Privacy Policy

1. Data Controller

2. Data We Collect

2.1 Contact Form

When you submit our contact form, we collect your name, email address, and message. Providing a phone number is optional. This data is used solely to respond to your enquiry.

Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) and Art. 6(1)(f) GDPR (legitimate interest in responding to business enquiries).

Retention period: 3 years from last contact; 7 years where required by Austrian commercial law (§ 212 UGB).

2.2 Analytics (Google Analytics 4)

With your consent, we use Google Analytics 4 to collect anonymised usage data, including pages visited, session duration, and device type via cookies. Analytics are only activated after you provide consent.

Legal basis: Art. 6(1)(a) GDPR (consent).

Data transfer: Analytics data is transferred to Google LLC (USA) under Standard Contractual Clauses pursuant to Art. 46(2)(c) GDPR.

Withdrawal: You may withdraw consent at any time by clearing your browser's localStorage and cookies.

2.3 Meta Pixel (Facebook)

With your consent, we use the Meta Pixel to measure the effectiveness of our advertising and to understand actions visitors take on our site. The pixel sets cookies and may transmit your IP address and browsing actions to Meta. It is only activated after you provide consent.

Legal basis: Art. 6(1)(a) GDPR (consent).

Data transfer: Data is transferred to Meta Platforms Ireland Ltd. and Meta Platforms, Inc. (USA) under Standard Contractual Clauses pursuant to Art. 46(2)(c) GDPR.

Withdrawal: You may withdraw consent at any time by clearing your browser's localStorage and cookies.

2.4 Umami Analytics

We use Umami, a privacy-friendly analytics tool, to count page views and aggregate usage. Umami does not use cookies, does not collect personal data, and does not track visitors across sites, so it runs without requiring consent.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in measuring website usage).

2.5 Server Log Files

Our hosting provider automatically records standard server log data including IP address, browser type, referring URL, and timestamp. Logs are retained for a maximum of 7 days for security and debugging purposes.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in website security and stability).

3. Service Providers

We use the following third-party service providers to operate our website:

• Amazon Web Services (AWS SES) - transactional email delivery, processed in the EU (Frankfurt region).
• Google LLC - analytics, processed in the USA under Standard Contractual Clauses.
• Meta Platforms Ireland Ltd. - advertising measurement (Meta Pixel), processed in the EU and the USA under Standard Contractual Clauses.
• Umami Software, Inc. - cookieless, privacy-friendly usage analytics.

4. Cookies

• GA4 analytics cookies - set only after your explicit consent; retained for up to 2 years.
• Meta Pixel cookies - set only after your explicit consent; retained for up to 90 days.
• Consent preference - stored in localStorage and a cookie to remember your cookie choice across visits. Umami sets no cookies.

5. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR)
• Right to withdraw consent (Art. 7(3) GDPR)

To exercise any of these rights, contact us at now+web@belichberg.com.

6. Supervisory Authority

If you believe your data has been processed unlawfully, you have the right to lodge a complaint with the Austrian Data Protection Authority:

7. Updates to This Policy

We may update this privacy policy to reflect changes in our data processing practices or applicable law. Last updated: February 2026.