointment management (e.g. booking, canceling, answering inquiries, rescheduling).
As a rule, the legal basis for data processing is Art. 6 para. 1 lit. b GDPR (contract, pre-contractual relationship).
The use of data is also based on the legal basis of legitimate interest Art. 6 para. 1 lit. f GDPR (our legitimate interest lies in the (provision and use of low-threshold electronic contact and communication options and in the traceability of the communication process).
You have the right to object to data processing on the basis of legitimate interest (data subject’s right to object pursuant to Art. 21 (1) GDPR). In this case, we will only process your data if we have compelling legitimate grounds for further processing.
Data transfer: When booking appointments online, we work together with Calendly, LLC, based in the USA.
Please note that we cannot rule out the possibility of your personal data being transferred to the USA. The “Adequacy decision for the EU-US Data Privacy Framework” exists in this regard.
Storage period: Appointment data is stored for a period of 6 months from the date of the appointment.
2.7 Processing of bookings
When making bookings via our storage space booking software at https://storeroom.kinnovis.com, you provide us with personal data. We use this data to process the orders (collection of bookings, processing, invoicing/billing, carrying out any necessary queries, etc.). In individual cases, we carry out clarifications of your creditworthiness via a specialized service provider.
Our legal basis for this data processing is Art. 6 para. 1 lit. b GDPR (pre-contract, contract, fulfillment of contract, fulfillment of post-contractual obligations), legal obligation Art. 6 para. 1 lit. c GDPR (fulfillment of legal storage obligations), and, if applicable, legitimate interest Art. 6 para. 1 lit. f GDPR (collection, assertion and defense of legal claims; in the case of credit checks in the event of protection of the property/assets of the person responsible).
Data transfers: We forward the collected personal data to third parties insofar as this is absolutely necessary for processing the order (e.g. data forwarding to communication service providers in the processing of order-related communication, if necessary data transmission to credit checkers in the event of a recognized need to clarify creditworthiness).
The order process is handled by Kinnovis GmbH, with whom we have concluded a corresponding order processing contract. Specifically, the following data is processed by Kinnovis: Name, e-mail address, telephone number, address, language. Information on the processing of personal data by Kinnovis GmbH can be found at https://kinnovis.com/privacy-policy/.
Storage period: Your data will generally only be stored for the period required to fulfill the purpose, and beyond that for as long as we are subject to legal obligations to store/retain data. In accordance with financial law requirements, we must retain records/documents relevant for tax or accounting purposes for a period of 7 years from the end of the calendar year to which they relate.
2.8 Payment processing
We offer you the payment options , SEPA direct debit and Google Pay. All these payment options are processed via our service provider Stripe. We forward your personal data to our service provider for the purpose of payment processing/administration.
If you pay by bank transfer, we will not pass on your data to third parties.
The legal basis for data processing is Art. 6 para. 1 lit. b GDPR – data processing is necessary for the fulfillment of the contract (processing of payment). The provision of personal data (e.g. payment information) is necessary for the booking of the storage space, without provision a booking is not possible. Please note that Stripe, as a payment service provider, independently carries out credit checks in certain constellations (including identity checks to prevent fraud) and also reserves the right to pass on data to third parties such as credit agencies. Information on the processing of your personal data by the payment service provider can be found at https://stripe.com/at/privacy
Data transfer: Your personal data will be transmitted to Stripe.
Storage period: We store your personal data in accordance with our legal obligations to store/retain data. In accordance with financial regulations, we must retain records/documents relevant for tax or accounting purposes for a period of 7 years from the end of the calendar year to which they relate.
2.9 Creating the account
On our website we link to Kinnovis, where a customer account is created for you so that you can manage your storage space. No data is processed on our website for this purpose.
Information on the processing of personal data by Kinnovis GmbH can be found at https://kinnovis.com/privacy-policy/.
2.10. Rent KIBOX moving boxes
On our website we link to KIBOX, a brand of STORE ROOM GmbH. You can rent sustainable moving boxes at kibox.at.
Information on the processing of personal data can be found at https://kibox.at/privacy-policy/.
2.11. Access control
We use Sensorberg to ensure secure access control for the storage facilities.
The STORE ROOM app enables users to book and manage storage rooms and obtain access authorizations.
On the one hand, we offer a white label solution from Sensorberg in the app store. It offers basic functions for managing bookings and access.
