Privacy policy

1. Controller responsible for data processing

The controller within the meaning of the GDPR is:
TR-Tec GmbH
Strudenzeile 3, 3270 Scheibbs, Austria
E-mail: datenschutz@tr-tec.at
Phone: +43 7482 43131

2. Your rights as a data subject

With regard to the data we process about you, you generally have the following rights:

• Access (Art. 15 GDPR)

• Rectification (Art. 16 GDPR)

• Erasure ("right to be forgotten", Art. 17 GDPR)

• Restriction of processing (Art. 18 GDPR)

• Data portability (Art. 20 GDPR)

• Objection (Art. 21 GDPR)

Withdrawal of consent (Art. 7(3) GDPR): where processing is based on your consent, you may withdraw it at any time. The lawfulness of processing carried out up to the withdrawal remains unaffected.

If you wish to exercise one of these rights, please use the contact details given above.

If you believe that the processing of your data infringes data protection law or that your data protection rights have otherwise been violated, you can lodge a complaint with the supervisory authority. In Austria the Austrian Data Protection Authority (www.dsb.gv.at) is responsible.

3. Data processing in connection with our website

a) Server log files

Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing device. The following data is collected:

• IP address of the requesting device

• Date and time of access

• Name and URL of the file retrieved

• Website from which the access was made (referrer URL)

• Browser used and, where applicable, the operating system of your device

This data is processed on the basis of our legitimate interest (Art. 6(1)(f) GDPR) in ensuring a smooth connection, system security and stability, and for administrative purposes. This data is not combined with other data sources and is generally deleted after 7 days.

b) Contacting us

If you contact us by e-mail or via a contact form, the data you provide (for example name, e-mail address, your request) is stored by us in order to process the enquiry and in case of follow-up questions.

For specific enquiries aimed at initiating a contractual relationship, the legal basis for processing is Art. 6(1)(b) GDPR (performance of pre-contractual measures).

For general enquiries we base the processing on our legitimate interest in communicating with website visitors (Art. 6(1)(f) GDPR).

Your data is deleted as soon as your enquiry has been conclusively dealt with and no statutory retention obligations prevent deletion.

c) Cookies

Our website uses cookies. These are small text files stored on your device. We distinguish between technically necessary cookies and cookies requiring consent.

Appearance setting in local storage: if you choose the light or dark appearance, this choice is stored in your browser local storage so that it is retained on your next visit. The entry does not leave your device, is transmitted neither to us nor to third parties and does not allow you to be identified. The legal basis is our legitimate interest in providing a functioning website pursuant to Art. 6(1)(f) GDPR and § 165(3) of the Austrian Telecommunications Act 2021. You can delete the entry at any time via the website data in your browser.

Cookies requiring consent (for example for analytics, marketing): we do not currently use such cookies, in particular none from third parties. Should they be used in future, they will only be set with your express consent (Art. 6(1)(a) GDPR). We will then obtain consent via a cookie banner (consent management platform) providing detailed information on each cookie (provider, purpose, storage period) and allowing withdrawal at any time with effect for the future.

If your browser blocks local storage, the website remains usable; your choice of appearance is then reset on every visit.

d) Typefaces\nFor a consistent presentation we use the typefaces Exo 2 and Open Sans. Both are served from our own server; there is no connection to Google Fonts or any other external service, and no data is transferred to third parties in the process.

e) Protected area (downloads)\nFor the protected area we process your e-mail address, the customer or reseller assignment, your password as a non-reversible hash and, if you have set one up, the secret for your second factor. The legal basis is performance of the contract with you or your company (Art. 6(1)(b) GDPR) and our legitimate interest in the security of access (Art. 6(1)(f) GDPR). Access credentials are deactivated and deleted after the end of the business relationship.

Signing in sets a strictly necessary session cookie. It contains nothing but a session identifier, applies to the protected area only and is deleted when you sign out or close your browser. No cookie is set on the public pages of this website.

Sign-in, sign-out, failed sign-in attempts, password changes and every download are logged with time, e-mail address, customer ID, IP address and browser identification. This log serves to document who obtained which software and to detect abusive sign-in attempts (Art. 6(1)(b) and (f) GDPR). Log files are deleted automatically after 90 days and are accessible to us only.

4. Data processing for business purposes

a) Legal basis: performance of contract

We process personal data such as name, address, contact details, bank details and contract details that you provide to us in order to fulfil our contractual obligations (for example to provide IT services, for invoicing) and to carry out pre-contractual measures. The legal basis is Art. 6(1)(b) GDPR. Without this data we cannot conclude or perform the contract with you.

b) Recipients of data

Your data is passed on to third parties only where this is permitted by law and necessary for performance of the contract or to fulfil legal obligations.

Processors: we use external service providers for certain activities (for example web hosting, accounting, cloud services). They process your data on our behalf and on the basis of a data processing agreement (Art. 28 GDPR). They are strictly bound by our instructions and may not use the data for any other purposes.

Third parties (own controllers): in certain cases we transmit data to bodies that process it under their own responsibility. These include, for example, tax advisers, banks for payment processing or lawyers where required. Such transmission takes place only on a legal basis (for example Art. 6(1)(b) or (c) GDPR).

Your data is not passed on to third parties for marketing purposes without your express consent.

c) Storage period

We store your personal data only for as long as is necessary for the purposes for which it was collected.

Data required for the performance of the contract is stored after the end of the business relationship for the duration of the statutory retention periods. Under Austrian law the tax retention obligation pursuant to § 132(1) of the Federal Fiscal Code is 7 years.

In addition, data may be retained for the assertion or defence of legal claims until the statutory limitation periods have expired (generally 3 years).

Data from enquiries that do not lead to a contract is deleted once it has been conclusively dealt with.

Your data is not used for automated decision-making or profiling.