Privacy Policy - HOSB Ingenieurbüro e.U.

1. Controller

HOSB Ingenieurbüro e.U.
Alszeile 28A/3/12
A-1170 Vienna
Phone: +43 677 62077177
E-Mail: office@hosb.at
Managing Director: Ing. Benjamin Horeth MSc.

2. Data Protection Officer

Due to the company’s size, we are not required to appoint a Data Protection Officer. For any data protection questions, please contact the controller directly (see contact details above).

3. General Information

The protection of your personal data is a top priority for us. We process your data exclusively in accordance with statutory requirements (GDPR, Telecommunications Act 2021). This privacy policy informs you about the key aspects of data processing in connection with our website.

4. Purposes of Processing Personal Data

We process personal data for the following purposes:

Responding to inquiries
Establishing business relationships
Executing projects or contracts
Fulfilling legal obligations

5. Data Processing on Our Website

Categories of personal data:

Contact details: Name, email address, company (optional), phone number (optional)
Content data: Message/inquiry
Technical data: IP address, timestamp of inquiry

Legal basis:
Processing is based on Art. 6(1)(b) GDPR (contract initiation) for handling your inquiry and Art. 6(1)(f) GDPR (legitimate interest) for protection against spam and abuse.

Purposes of processing:

Handling and responding to your contact inquiry
Communication regarding your inquiry
Protection against spam and automated requests

Storage duration:
Your personal data will be stored for up to 1 year after the correspondence has ended, unless longer retention is required for legal obligations. Data not intended for further use will be deleted after this period.

Data disclosure:
Your data is generally not disclosed to third parties, except where necessary for processing your inquiry or legally required.

6. Server Logs

Automatic data collection:
When visiting our website, the following information is automatically stored in server logs:

IP address
Date and time of request
Data volume transferred
Referrer URL
User-Agent (browser and operating system)

Legal basis:
Art. 6(1)(f) GDPR (legitimate interest in system security)

Storage duration:
Log files are automatically deleted after 30 days.

7. Cookies

Usage:
Our website currently does not use cookies for core functionality. Technical cookies may, however, be set by external services.

8. Rights of Data Subjects

You have the following rights regarding your personal data:

8.1 Right of access (Art. 15 GDPR)
You have the right to obtain information about the processing of your personal data.

8.2 Right to rectification (Art. 16 GDPR)
You have the right to request rectification of inaccurate data.

8.3 Right to erasure (Art. 17 GDPR)
You have the right to request deletion of your data if the conditions of Art. 17 GDPR are met.

8.4 Right to restriction (Art. 18 GDPR)
You have the right to request restriction of processing.

8.5 Right to data portability (Art. 20 GDPR)
You have the right to receive your data in a structured, common, and machine-readable format.

8.6 Right to object (Art. 21 GDPR)
You have the right to object to the processing of your data.

8.7 Right to withdraw consent (Art. 7(3) GDPR)
Where processing is based on consent, you may withdraw it at any time with future effect. Withdrawal does not affect the lawfulness of processing prior to withdrawal. You may declare withdrawal at any time via the contact details provided in this privacy policy.

9. Right to Lodge a Complaint

You have the right to lodge a complaint with the data protection authority:
Austrian Data Protection Authority
Barichgasse 40-42
1030 Vienna
Phone: +43 1 52 152-0
E-Mail: dsb@dsb.gv.at

10. Data Security

10.1 Technical measures

SSL/TLS encryption for all data transmissions
Secure server configuration
Regular security updates
Firewall protection

10.2 Organizational measures

Access controls to personal data
Regular employee training

11. Changes to the Privacy Policy

We reserve the right to amend this privacy policy as needed to reflect changes in legal requirements or our services. The updated policy will apply on your next visit.

12. Contact

For data protection questions, please contact us at any time:
HOSB Ingenieurbüro e.U.
Phone: +43 677 62077177
E-Mail: office@hosb.at

We work with the following processors and have concluded corresponding data processing agreements pursuant to Art. 28 GDPR:

Hosting provider:
Helloly GmbH, Austria
Purpose: Provision and operation of the website
Location: EU/Austria
Data processing agreement: In place
Categories of personal data: Server logs, technical data

Email service:
SMTP service via hosting provider
Purpose: Email sending and receiving
Location: EU/Austria
Data processing agreement: In place
Categories of personal data: Email addresses, message content