Privacy policy

1. Controller

WOIMS e.U., owner Hegedűs Viktor
Auweg 2, 2563 Pottenstein, Austria
Company register no.: 489525s · VAT ID: ATU73622109
Email: hello@woims.de · Phone: +43 664 941 0864

We are not legally required to appoint a data protection officer and have not done so. For any privacy question, contact us using the details above.

2. Visiting the website and server logs

When you open our pages, your browser automatically sends technical data to the server: IP address, date and time, the address requested, referrer, browser and operating system, and the response status code. This data is stored in server log files to deliver the website, keep it secure and analyse errors.

The legal basis is our legitimate interest in secure and stable operation (Art. 6(1)(f) GDPR). Log files are kept only as long as needed for these purposes and then deleted. They are not combined with other data or used to profile you.

3. Hosting

The website is hosted by DreamHost, LLC (USA), which processes the data listed in section 2 on our behalf (Art. 28 GDPR). Where data is transferred to the USA, this is based on appropriate safeguards under Art. 44 et seq. GDPR, in particular the European Commission’s standard contractual clauses.

Fonts, scripts and images are served from our own server; we do not use Google Fonts or content delivery networks.

4. Contact form, email and phone

When you use our contact form, we process the data you enter: name, email address, optionally phone number, company, selected topics, message and preferred callback time, plus the language and the page from which you sent the request. The request is delivered by email to our mailbox hello@woims.de; nothing is stored permanently by the form itself.

To prevent abuse, the server stores a non-reversible hash of your IP address for at most one hour, so that no more than five requests per hour can be sent from the same address.

The same applies when you contact us by email or phone. The legal basis is taking steps prior to entering into a contract or performing a contract (Art. 6(1)(b) GDPR), and otherwise our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR).

We delete your request once it has been fully dealt with and no further communication is expected. If a contract is concluded, we keep business correspondence for the statutory retention period (in Austria generally seven years, § 132 BAO).

5. Cookies and local storage

Without your consent, this website sets no cookies for statistics or advertising. The only things stored in your browser as technically necessary are your cookie choice (localStorage) and, for the session, a flag for the page transition (sessionStorage). The legal basis is § 165(3) of the Austrian Telecommunications Act 2021 (TKG 2021) and Art. 6(1)(f) GDPR.

All storage entries and their duration are listed in our cookie policy. You can change or withdraw your consent at any time via “Cookie settings” at the bottom of every page.

6. Web analytics with Google Analytics (consent only)

Only if you choose “Accept all” in the cookie banner do we use Google Analytics 4 by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, to analyse how the website is used and improve it. Pseudonymous usage data is processed (e.g. pages viewed, time on page, device type, approximate location); Google Analytics 4 does not store IP addresses. Without consent, the Google script is not loaded at all.

The legal basis is your consent (Art. 6(1)(a) GDPR). Data may be transferred to Google LLC in the USA; Google is certified under the EU-U.S. Data Privacy Framework (European Commission adequacy decision of 10 July 2023). You can withdraw your consent at any time with effect for the future.

7. YouTube videos

We embed YouTube videos (Google Ireland Limited) in privacy-enhanced mode via youtube-nocookie.com. On our home pages a video only loads when you click “Play”; only then is a connection made to YouTube, which receives your IP address among other data. The legal basis is the consent you give by clicking (Art. 6(1)(a) GDPR). Details: Google privacy policy.

8. Map on the contact page

On the contact page we show the location of our Budapest office with a map from OpenStreetMap (OpenStreetMap Foundation, St John’s Innovation Centre, Cambridge, CB4 0WS, United Kingdom). When the map loads, your IP address is sent to OpenStreetMap. The legal basis is our legitimate interest in easy-to-find directions (Art. 6(1)(f) GDPR). The European Commission has issued an adequacy decision for the United Kingdom.

9. Links to social networks and other websites

We link to our profiles on Facebook, Instagram, TikTok and YouTube, to other WOIMS Group websites and to our AI Search Audit (audit.woims.de). These are plain links without embedded plug-ins: no data is transferred until you click one. The destination site’s own privacy policy applies there.

10. Recipients and disclosure

Only our hosting and email providers (as processors) and – where you have consented – the services named above receive your data. We only pass data to other third parties with your consent, where needed to perform a contract (e.g. to our accountant) or where required by law. We do not sell data and do not make automated decisions within the meaning of Art. 22 GDPR.

11. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). You can withdraw consent at any time with effect for the future (Art. 7(3)). Just write to hello@woims.de.

If you believe the processing of your data breaches data protection law, you can lodge a complaint with a supervisory authority – in Austria the Datenschutzbehörde, Barichgasse 40–42, 1030 Vienna, dsb.gv.at, or the authority in your country of residence or work.

12. Security and changes

The whole website is served exclusively over encrypted HTTPS. We update this policy when the website or the law changes; the version published here always applies.