Privacy Policy

1. Introduction

The protection of your personal data is of utmost importance to us, BDS Betriebsdatenservice Gunz GmbH & Co KG. We process your data exclusively in accordance with statutory data protection regulations, in particular the General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (DSG 2018). Below we provide detailed information on the type, scope, and purpose of the collection, processing, and use of your personal data in the context of using our website https://bds.at

2. Controller

BDS Betriebsdatenservice Gunz
Gesellschaft m. b. H. & Co, KG

Our Data Protection Officer:

Mr. Robert Strach

Phone  +43 5574 45338
Fax  +43 5574 45338-6
Email:    office@bds.at

3. Collection and Storage of Personal Data as well as Type and Purpose of Processing

3.1. Automatic Data Collection (Server Log Files) and Hosting

This website is hosted by World4You. World4You processes the technically necessary server data as a processor, which are automatically transmitted by the browser used when visiting our website. These data include:

• IP address of your requesting device
• Date and time of access
• Name and URL of the retrieved file
• Referrer URL (the previously visited page)
• Browser used as well as, if applicable, the operating system of your device and the name of your access provider

These data are primarily processed for the following purposes:

• Ensuring a smooth connection setup
• Ensuring system security and stability
• Creation of server-side access statistics protected by access as well as technical analysis and optimization of our web offering

The specific storage period of the server log files depends on the technical and contractual settings of the hosting service.

Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest)

3.2. Data Protection Settings and Device Storage

On your first visit, you can choose whether, in addition to the technically necessary functions, the category "Statistics / Google Analytics" may also be activated. Google Analytics will not be loaded without your explicit consent. The button "Only necessary" or "Reject all" is just as immediately accessible as the consent option.

For storing your choice, we use exclusively the technically required local storage entry bds_consent_v1. It contains the version of the consent, your choice for statistics, and the time of the last change. This storage is necessary so that the website considers your choice on subsequent page visits. Without a selection, you will be asked again for your privacy settings.

You can change or revoke your decision at any time via "Privacy Settings" in the footer. Upon revocation, Google Analytics will be deactivated for further measurements, and existing Analytics cookies on this website will be deleted.

The category "Technically Necessary" also includes:

• the delivery of the website and its images, fonts, stylesheets, and scripts from the BDS web server,
• security functions of the web server as well as the server log files described in Section 3.1, and
• when explicitly opening the consultation form, the request for a temporarily valid security token from the BDS web server; the token is held exclusively in a hidden form field and is not stored as a cookie or in the browser storage. Form data is only transmitted after conscious submission.

To protect the consultation form from automated or excessive requests, a cryptographically derived key from the IP address is maintained on the server side along with timestamps. For rate limiting, requests within a one-hour time window are considered; the raw IP address is not stored in this rate-limit file.

Open privacy settings

3.3. Google Analytics and external links

If you agree to the category "Statistics / Google Analytics," this website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Only the measurement ID G-650MW5E22G is used.

Google Analytics helps us understand how our website is used. In particular, the pages visited, the time and duration of the visit, approximate geographic region, referrer, browser, operating system, device type, and interactions with the website may be processed. We use this information for statistical evaluation and technical improvement of our web offering. Google signals and features for personalized advertising are disabled.

Legal basis: Your voluntary consent according to Art. 6 para. 1 lit. a GDPR and – to the extent that information is stored or read on your device – § 165 para. 3 TKG 2021. Consent is not required to use the website or the consultation form.

Google Analytics, after your consent, particularly uses the cookies _ga and _ga_<Container-ID> to statistically differentiate visits. The validity of these cookies is limited to a maximum of 395 days. Google Analytics 4 anonymizes IP addresses before storage; according to Google, the full IP address is neither logged nor stored.

For event- and user-related data, Google Analytics provides a retention period of 14 months. Aggregated reports can be retained longer without individual user profiles being retrievable from them.

Google also processes data on systems outside the European Economic Area, particularly at Google LLC in the USA. Google LLC is certified under the EU-US Data Privacy Framework. Where this is not applicable, Google additionally bases transfers on the Standard Contractual Clauses approved by the European Commission. The processing terms intended for Google Analytics exist with Google.

You can revoke your consent at any time with effect for the future via "Privacy Settings" in the footer. The legality of the processing up to the revocation remains unaffected. Further information can be found in the Google Privacy Policy and in the Terms of Use for Google Analytics. A connection to these external sites only occurs if you consciously click on the respective link.

Other regular links lead to Apple App Store, Google Play, Microsoft Store, Blu Delta, and the Pixabay license information. A connection to the respective provider only occurs if you consciously click on such a link. From that point on, the privacy policy of the external provider applies.

3.4. Contact and Consultation Form

If you deliberately submit the contact or consultation form, your name, company, email address, an optionally provided phone number, the chosen topic area, your message, and confirmation of the data protection information will be transmitted to BDS. The transmission occurs by email to our own BDS mail server so that we can process your request and, if necessary, clarify any follow-up questions. The website does not store the request in a database.

With a mailto: link, merely clicking on it does not transmit any data to BDS. Transmission only occurs when you actually send the prepared message in your email program.

Legal basis: Your voluntary consent (Art. 6 para. 1 lit. a GDPR)

4. Transfer of data

A transfer of your personal data to third parties generally only occurs if:

• It is necessary to fulfill contractual obligations,
• You have given your explicit consent, or
• There is a legal obligation to disclose data.

Your data will not be used for advertising purposes without your explicit consent.

5. Retention Period

Your personal data will be deleted as soon as the purpose of storage no longer applies or when the statutory retention periods have expired. Unless there are legal retention periods that prevent it or the data is still required for contractual or legal obligations, your data will be routinely deleted.

6. Your Rights as a Data Subject

As a data subject, you generally have the following rights:

• Right to information: You have the right to request information about which personal data about you is stored.
• Right to rectification: You have the right to request the correction of incorrect or incomplete data.
• Right to erasure: Under certain conditions, you can request the deletion of your personal data.
• Right to restriction: You can request the restriction of the processing of your data.
• Right to data portability: You have the right to receive the data concerning you in a structured, commonly used, and machine-readable format.
• Right to object: You can object at any time to the processing of your personal data for reasons arising from your particular situation.
• Right of withdrawal: If you have given consent to data processing, you can revoke your consent at any time.

To exercise these rights, you can contact us at any time (see section 2).

7. Right to lodge a complaint with the supervisory authority

If you believe that the processing of your personal data violates applicable data protection law, you have the right to lodge a complaint with a data protection supervisory authority. In Austria, this is the Austrian Data Protection Authority.

8. Changes to the Privacy Policy

We reserve the right to occasionally adjust this privacy policy in order to align it with current legal developments or changes to our services. The current version of the privacy policy is available on our website.

Status: 17.09.2026

This privacy policy has been created taking into account the current legal requirements (GDPR, DSG 2018). If you have any questions regarding the processing of your personal data or the content of this privacy policy, please contact us using the contact details provided in Section 2.