THE ROOM

Privacy Policy

As part of our business activities, we operate a website to communicate with our clients and the public. Name of the processing activity: operation of a website.

Contact details

Controller:
Gabriela Mann, The Room
Georg-Sigl-Gasse 13/13, 1090 Vienna, Austria
Email: hello [at] theroom.consulting

Supervisory authority for data protection in Austria:
Austrian Data Protection Authority (Österreichische Datenschutzbehörde), Barichgasse 40–42, 1030 Vienna
Phone: +43 1 52 152-0 · Email: dsb@dsb.gv.at · Web: www.dsb.gv.at

For what purposes and on what legal basis is your personal data processed?

Inquiries

If you contact us via the form on this website or by email, the data you provide is processed in order to handle your inquiry. This processing is carried out for the performance of a contract or to take steps prior to entering into a contract (Art. 6(1)(b) GDPR) and on the basis of our legitimate interests (Art. 6(1)(f) GDPR).

Technical access data when visiting the website

To ensure the availability and security of our website, we process technical access data (IP address, browser data, device data, referrer, event), which is stored in log files. This data is generated automatically each time our website is accessed and is technically necessary to provide the website. This processing is based on our legitimate interests (Art. 6(1)(f) GDPR in conjunction with § 165(3) Austrian Telecommunications Act 2021) in ensuring the secure operation of the website, detecting errors and preventing unauthorised access.

Cookies, tracking and fonts

This website sets no cookies and uses no analytics, tracking or marketing services. Fonts are served locally from our own server; no connection is made to Google Fonts or any other external font provider.

Who receives your personal data?

Your data is not passed on to third parties. We use the following IT service providers as processors:

Is your personal data transferred to third countries?

Your data is processed at least in part outside the EU/EEA, namely in the USA (Netlify, Inc.).

An adequate level of protection results from an adequacy decision of the European Commission pursuant to Art. 45 GDPR (EU-U.S. Data Privacy Framework), under which Netlify is certified. In addition, the data processing agreement with Netlify provides for standard contractual clauses pursuant to Art. 46(2)(c) GDPR.

How long is your personal data stored?

The following are standard retention periods. In individual cases, longer retention may be necessary where there are specific reasons (for example, longer storage of tax-relevant data beyond seven years if tax proceedings are pending).

Is there automated decision-making (including profiling)?

We do not use automated decision-making (including profiling) that produces legal effects concerning you or similarly significantly affects you.

Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and objection. Please contact us to exercise these rights. If you believe that the processing of your personal data violates data protection law or that your data protection rights have otherwise been infringed, you may lodge a complaint with the competent supervisory authority. In Austria, this is the Data Protection Authority.

As we process your personal data on the basis of our legitimate interests, you generally have the right to object where there are grounds relating to your particular situation that speak against this processing.

This is a translation for convenience; the German version is authoritative. Based on the DSGVO4KMU template of the Austrian Data Protection Authority and the Austrian Economic Chambers.