fdf
Privacy Policy
1. General Information
Protecting your personal data is important to us. This Privacy Policy explains which personal data is processed when you visit our website or contact us, the purposes for which such processing takes place, and the legal bases on which the processing is based.
Personal data means any information relating to an identified or identifiable natural person.
Personal data is processed in particular on the basis of the General Data Protection Regulation (GDPR), the Austrian Data Protection Act (DSG) and, where applicable, the Austrian Telecommunications Act 2021 (TKG 2021).
2. Controller
The controller within the meaning of the GDPR is:
Clevascale GmbH
Kärntner Ring 10/Top 2C
1010 Wien
Austria
Email: contact@clevascale.com
Phone: +43 664 400 3068
3. Legal Bases for Data Processing
We process personal data only where an appropriate legal basis exists.
Depending on the processing activity, the following legal bases apply in particular:
Art. 6(1)(a) GDPR – consent of the data subject.
Art. 6(1)(b) GDPR – processing necessary for the performance of a contract or in order to take steps prior to entering into a contract.
Art. 6(1)(c) GDPR – processing necessary for compliance with a legal obligation.
Art. 6(1)(f) GDPR – processing based on our legitimate interests or those of a third party, unless such interests are overridden by the interests or fundamental rights and freedoms of the data subject.
Where information is stored on or accessed from a user's terminal equipment, we additionally comply with Section 165(3) TKG 2021. As a general rule, we obtain consent before using technically non-essential cookies and comparable technologies.
4. Storage Period
As a general rule, we retain personal data only for as long as necessary to achieve the respective purpose of processing.
Data may be retained for a longer period where statutory retention obligations apply or where the data is required for the establishment, exercise or defence of legal claims.
If consent is withdrawn or a valid request for deletion is made, we delete the relevant data unless statutory or other lawful grounds require or permit further retention.
5. Hosting and Framer
Our website is operated using Framer.
Provider:
Framer B.V.
Rozengracht 207
1016 LZ Amsterdam
Netherlands
When you access our website, technically necessary data may be processed. This may include, in particular, your IP address, time of access, requested URL, browser information, operating system, device information and other technical connection data.
The processing is carried out for the purpose of providing our website securely, reliably and efficiently.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure and reliable provision of our website.
Where Framer acts as a processor on our behalf, processing is carried out on the basis of an appropriate data processing agreement pursuant to Art. 28 GDPR.
Further information about privacy at Framer is available at:
https://www.framer.com/legal/privacy-statement/
6. Framer Analytics
We use the analytics functionality provided by Framer to obtain basic information about the use of our website and to optimise our online presence.
According to Framer, Framer Analytics is designed for privacy-friendly audience measurement and does not use cookies or persistent identifiers to recognise individual visitors.
To the extent that personal data is processed in this context, the processing is based on our legitimate interest in statistically evaluating and optimising our website pursuant to Art. 6(1)(f) GDPR.
7. Cookies and Consent Management
Our website uses technically necessary technologies as well as, following appropriate consent, analytics and marketing technologies.
We use the consent solution provided by Framer to manage user consent.
Technically necessary technologies may be used where required to provide the website or a function expressly requested by the user.
Analytics, marketing and comparable non-essential technologies are generally used only after you have given your prior consent.
The legal basis for the associated processing of personal data is Art. 6(1)(a) GDPR in conjunction with Section 165(3) TKG 2021, where its requirements apply.
You may withdraw or modify your consent at any time with effect for the future via the cookie or privacy settings available on our website.
The lawfulness of processing carried out on the basis of consent before its withdrawal remains unaffected.
8. Google Tag Manager
We use Google Tag Manager.
The provider in the European Economic Area is:
Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland
Google Tag Manager is used to technically manage and trigger other services and tags used on our website.
In particular, analytics and marketing services are managed through Google Tag Manager.
Where Google Tag Manager or services integrated through it process personal data or store or access information on your terminal equipment, services requiring consent are generally activated only after you have given your consent.