The OneAccess app from Sensorberg (no longer a white label) has been available since 2025 and offers additional functions (e.g. security functions) to control access to the storage areas via smartphone. The OneAccess app replaces the old STORE ROOM app for many users, as it represents a modernized and centralized solution.
For bookings via the KINNOVIS platform, your personal data, such as e-mail address, move-out date and move-in date, will be transmitted to Sensorberg. This information is necessary to control access to the storage rooms and to ensure that only authorized persons are granted access. Sensorberg processes the transmitted data exclusively to ensure access control and to provide the associated services. Further information on data processing by Sensorberg can be found at https://www.sensorberg.com/imprint.
2.12. Jobs/applications
You will find job offers on our website. We process personal data that you send us by e-mail to handle the application process, to assess the extent to which you are suitable for the position in question and, if necessary, to take the necessary measures in connection with the establishment of an employment relationship (transfer of employment relationship). The same applies to unsolicited applications.
As a rule, the legal basis for data processing is Art. 6 para. 1 lit. b GDPR (contract, pre-contractual relationship). In individual cases, we also process data on the basis of legitimate interests Art. 6 para. 1 lit. f GDPR (e.g. establishment, exercise and defense of legal claims).
We only process special categories of personal data (such as health data, religious affiliation, degree of disability) if the applicant has consented to this or if a legal permission justifies the data processing (Art 9 para 2 lit a GDPR or Art 9 para 2 lit b GDPR).
Data transfer: We use job portals such as karriere.at and other common platforms in Austria to advertise job vacancies. Your data will be processed exclusively in accordance with the respective data protection guidelines of the portals used.
Storage period: Data transmitted to us will be stored for a period of 7 months after the end of the application process (i.e. decision as to which person is hired).
2.13. Google Invisible Recaptcha
We use the “Google Invisible reCAPTCHA” service on our website, a security tool from Google Ireland Limited (“Google”), to detect automated access (bots) and protect our website from misuse and spam. When using reCAPTCHA, personal data such as your IP address, mouse movements, keyboard interactions and any other information collected by Google are analyzed and transmitted to Google.
The processing is carried out on the basis of our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR, as it serves to secure our website. It cannot be ruled out that Google will transfer data to the USA. The “Adequacy Decision for the EU-US Data Privacy Framework” exists. Further information on data processing by Google can be found at: https://policies.google.com/privacy?hl=de.
2.14. Google reviews
Our website integrates reviews from “Google Reviews”, a service of Google Ireland Limited (“Google”), via a widget. The integration may result in the transmission of personal data such as IP address, browser information and possibly other device-related information to Google.
The processing is based on our legitimate interest in accordance with Art. 6 para. 1 lit. f GDPR in order to provide our users with authentic experience reports. Google may process the collected data for its own purposes. The “Adequacy Decision for the EU-US Data Privacy Framework” exists. Further information on data processing by Google can be found at: https://policies.google.com/privacy?hl=de.
2.15. Perspective Funnels
We use “Perspective Funnels”, a tool from Perspective Software GmbH to create interactive marketing funnels. When using this service, personal data such as IP address, device data and entered form data may be collected and transmitted to Perspective.
The processing is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR. No data will be transmitted to Perspective without your consent. You can revoke your consent at any time with effect for the future. Further information on data processing by Perspective can be found at: https://perspective.co/datenschutzerklaerung.
2.16. Mandrill (Mailchimp)
To send transactional emails, we use “Mandrill”, a service provided by Intuit Inc. (formerly Mailchimp), based in the USA. Personal data, such as your email address, IP address and dispatch and delivery statistics, are processed.
The processing is based on our legitimate interest in accordance with Art. 6 para. 1 lit. f GDPR to provide automated e-mail communication. Mandrill may process the data collected for its own purposes. The “Adequacy Decision for the EU-US Data Privacy Framework” exists.
Mandrill is a Mailchimp service offered by The Rocket Science Group LLC. The privacy policy for Mandrill can be found at the following address: https://mailchimp.com/legal/privacy/ Please note that Mailchimp has been part of the Intuit Group since January 10, 2022 and therefore Intuit’s privacy policy applies. This can be found here: https://www.intuit.com/privacy/statement/ These documents explain the privacy practices for all Mailchimp services, including Mandrill.
3. appearances in social media
We operate publicly accessible presences in social networks/social media for the purposes of public relations, the presentation of our offers and services, and the provision of electronic contact channels.
These channels are linked from our website.
