Privacy policy

As of 24 October 2026. This English version is provided for convenience. The German version is the legally binding one.

The protection of your data matters to us. In accordance with Articles 13 and 14 of the General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (DSG), this policy explains which personal data we process when you visit this website and when you send an enquiry.

Controller

Aviatis Marketing e.U., Jakob Kindl
Urnenhainweg 6, 4050 Traun, Austria
Email: takeoff@aviatis-marketing.at
Phone: +43 681 81337026

We have not appointed a data protection officer because there is no legal obligation to do so. For any question about data protection you can reach us at the contact details above.

In short

This website does not set cookies and does not store anything in your browser (no local storage, no session storage). We do not use third-party tracking or analytics services or advertising networks, and we do not embed content from third parties. We count page views anonymously on our own server (see below). Fonts, images and videos are delivered from our own server. Since there are no cookies or comparable technologies that require consent (Section 165(3) of the Austrian Telecommunications Act 2021), we do not need a cookie banner.

Hosting and server logs

When you visit the website, our hosting provider processes technically necessary data: IP address, date and time, requested address, response status, amount of data transferred, the previously visited page (referrer) as well as browser and operating system. This is necessary to deliver the site, keep it running reliably and defend against abuse (legitimate interest, Art. 6(1)(f) GDPR). The logs are stored only as long as necessary for this purpose and are not combined with other data. The hosting provider gives us an evaluation of these logs that works without cookies.

The hosting provider is Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. A data processing agreement under Art. 28 GDPR is in place. The data stays within the European Union.

Enquiry via the form

If you use the enquiry form, we process the details you enter: project type, budget range, goal of the project, name, email address, your message and, if you provide them, company, phone number and website. We use them to answer your enquiry and prepare a quote (Art. 6(1)(b) GDPR for pre-contractual measures, otherwise Art. 6(1)(f) GDPR). Without the required fields we cannot process the enquiry.

The enquiry is sent by email to our mailbox, which is hosted at Hetzner (see above), and is not stored on the website. We keep it until your enquiry has been dealt with. If an order results, we keep the business records for as long as the law requires (generally seven years, Section 132 of the Austrian Federal Fiscal Code and Section 212 of the Austrian Commercial Code). Otherwise we delete the enquiry after twelve months at the latest.

To protect against abuse (spam), the form contains a field that is invisible to people, measures the time until submission and limits the number of enquiries per internet address to five per hour. For this the server places an irreversible check value (hash) of the IP address together with timestamps in temporary storage; only the last hour is taken into account (legitimate interest, Art. 6(1)(f) GDPR).

Contact by email, phone or WhatsApp

If you contact us by email or phone, we process your details (for example name, contact details and the content of your message) in order to handle your request (Art. 6(1)(b) or (f) GDPR). The same storage periods apply as for the enquiry form.

The website contains a link that opens a chat on WhatsApp. You only leave our website once you click it. WhatsApp (WhatsApp Ireland Limited, Dublin, Ireland, a Meta company) then processes your data under its own privacy policy. We see your message and your phone number when you write to us.

Anonymous counting of page views

So that we can see which pages are read and which page enquiries come from, the page sends a count signal to our own server when it is opened, after an enquiry has been sent and after a quick test has been completed. Only the page, the type of event and the origin are transmitted: for another website only its domain, for our own website the page visited before. We store daily counts only, no IP address, no browser characteristics, no identifier and no cookies; nothing is stored in your browser. This does not allow us to identify you.

The purpose is to improve the website (legitimate interest, Art. 6(1)(f) GDPR). Once a week we receive a summary by email. We delete the daily counts after 400 days at the latest.

Clicks on links to our partners

If you click a link to a partner company on the “Partners” page, we count the click on our own server. Only the partner, the page, the time and a random identifier are stored, no IP address, no browser characteristics and no cookies. The identifier and the note “utm_source=aviatis-marketing” are appended to the link so that the partner can see that you came via us. This does not allow us to identify you. Once a week we receive a summary by email. We delete the log after twelve months at the latest.

The purpose is to evaluate the cooperation with our partners (legitimate interest, Art. 6(1)(f) GDPR). What the partner does with this information on its own website is governed by its own privacy policy.

Links to other websites and social media

Our website contains links to external sites, for example to our Instagram profile and to the websites of our partners. These are links only; we do not embed plugins or content, and no data is transferred to these providers when you open our pages. Only when you click a link do you reach the respective provider. It is responsible for its own data processing, in the case of Instagram Meta Platforms Ireland Limited. This may also involve transfers to third countries such as the USA.

Recipients and third countries

We only pass your data on to service providers we need to run the website (hosting and email at Hetzner) and to authorities where we are legally obliged to. We do not ourselves transfer data to countries outside the EU and the EEA.

Security

The connection to this website is encrypted with TLS (recognisable by “https”). We take appropriate technical and organisational measures to protect your data.

Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). If you have consented to processing, you can withdraw your consent at any time with effect for the future. There is no automated decision-making, including profiling.

To exercise these rights, contact us at the details above. If you believe we are violating data protection law, you can lodge a complaint with the supervisory authority: Austrian Data Protection Authority (Österreichische Datenschutzbehörde), Barichgasse 40–42, 1030 Vienna, dsb@dsb.gv.at, www.dsb.gv.at.

Changes

We adapt this policy when the website or the legal situation changes. The version published here applies.