Privacy policy.

This is a translation for your convenience. The German version is the legally binding one.

This privacy policy explains how personal data are processed when you visit our website, send an enquiry or enter into a business relationship with us. It is intended in particular for business contacts, prospective customers and website visitors.

I. Name and contact details of the controller

Controller: Fattinger GmbH, Marburgerstraße 49, 8042 Graz, Austria. Email: office@fattinger.at.

II. Purposes and legal bases

We process enquiries and business data to prepare and perform contracts (Article 6(1)(b) GDPR), meet legal obligations, particularly accounting and tax requirements (Article 6(1)(c) GDPR), conduct general business communications and operate our website securely (Article 6(1)(f) GDPR). Our legitimate interests are handling requests, maintaining business relationships and preventing misuse.

Where processing requires your consent, the legal basis is Article 6(1)(a) GDPR. Sending an enquiry does not constitute consent to marketing messages. Providing personal data is voluntary; without the information necessary for an enquiry or contract, we may be unable to handle your request.

III. Categories and sources of data

Depending on the interaction, we process your name, role, company, address, email address, telephone number where supplied, enquiry content, and contract, invoice and payment data. We receive these data from you, your authorised contacts or public business directories. Website visits also generate technical access data.

IV. Recipients

Data are shared only with parties that need them for the relevant purpose, including IT and hosting providers and, where necessary, transport providers, tax advisers, legal advisers and competent authorities. Service providers act as processors where required. The web services described below may process data outside the European Economic Area, particularly in the United States. Such transfers are subject to Articles 44 et seq. GDPR; Webflow provides standard contractual clauses in its data processing agreement.

V. Website, hosting and contact form

Hosting: This website is built and hosted using Webflow, Inc., USA. Requests for pages and files involve processing data such as IP address, request time, requested URL, and browser and device information. These data support website delivery, troubleshooting and security. The legal basis is Article 6(1)(f) GDPR. Provider information: webflow.com/legal/privacy and webflow.com/legal/dpa.

Contact form and email: We process the information you send, including your business category, company, name, email address, telephone number where supplied, subject and message, to answer your enquiry. Form submissions are processed and stored by Webflow; notifications may be sent to our responsible contacts. Depending on the request, the legal basis is Article 6(1)(b) or (f) GDPR. Please do not send sensitive personal data that are unnecessary for your enquiry. To reliably record and forward enquiries, form data are also stored in Compass, the enquiry system operated by our IT service provider Wolfgang Derigo. It runs on a Hetzner server in the EU; notifications are sent to us via World4You. Technical source information, such as the form page, language and receipt time, is also processed. A hidden check field (honeypot) helps detect automated submissions. This enquiry process does not use AI analysis.

Bot protection: The Webflow contact form uses Cloudflare Turnstile to detect automated and abusive requests. This may involve processing IP addresses and technical browser, device and interaction data. The provider is Cloudflare, Inc., USA. This protects the form against misuse (Article 6(1)(f) GDPR). More information: https://www.cloudflare.com/turnstile-privacy-policy/.

External fonts: This website uses Adobe Fonts and Google Fonts. Loading font files connects your browser to the respective provider’s servers and transmits information including your IP address and technical request details. Processing in the United States is possible. According to their provider information, Adobe Fonts and Google Fonts do not use cookies for font delivery. Provider information: https://www.adobe.com/privacy/policies/adobe-fonts.html and https://fonts.google.com/faq.

Cookies and analytics: This website currently has no marketing pixels or Google Analytics audience measurement configured. Technical functions, including hosting, form processing and abuse prevention, may nevertheless process connection data and use technical storage mechanisms. Google Maps is not embedded. If optional analytics or marketing services are added, this policy will be updated and any required consent obtained before those services are activated.

VI. Retention periods

We retain data only for as long as needed for the relevant purpose or required by law. Accounting and tax records generally have to be retained for seven years under section 132 BAO or section 212 UGB; longer periods may apply in individual cases. Prospective-customer and enquiry data are deleted once no longer needed, at the latest after two years, unless a contract, ongoing matter or legal retention requirement justifies further storage. Technical logs are subject to the relevant provider’s operational and security retention periods.

VII. Your rights

Subject to the applicable legal conditions, you have rights of access, rectification, erasure, restriction of processing and data portability. You may object to processing based on legitimate interests on grounds relating to your particular situation, and to direct marketing at any time. You may withdraw consent at any time with effect for the future; this does not affect the lawfulness of processing before withdrawal. To exercise your rights, email office@fattinger.at.

VIII. Right to complain

Under Article 77 GDPR, you may lodge a complaint with a data protection supervisory authority. In Austria: Austrian Data Protection Authority, Barichgasse 40–42, 1030 Vienna, email: dsb@dsb.gv.at, website: dsb.gv.at.

Last updated: 5 October 2026.