Legal notice & privacy

Legal notice

Contact:
wunderwerk software GmbH
Waldweg 61
6393 St. Ulrich am Pillersee

Phone: +43 5354 20845
Email: info@wunderwerk.io

BIC/SWIFT: SPKIAT2KXXX

Company registration number: FN535905 x

Image credits,
florian mitterer photography

Value added tax:
Value added tax identification number: ATU75674218

Dispute resolution,
The European Commission provides a platform for online dispute resolution (ODR): https://ec.europa.eu/consumers/odr.
Our email address can be found above in the legal notice.

We are not prepared or obliged to participate in dispute resolution proceedings before a consumer arbitration board.

Liability for content
As a service provider, we are responsible for our own content on these pages in accordance with general laws. However, as a service provider, we are not obliged to monitor transmitted or stored third-party information or to investigate circumstances that indicate illegal activity.

Obligations to remove or block the use of information in accordance with general laws remain unaffected by this. However, liability in this regard is only possible from the time we become aware of a specific legal violation. If we become aware of such legal violations, we will remove this content immediately.

Liability for links
Our website contains links to external third-party websites over whose content we have no influence. Therefore, we cannot accept any liability for this external content. The respective provider or operator of the linked pages is always responsible for their content. The linked pages were checked for possible legal violations at the time of linking. Illegal content was not recognisable at the time of linking.

However, permanent monitoring of the content of the linked pages is not reasonable without concrete evidence of a legal violation. If we become aware of legal violations, we will remove such links immediately.

Copyright
The content and works created by the site operators on these pages are subject to Austrian copyright law. Duplication, processing, distribution and any kind of exploitation outside the limits of copyright law require the written consent of the respective author or creator. Downloads and copies of this site are only permitted for private, non-commercial use.

Insofar as the content on this site was not created by the operator, the copyrights of third parties are respected. In particular, third-party content is marked as such. Should you nevertheless become aware of a copyright infringement, please let us know. If we become aware of legal violations, we will remove such content immediately.

Privacy policy
1. Data protection at a glance
General information
The following information provides a simple overview of what happens to your personal data when you visit our website. Personal data is any data with which you can be personally identified. Detailed information on data protection can be found in our privacy policy below this text.

Data collection on our website
Who is responsible for data collection on this website?

Data on this website is processed by the website operator, whose contact details you can find in the legal notice of this website.

How do we collect your data?

On the one hand, your data is collected when you provide it to us. This may, for example, be data that you enter in a contact form.

Other data is collected automatically by our IT systems when you visit the website. This is mainly technical data (e.g. internet browser, operating system or time of the page view). This data is collected automatically as soon as you enter our website.

What do we use your data for?

Part of the data is collected to ensure that the website is provided without errors. Other data may be used to analyse your user behaviour.

What rights do you have regarding your data?

You have the right at any time to receive information free of charge about the origin, recipients and purpose of your stored personal data. You also have the right to request the correction or deletion of this data or the restriction of its processing and, where we process it on the basis of our legitimate interest, to object to the processing (details under 2.). For this and for further questions on data protection, you can contact us at any time at the address given in the legal notice. You also have the right to lodge a complaint with the competent supervisory authority.

Analysis tools and third-party tools
When you visit our website, your browsing behaviour may be evaluated statistically. This is done with Umami, a cookieless audience measurement that we run ourselves (details under 10.), with Google Analytics and, for our advertising, with Google Ads and the Meta Pixel. Google and Meta only set cookies with your consent, and the Meta Pixel is only loaded with your consent; details can be found below under 4. to 6.

You can give, change or withdraw your consent at any time in the cookie settings.

2. General information and mandatory information
Data protection
The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.

When you use this website, various personal data are collected. Personal data is data with which you can be personally identified. This privacy policy explains which data we collect and what we use it for. It also explains how and for what purpose this is done.

Please note that data transmission over the internet (e.g. when communicating by email) may have security gaps. Complete protection of data against access by third parties is not possible.

Note on the controller
The controller responsible for data processing on this website is:

wunderwerk software GmbH
Waldweg 61, 6393 St. Ulrich am Pillersee

The controller is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data (e.g. names, email addresses, etc.).

Withdrawal of your consent to data processing
Many data processing operations are only possible with your express consent. You can withdraw consent you have already given at any time: for cookies and external services in the cookie settings, otherwise by an informal message to us by email. The lawfulness of the data processing carried out until the withdrawal remains unaffected by the withdrawal.

Right to lodge a complaint with a supervisory authority
If you consider that the processing of your data infringes data protection law, you can lodge a complaint with a supervisory authority (Art. 77 GDPR), in particular in the EU member state of your habitual residence, your place of work or the place of the alleged infringement. In Austria this is the Austrian Data Protection Authority (Österreichische Datenschutzbehörde), Barichgasse 40–42, 1030 Vienna, phone +43 1 52 152-0, email dsb@dsb.gv.at, https://www.dsb.gv.at.

