Privacy Policy
1. Data Controller
Web-Werk Ischgl GmbH
Stöckwaldweg 19
6561 Ischgl, Austria
Email: hello@web-werk.at
Managing Directors: Simon Ljuljdjuraj, Patrick Zangerl
2. Overview of Processing
The following overview summarizes the types of data processed and the purposes of their processing and refers to the data subjects.
Types of data processed
- Inventory data (e.g., names, addresses)
- Contact data (e.g., email, phone numbers)
- Content data (e.g., entries in contact forms)
- Usage data (e.g., visited websites, access times)
- Meta/communication data (e.g., device information, IP addresses)
Categories of data subjects
- Website users
- Communication partners (contact form, email)
3. Legal Bases
Below you will find an overview of the legal bases of the GDPR on the basis of which we process personal data:
- Consent (Art. 6 Para. 1 lit. a GDPR) – The data subject has given their consent to the processing of their personal data for one or more specific purposes (e.g., cookies for web analytics).
- Contract fulfillment and pre-contractual inquiries (Art. 6 Para. 1 lit. b GDPR) – Processing is necessary for the performance of a contract or for the implementation of pre-contractual measures (e.g., contact inquiries).
- Legitimate interests (Art. 6 Para. 1 lit. f GDPR) – Processing is necessary to safeguard the legitimate interests of the controller, unless the interests or fundamental rights of the data subject prevail (e.g., website security).
4. Hosting
Our website is hosted by the following provider:
World4You Internet Services GmbH
Hafenstraße 47–51
4020 Linz, Austria
www.world4you.com
We have concluded a Data Processing Agreement (DPA) pursuant to Art. 28 GDPR with World4You. World4You processes personal data exclusively on our behalf and according to our instructions.
When visiting our website, the server automatically collects so-called server log files. These contain:
- IP address of the requesting device
- Date and time of access
- Name and URL of the retrieved page
- Amount of data transferred
- Notification of whether the retrieval was successful
- Browser type and version
- Operating system
- Referrer URL (previously visited page)
Legal basis: Art. 6 Para. 1 lit. f GDPR (legitimate interest in the security and operation of the website).
Storage period: Server log files are automatically deleted after 14 days.
5. Contact Forms
When you contact us via one of our contact forms, the following data is processed:
- Name (required)
- Email address (required)
- Message/inquiry (required)
- Phone number (optional)
- Company (optional)
The data is processed via PHP on our server and forwarded to us by email. No storage in a database takes place. The data is used exclusively to process your inquiry.
Legal basis: Art. 6 Para. 1 lit. b GDPR (pre-contractual measures or contract fulfillment) and Art. 6 Para. 1 lit. f GDPR (legitimate interest in answering inquiries).
Storage period: Your inquiry will be deleted no later than 6 months after final processing, unless a contractual relationship is established. If a business relationship arises, we retain the data in accordance with statutory retention obligations (§ 132 BAO: 7 years).
6. Web Analytics with Matomo
We use Matomo (formerly Piwik) on our website, an open-source software for statistical analysis of user access. Matomo is self-hosted by us – the data is stored exclusively on our own server and is not transmitted to third parties.
Processed Data
- Truncated IP address (the last two bytes are anonymized)
- Date and time of access
- Pages visited and time spent
- Referrer (referring page)
- Browser type and version
- Operating system
- Screen resolution
- Country/region (based on the truncated IP address)
Cookies
Matomo sets cookies on your device to recognize returning visits and analyze usage behavior. These cookies are only set after your explicit consent (opt-in via our cookie banner).
The following cookies are used by Matomo:
| Cookie | Purpose | Duration |
|---|---|---|
| _pk_id | Recognition of returning visitors | 13 months |
| _pk_ses | Storage of the current session | 30 minutes |
| _pk_ref | Storage of the referrer URL | 6 months |
Legal basis: Art. 6 Para. 1 lit. a GDPR (consent) in conjunction with § 165 Para. 1 TKG 2021. You can revoke your consent at any time via our cookie banner or by email.
Revocation: You can revoke your consent at any time by accessing the cookie settings via the link in the footer of our website.
Matomo Opt-Out
You can deactivate tracking by Matomo here:
7. Cookies
Our website uses cookies. Cookies are small text files that are stored on your device and saved by your browser.
Technically necessary cookies
The following cookies are technically required for the operation of the website and do not require consent pursuant to § 165 Para. 3 TKG 2021:
| Cookie | Purpose | Duration |
|---|---|---|
| cookie_consent | Storage of your cookie consent | 12 months |
Analytics cookies
Analytics cookies (Matomo) are only set after your explicit consent. See section 6.
8. Data Transfer to Third Countries
No transfer of personal data to third countries (outside the EEA) takes place. All services we use are operated in the EU or in Austria.
9. Your Rights as a Data Subject
Under the GDPR, you have the following rights:
- Right of access (Art. 15 GDPR): You have the right to request confirmation as to whether personal data is being processed and to obtain information about this data.
- Right to rectification (Art. 16 GDPR): You have the right to request the rectification of inaccurate data and the completion of incomplete data.
- Right to erasure (Art. 17 GDPR): You have the right to request the deletion of your personal data, provided the legal requirements are met.
- Right to restriction (Art. 18 GDPR): You have the right to request the restriction of the processing of your data.
- Right to data portability (Art. 20 GDPR): You have the right to receive your data in a structured, commonly used and machine-readable format.
- Right to object (Art. 21 GDPR): You have the right to object at any time to the processing of your data for reasons arising from your particular situation, if the processing is based on Art. 6 Para. 1 lit. f GDPR.
- Right of withdrawal (Art. 7 Para. 3 GDPR): You have the right to revoke your consent at any time. The lawfulness of the processing until the revocation remains unaffected.
To exercise your rights, please contact: hello@web-werk.at
10. Right to Complain to the Supervisory Authority
If you believe that the processing of your personal data violates the GDPR, you have the right to file a complaint with the competent supervisory authority:
Austrian Data Protection Authority
Barichgasse 40–42
1030 Vienna
Phone: +43 1 521 52-2569
Email: dsb@dsb.gv.at
Web: www.dsb.gv.at
11. Data Security
Our website uses SSL/TLS encryption for security reasons. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line. When SSL/TLS encryption is activated, the data you transmit to us cannot be read by third parties.
12. Updates and Changes
We reserve the right to adapt this privacy policy so that it always complies with current legal requirements or to implement changes to our services. The new privacy policy will apply to your next visit.
Last updated: February 10, 2026