Skip to content

Privacy Policy

This is a courtesy translation. The legally binding version is the German original.

Controller

keusch.wien GmbH
Managing Director: Dr. Florian Keusch, MBA
FN 673994 v, Regional Court Wiener Neustadt (Landesgericht Wiener Neustadt)
Pöllangraben 49
2345 Brunn am Gebirge
Austria
VAT ID: ATU83090316

Email: office@keusch.wien
Phone: +43 678 125 48 26

Collection and Processing of Personal Data

The protection of your personal data is important to us. We process your data exclusively on the basis of legal provisions, in particular the General Data Protection Regulation (GDPR), the Austrian Data Protection Act (DSG), and the Austrian Telecommunications Act 2021 (TKG 2021).

This privacy policy informs you about which personal data we collect in connection with the operation of this website and for what purposes this data is processed.

Server Log Files

Each time this website is accessed, the web server automatically collects data in so-called server log files that your browser transmits. This includes the following data:

  • IP address of the requesting computer
  • Date and time of access
  • Name and URL of the retrieved file
  • Amount of data transferred
  • Notification of whether the retrieval was successful (HTTP status code)
  • Browser type and version
  • Operating system used
  • Referrer URL (the previously visited page)

This data is processed exclusively for the purpose of ensuring a smooth connection, comfortable use of the website, evaluation of system security and stability, and for administrative purposes.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest). The legitimate interest lies in ensuring the proper operation of the website and the detection and prevention of attacks.

Storage period: Server log files are automatically deleted after 14 days, unless further retention is required for evidentiary purposes.

Web Analytics and Marketing

Statistics and marketing services are loaded only after your explicit consent via the cookie banner. Both Google services are integrated in Consent Mode v2: before your consent, all storage and advertising signals (analytics_storage, ad_storage, ad_user_data, ad_personalization) are set to "denied". In this state no cookies are set and no identifying characteristics are stored; Google receives only cookieless, aggregated signals. Cookies and data processing only take place after your consent.

Google Analytics 4 (Statistics)

For statistical analysis of website usage we use Google Analytics 4, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Analytics uses cookies and comparable technologies that enable a pseudonymous analysis of usage (e.g. pages visited, time on page, approximate location based on the truncated IP address, device and browser data, pseudonymous client ID).

Legal basis: Art. 6(1)(a) GDPR and § 165(3) TKG 2021 (consent). Cookies and pseudonymous analysis only take place after your consent in the cookie banner.
Storage period: up to 24 months on Google servers.
Third-country transfer: Google may transfer data to the USA. Google is certified under the EU-US Data Privacy Framework (European Commission adequacy decision of 10 July 2023, Art. 45 GDPR).
Withdrawal: at any time via the "Cookie settings" link in the footer, with effect for the future.

Google Ads (Marketing)

To measure the success of our advertising we use Google Ads (conversion tracking and remarketing), a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Ads sets cookies that can record clicks on ads and subsequent actions on the website (such as submitting the contact form).

If you consent to marketing cookies, your email address may, when submitting the contact form, be irreversibly hashed (SHA-256) in your browser and transmitted to Google only in this hashed form (so-called enhanced conversions). Google uses the hash solely to attribute a conversion to a previous ad click; it cannot reconstruct your plaintext email address. Without consent to marketing cookies, no transmission takes place.

Legal basis: Art. 6(1)(a) GDPR and § 165(3) TKG 2021 (consent).
Storage period: between 30 and 540 days depending on cookie type.
Third-country transfer: Google may transfer data to the USA; certification under the EU-US Data Privacy Framework (Art. 45 GDPR).
Withdrawal: at any time via the "Cookie settings" link in the footer, with effect for the future.

Email Contact

If you contact us by email, the data you provide (your email address, your name if applicable, and your message) will be processed and stored for the purpose of handling your inquiry. No disclosure to third parties takes place.

Legal basis: Art. 6(1)(b) GDPR (performance of pre-contractual measures) or Art. 6(1)(f) GDPR (legitimate interest in responding to inquiries).

Storage period: Your data is stored for the duration of processing your inquiry and beyond for the period required to fulfill statutory retention obligations (in particular under § 132 BAO: 7 years). After these periods expire, the data is deleted.

Contact Form

When you send us an inquiry via the contact form on this website, the following data is collected:

  • Name (required)
  • Email address (required)
  • Phone number (optional)
  • Subject (optional)
  • Message (required)

Processing takes place exclusively server-side via PHP. The data entered is sent by email to office@keusch.wien. There is no storage in a database and no disclosure to third parties. To protect against abusive inquiries, your IP address is temporarily stored in pseudonymized form (SHA-256 hash) on the server and automatically deleted after 24 hours. Additionally, the IP hash is included in the sent email to enable attribution in cases of abuse.

Legal basis: Art. 6(1)(b) GDPR (performance of pre-contractual measures at the request of the data subject). The storage of the IP hash is based on Art. 6(1)(f) GDPR (legitimate interest in protection against abuse).

Storage period: Form data is not stored in a database but delivered exclusively by email. The email is retained for the duration of processing your inquiry and beyond for the period required to fulfill statutory retention obligations (in particular under § 132 BAO: 7 years). After these periods expire, the data is deleted.

Spam and Bot Protection: Cloudflare Turnstile

To protect the contact form against automated input and spam, we use the Turnstile service provided by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. Turnstile analyses technical characteristics of your browser and your interaction behaviour (such as mouse and keyboard input, browser characteristics, movement patterns) to distinguish whether the input comes from a human or a machine. Your IP address is also processed in this context. The service is designed to be privacy-friendly and is not used for cross-site tracking.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in an abuse-free contact form). The protection is necessary for the secure provision of the service you requested (contact form).
Third-country transfer: Cloudflare is headquartered in the USA; a transfer of data to the USA cannot be ruled out. Cloudflare is certified under the EU-US Data Privacy Framework (European Commission adequacy decision of 10 July 2023, Art. 45 GDPR).
Storage period: according to Cloudflare, data processed for bot detection is stored for a maximum of 24 hours.

