Privacy Policy

The responsible handling of personal data is an essential part of our activities. In this Privacy Policy, we explain which data is processed when you visit our website, use our services or communicate with us in the course of business, for which purposes such processing takes place and which rights you have.

1. Controller

ikunix Web Solutions e.U.
Owner: Sebastian Kunath
Gunertweg 2/5/9
1220 Vienna
Austria

Commercial register number: FN 682909 d
Commercial register court: Commercial Court of Vienna

Phone: +43 681 81175673
Email: office@ikunix.at
Website: www.ikunix.at

2. Principles and Legal Bases of Data Processing

We process personal data only where there is a valid legal basis under data protection law and where the processing is necessary for the respective purpose.

Processing is carried out in particular on the basis of:

• Art. 6(1)(a) GDPR where you have given us your consent,
• Art. 6(1)(b) GDPR for the performance of pre-contractual measures and contracts,
• Art. 6(1)(c) GDPR for compliance with legal obligations,
• Art. 6(1)(f) GDPR for the purposes of legitimate interests, provided that your interests or fundamental rights do not override those interests.

Our legitimate interests may include, in particular, the secure and economical operation of our website, communication with customers and prospective customers, the establishment and enforcement of legal claims and appropriate, targeted direct marketing of our own services.

We do not sell personal data. Data is only disclosed where this is necessary to provide our services, where a legal obligation applies, where an appropriate legal basis under data protection law exists or where you have given your prior consent.

3. Hosting and Server Log Data

When you access our website, the web server may automatically process technical access data. This may include, in particular:

• IP address of the accessing device,
• date and time of access,
• page or file accessed,
• amount of data transferred and access status,
• previously visited page or referrer URL,
• browser type, browser version and operating system.

This data is processed in order to make the website technically available, ensure secure and stable operation, identify errors and prevent or defend against abusive or unlawful access.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure, functional and reliable operation of our website.

Server log data is stored only for as long as necessary for security analyses, troubleshooting and the prevention or investigation of unlawful access. It is then deleted or anonymised unless statutory retention obligations or specific security incidents require longer storage.

4. Contacting Us

If you contact us by email, telephone or via a contact form, we process the data you provide in order to handle your enquiry and any related follow-up questions.

The following data may be processed in particular:

• name and, where applicable, company name,
• email address and telephone number,
• address where required for the enquiry,
• content and time of your message,
• information about requested services or projects,
• technical information used to prevent misuse.

Where your enquiry relates to a potential contractual relationship, processing is based on Art. 6(1)(b) GDPR. General enquiries are processed on the basis of our legitimate interest in proper communication and customer support pursuant to Art. 6(1)(f) GDPR.

Enquiry data is deleted once the enquiry has been fully processed and no statutory retention obligations, ongoing contractual negotiations or potential legal claims require continued storage.

5. Request Cart and Expressions of Interest

Our request cart allows you to select services and submit a non-binding expression of interest to us. The data you enter is used to compile and review your request and to provide you with an individual quotation or further information.

The data processed may include your contact and company details, selected services, quantities, billing options, project information and voluntary messages.

The legal basis is Art. 6(1)(b) GDPR, as the processing is carried out in order to take steps at your request prior to entering into a contract.

After submitting your request, you may receive an automatic confirmation of receipt. The submitted data is stored for as long as necessary to process the request, prepare a quotation and handle any subsequent contractual relationship.

6. Customer Account and Customer Area

If you use a customer account or our protected customer area, we process the data required to create and manage your account.

This may include, in particular, your name, company, address, contact details, login credentials, orders, quotations, invoices, contracts and assigned documents.

Processing is based on Art. 6(1)(b) GDPR for the performance of the contract or provision of the functions requested by you.

Passwords are not stored in plain text but are processed using technical security measures. Please keep your login credentials confidential and inform us if you suspect unauthorised access.

Data relating to the customer area is stored for the duration of the business relationship and thereafter in accordance with applicable statutory retention obligations. Data that is no longer required is deleted or its processing is restricted after the relevant retention periods have expired.

