Privacy Policy

Last updated: 19 June 2026

Table of Contents

General

  • Controller
  • Data Protection Officer
  • Encryption
  • Cookies and Tracking Technologies
  • Deletion and Retention of Data
  • Data Transfers to Third Countries
  • Automated Decision-Making

Processing Activities

  • Operation and Security of the Website (Server Log Files)
  • Tag Management (Google Tag Manager)
  • Audience Measurement (Google Analytics)
  • Form Security (Captcha)
  • Contact and Enquiries (Contact Form)
  • Contract and Customer Data

Your Rights

  • Your Rights as a Data Subject
  • Right to Lodge a Complaint with the Supervisory Authority

Annex

  • Register of Legal Bases

General

Controller

The controller responsible for data processing within the meaning of Art. 4 (7) GDPR is:

DATASIX Rechenzentrums­betriebs GmbH
Registered office: Feldkirchner Straße 140, 9020 Klagenfurt
Location: Hofmühlgasse 3–5, 1060 Vienna, Austria

E-mail: data-protection@datasix.at

Data Protection Officer

You can reach our Data Protection Officer at the address stated above as well as by e-mail at:

data-protection@datasix.at

You may contact this address at any time with any questions and concerns regarding data protection as well as to exercise your rights.

Encryption

We use HTTPS to transmit data securely over the Internet, protected against eavesdropping. Through the use of TLS (Transport Layer Security), we ensure the protection of confidential data during transmission. You can recognise the use of this safeguard by the padlock symbol in your browser and by the https scheme in our web address.

Cookies and Tracking Technologies

Cookies are small text files that are exchanged between the web browser and the web server and stored on your device. We distinguish between technically necessary cookies, which are required for the operation of the website, and optional cookies (analytics, marketing), which are only set with your consent.

A complete overview of all cookies used – including provider, purpose, validity period and category – can be found in our cookie banner. There you can view, adjust and withdraw your consents at any time. You can access the cookie banner via the "Cookie Consent" link in the footer of our website.

You can also delete or disable cookies at any time in your browser settings. If you disable cookies altogether, individual functions and pages may not work as expected.

Deletion and Retention of Data

Personal data is deleted as soon as the purpose of the processing ceases to apply and no statutory retention obligations stand in the way. Retention periods under commercial and tax law amount to up to seven years depending on the type of document (Section 132 of the Austrian Federal Fiscal Code – BAO). During these periods, processing is restricted to storage in accordance with Art. 18 GDPR and the data is not processed for any other purposes.

Upon request, we will delete your data under the conditions of Art. 17 GDPR. Data required for the establishment, exercise or defence of legal claims will remain stored until the expiry of the respective periods.

Data Transfers to Third Countries

In the course of individual processing activities, personal data is transferred to recipients in countries outside the EU or the EEA (so-called third countries). The following overview shows for which services a third-country transfer may take place and on what basis it is carried out:

Google Analytics

  • Service: Google Ireland Ltd. / Google LLC

  • Provider: Ireland (transfer to the USA)

  • Transfer Basis: Adequacy decision of the EU Commission (EU-US Data Privacy Framework); additionally Standard Contractual Clauses

Google Tag Manager

  • Service: Google Ireland Ltd. / Google LLC

  • Provider: Ireland (transfer to the USA)

  • Transfer Basis: Adequacy decision of the EU Commission (EU-US Data Privacy Framework); additionally Standard Contractual Clauses

Where a transfer is carried out on the basis of an adequacy decision, the EU Commission has determined that the country concerned or the certified recipient provides an adequate level of data protection. Where Standard Contractual Clauses (SCCs) are used, these are contractual clauses approved by the EU Commission pursuant to Art. 46 (2) (c) GDPR. You can request a copy of the Standard Contractual Clauses used from us via the contact details stated above.