Further information:
https://policies.google.com/privacy
9. Google Analytics 4
We use Google Analytics 4 (GA4), a web analytics service provided by:
Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland
Google Analytics enables us to statistically evaluate the use of our website. In particular, information about pages viewed, interactions, session duration, approximate location, device used, operating system, browser and other usage and technical data may be processed.
We use Google Analytics with a consent management system and Google Consent Mode v2.
We use Google Analytics for analytics purposes on the basis of your consent pursuant to Art. 6(1)(a) GDPR. Where information is stored on or accessed from your terminal equipment, Section 165(3) TKG 2021 is additionally observed.
You may withdraw your consent at any time with effect for the future via our website's cookie settings.
When using Google services, data may be processed outside the European Economic Area, particularly in the United States.
Google LLC is certified under the EU-U.S. Data Privacy Framework. Where required, additional appropriate safeguards such as the European Commission's Standard Contractual Clauses may also apply.
Further information:
https://policies.google.com/privacy
10. Google Ads Conversion Tracking
We use Google Ads Conversion Tracking provided by:
Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland
Conversion tracking enables us to measure whether visitors to our website perform certain actions.
In particular, conversions such as contact enquiries, appointment bookings, clicks on email addresses or telephone numbers and other interactions with our website may be measured.
This allows us to assess the effectiveness of our advertising activities.
Processing takes place only after appropriate consent on the basis of Art. 6(1)(a) GDPR and, where information is stored on or accessed from terminal equipment, in accordance with Section 165(3) TKG 2021.
Consent may be withdrawn at any time via the cookie settings.
Further information:
https://policies.google.com/privacy
11. Meta Pixel
We use the Meta Pixel on our website.
The provider for users in the European Economic Area is:
Meta Platforms Ireland Limited
Merrion Road
Dublin 4
D04 X2K5
Ireland
The Meta Pixel enables us to track the behaviour of visitors to our website after they have, for example, viewed or clicked an advertisement on Facebook or Instagram.
This enables us to measure the effectiveness of our advertisements, create target audiences and optimise our marketing activities.
In particular, information about pages viewed, interactions with our website, browser and device information, IP address and other technical identifiers may be processed.
Where Meta can associate the transmitted information with an existing Facebook or Instagram account, Meta may process this information in accordance with its own privacy terms.
The Meta Pixel is used only after you have given your consent pursuant to Art. 6(1)(a) GDPR and, where information is stored on or accessed from your terminal equipment, in accordance with Section 165(3) TKG 2021.
To the extent that we and Meta are jointly responsible for the collection and transmission of certain data, the arrangements on joint controllership pursuant to Art. 26 GDPR additionally apply.
Meta Platforms, Inc. is certified under the EU-U.S. Data Privacy Framework. Where required, additional appropriate safeguards for international data transfers may apply.
Further information:
https://www.facebook.com/privacy/policy/
12. Contact Form
We provide a contact form on our website.
If you contact us using this form, we process the data you enter. This may include in particular:
Name
Email address
Telephone number
Content of your enquiry
Data submitted through the contact form is forwarded to our internal email address and is not additionally stored in Framer as a contact enquiry.
The processing is carried out to handle and respond to your enquiry.
Where your enquiry relates to entering into or performing a contract, processing is based on Art. 6(1)(b) GDPR.
For other enquiries, processing is based on our legitimate interest in efficient communication pursuant to Art. 6(1)(f) GDPR.
13. Contact by Email or Telephone
If you contact us by email or telephone, we process the personal data you provide in order to handle your enquiry.
This may include, in particular, your name, email address, telephone number, company and the content of your message.
Processing is based on Art. 6(1)(b) GDPR where the communication relates to pre-contractual measures or the performance of a contract.
In other cases, processing is based on our legitimate interest in handling business enquiries pursuant to Art. 6(1)(f) GDPR.
14. Microsoft 365 and Outlook
We use Microsoft 365 and Microsoft Outlook for our business email communications.
Provider:
Microsoft Ireland Operations Limited
One Microsoft Place
South County Business Park
Leopardstown
Dublin 18
Ireland
If you contact us by email or through our contact form, your personal data may be processed within our Microsoft 365 infrastructure.
This may include, in particular, your name, email address, telephone number, communication content, attachments and technical communication data.
