Legal Notice

Privacy Policy

for website users and customers of Solutionsinflow GmbH

The following information serves to clarify the nature, scope and purpose of the collection and use of personal data and also informs you of your rights in the collection and processing of your personal data. This information is provided in accordance with Articles 13 and 14 of the General Data Protection Regulation (GDPR).

This privacy policy applies to (i) users of the website solutionsinflow.com and (ii) customers of SolutionsInflow GmbH.

1. Who is responsible for data processing and who can you contact with questions?

The data controller is:

2. What data is processed and where does it come from?

We process your data in different ways and for different purposes, depending on whether you are (i) a website user or (ii) a customer.

If you are a website user:

When using the website (even without registration), cookies are used. Please refer to section 6) for more information.

If you are a customer:

When you book our services, your personal data will be processed. This includes first name, last name, email address, phone number, billing address and bank details.

3. On what legal basis and for what purposes is the data processed?

If you are a website user:

We process your personal data

(1) based on your consent (Article 6(1)(a) GDPR): tracking of user behavior on the website (for more information about cookies, please refer to section 6). You have the right to withdraw this consent at any time. The lawfulness of the processing carried out up to that point will not be affected.

(2) for the performance of (pre-)contractual obligations (Article 6(1)(b) GDPR): We process the personal data collected from you for the purpose of establishing contact or written, electronic or telephone correspondence, including in the context of (pre-)contractual relationships.

Without this data, we cannot fulfill the contract with you.

(3) for compliance with legal obligations (Article 6(1)(c) GDPR): The processing of personal data also takes place for the purpose of fulfilling various statutory obligations, such as our statutory obligation under § 96(3) TKG and for the purpose of providing information to law enforcement authorities and courts in relevant cases.

(4) based on legitimate interests, insofar as in the context of a balancing of interests your right to the confidentiality of this data does not outweigh our interest in processing it (Article 6(1)(f) GDPR). Our legitimate interests lie in being able to process and respond to your inquiries, initiate business contacts, ensure the security of website operations, improve and analyze our web presence and enhance user-friendliness. You may object to the processing of personal data for advertising purposes at any time.

If you are a customer:

We process your personal data

(1) for the performance of (pre-)contractual obligations (Article 6(1)(b) GDPR), in particular for the fulfillment of our (pre-)contractual obligations within the framework of the contractual relationship, such as the performance of (pre-)contractual protection, care and disclosure obligations, the provision of services and the handling of claims arising from the contract, invoicing, etc.

Without this data, we cannot fulfill the contract with you.

(2) for compliance with legal obligations (Article 6(1)(c) GDPR) on the basis of the contractual relationship: The processing of personal data also serves to fulfill various statutory obligations, such as the obligation to maintain proper accounting records or for the purpose of providing information to law enforcement authorities and courts in relevant cases.

(3) for the protection of legitimate interests (Article 6(1)(f) GDPR): We process personal data to protect our legitimate interests, insofar as these do not outweigh your interests in confidentiality. These legitimate interests include the interest in optimizing our services, the interest in sending you advertising about our products and services, contacting you regarding the initiation or processing of further contractual relationships and the interest in the availability of data in the event of a legal dispute. You may object to the processing of personal data for advertising purposes at any time.

4. To whom is your data disclosed?

The transfer of data relevant in each case takes place on the basis of legal provisions or contractual agreement and - to the extent necessary - for the processing of contracts to the following parties, among others:

If you are a website user:

• Courts and law enforcement authorities;
• Legal representatives/lawyers and third parties involved in legal services.

If you are a customer:

• Banks;
• Tax advisors and accounting;
• Legal representatives in business cases;
• Auditors;
• Courts;
• Administrative authorities;
• Contributing contractual and business partners;
• Insurance companies in relevant cases;
• IT service providers.

If the above-mentioned recipients of your personal data are located outside the EEA and for the country concerned it has not been determined by decision of the EU Commission that it has an adequate level of data protection, we will ensure that the transfer takes place on the basis of standard contractual clauses (currently 2010/87/EC and/or 2004/915/EC) or otherwise in accordance with Articles 46, 47 or 49 GDPR.

