Privacy Policy (GDPR)

of
DSMK • Digital Solutions Marco Kriegner
Dr.-Scheiber-Strasse 51, 4870 Vöcklamarkt, Austria

This privacy policy covers the collection, storage, and processing of personal data that may be collected when you contact us, for example, when you visit our website, request, book, or purchase services, or call us.
If you use products from us that permit the collection, storage, and processing of personal data, the provisions for this are additionally regulated in a separate contract or agreement.
Your personal rights are our highest priority - which is why we make every effort to protect them and ensure a legally compliant approach. We process your data exclusively on the basis of legal provisions such as the GDPR (General Data Protection Regulation) or TKG (Austrian Telecommunications Act).

Purposes of Data Processing

We process personal and anonymised data for the following purposes:

• for the initiation and execution of contracts,
• for communication with prospective customers, customers, and partners,
• for the management of customer relationships and support cases,
• for the fulfilment of legal obligations,
• for the improvement of our website and marketing measures (e.g., web statistics).

Legal Basis

The storage and processing of your data is based on the following legal bases pursuant to Article 6(1) GDPR:

• lit. a (consent),
• lit. b (performance of a contract or pre-contractual measures),
• lit. c (legal obligation),
• lit. f (legitimate interests, e.g. IT security, marketing).

Collected Data

We generally only store and process data that is necessary for smooth business operations and maintenance. This concerns the following categories:

• Contact Data: Name, address, telephone number, email, position in the company
• Company Name, VAT ID Number, Bank Details
• Order Data: Offers, contracts, project documents, meeting notes

When you visit our websites, various data is stored by our hosting provider and/or by us - such as the entry page, the duration of stay, your country of origin, your language setting, and, where applicable, your IP address. We use this data for statistical purposes and to improve our marketing measures. Data stored by the hosting provider (also called log files) are not fully accessible to us.

Session Cookies upon Login

If you log in (sign in) to our websites, your email address and/or customer number used for logging in is temporarily stored in a so-called "Session Cookie." Unlike a classic cookie, this session cookie is not permanently stored on your device but is usually automatically deleted when you close the browser.
This session cookie is strictly necessary for smooth operation. If you prevent the creation of session cookies through an appropriate setting in your browser, logging in is technically not possible.

Data Transfer

Your data will only be transferred to third parties if:

• it is necessary for the performance of the contract (e.g. subcontractors, service providers),
• there is a legal obligation to do so,
• or you have given us your explicit consent.

Data will not be transferred for advertising purposes.

Storage Duration

We store your data only for as long as is necessary for the respective purposes or as required by statutory retention obligations. Your data will be deleted after the legal basis or deadline ceases to exist.

Data Processing by a Processor

When using certain products and services, the processing of personal data occurs on our behalf. In these cases, we conclude a Data Processing Agreement (DPA) in accordance with Article 28 GDPR with our customers.

Your Rights

You have the right to:

• Information about your stored data (Art. 15 GDPR),
• Rectification of inaccurate data (Art. 16 GDPR),
• Erasure (Art. 17 GDPR),
• Restriction of processing (Art. 18 GDPR),
• Data portability (Art. 20 GDPR),
• Object to certain processing (Art. 21 GDPR),
• Withdrawal of consent (Art. 7(3) GDPR),
• Lodge a complaint with the Data Protection Authority ( www.dsb.gv.at).

Security of Data Processing

We implement technical and organisational security measures to protect your data against unauthorised access, loss, or manipulation. These include, among other things, access restrictions, encryption, regular backups, and physical security of the storage media.

Contact

If you have questions about the processing of your data or wish to exercise your rights, you can reach us via the contact details provided in the Legal Note.

Date of Version: May 5, 2025