PRIVACY POLICY

Protecting your personal data is important to us. We process it solely in accordance with applicable legal provisions, in particular the General Data Protection Regulation (GDPR), the Austrian Data Protection Act (DSG) and the Telecommunications Act 2021 (TKG 2021).

This policy explains how we process your data when you visit our website and use our contact and registration options.

Controller:

Architect DI Harald Mallner Porzellangasse 36/7, 1090 Vienna, Austria Telephone: +43 (1) 968 17 89 Email: office@mallner.net

When you access our website, technical access data is collected automatically. This includes the page accessed, the date and time of access, the amount of data transferred, the referring page (referrer), browser, operating system and IP address.

This information is stored in server log files and is used solely to operate the website securely and without disruption, and to detect and investigate possible cases of misuse. The legal basis is our legitimate interest pursuant to Article 6(1)(f) GDPR.

Log data is deleted no later than seven days after collection, unless longer retention is necessary to investigate security-related incidents. It is not combined with other data.

Our website is hosted by an external hosting provider acting as a processor pursuant to Article 28 GDPR. The provider processes the data generated solely to make the website available and operate it securely; the data is not used for the provider’s own purposes, in particular for advertising. The provider makes an appropriate data processing agreement available.

Our website does not use advertising cookies or tracking services. We use a simple, anonymous visitor statistic to provide an overview of website usage; it counts page views only. No user profiles are created, individual visitors are not tracked, and no data is transmitted to third parties for advertising purposes. Google Analytics, comparable analytics tools and advertising cookies are not used.

We also do not use social media plugins or send newsletters.

On our Legal Notice page, we offer an interactive map provided by Google Maps (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). For privacy reasons, the map is loaded only when you expressly activate it by clicking the “Load map” button. Before that, our website does not transmit any data to Google. When the map is loaded, your IP address is transmitted to Google; Google may set cookies in the process. The legal basis is your consent pursuant to Article 6(1)(a) GDPR. You may withdraw this consent at any time with effect for the future by hiding the map again. For more information, please see Google’s privacy policy at www.google.com/policies/privacy.

If you contact us by email or through other available communication channels, we process the information you voluntarily provide solely to handle and respond to your enquiry.

Where applicable, processing is carried out to take steps prior to entering into a contract pursuant to Article 6(1)(b) GDPR, or on the basis of our legitimate interest in handling enquiries pursuant to Article 6(1)(f) GDPR.

The data is deleted as soon as it is no longer needed to handle the enquiry and no statutory retention obligations apply.

You can use the registration form on our website to request project-specific access to our platform.

The information you submit is sent by email to our office and is used solely to verify your eligibility for access and activate your platform access. The information is stored on an internal server.

Access is provided through the platform operated by PLANFRED GmbH, which runs on Amazon AWS. The data centres used are ISO 27001 certified and located exclusively in the EU. The primary server location is Frankfurt; redundant systems are located in Ireland.

All data transfers take place exclusively over encrypted connections. PLANFRED GmbH continuously monitors its GDPR-compliant systems and regularly updates all components to ensure maximum security. All data storage is redundant and synchronises in real time. Complete database backups are created every 12 hours and stored in encrypted form. File storage is provided by the highly redundant Amazon AWS S3 service in the highest-quality storage class. All files are stored in encrypted form.

Detailed information about the operation of the platform is available in PLANFRED GmbH’s privacy policy: www.planfred.com/de/datenschutz

Processing is based on your consent pursuant to Article 6(1)(a) GDPR or, where the statutory requirements are met, is carried out to take steps prior to entering into a contract pursuant to Article 6(1)(b) GDPR.

The data is deleted as soon as it is no longer needed and no statutory retention obligations prevent deletion.

Personal data is disclosed only when necessary for the performance of a contract, required by law or covered by your consent. Technical service providers, in particular our hosting provider, process data under the applicable data processing agreement.

We store personal information only for as long as necessary for the relevant processing purpose or as required by statutory retention obligations. If deletion is not possible for legal reasons, further processing is restricted accordingly.

Under the GDPR, you have the following rights:

Access to your personal data being processed (Article 15 GDPR), rectification of inaccurate data (Article 16 GDPR), erasure of personal data (Article 17 GDPR), restriction of processing (Article 18 GDPR), data portability (Article 20 GDPR), objection to processing (Article 21 GDPR).

You may withdraw any consent you have given at any time with effect for the future (Article 7(3) GDPR). This does not affect the lawfulness of processing carried out before withdrawal. To exercise your rights or if you have questions about data protection, please contact office@mallner.net.

If you believe that the processing of your personal data violates applicable data protection law, you may lodge a complaint with the competent supervisory authority: Austrian Data Protection Authority, www.dsb.gv.at.

We reserve the right to update this privacy policy as appropriate in response to legal or technical changes.