Information pursuant to Articles 13 and 14 GDPR  
Intelligent Privacy Consulting ("IPC") is operated by Rolf-Dieter Kargl as the data controller ("Controller"). Information about the Controller can be found in the Imprint. The Controller processes personal data in compliance with applicable data protection regulations, particularly the General Data Protection Regulation (GDPR, Regulation [EU] 2016/679) and the Austrian Data Protection Act (DSG). Processing by the Controller only takes place on the basis of a legal foundation. The Controller does not carry out automated decision-making.

 

1. Website

This website uses a cookie. The purpose of the necessary cookie is to simplify the use of websites for the respective user and to ensure security. Our legitimate interest in processing personal data is based on Article 6(1)(f) GDPR for this purpose.

Cookie key: PHPSESSID  
Cookie type: First-party  
Expiration: Session  
Cookie description: A cookie generated by applications, based on the PHP language. This is a general identifier used to manage user session variables.

The website is hosted in Austria, where the servers are located.

 

2. Consulting Services and Customer Support

The Controller processes personal data for the purposes of providing its services, customer support, and information, including internal documentation and administration. The legal bases for processing the data are the fulfillment of a contract or the performance of pre-contractual measures (Article 6(1)(b) GDPR); compliance with legal obligations (Article 6(1)(c) GDPR) as well as legitimate interests (Article 6(1)(f) GDPR), particularly interests in asserting or defending legal claims, as well as internal management within the company. For a contract to be concluded, the provision of certain personal data is legally or contractually required, and the data subject is obligated to provide them; otherwise, a contract (and thus the provision of services) cannot take place.

 

2.1 Contact via Email or Contact Form

When contacting us (e.g., via a contact form or email), the information provided by the inquirer (name, company, email, phone, message) will be processed for documentation, processing, and responding to the inquiry. The Controller offers a contact form on its website. In the case of contact within an existing customer relationship or for initiating a business relationship, we rely on contract fulfillment or the performance of pre-contractual measures (Article 6(1)(b) GDPR). If you contact us as an employee (or contractor) for the fulfillment of your work or civil law obligations with your employer or other client, we also have a legitimate interest in the proper documentation, processing, and response to the inquiry (Article 6(1)(f) GDPR), which also includes your data as an external contact person; in the case of contact within an existing customer relationship or for initiating a business relationship, we rely on contract fulfillment or the performance of pre-contractual measures (Article 6(1)(b) GDPR).

 

3. Data Transmission and Data Processors

We transmit your personal data only to the extent necessary and only in the following cases: with your consent; for the processing of contractual relationships or to carry out pre-contractual measures; where we are legally obligated; to companies that assist us in providing our services; these service providers act as data processors who are only allowed to process the data according to our instructions (within the framework of a data processing agreement); this includes Google for communication and administration. Data may also be transmitted to third parties to the extent necessary to protect our legitimate interests (e.g., for the assertion, exercise, or defense of legal claims) or those of a third party, and there is no reason to believe that you have a predominant interest in preventing the disclosure of your data. Possible third parties in these cases include: contractual and business partners involved in the delivery or provision of services (e.g., logistics companies), banks (for payment processing), legal representatives, courts, tax consultants, public authorities, social insurance providers, and insurance companies. When we transfer data to a country without adequate legal data protection, we ensure an appropriate level of protection through the use of suitable guarantees in the form of contracts (standard contractual clauses) or binding internal data protection rules (Binding Corporate Rules), or rely on other exceptions provided for in the GDPR (consent, contract execution, assertion, exercise or defense of legal claims, overriding public interests, published personal data, or necessity to protect the integrity of the data subject). For a copy of the mentioned contractual guarantees, please contact us using the contact details provided.

 

4. Retention Period

Unless otherwise specified in the processing, we store personal data for as long as necessary to ensure the fulfillment of the mentioned purposes or as long as we are legally required to do so. This means for business correspondence, contracts, bookings, etc., according to Section 212(1) UGB and Section 132(1) BAO: until the end of the business relationship or until the expiration of applicable statutory and legal retention periods (especially a minimum of 7 years to prove compliance with tax, duties, and corporate law retention obligations); beyond that, until the end of any legal disputes where the data is needed as evidence. For services where claims for damages or other titles are made, for the necessary duration (between 3 and 30 years).  
For inquiries (contact): Personal data that you voluntarily provide to us will be stored for the purpose of processing and maintaining records related to the inquiry (up to 3 years after completion or termination), unless a longer retention period is necessary to fulfill a legal obligation or to assert or defend legal claims.

 

5. Rights of the Data Subject

You have the rights to access, rectification, erasure, restriction of processing, and data portability. You also have the right to object. You can withdraw your consent at any time with effect for the future. You have the right to file a complaint with the Austrian Data Protection Authority or with another supervisory authority in your country of residence or habitual residence.

Austrian Data Protection Authority (DSB)  
Barichgasse 40-42, A-1030 Vienna  
Phone: +43 1 52 152-0  
Email: dsb@dsb.gv.at

We ask that, in cases where you were not completely satisfied with our work, you contact us first, so we have the opportunity to address any errors.

 

6. Changes to Our Privacy Policy

We keep our privacy policy up to date and adjust it as necessary. The most current version of our privacy policy can be accessed on our website.

 

As of January 1, 2025

 

Rolf-Dieter Kargl explicitly points out that the content of the website is intended solely for informational purposes and does not constitute legal advice. The services offered also do not represent legal advice and cannot replace consultation with a lawyer. Rolf-Dieter Kargl does not provide legal advice in general. For matters reserved to the legal profession, please contact a lawyer. This disclaimer should be considered part of the internet offering from which this page is referenced.