Privacy Policy

We are pleased that you are interested in our website. Protecting your privacy is very important to us. Below, we provide detailed information about how we handle your data. Your data is processed on the basis of the GDPR and in accordance with Section 165(3) of the Austrian Telecommunications Act (TKG).

1. Access Data and Hosting

You can visit our websites without providing any personal information. Whenever a website is accessed, the web server automatically stores a so-called server log file, which documents the access and contains access data such as the name of the requested file, your IP address, the date and time of access, the amount of data transferred, and the requesting internet service provider.

This access data is evaluated solely to ensure the trouble-free operation of the website and to improve our online presence. In accordance with Article 6(1)(f) GDPR, this serves to protect our legitimate interests, which prevail following a balancing of interests, in ensuring that our online presence is displayed correctly. All access data is processed only for as long as necessary to achieve the processing purposes stated above.

1.1 Hosting

Hosting and display services for the website are provided in part by our service providers acting as processors on our behalf. Unless otherwise explained in this Privacy Policy, all access data and all data collected through the forms provided on this website are processed on their servers. If you have questions about our service providers or the basis of our cooperation with them, please contact us using the contact details provided in this Privacy Policy.

Our service providers are based in and/or use servers in the following countries, for which the European Commission has adopted an adequacy decision establishing an adequate level of data protection: the United States.

The adequacy decision for the United States serves as the basis for transfers to third countries where the relevant service provider is certified. Service providers used by us in the United States are generally certified under the EU-U.S. Data Privacy Framework (DPF). If a service provider is not certified under the DPF, Standard Contractual Clauses have been concluded as an appropriate safeguard.

1.2 Content Delivery Network

To reduce loading times, we use a so-called Content Delivery Network ("CDN") for some of our services. With this service, content such as large media files is delivered through regionally distributed servers operated by external CDN providers. As a result, access data is processed on the providers' servers. Our providers act as processors on our behalf. If you have questions about our providers or the basis of our cooperation with them, please contact us using the contact details provided in this Privacy Policy.

Our service providers are based in and/or use servers in the following countries, for which the European Commission has adopted an adequacy decision establishing an adequate level of data protection: the United States.

The adequacy decision for the United States serves as the basis for transfers to third countries where the relevant service provider is certified. Service providers used by us in the United States are generally certified under the EU-U.S. Data Privacy Framework (DPF). If a service provider is not certified under the DPF, Standard Contractual Clauses have been concluded as an appropriate safeguard.

2. Data Processing for Contact and Customer Communications

We collect personal data when you voluntarily provide it to us when contacting us (for example, via a contact form or email). Mandatory fields are marked as such because we need the information in order to process your enquiry; without it, you will not be able to submit your message. The information collected is shown in the relevant input forms. We use the data you provide to process your enquiries in accordance with Article 6(1)(b) GDPR.

Once your enquiry has been fully dealt with, your data will be restricted from further processing and deleted after the statutory retention periods under tax and commercial law have expired, in accordance with Article 6(1)(c) GDPR, unless you have expressly consented to further use of your data under Article 6(1)(a) GDPR or we reserve the right to use the data in another way permitted by law, as explained in this statement.

Live chat tool: WhatsApp

For customer communication, we use the live chat tool provided by WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("WhatsApp"). This serves to protect our legitimate interests, which prevail following a balancing of interests, in effective and improved customer communication, in accordance with Article 6(1)(f) GDPR. WhatsApp acts on our behalf. The telephone numbers stored by us on our mobile device are automatically processed on the servers of Meta companies, headquartered at 1601 Willow Road, Menlo Park, California 94025, USA. Only telephone numbers of customers who have previously contacted us via WhatsApp and have therefore already accepted WhatsApp's terms of use and privacy policy are stored in this way.

Our service providers are based in and/or use servers in the following countries, for which the European Commission has adopted an adequacy decision establishing an adequate level of data protection: the United States, Israel, and the United Kingdom.

The adequacy decision for the United States serves as the basis for transfers to third countries where the relevant service provider is certified. Certification is in place.

Our service providers are based in and/or use servers in Singapore. The European Commission has not adopted an adequacy decision for this country. Our cooperation relies on the following safeguards: the European Commission's Standard Contractual Clauses.

