Privacy Policy
1. Privacy at a Glance
General Information
The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can personally identify you. Detailed information on the subject of data protection can be found in our privacy policy listed below this text.
Data Collection on This Website
Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. You can find their contact details in the section "Information about the responsible party" in this privacy policy.
How do we collect your data?
Your data is collected on the one hand by you providing it to us. This may be data that you enter in a contact form, for example.
Other data is collected automatically or with your consent when you visit the website through our IT systems. This is primarily technical data (e.g., internet browser, operating system, or time of page access). This data is collected automatically as soon as you enter this website.
What do we use your data for?
Some of the data is collected to ensure error-free provision of the website. Other data may be used to analyze your user behavior.
What rights do you have regarding your data?
You have the right at any time to receive information free of charge about the origin, recipient, and purpose of your stored personal data. You also have the right to request the correction or deletion of this data. If you have given consent for data processing, you can revoke this consent at any time for the future. You also have the right to request the restriction of the processing of your personal data under certain circumstances. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.
You can contact us at any time regarding this and other questions about data protection.
2. Responsible Party
The responsible party for data processing on this website is:
ste-ki
Stefan Kittenberger
Prof. Leop. Hauerg. 1
3552 Lengenfeld
Austria
Phone: +43 (0) 664 56 25 099
Email: [email protected]
The responsible party is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data (e.g., names, email addresses, etc.).
Supervisory Authority
The competent supervisory authority for data protection issues is:
Austrian Data Protection Authority
Barichgasse 40-42
1030 Vienna
Austria
Phone: +43 1 52 152-0
Email: [email protected]
Website: https://www.dsb.gv.at
3. Data Collection on This Website
Server Log Files
The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:
- Browser type and version
- Operating system used
- Referrer URL
- Hostname of the accessing computer
- Time of server request
- IP address
This data is not combined with other data sources.
The collection of this data is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimization of their website – server log files must be recorded for this purpose.
4. Your Rights Under GDPR
According to the General Data Protection Regulation (GDPR), you have the following rights:
Right to Information (Art. 15 GDPR)
You have the right to request confirmation as to whether relevant data is being processed and to receive information about this data as well as further information and a copy of the data in accordance with legal requirements.
Right to Rectification (Art. 16 GDPR)
In accordance with legal requirements, you have the right to request the completion of data concerning you or the correction of incorrect data concerning you.
Right to Erasure (Art. 17 GDPR)
You have the right to request that relevant data be deleted immediately, or alternatively to request a restriction of processing in accordance with Art. 17 para. 3 GDPR.
Right to Restriction of Processing (Art. 18 GDPR)
You have the right to request a restriction on the processing of your personal data while the accuracy of your personal data that you have disputed is being verified.
Right to Data Portability (Art. 20 GDPR)
You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used, and machine-readable format.
Right to Object (Art. 21 GDPR)
You have the right to object at any time, for reasons arising from your particular situation, to the processing of personal data concerning you.
Right to Lodge a Complaint (Art. 77 GDPR)
You have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement.
5. Legal Basis for Processing
The processing of your personal data is based on the following legal bases according to Art. 6 GDPR:
Art. 6 para. 1 lit. a GDPR – Consent
The data subject has given consent to the processing of their personal data for one or more specific purposes.
Art. 6 para. 1 lit. b GDPR – Contract Fulfillment
Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.
Art. 6 para. 1 lit. f GDPR – Legitimate Interests
Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data.
6. Contact Form and Email Communication
If you send us inquiries via contact form, your data from the inquiry form, including the contact details you provide there, will be stored by us for the purpose of processing the inquiry and for follow-up questions. We do not pass on this data without your consent.
The processing of this data is based on Art. 6 para. 1 lit. b GDPR if your inquiry is related to the fulfillment of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of inquiries addressed to us (Art. 6 para. 1 lit. f GDPR) or on your consent (Art. 6 para. 1 lit. a GDPR) if this has been requested.
