Privacy Policy & Data Protection Notice

1. Data Controller and Contact Information

The entity responsible for processing personal data on this website (the "Controller") within the meaning of Article 4(7) of the Regulation (EU) 2016/679 (General Data Protection Regulation or "GDPR") is:

2. Scope of Personal Data Collection

We process personal data only when technically necessary to deliver our editorial guides, secure our infrastructure, or respond to explicit inquiries. The categories of data processed include:

• Technical Connection Logs: Your Internet Protocol (IP) address, browser type and version, operating system, referrer URL, host name of the accessing terminal, and server request timestamps. These server logs are automatically captured by our web hosting infrastructure.
• Inquiry Submission Data: When you complete our contact form, we collect your full name, email address, topic category, message narrative, and explicit consent timestamp.
• Preference State Data: We store a minimal consent flag in your browser’s local storage to record your cookie preference choice, avoiding intrusive re-prompting across page navigations.

3. Legal Bases for Data Processing

In accordance with Article 6(1) of the GDPR, we process personal data under the following legal frameworks:

• Article 6(1)(f) GDPR (Legitimate Interests): For the temporary logging of IP addresses to prevent distributed denial-of-service (DDoS) events, detect unauthorized intrusion attempts, and maintain the structural stability of our static web delivery.
• Article 6(1)(b) GDPR (Contractual and Pre-contractual Inquiries): To review, process, and respond to communications received via our contact portal.
• Article 6(1)(a) GDPR (Consent): For the setting of non-essential analytics cookies when explicitly granted via our bottom consent banner.

4. Third-Party Service Providers and Data Processors

We maintain strict boundaries regarding third-party data transmission. We do not sell, rent, or trade your personal information. Web hosting infrastructure and email routing services are operated through certified infrastructure providers located within the European Economic Area (EEA) under rigorous Data Processing Agreements (DPAs) in compliance with Article 28 GDPR. Any eventual transfer of data outside the EEA is governed by standard contractual clauses approved by the European Commission.

5. Cookies and Local Storage Technologies

Our website uses small text files known as cookies or client-side storage objects. Essential cookies are deployed strictly to preserve operational security and layout integrity. Non-essential analytical metrics are only activated if you select "Accept All" within our banner. For an itemized register of cookies, lifespans, and operational purposes, please consult our dedicated Cookie Policy.

6. Data Retention and Deletion Schedules

Technical server access logs are retained for a rolling period of no more than thirty (30) days for forensic security purposes and are subsequently purged or anonymized. Information transmitted through our contact form is retained only for the duration required to process your request, up to a maximum of six (6) months, unless statutory Austrian commercial retention requirements (e.g., under the Austrian Commercial Code / UGB) mandate an extended archival period.

7. Your Statutory Rights Under the GDPR

As a data subject resident in the European Union or European Economic Area, you hold comprehensive rights regarding your personal information:

• Right of Access (Article 15 GDPR): You may request formal confirmation and a copy of the personal data we maintain concerning you.
• Right to Rectification (Article 16 GDPR): You may demand immediate correction of inaccurate or incomplete records.
• Right to Erasure ("Right to be Forgotten", Article 17 GDPR): You may request the deletion of your personal data where retention lacks legitimate legal grounds.
• Right to Restriction of Processing (Article 18 GDPR): You may contest data processing and limit further use pending dispute resolution.
• Right to Data Portability (Article 20 GDPR): You are entitled to receive your provided personal data in a structured, standard, machine-readable format.
• Right to Object (Article 21 GDPR): You have the right to object at any time, on grounds relating to your particular situation, to data processing rooted in legitimate interests.

To exercise any of these statutory rights, please send your signed request to [email protected].

8. Supervisory Authority and Complaints

If you believe our processing of your personal data infringes applicable data protection statutes, you maintain the right to lodge a formal complaint with the competent supervisory authority:

9. Policy Modifications

We periodically review this policy to reflect legislative amendments and technical advancements. Any revisions will be published immediately on this page with an updated revision date.