Privacy policy

This website is designed to be particularly privacy-friendly. All data is processed exclusively on servers within the European Union and is not shared with third parties.

When visiting our website, the following data is automatically collected for technical reasons:

• IP address (only in case of suspected misuse, stored for a maximum of 5 days)

• Address of the previously visited website (Referrer URL)

• Retrieved files (URLs)

• Date and time of access

• Operating system and browser type (User-Agent)

The processing of this data is necessary to ensure uninterrupted operation and to prevent potential attacks. (Legal basis: Art. 6(1)(f) GDPR)

Our map is loaded entirely from our own web server. When you open a page with a map, only a preview image is shown at first; no data is transferred to third parties. Only when you use the map (e.g. point at it, tap it, reach it with the keyboard or choose “Load interactive map”) does your browser load the map software, map data, fonts and icons – again exclusively from our server. This produces the usual server log data (see 2.1). The map does not set cookies.

The “Find my location” button asks for your location only after a click and only with your permission in the browser. The position is used only on your device and is not sent to us or to third parties.

When you click “Get directions”, an external map service opens in a new window (depending on your device Google Maps by Google Ireland Limited, Apple Maps by Apple Inc. or your device’s navigation app). The destination coordinates and your IP address are transmitted to that provider; its privacy policy applies. Without your click, no data is transmitted. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in providing easy directions).

Our website uses only one technically necessary session cookie (name: kirby_session). It is set when you open the home page so that the matching language version is shown to you automatically only once, and it expires after two hours at the latest. The contact form and the map do not set cookies. Legal basis: Art. 6(1)(f) GDPR; as the cookie is technically necessary, no consent is required (Section 165(3) Austrian Telecommunications Act 2021).

Our website is hosted on servers provided by a service provider within the European Union. All data generated during the use of this website is stored and processed exclusively on these servers. (Legal basis: Art. 6(1)(f) GDPR in conjunction with Art. 28 GDPR - Data Processing Agreement)

We use Matomo, a web analytics software operated on our behalf by our web agency FINK Brot Pixel GmbH as a processor on servers in the EU; the data is not passed on to third parties. Matomo does not set cookies, and IP addresses are anonymized (last two bytes are removed). The data processing is solely for the purpose of optimizing our website. (Legal basis: Art. 6(1)(f) GDPR)

When you contact us via the contact form or by email, we process your details (name, email address, the subject and your message, optionally also company and phone number) solely to handle your enquiry and any follow-up questions. Mandatory fields are marked; without this information we cannot process your enquiry.

The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to a contract or quotation, otherwise our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR).

Your details are transmitted in encrypted form and delivered directly by email to our mailbox. The content of your enquiry is not stored on our web server.

Protection against abuse and spam: When you send the form, your browser solves a small computational task in the background; no third-party services are loaded and no cookies are set. In addition, enquiries are automatically checked for typical spam characteristics (e.g. many links, random text, disposable addresses); suspicious enquiries are delivered with a flag. To limit mass submissions, we use pseudonymised identifiers derived from the IP address that are effective for at most one hour; the form does not permanently store the IP address itself. Technical logs contain only the time, form identifier and result of the delivery (no enquiry content) and are usually deleted automatically after 7 days. To monitor operation, we count delivered and rejected enquiries per month and remember the time of the last successful submission – without names, addresses or content. The legal basis is our legitimate interest in a secure and functioning contact form (Art. 6(1)(f) GDPR).

We keep your enquiry in our email mailbox for as long as necessary to handle it and delete it after 6 months at the latest, unless statutory retention obligations apply.

You have the right to:

• Request information about your stored personal data (Art. 15 GDPR)

• Rectify incorrect data (Art. 16 GDPR)

• Delete your data (Art. 17 GDPR)

• Restrict the processing of your data (Art. 18 GDPR)

• Receive your data in a structured, commonly used, and machine-readable format (Art. 20 GDPR)

• Withdraw your consent at any time (Art. 7(3) GDPR)

• Lodge a complaint with a supervisory authority (Art. 77 GDPR)