Processing is carried out to handle business communications and to conduct pre-contractual measures and contractual relationships.
The legal bases are, in particular, Art. 6(1)(b) and Art. 6(1)(f) GDPR.
Microsoft may also process data outside the European Economic Area in connection with providing its services.
Microsoft Corporation is certified under the EU-U.S. Data Privacy Framework. Appropriate safeguards such as the European Commission's Standard Contractual Clauses may additionally apply.
Further information:
https://privacy.microsoft.com/privacystatement
15. Calendly
Calendly is integrated into our website for scheduling appointments.
Provider:
Calendly LLC
115 E Main St., Suite A1B
Buford, GA 30518
USA
If you schedule an appointment through Calendly, the information you enter is processed. This includes, in particular, your name, email address, requested appointment and, where applicable, other information you provide.
We use this data to schedule and conduct the appointment you requested.
The appointment invitation is subsequently processed through our Microsoft Outlook infrastructure.
Processing is carried out for pre-contractual measures and/or the organisation of business appointments pursuant to Art. 6(1)(b) GDPR.
Where the Calendly integration on our website uses technically non-essential cookies or comparable technologies, they are used only after your consent pursuant to Art. 6(1)(a) GDPR in conjunction with Section 165(3) TKG 2021.
Calendly may process data in the United States. Calendly is certified under the EU-U.S. Data Privacy Framework. Appropriate safeguards such as Standard Contractual Clauses may additionally apply.
Further information:
16. Typeform
We use Typeform for job applications.
Provider:
TYPEFORM S.L.
Carrer Bac de Roda 163
08018 Barcelona
Spain
Typeform is not embedded directly on our website. If you select the relevant link, you leave our website and are redirected to Typeform's website.
Applicants may submit the following data through Typeform in particular:
Name
Email address
Telephone number
Application-related details and information
The processing is carried out exclusively for the purpose of handling your application and deciding whether to establish an employment relationship.
Further information:
https://admin.typeform.com/to/dwk6gt
17. Job Applications
You may apply to us via Typeform, our contact form or by email.
As part of an application, we process the data you provide to us for the purpose of conducting the recruitment process.
This may include, in particular:
Name and contact details
Email address
Telephone number
CV/resume
Education and professional information
Cover letter
Work samples
Information from job interviews
Other application documents and information voluntarily provided
Processing is carried out for the purpose of conducting the recruitment process and deciding whether to establish an employment relationship on the basis of Art. 6(1)(b) GDPR.
Where special categories of personal data within the meaning of Art. 9 GDPR are processed, this is done only where an appropriate legal basis exists.
If no employment relationship is established, we generally retain application documents only for as long as necessary to complete the recruitment process and to preserve or defend potential legal claims.
Any further inclusion in an applicant pool takes place only with appropriate consent pursuant to Art. 6(1)(a) GDPR.
Such consent may be withdrawn at any time with effect for the future.
We do not submit applicants' personal data to ChatGPT Business or comparable generative AI services for processing.
18. YouTube
YouTube videos may be embedded on our website.
Provider:
Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland
When an embedded YouTube video is loaded, a connection to Google or YouTube servers may be established. In particular, your IP address, device and browser information and information about the page visited may be transmitted.
If you are simultaneously logged into your Google or YouTube account, Google may be able to associate your use with your user account.
YouTube may use cookies and comparable technologies.
Processing is based on your consent pursuant to Art. 6(1)(a) GDPR and, where information is stored on or accessed from your terminal equipment, in accordance with Section 165(3) TKG 2021.
Further information:
https://policies.google.com/privacy
19. Google Maps
We use Google Maps on our contact page.
Provider:
Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland
Google Maps enables us to display our location and makes it easier to find us.
When the map is loaded, a connection to Google may be established. In particular, your IP address, device information, location information and other technical data may be transmitted to Google.
Google may use cookies or comparable technologies in this context.
Processing is based on your consent pursuant to Art. 6(1)(a) GDPR and, where information is stored on or accessed from your terminal equipment, in accordance with Section 165(3) TKG 2021.
