Privacy Policy

We take the protection of your personal data very seriously. To inform you about the collection and processing of personal data, please read the following privacy information carefully.

Scope

This Privacy Policy explains the nature, scope and purpose of the processing of personal data on the website bachnerconsulting.com, as well as your rights as a data subject under Article 13 of the EU General Data Protection Regulation (GDPR) in conjunction with the Austrian Data Protection Act (DSG).

Data Controller

The data controller responsible for processing your personal data is:

Bachner Consulting GmbH
Hanuschgasse 1/3/4
2540 Bad Vöslau, Austria
Email: info@bachnerconsulting.com

Personal Data

We process personal data that you provide to us through this website, or that is collected when you use the website, only for specific purposes and to the extent necessary (Art. 5(1)(b) and (c) GDPR).

Depending on the purpose, processing is based on your consent (Art. 6(1)(a) GDPR), the performance of pre-contractual measures or a contract (Art. 6(1)(b) GDPR), compliance with legal obligations such as statutory retention requirements (Art. 6(1)(c) GDPR), or our legitimate interests (Art. 6(1)(f) GDPR). The applicable legal basis is specified for each individual processing activity.

We only disclose personal data to third parties where this is necessary for the stated purposes and legally permitted, for example to processors acting on our behalf (Art. 28 GDPR).

Providing your personal data is neither a statutory nor contractual requirement. However, without the information marked as mandatory, we may not be able to process an enquiry, registration or booking (Art. 13(2)(e) GDPR).

We do not make decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you (Art. 22 GDPR).

Retention Period

We retain personal data only for as long as necessary for the respective purpose. The data is then deleted or anonymised unless statutory retention obligations require longer storage, in particular the seven-year retention period for business and tax-related records (Art. 6(1)(c) GDPR in conjunction with § 132 BAO and § 212 UGB), or the data is still required for the establishment, exercise or defence of legal claims, generally for the duration of the applicable three-year limitation period (§ 1489 ABGB).

In such cases, processing is restricted to storage. The specific retention period or the criteria used to determine it are stated for each individual processing activity.

Data Subject Rights

You have the following rights regarding your personal data:

Right of access (Art. 15 GDPR)
Right to rectification or completion (Art. 16 GDPR)
Right to erasure (Art. 17 GDPR)
Right to restriction of processing (Art. 18 GDPR)
Right to data portability (Art. 20 GDPR)
Right to object to processing (Art. 21 GDPR)

To exercise these rights, please contact the data controller at the address provided above. We will respond without undue delay and, in any event, within one month (Art. 12(3) GDPR).

Right to Withdraw Consent and Right to Object

You have the right to withdraw your consent at any time with effect for the future (Art. 7(3) GDPR). The lawfulness of processing carried out before the withdrawal remains unaffected.

This does not affect data that we are required to retain for the performance of a contract or due to statutory retention obligations (Art. 6(1)(b) and (c) GDPR). We will retain such data for as long as the respective purpose requires.

Consent may be withdrawn informally, for example by email to the data controller named above or via the cookie settings on our website.

Where we process your data on the basis of our legitimate interests (Art. 6(1)(f) GDPR), you have the right to object at any time, on grounds relating to your particular situation, to such processing (Art. 21(1) GDPR).

We will then no longer process the data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing is required for the establishment, exercise or defence of legal claims.

You may object to processing for direct marketing purposes at any time and without giving reasons (Art. 21(2) GDPR).

Right to Lodge a Complaint

If you believe that the processing of your personal data violates the GDPR or the Austrian Data Protection Act, you have the right to lodge a complaint with a supervisory authority (Art. 77(1) GDPR, § 24 DSG).

In Austria, the competent authority is:

Austrian Data Protection Authority
Barichgasse 40–42
1030 Vienna
Austria
+43 1 52 152-0
dsb@dsb.gv.at
www.dsb.gv.at

SSL/TLS Encryption

For security reasons and to protect confidential content, this website uses SSL/TLS encryption. You can recognise an encrypted connection by the “https://” in your browser's address bar and the padlock symbol.

This encryption prevents third parties from reading data that you transmit to us. We also implement appropriate technical and organisational measures to protect your data against loss, manipulation and unauthorised access (Art. 32 GDPR, Art. 5(1)(f) GDPR).

