Privacy Policy

Last updated: 29 December 2025

Thank you for your interest in our website.

This Privacy Policy informs you, in accordance with Articles 13 and 14 of the General Data Protection Regulation (GDPR), about the nature, scope and purpose of the processing of personal data when you use our website. Personal data means any information relating to an identified or identifiable natural person, including IP addresses.

We use cookies and similar technologies on our website. Technically necessary cookies are required for the operation of the website. Statistics and marketing technologies are only used with your prior consent.

1. Responsible

cyberLUTZ GmbH

Reimmichlstraße 33

9991 Dölsach, Austria

Email:

2. General Information on Data Processing

Personal data is processed when:

  • you visit our website (technical access data);
  • you contact us; or
  • you consent to the use of statistics or marketing technologies.

In principle, our website can be used without actively providing personal data. However, certain technical data is collected automatically when you access the website.

3. Legal Bases for Processing

Personal data is processed on the following legal bases:

  • Article 6(1)(a) GDPR – Consent
  • Article 6(1)(b) GDPR – Contract or pre-contractual measures
  • Article 6(1)(c) GDPR – Legal obligation
  • Article 6(1)(f) GDPR – Legitimate interest (e.g. ensuring the secure operation of the website)

4. Hosting and Server Log Files

Our website is hosted by an external hosting provider.

Data Processed

  • IP address
  • Date and time of access
  • Pages/files accessed
  • Amount of data transferred
  • Status messages
  • Browser type/version
  • Operating system
  • Referrer URL
  • Hostname of the accessing device

Purpose

  • Technical operation of the website
  • Ensuring stability and security
  • Error analysis and abuse detection

Legal Basis

Article 6(1)(f) GDPR (Legitimate Interest)

The data is stored only for as long as necessary to fulfil the purposes stated above. It is not combined with data from other sources.

5. Cloudflare

Provider:

Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA

EU Representatiove: Cloudflare Portugal Unipessoal Lda, Lisbon

Purpose

  • Website security
  • Protection against unauthorised or abusive access
  • Performance optimisation

Data Processed

  • IP address
  • Technical connection data
  • Browser and device information

Cookies

  • __cf_bm (30 minutes)
  • _cfuvid (Session)

Legal Basis

Article 6(1)(f) GDPR (Legitimate Interest in ensuring security and stability)

International Data Transfers

Data may be transferred to the United States. Cloudflare is certified under the EU–U.S. Data Privacy Framework.

6. HubSpot (Marketing & CRM)

Provider:

HubSpot Ireland Limited, Dublin, Ireland

Muttergesellschaft: HubSpot, Inc., USA

Zweck:

  • Marketing automation
  • Lead generation
  • Website analytics
  • CRM-based communication

Data Processed:

  • IP address
  • Visitor data
  • Website interactions
  • Form submissions (where provided)
  • Cookie IDs

Cookies

  • __hssc (30 minutes)
  • __hssrc (Session)
  • __hstc (6 months)
  • hubspotutk (6 months)

Legal Basis

Article 6(1)(a) GDPR (Consent)

International Data Transfers

Data may be transferred to the United States. HubSpot is certified under the EU–U.S. Data Privacy Framework.

7. LinkedIn Insight Tag

Provider:

LinkedIn Ireland Unlimited Company, Dublin, Ireland

Parent company: LinkedIn Corporation, USA

Purpose

  • Conversion tracking
  • Audience measurement
  • Optimisation of LinkedIn advertising campaigns

Data Processed

  • IP address
  • Time of visit
  • Pages visited
  • Device and browser information
  • Aggregated demographic data (where applicable)

Cookies

  • bcookie (12 months)
  • li_gc (6 months)
  • lidc (1 day)

Legal Basis

Article 6(1)(a) GDPR (Consent)

International Data Transfers

Data may be transferred to the United States. LinkedIn is certified under the EU–U.S. Data Privacy Framework.

8. Cookies and Local Storage

CoCookies are small text files stored on your device.

Cookie Categories

  • Strictly Necessary – Website operation and security
  • Marketing – Tracking, conversion measurement and advertising (only with your consent)

Local Storage may be used to store technical information or user preferences.

You may delete or block cookies at any time through your browser settings. Disabling cookies may limit certain website functions.

9. Contacting Us

If you contact us by email or via a contact form, we process the information you provide in order to respond to your enquiry.

Purpose

  • Communication
  • Responding to enquiries
  • Pre-contractual measures

Legal Basis

Article 6(1)(b) GDPR and/or Article 6(1)(f) GDPR

Retention Period

Data will be deleted as soon as it is no longer required for the purpose for which it was collected, unless statutory retention obligations apply.

10. Recipients and Data Processors

We engage service providers that process personal data on our behalf in accordance with Article 28 GDPR. Personal data is disclosed only to the extent necessary.

11. International Data Transfers

Where personal data is processed outside the European Union (EU) or the European Economic Area (EEA), this is carried out only in accordance with Articles 44 et seq. GDPR, in particular on the basis of adequacy decisions or appropriate safeguards.

12. Data Retention

Personal data is stored only for as long as necessary for the respective processing purposes or as required by statutory obligations.

13. Your Rights

You have the right to:

  • Access (Article 15 GDPR)
  • Rectification (Article 16 GDPR)
  • Erasure (Article 17 GDPR)
  • Restriction of processing (Article 18 GDPR)
  • Data portability (Article 20 GDPR)
  • Object to processing (Article 21 GDPR)
  • Withdraw your consent at any time (Article 7(3) GDPR)

Please send any requests to:

14. Right to Lodge a Complaint

Austrian Data Protection Authority

Barichgasse 40–42

1030 Vienna, Austria

Email: