Part A: Our Website kratschmann.at
General Information on Data Processing
The protection of your personal data is of particular importance to us. We therefore process your data exclusively on the basis of the applicable legal provisions (GDPR, the Austrian Data Protection Act DSG and the Austrian Telecommunications Act 2021 TKG 2021). In this Privacy Policy, we inform you about the most important aspects of data processing in connection with our website.
This Privacy Policy explains the nature, scope and purposes of the processing of personal data within our online services and the websites, functions and content associated with them (hereinafter collectively referred to as the “Online Services” or “Website”).
Part A covers our website kratschmann.at. Part B covers our ads and enquiries via forms in ads on LinkedIn. Part C applies to both. Our enquiry pages at aktion.easyanfrage.com have their own privacy policy (see Part B).
Collection, Processing and Use of Personal Data
With regard to the terminology used (e.g. “personal data” or “processing”), we refer to the definitions in Article 4 of the General Data Protection Regulation (GDPR).
The personal data processed as part of these Online Services includes usage data (e.g. the pages of our Website visited and interest in our products) and content data (e.g. information you provide in emails or enquiries).
The term “users” encompasses all categories of individuals whose data is subject to processing. These include our business partners, customers, prospective customers and other visitors to our Website.
We process your personal data only in compliance with the applicable data protection regulations. This means that your data is processed only where there is a legal basis for doing so. In particular, this applies where processing is necessary to provide our contractual services (e.g. handling enquiries), where processing is required by law, where you have given your consent, or where processing is necessary to pursue our legitimate interests (i.e. our interest in optimising, operating and securing our Online Services in an economically efficient manner; Article 6(1)(f) GDPR). Audience measurement and advertising on kratschmann.at require your consent.
Legal Basis
We refer to the following legal bases:
Consent: Article 6(1)(a) and Article 7 GDPR; for cookies and access to information on your device also Section 165(3) TKG 2021.
Processing necessary for the performance of our services and implementation of contractual measures: Article 6(1)(b) GDPR.
Processing necessary to comply with our legal obligations: Article 6(1)(c) GDPR.
Processing necessary to protect our legitimate interests: Article 6(1)(f) GDPR.
Security Measures
We implement organisational, contractual and technical security measures in accordance with the state of the art to ensure compliance with data protection legislation and to protect the data we process against accidental or intentional manipulation, loss, destruction or access by unauthorised persons.
These security measures include, in particular, the encrypted transmission of data between your browser and our server.
Protecting the Website against Attacks
To protect against attacks we use the security software Wordfence by Defiant, Inc., USA. It runs on our own server and checks every access; for this it processes your IP address, the address requested and browser data. Wordfence may transmit data on detected attacks, such as the attacker’s IP address, to Defiant. The legal basis is our legitimate interest in a secure website (Article 6(1)(f) GDPR). More information: https://www.wordfence.com/privacy-policy/
Disclosure of Data to Third Parties and Third-Party Providers
We disclose your data to third parties only within the scope permitted by law. We share your data with third parties only where this is necessary, for example, for contractual purposes (Article 6(1)(b) GDPR), where you have given your consent (Article 6(1)(a) GDPR), or where disclosure is based on our legitimate interests (Article 6(1)(f) GDPR) in operating our business efficiently and economically.
For our website, data is received by: Meta (Meta Pixel, only with your consent), the operator of our statistics server (Umami, only with your consent), Microsoft (our email inbox) and Defiant (Wordfence, attack data only).
Where this Privacy Policy refers to content, tools or other resources provided by third parties whose registered offices are located in a third country, it should be assumed that data may be transferred to those countries. Third countries are countries in which the GDPR does not apply directly as law, generally meaning countries outside the European Union or the European Economic Area. Data is transferred to third countries only where an adequate level of data protection exists, the user has given consent, or another legal basis permits the transfer. Details are given in Part C under “Transfers to the USA”.
Contacting Us
If you contact us by email or phone, the information you provide will be processed for the purpose of handling and responding to your enquiry (Article 6(1)(b) GDPR). Our email inbox is operated on our behalf (Article 28 GDPR) by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland.
Collection of Access Data and Server Log Files
Our website runs on our own server in Austria.
On the basis of our legitimate interests (Article 6(1)(f) GDPR), we collect data relating to every access to the server on which this Website is hosted (so-called server log files).
Access data includes the name of the webpage or file accessed, the date and time of access, the amount of data transferred, notification of successful access, browser type and version, your operating system, the referrer URL (the previously visited page, if our Website was accessed via a link) and your IP address.
For security reasons (e.g. to investigate misuse or fraud), log file information is stored for a maximum period of three months and then deleted.
Data that must be retained for evidentiary purposes is exempt from deletion until the relevant incident has been fully resolved.
Cookies and Audience Measurement
Cookies are pieces of information transmitted by our web server or third-party web servers to your web browser and stored there for later retrieval. Cookies may consist of small files or other forms of information storage.
Without your consent, kratschmann.at only sets cookies that are necessary for the website (Section 165(3) TKG 2021). Everything else, including audience measurement, starts only after you click “Accept” in the cookie notice. “Decline” is just as easy, and the website then works fully.
kratschmann.at uses these cookies:
- pll_language: remembers your language until you close your browser, always necessary.
- cmp_consent: remembers your choice in the cookie notice, 180 days, always necessary.
- _fbp: Meta Pixel, only after “Accept”, 90 days.
- _fbc: Meta Pixel, only after “Accept” and only if you arrive via a link from Facebook or Instagram, 90 days.
After “Accept”, the Meta Pixel also stores the last external website visited and its time in your browser’s storage; the entry remains until you choose “Decline” in the cookie notice or clear your browser’s storage.
Objection and Opt-Out
You can change your choice in the cookie notice and withdraw your consent at any time: Cookie settings. Withdrawal applies from that point; processing before it remains lawful.
If you do not want cookies to be stored on your device, please disable the corresponding option in your browser’s settings. Stored cookies can be deleted through your browser’s settings. Disabling cookies may limit the functionality of our Website.
You can opt out of cookies used for audience measurement and advertising purposes through the following websites:
Network Advertising Initiative: http://optout.networkadvertising.org/
US advertising opt-out website: http://www.aboutads.info/choices
European advertising opt-out website: http://www.youronlinechoices.com/uk/your-ad-choices/
Visitor Statistics with Umami
Only if you click “Accept” in the cookie notice do we count your visit with Umami, a statistics tool without cookies. Umami records the page visited with its full address including identifiers from ad clicks, the page title, the referring page, browser, browser language, screen size, operating system, device type and time; to do so, Umami reads this information from your browser. According to the manufacturer, Umami derives country, region and city from your IP address and creates from your IP address and browser data a visit identifier in unreadable form that stays the same for up to one month; Umami does not store the IP address itself. We only see figures, not individual people.
Umami runs on a server of netcup GmbH in Germany, operated by Lukas Aigner (firmenbiachl.at), Deutsch-Wagram, Austria, on our behalf (Article 28 GDPR). The purpose is to understand and improve the use of our website. The legal basis is your consent (Article 6(1)(a) GDPR, Section 165(3) TKG 2021); you can withdraw it via Cookie settings.
Meta Pixel
Only if you click “Accept” in the cookie notice does our website load the Meta Pixel of Meta Platforms Ireland Ltd., Merrion Road, Dublin 4, Ireland (“Meta”). The pixel tells Meta that you have visited a page of our website. Your IP address, browser data including additional details from your browser about your device and operating system (client hints), the page visited and the previously visited page, the time and the identifiers from the cookies _fbp and _fbc are sent to Meta; if you are logged in to Facebook or Instagram, Meta can link the visit to your account. According to its settings at Meta, the pixel also sends these reports to Meta via a server at Amazon Web Services in the USA, or alternatively at Google Cloud.
We use this for three purposes: to measure how well our advertising on Facebook and Instagram works, to show visitors of our website Kratschmann ads on Facebook and Instagram later, and to exclude visitors of our website from certain ads, such as ads for new customers. The legal basis is your consent (Article 6(1)(a) GDPR, Section 165(3) TKG 2021).
We and Meta are joint controllers for collecting and transmitting this data (Article 26 GDPR). The agreement is available at https://www.facebook.com/legal/controller_addendum. You can exercise your rights with us or with Meta. Meta alone is responsible for what it does with the data afterwards: https://www.facebook.com/privacy/policy.
Integration of Third-Party Services and Content
Our Website may incorporate content provided by third parties. This requires the providers of such content (“third-party providers”) to receive your IP address. Without your IP address, the content cannot be delivered to your browser. Your IP address is therefore necessary to display this content.
We endeavour to use only content from providers that use your IP address solely to deliver the relevant content.
Third-party providers may use so-called pixel tags (invisible graphics, also known as “web beacons”) for statistical or marketing purposes. Pixel tags can be used to analyse visitor traffic on the pages of this Website. Pseudonymous information may be stored in cookies on your device and may include technical information about your browser and operating system, referring websites, visit times and other information about your use of our Online Services. Such information may also be combined with information from other sources.
At present we integrate only two third-party services on kratschmann.at, both only after you click “Accept”: Umami and the Meta Pixel (see above). Fonts, images and scripts of the website come from our own server; we do not integrate maps, videos or fonts from Google or other providers.
Part B: Enquiry Forms in Ads
Our Enquiry Pages
If an ad takes you to an enquiry page at aktion.easyanfrage.com, the enquiry page’s own privacy policy applies there. You can open it on every enquiry page via the link “Datenschutzerklärung” (privacy policy); it is in German.
