Privacy Policy

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

AZentron Solutions
Mag. (FH) Andreas Zich
Oberaschau 3/2, 4882 Oberwang
Austria

E-mail: [email protected]
Alternatively, you can reach me via the contact form.

2. General information on data processing

The protection of your personal data is a particular concern of mine. I therefore process your data exclusively on the basis of the statutory provisions (GDPR, Austrian Telecommunications Act 2021 [TKG 2021], Austrian Data Protection Act [DSG]). In this privacy policy I inform you about the most important aspects of data processing on this website.

3. Hosting and server log files (IONOS)

This website is hosted by IONOS (IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany). When you visit this website, the hosting provider automatically records information in server log files that your browser transmits automatically, including:

• IP address
• Date and time of the request
• Browser type and version, operating system used
• Referrer URL (previously visited page)

This data is technically necessary to provide the website securely and reliably and therefore constitutes a legitimate interest pursuant to Art. 6(1)(f) GDPR. This data is not combined with other data sources. Due to the large volume of data, the log files are kept for a maximum of 8 weeks and then deleted automatically.

A data processing agreement pursuant to Art. 28 GDPR is in place with IONOS.

4. Content delivery network and security services (Cloudflare)

For this website I use the services of Cloudflare Germany GmbH, Rosental 7, 80331 Munich (parent company: Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA).

Cloudflare acts as a content delivery network (CDN) and upstream security service. All data traffic between your browser and the server is routed through Cloudflare’s infrastructure. In the process, Cloudflare processes in particular your IP address, information about your browser and operating system, the address accessed, the time of access and the referrer URL.

The purpose of processing is faster delivery of content, encryption of the connection and defence against automated attacks, in particular overload attacks (DDoS), bot access and mass form submissions. The legal basis is the legitimate interest in secure, stable and efficient operation of the website pursuant to Art. 6(1)(f) GDPR.

For this purpose Cloudflare uses technically necessary cookies, in particular __cf_bm (bot detection, lifetime approx. 30 minutes) and cf_clearance (proof of a passed security check). These cookies serve security purposes only and are not used for marketing or audience measurement.

Based on the requests handled via Cloudflare, aggregated statistics are available to me, for example on the number of requests, the volume of data transferred and attacks blocked. No additional analytics script is loaded for this, no cookies are set and no user profiles are created.

A transfer of data to the USA cannot be ruled out. Cloudflare, Inc. is certified under the EU-US Data Privacy Framework; standard contractual clauses are also in place. A data processing agreement pursuant to Art. 28 GDPR is in place with Cloudflare.

Further information: cloudflare.com/de-de/privacypolicy/

5. Spam protection in forms (Cloudflare Turnstile)

To protect the contact form against automated input, Cloudflare Turnstile is used, a service of Cloudflare, Inc. as named above.

Turnstile checks in the background whether a form entry comes from a human or from an automated program. For this purpose, technical characteristics of your browser and device as well as your IP address are evaluated and transmitted to Cloudflare. Unlike comparable services, according to the provider Turnstile does not create user profiles and does not track you across websites.

The purpose is to prevent spam and abusive form submissions. The legal basis is the legitimate interest in protecting the website against misuse pursuant to Art. 6(1)(f) GDPR. Without this protection, meaningful operation of the contact form would not be possible.

6. Cookies

The website uses technically necessary cookies only. These are small text files that are stored on your device and are required for the website to function properly: session management and security functions of the WordPress installation, the Cloudflare security cookies described in section 4, and a cookie that stores your language selection for the multilingual output of this website.

These cookies do no harm and do not collect personal data for marketing or statistical purposes. The legal basis for their use is the legitimate interest in a functional and secure operation of the website pursuant to Art. 6(1)(f) GDPR and Section 165(3) TKG 2021 (technical necessity).

Marketing or statistics cookies (e.g. analytics or tracking tools) are not used. A cookie consent banner is therefore not currently required; should cookies that are not technically necessary be used in future, your consent will be expressly requested in advance.

You can prevent cookies from being stored by adjusting your browser settings accordingly. Please note, however, that in this case the functionality of this website may be restricted.

7. Contact form

A contact form is available on the contact page. If you use it, the data you provide (name, company, e-mail address, telephone number where applicable, selected topic and message text) is processed for the purpose of handling your enquiry and in case of follow-up questions.