SSL or TLS encryption
For security reasons and to protect the transmission of confidential content, such as orders or enquiries that you send to us as the site operator, this site uses SSL or TLS encryption. You can recognise an encrypted connection by the address bar of your browser changing from “http://” to “https://” and by the lock symbol in your browser bar.

If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Your rights
Within the framework of the statutory provisions, you have the right at any time to free information about your stored personal data, its origin and recipients and the purpose of the data processing (Art. 15 GDPR), and the rights to rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20 GDPR). For this and for further questions on personal data, you can contact us at any time at the address given in the legal notice or by email to info@wunderwerk.io.

Right to object (Art. 21 GDPR)
Where we process your data on the basis of our legitimate interest (Art. 6(1)(f) GDPR), you can object to this processing at any time on grounds relating to your particular situation. We will then no longer process the data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims. You can object at any time, without giving reasons, to the processing of your data for direct marketing.

Objection to advertising emails
We hereby object to the use of contact data published as part of the legal notice obligation for sending advertising and information material that has not been expressly requested. The operators of these pages expressly reserve the right to take legal action in the event of unsolicited advertising, such as spam emails.

3. Data collection on our website
Server log files
The provider of these pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

Browser type and browser version
Operating system used
Referrer URL
Host name of the accessing computer
Time of the server request
IP address
This data is not combined with other data sources.

The legal basis is our legitimate interest in providing our website securely and without technical errors (Art. 6(1)(f) GDPR).

4. Consent and cookie settings
On your first visit we ask which services we may use. You can allow all services, allow only the necessary ones or choose individual categories: Statistics (Google Analytics), Marketing (Google Ads, Meta) and External media (YouTube, Google Calendar). No category is preselected. Only storing your choice is necessary.

The legal basis for Statistics, Marketing and External media is your consent (Art. 6(1)(a) GDPR, § 165(3) Austrian TKG 2021; for visitors from Germany § 25(1) TDDDG).

We store your choice in your browser's local storage (localStorage, entry “wc-consent”): the version of our settings, the time and your decision per category. No cookie is set for this and nothing is sent to us. We ask you again after 12 months or when we add new services. Storing it is strictly necessary to respect your decision (§ 165(3) TKG 2021).

You can change your choice or withdraw your consent at any time in the cookie settings (also via “Cookie settings” in the footer of every page). Withdrawing deletes the cookies of the services concerned and reloads the page without them. The lawfulness of the processing carried out until the withdrawal remains unaffected.

5. Google Analytics and Google Ads (Google Consent Mode)
This website uses Google Analytics 4 (web analytics) and Google Ads (measuring advertising campaigns). The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).

We use Google Consent Mode in advanced mode: the Google tag loads on every page, also without your consent. Without your consent Google sets and reads no cookies, ad data is redacted, and Google receives only cookieless signals (“pings”): the consent state, the time, the page visited, browser and device information and, for technical reasons, your IP address. Click identifiers from ads are passed on via the URL. From these signals Google statistically models visits and conversions without recognising you. The legal basis for this is our legitimate interest in measuring the reach of our website and the success of our advertising (Art. 6(1)(f) GDPR).

With your consent to Statistics, Google Analytics sets cookies (_ga, _ga_*, stored for up to 2 years) that recognise your browser across several visits. With your consent to Marketing, Google Ads sets cookies (e.g. _gcl_au, up to 90 days) to attribute conversions (e.g. a sent enquiry) to ads, and Google may use data for personalised advertising. Statistics and Marketing are independent of each other: consent to Statistics does not permit advertising purposes. We report a successfully sent enquiry to Google Analytics and Google Ads as a conversion, within the scope of your consent. If you reach us through a Google ad, your browser keeps the click identifiers from the URL (gclid, ad group, campaign) for the duration of the visit in session storage (sessionStorage, entry “ww-attr”, no cookie, not sent to Google, deleted when the browser is closed); when you send an enquiry, we transmit these identifiers with it so that we can attribute enquiries to our ads (Art. 6(1)(f) GDPR).

Google may transfer data to the USA. Google LLC is certified under the EU-US Data Privacy Framework (adequacy decision of the European Commission, Art. 45 GDPR). More information: https://policies.google.com/privacy and https://support.google.com/analytics/answer/6004245.

