Privacy policy

Controller

The controller responsible for data processing on this website is Wimmer Webservices e.U., Carina Wimmer, Stammersdorfer Straße 10/Top 6, 1210 Wien, email: office@wimmer-webservices.com.

Hosting

This website is hosted by Netlify, Inc. (USA). When you visit, Netlify processes technically necessary data such as IP address, time and requested page in server logs in order to deliver and secure the site. The legal basis is our legitimate interest (Art. 6(1)(f) GDPR).

Transfers to the USA: where the provider is certified under the EU-US Data Privacy Framework, the transfer relies on the European Commission’s adequacy decision (Art. 45 GDPR); otherwise on the EU standard contractual clauses in our data processing agreement with the provider (Art. 46(2)(c) GDPR).

Contact form

When you write to us via the form, we process your name, email address, project type, budget range and message in order to answer your enquiry (Art. 6(1)(b) GDPR). The data is transmitted via Netlify Forms and stored there; Netlify automatically checks submissions for spam. We delete enquiries once they are settled and no statutory retention obligations apply.

Email

Our mailboxes (such as office@wimmer-webservices.com) are hosted by Hostinger International Ltd., 61 Lordou Vironos, 6023 Larnaca, Cyprus. When you write to us, Hostinger stores your message with your sender address and any other details in our mailbox; notifications of new enquiries from the contact form arrive there as well. Hostinger processes the data as a processor. The legal basis is answering your enquiry (Art. 6(1)(b) GDPR). We delete emails once they are settled and no statutory retention obligations apply.

AI assistant on this website

Using the “Questions?” button you can write to an AI assistant. It only starts after you have confirmed the notice that you are communicating with an AI. Your messages, together with the conversation so far, are sent to Anthropic PBC (USA, Claude model) to generate an answer; Anthropic processes them as a data processor. We do not store any messages ourselves; the conversation stays in your browser window only and is gone once you close or reload it. Under its terms, Anthropic may keep requests for a limited time to detect abuse and does not use them for training. Please do not enter sensitive data. The legal basis is your consent (Art. 6(1)(a) GDPR); you can close the chat at any time. To prevent abuse, the hashed IP procedure described below applies.

Transfers to the USA: where the provider is certified under the EU-US Data Privacy Framework, the transfer relies on the European Commission’s adequacy decision (Art. 45 GDPR); otherwise on the EU standard contractual clauses in our data processing agreement with the provider (Art. 46(2)(c) GDPR).

Abuse protection

To prevent abuse of the AI assistant and to cap the number of messages per day, we store a hashed value of your IP address per day, salted anew every day (not the address itself), together with a counter. The value is only valid for that calendar day and is deleted automatically with the next message to the assistant after the day changes. The legal basis is our legitimate interest (Art. 6(1)(f) GDPR).

Website drafts for prospective clients

For individual companies we build non-binding website drafts. They sit on a subdomain of this domain (such as ritter-trans.wimmer-webservices.com), are also hosted by Netlify (see Hosting) and can only be opened with an access code that we send to the company by letter. Once the code has been entered, a cookie remembers for 90 days that access has been granted. It contains no personal details and is technically necessary for access (Section 165(3) Austrian Telecommunications Act 2021).

When you open a draft and view pages in it, we store at Netlify the time, the page viewed, whether the code was entered via the QR code or by typing it, the device type (phone, tablet, computer), the operating system and the country and state. Attempts with a wrong code are recorded in the same way. Netlify derives country and state from the IP address; we do not store the IP address itself. This lets us see whether the draft has been viewed. The legal basis is our legitimate interest (Art. 6(1)(f) GDPR). We delete the entries as soon as the draft goes offline.

Fonts, cookies and tracking

All fonts are loaded from our own server; no requests go to Google or other font providers. This website sets no cookies and uses no analytics or tracking tools.

Some features remember things in your browser only (local storage or session storage): your confirmation of the AI notice and your position when switching languages for the current session, and on the example sites things like the basket, wish list or demo login. This data does not leave your device, we cannot see it, and you can delete it at any time in your browser settings. Storing it is technically necessary for the features you use (Section 165(3) Austrian Telecommunications Act 2021).

Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection. You can withdraw any consent you have given at any time with effect for the future. To exercise these rights, contact office@wimmer-webservices.com. You can also lodge a complaint with the Austrian Data Protection Authority (www.dsb.gv.at).