Privacy Policy

1. General information

Stallinger Holding GmbH ("Stallinger" or "we") is responsible for processing your personal data and is committed to protecting it. We take this responsibility seriously. In this Privacy Policy, we explain why we collect your data and how we process it.

2. What are personal data?

Personal data are any information relating to an identified or identifiable individual (e.g., name, address, email address, telephone number, date of birth, billing information, etc.).

3. Which data does Stallinger process?

We process personal data exclusively in accordance with the General Data Protection Regulation (GDPR) and the Austrian Data Protection Act. We only process personal data that you, as a customer or business partner, voluntarily provide to us—for example, when submitting an inquiry or concluding a contract. This includes your name, contact details, contract information, and payment data.

Providing your data is necessary for concluding a contract. Without this data, we cannot fulfil the agreement.

We collect and process your personal data for the following purposes and legal bases:

• For the performance of pre-contractual measures or contractual obligations (Art. 6(1)(b) GDPR)
• Based on your consent (Art. 6(1)(a) GDPR)
• To comply with legal obligations (Art. 6(1)(c) GDPR)
• For advertising and marketing activities based on our legitimate interest (Art. 6(1)(f) GDPR)

Server log files

The provider of this website and its pages automatically collects and stores information in so-called server log files, which your browser communicates to us automatically. The information comprises:

• The type and version of browser used
• The used operating system
• Referrer URL
• The time of the server inquiry
• The IP address (anonymized)

This data is not merged with other data sources.

This data is recorded on the basis of Art. 6(1)(f) GDPR. The operator of the website has a legitimate interest in the technically error free depiction and the optimization of the operator's website. In order to achieve this, server log files must be recorded.

4. Cookies and tracking technologies

Our website uses so-called "cookies." These are small text files stored on your device via your browser. Cookies help us make our website more user-friendly and provide certain functionalities.

Types of cookies

Technically necessary cookies (session cookies): These cookies are essential for the operation of the website and are automatically deleted after your visit. They ensure correct display, functionality, and the storage of your cookie consent settings.

Analytics and tracking cookies: These cookies allow us to analyse how our website is used (e.g., via Google Analytics) and to improve our services. They are only set with your explicit consent.

Cookie consent

When you visit our website for the first time, a cookie banner appears, allowing you to select which cookies you want to allow.

The storage of tracking cookies is based solely on your consent (Art. 6(1)(a) GDPR).

Technically necessary cookies are processed based on our legitimate interest in ensuring the secure and functional operation of the website (Art. 6(1)(f) GDPR).

Withdrawal of consent

You can change your cookie preferences at any time via our cookie settings and withdraw any previously given consent.

Browser settings

You can delete or block cookies at any time through your browser settings. However, disabling technically necessary cookies may limit the functionality of our website.

5. Google / Google Analytics

We use Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Analytics uses cookies that are stored on your device and enable analysis of your website usage. Information generated by these cookies (e.g., IP address, browser type, operating system, referrer URL) is usually transmitted to and stored on a Google server in the USA.

IP anonymisation is activated on this website, meaning your IP address is shortened by Google within the EU or EEA before being transferred to the USA. Only in exceptional cases will the full IP address be sent to the USA and shortened there.

Your data is processed exclusively on the basis of your consent under Art. 6(1)(a) GDPR. You may withdraw your consent at any time via our cookie settings.

For information on storage duration and further details, please visit:
https://policies.google.com/privacy?hl=en
https://support.google.com/analytics/answer/6004245?hl=en

Data transfers to the USA are based on the EU–US Data Privacy Framework.

Recipient: Google acts as a processor pursuant to an agreement under Art. 28 GDPR.

Withdrawal: You can deactivate Google Analytics at any time in the cookie settings.

6. Does Stallinger share your data?

We do not share personal data with third parties unless necessary for the purposes stated above and permitted by a valid legal basis, such as statutory obligations or the fulfilment of a contract.

Where legally required, data may be shared with external partners such as tax consultants, auditors, or IT service providers acting as processors on our behalf. All processors handle your data exclusively according to our instructions and only for the purposes described above.

No automated decision-making or profiling takes place.

7. How long does Stallinger store your data?

We store your personal data only as long as necessary to fulfil the purposes described above and to comply with contractual or legal obligations. For example, billing data must be retained for 7 years in accordance with the Austrian Federal Fiscal Code (BAO) and VAT Act (UStG).

Where processing is based on your consent, the data will not be kept longer than the validity of that consent.

We retain your data for as long as statutory retention periods apply or potential legal claims have not yet expired.

8. Your rights as a data subject

You have the right to request information about your stored personal data, its origin, recipients, and the purpose of processing at any time. You also have the right to rectification of inaccurate data and deletion of your data.

If processing is based on consent, you may withdraw this consent at any time with future effect.

You further have the right to restrict processing and to receive the data you have provided in a structured, commonly used, machine-readable format (data portability).

You may submit complaints to the Austrian Data Protection Authority:
Barichgasse 40–42, 1030 Vienna
Email: dsb@dsb.gv.at

9. Contact details

Protecting your data is particularly important to us. You can reach us at any time with questions or to revoke consent at the following contact details: