Privacy policy

Who is responsible

Controller

Längle Digital GmbH, Waldfriedgasse 4, 6800 Feldkirch, Austria

Contact

[email protected]

Data protection officer

None appointed; the law does not require one for us

Which data we process

• Technical data when you open a page: IP address, date and time, the page requested, browser and operating system.
• Visit counts from Cloudflare Web Analytics: which pages are opened, how often, from which country and which kind of device. No cookies, and your IP address is not stored.
• What you send through the contact form: name, work e-mail address, company, your topic, the options you ticked and your note.
• Only if you agree in the cookie banner: data from Google Analytics and HubSpot tracking, such as the pages you open, when and how often you visit, your browser and device, and an identifier stored in a cookie.
• What you write to us by e-mail.
• If we work together: company, contact person, business address, VAT number, contract and invoice data.

Why, and on what legal basis

Steps before a contract and the contract itself (Art. 6(1)(b) GDPR). We use your enquiry to answer you and arrange a call, and your company details to carry out our work. Without them we can't answer you or work with you.

Legal obligation (Art. 6(1)(c) GDPR). We keep invoices and business records because tax and company law require it (§ 132 BAO, § 212 UGB).

Legitimate interest (Art. 6(1)(f) GDPR). We process technical data to deliver the website and keep it secure, count visits without cookies to see which pages help, protect the contact form against spam, and answer general enquiries that are not about a contract.

Consent (Art. 6(1)(a) GDPR, § 165(3) TKG 2021). We use statistics (Google Analytics) and marketing (HubSpot) only if you agree in the cookie banner. You can withdraw your consent at any time under “Cookie settings” in the footer, with effect for the future. We send no newsletter.

Cookies, consent and fonts

On your first visit a banner asks whether you allow two optional groups: statistics and marketing. Neither is loaded unless you agree. “Only necessary” and “Accept all” are equal choices, and the website works either way.

Your choice is stored in your browser's local storage under the name “ld-consent”: which groups you allowed, the date and time of your choice, and the version of the banner. This is not a cookie and is not sent to us. It is needed to remember your choice, so it needs no consent (§ 165(3) TKG 2021). It stays until you delete your browser data; if we change the banner, we ask again.

Statistics: Google Analytics through Google Tag Manager. Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Purpose: to count visits and see which pages help. Google Analytics sets the cookies _ga, which tells visitors apart, and _ga_ followed by an ID, which keeps the state of a visit; both last up to two years. Google Tag Manager loads only once you allow statistics; by Google's own statement it keeps no information about visitors.

Marketing: HubSpot tracking. Provider: HubSpot Ireland Limited, 1 Sir John Rogerson's Quay, Dublin 2, Ireland. Purpose: to recognise returning visitors and measure which campaigns bring visits and enquiries. HubSpot sets the cookies __hstc and hubspotutk, which recognise a returning visitor (six months), __hssc, which counts the pages of one visit (30 minutes), and __hssrc, which notes a new browser session (until you close the browser).

Both are used only with your consent (Art. 6(1)(a) GDPR, § 165(3) TKG 2021). You can change or withdraw your consent at any time under “Cookie settings” in the footer, with effect for the future. Cookies already set stay until they expire or you delete them in your browser.

Our fonts are served from our own domain, so your browser does not connect to Google or any other font service.

Statistics and spam protection

Whatever you choose in the banner, we count visits with Cloudflare Web Analytics. It sets no cookies, stores nothing on your device and does not store your IP address; we only see totals per page, country and device type.

The contact form is protected against spam by Cloudflare Turnstile. It checks, without cookies, whether a person is sending the form, using technical data from your browser. Both run on our legitimate interest (Art. 6(1)(f) GDPR) in a useful website and a form free of spam.

How long we keep data

• Technical access data: deleted by the host after a short period.
• Visit counts: kept by Cloudflare only as totals.
• Your cookie choice: in your browser until you delete it.
• Cookies from Google Analytics and HubSpot: for the periods under “Cookies, consent and fonts”, or until you delete them.
• Enquiries that lead to no contract: deleted six months after our last contact.
• Contract and invoice data: seven years (§ 132 BAO), or longer while a legal claim is open.

Who receives your data

Hosting, statistics and spam protection

Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA

Contact form

Sent through Brevo GmbH, Köpenicker Str. 126, 10179 Berlin, Germany, to our mailbox at Google Workspace

E-mail

Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland

Statistics (only with your consent)

Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland

Marketing (only with your consent)

HubSpot Ireland Limited, 1 Sir John Rogerson's Quay, Dublin 2, Ireland

We use processors who act on our instructions under data processing agreements. We don't sell or pass on your data for anyone else's advertising.

Transfers outside the EU

Some of your data may also be processed outside the EU and EEA, in the United States, by Cloudflare, Google and HubSpot and their sub-processors. The adequate level of protection comes from an adequacy decision of the European Commission under Art. 45 GDPR (the EU-US Data Privacy Framework), under which all three are certified.

Automated decisions

We make no automated decisions and do no profiling that has legal or similarly significant effects on you.

Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection. Write to us at the address above.

If you think we process your data unlawfully, or your data protection rights have been infringed in some other way, you can complain to the supervisory authority. In Austria that is the Österreichische Datenschutzbehörde (Austrian Data Protection Authority), Barichgasse 40-42, 1030 Vienna, phone +43 1 52 152-0, [email protected], dsb.gv.at.

Changes

We update this policy when our website or the law changes. The current version is always on this page.