This draft for Austria has not yet been reviewed by a lawyer and is not in force. Passages marked TO CONFIRM: … are to be clarified by the operator or by the lawyer.
The controller within the meaning of the GDPR is Martin Adamec. Address and email are given below.
This notice concerns website visitors, prospects, customers and business contacts. For people whose data are contained in the company database (for example sole traders), the information under Art. 14 GDPR applies in addition.
The website is to be run on a virtual server provided by Hostinger; the server is located in Frankfurt am Main, Germany. For delivery and security we process IP address, access time, requested URL and method, status, data volume, transmitted referrer and browser identifier. The legal basis is Art. 6(1)(f) GDPR: our interest in a secure and functioning website. Technical logs are kept for no more than 30 days. The connection uses TLS.
Hostinger also makes separate weekly infrastructure backups and replaces older backups according to its backup cycle; deletion in the live service does not mean immediate removal from these backups.
We process the names, company, identifiers (for example VAT ID or companies register number), email, phone, requested market or industry and message you submit, together with the time of sending, IP address, browser identifier and form language. A hidden check field and a time check are used to prevent spam. The legal basis is Art. 6(1)(b) GDPR for pre-contractual steps at your request; for company representatives and to prevent abuse, Art. 6(1)(f) GDPR. The checkbox confirms that you have read the notice and are making an enquiry, not consent to marketing. The server passes the message to local email software for forwarding to the operator. A backup outside the public web directory is only created if handover fails. No automatic confirmation email is sent. Enquiries that do not lead to a contract are deleted 12 months after the last contact. Section 6 applies to contract documents.
To handle rights requests we process company and identification details, the data concerned, reply address, message and the form data mentioned, under Art. 6(1)(c) GDPR. Minimal suppression identifiers may prevent renewed inclusion under Art. 6(1)(f) GDPR. Correspondence is kept only as long as needed to handle and evidence the request, legal obligations or legal claims.
Customer identity, business contacts, order, invoice and payment data are used to perform the contract (Art. 6(1)(b) GDPR), to meet legal obligations (point c) and for communication with representatives and legal claims (point f). Contract and accounting records are kept for the statutory periods.
This website currently sets no analytics or advertising cookies and loads no Google services or content from other providers. Fonts are loaded from our own server. Only the storage technically required to deliver the pages and submit the form is used.
If audience measurement is used in future, it will only be after your active consent (Art. 6(1)(a) GDPR, § 165(3) TKG 2021), and this notice will be updated first.
Where necessary, hosting, email and IT providers under the applicable safeguards, banks, accountants and professional advisers and competent authorities may receive data. Details from enquiries are not supplied to customers as a database product.
Access or transfers outside the EEA require a legal basis and a mechanism under Chapter V GDPR, such as an adequacy decision or appropriate safeguards. You can request information about this using our contact details.
Making an enquiry is voluntary. Marked fields are required to process the form; alternatively you can email us. Decisions with legal or similarly significant effects are not taken solely by automated means.
Subject to the legal requirements, you have the right of access, rectification, erasure, restriction and data portability. Consent can be withdrawn where processing is based on it; the lawfulness of earlier processing remains unaffected. You can object to processing based on legitimate interests on grounds relating to your particular situation, and to direct marketing at any time without giving reasons (Art. 21 GDPR). We generally reply within one month.
You can lodge a complaint with a supervisory authority, in particular in the member state of your habitual residence, place of work or place of the alleged infringement (Art. 77 GDPR). In Austria this is the Data Protection Authority (Datenschutzbehörde), Barichgasse 40–42, 1030 Vienna (dsb.gv.at). For the controller’s seat, the Czech Office for Personal Data Protection (uoou.gov.cz) is competent.
You can send privacy questions and data subject requests directly to the controller using the contact details below. No representative and no particular wording are required. TO CONFIRM: whether a data protection officer must be designated (Art. 37 GDPR).
This notice describes the current service and is updated when processing changes significantly. The version date is shown above.
Martin Adamec
Mírová 1541, 516 01 Rychnov nad Kněžnou, Czech Republic
IČO: 19552319
info@firmdat.at
Legal notice · Terms · Information under Art. 14 GDPR · Objection · Data sources and methodology