Further information:
https://policies.google.com/privacy
20. Microsoft Teams
We use Microsoft Teams for online meetings and video conferences.
Provider:
Microsoft Ireland Operations Limited
One Microsoft Place
South County Business Park
Leopardstown
Dublin 18
Ireland
When participating in a Teams meeting, data such as your name, email address, IP address, device and connection information, as well as audio, video and communication data may be processed.
If content is provided during a meeting via chat, screen sharing or files, this data may also be processed.
Processing is carried out for the purpose of conducting the requested business communication and/or pre-contractual or contractual measures pursuant to Art. 6(1)(b) GDPR.
Where the use of Microsoft Teams additionally serves efficient internal and external communication, processing may be based on our legitimate interest pursuant to Art. 6(1)(f) GDPR.
Further information:
https://privacy.microsoft.com/privacystatement
21. Google Fonts and Fonts
We use fonts provided through Framer to display our website.
Under our current website setup, we do not additionally load our own externally hosted Google Fonts files into the website.
Where fonts are provided through Framer's infrastructure, the associated technical processing takes place in connection with the provision of our website.
22. Transfers to Third Countries
Some of the providers we use belong to corporate groups based outside the European Economic Area or may process personal data outside the EEA.
Personal data is transferred to a third country only where the requirements of Art. 44 et seq. GDPR are met.
Such transfers may in particular be based on an adequacy decision of the European Commission.
For appropriately certified U.S. companies, the EU-U.S. Data Privacy Framework may in particular serve as the basis for a data transfer.
Where no adequacy decision applies, the European Commission's Standard Contractual Clauses pursuant to Art. 46 GDPR and, where appropriate, additional safeguards may be used.
23. Recipients of Personal Data
As part of our business activities, personal data may be disclosed to service providers and other recipients where necessary for the respective processing purposes.
These may include, in particular, IT, hosting, communications, analytics, marketing and appointment management service providers.
Where a service provider processes personal data solely on our behalf, we enter into a data processing agreement pursuant to Art. 28 GDPR where required by law.
Personal data is otherwise disclosed only where we are legally required to do so, where disclosure is necessary for the performance of a contract, where appropriate consent has been given or where another lawful basis exists.
24. Data Security
We implement appropriate technical and organisational measures to protect personal data against loss, manipulation, unauthorised access and other unlawful processing.
Our website uses an encrypted HTTPS connection.
Please note, however, that data transmission over the internet can never be completely protected against all risks.
25. Your Rights
Subject to the applicable legal requirements, you have in particular the following rights:
Right of access pursuant to Art. 15 GDPR
Right to rectification pursuant to Art. 16 GDPR
Right to erasure pursuant to Art. 17 GDPR
Right to restriction of processing pursuant to Art. 18 GDPR
Right to data portability pursuant to Art. 20 GDPR
Right to object pursuant to Art. 21 GDPR
Right to withdraw consent pursuant to Art. 7(3) GDPR
The withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
To exercise your rights, you may contact us at:
26. Right to Lodge a Complaint
If you believe that the processing of your personal data infringes applicable data protection law, you have the right to lodge a complaint with a data protection supervisory authority.
In Austria, the competent authority is in particular:
Österreichische Datenschutzbehörde (Austrian Data Protection Authority)
Barichgasse 40–42
1030 Wien
Austria
The right to lodge a complaint is without prejudice to any other administrative or judicial remedies.
27. Objection to Direct Marketing
Where personal data is processed for direct marketing purposes, you have the right under Art. 21(2) GDPR to object at any time to the processing of your personal data for such marketing purposes.
Following such an objection, your personal data will no longer be processed for these purposes.
28. Withdrawal of Consent
You may withdraw any consent you have given at any time with effect for the future.
Consent to analytics and marketing technologies may in particular be changed or withdrawn through the cookie or privacy settings provided on our website.
Withdrawing consent must be as easy as giving consent.
29. Changes to this Privacy Policy
We reserve the right to amend this Privacy Policy if our data processing activities, the services we use or the applicable legal framework change.
The current version published on this website applies.
