Privacy Policy

Purpose of Data Processing

We process personal data to:

• Ensure proper website functionality and security,
• Respond to inquiries and communicate with users,
• Improve our services and website usability,
• Analyze website traffic and optimize content,
• Inform clients about relevant updates, services, and offers (with consent).

Categories of Personal Data

We may process the following data:

• Technical data: IP address, browser type, device type, operating system, referring URL, and time of access;
• Contact data: name, email address, phone number (when submitted through forms);
• Cookies and usage data: see Cookie Policy.

Legal Basis for Processing

We process personal data based on the following provisions of Article 6 GDPR:

• (a) Consent – for analytics and marketing cookies, and when you voluntarily provide data;
• (b) Contract performance – when processing is necessary to deliver our services;
• (f) Legitimate interest – for maintaining website security, improving performance, and analyzing usage.

Data Recipients

We may share data with:

• IT and hosting providers,
• Analytics and marketing service providers (e.g., Google Analytics, Meta Platforms),
• Legal or regulatory authorities if required by law.

All third parties process personal data in accordance with GDPR and contractual data processing agreements (Art. 28 GDPR).

Data Transfers Outside the EU/EEA

Some of our service providers (e.g., Google, Meta) may process data in countries outside the EU/EEA.

In such cases, we ensure adequate safeguards under Art. 46 GDPR, including Standard Contractual Clauses (SCCs).

Data Retention

Personal data is stored only as long as necessary for the purposes outlined in this policy or as required by law.

After this period, the data will be securely deleted or anonymized.

Your Rights

Under the GDPR, you have the right to:

• Request access to your personal data (Art. 15 GDPR)
• Request correction or deletion (Art. 16–17 GDPR)
• Restrict or object to processing (Art. 18–21 GDPR)
• Withdraw consent at any time (Art. 7(3) GDPR)
• Lodge a complaint with the Austrian Data Protection Authority (Datenschutzbehörde):
  https://www.dsb.gv.at/

Data controller: SF Consulting GmbH, Wohllebengasse 14, 1040 Vienna, Austria Requests regarding your data can be sent to: contact@sf-cons.com

Data Security

We implement technical and organizational measures to protect personal data from unauthorized access, alteration, disclosure, or destruction.

Changes to This Policy

We may update this Privacy Policy from time to time.

The latest version will always be available on this page with an updated “Last updated” date.