Automated Decision-Making

Automated decision-making, including profiling within the meaning of Art. 22 GDPR, does not take place at our company. We do not make any decisions based solely on automated processing which produce legal effects concerning you or similarly significantly affect you.

Processing Activities

Operation and Security of the Website (Server Log Files)

When you access our website, your browser automatically sends information to our server. The following data is stored in log files: IP address of the requesting computer, date and time of access, name and URL of the retrieved file, referrer URL, browser used and, where applicable, operating system, as well as status codes and the amount of data transferred.

We process this data to provide the website and its functions, to ensure a smooth connection setup, to ensure system security and stability, for anonymised statistical evaluation, to optimise the website, and for disclosure to law enforcement authorities in the event of unlawful interference with our systems.

The technical operation and hosting of the website is carried out on our behalf by a hosting provider on the basis of a data processing agreement; the servers are located in Austria.

The data is deleted or anonymised after three months, unless it is required for other purposes (e.g. defence or assertion of claims). The legal basis is our legitimate interest in the secure and stable operation of the website. [1]

Tag Management (Google Tag Manager)

We use the Google Tag Manager of Google Ireland Ltd. (Gordon House, Barrow Street, Dublin 4, Ireland; parent company: Google LLC, USA). The Tag Manager is a tool that allows us to centrally manage website tags (e.g. for integrating analytics or marketing services) via an interface.

The Google Tag Manager itself sets no cookies and does not collect any personal data for analytics or marketing purposes. It merely ensures the compliant triggering of other services (in particular depending on the consent you have given in the cookie banner). When the Tag Manager is loaded, your IP address is processed for technical reasons and transmitted to Google; in the course of this, a transfer to the USA may take place.

The legal basis for the use of the Tag Manager as a technical aid is our legitimate interest in the efficient and legally compliant management of the services used on our website. [1] For the consent-based services triggered by the Tag Manager (e.g. Google Analytics), the legal basis stated in the respective section applies. Google bases any transfer to the USA on the adequacy decision of the EU Commission (EU-US Data Privacy Framework) and, additionally, on Standard Contractual Clauses.

Audience Measurement (Google Analytics)

We use Google Analytics of Google Ireland Ltd. (Gordon House, Barrow Street, Dublin 4, Ireland; parent company: Google LLC, USA) on this website to statistically evaluate the use of our website and to improve our offering. Google Analytics uses cookies and processes, among other things, information on pages visited, access times, approximate location as well as browser and device.

To protect your privacy, we have activated IP anonymisation: your IP address is shortened or masked before any storage or further processing takes place. User data is pseudonymised.

Third-country transfer: When using Google Analytics, personal data may be transferred to the USA. Google bases this transfer on the adequacy decision of the EU Commission (EU-US Data Privacy Framework) and – additionally – on Standard Contractual Clauses. You can request a copy of these safeguards from us.

Legal basis: The use of Google Analytics and the setting of the associated cookies take place on the basis of your consent pursuant to Art. 6 (1) (a) GDPR in conjunction with Section 165 (3) of the Austrian Telecommunications Act 2021 (TKG 2021). [3] You can withdraw your consent at any time with effect for the future via our cookie banner; the lawfulness of the processing carried out until the withdrawal remains unaffected.

Retention period: The user-related data collected in Google Analytics is automatically deleted after a maximum of 14 months.

Objection/deactivation: You can additionally prevent collection by Google Analytics by installing the browser add-on available at https://tools.google.com/dlpage/gaoptout?hl=de. Further information on the terms of use and data protection can be found at https://support.google.com/analytics/answer/6004245.

Form Security (Captcha)

To ensure that forms on our website are used by natural persons and not by automated processes, we use Captcha of Captcha GmbH (Muthgasse 2, 1190 Vienna, Austria), which acts as a processor on our behalf.

