Information on the processing of personal data pursuant to Articles 13 & 14 GDPR.
If a data protection officer is appointed, their contact details will be published here.
We process personal data to provide and optimize this website, to respond to inquiries, and to meet legal obligations.
When you access our pages, your browser automatically transmits data to our server (e.g., IP address, date/time, URL, referrer, user agent). Processing is carried out for technical provision, stability, and IT security.
When integrating external content (e.g., fonts, maps, videos), the IP address may be transmitted to third-party providers. We use data-minimizing integrations where possible.
Legal basis: Art. 6(1)(a) GDPR (consent) or Art. 6(1)(f) GDPR.
We use cookies or comparable technologies to provide essential functions and—after consent—for statistics/analytics.
Open cookie settings (if a consent tool is active).
The collection of non-essential data takes place only after your consent via the consent banner. You can withdraw or change your selection at any time.
Legal basis: Art. 6(1)(a) GDPR in conjunction with Section 165(3) TKG (AT).
When you contact us, we process your details to handle your request.
Submitted application data are processed solely for the purpose of handling the application process.
Legal basis: Section 26 DSG (AT) and/or Art. 6(1)(b) GDPR.
Storage period: generally 6 months after completion of the process (longer retention only with consent).
Our website uses the WordPress plugin WP Statistics to analyze visitor traffic. All data collected are stored exclusively on our own web server and are not shared with third parties.
WP Statistics records, among other things:
To protect your privacy, IP addresses are shortened and hashed so that no personal reference remains. The plugin uses no cookies.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in statistical analysis and improvement of our website).
Storage period: Anonymized statistical data are deleted on a regular basis once no longer required for evaluation.
Where services from providers outside the EU/EEA are used, transfers occur only if the requirements of Articles 44 et seq. GDPR are met (e.g., EU Standard Contractual Clauses) and—where necessary—after your consent.
We use carefully selected service providers (IT/hosting/support) as processors. Data processing agreements pursuant to Art. 28 GDPR are in place with all of them.
Data are stored only as long as required for the purpose or where statutory obligations exist (e.g., corporate/tax law).
We implement technical and organizational measures pursuant to Art. 32 GDPR (including access controls, encryption, backup concepts) to ensure a level of security appropriate to the risk.
You have the right to obtain information about your processed data (Art. 15) and to have inaccurate data corrected (Art. 16).
You may request erasure (Art. 17) or restriction of processing (Art. 18), unless statutory obligations prevent this.
You may object to processing on grounds relating to your particular situation (Art. 21). Consent given can be withdrawn at any time with effect for the future (Art. 7(3)).
You have the right to receive data you have provided in a structured, commonly used and machine-readable format (Art. 20).
You may lodge a complaint with a supervisory authority. In Austria, this is the Austrian Data Protection Authority, Barichgasse 40–42, 1030 Vienna.
Please contact info@veraut.at to exercise your rights. Please provide clear identification so we can process requests securely.
We update this privacy policy as needed, e.g., when introducing new features, due to legal requirements, or changes to services used. The published version shall apply.
As of: