Privacy Policy

1. Information We Collect

We collect information you provide to us directly, as well as information collected automatically through your use of our website.

Information You Provide

• Name, email address, phone number, and company name when you contact us or submit an enquiry form
• Professional details relevant to your consulting engagement
• Communications and correspondence you send to us

Information Collected Automatically

• Browser type, IP address, and device information, which our hosting provider records in standard server logs
• A note that you dismissed our cookie notice, stored in your browser's local storage (see Section 5)

2. How We Use Your Information

We use the information we collect for the following purposes:

• To respond to your enquiries and provide consulting services
• To communicate with you about projects, proposals, and service updates
• To improve and optimize our website and services
• To comply with legal obligations under Austrian and EU law
• To send relevant industry insights or newsletters, with your explicit consent

We do not sell, trade, or rent your personal information to third parties.

3. Legal Basis for Processing (GDPR)

As a company operating under Austrian and European Union law, we process your personal data under the following legal bases as defined by the General Data Protection Regulation (GDPR):

• Contractual necessity: when processing is required to perform a contract or respond to a pre-contractual request
• Legitimate interests: to operate and improve our business, provided these interests are not overridden by your rights
• Consent: where you have given explicit consent, such as for marketing communications
• Legal obligation: where required by applicable law

4. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy, or as required by applicable law. Enquiry data is typically retained for three years; client engagement data may be retained for up to seven years for legal and accounting purposes.

5. Cookies

Our website does not use analytics, advertising, or tracking cookies, and we do not run any analytics or marketing tools. The only item we store on your device is a note that you have dismissed the cookie notice, kept in your browser's local storage so that we do not show it again on every visit. You can clear it at any time through your browser settings.

6. Third-Party Services

Our website is hosted by Netlify, Inc. (USA), which records standard server logs (such as IP address and browser type) when you visit. If you submit our contact form, the details you enter are received and stored through Netlify Forms and forwarded to us. See the Netlify Privacy Policy.

The website loads its typefaces from Google Fonts (Google Ireland Limited / Google LLC). Your IP address is therefore transmitted to Google when a page loads. We rely on our legitimate interest in a consistent, well-presented website. See the Google Privacy Policy.

We do not use Google Analytics or any other web analytics service. Links to LinkedIn and Facebook are ordinary links; those platforms receive data only if you choose to follow them.

7. Your Rights

Under GDPR, you have the following rights with respect to your personal data:

• Right of access — to request a copy of your personal data
• Right to rectification — to request correction of inaccurate data
• Right to erasure — to request deletion of your data under certain conditions
• Right to restrict processing — to request limitation of how we use your data
• Right to data portability — to receive your data in a machine-readable format
• Right to object — to object to certain types of processing
• Right to withdraw consent — at any time, without affecting prior processing

To exercise any of these rights, please contact us using the details below.

8. Contact & Data Controller