When a protected form is accessed, Captcha processes the IP address of your computer in anonymised form, the browser used and, where applicable, the operating system, the accessing website, a cryptographic task, the software version used, the date and time of access, and the referrer URL. The cryptographic task is solved by your device without any input from you. An anonymised counter is stored for each IP address in order to control the complexity of the tasks; identification of individual users is not possible in this process, as the IP addresses are anonymised using a hash.

The legal basis is our legitimate interest in the security of our website and the detection of bot activity. [1] Captcha processes the data exclusively within the EU; no third-country transfer takes place.

Contact and Enquiries (Contact Form)

If you use our contact form or other means of communication (e-mail, telephone, fax), we process your name, your e-mail address, the category and content of your enquiry and, where applicable, further contact details voluntarily provided by you, in order to handle your request and to get in touch with you.

The legal basis is the performance of a contract or the implementation of pre-contractual measures, insofar as your enquiry is related thereto. In all other cases, we process your data on the basis of your consent or our legitimate interest in the effective handling of enquiries addressed to us. [5]

The data collected in connection with the contact will be deleted as soon as your enquiry has been conclusively dealt with and no further grounds for retention exist (e.g. subsequent conclusion of a contract, defence against claims).

The provision of your name and contact details is necessary for us to process your enquiry. Without this information, we cannot contact you. Any further information is voluntary.

Contract and Customer Data

Personal data that you transmit to us electronically (e.g. name, e-mail address, postal address or other information provided in a form) is stored by us together with the time and the IP address in order to respond to your enquiries, to communicate with you and to process the services and products offered.

The legal basis is the performance of the contract with you as well as our legitimate interest in purpose-bound communication and contract processing. [2] Data is only disclosed to third parties insofar as this is necessary for the fulfilment of pre-contractual or contractual obligations (e.g. to banks, payment service providers and credit card companies for payment processing), is necessary to safeguard our legitimate interests (e.g. assertion of or defence against claims), or a legal obligation exists.

We store contract and customer data for the duration of the business relationship. After its end, the data is deleted as soon as it is no longer required and no statutory retention obligations (in particular retention periods under commercial and tax law of up to seven years) stand in the way.

The provision of the data required for the performance of the contract is necessary; without this data, we cannot conclude the contract or provide our services.

Your Rights

Your Rights as a Data Subject

You have the following rights with regard to your personal data:

  • Access to your stored data (Art. 15 GDPR)
  • Rectification of inaccurate or incomplete data (Art. 16 GDPR)
  • Erasure of your data (Art. 17 GDPR)
  • Restriction of processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)
  • Objection to processing (Art. 21 GDPR)
  • Withdrawal of consents given, with effect for the future (Art. 7 (3) GDPR). The withdrawal does not affect the lawfulness of the processing carried out up to that point.
  • Complaint to a supervisory authority (Art. 77 GDPR)

To exercise your rights, please contact us or our Data Protection Officer using the contact details stated above (data-protection@datasix.at). Cookie-related consents can additionally be withdrawn via the cookie settings.

Right to Lodge a Complaint with the Supervisory Authority

You have the right to lodge a complaint with a data protection supervisory authority – in particular in the Member State of your habitual residence, your place of work or the place of the alleged infringement. The supervisory authority responsible for us is:

Austrian Data Protection Authority (Österreichische Datenschutzbehörde), Barichgasse 40–42, 1030 Vienna, Austria, www.dsb.gv.at

Annex

Register of Legal Bases

The short references [1]–[5] used in this Privacy Policy refer to the following legal bases of the GDPR:

No. Legal Basis Provision Use Cases
[1] Legitimate interest Art. 6 (1) (f) GDPR Server log files, Google Tag Manager (technical use), Captcha
[2] Performance of a contract and legitimate interest Art. 6 (1) (b) and (f) GDPR Contract and customer data
[3] Consent Art. 6 (1) (a) GDPR in conjunction with Section 165 (3) TKG 2021 Google Analytics
[5] Performance of a contract, consent or legitimate interest Art. 6 (1) (b), (a) or (f) GDPR Contact and enquiries