Privacy Policy

Controller Andreas Steidl Hervicusgasse 19/2/15 1120 Vienna, Austria Email: office@steidl.com · Phone: +43 699 100 52 220

No data protection officer has been appointed; the statutory conditions for appointing one are not met.

When you visit this website

Each time a page is requested, your browser necessarily transmits data to our server: IP address, date and time, the address requested together with the method and protocol, the status code, the volume of data transferred, the page previously visited (referrer), browser and operating system identifiers, and the response time. Our server records this in access logs in order to keep the service secure and to detect attacks (Art. 6(1)(f) GDPR). The logs are rotated daily; a rotated log is deleted once it is more than 30 days old — that is, at the latest about one month after the visit.

This website uses no analytics and no advertising services, and embeds no third-party content. All content, including fonts, is served from our own server; visiting the site transfers no data to third parties.

Cookies and local storage

This website sets no cookies for advertising or analytics and embeds no third-party services. Exactly two items are stored, both on this domain only and both without any identifier relating to you:

sprache — a cookie holding the language version you have chosen (de or en). It is created only when you switch languages, lasts one year and makes sure you see the site in your language on every visit. As long as you do not switch, no cookie is set; which version you see first then follows from your browser's language setting alone. The cookie is strictly necessary for the display you expressly chose (§ 165 para 3 TKG 2021) and requires no consent; the associated processing rests on our legitimate interest in a working multilingual site (Art. 6(1)(f) GDPR).
stw-modus — an entry in your browser's local storage holding your choice between light and dark display. It is created only once you make that choice, is never transmitted to us, and remains until you delete it. It is strictly necessary for the display you expressly requested (§ 165 para 3 Austrian Telecommunications Act 2021, Telekommunikationsgesetz 2021, TKG 2021) and therefore requires no consent.

You can delete both at any time in your browser; the site works without them.

When you write to us or call us

We process the details you give us and the content of your message in order to deal with your enquiry (Art. 6(1)(b) GDPR where it concerns an order, otherwise Art. 6(1)(f)). Messages relating to orders are retained for as long as we are required to retain them for tax purposes (seven years, § 132 Austrian Federal Fiscal Code, Bundesabgabenordnung, BAO); all others are deleted once the matter is closed and no further questions are to be expected. Providing your details is voluntary; without them, however, we cannot reply to you.

Who else receives the data

netcup GmbH, Emmy-Noether-Straße 10, 76131 Karlsruhe, Germany — operation of the server, processor (Art. 28 GDPR), with sub-processors of the Anexia group in Austria and Germany. No processing outside the European Union takes place in this context.
Google Cloud EMEA Limited, Dublin, Ireland — email service (Google Workspace), processor. Google may also process data in the United States; the basis for this is the European Commission's adequacy decision on the EU-US Data Privacy Framework, supplemented by standard contractual clauses.

Your rights

You have the right of access (Art. 15 GDPR), to rectification (Art. 16), to erasure (Art. 17), to restriction of processing (Art. 18), to data portability (Art. 20) and to object (Art. 21). A message to office@steidl.com is sufficient; we will reply within one month.

Right to object (Art. 21(1) GDPR)

Where we process data on the basis of legitimate interests — this concerns the access logs, the language cookie and messages outside an order — you may object at any time on grounds relating to your particular situation.

Right to lodge a complaint

You may lodge a complaint with the Austrian Data Protection Authority (Datenschutzbehörde): Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at.

Language

This English version describes the same processing as the German version of this privacy policy. Austrian statutory terms are given in German in brackets so that you can look them up.