3. Cookies and Other Technologies

3.1 General Information

We use cookies on various pages to make visits to our website more attractive, enable the use of certain functions, display suitable products, or conduct market research. This serves to protect our legitimate interests, which prevail following a balancing of interests, in optimising the presentation of our services, in accordance with Article 6(1)(f) GDPR and the statutory provisions of Section 96(3) TKG. Cookies are small text files that are automatically stored on your device. Some cookies we use are deleted at the end of your browser session, i.e. when you close your browser (so-called session cookies). Other cookies remain on your device and allow us to recognise your browser on your next visit (persistent cookies). You can find the storage duration in the overview in your web browser's cookie settings. You can configure your browser to notify you when cookies are set and to let you decide individually whether to accept them, or to reject cookies in certain cases or altogether.

(Detailed information about your browser's available settings is provided below.) If you do not accept cookies, the functionality of our website may be limited. Below you will find information about the cookies we use and the settings available in your browser.

Privacy on End Devices

When you use our online services, we use technologies that are strictly necessary to provide the telemedia service you have expressly requested. The storage of information on your device, or access to information already stored on your device, does not require consent to this extent.

For functions that are not strictly necessary, your consent is required to store information on your device or access information already stored on it. Please note that if you do not give consent, parts of the website may not be fully usable. Any consent you have given remains in effect until you change or reset the relevant settings on your device.

Any Subsequent Data Processing by Cookies and Other Technologies

We use technologies that are strictly necessary for certain website functions (for example, the shopping cart function). These technologies collect and process your IP address, the time of your visit, device and browser information, and information about how you use our website (for example, information about the contents of your shopping cart). This serves our legitimate interests, which prevail following a balancing of interests, in optimising the presentation of our services, in accordance with Article 6(1)(f) GDPR.

We also use technologies to fulfil our legal obligations (for example, to document consent to the processing of your personal data), as well as for web analytics and online marketing. Further information, including the respective legal basis for data processing, can be found in the following sections of this Privacy Policy.

If you have consented to the use of technologies under Article 6(1)(a) GDPR, you may withdraw your consent at any time by sending a message using the contact details provided in this Privacy Policy. Alternatively, you can visit the following link: https://www.b4cconsulting.com/cookie-einstellungen/. If you do not accept cookies, the functionality of our website may be limited.

Each browser manages cookie settings differently. The help menu in each browser explains how to change your cookie settings. Instructions for the respective browsers are available at the following links:

Microsoft Edge™ / Safari™ / Chrome™ / Firefox™ / Opera™

What Types of Cookies Are Used?

Analytics / Performance Cookies

These cookies allow us to collect anonymised data about our visitors' usage behaviour. We evaluate this data, for example, to improve website functionality and display interesting offers to you.

Functional Cookies

These cookies are used for specific website functions, for example to suggest improved navigation through our website or to show you personalised and relevant information (such as interest-based advertisements).

Targeting Cookies

These cookies record your visit to our website, the pages you have visited, and the links you have followed. We use this information to tailor our website and the advertisements you see to your interests.

Necessary Cookies

These cookies are required for our website to operate. They include, for example, cookies that allow you to log in to the customer area or add something to a shopping cart.

Third-Party Cookies

Some of our advertising partners' cookies help make our online services and website more interesting to you. As a result, cookies from partner companies are also stored on your hard drive when you visit our website. These are temporary cookies that are automatically deleted after a specified period. Cookies from partner companies are generally deleted after a few days or within up to 24 months, and in individual cases after several years. Our partners' cookies do not generally contain personal data. Instead, data is collected under a pseudonymous user ID. This pseudonymous data is never combined with your personal data.

4. Use of Cookies and Other Technologies

We use the following cookies and other third-party technologies on our website. Unless otherwise stated for an individual technology, this is based on your consent under Article 6(1)(a) GDPR. Once the purpose has ceased and we have stopped using the relevant technology, the data collected in this context will be deleted. You may withdraw your consent at any time with future effect. Further information about how to withdraw consent can be found in the section "Cookies and Other Technologies". Further information, including the basis of our cooperation with each provider, is provided under the individual technologies. If you have questions about the providers or the basis of our cooperation with them, please contact us using the contact details provided in this Privacy Policy.

Use of Google Services

We use the technologies described below from Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Information automatically collected by Google technologies about your use of our website is generally transferred to and stored on a server operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Unless otherwise stated for an individual technology, data processing is based on an agreement between joint controllers concluded for the relevant technology in accordance with Article 26 GDPR. Further information about Google's data processing can be found in Google's Privacy Policy.

