Privacy Policy
Information about data protection and GDPR-compliant processing of your data
Contents
This privacy policy explains what types of your personal data we process, for what purposes, and to what extent.
Last updated: February 2026
Data Controller
Administrator.at B2B GmbH
Franz-Bloder-Gasse 4/1
8200 Gleisdorf
Styria, Austria
Managing Directors: Dipl.-Ing. Peter Luca Lidl, Dipl.-Ing. Julius Wukoutz, MSc
Email address: office@administrator.at
Legal Notice: https://www.docuflair.com/en/pages/legal-notice.html
Data Protection Contact
The appointment of a Data Protection Officer is currently not mandatory for our company pursuant to Art. 37 GDPR. For all questions regarding data protection and the exercise of your data subject rights, please contact:
Dipl.-Ing. Julius Wukoutz, MSc
Email: office@administrator.at
Processing Overview
The following overview summarises the types of data processed and the purposes of their processing.
Types of Data Processed
- Master data (e.g. names, addresses)
- Content data (e.g. text entries)
- Contact data (e.g. email, telephone numbers)
- Meta/communication data (e.g. IP addresses)
- Usage data (e.g. websites visited)
Categories of Data Subjects
- Business and contractual partners
- Prospective customers
- Communication partners
- Customers
- Website visitors
Relevant Legal Basis
Below we share the legal bases of the General Data Protection Regulation (GDPR) on which we process personal data.
- Consent (Art. 6(1)(a) GDPR) - The data subject has given consent to the processing of their personal data.
- Contract Performance (Art. 6(1)(b) GDPR) - Processing is necessary for the performance of a contract.
- Legal Obligation (Art. 6(1)(c) GDPR) - Processing is necessary for compliance with a legal obligation.
- Legitimate Interests (Art. 6(1)(f) GDPR) - Processing is necessary for the purposes of legitimate interests.
National Data Protection Regulations in Austria
In addition to the data protection regulations of the GDPR, national data protection regulations apply in Austria, in particular the Federal Act on the Protection of Natural Persons with regard to the Processing of Personal Data (Data Protection Act - DSG).
Security Measures
We take appropriate technical and organisational measures to ensure a level of protection appropriate to the risk.
Technical Measures
- SSL encryption (https)
- Ensuring confidentiality, integrity and availability
- Control of physical and electronic access
- Data protection by design
Organisational Measures
- Procedures for exercising data subject rights
- Deletion of data in accordance with legal requirements
- Response to data security threats
- Privacy-friendly default settings
Analytics and Tracking Services
We use analytics and tracking services on our website to analyse user behaviour and continuously improve our website. These services are activated by default and can be rejected at any time via the cookie banner (opt-out model pursuant to Section 25 TTDSG). Upon rejection, all tracking cookies are immediately deleted.
Google Analytics 4
We use Google Analytics 4 (GA4), a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").
- Purpose: Analysis of user behaviour to optimise our website
- Data processed: IP address (truncated), device information, page views, time on site, referrer URL
- Legal basis: Legitimate Interest (Art. 6(1)(f) GDPR) with right to object (Opt-Out)
- Storage duration: 14 months
- Recipients: Google Ireland Limited, where applicable Google LLC (USA)
Opt-Out: You can prevent data collection by Google Analytics by installing the browser add-on for disabling Google Analytics: https://tools.google.com/dlpage/gaoptout
Further information: Google Privacy Policy
Facebook Pixel (Meta)
We use the "Facebook Pixel" from Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Meta").
- Purpose: Measuring the effectiveness of advertisements, creating target audiences for advertising purposes
- Data processed: HTTP header information, pixel-specific data, button click data, form field values, optional values
- Legal basis: Legitimate Interest (Art. 6(1)(f) GDPR) with right to object (Opt-Out)
- Storage duration: 90 days
- Recipients: Meta Platforms Ireland Limited, where applicable Meta Platforms Inc. (USA)
Opt-Out: You can object to the use of Facebook Pixel at: Facebook Ad Settings
Further information: Meta Privacy Policy
LinkedIn Insight Tag
We use the "LinkedIn Insight Tag" from LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland ("LinkedIn").
- Purpose: Analysis of website usage by LinkedIn members, measuring the effectiveness of LinkedIn ads
- Data processed: URL, referrer URL, IP address, device and browser properties, timestamp
- Legal basis: Legitimate Interest (Art. 6(1)(f) GDPR) with right to object (Opt-Out)
- Storage duration: 90 days
- Recipients: LinkedIn Ireland Unlimited Company, where applicable LinkedIn Corporation (USA)
Opt-Out: You can object to the use at: LinkedIn Opt-Out
Further information: LinkedIn Privacy Policy
Third Country Transfers
Some of the services we use are based outside the European Union or the European Economic Area. In particular, data is transferred to the USA.
EU-US Data Privacy Framework
Google, Meta (Facebook), and LinkedIn have joined the EU-US Data Privacy Framework (DPF). The DPF is an adequacy decision by the European Commission (Implementing Decision (EU) 2023/1795) confirming that participating US companies provide an adequate level of data protection.
- Google: DPF Certification
- Meta Platforms: DPF Certification
- LinkedIn: DPF Certification
In addition, we have concluded Standard Contractual Clauses (SCCs) pursuant to Art. 46(2)(c) GDPR with all processors to ensure an adequate level of data protection.
Contact
When contacting us (e.g. via contact form, email, telephone), the details of the enquiring persons are processed insofar as this is necessary to answer the contact enquiries.
Types of Data Processed
- Master data (e.g. names, addresses)
- Contact data (e.g. email, telephone numbers)
- Content data (e.g. text entries)
Legal Basis
- Contract performance and pre-contractual enquiries
- Legitimate interests
Data Retention and Deletion
We store personal data only for as long as necessary for the respective processing purpose or as required by statutory retention periods.
- Contact form data: Enquiries are deleted after complete processing and expiry of any warranty periods, but no later than 3 years.
- Demo requests: Data is deleted after completion of the consultation, no later than 3 years.
- Partner enquiries: Data is deleted after completion of the partner review, unless a contractual relationship is established, no later than 3 years.
- Server log files: Technical log data is automatically deleted after 12 months.
- Tracking cookies: See the cookie table above (depending on the cookie, 24 hours to 2 years).
- Statutory retention periods: Tax and commercial law requirements may require longer retention (up to 7 years pursuant to the Austrian Federal Fiscal Code/BAO).
Automated Decision-Making
Automated decision-making including profiling pursuant to Art. 22 GDPR does not take place. We do not make decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you.
Rights of Data Subjects
As a data subject, you have various rights under the GDPR:
- Right of access: Confirmation and information about the processed data.
- Right to rectification: Correction of inaccurate data.
- Right to erasure: Immediate deletion of data.
- Right to restriction: Restriction of processing.
- Right to data portability: Receipt of data in a machine-readable format.
- Right to object: Objection to processing.
- Right to withdraw consent: Withdrawal of given consent.
- Right to lodge a complaint: Complaint to a supervisory authority.
Competent Supervisory Authority
You have the right to lodge a complaint with the competent data protection authority:
Austrian Data Protection Authority
Barichgasse 40-42, 1030 Vienna
Phone: +43 1 52 152-0
Email: dsb@dsb.gv.at
Website: www.dsb.gv.at
Definitions
- Personal data: Any information relating to an identified or identifiable natural person.
- Controller: The natural or legal person who determines the purposes and means of processing.
- Processing: Any operation performed on personal data.
Changes and Updates
We adapt the privacy policy as soon as changes to the data processing carried out by us make this necessary. We will inform you as soon as the changes require your cooperation.