Together with the operators of the social networks, we may be jointly responsible under data protection law for parts of the data processing resulting from your visit to our website. If this is the case, we have concluded a joint controllership agreement (Art. 26 GDPR) with the operator. In principle, you can assert your rights (for more details, see the section on data subjects’ rights in this data protection information) both against us and against the respective operator of the social network.
Please note that although we may share responsibility with the operators of the social networks, we only have limited influence on the data processing operations. Our options are largely determined by the corporate policy of the respective operator. We use all available options with regard to limiting the scope of data processing (e.g. limiting the personal data collected, limiting the storage period, etc.) and make appropriate settings.
Our legal basis for the use of data is legitimate interest (Art. 6 para. 1 lit. f GDPR). This lies in public relations work, building and promoting trust in our company and enabling us to reach certain target groups. You have the right to object to this data processing (data subject’s right to object to data processing in the legitimate interest pursuant to Art. 21 para. 1 GDPR). In this case, we will only process your data if we have compelling legitimate grounds for further processing.
The operators of social networks use personal data for their own purposes, which include analyzing your usage behavior using analysis and tracking functions and personalized advertising based on your interests. You can find more information on this in the operators’ data protection information.
Storage period: Data is stored for a period of 3 years from the end of the calendar year in which the communication took place.
3.1 Facebook
We operate a fan page on the “Facebook” platform of Meta Platforms Ireland Limited (Meta) and are – for parts of the data processing (Facebook Insights) – jointly responsible with Meta under data protection law. We have concluded a joint controllership agreement with Meta (Art. 26 GDPR). This agreement specifies which of the parties is responsible for which data processing operations. Meta uses the personal data and information collected for its own purposes and may also forward it to third parties (USA and other third countries).
For information on Meta’s data processing, please refer to the company’s privacy policy: https://www.facebook.com/about/privacy/.
You can adjust your advertising settings yourself in your Facebook user account. To do this, click on the following link and log in: https://www.facebook.com/settings?tab=ads.
Data transfers: We forward your data to Meta Platforms Ireland Limited.
Please note that we cannot rule out the possibility of your personal data being transferred to the USA. The “Adequacy decision for the EU-US Data Privacy Framework” exists in this regard.
3.2 Instagram
We operate a presence on the “Instagram” platform of Meta Platforms Ireland Limited (Meta) and are – for parts of the data processing (Instagram Insights) – jointly responsible with Meta under data protection law. We have concluded a joint controllership agreement with Meta (Art. 26 GDPR). This agreement specifies which of the parties is responsible for which data processing operations. Meta uses the personal data and information collected for its own purposes and may also forward it to third parties (USA and other third countries).
For information on Meta’s data processing, please refer to the company’s privacy policy: https://www.facebook.com/privacy/policy/?entry_point=facebook_help_center_ig_data_policy_redirect
You can adjust your advertising settings yourself in your Instagram user account. You can find information on this at https://help.instagram.com/131112217071354.
Data transfers: We forward your data to Meta Platforms Ireland Limited.
Please note that we cannot rule out the possibility of your personal data being transferred to the USA. The “Adequacy decision for the EU-US Data Privacy Framework” exists in this regard.
3.3 LinkedIn
We operate a presence on the LinkedIn platform of LinkedIn Inc./Microsoft and are – for parts of the data processing – jointly responsible with LinkedIn Inc./Microsoft under data protection law. We have concluded a joint controllership agreement with LinkedIn Inc./Microsoft (Art. 26 GDPR). This agreement specifies which of the parties is responsible for which data processing operations. LinkedIn Inc./Microsoft uses the personal data and information collected for its own purposes and may also forward it to third parties (USA and other third countries).
For information on data processing by LinkedIn Inc./Microsoft, please refer to the company’s privacy policy: https://de.linkedin.com/legal/privacy-policy
Data transfer: We forward your data to LinkedIn Inc./Microsoft.
Please note that we cannot rule out the possibility of your personal data being transferred to the USA. The “Adequacy decision for the EU-US Data Privacy Framework” exists in this regard.
3.4 Pinterest
We operate a presence on the “Pinterest” platform of Pinterest, Inc. and are – for parts of the data processing – jointly responsible with Pinterest under data protection law. We have concluded a joint controllership agreement with Pinterest (Art. 26 GDPR). This agreement specifies which of the parties is responsible for which data processing operations. Pinterest uses the personal data and information collected for its own purposes and may also forward it to third parties (USA and other third countries).