Hosting

This website is hosted by us directly:

keusch.wien GmbH (reseller)
Pöllangraben 49
2345 Brunn am Gebirge
Austria

The servers are technically operated by:

Ledl.net GmbH & Co. KG (brand: Domaintechnik)
Lederergasse 6
5204 Straßwalchen
Austria

The server location is in Austria. Data processing therefore takes place within the European Union. A data processing agreement pursuant to Art. 28 GDPR exists with Ledl.net GmbH & Co. KG, ensuring GDPR-compliant processing at infrastructure level.

SSL/TLS Encryption

This website uses SSL/TLS encryption for security reasons. An encrypted connection can be recognized by the lock symbol in your browser's address bar and the "https://" prefix. When SSL/TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Recipients of Personal Data

Your personal data is disclosed exclusively to the following recipients or categories of recipients:

  • Infrastructure provider: Ledl.net GmbH & Co. KG (brand: Domaintechnik), processor pursuant to Art. 28 GDPR, responsible for the technical operation of the server infrastructure and the processing of server log files. Server location: Austria.
  • Cloudflare, Inc. (spam/bot protection of the contact form, Turnstile), 101 Townsend St, San Francisco, CA 94107, USA. Transfer to the USA on the basis of the EU-US Data Privacy Framework.
  • Google Ireland Limited (Google Analytics 4 and Google Ads), Gordon House, Barrow Street, Dublin 4, Ireland, with parent company Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Processing only after your consent; transfer to the USA on the basis of the EU-US Data Privacy Framework.

No further disclosure of personal data to third parties takes place.

Data Transfer to Third Countries

Website hosting takes place within the European Union (server location Austria). However, a transfer of personal data to the USA may take place in connection with the following services:

  • Cloudflare Turnstile (spam/bot protection of the contact form): processing on the basis of our legitimate interest.
  • Google Analytics 4 and Google Ads: only after your consent.

Cloudflare, Inc. and Google LLC are certified under the EU-US Data Privacy Framework. For transfers to the USA there is therefore a European Commission adequacy decision of 10 July 2023 pursuant to Art. 45 GDPR. In addition, the providers rely on standard contractual clauses pursuant to Art. 46(2)(c) GDPR.

Cookies and Similar Technologies

We distinguish between technically necessary and optional (consent-based) cookies and comparable storage technologies.

Technically necessary storage is set without consent. This includes storing your cookie choice in your browser (local storage, not a cookie in the narrow sense) so that the banner does not reappear on every visit, as well as technical characteristics of the Cloudflare Turnstile spam protection on the contact form. Legal basis: Art. 6(1)(f) GDPR and § 165(3) TKG 2021. This storage is essential for the operation of the website and cannot be disabled.

Optional cookies (statistics, marketing) are set exclusively after your explicit consent via the cookie banner. These include the cookies of Google Analytics 4 (e.g. _ga, _ga_<ID>, lifetime up to 24 months) and Google Ads (e.g. _gcl_au, lifetime 30 to 540 days). Legal basis: Art. 6(1)(a) GDPR and § 165(3) TKG 2021.

You can withdraw or adjust your consent at any time via the Cookie settings link in the footer, with effect for the future. Until you consent, no optional cookies are set thanks to Consent Mode v2 (see the "Web Analytics and Marketing" section).

Fonts

This website uses the fonts "Vollkorn", "Atkinson Hyperlegible", and "Departure Mono". The fonts are hosted locally on our server. No connection to external servers (such as Google Fonts) is made. Therefore, no data is transmitted to third parties.

Automated Decision-Making

No automated decision-making including profiling within the meaning of Art. 22 GDPR takes place.

Obligation to Provide Personal Data

The provision of personal data is neither legally nor contractually required. You are not obligated to provide personal data. However, if you do not submit data via the contact form or by email, we will be unable to process your inquiry.

Your Rights

Under the GDPR, you have the following rights regarding your personal data:

  • Right of access (Art. 15 GDPR): You have the right to request confirmation as to whether personal data is being processed and, where applicable, to obtain information about such data.
  • Right to rectification (Art. 16 GDPR): You have the right to request the rectification of inaccurate personal data and the completion of incomplete data.
  • Right to erasure (Art. 17 GDPR): You have the right to request the erasure of your personal data, provided the legal requirements are met.
  • Right to restriction of processing (Art. 18 GDPR): You have the right to request the restriction of the processing of your personal data.
  • Right to data portability (Art. 20 GDPR): You have the right to receive your personal data in a structured, commonly used, and machine-readable format, or to request its transfer to another controller.
  • Right to object (Art. 21 GDPR): You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you, where the processing is based on Art. 6(1)(f) GDPR.

Where processing is based on your consent, you have the right to withdraw that consent at any time pursuant to Art. 7(3) GDPR. The lawfulness of processing carried out prior to withdrawal remains unaffected.

To exercise your rights, please contact: office@keusch.wien

Right to Lodge a Complaint

If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with the competent supervisory authority:

Austrian Data Protection Authority (Österreichische Datenschutzbehörde)
Barichgasse 40-42
1030 Vienna
Austria

Phone: +43 1 521 52-25 69
Email: dsb@dsb.gv.at
Website: (opens in new tab) https://www.dsb.gv.at

Amendments to This Privacy Policy

We reserve the right to amend this privacy policy to keep it up to date with changes in the legal situation or changes in data processing. The version published on this website shall apply.

As of: May 2026