Last updated: August 2026
Privacy Policy
1. General Information
Protecting your personal data is important to us. This Privacy Policy explains which personal data is processed when you visit our website or contact us, the purposes for which such processing takes place, and the legal bases on which the processing is based.
Personal data means any information relating to an identified or identifiable natural person.
Personal data is processed in particular on the basis of the General Data Protection Regulation (GDPR), the Austrian Data Protection Act (DSG) and, where applicable, the Austrian Telecommunications Act 2021 (TKG 2021).
2. Controller
The controller within the meaning of the GDPR is:
Clevascale GmbH
Kärntner Ring 10/Top 2C
1010 Wien
Austria
Email: contact@clevascale.com
Phone: +43 664 400 3068
3. Legal Bases for Data Processing
We process personal data only where an appropriate legal basis exists.
Depending on the processing activity, the following legal bases apply in particular:
Art. 6(1)(a) GDPR – consent of the data subject.
Art. 6(1)(b) GDPR – processing necessary for the performance of a contract or in order to take steps prior to entering into a contract.
Art. 6(1)(c) GDPR – processing necessary for compliance with a legal obligation.
Art. 6(1)(f) GDPR – processing based on our legitimate interests or those of a third party, unless such interests are overridden by the interests or fundamental rights and freedoms of the data subject.
Where information is stored on or accessed from a user's terminal equipment, we additionally comply with Section 165(3) TKG 2021. As a general rule, we obtain consent before using technically non-essential cookies and comparable technologies.
4. Storage Period
As a general rule, we retain personal data only for as long as necessary to achieve the respective purpose of processing.
Data may be retained for a longer period where statutory retention obligations apply or where the data is required for the establishment, exercise or defence of legal claims.
If consent is withdrawn or a valid request for deletion is made, we delete the relevant data unless statutory or other lawful grounds require or permit further retention.
5. Hosting and Framer
Our website is operated using Framer.
Provider:
Framer B.V.
Rozengracht 207
1016 LZ Amsterdam
Netherlands
When you access our website, technically necessary data may be processed. This may include, in particular, your IP address, time of access, requested URL, browser information, operating system, device information and other technical connection data.
The processing is carried out for the purpose of providing our website securely, reliably and efficiently.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure and reliable provision of our website.
Where Framer acts as a processor on our behalf, processing is carried out on the basis of an appropriate data processing agreement pursuant to Art. 28 GDPR.
Further information about privacy at Framer is available at:
https://www.framer.com/legal/privacy-statement/
6. Framer Analytics
We use the analytics functionality provided by Framer to obtain basic information about the use of our website and to optimise our online presence.
According to Framer, Framer Analytics is designed for privacy-friendly audience measurement and does not use cookies or persistent identifiers to recognise individual visitors.
To the extent that personal data is processed in this context, the processing is based on our legitimate interest in statistically evaluating and optimising our website pursuant to Art. 6(1)(f) GDPR.
7. Cookies and Consent Management
Our website uses technically necessary technologies as well as, following appropriate consent, analytics and marketing technologies.
We use the consent solution provided by Framer to manage user consent.
Technically necessary technologies may be used where required to provide the website or a function expressly requested by the user.
Analytics, marketing and comparable non-essential technologies are generally used only after you have given your prior consent.
The legal basis for the associated processing of personal data is Art. 6(1)(a) GDPR in conjunction with Section 165(3) TKG 2021, where its requirements apply.
You may withdraw or modify your consent at any time with effect for the future via the cookie or privacy settings available on our website.
The lawfulness of processing carried out on the basis of consent before its withdrawal remains unaffected.
8. Google Tag Manager
We use Google Tag Manager.
The provider in the European Economic Area is:
Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland
Google Tag Manager is used to technically manage and trigger other services and tags used on our website.
In particular, analytics and marketing services are managed through Google Tag Manager.
Where Google Tag Manager or services integrated through it process personal data or store or access information on your terminal equipment, services requiring consent are generally activated only after you have given your consent.
Further information:
https://policies.google.com/privacy
9. Google Analytics 4
We use Google Analytics 4 (GA4), a web analytics service provided by:
Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland
Google Analytics enables us to statistically evaluate the use of our website. In particular, information about pages viewed, interactions, session duration, approximate location, device used, operating system, browser and other usage and technical data may be processed.
