Privacy Policy

Information on the processing of personal data under Article 13 GDPR and the Austrian Data Protection Act.

1. Controller

Mag. Tamas Toth
Liechtensteinstraße 131-133/24
1090 Vienna, Austria
Email: tamas.toth@metallagentur.at
Phone: +43 699 1264 2565

2. Collection and storage of personal data

a) When visiting the website

When you access the website, your browser automatically sends information to the server (IP address, date and time, file requested, referrer URL, browser, operating system) which is temporarily stored in a logfile to ensure smooth operation. Legal basis: Art. 6 (1) (f) GDPR (legitimate interest).

Hosting: This website is delivered via GitHub Pages (GitHub, Inc., USA). Details: docs.github.com/site-policy.

b) When using the contact form

When using the contact form, the data entered (name, company, email, phone, message etc.) is processed to handle your enquiry. Legal basis: Art. 6 (1) (b) GDPR (contract initiation) and Art. 6 (1) (f) GDPR (legitimate interest in answering).

The form is transmitted via the external service provider FormSubmit (FormSubmit.co), which forwards the enquiry by email to the controller. FormSubmit processes the data in the United States. This constitutes a transfer to a third country. Where FormSubmit uses EU Standard Contractual Clauses (SCCs pursuant to Implementing Decision EU 2021/914), the transfer is based on these; additionally, Art. 49 (1) (b) GDPR (contract performance) and your consent under Art. 6 (1) (a) GDPR by actively submitting the form after this notice apply.

You may object to processing at any time and instead contact us directly by email or phone.

c) Storage period

Enquiries are stored until the purpose of processing has ceased (typically after completion of the business transaction or after 6 months of inactivity), at most up to the statutory retention periods (e.g. § 132 BAO: 7 years for tax-relevant documents).

3. Cookies

This website does not use tracking cookies or any web analytics tool. Only technically necessary session cookies (e.g. for language selection) are set.

4. Embedded content

This website does not embed third-party content such as YouTube videos, Google Maps or social media plugins. External fonts (Google Fonts) are loaded from Google servers — your IP address may be transmitted to Google.

5. Recipients of the data

Your personal data is shared only with the following processors:

• GitHub, Inc. (website hosting) — Data Processing Agreement: GitHub DPA
• FormSubmit.co (form transmission)
• Email provider for processing of incoming emails

6. Your rights

Under the GDPR you have the right to information (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20), objection (Art. 21), withdrawal of a granted consent (Art. 7 (3)) with effect for the future, and to lodge a complaint with the supervisory authority (Art. 77). Exercising these rights is free of charge. Where consent is requested, it is given voluntarily; refusal has no negative consequences.

Requests: tamas.toth@metallagentur.at

We respond to requests pursuant to Art. 12 (3) GDPR within one month of receipt. Where requests are complex, the period may be extended by a further two months (with notification within one month).

7. Right to lodge a complaint

You have the right to lodge a complaint with the Austrian Data Protection Authority:

Österreichische Datenschutzbehörde
Barichgasse 40-42, 1030 Vienna
Email: dsb@dsb.gv.at
Web: www.dsb.gv.at

8. Status of this Privacy Policy

This privacy policy is dated May 2026. It will be updated in case of substantial changes.

Final legal review recommended.

Third-party providers and embedded content

The website may use static hosting, email communication, an optional contact form and an X feed loaded only after user interaction. Non-essential third-party content should load only after an active user action.