Skip to content
Steidl IT GmbHSteidl IT GmbH
DE

Privacy Policy

Privacy Policy

Controller
Steidl IT GmbH
Hervicusgasse 19/2/15
1120 Vienna, Austria
Email: office@steidl-it.com

No data protection officer has been appointed; the statutory conditions for appointing one are not met.

When you visit this website

Each time a page is requested, your browser necessarily transmits data to our server: IP address, date and time, the address requested together with the method and protocol, the status code, the volume of data transferred, the page previously visited (referrer), browser and operating system identifiers, and the response time. Our server records this in access logs in order to keep the service secure and to detect attacks (Art. 6(1)(f) GDPR). The logs are rotated daily; a rotated log is deleted once it is more than 30 days old — that is, at the latest about one month after the visit.

This website uses no analytics and no advertising services, and embeds no third-party content. All content, including fonts, is served from our own server; visiting the site transfers no data to third parties.

Cookies and local storage

This website sets no cookies for advertising or analytics and embeds no third-party services. Exactly two items are stored, both on this domain only and both without any identifier relating to you:

  • sprache — a cookie holding the language version you have chosen (de or en). It is created only when you switch languages, lasts one year and makes sure you see the site in your language on every visit. As long as you do not switch, no cookie is set; which version you see first then follows from your browser's language setting alone. The cookie is strictly necessary for the display you expressly chose (§ 165 para 3 TKG 2021) and requires no consent; the associated processing rests on our legitimate interest in a working multilingual site (Art. 6(1)(f) GDPR).
  • stw-modus — an entry in your browser's local storage holding your choice between light and dark display. It is created only once you make that choice, is never transmitted to us, and remains until you delete it. It is strictly necessary for the display you expressly requested (§ 165 para 3 Austrian Telecommunications Act 2021, Telekommunikationsgesetz 2021, TKG 2021) and therefore requires no consent.

You can delete both at any time in your browser; the site works without them.

When you write to us

We process the details you give us and the content of your message in order to deal with your enquiry (Art. 6(1)(b) GDPR where it concerns an order or an enquiry before an order, otherwise Art. 6(1)(f)). If you use the contact form, our server forwards your name, your email address and your message to our mailbox by email; we do not store them on the web server itself. To protect the form against misuse (Art. 6(1)(f) GDPR), we briefly count how many messages arrive from the same IP address; for this we keep only a check value derived from it in memory, which expires after one hour. Messages relating to orders are kept as long as our other business records, ten years from the end of the calendar year (§ 132 and § 209(3) Austrian Federal Fiscal Code, Bundesabgabenordnung, BAO); all others are deleted once the matter is closed and no further questions are to be expected. Providing your details is voluntary; without them, however, we cannot reply to you.

Who else receives the data

  • Andreas Steidl, sole proprietor, Hervicusgasse 19/2/15, 1120 Vienna, Austria — operation and hosting of this website on behalf of the company, processor (Art. 28 GDPR). For this he uses server infrastructure of netcup GmbH, Emmy-Noether-Straße 10, 76131 Karlsruhe, Germany, as a sub-processor, with further sub-processors of the Anexia group in Austria and Germany; the processing takes place at the data centre in Vienna. No processing outside the European Union takes place in this context.
  • Google Cloud EMEA Limited, Dublin, Ireland — email service (Google Workspace), processor. Google may also process data in the United States; the basis for this is the European Commission's adequacy decision on the EU-US Data Privacy Framework, supplemented by standard contractual clauses.

Your rights

You have the right of access (Art. 15 GDPR), to rectification (Art. 16), to erasure (Art. 17), to restriction of processing (Art. 18), to data portability (Art. 20) and to object (Art. 21). A message to office@steidl-it.com is sufficient; we will reply within one month.

Right to object (Art. 21(1) GDPR)

Where we process data on the basis of legitimate interests — this concerns the access logs, the language cookie and messages outside an order — you may object at any time on grounds relating to your particular situation.

Right to lodge a complaint

You may lodge a complaint with the Austrian Data Protection Authority (Datenschutzbehörde): Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at.

Language

This English version describes the same processing as the German version of this privacy policy. Austrian statutory terms are given in German in brackets so that you can look them up.