Privacy policy

1. Data controller

Samuel Vitel
2431 Enzersdorf an der Fischa, Austria
Email: hallo@vitel.at

2. Your rights

You have the rights of access (Art 15), rectification (Art 16), erasure (Art 17), restriction (Art 18), data portability (Art 20) and objection (Art 21 GDPR). Any consent given may be withdrawn at any time with effect for the future. Complaints can be directed to us or to the Austrian Data Protection Authority, Barichgasse 40–42, 1030 Vienna, dsb.gv.at.

3. Contact form, package request & project estimator

When you enquire via the contact form, a package request or the estimator, we process the data provided (name, email, phone and company optional, project description or notes) together with the chosen package and its price or — for the estimator — your selections and the calculated price range, solely to handle your enquiry. We also store the IP address, timestamp and browser identifier to prevent abuse of the form (Art 6(1)(f) GDPR). Otherwise the legal basis is Art 6(1)(b) GDPR (pre-contractual steps) or (a) (consent). Stored until the enquiry is handled, beyond that only where legal retention obligations apply.

4. Usage analysis of the forms

When you use the project estimator, the contact form or a package request form we record how the run goes: for the estimator, which answers you pick and in which order; for packages, which package you open and whether you close the form again; for both forms, only whether a field was filled in — what you typed is not stored unless you actually send the form. In all cases we also record how long you took and where you stopped if you did not finish.

For this we issue a random identifier that is kept only in your browser tab's memory (sessionStorage) and expires when the tab closes, so it cannot recognise you on a later visit. We also store the IP address, timestamp, browser identifier, language setting and the referring page. The sole purpose is to improve these forms, that is, to see which question or which field people get stuck on. Legal basis: Art 6(1)(f) GDPR (legitimate interest in a working enquiry process). The data stays on our own server, no third-party service is involved, and it is not combined with any other data source. Records that did not lead to an enquiry are deleted automatically after 180 days. You may object to this processing at any time at hallo@vitel.at.

5. Email delivery

Your enquiry is delivered to our mailbox and you receive a confirmation by email. Delivery runs through the mail server of our hosting provider World4You Internet Services GmbH (Hafenstraße 35, 4020 Linz, Austria) inside the EU. A data processing agreement under Art 28 GDPR is in place. No transfer to third countries takes place.

6. Hosting & server logs

This website is hosted by World4You Internet Services GmbH, Hafenstraße 35, 4020 Linz, Austria. The provider automatically stores access data (incl. IP address, time, page requested, browser type) in server log files for secure operation (Art 6(1)(f) GDPR). A data processing agreement under Art 28 GDPR is in place.

7. Cookies & local storage

By default only technically necessary storage is used: your cookie choice and a session cookie protecting the forms (Art 6(1)(f) GDPR, § 165(3) Austrian Telecom Act 2021). Optional cookies — in particular for web analytics — are only set after your consent in the cookie banner (Art 6(1)(a) GDPR). You can change your choice at any time by clearing your browser data.

8. Web analytics (Google Analytics)

Independently of Google, we count on our own server how often a measurement point on the site was triggered, such as a form being sent. Only a single number per measurement point and day is stored. No IP address, identifier or device data is collected, no personal reference arises, and no third-party service is involved. This count exists solely to check that measurement works technically.

If you consent in the cookie banner, we use Google Analytics 4 provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). Google Analytics sets cookies and collects pseudonymous usage data (pages viewed, time on page, approximate location, device, events such as a form submission). The IP address is processed in truncated form. Until you consent, every Google Consent Mode signal stays on "denied", so no analytics cookies are set. Legal basis: Art 6(1)(a) GDPR. Any transfer to the USA is based on the EU-US Data Privacy Framework or Standard Contractual Clauses (Art 46 GDPR). Google information: policies.google.com/privacy. You may withdraw your consent at any time by clearing this site's data in your browser.

9. Fonts and external content

All fonts are served locally from our own server. There is no connection to Google Fonts or any other content delivery network, and no IP address is transmitted to third parties. Without your consent to web analytics, this website loads no content from external servers at all.