We use Google Analytics with a consent management system and Google Consent Mode v2.
We use Google Analytics for analytics purposes on the basis of your consent pursuant to Art. 6(1)(a) GDPR. Where information is stored on or accessed from your terminal equipment, Section 165(3) TKG 2021 is additionally observed.
You may withdraw your consent at any time with effect for the future via our website's cookie settings.
When using Google services, data may be processed outside the European Economic Area, particularly in the United States.
Google LLC is certified under the EU-U.S. Data Privacy Framework. Where required, additional appropriate safeguards such as the European Commission's Standard Contractual Clauses may also apply.
Further information:
https://policies.google.com/privacy
10. Google Ads Conversion Tracking
We use Google Ads Conversion Tracking provided by:
Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland
Conversion tracking enables us to measure whether visitors to our website perform certain actions.
In particular, conversions such as contact enquiries, appointment bookings, clicks on email addresses or telephone numbers and other interactions with our website may be measured.
This allows us to assess the effectiveness of our advertising activities.
Processing takes place only after appropriate consent on the basis of Art. 6(1)(a) GDPR and, where information is stored on or accessed from terminal equipment, in accordance with Section 165(3) TKG 2021.
Consent may be withdrawn at any time via the cookie settings.
Further information:
https://policies.google.com/privacy
11. Meta Pixel
We use the Meta Pixel on our website.
The provider for users in the European Economic Area is:
Meta Platforms Ireland Limited
Merrion Road
Dublin 4
D04 X2K5
Ireland
The Meta Pixel enables us to track the behaviour of visitors to our website after they have, for example, viewed or clicked an advertisement on Facebook or Instagram.
This enables us to measure the effectiveness of our advertisements, create target audiences and optimise our marketing activities.
In particular, information about pages viewed, interactions with our website, browser and device information, IP address and other technical identifiers may be processed.
Where Meta can associate the transmitted information with an existing Facebook or Instagram account, Meta may process this information in accordance with its own privacy terms.
The Meta Pixel is used only after you have given your consent pursuant to Art. 6(1)(a) GDPR and, where information is stored on or accessed from your terminal equipment, in accordance with Section 165(3) TKG 2021.
To the extent that we and Meta are jointly responsible for the collection and transmission of certain data, the arrangements on joint controllership pursuant to Art. 26 GDPR additionally apply.
Meta Platforms, Inc. is certified under the EU-U.S. Data Privacy Framework. Where required, additional appropriate safeguards for international data transfers may apply.
Further information:
https://www.facebook.com/privacy/policy/
12. Contact Form
We provide a contact form on our website.
If you contact us using this form, we process the data you enter. This may include in particular:
Name
Email address
Telephone number
Content of your enquiry
Data submitted through the contact form is forwarded to our internal email address and is not additionally stored in Framer as a contact enquiry.
The processing is carried out to handle and respond to your enquiry.
Where your enquiry relates to entering into or performing a contract, processing is based on Art. 6(1)(b) GDPR.
For other enquiries, processing is based on our legitimate interest in efficient communication pursuant to Art. 6(1)(f) GDPR.
13. Contact by Email or Telephone
If you contact us by email or telephone, we process the personal data you provide in order to handle your enquiry.
This may include, in particular, your name, email address, telephone number, company and the content of your message.
Processing is based on Art. 6(1)(b) GDPR where the communication relates to pre-contractual measures or the performance of a contract.
In other cases, processing is based on our legitimate interest in handling business enquiries pursuant to Art. 6(1)(f) GDPR.
14. Microsoft 365 and Outlook
We use Microsoft 365 and Microsoft Outlook for our business email communications.
Provider:
Microsoft Ireland Operations Limited
One Microsoft Place
South County Business Park
Leopardstown
Dublin 18
Ireland
If you contact us by email or through our contact form, your personal data may be processed within our Microsoft 365 infrastructure.
This may include, in particular, your name, email address, telephone number, communication content, attachments and technical communication data.
Processing is carried out to handle business communications and to conduct pre-contractual measures and contractual relationships.