For information on Pinterest’s data processing, please refer to the company’s privacy policy: https://policy.pinterest.com/de/privacy-policy
Data transfer: We forward your data to Pinterest, Inc.
Please note that we cannot rule out the possibility of your personal data being transferred to the USA. The “Adequacy decision for the EU-US Data Privacy Framework” exists in this regard.
4. data transfer and recipients in general
We only pass on personal data to the extent that this is absolutely necessary to fulfill the stated purposes. For all data transfers, we ensure that we only transfer the information that is absolutely necessary and comply with the data protection regulations for data transfer (e.g. strict obligation to follow instructions for processors via Art. 28 contracts, obligation to secrecy and confidentiality, obligation to fully comply with an adequate level of protection in the processing of personal data).
Our website is hosted by Hetzner Online GmbH, a renowned provider of web hosting services. When using Hetzner, personal data that is generated when accessing our website is processed. Hetzner stores this data on servers located in the EU and thus guarantees a high level of data protection in accordance with the General Data Protection Regulation (GDPR). We have concluded an order processing contract with Hetzner to ensure that your data is processed in accordance with the statutory provisions. You can view Hetzner GmbH’s privacy policy here: https://www.hetzner.com/de/privacy-policy-notice/
We process your data, which is received in particular via the contact form or by booking an appointment, in the CRM tool HubSpot. Please note that we cannot rule out the possibility of your personal data being transferred to the USA. The “Adequacy decision for the EU-US Data Privacy Framework” exists in this regard.
We may also be legally or officially obliged to pass on data to third parties (e.g. passing on data to law enforcement authorities and courts).
Details on data transfers and recipients can be found in the explanations on the processing purposes.
You have the right to object to this data processing (data subject’s right to object to data processing in the legitimate interest pursuant to Art. 21 (1) GDPR). In this case, we will only process your data if we have compelling legitimate grounds for further processing.
5. storage period of the data in general
Your data will only be stored for as long as is technically and organizationally necessary to achieve the stated purposes and to comply with our legal obligations. If necessary, we may also retain your personal data for certain periods of time on the legal basis of legitimate interest (e.g. collection, assertion and defense of legal claims). When determining the periods, we take care not to infringe your rights and freedoms. If data retention is no longer required, we will delete your data immediately. Detailed information on the specified storage period can be found under the respective processing purpose.
6. profiling and automated decision-making
We do not carry out profiling measures (evaluation of certain personal aspects relating to a natural person, in particular to analyze or predict aspects relating to work performance, economic situation, health, personal preferences, interests, reliability, behavior, location or change of location), nor do we make decisions based on this information.
7. cookies
Cookies are used on our websites. Cookies are small files that are stored either for the duration of your browser session in the cache of your Internet browser (session cookies) or for a specified period on your hard disk (permanent cookies). Cookies allow us to recognize you so that we can provide you with content tailored to your needs and wishes more quickly and in a more targeted manner on future visits to our website.
For the use of cookies, we generally obtain your express consent via a cookie banner (legal basis Art. 6 para. 1 lit. a GDPR). You can select your cookie preferences via the cookie banner. Cookies that are necessary to ensure the functionality of our websites are not included in the selection option. We use these on the legal basis of legitimate interest Art. 6 para. 1 lit. f GDPR.
You can find all information on the cookies set in our cookie policy.
8. tracking and analysis
8.1 Google Analytics
This website uses Google Analytics, a web analytics service provided by Google LLC. As a company based in the European Union, we cooperate with the Google subsidiary Google Ireland Limited (hereinafter “Google”).
The information generated by the cookie about the use of the website will be transmitted to and stored by Google on servers.
Google uses this information on our behalf to evaluate your use of our website, to compile reports on website activity and to provide other services related to website activity and internet usage to the website operator. Usage profiles of visitors to our website can be created from the transmitted data.
Please note that we cannot rule out the possibility of your personal data being transferred to the USA. The “Adequacy decision for the EU-US Data Privacy Framework” exists in this regard.
The evaluation of your user behavior on the website is based on your consent Art. 6 para. 1 lit. a GDPR. You can find more information on the terms of use and data protection of Google Analytics at
http://www.google.com/analytics/terms/de.html or https://policies.google.com/privacy?hl=de.
You can revoke your voluntary consent at any time with effect for the future. To do this, you can open the settings in the footer of the website.
