Privacy Policy

Information obligations pursuant to Art. 13 and Art. 14 of the General Data Protection Regulation (GDPR)

Data protection is very important to us! With this notice, we would like to inform you about the processing of your personal data ("data") and about your claims and rights under data protection law.

Who is responsible for data processing and whom can you contact?

The party responsible for data processing is:

Roland Steindl GmbH
Czartoryskigasse 170/R4
1170 Vienna
Austria 

If you have any questions or concerns regarding the processing of your data, you can contact us at: office@werk4.at

What data is processed, for what purpose, and for how long?

We process your data in the manner described in the following sections. Should we process your data for other purposes, we will inform you separately and, where applicable, obtain your consent before commencing such data processing. We have marked the data that is strictly necessary—whether already provided by you or to be provided in the future—as mandatory fields (indicated by an asterisk *). Providing data that is not marked as mandatory is neither legally nor contractually required, nor is it necessary for the performance of the contract. If you fail to provide necessary data, we will generally be unable to deliver the service you are seeking.

Data processing when visiting our website (www.werk4.at)

Processed data:

Browser type*, operating system*, country*, date, time, and duration of access, IP address*, and pages visited on our website (including entry and exit pages)

Purpose:

This data processing is necessary to ensure the best possible user experience on our website and to guarantee the website's stability. In particular, we use this data to provide the following services: infrastructure and platform services, computing capacity, storage space and database services, security services, and technical maintenance services employed for the operation of the website.

Legal basis:

We process this data based on our legitimate interests or the legitimate interests of third parties (Art. 6(1)(f) GDPR)—specifically, to enable the technical operation of our website.

Duration:

We store your data only for as long as is necessary for the purposes for which we collected it, as required by law, or as justified by a prevailing interest in retaining it.

Recipients of this data:

– IT service providers (provision of IT services, hosting, and internet services)

Location: within the EEA; partial transfer to third countries

Basis for transfer: Standard Contractual Clauses pursuant to Art. 46 GDPR

Data processing within the scope of our business relationship (prospective clients, customers, and business partners)

Data processed:

Data regarding services, business address*, website address, communication data*, contact history*, customer type*, name (first name, surname), company name, contact details, appointment data*, contract data*

Purpose:

We process your data in the course of providing our services; for managing business relationships; in connection with the provision of free information; for the assertion of and defense against potential legal claims; and for the purpose of internal administration and management of the specific business case.

Legal basis:

Art. 6(1)(b) GDPR (pre-contractual/contractual processing), Art. 6(1)(c) GDPR (legal obligations), Art. 6(1)(f) GDPR (legitimate interests: legal enforcement and defense of claims)

Duration:

Storage only for as long as necessary, required by law, or covered by a legitimate interest.

Examples:

– Tax law (Section 132 BAO): 7 years

– UGB (Austrian Commercial Code): similar timeframes

– In individual cases (e.g., defense against legal claims): up to 30 years

Recipients of this data:

IT service providers

Purpose: IT services, IT support, remote maintenance

Location: within the EEA; Partly third countries

Basis: Standard contractual clauses pursuant to Art. 46 GDPR

Legal representatives and tax advisors

Purpose: Advisory services, defense and assertion of legal claims

Location: EEA

Courts and administrative authorities

Purpose: Compliance with legal obligations, defense/assertion of legal claims

Location: EEA

Auditors and public accountants

Purpose: Statutory audits, auditing

Location: EEA

Werk4 Cooperation Partner

Purpose: Participation in the client project – agreed with the client

Location: EEA

Data processing in connection with cookies

Our website uses cookies and similar technologies placed by Squarespace. These serve exclusively to:

• provide the website technically,

• enable basic functions, and

• ensure the security and stability of the site.

No proprietary marketing or advertising cookies are used.

In addition, Squarespace may use cookies that collect basic usage data (e.g., page views or technical errors) to improve website performance. This processing is based on legitimate interests in maintaining a secure and functional website.

You can find an up-to-date overview of the cookies used by Squarespace here:

https://support.squarespace.com/hc/en-us/articles/360001264507-The-cookies-Squarespace-uses

Data processing activities in connection with email contact

Data:

Name*, email*, telephone, subject of inquiry*

Purpose:

Processing your inquiry and any follow-up questions.

Legal basis:

Art. 6(1)(b) GDPR (pre-contractual measures or performance of a contract)

Art. 6(1)(f) GDPR (legitimate interest: responding to customer inquiries)

Duration:

Storage only for as long as necessary, required by law, or covered by a legitimate interest.

Recipients:

See recipients in section on Data processing within the scope of our business relationship.

Is there automated decision-making, including profiling?

No, no data processing takes place within the meaning of Art. 22 GDPR. This means: We do not make decisions based solely on automated processing (including profiling) that produce legal effects concerning you or similarly significantly affect you; any decision with such an effect is made by a natural person.

Your rights regarding data processing

You may:

(i) request information about stored personal data and obtain copies,

(ii) request the rectification, supplementation, or deletion of incorrect or unlawfully processed data,

(iii) request a restriction on processing,

(iv) object to processing or withdraw consent under certain circumstances,

(v) request data in a portable format,

(vi) lodge a complaint with the Austrian Data Protection Authority (www.dsb.gv.at) or another EU supervisory authority.

To exercise any of the aforementioned rights, please contact us via email at office@werk4.at or by letter at the contact addresses listed above.

As of: December 3, 2025