The legal bases are, in particular, Art. 6(1)(b) and Art. 6(1)(f) GDPR.
Microsoft may also process data outside the European Economic Area in connection with providing its services.
Microsoft Corporation is certified under the EU-U.S. Data Privacy Framework. Appropriate safeguards such as the European Commission's Standard Contractual Clauses may additionally apply.
Further information:
https://privacy.microsoft.com/privacystatement
15. Calendly
Calendly is integrated into our website for scheduling appointments.
Provider:
Calendly LLC
115 E Main St., Suite A1B
Buford, GA 30518
USA
If you schedule an appointment through Calendly, the information you enter is processed. This includes, in particular, your name, email address, requested appointment and, where applicable, other information you provide.
We use this data to schedule and conduct the appointment you requested.
The appointment invitation is subsequently processed through our Microsoft Outlook infrastructure.
Processing is carried out for pre-contractual measures and/or the organisation of business appointments pursuant to Art. 6(1)(b) GDPR.
Where the Calendly integration on our website uses technically non-essential cookies or comparable technologies, they are used only after your consent pursuant to Art. 6(1)(a) GDPR in conjunction with Section 165(3) TKG 2021.
Calendly may process data in the United States. Calendly is certified under the EU-U.S. Data Privacy Framework. Appropriate safeguards such as Standard Contractual Clauses may additionally apply.
Further information:
16. Typeform
We use Typeform for job applications.
Provider:
TYPEFORM S.L.
Carrer Bac de Roda 163
08018 Barcelona
Spain
Typeform is not embedded directly on our website. If you select the relevant link, you leave our website and are redirected to Typeform's website.
Applicants may submit the following data through Typeform in particular:
Name
Email address
Telephone number
Application-related details and information
The processing is carried out exclusively for the purpose of handling your application and deciding whether to establish an employment relationship.
Further information:
https://admin.typeform.com/to/dwk6gt
17. Job Applications
You may apply to us via Typeform, our contact form or by email.
As part of an application, we process the data you provide to us for the purpose of conducting the recruitment process.
This may include, in particular:
Name and contact details
Email address
Telephone number
CV/resume
Education and professional information
Cover letter
Work samples
Information from job interviews
Other application documents and information voluntarily provided
Processing is carried out for the purpose of conducting the recruitment process and deciding whether to establish an employment relationship on the basis of Art. 6(1)(b) GDPR.
Where special categories of personal data within the meaning of Art. 9 GDPR are processed, this is done only where an appropriate legal basis exists.
If no employment relationship is established, we generally retain application documents only for as long as necessary to complete the recruitment process and to preserve or defend potential legal claims.
Any further inclusion in an applicant pool takes place only with appropriate consent pursuant to Art. 6(1)(a) GDPR.
Such consent may be withdrawn at any time with effect for the future.
We do not submit applicants' personal data to ChatGPT Business or comparable generative AI services for processing.
18. YouTube
YouTube videos may be embedded on our website.
Provider:
Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland
When an embedded YouTube video is loaded, a connection to Google or YouTube servers may be established. In particular, your IP address, device and browser information and information about the page visited may be transmitted.
If you are simultaneously logged into your Google or YouTube account, Google may be able to associate your use with your user account.
YouTube may use cookies and comparable technologies.
Processing is based on your consent pursuant to Art. 6(1)(a) GDPR and, where information is stored on or accessed from your terminal equipment, in accordance with Section 165(3) TKG 2021.
Further information:
https://policies.google.com/privacy
19. Google Maps
We use Google Maps on our contact page.
Provider:
Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland
Google Maps enables us to display our location and makes it easier to find us.
When the map is loaded, a connection to Google may be established. In particular, your IP address, device information, location information and other technical data may be transmitted to Google.
Google may use cookies or comparable technologies in this context.
Processing is based on your consent pursuant to Art. 6(1)(a) GDPR and, where information is stored on or accessed from your terminal equipment, in accordance with Section 165(3) TKG 2021.
Further information:
https://policies.google.com/privacy
20. Microsoft Teams
We use Microsoft Teams for online meetings and video conferences.
