Skip to content

Privacy Policy

Note on Cookies & Tracking

This website is optimized for data minimisation. We forgo analytics tools and ad tracking entirely. When loading the homepage, a technically required session cookie (PHPSESSID) is set to protect the contact form against abuse; it is deleted upon closing the browser. To protect the contact form from spam, we also embed the Cloudflare Turnstile service, which may set technically necessary cookies from Cloudflare (see the "Spam Protection with Cloudflare Turnstile" section). As these are exclusively technically necessary cookies, no cookie banner is required on this website.

Introduction and Overview

We have compiled this Privacy Policy (as of November 1, 2026) to explain in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and applicable national laws what personal data we process as the controller and what rights you hold.

Scope

This privacy policy applies to all personal data processed in our company (pursuant to Art. 4 No. 1 GDPR), such as name, email address, and postal address, arising from our website or communications.

Server Log Files

For operational security reasons, the hosting provider collects access data and stores it as server log files. These log files are stored for 28 days and subsequently deleted (legitimate interest pursuant to Art. 6 Para. 1 lit. f GDPR). Statistical evaluations provided by the host contain no IP addresses.

Local Visit Statistics (Anonymous)

To optimize our website and measure reach, we use a self-hosted, strictly counter-based hit counter. Only total access numbers for each page are recorded and aggregated. At no point are IP addresses, cookies, or other personal user data collected, stored, or processed. Identifying individual visitors is technically impossible.

Spam Protection with Cloudflare Turnstile

To protect our contact form from automated abuse (spam, bots), we use the "Turnstile" service provided by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. Turnstile checks technical characteristics of your browser and device in the background (e.g. IP address, browser properties, timing information) to distinguish automated access from human visitors. In most cases, no interaction on your part is required. This processing is based on our legitimate interest (Art. 6(1)(f) GDPR) in protecting our website from spam and abuse. Cloudflare may transfer data to the USA; according to Cloudflare, this is based on Standard Contractual Clauses and/or the EU-US Data Privacy Framework. For more information, see Cloudflare's privacy policy (opens in a new window).

File Exchange via Nextcloud

To exchange project files with customers and partners, we operate our own Nextcloud instance (https://www.aw-net.eu/fileshare) on the web space of this website; no data is passed on to the software vendor. When files are uploaded or downloaded via a share link, the transferred files and the data they contain, where applicable your name and email address, and technical access data (IP address, time, browser) are processed and stored in log files. Nextcloud uses technically necessary session cookies for this. Shares are protected with a password and expiry date where appropriate. The legal basis is the performance or initiation of a contract (Art. 6(1)(b) GDPR) and our legitimate interest in secure data exchange (Art. 6(1)(f) GDPR). Files are deleted as soon as they are no longer needed for the respective project, unless statutory retention obligations apply.

Legal Bases

  • Consent (Art. 6 Para. 1 lit. a GDPR): E.g., for inquiries submitted via the contact form.
  • Contract Performance (Art. 6 Para. 1 lit. b GDPR): For executing projects and orders.
  • Legal Obligation (Art. 6 Para. 1 lit. c GDPR): E.g., statutory tax retention obligations.
  • Legitimate Interests (Art. 6 Para. 1 lit. f GDPR): To ensure the operational security of this website.

Contact Details of the Controller

For privacy-related questions, please contact:

Andreas Fischer
Elizabeth-T.-Spira-Promenade 4/39, 1030 Vienna, Austria
Email: andreas.fischer@aw-net.eu
Tel.: +43 676 5808695

Storage Duration

We retain personal data only as long as necessary for providing our services or required by statutory retention periods (e.g., 7 years under Austrian tax law). Data is subsequently deleted or anonymized.

Your Rights Under GDPR

  • Right of access (Art. 15) & Rectification (Art. 16)
  • Right to erasure (Art. 17) & Restriction of processing (Art. 18)
  • Right to data portability (Art. 20)
  • Right to object (Art. 21)
  • Right to lodge a complaint with a supervisory authority (Art. 77): Austrian Data Protection Authority (Datenschutzbehörde), www.dsb.gv.at (opens in a new window)

Security

We utilize TLS encryption (HTTPS) to protect your data against unauthorized access during transmission.