Our service providers are based in and/or use servers in countries outside the EU and EEA for which the European Commission has adopted an adequacy decision establishing an adequate level of data protection.

Our service providers are based in and/or use servers in countries outside the EU and EEA for which the European Commission has not adopted an adequacy decision. Our cooperation with them is based on the European Commission's Standard Contractual Clauses.

Google Maps

To display geographical information visually, Google Maps collects data about your use of its Maps functions, in particular your IP address and location data, transmits it to Google, and then processes it. We have no influence over this subsequent data processing.

5. Integration of Third-Party Content

If you have given your consent under Article 6(1)(a) GDPR, we use the following third-party services on our website. The embedded content (for example, image, audio, or video content) is obtained directly from the relevant provider's server. Processing your IP address is necessary to load the page and enable communication between the third-party server and your browser so that the third-party content can be displayed on our website. Other data may also be transmitted, over which we have no control.

You may withdraw your consent at any time with future effect. Further information about withdrawing consent and the use of cookies and other technologies is available at: https://www.b4cconsulting.com/cookie-einstellungen/. Further information, including the basis of our cooperation with individual providers, is given in the following sections. If you have questions about the providers, please contact us using the contact details provided in this Privacy Policy or contact the relevant third-party provider.

Instagram Post (by Meta)

Our website uses public posts from Instagram ("Instagram Post"), a service offered by Meta Platforms Ireland Limited, Block J, Serpentine Avenue, Dublin 4, Ireland ("Instagram (by Meta)").

Instagram posts are integrated into our website as HTML links. An overview of Facebook plugins can be found here: https://developers.facebook.com/docs/features-reference/oembed-read and https://developers.facebook.com/docs/instagram/oembed.

Simply visiting our website does not establish a connection to Instagram's servers. If you click the button on an Instagram post, the Instagram website opens and redirects you to the relevant post.

We are not responsible for the processing of your data by Instagram (by Meta).

Our service providers are based in and/or use servers in the following countries, for which the European Commission has adopted an adequacy decision establishing an adequate level of data protection: the United States, Canada, Japan, South Korea, New Zealand, the United Kingdom, and Argentina.

The adequacy decision for the United States serves as the basis for transfers to third countries where the relevant service provider is certified. Certification is in place.

Our service providers are based in and/or use servers in the following countries: Australia, Hong Kong, India, Indonesia, Malaysia, Singapore, Thailand, Taiwan, Brazil, and Mexico. The European Commission has not adopted an adequacy decision for these countries. Our cooperation relies on the following safeguards: the European Commission's Standard Contractual Clauses.

6. Social Media

Our Online Presence on Facebook (by Meta), Instagram (by Meta), LinkedIn, and Xing

If you have given the relevant social media operator your consent under Article 6(1)(a) GDPR, when you visit our online presences on the social media platforms listed above, your data is automatically collected and stored for market research and advertising purposes. Usage profiles are created from this data using pseudonyms. These profiles may be used, for example, to display advertisements within and outside the platforms that are presumed to match your interests. Cookies are generally used for this purpose. For detailed information about how each social media operator processes and uses data, as well as contact options, your related rights, and settings for protecting your privacy, please consult the providers' privacy notices linked below. If you still need help with this, you can contact us.

Facebook (by Meta) is a service offered by Meta Platforms Ireland Ltd., Block J, Serpentine Avenue, Dublin 4, Ireland ("Meta Platforms Ireland"). Information automatically collected by Meta Platforms Ireland about your use of our Facebook (by Meta) online presence is generally transferred to and stored on a server operated by Meta Platforms, Inc., 1601 Willow Road, Menlo Park, California 94025, USA. Data processing when visiting a Facebook (by Meta) fan page is based on an agreement between joint controllers under Article 26 GDPR. Further information (including information about Insights data) is available here.

Our service providers are based in and/or use servers in the following countries, for which the European Commission has adopted an adequacy decision establishing an adequate level of data protection: the United States, Canada, Japan, South Korea, New Zealand, the United Kingdom, and Argentina.

The adequacy decision for the United States serves as the basis for transfers to third countries where the relevant service provider is certified. Certification is in place.