7. Postal Direct Marketing and Publicly Available Company Data

We may use publicly available company information to inform businesses about services provided by ikunix Web Solutions e.U. that may be relevant to their business activities. This applies in particular to postal communication with newly established companies.

The information used for this purpose may originate from publicly accessible registers and official publications, in particular publications of the Austrian commercial register courts and the Edicts File (Ediktsdatei) of the Austrian judiciary.

Where such information constitutes personal data, the following data may be processed in particular:

• company or business name,
• business address,
• commercial register number,
• legal form,
• business sector or business purpose,
• date and details of the published new registration,
• source or reference of the public notice.

Processing is carried out for the purpose of identifying businesses for which our services may reasonably be of interest based on their business activities and for providing targeted postal information about our own services, particularly in the areas of websites, webshops, hosting, domains, search engine optimisation, online advertising, automation and technical support.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the targeted promotion of our own services to businesses for which those services may potentially be relevant due to their business activities.

During the selection process, business sectors and publicly available company information may be evaluated automatically using predefined criteria and search terms. For example, particular industries may be selected while business activities that directly compete with our own services may be excluded.

This preliminary selection does not result in a decision based solely on automated processing that produces legal effects concerning a data subject or similarly significantly affects them.

The processing described in this section serves the purpose of postal direct marketing. We do not regard the mere public availability of company or contact information as consent to receive electronic marketing communications.

Personal data is not sold for third-party marketing purposes or transferred to other companies for the purpose of conducting their own advertising. Where service providers are used for technical processing, document creation, printing or postal delivery, data is transferred only to the extent necessary and in compliance with applicable data protection requirements.

Data relating to businesses that are not selected for contact during the preliminary selection process is not stored for longer than necessary to carry out and verify the selection process. Data relating to businesses that have been contacted may be stored for documentation purposes and to avoid unnecessary repeated contact for as long as a legitimate purpose exists.

Objection to direct marketing:
You may object to the processing of your personal data for direct marketing purposes at any time and without giving reasons. The objection is free of charge. An informal message to office@ikunix.at is sufficient.

Following an objection, we will no longer use your personal data for direct marketing. Where necessary, we may retain limited suppression information in order to ensure that your objection is reliably respected in future selection processes. This suppression information is used exclusively for the purpose of implementing your objection to marketing.

8. Cookies and Local Storage Technologies

Our website uses cookies and comparable storage technologies. Cookies are small files or pieces of information that can be stored on or read from your device.

Technically necessary cookies are used to provide basic website functionality. These include, for example, session management, security functions, the request cart, customer account login and storage of your privacy preferences.

Where technically necessary technologies process personal data, this is based on Art. 6(1)(b) or Art. 6(1)(f) GDPR.

Statistics, analytics or marketing technologies are only used if you have given your prior consent via the consent banner. The legal basis is Art. 6(1)(a) GDPR in conjunction with Section 165(3) of the Austrian Telecommunications Act 2021 (TKG 2021).

You can change your selection at any time via the “Cookie settings” section provided in the footer or withdraw previously granted consent with effect for the future.

The lawfulness of processing carried out before withdrawal of consent remains unaffected.

9. Google Tag Manager

We use Google Tag Manager provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Tag Manager is used for the technical management and deployment of website tags. It can be used, for example, to integrate statistics or analytics services.

The services that are actually activated depend on your selection in the consent banner. Non-essential analytics and marketing services are only activated after you have given your consent.

The legal basis for processing activities requiring consent is Art. 6(1)(a) GDPR. You may withdraw your consent at any time via the Cookie settings.

10. Google Analytics 4

If you have consented to the Statistics category in the consent banner, we use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics helps us understand how our website is used. The following information may be processed in particular:

• pages viewed and the sequence in which pages are viewed,
• approximate geographical region,
• browser, operating system and device type,
• date, time and duration of the visit,
• interactions with buttons and forms,
• source of the website visit,
• randomly generated online identifiers.

We use the information obtained to evaluate and improve the reach, usability, content and technical performance of our website.

Processing is carried out exclusively on the basis of your consent pursuant to Art. 6(1)(a) GDPR in conjunction with Section 165(3) TKG 2021.