8.2 Google TagManager
We use the “Google Tag Manager” service (a service of the company Google LLC – as a company based in the EU, we cooperate with the Google subsidiary Google Ireland Limited (hereinafter “Google”)) as the central means of data collection, recording and forwarding of the personal data linked to the website visit.
The Google Tag Manager service bundles the applications we use into a central administration interface, which makes it easier for us to administer the website applications. The use of Google Tag Manager requires the setting of a Google cookie and the forwarding of data to Google (the information generated by the cookie about the use of the website is transmitted to Google’s servers and stored there).
Please note that we cannot rule out the possibility of your personal data being transferred to the USA. The “Adequacy decision for the EU-US Data Privacy Framework” exists in this regard.
Our legal basis for the use of Google Tag Manager is your voluntary data protection consent given via the selection in the cookie banner in accordance with Art. 6 para. 1 lit. a GDPR.
Information on how Google handles user data can be found in Google’s privacy policy: https://policies.google.com/privacy?hl=de.
You can revoke your voluntary consent at any time with effect for the future. To do this, you can open the settings in the footer of the website.
8.3 Meta-Tracking
The Facebook pixel of the Meta company is integrated via the Google Tag Manager (see above). This is used to analyze user behavior on the website and to place personalized advertising. Consent mode is used to personalize tracking so that users can receive targeted advertising based on their consent (remarketing). Meta uses the pixel to collect personal data such as IP addresses, click behavior and pages visited in order to create user profiles. These profiles are based on interests, demographic information and other characteristics and are used for targeted advertising.
Our legal basis for the use of cookies is your voluntary data protection consent given via the selection in the cookie banner in accordance with Art. 6 para. 1 lit. a GDPR.
Please note that we cannot rule out the possibility of your personal data being transferred to the USA. The “Adequacy decision for the EU-US Data Privacy Framework” exists in this regard.
For information on Meta’s data processing, please refer to the company’s privacy policy: https://www.facebook.com/about/privacy/.
You can revoke your voluntary consent at any time with effect for the future. To do this, you can open the settings in the footer of the website.
8.4 Google Ads
Google Ads tracking is also carried out via the Google Tag Manager (see above) and is used to measure the effectiveness of our advertising measures. The data collected is anonymized and allows us to place targeted advertising.
Our legal basis for the use of cookies is your voluntary data protection consent given via the selection in the cookie banner in accordance with Art. 6 para. 1 lit. a GDPR.
Please note that we cannot rule out the possibility of your personal data being transferred to the USA. The “Adequacy decision for the EU-US Data Privacy Framework” exists in this regard.
For information on data processing by Google, please refer to the company’s privacy policy: https://policies.google.com/privacy?hl=de.
You can revoke your voluntary consent at any time with effect for the future. To do this, you can open the settings in the footer of the website.
8.5 Google Ads Doubleclick
Googleads Doubleclick is used in connection with advertisements/advertising offers from Google Ireland Limited (hereinafter “Google”). It is only used after consent has been given (Art. 6 para. 1 lit. a GDPR). Google uses this data/information for its own purposes.
Please note that we cannot rule out the possibility of your personal data being transferred to the USA. The “Adequacy decision for the EU-US Data Privacy Framework” exists in this regard.
Our legal basis for the use of Google Tag Manager is your voluntary data protection consent given via the selection in the cookie banner in accordance with Art. 6 para. 1 lit. a GDPR.
Information on the handling of user data by Google can be found in Google’s privacy policy: https://policies.google.com/privacy?hl=de.
You can revoke your voluntary consent at any time with effect for the future. To do this, you can open the settings in the footer of the website.
8.6 LinkedIn Ads
LinkedIn Ads from Microsoft are used to measure the effectiveness of our advertising measures. The data collected is anonymized and allows us to place targeted advertising.
Our legal basis for the use of cookies is your voluntary data protection consent given via the selection in the cookie banner in accordance with Art. 6 para. 1 lit. a GDPR.
Please note that we cannot rule out the possibility of your personal data being transferred to the USA. The “Adequacy decision for the EU-US Data Privacy Framework” exists in this regard.
For information on data processing by Microsoft, please refer to the company’s privacy policy: https://de.linkedin.com/legal/privacy-policy.
You can revoke your voluntary consent at any time with effect for the future. To do this, you can open the settings in the footer of the website.
8.7 Pinterest Ads
Pinterest Ads are used to measure the effectiveness of our advertising measures. The data collected is anonymized and allows us to place targeted advertising.