Our service providers are based in and/or use servers in the following countries: Australia, Hong Kong, India, Indonesia, Malaysia, Singapore, Thailand, Taiwan, Brazil, and Mexico.

The European Commission has not adopted an adequacy decision for these countries. Our cooperation relies on the following safeguards: the European Commission's Standard Contractual Clauses.

Instagram (by Meta) is a service offered by Meta Platforms Ireland Ltd., Block J, Serpentine Avenue, Dublin 4, Ireland ("Meta Platforms Ireland"). Information automatically collected by Meta Platforms Ireland about your use of our Instagram online presence is generally transferred to and stored on a server operated by Meta Platforms, Inc., 1601 Willow Road, Menlo Park, California 94025, USA. Data processing when visiting an Instagram (by Meta) fan page is based on an agreement between joint controllers under Article 26 GDPR. Further information (including information about Insights data) is available here.

Our service providers are based in and/or use servers in the following countries, for which the European Commission has adopted an adequacy decision establishing an adequate level of data protection: the United States, Canada, Japan, South Korea, New Zealand, the United Kingdom, and Argentina.

The adequacy decision for the United States serves as the basis for transfers to third countries where the relevant service provider is certified. Certification is in place.

Our service providers are based in and/or use servers in the following countries: Australia, Hong Kong, India, Indonesia, Malaysia, Singapore, Thailand, Taiwan, Brazil, and Mexico.

The European Commission has not adopted an adequacy decision for these countries. Our cooperation relies on the following safeguards: the European Commission's Standard Contractual Clauses.

LinkedIn is a service offered by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland ("LinkedIn"). Information automatically collected by LinkedIn about your use of our LinkedIn online presence is generally transferred to and stored on a server operated by LinkedIn Corporation, 1000 W. Maude Avenue, Sunnyvale, CA 94085, USA.

Our service providers are based in and/or use servers in the following countries, for which the European Commission has adopted an adequacy decision establishing an adequate level of data protection: the United States.

The adequacy decision for the United States serves as the basis for transfers to third countries where the relevant service provider is certified. Until our service providers have been certified, data transfers continue to rely on the following safeguard: the European Commission's Standard Contractual Clauses.

Xing is a service offered by New Work SE, Am Strandkai 1, 20457 Hamburg, Germany.

7. Contact Details and Your Rights

7.1 Your Rights

As a data subject, you have the following rights:

  • Under Article 15 GDPR, the right to request access to your personal data processed by us, within the scope specified there;
  • Under Article 16 GDPR, the right to request without undue delay the rectification of inaccurate personal data or completion of personal data stored by us;
  • Under Article 17 GDPR, the right to request the erasure of your personal data stored by us, unless further processing is necessary:
    • to exercise the right to freedom of expression and information;
    • to comply with a legal obligation;
    • for reasons of public interest; or
    • to establish, exercise, or defend legal claims;
  • Under Article 18 GDPR, the right to request restriction of processing of your personal data where:
    • you contest the accuracy of the data;
    • the processing is unlawful but you oppose erasure;
    • we no longer need the data, but you need it to establish, exercise, or defend legal claims; or
    • you have objected to processing under Article 21 GDPR;
  • Under Article 20 GDPR, the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format, or to request that it be transmitted to another controller;
  • Under Article 77 GDPR, the right to lodge a complaint with a supervisory authority. As a rule, you may contact the supervisory authority in your usual place of residence, your place of work, or the location of our company's registered office.

Right to Object

Where we process personal data as explained above to protect our legitimate interests, which prevail following a balancing of interests, you may object to this processing with effect for the future. If the processing is for direct marketing purposes, you may exercise this right at any time as described above. If processing is for other purposes, you may object only on grounds relating to your particular situation.

After you exercise your right to object, we will no longer process your personal data for these purposes unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves to establish, exercise, or defend legal claims.

This does not apply where processing is carried out for direct marketing purposes. In that case, we will no longer process your personal data for that purpose.

7.2 Contact Details

If you have questions about the collection, processing, or use of your personal data, or if you wish to request access, rectification, restriction, or erasure of data, withdraw consent you have given, or object to a particular use of your data, please contact us directly using the contact details in our legal notice (Imprint).

Data Protection Officer

Dr. Daniel Stanonik
Salztorgasse 2/15
1010 Vienna

019043355
office@stanonik.at