6. Meta Pixel
With your consent to Marketing we use the Meta Pixel of Meta Platforms Ireland Ltd., Merrion Road, Dublin 4, Ireland (“Meta”). Without this consent the pixel is not loaded and Meta receives nothing. The pixel measures page views and a successfully sent enquiry (“Lead”), so that we can evaluate our ads on Facebook and Instagram and reach people who are interested in our services. It sets the cookie _fbp (90 days). We are jointly responsible with Meta for collecting and transmitting the data (Art. 26 GDPR). Meta Platforms, Inc. is certified under the EU-US Data Privacy Framework. The legal basis is your consent (Art. 6(1)(a) GDPR). More information: https://www.facebook.com/privacy/policy.

7. YouTube
We embed videos from YouTube (Google Ireland Limited) in privacy-enhanced mode (youtube-nocookie.com). Until you allow it, we only show a placeholder that loads nothing from YouTube. A video is only loaded when you load it once or allow external media; YouTube then receives, among other things, your IP address and the page visited, and YouTube may store data in your browser during playback. The legal basis is your consent (Art. 6(1)(a) GDPR).

8. Google Calendar (appointment booking)
You book appointments for an initial consultation via the appointment booking of Google Calendar (Google Ireland Limited), which we embed on our site. It is only loaded when you allow external media or send the form with “Continue to the calendar”: by doing so you consent to loading external media, as we point out below the button. Google receives your IP address and the data you enter when booking. The legal basis is your consent (Art. 6(1)(a) GDPR) and, for the booking itself, the performance of pre-contractual measures (Art. 6(1)(b) GDPR).

9. Spam protection in forms (ALTCHA)
We protect our forms with ALTCHA, open-source software that we run on our own server. As soon as you fill in a form, your browser solves a small computational task (proof of work); the result is sent to us with the form and checked on our server. No cookies are set, no usage behaviour is analysed and no data is transferred to third parties; fetching the task only produces the usual server log data (see 3.). In addition, a hidden form field that only automated programs fill in detects spam. The legal basis is our legitimate interest in protecting our forms against spam and abuse (Art. 6(1)(f) GDPR).

10. Audience measurement with Umami
With Umami we measure how our website is used: which pages and content are in demand, where visitors leave and where our forms cause difficulties, so that we can improve content, navigation and forms and evaluate the success of our campaigns. Umami is open-source software that we run ourselves (analytics.wunderwerk.io); no third party receives this data. Umami is loaded regardless of your choice in the cookie settings. We do not use session recordings or heatmaps.

For this, the script reads information from your browser and sends it to our server: the page visited and its title, the previously visited page (without its query parameters), campaign parameters of the address (utm parameters and the campaign and ad group number), screen size, browser language and page load times. It also sends your interactions: clicks on buttons and links (including phone, email and WhatsApp links, downloads with the file name, links to other websites with their address without parameters, and the language switch), copying our phone number or email address, opened questions, menus, dialogs and videos, how much of a video you watch with sound, scroll depth, your decision in the cookie settings and the steps of our forms: whether a step was completed, abandoned or sent, how long it took, which fields were filled in incorrectly (only the name of the field and the kind of error), whether you attached a file and stated a company and, if you select it, how you found us. For your visit Umami stores the entry page, the language of the page, whether you came from a Google ad (only yes or no) and which categories you allowed in the cookie settings; when a page that does not exist is requested, the address of that page and of the referring page (without parameters). What you enter in a form (name, email address, phone number, description) is not sent to Umami. We remove click identifiers of advertising platforms (e.g. gclid, fbclid) and any other parameters of the address before sending.

From your IP address the server determines country, region and city, and from the browser identification your browser, operating system and device type. The IP address itself is not stored. To group the page views of a visit, the server computes a hash value (an irreversible checksum) from the IP address, the browser identification, a secret key and the current calendar month. Every new month produces a different value; we therefore do not recognise your browser beyond the calendar month. Umami sets no cookies and stores nothing in your browser, unless you object to the measurement (see below). We do not combine this data with other data, such as enquiries you send us.

The data is stored on our servers in data centres of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, in Nuremberg (Germany), with backup copies in Helsinki (Finland). Hetzner processes it on our behalf (Art. 28 GDPR); there are no other recipients and no data is transferred to countries outside the EU. We delete the data no later than 24 months after it was collected.

The legal basis is our legitimate interest in measuring the use of our website in order to improve content, navigation and forms and to evaluate the success of our campaigns (Art. 6(1)(f) GDPR). In our assessment your interests do not override it, because Umami sets no cookies, does not store your IP address, does not recognise you beyond the calendar month, builds no profiles across other websites, records nothing you enter in forms, and the data stays exclusively with us in the EU.

Objection: you can object to the measurement at any time: Disable audience measurement in this browser. Your browser then stores the entry “umami.disabled” in its local storage and no longer sends any data to Umami; another click lifts the objection. The objection applies to this browser; if you delete your browser's site data, please set it again. You can also object informally by email to info@wunderwerk.io.