Legal Information

Privacy Policy

How we process personal data, how long we store it, and what rights you have.

Introduction and Overview

We have prepared this Privacy Policy to explain to you, in accordance with the General Data Protection Regulation (EU) 2016/679 and applicable national laws, what personal data we, as the data controller, process and will process in the future, and what legal rights you have.

We provide this information in clear and simple language: We process personal data only when there is a legal basis for doing so. If you have any questions, please contact the responsible party listed in the legal notice.

Version 11/26/2024-122912897

Scope of Application

This Privacy Policy applies to all personal data processed by our company and to all personal data processed by third-party companies we have engaged as data processors. The scope of application includes:

  • All online presences—that is, websites—that we operate
  • Social Media Presence and Email Communication
  • Mobile Apps for Smartphones and Other Devices

Legal Basis

We process your data only if at least one of the following conditions applies:

  • Consent, Art. 6(1)(a) of the GDPR: You have given us your consent to process data for a specific purpose.
  • Contract, Article 6(1)(b) of the GDPR: To fulfill a contract or pre-contractual obligations with you.
  • Legal obligation, Art. 6(1)(c) of the GDPR: When we are subject to a legal obligation, such as the retention of invoices.
  • Legitimate interests, Art. 6(1)(f) of the GDPR: In cases where legitimate interests are involved that do not infringe upon your fundamental rights.

In addition to the EU Regulation, the Data Protection Act (DSG) applies in Austria.

Contact Information for the Data Controller

Person in Charge
Philipp Trummer, B.Sc., M.Sc., M.A.
Address
Parkring 1, 8074 Grambach
Email
office@itanic.at
Phone
+43 664 252 0495

Retention period

We store personal data only for as long as is strictly necessary to provide our services and products. This means that we delete personal data as soon as the reason for processing it no longer exists.

In some cases, we are legally required to retain certain data even after the original purpose no longer applies, such as for accounting purposes. If you wish to have your data deleted or withdraw your consent to data processing, the data will be deleted as soon as possible.

Your Rights Under the General Data Protection Regulation

Pursuant to Articles 13 and 14 of the GDPR, you have the following rights:

  • Right of Access, Art. 15 of the GDPRYou have the right to know whether we process any of your personal data and, if so, what data we process, including the purpose, categories, and retention period.
  • Right to Rectification, Art. 16 of the GDPRYou have the right to have inaccurate data corrected.
  • Right to Erasure, Art. 17 of the GDPRYou have the right to have your data erased, also known as the right to be forgotten.
  • Right to Restriction of Processing, Art. 18 of the GDPRYou have the right to restrict processing so that data is only stored but not used further.
  • Right to Data Portability, Art. 20 GDPRUpon request, we will provide you with your data in a commonly used format.
  • Right to Object, Art. 21 of the GDPRYou may object to the processing of your data at any time, particularly in the case of direct marketing or profiling.
  • Right to File a Complaint, Art. 77 of the GDPRYou may file a complaint with the data protection authority at any time.

Austrian Data Protection Authority

Management
Dr. Matthias Schmidl
Address
Barichgasse 40–42, 1030 Vienna
Phone
+43 1 52 152-0
Email
dsb@dsb.gv.at
Website
www.dsb.gv.at

Data Processing Security

To protect personal data, we have implemented both technical and organizational measures. Where possible, we encrypt or pseudonymize personal data in accordance with Article 25 of the GDPR, “Data Protection by Design.”

We use HTTPS with TLS encryption to ensure that data is transmitted securely over the Internet. This secures the entire transmission of all data between your browser and our web server. You can recognize this by the padlock icon on the left side of your browser's address bar.

Communication

Affected individuals
Anyone who communicates with us by phone, email, or through our online form
Purpose
Handling communication with customers and business partners
Retention period
Duration of the business transaction and the applicable legal requirements
Legal Basis
Art. 6(1)(a), (b), (f) of the GDPR

When you contact us by phone, email, or through our online form, your data will be processed to handle and address your inquiry and will be stored for as long as required by law.

  • Phone: Call data is stored in pseudonymized form on the respective device and deleted as soon as the transaction is complete.
  • Email: Data is stored on the respective device and on the email server and is deleted once the transaction is complete.
  • Online Forms: Data is stored on our web server and deleted as soon as the transaction is complete.