5. How long is your data processed and stored?

We process your personal data for as long as this is necessary. Once your data is no longer required, it will be anonymized or automatically deleted.

We store the personal data necessary for the fulfillment of the contract for the entire duration of the business relationship and beyond in accordance with statutory retention and documentation obligations (e.g. under the Austrian Commercial Code or the Federal Tax Code). Furthermore, we take into account statutory limitation periods, which under the Austrian Civil Code (ABGB) can be up to 30 years in certain cases.

6. Data processing in connection with the use of the website

Cookies

Our website uses so-called cookies, provided you have given your consent to this (Article 6(1)(a) GDPR). These are small text files that are temporarily stored on your device with the help of the browser and which your browser saves. They cause no harm, but make the use of the website more user-friendly. Some cookies remain stored on your device until you delete them. They enable us to recognize your browser on your next visit. If you do not wish this, you can set up your browser so that it informs you about the setting of cookies and you only allow this in individual cases. If cookies are deactivated, the functionality of our website may be restricted.

Social Media Buttons

Our website includes buttons for Facebook and Instagram to support sharing or liking content on social networks. These buttons use code provided by Facebook and Instagram themselves. This code places cookies. These social media buttons can also store and process certain information so that personalized advertising can be displayed to you.

By clicking the button, you give your consent (Article 6(1)(a) GDPR) to the processing of data by the social media service. This data may also be processed by the social media service in countries outside the European Union. For more information on data protection, see Facebook here and Instagram here.

Web Analysis with Umami Analytics

On our website, we use Umami Analytics, a privacy-friendly open-source analytics tool for evaluating website usage. The legal basis for this processing is our legitimate interest (Article 6(1)(f) GDPR) in the statistical analysis of user behavior for optimization purposes.

Important: Umami Analytics is completely anonymous and cookie-free.

Unlike conventional analytics tools such as Google Analytics, Umami Analytics does not collect personal data and does not use cookies. The data collected is completely anonymized and cannot be used to identify or track individual users.

What data is collected?

Umami Analytics collects only anonymous usage data:

• Pages visited (URLs)
• Referrer (which site you came from)
• Browser type and version
• Operating system
• Device type (Desktop, Tablet, Mobile)
• Country (based on anonymized IP address)
• Language setting
• Screen resolution

What is NOT collected?

• No IP addresses are stored
• No cookies are set
• No personal data
• No data across websites (no cross-site tracking)
• No unique user identifiers

For more information about Umami Analytics and its privacy practices, visit: https://umami.is/docs/privacy

7. What rights do you have?

Right to Information

If we process personal data about you, you have the right to information about the purposes of processing, the categories of personal data processed, the recipients of this personal data, the storage period, the rights available to you, the origin of the personal data and the existence of automated decision-making.

Rectification and Erasure

You are entitled to request the rectification of incorrect or incomplete personal data concerning you. You are entitled to request the deletion of personal data concerning you, provided that the processing of the data is not lawful and there are no legal obligations on our part that prevent deletion.

Restriction of Processing

You are entitled in certain cases to request the restriction of the processing of your data.

Data Portability

You are entitled to request the transfer of your data that you have provided to us in a structured, commonly used and machine-readable format. You have the right to have the personal data transmitted by us directly to another controller, insofar as this is technically feasible.

Right to Object

You are entitled at any time, on grounds relating to your particular situation, to object to the processing of personal data concerning you. If you object, we will no longer process personal data concerning you unless we can demonstrate that our reasons for the processing outweigh your interests.

Complaint

If you believe that the processing of your data violates data protection law or that your data protection rights have otherwise been violated, you can lodge a complaint with the supervisory authority. In Austria, this is the data protection authority (Datenschutzbehörde) (www.dsb.gv.at).

Contact

To exercise your rights with regard to your data processed by us, please contact

Definitions

Definitions of the terms used (e.g. "personal data" or "processing") can be found in Article 4 GDPR.

Terms and Conditions (AGBs)

Terms and Conditions (AGBs)