Forms in Ads on LinkedIn
On LinkedIn you can also send us an enquiry directly in an ad without leaving LinkedIn, using a form by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (“LinkedIn”). LinkedIn passes on the details from the form, i.e. first name, last name, company and email. The purpose is for us to contact you and give you a cost estimate for your project (Article 6(1)(b) GDPR). All four details are required; without them you cannot submit the form and we cannot reach you.
EasyPlusMedia OG, St. Ruprechter Straße 90, 9020 Klagenfurt am Wörthersee, Austria, stores your enquiry in our enquiry portal on our behalf (Article 28 GDPR); the portal runs on a server of Hostinger International Ltd., Larnaca, Cyprus, in Frankfurt am Main, Germany. Your enquiry is sent by email to us and to the responsible staff of EasyPlusMedia OG.
Enquiries from LinkedIn are collected for EasyPlusMedia OG by the service Make of Celonis Inc. and stored in our enquiry portal; Make does not keep the transferred details in the log of the transfer. How LinkedIn uses your data is described in its privacy policy: https://www.linkedin.com/legal/privacy-policy.
Advertising on Facebook, Instagram and LinkedIn
The platforms deliver our ads based on their own data, for example by region, industry or job. We do not upload customer lists with email addresses or phone numbers to the platforms. On LinkedIn we select companies by name, not individual people.
Recipients for Forms in Ads
Your enquiry is seen only by our staff who need it, Microsoft (our email inbox) and EasyPlusMedia OG with its sub-processors Hostinger International Ltd. (server of the enquiry portal in Germany), Make of Celonis Inc. (forwarding of LinkedIn forms) and Google (email inbox of EasyPlusMedia OG). LinkedIn receives data as described above.
Part C: Applies to Both
Transfers to the USA
Meta, LinkedIn, Google, Microsoft, Make, Amazon Web Services and Defiant may also process data in the USA. Meta Platforms, Inc., LinkedIn Corporation, Google LLC, Microsoft Corporation, Celonis Inc. (Make) and Amazon Web Services, Inc. (covered by the Amazon.com, Inc. certification; server through which the Meta Pixel sends its reports) are certified under the EU-US Data Privacy Framework, for which the European Commission has found an adequate level of data protection (Article 45 GDPR); the list is available at https://www.dataprivacyframework.gov/list. Defiant, Inc. is not certified under this framework; transfers to Defiant are covered by the European Commission’s standard contractual clauses (Article 46 GDPR).
Your Rights
Right of Access
You have the right to request, free of charge, information about the personal data concerning you that we store.
Right to Rectification, Erasure, Data Portability and Restriction of Processing
You have the right to request the correction of inaccurate data, the restriction of processing and the deletion of your personal data. Where applicable, you may also exercise your right to data portability.
Right to Lodge a Complaint
If you believe that we are processing your data unlawfully, you have the right to lodge a complaint with the competent supervisory authority. In Austria, this is the Austrian Data Protection Authority, Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at.
Right to Object
You may object to the future processing of your personal data at any time, in accordance with the applicable legal requirements. In particular, you may object to the processing of your personal data for direct marketing purposes. You can withdraw consent at any time with effect for the future (Article 7(3) GDPR). An email to office@kratschmann.at is enough.
No Automated Decisions
We do not make automated decisions about you (Article 22 GDPR).
Deletion of Data
The personal data we store about you will be deleted as soon as it is no longer required for the purpose for which it was collected, provided that no statutory retention obligations prevent its deletion. In detail:
- Enquiries: until your enquiry is completed, at the latest after 12 months; server backups up to 30 days longer. If it leads to an order, statutory retention periods apply, e.g. 7 years under Section 132 of the Austrian Federal Fiscal Code (BAO).
- Log files of our website: a maximum of 3 months.
- Wordfence data on our server: blocked requests and logins in the access log for a maximum of 30 days; login attempts until 2,000 newer ones exist (Wordfence deletes older ones daily); the number of blocks per IP address for a maximum of 1 month. A block ends after 5 minutes, or after 4 hours following too many failed logins.
- Visitor statistics (Umami): until we no longer need the figures to improve the website; there is currently no fixed period.
- Cookies: as stated in the cookie sections.
- Data held by Meta and LinkedIn: according to their own rules.
Changes to This Privacy Policy
We reserve the right to amend this Privacy Policy to reflect changes in applicable laws, changes to our services or changes in our data processing activities. Such changes apply only to statements concerning data processing. Where your consent is required, or where parts of this Privacy Policy contain provisions governing our contractual relationship with you, changes will be made only with your consent.
We encourage you to review this Privacy Policy regularly to stay informed about its contents.
Data Controller and Contact
The controller is KRATSCHMANN & Partner Elektrotechnik und Handelsges.m.b.H, Viktor Kaplan Straße 4, 2201 Gerasdorf, Austria, phone +43 1 734 60 74, email office@kratschmann.at, Managing Director Mag. Wolfgang Kudernatsch. Further details can be found in the legal notice (in German: https://kratschmann.at/de/impressum).
Last updated: 23 October 2026