Cookies

Affected individuals
Website visitors
Retention period
Depending on the specific cookie, from hours to years
Legal Basis
Art. 6(1)(a), (f) of the GDPR

Our website uses HTTP cookies to store user-specific data. Cookies are small text files that our website stores on your computer.

Types of Cookies

  • Essential cookies: Required for basic website functionality.
  • Functional cookies: Collect information about user behavior and page load times.
  • Functional cookies: Store settings such as locations or form data.
  • Advertising cookies: Used to deliver personalized advertising.

You can delete, disable, or manage cookies at any time in your browser settings. For strictly necessary cookies, there is a legitimate interest pursuant to Article 6(1)(f) of the GDPR. All other cookies are set only with your consent.

Web Hosting

Processed Data
IP address, time of visit, browser used
Retention period
Usually two weeks
Legal Basis
Art. 6(1)(f) of the GDPR, legitimate interests

When you visit our website, our web server automatically stores data such as the URL accessed, browser type, operating system, referrer URL, IP address, and the date and time in what are known as web server log files.

This data is typically deleted automatically after two weeks. We do not share this data with third parties; however, we cannot rule out the possibility that it may be accessed by government authorities in the event of unlawful conduct. We have a data processing agreement with our hosting provider in accordance with Article 28 of the GDPR.

Web Analytics with Google Analytics

Purpose
Analysis of Visitor Data to Optimize the Website
Processed Data
Access statistics, device data, browsing behavior, IP addresses
Retention period
14 months by default
Legal Basis
Art. 6(1)(a), (f) of the GDPR

We use Google Analytics 4, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics collects data about your activities on our website using a tracking code and uses this data to create pseudonymous user profiles.

Google Analytics 4 uses an event-based data model and does not process IP addresses in plain text. IP address data is used to determine location and is deleted immediately afterward. It is used only with your consent via the cookie window.

You can disable data collection by Google Analytics using the browser add-on available at tools.google.com/dlpage/gaoptout.

Google also processes data in the United States and is an active participant in the EU-U.S. Data Privacy Framework. For more information, visit policies.google.com/privacy.

Social Media

Purpose
Presenting our services, connecting with visitors and prospective clients
Processed Data
Phone numbers, email addresses, usage patterns, IP address
Legal Basis
Art. 6(1)(a), (f) of the GDPR

We are active on the social media platform LinkedIn. When you visit our social media pages, your data may be processed. Please note that data may also be processed outside the EU.

Data processing on the respective platforms is subject to the privacy policies of the respective providers. LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland, is responsible for data processing on LinkedIn.

Google Maps

Processed Data
Search terms, IP address, latitude and longitude coordinates
Legal Basis
Art. 6(1)(a), (f) of the GDPR

We use Google Maps, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, to show you our location. When you use the map feature, data such as your IP address and search terms you enter are transmitted to Google and stored there.

Google places at least one cookie in your browser for this purpose. This is done only with your consent. For more information, visit policies.google.com/privacy.

Google Fonts, Embedded Locally

On our website, we use Google Fonts provided by Google Ireland Limited. However, we have embedded the fonts locally on our web server, not on Google's servers.

As a result, there is no connection to Google's servers, and therefore no data is transmitted to or stored by Google. This measure is intended to protect the privacy of our website visitors.

Explanation of Terms Used

  • Data ProcessorA natural or legal person who processes personal data on behalf of the controller, Art. 4 GDPR. This includes, for example, hosting or cloud providers, payment providers, or large companies such as Google or Microsoft.
  • ConsentAny freely given, specific, informed, and unambiguous indication of intent, Art. 4 GDPR. On websites, this is typically done using a cookie consent tool.
  • Personal DataAny information relating to an identified or identifiable natural person, as defined in Article 4 of the GDPR, such as name, email address, phone number, IP address, or location data.
  • ProcessingAny operation involving personal data, such as collection, storage, modification, retrieval, transmission, or erasure, as defined in Article 4 of the GDPR.
  • Data ControllerThe natural or legal person who determines the purposes and means of the processing of personal data, Art. 4 GDPR. In our case, we, ITanic GmbH, are the data controller.

All texts are protected by copyright. Created using the Data Protection Generator for Austria by AdSimple.

Questions about data protection?

Give us a call or send us a message.

Contact Us