• Purpose: Handling your contact enquiry
• Legal basis: Legitimate interest (Art. 6(1)(f) GDPR) or performance of a contract / pre-contractual measures (Art. 6(1)(b) GDPR), where your enquiry is aimed at concluding a consulting contract
• Recipients: The data is used exclusively to handle your enquiry and is not passed on to third parties without your consent. The website’s e-mails, including the notification of your enquiry, are delivered via the “Email Deliverability” (Site Mailer) service of Elementor Ltd., Tel Aviv, Israel; the delivery status and, where applicable, the opening of e-mails are logged. A data processing agreement pursuant to Art. 28 GDPR is in place with Elementor Ltd. The European Commission has issued an adequacy decision for Israel; where sub-processors in other third countries are used, the transfer is based on standard contractual clauses. E-mails are received via my e-mail provider IONOS. In addition, submissions are stored in the website database and are therefore also covered by the backups described in section 8.
• Storage period: The data is deleted 6 months after your enquiry has been fully handled, unless statutory retention obligations (e.g. when a contract is concluded) prevent this.

8. Data backup (Jetpack VaultPress Backup)

To protect against data loss, technical faults and attacks, I use Jetpack VaultPress Backup, a service of Aut O’Mattic A8C Ireland Ltd., Grand Canal Dock, 25 Herbert Pl, Dublin, D02 AY86, Ireland. Backups are made automatically at regular intervals and additionally manually by me.

The WordPress database and the website’s file directories are backed up. The backups therefore also include personal data stored in the database, in particular the information submitted via the contact form (see section 7).

• Purpose: Restorability of the website and the associated data and ensuring data security pursuant to Art. 32 GDPR.
• Legal basis: Legitimate interest in secure, fail-safe and restorable operation of the website pursuant to Art. 6(1)(f) GDPR.
• Data processing: A data processing agreement pursuant to Art. 28 GDPR is in place with Aut O’Mattic A8C Ireland Ltd.
• Sub-processors: The provider uses Automattic Inc. and Pressable Inc., both United States, as well as Amazon Web Services for encrypted external storage of the backups.
• Transfer to third countries: The provider stores backups in data centres worldwide; according to the provider, restriction to a specific geographical area is not possible. A transfer to the United States and other third countries can therefore not be ruled out. The transfer is based on the European Commission’s standard contractual clauses under Decision (EU) 2021/914 of 4 June 2021, which form part of the aforementioned data processing agreement.
• Storage period: Backups are retained on a rolling basis in line with the booked service level and are then overwritten automatically. Deletions in the live system only take effect in the backups once the respective backup period has expired.

Further information: jetpack.com/gdpr/

9. Links to LinkedIn and Calendly

The website contains links to the LinkedIn company page of AZentron Solutions, to my personal LinkedIn profile and to my appointment booking page on Calendly.

These are plain links, not embedded plugins or widgets. Merely visiting the website therefore does not transmit any data to LinkedIn or Calendly. Only when you actively click the respective link are you forwarded to the platform; from that point on, the privacy policy of the respective provider applies:

• LinkedIn Ireland Unlimited Company – LinkedIn privacy policy
• Calendly LLC, USA – Calendly privacy notice

If you book an appointment via Calendly, the data you enter there (e.g. name, e-mail address and selected time slot) is processed by Calendly. A data processing agreement pursuant to Art. 28 GDPR is in place with Calendly. Calendly LLC is certified under the EU-US Data Privacy Framework; standard contractual clauses have also been agreed.

The legal basis for providing these links is the legitimate interest in easy contact and a professional public presence, Art. 6(1)(f) GDPR.

10. Your rights as a data subject

As a data subject, you have the following rights:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object to processing (Art. 21 GDPR)
• Right to withdraw consent at any time with effect for the future (Art. 7(3) GDPR)

To exercise your rights, contact me at [email protected] or via the contact form.

11. Right to lodge a complaint

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with the Austrian Data Protection Authority if you believe that the processing of your personal data infringes the GDPR:

Austrian Data Protection Authority
Barichgasse 40-42, 1030 Vienna
dsb.gv.at

12. Currency and changes to this privacy policy

This privacy policy is currently valid and was last updated on 23 October 2026. Due to the further development of this website and its services, or due to changes in legal or regulatory requirements, it may become necessary to amend this privacy policy.