Cookies

We use cookies on this website. Cookies are small text files stored by your browser on your device.

Some cookies are technically necessary to ensure that the website operates securely and correctly. These strictly necessary cookies do not require consent under § 165(3) TKG 2021. The associated processing is based on our legitimate interest in providing our website in a technically reliable and secure manner (Art. 6(1)(f) GDPR).

The storage of or access to information on your device that is not strictly necessary, for example for analytics or marketing purposes, takes place only with your explicit consent pursuant to § 165(3) TKG 2021. The subsequent processing of personal data is based on Art. 6(1)(a) GDPR.

We obtain your consent through our cookie banner. You can withdraw your consent at any time with effect for the future through the cookie settings. The individual services concerned are described separately in this Privacy Policy.

Links to Third-Party Websites

Our website contains hyperlinks to websites operated by other providers. If you follow such a link, you leave our website and the privacy policies of the respective destination website apply.

We have no influence over these websites and are not responsible for their data processing activities.

Hosting & Server Log Files

We use the hosting provider Hostinger (Hostinger operations UAB, Švitrigailos Str. 34, 03230 Vilnius, Lithuania) to make this website available online.

When you access our website, technically necessary data is processed to ensure the secure and stable operation of the website. This includes, in particular, your IP address, the time of access, requested resources, the website from which you accessed our website, and technical information about your browser.

This data is stored in so-called server log files and is used exclusively for technical provision, troubleshooting and protection against attacks. The legal basis is our legitimate interest in providing our website in a technically reliable and secure manner (Art. 6(1)(f) GDPR).

The hosting provider processes this data on our behalf as a data processor (Art. 28 GDPR). Log data is deleted or anonymised as soon as it is no longer required for the stated purposes, generally after a few weeks. It is not evaluated for other purposes.

Data that must be retained to investigate a specific incident, such as an attack, will remain stored until the matter has been fully resolved.

The provider is based in the European Union and is directly subject to the GDPR.

Further information can be found in Hostinger's Privacy Policy: https://www.hostinger.com/de/legal/datenschutz-bestimmungen

Google Analytics

We use the Google Analytics analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

We use Google Analytics to analyse how our website is used and to improve our services. In particular, Google Analytics enables us to analyse how visitors use our website, which channels they use to access it and which target groups we reach.

The legal basis is your consent (Art. 6(1)(a) GDPR), which we obtain through our cookie banner and which you can withdraw at any time with effect for the future.

The provider processes the data on our behalf as a data processor (Art. 28 GDPR).

The data processed includes, in particular, pages visited, date and time of the visit, duration of the visit, interactions with the website, technical information about the device and browser used, approximate location data (country/region) and IP addresses.

User and event data collected through Google Analytics is stored for a maximum of 14 months and then automatically deleted. The cookie used to recognise your browser has a lifespan of 24 months.

Transfers to the USA are based on the European Commission's adequacy decision regarding the EU-U.S. Data Privacy Framework (Art. 45 GDPR), under which the provider is certified. Standard Contractual Clauses (Art. 46(2)(c) GDPR) are also used.

Further information can be found in the Google Analytics Privacy Policy: https://policies.google.com/privacy

Google Fonts

We use Google Fonts, a font service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

We use Google Fonts to load fonts for a consistent presentation of our content. When you access the website, a connection is established to Google's servers and your IP address is transmitted.

Google Fonts does not use cookies. The legal basis is our legitimate interest in providing a consistent and appealing presentation of our website (Art. 6(1)(f) GDPR).

The data processed includes, in particular, IP addresses and technical information about the browser used.

We do not store personal data ourselves in connection with this service. The provider stores data transmitted when the fonts are loaded only for as long as necessary to provide and secure the service. The specific retention period is determined according to the criteria stated in its Privacy Policy.

Further information can be found in the Google Fonts Privacy Policy: https://policies.google.com/privacy

Font Awesome

We use the Font Awesome icon service provided by Fonticons Inc., 307 South Main Street, Suite 202, Bentonville, AR 72712, USA.

We use Font Awesome to load icons for a consistent presentation of our content. The legal basis is our legitimate interest in providing a consistent and appealing presentation of our website (Art. 6(1)(f) GDPR).

The data processed includes, in particular, IP addresses and technical information about the browser used.