The retention period for user-related data in our Google Analytics property is 14 months. Aggregated reports may remain available for longer independently of this period without directly identifying individual visitors.

You may withdraw your consent at any time via the Cookie settings. Following withdrawal, Google Analytics will no longer be activated during future visits on the basis of your previous consent.

Further information can be found in Google's Privacy Policy: Google Privacy Policy

Google also provides a browser add-on for disabling Google Analytics: Google Analytics Opt-out Browser Add-on

11. Transfers to Third Countries

When using international service providers, it cannot be ruled out that personal data may be processed outside the European Economic Area.

Any transfer takes place only where the requirements of Art. 44 et seq. GDPR are met. This may include, in particular, transfers based on an adequacy decision of the European Commission, approved Standard Contractual Clauses or other appropriate safeguards.

Google LLC states that it participates in the EU-U.S. Data Privacy Framework. Where processing is carried out by appropriately certified US companies, the transfer may therefore be based on an applicable adequacy decision.

12. Recipients and Processors

We may transfer personal data to carefully selected service providers where this is necessary for the operation of our website, communication, provision of our services or other permissible processing purposes.

These may include, in particular, the following categories of recipients:

• hosting and data centre service providers,
• email and communication service providers,
• IT, maintenance and security service providers,
• printing and postal service providers where such services are used,
• analytics and statistics providers following your consent,
• tax advisors, accounting service providers and authorities where legally required.

Where service providers process personal data on our behalf, they are contractually bound in accordance with applicable data protection requirements.

13. Retention Period

Personal data is stored only for as long as necessary for the respective processing purpose.

Data may also be stored where statutory retention obligations apply, where it is required for the establishment, exercise or defence of legal claims or where valid consent permits continued storage.

Where an objection to direct marketing has been made, the minimum information required to reliably implement that objection may be stored in a marketing suppression list. This information is used exclusively to prevent further direct marketing to the respective individual or business.

Once the respective processing purpose no longer applies and the relevant retention periods have expired, the data is deleted or, where deletion is not yet permitted, blocked from other forms of processing.

14. Your Data Protection Rights

Subject to the applicable legal requirements, you have the following rights in particular:

• the right of access to your personal data,
• the right to rectification of inaccurate or incomplete data,
• the right to erasure,
• the right to restriction of processing,
• the right to data portability where the statutory requirements are met,
• the right to object to certain processing activities,
• the right to withdraw consent previously given.

To exercise your rights, you may contact office@ikunix.at .

In order to prevent unauthorised disclosure of information, we may request appropriate proof of identity where there are justified doubts regarding your identity.

15. Special Right to Object to Direct Marketing

Where your personal data is processed for direct marketing purposes, you have the right to object to such processing at any time and without giving reasons.

Following such an objection, your personal data will no longer be processed for direct marketing purposes.

The objection is free of charge and may be submitted, in particular, by email to office@ikunix.at .

16. Right to Lodge a Complaint

If you believe that the processing of your personal data infringes applicable data protection law, you have the right to lodge a complaint with a data protection supervisory authority.

Competent supervisory authority in Austria:

Austrian Data Protection Authority
Barichgasse 40–42
1030 Vienna
Austria
Website: www.dsb.gv.at

17. Data Security

We take appropriate technical and organisational measures to protect personal data against loss, unauthorised access, alteration, disclosure and other forms of misuse.

These measures include, in particular, encrypted data transmission, access restrictions, secure login credentials, regular updates, data backups and measures for monitoring and securing the systems used.

18. Automated Decision-Making

We currently do not use solely automated decision-making, including profiling within the meaning of Art. 22 GDPR, that produces legal effects concerning you or similarly significantly affects you.

An automated preliminary selection of publicly available company information for postal direct marketing purposes may be carried out using predefined industry, activity or exclusion criteria. This preliminary selection does not constitute a decision that has legal or similarly significant effects on affected individuals.

19. Amendments to this Privacy Policy

We may amend this Privacy Policy if our data processing activities, the services we use or the applicable legal requirements change.

The version published on this website at the relevant time shall apply.

Last updated: August 2026