Privacy Policy
Effective as of: June 23, 2025
1. Introduction
Protecting your personal data is important to us. This Privacy Policy explains which personal data we collect and process during your visit to nobelwerk.at, for what purposes this is done, and which rights you have as a data subject. The legal bases are the EU General Data Protection Regulation (GDPR), the Austrian Data Protection Act (DSG 2018), and the Telecommunications and Telemedia Data Protection Act (TTDSG).
2. Data Controller
Nobelwerk GmbH
Marc-Aurel-Straße 6/8 in 1010 Wien
T: +43 1 226 18 00
T: +43 676 333 9090
M: office@nobelwerk.at
W: ww.nobelwerk.at
No data protection officer has been appointed.
3. Collection and Use of Personal Data
3.1 Automatically Collected Data
When you access our website, technical data are transmitted automatically by your browser, including:
- IP address
- Date and time of access
- Screen resolution
- Operating system and browser version
- Referrer URL (previously visited page)
- Requested files
These data are technically necessary for operating the website (legal basis: Art. 6(1)(f) GDPR) and serve system security and error analysis.
3.2 Data Provided When Contacting Us
If you contact us via contact form, e-mail, telephone, or fax, the personal data you provide (e.g., name, e-mail address, content of the message) will be stored to process your inquiry (legal basis: Art. 6(1)(b) GDPR and/or Art. 6(1)(f) GDPR).
3.3 Registration and User Account
If you create a user account, we additionally collect and process:
- First and last name
- E-mail address
- Company data, if applicable
Processing of these data is necessary for contract fulfillment and customer support (legal basis: Art. 6(1)(b) GDPR).
3.4 Newsletter
To send our newsletter, we require your e-mail address. Subscription takes place via the double opt-in procedure, and you may withdraw consent at any time (legal basis: Art. 6(1)(a) GDPR; § 107 TTDSG).
3.5 Automated Decision-Making and Profiling
Automated decision-making, including profiling within the meaning of Art. 22 GDPR, does not occur.
4. Cookies and Tracking Technologies
4.1 Definition and Purpose
Cookies are small text files stored on your device. They help make our website more user-friendly, efficient, and secure.
4.2 Categories
- Necessary Cookies (e.g., session cookies)
- Preference Cookies (e.g., language settings)
- Statistics Cookies (e.g., Google Analytics with IP anonymization)
- Marketing Cookies (e.g., third-party tracking)
4.3 Consent and Withdrawal
We only use cookies after obtaining your consent. You can withdraw consent at any time via the cookie banner or your browser settings. Disabling cookies may limit the functionality of the website.
5. Third-Party Services
5.1 Hosting
Our website is hosted by easyname GmbH, Canettistraße 5/10, A-1100 Vienna, Austria. Processing is carried out for contract fulfillment and based on our legitimate interest in reliable operational security (legal basis: Art. 6(1)(b) and (f) GDPR).
5.2 Analytics Tools
We use Google Analytics 4 with IP anonymization enabled. Data are generally transmitted to servers of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, and stored there. Google Ireland Limited acts as our data processor. Processing is based on your consent (legal basis: Art. 6(1)(a) GDPR; § 25 TTDSG).
5.3 Google Fonts (Local Hosting)
We use Google Fonts for consistent font rendering. Font files are hosted locally; no connection to Google servers is made.
5.4 Google reCAPTCHA
To protect against automated abuse, we use Google reCAPTCHA. The provider is Google Ireland Limited. Processing is based on our legitimate interest (legal basis: Art. 6(1)(f) GDPR) and/or your consent (legal basis: Art. 6(1)(a) GDPR; § 25 TTDSG).
6. Disclosure and Transfer of Data
Personal data are only disclosed:
- When necessary for contract fulfillment (e.g., to payment service providers),)
- If you have given explicit consent,)
- If required by law,)
- Or if we have a legitimate interest and there is no reason to assume that your interests override it (Art. 6(1)(f) GDPR).))
Data transfers to third countries only take place if adequate safeguards exist (e.g., EU standard contractual clauses).
7. Data Retention
We retain personal data only as long as necessary for the respective purposes or as required by law (e.g., 7 years for tax purposes). Afterward, data are deleted or anonymized.
8. Your Rights
You have the right to:
- Access your stored data (Art. 15 GDPR)
- Rectify inaccurate data (Art. 16 GDPR)
- Erase data (“right to be forgotten,” Art. 17 GDPR)
- Restrict processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Object to processing based on legitimate interest (Art. 21 GDPR)
Withdrawal of consent does not affect processing carried out before withdrawal. Please contact us using the details above to exercise your rights. You may also lodge a complaint with the supervisory authority:
Data Protection Authority
Wickenburggasse 8, 1080 Vienna, Austria
E-mail: dsb@dsb.gv.at
9. Data Security
We implement technical and organizational security measures in accordance with Art. 32 GDPR to protect your data from unauthorized access, loss, or destruction (e.g., SSL/TLS encryption).
10. Changes to This Privacy Policy
We may update this Privacy Policy as needed. The current version will always be published on our website with the date of last update indicated above.