Provider:
Microsoft Ireland Operations Limited
One Microsoft Place
South County Business Park
Leopardstown
Dublin 18
Ireland
When participating in a Teams meeting, data such as your name, email address, IP address, device and connection information, as well as audio, video and communication data may be processed.
If content is provided during a meeting via chat, screen sharing or files, this data may also be processed.
Processing is carried out for the purpose of conducting the requested business communication and/or pre-contractual or contractual measures pursuant to Art. 6(1)(b) GDPR.
Where the use of Microsoft Teams additionally serves efficient internal and external communication, processing may be based on our legitimate interest pursuant to Art. 6(1)(f) GDPR.
Further information:
https://privacy.microsoft.com/privacystatement
21. Google Fonts and Fonts
We use fonts provided through Framer to display our website.
Under our current website setup, we do not additionally load our own externally hosted Google Fonts files into the website.
Where fonts are provided through Framer's infrastructure, the associated technical processing takes place in connection with the provision of our website.
22. Transfers to Third Countries
Some of the providers we use belong to corporate groups based outside the European Economic Area or may process personal data outside the EEA.
Personal data is transferred to a third country only where the requirements of Art. 44 et seq. GDPR are met.
Such transfers may in particular be based on an adequacy decision of the European Commission.
For appropriately certified U.S. companies, the EU-U.S. Data Privacy Framework may in particular serve as the basis for a data transfer.
Where no adequacy decision applies, the European Commission's Standard Contractual Clauses pursuant to Art. 46 GDPR and, where appropriate, additional safeguards may be used.
23. Recipients of Personal Data
As part of our business activities, personal data may be disclosed to service providers and other recipients where necessary for the respective processing purposes.
These may include, in particular, IT, hosting, communications, analytics, marketing and appointment management service providers.
Where a service provider processes personal data solely on our behalf, we enter into a data processing agreement pursuant to Art. 28 GDPR where required by law.
Personal data is otherwise disclosed only where we are legally required to do so, where disclosure is necessary for the performance of a contract, where appropriate consent has been given or where another lawful basis exists.
24. Data Security
We implement appropriate technical and organisational measures to protect personal data against loss, manipulation, unauthorised access and other unlawful processing.
Our website uses an encrypted HTTPS connection.
Please note, however, that data transmission over the internet can never be completely protected against all risks.
25. Your Rights
Subject to the applicable legal requirements, you have in particular the following rights:
Right of access pursuant to Art. 15 GDPR
Right to rectification pursuant to Art. 16 GDPR
Right to erasure pursuant to Art. 17 GDPR
Right to restriction of processing pursuant to Art. 18 GDPR
Right to data portability pursuant to Art. 20 GDPR
Right to object pursuant to Art. 21 GDPR
Right to withdraw consent pursuant to Art. 7(3) GDPR
The withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
To exercise your rights, you may contact us at:
26. Right to Lodge a Complaint
If you believe that the processing of your personal data infringes applicable data protection law, you have the right to lodge a complaint with a data protection supervisory authority.
In Austria, the competent authority is in particular:
Österreichische Datenschutzbehörde (Austrian Data Protection Authority)
Barichgasse 40–42
1030 Wien
Austria
The right to lodge a complaint is without prejudice to any other administrative or judicial remedies.
27. Objection to Direct Marketing
Where personal data is processed for direct marketing purposes, you have the right under Art. 21(2) GDPR to object at any time to the processing of your personal data for such marketing purposes.
Following such an objection, your personal data will no longer be processed for these purposes.
28. Withdrawal of Consent
You may withdraw any consent you have given at any time with effect for the future.
Consent to analytics and marketing technologies may in particular be changed or withdrawn through the cookie or privacy settings provided on our website.
Withdrawing consent must be as easy as giving consent.
29. Changes to this Privacy Policy
We reserve the right to amend this Privacy Policy if our data processing activities, the services we use or the applicable legal framework change.
The current version published on this website applies.
Last updated: August 2026
Let's scale
your brand
on social media!
Profitable Results for Leading Brands.
Let's scale
your brand
on social media!
Profitable Results for Leading Brands.