Our legal basis for the use of cookies is your voluntary data protection consent given via the selection in the cookie banner in accordance with Art. 6 para. 1 lit. a GDPR.
Please note that we cannot rule out the possibility of your personal data being transferred to the USA. The “Adequacy decision for the EU-US Data Privacy Framework” exists in this regard.
For information on Pinterest’s data processing, please refer to the company’s privacy policy: https://policy.pinterest.com/de/privacy-policy.
You can revoke your voluntary consent at any time with effect for the future. To do this, you can open the settings in the footer of the website.
8.8 Microsoft Clarity Tracking
Microsoft Clarity is used to analyze user behavior on our website. The data collected is anonymized and is used to optimize our services.
Our legal basis for the use of cookies is your voluntary data protection consent given via the selection in the cookie banner in accordance with Art. 6 para. 1 lit. a GDPR.
Please note that we cannot rule out the possibility of your personal data being transferred to the USA. The “Adequacy decision for the EU-US Data Privacy Framework” exists in this regard.
For information on data processing by Microsoft, please refer to the company’s privacy policy: https://www.microsoft.com/de-de/privacy/privacystatement.
You can revoke your voluntary consent at any time with effect for the future. To do this, you can open the settings in the footer of the website.
8.9 Google Web Fonts
To display fonts on the website, we use so-called “web fonts”, which are provided by Google LLC. As a company based in the European Union, we cooperate with the Google subsidiary Google Ireland Limited (hereinafter “Google”). The display of Google Fonts requires the setting of a Google cookie, the execution of certain data processing by Google and the forwarding of user data (e.g. data on usage behavior) to Google.
Our legal basis for the use of cookies is your voluntary data protection consent given via the selection in the cookie banner in accordance with Art. 6 para. 1 lit. a GDPR.
Please note that we cannot rule out the possibility of your personal data being transferred to the USA. The “Adequacy decision for the EU-US Data Privacy Framework” exists in this regard.
For information on data processing by Google, please refer to the company’s privacy policy: https://policies.google.com/privacy?hl=de.
You can revoke your voluntary consent at any time with effect for the future. To do this, you can open the settings in the footer of the website.
9. rights of data subjects/your rights to protect your personal data
You have a number of rights in relation to your personal data processed by us. You can assert all these rights free of charge and informally (by e-mail, telephone or post), if necessary after providing proof of your identity, at the address given below. Your rights in detail:
Right to information: You can request information about the data we process informally at any time. In this case, we will inform you in writing of the data we have stored about you, the purposes for which we use it, the categories of recipients to whom we pass it on and how long we intend to store it. We will comply with your request for information without delay, but within one month at the latest.
Right to erasure: You have the right to informally request the erasure of your data processed by us at any time. We will comply with this request if your data is no longer required for the purpose for which it was collected, if you revoke any existing consent, in the event of unlawful data processing or if deletion is necessary to fulfill a legal obligation.
Right to rectification: If we process incorrect or incomplete data about you by mistake, we will of course rectify it. All you need to do is send us an informal message.
Right to restriction of processing: If it is not possible to delete your data or if you do not wish your data to be deleted, but you do not consent to its use beyond the storage of the data, we are obliged to restrict the further processing of your personal data upon your notification.
Right to data portability: We will provide you with the data we have stored about you, which we have received on the basis of a contract or your consent, free of charge in a common file format upon your informal notification. You can use this data for your own purposes and pass it on to future contractual partners. If you wish and if it is technically feasible, we will also transfer your data directly to an addressee named by you. In this case, we will inform you after the transfer has taken place. We will comply with your request without delay, but within one month at the latest.
Right to revoke consents granted: You can withdraw your consent to data processing at any time with effect for the future. In this case, we will cease data processing. The legality of the data processing carried out up to this point is not affected by the withdrawal of consent.
Right to object: If we process your data on the basis of our legitimate interest, you have the right under the General Data Protection Regulation to object to the further processing of your data. If you exercise this right, we will no longer process your data for the purpose to which you have objected – unless there are legitimate grounds on our part for further processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
10. right of appeal
The EU General Data Protection Regulation and the Data Protection Act guarantee you the above-mentioned rights. If you believe that one of these rights has been violated by us, you have the option of lodging a complaint with a data protection supervisory authority.
The data protection authority responsible for us is the
Austrian Data Protection Authority
Barichgasse 40-42
1030 Vienna
Tel: 01/52152-0
E-mail: dsb@dsb.gv.at
Status of the data protection information: 2/2025