1. Controller

PSP GmbH
Am Hügel 4
9560 Feldkirchen/Ktn.
Austria
Phone: +43 4276 3378
Email: office@petschacher.at
Website: www.ponti.eu

(Optional) Data protection contact / Data protection officer: [Name / Contact]

2. General information on data processing

We take the protection of your personal data very seriously. Personal data is processed by us only within the framework of the legal provisions (in particular GDPR and TKG).

Personal data is all information that relates to an identified or identifiable natural person (e.g. name, email address, IP address).

3. Hosting and server log files

When you visit this website, data is automatically processed for technical reasons that your browser transmits to our server. This includes in particular:

• IP address or shortened IP address (depending on hosting configuration)
• Date and time of the request
• Requested pages/files
• Referrer URL
• Browser type and browser version
• Operating system
• Access status / HTTP status code

Purpose: Ensuring technical operation, system security, error analysis, prevention of misuse.
Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest).
Storage period: [e.g. 14 days] or as long as necessary for the analysis of security incidents.

Hosting service provider: [Name, address, country]

4. Cookies and consent management

We use cookies and similar technologies to provide the website and – if you consent – to statistically evaluate it or to integrate external content.

Legal bases:

• Essential cookies: Art. 6 para. 1 lit. f GDPR (legitimate interest) or technical necessity
• Optional cookies (statistics/external media): Art. 6 para. 1 lit. a GDPR (consent)

You can revoke your consent at any time via the "Cookie settings" or adjust it.

5. Contact (email / contact form)

If you contact us by email or via a contact form, we process the data you provide (e.g. name, email address, message, possibly telephone number) to handle your request.

Purpose: Processing and responding to inquiries.
Legal basis: Art. 6 para. 1 lit. b GDPR (pre-contractual measures/contract) or Art. 6 para. 1 lit. f GDPR (legitimate interest in communication).
Storage period: as long as necessary for processing or in accordance with legal retention periods.

6. Web analysis / statistics (optional – only if used)

If you have consented, we use statistics tools to evaluate and improve the use of the website.

Purpose: Reach measurement, website improvement, error analysis.
Legal basis: Art. 6 para. 1 lit. a GDPR (consent).
Revocation: at any time via the cookie settings.

Tool/Provider: [e.g. Google Analytics / Matomo / Plausible / etc.]
Data transfer to third countries: [yes/no + details]
Storage period: [e.g. 14 months]

7. External media (optional – only if used)

Our website may integrate content from third parties (e.g. YouTube videos, Vimeo, Google Maps, social media embeds). This content is blocked by default and only loaded after your consent.

In this case, data (e.g. IP address) may be transmitted to the respective provider.

Legal basis: Art. 6 para. 1 lit. a GDPR (consent).
Revocation: at any time via the cookie settings.

Providers: [e.g. Google Ireland Limited (YouTube), Vimeo Inc., etc.]

8. Recipients of data

Your personal data will only be disclosed to third parties if this is necessary, e.g. to:

• Hosting providers / IT service providers
• Analysis or media providers (only with consent)
• Authorities, courts or legal representatives (if legally required)

We conclude contracts pursuant to Art. 28 GDPR with processors.

9. Data transfer to third countries

If data is transferred to countries outside the EU/EEA, this is only done in compliance with GDPR requirements (e.g. adequacy decision or standard contractual clauses).

If no transfer takes place: "No transfer to third countries takes place."

10. Storage period

We store personal data only as long as this is necessary for the respective purposes or legal retention obligations exist.

11. Your rights

Under the GDPR, you have the following rights in particular:

• Right to information (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR)
• Right to withdraw consents (Art. 7 para. 3 GDPR)

If you believe that the processing of your data violates data protection law, you can lodge a complaint with the supervisory authority:

Austrian Data Protection Authority
Barichgasse 40–42, 1030 Vienna
www.dsb.gv.at

12. Data security

We implement technical and organizational measures to protect your data as best as possible (e.g. TLS encryption/HTTPS).

13. Changes to this privacy policy

We reserve the right to adapt this privacy policy if necessary to adapt it to changed legal situations or technical changes.

Status: [Date to be entered]