How BCA Unternehmensberatung UG (haftungsbeschränkt) collects and processes personal data when you visit bcaun.at or contact us, and the rights you have under the EU General Data Protection Regulation (GDPR / DSGVO).
The controller responsible for data processing on this website within the meaning of the GDPR is:
We have not appointed a Data Protection Officer, as we are not legally required to do so. For any data-protection matter, use the contact details above.
This policy applies to the website bcaun.at. Personal data is any information relating to an identified or identifiable natural person — for example your name, email address, telephone number or IP address. We process personal data only where a legal basis permits it, limit collection to what is necessary, and keep it only as long as required.
When you use this website purely for information, without contacting us or otherwise actively submitting data, we only collect the personal data your browser transmits to our platform (see “Hosting & server logs”).
This website is built and hosted on the Tilda website platform. When you access the site, the platform automatically collects and stores technical information in server log files that your browser transmits, in particular the requested page or file, the date and time of access, the amount of data transferred, a notification of successful retrieval, your browser type and version, your operating system, the referrer URL and the requesting IP address (shortened or in full, depending on configuration).
This data is processed to deliver the website reliably, ensure system security and stability, and prevent misuse. The legal basis is our legitimate interest in a secure and functional online presence (Art. 6(1)(f) GDPR). Log data is stored for a limited period and then deleted or anonymised. Our platform provider acts as a processor on our behalf under a data-processing agreement (Art. 28 GDPR).
Cookies are small text files stored on your device. Strictly necessary cookies are required for the website to function (for example to remember your cookie choice) and are set on the basis of our legitimate interest (Art. 6(1)(f) GDPR) and §25(2) TTDSG.
Any non-essential cookies — for example analytics or comfort functions — are only set with your prior consent (Art. 6(1)(a) GDPR, §25(1) TTDSG), which you give through our cookie banner. You can withdraw your consent at any time with effect for the future by changing your cookie settings. You can also configure your browser to refuse or delete cookies; disabling strictly necessary cookies may limit the functionality of the site.
If you contact us by email or telephone, we process the data you provide (such as your name, contact details and the content of your message) in order to handle your enquiry. The legal basis is Art. 6(1)(b) GDPR where your request relates to a contract or pre-contractual steps, and otherwise our legitimate interest in responding to enquiries (Art. 6(1)(f) GDPR).
Our contact form is delivered through Formspree (Formspree, Inc., USA), which processes and forwards the form submission to us on our behalf. When you submit the form, the data you enter (name, email address, message and any further details you provide) is transmitted to Formspree and then to us by email. A hidden anti-spam field is used to filter automated submissions. Because Formspree is based in the United States, this involves a transfer to a third country (see “Recipients & transfers”). The legal basis is Art. 6(1)(b) GDPR for contract-related requests and Art. 6(1)(f) GDPR for other enquiries; where required, transfers rely on your consent under Art. 49(1)(a) GDPR.
Where analytics are enabled, we use them only with your consent (Art. 6(1)(a) GDPR, §25(1) TTDSG), which you give through the cookie banner and can withdraw at any time. If activated, Google Analytics (Google Ireland Ltd.) uses cookies to generate aggregated statistics about how visitors use the site — such as pages viewed, approximate location, device and referral source. IP addresses are truncated where the feature is available, so that no direct conclusions can be drawn about your identity. This may involve a transfer to Google LLC in the United States.
If you do not consent, no analytics cookies are set and no analytics data is collected. We do not use this data to profile you or to make automated decisions with legal effect.
We only pass on personal data where necessary. Recipients may include processors acting on our behalf under Art. 28 GDPR — in particular our website platform (Tilda), our contact-form provider (Formspree) and, where enabled, our analytics provider (Google) — as well as professional advisers and authorities where a specific engagement or legal obligation requires it.
Some of these providers are located in, or transfer data to, the United States or other third countries. Such transfers take place only where an adequacy decision exists, on the basis of the EU Standard Contractual Clauses together with any necessary supplementary measures, or on another valid basis under Chapter V of the GDPR (including, where applicable, your consent under Art. 49 GDPR). We do not sell your personal data.
We store personal data only for as long as necessary for the purpose for which it was collected, or as required by statutory retention periods. Enquiry correspondence is kept for the duration needed to handle your request and any follow-up; business and tax-relevant records are retained for the periods prescribed by law (generally six to ten years under German commercial and tax law). Server log data and consent-based analytics data are stored only for a limited period. When data is no longer required and no retention obligation applies, it is deleted or anonymised.
Subject to the conditions of the GDPR, you have the following rights in relation to your personal data:
Right to object (Art. 21 GDPR): where we process your data on the basis of our legitimate interests, you have the right to object at any time, on grounds relating to your particular situation. We will then stop processing unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms. To exercise any right, contact us at info@bcaun.de.
You have the right to lodge a complaint with a data-protection supervisory authority, in particular in the Member State of your residence, workplace or the place of the alleged infringement. The authority responsible for our controller is:
If you are located in Austria, you may also contact the Austrian Data Protection Authority (Datenschutzbehörde), dsb.gv.at.
We may update this privacy policy to reflect changes in our processing or in legal requirements. The current version published on this page applies. Where changes materially affect your rights, we will take appropriate steps to inform you.
See also our Impressum. Questions about this policy: info@bcaun.de or austria@bcaun.at.