We do not store personal data ourselves in connection with this service. The provider stores data transmitted when the service is loaded only for as long as necessary to provide and secure the service. The specific retention period is determined according to the criteria stated in its Privacy Policy.

Further information can be found in the Font Awesome Privacy Policy: https://fontawesome.com/privacy

Calendly

We use the Calendly scheduling service provided by Calendly LLC, 115 E Main St., Ste A1B, Buford, GA 30518, USA.

We use Calendly to provide you with a convenient way to schedule or book appointments directly through our website.

The legal basis is your consent (Art. 6(1)(a) GDPR), which we obtain through our cookie banner and which you can withdraw at any time with effect for the future.

The information you enter when booking is processed to handle your request or take pre-contractual measures (Art. 6(1)(b) GDPR). The provider processes the data on our behalf as a data processor (Art. 28 GDPR).

The data processed includes, in particular, your name, contact details, requested appointments or booking information, IP address and technical information about the device and browser used.

Booking and appointment data is stored for the purpose of managing the appointment and, where applicable, for the duration of the general three-year limitation period (§ 1489 ABGB). Business or tax-related records are retained for seven years (Art. 6(1)(c) GDPR in conjunction with § 132 BAO and § 212 UGB).

The data is then deleted.

Further information can be found in the Calendly Privacy Policy: https://calendly.com/legal/privacy-notice

Cloudflare Turnstile

We use the Cloudflare Turnstile security service provided by Cloudflare Inc., 101 Townsend Street, San Francisco, CA 94107, USA.

We use Cloudflare Turnstile to protect our website and forms against misuse, spam and automated access. The legal basis is our legitimate interest in protecting our website against misuse, spam and automated access (Art. 6(1)(f) GDPR).

The data processed includes, in particular, IP addresses, technical information about the device and browser used, and information about user behaviour necessary to distinguish humans from automated systems.

We do not store personal data from this service ourselves. The provider stores verification data only for as long as necessary to detect and prevent misuse. The specific retention period is determined according to the criteria stated in its Privacy Policy.

Further information can be found in the Cloudflare Turnstile Privacy Policy: https://www.cloudflare.com/de-de/privacypolicy/

CookieYes

We use the CookieYes consent management tool provided by CookieYes Limited, 3 Warren Yard, Warren Park, Wolverton Mill, Milton Keynes MK12 5NW, United Kingdom.

We use CookieYes to obtain, store and document your cookie and consent preferences. The legal basis is our legitimate interest in obtaining and documenting consent in compliance with the law pursuant to Art. 7(1) GDPR (Art. 6(1)(f) GDPR).

The provider processes the data on our behalf as a data processor (Art. 28 GDPR).

The data processed includes, in particular, your consent decisions, the time of your decision, truncated IP addresses and technical information about your browser.

Your cookie preference is generally stored for up to twelve months, after which you will be asked to make a new decision.

We retain evidence of consent for as long as necessary to fulfil our legal obligation to document consent (Art. 5(2) and Art. 7(1) GDPR), and for a maximum of three years from withdrawal or the most recent consent.

Processing may also take place in the United Kingdom. The European Commission has issued an adequacy decision for the United Kingdom (Art. 45 GDPR), confirming an adequate level of data protection.

Further information can be found in the CookieYes Privacy Policy: https://www.cookieyes.com/privacy-policy/

Contact

If you use our contact form, the information you provide in the form (first name, last name, telephone number, email address and message) will be transmitted to us and stored.

Alternatively, you can contact us using the contact details provided on the website. In this case, we store your contact details and the content of your communication.

We process this data to handle your enquiry. The legal basis is the performance of pre-contractual measures or a contract (Art. 6(1)(b) GDPR) or, in the case of general enquiries, our legitimate interest in responding to your request (Art. 6(1)(f) GDPR).

We store the data until your enquiry has been fully resolved and, thereafter, for a maximum of the applicable three-year limitation period from the date the matter is resolved (§ 1489 ABGB).

If your enquiry results in a contract, business and tax-related correspondence will be retained for seven years (Art. 6(1)(c) GDPR in conjunction with § 132 BAO and § 212 UGB). The data will then be deleted.

Personal data will only be disclosed to third parties where necessary to process your enquiry or where required by law.

Please do not submit sensitive personal data when contacting us.

Last updated: 21 September 2026