Privacy policy

1. Controller

The controller responsible for processing personal data on this website within the meaning of the General Data Protection Regulation (GDPR) is:

• Q-entra
• Address: to be added
• Email: office@q-entra.com
• Phone: to be added

The easiest way to reach us with questions about data protection is by email at office@q-entra.com.

2. General information and principles

The protection of your personal data is important to us. We process your data only in accordance with the law, in particular the GDPR and the Austrian Data Protection Act (DSG). This privacy policy explains which data we process when you visit this website and when you contact us, for what purpose, on what legal basis and for how long.

We only process the data that is necessary for the respective purpose. The following legal bases apply in particular:

• Art. 6(1)(a) GDPR: your consent
• Art. 6(1)(b) GDPR: the performance of a contract or steps taken at your request prior to entering into a contract
• Art. 6(1)(c) GDPR: compliance with a legal obligation, such as statutory retention requirements
• Art. 6(1)(f) GDPR: our legitimate interests, such as the secure operation of this website, unless your interests override them

3. Server log files

Each time you access this website, your browser automatically sends technical information to our server. This information is stored in server log files:

• IP address of the accessing device
• date and time of access
• page or file requested
• previously visited page (referrer), if your browser transmits it
• browser and operating system used

We process this data to deliver the website, keep it running reliably and to detect and fend off attacks or misuse. The legal basis is our legitimate interest in the secure operation of the website under Art. 6(1)(f) GDPR. We do not use the log files to create usage profiles and do not combine them with other data.

The log files are deleted after 14 days. We only keep individual entries for longer if and for as long as they are needed to investigate a specific security incident.

4. Hosting and processors

Where we use external service providers to operate this website or to send emails, such as a hosting provider, they process the data only on our behalf and in accordance with our instructions. We conclude a data processing agreement with these providers under Art. 28 GDPR.

We make sure that your data is processed within the European Union or the European Economic Area (EU/EEA). Should a transfer to a country outside the EEA be necessary in an individual case, it will only take place under the conditions of Art. 44 et seq. GDPR, for example on the basis of an adequacy decision of the European Commission or standard contractual clauses.

5. Contact form and email

When you write to us using the contact form or by email, we process the details you provide. In the contact form, these are:

• name (required)
• company (optional)
• email address (required)
• phone number (optional)
• selected topic
• your message (required)

The form also transmits the language version of the website from which you send your enquiry, so that we can reply in your language.

We use this data solely to handle your enquiry and to get in touch with you. The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to a quote or a contract, and otherwise our legitimate interest in responding to enquiries under Art. 6(1)(f) GDPR. Before sending, you confirm by ticking a checkbox that you have read this privacy policy. Your consent is not required to handle your enquiry.

The form is transmitted over an encrypted connection, and your enquiry is then delivered to us by email. To prevent misuse, we limit the number of enquiries that can be sent from the same IP address within a short time. For this purpose, the IP address is only processed in the server's memory and is not stored permanently. The legal basis for this is Art. 6(1)(f) GDPR.

We store your details for as long as is necessary to handle your enquiry and delete them afterwards, unless statutory retention obligations apply. If your enquiry leads to a contract, we keep the related documents for as long as statutory retention obligations apply. For tax-relevant documents, this is generally seven years (§ 132 of the Austrian Federal Fiscal Code, BAO).

Providing your data is voluntary. However, we cannot handle your enquiry without your name, email address and message.

6. Cookies and tracking

This website does not set any cookies. We do not use any analytics or tracking tools, advertising networks or social media plugins. No maps, videos or other content from external providers are embedded.

The fonts on this website are loaded from our own server. No connection is therefore made to Google or other font providers when you view the pages.

On your first visit, we select the appropriate language version based on your browser's language setting. Nothing is stored on your device for this.

7. External links

This website contains links to websites of other providers, for example to the Austrian Federal Legal Information System (RIS), the Austrian Data Protection Authority or the map service OpenStreetMap, which shows our location. Your browser only connects to the respective provider when you click such a link. No data is transferred to that provider before then.

Once you click, the privacy policy of that provider applies; we have no influence over it.

8. Data security

This website is delivered over an encrypted connection (TLS/HTTPS). This means that the data you send via the contact form is also protected against interception by third parties on its way to our server.

In addition, we take technical and organisational measures to protect your data against loss, manipulation and unauthorised access. We review these measures regularly and adapt them to the state of the art.

9. Your rights

Under the GDPR, you generally have the following rights:

• access to the personal data we process about you (Art. 15 GDPR)
• rectification of inaccurate or incomplete data (Art. 16 GDPR)
• erasure of your data (Art. 17 GDPR)
• restriction of processing (Art. 18 GDPR)
• data portability (Art. 20 GDPR)
• objection to processing based on our legitimate interest (Art. 21 GDPR)

If you have given us your consent, you can withdraw it at any time with effect for the future (Art. 7(3) GDPR). This does not affect the lawfulness of processing carried out before the withdrawal.

To exercise your rights, please write to us at office@q-entra.com. To ensure that your data does not reach unauthorised persons, we may ask you to verify your identity in a suitable way.

10. Right to lodge a complaint

If you believe that the processing of your data violates data protection law, you can lodge a complaint with a data protection supervisory authority. In Austria, this is:

• Austrian Data Protection Authority (Österreichische Datenschutzbehörde)
• Barichgasse 40-42, 1030 Wien, Austria
• www.dsb.gv.at

You are also welcome to contact us first so that we can try to resolve your concern together.

11. No automated decision-making

We do not use your data for automated decision-making, including profiling, within the meaning of Art. 22 GDPR.

12. Changes to this privacy policy

We update this privacy policy when the website, the service providers we use or the legal requirements change. The version currently published on this page applies. You will find the date of the current version at the top of this page.