The data you enter in the contact form will remain with us until you request deletion, revoke your consent to storage, or the purpose for data storage no longer applies (e.g., after your inquiry has been processed). Mandatory legal provisions – especially retention periods – remain unaffected.
7. Data Processing and Third-Party Services
EmailJS
We use the EmailJS service to process contact form inquiries. EmailJS is a service for client-side email sending.
Provider: EmailJS (https://www.emailjs.com/).
When you use the contact form, your data is processed via EmailJS and transmitted to the email address we have stored. Processing is based on Art. 6 para. 1 lit. f GDPR (legitimate interest in processing inquiries) or Art. 6 para. 1 lit. b GDPR (contract initiation).
We have concluded a data processing agreement with EmailJS in accordance with Art. 28 GDPR, which ensures that EmailJS processes the data exclusively according to our instructions and in compliance with GDPR.
For more information on data protection at EmailJS, see their privacy policy: https://www.emailjs.com/legal/privacy-policy/
8. Cookies
Our website uses so-called "cookies". Cookies are small text files and do not cause any damage to your device. They are stored either temporarily for the duration of a session (session cookies) or permanently (permanent cookies) on your device. Session cookies are automatically deleted after your visit. Permanent cookies remain stored on your device until you delete them yourself or automatic deletion occurs through your web browser.
In some cases, cookies from third-party companies may also be stored on your device when you enter our site (third-party cookies). These enable us or you to use certain services of the third-party company.
Cookies have various functions. Numerous cookies are technically necessary, as certain website functions would not work without them (e.g., language selection or remember function). Other cookies serve to evaluate user behavior or display advertising.
Cookies that are necessary to carry out the electronic communication process (necessary cookies) or to provide certain functions you have requested (functional cookies, e.g., for language selection) or to optimize the website (e.g., cookies for measuring web audience) are stored on the basis of Art. 6 para. 1 lit. f GDPR, unless another legal basis is specified. The website operator has a legitimate interest in storing cookies for the technically error-free and optimized provision of their services.
You can set your browser to inform you about the setting of cookies and only allow cookies on a case-by-case basis, exclude the acceptance of cookies for certain cases or in general, and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be limited.
9. Data Storage and Deletion
We only store personal data for as long as is necessary to fulfill the purposes for which it was collected or as required by legal retention periods.
After the purpose ceases to apply or these periods expire, the corresponding data is routinely blocked or deleted in accordance with legal regulations.
For data from the contact form: This is deleted as soon as the purpose of storage no longer applies (e.g., after your inquiry has been processed) or you request deletion.
10. SSL/TLS Encryption
This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator. You can recognize an encrypted connection by the fact that the browser's address line changes from "http://" to "https://" and by the lock symbol in your browser line.
When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
11. Data Protection Impact Assessment
A data protection impact assessment in accordance with Art. 35 GDPR is not required for the processing activities carried out on this website, as no processing takes place that is likely to result in a high risk to the rights and freedoms of natural persons.
12. Transfer of Data to Third Parties
Your personal data will not be transferred to third parties for purposes other than those listed below. We only pass on your personal data to third parties if:
- You have given your express consent to this in accordance with Art. 6 para. 1 lit. a GDPR,
- The transfer is necessary in accordance with Art. 6 para. 1 lit. f GDPR for the assertion, exercise, or defense of legal claims and there is no reason to assume that you have an overriding legitimate interest in not disclosing your data,
- There is a legal obligation for the transfer in accordance with Art. 6 para. 1 lit. c GDPR, and
- This is legally permissible and necessary in accordance with Art. 6 para. 1 lit. b GDPR for the processing of contractual relationships with you.
13. Currency and Changes to This Privacy Policy
This privacy policy is currently valid and dated September 2025.
Due to the further development of our website and offers or due to changed legal or regulatory requirements, it may become necessary to change this privacy policy. The current privacy policy can be accessed and printed at any time on the website under "Privacy Policy".