Privacy Policy

The controller for data processing on this website is Schlosserei Holzmann, owner Mst. Johannes Jakob Holzmann, Scharten 14, 5450 Werfen, Austria.

For questions about data protection you can reach us at +43 660 4554200 or [email protected].

When you use the contact form we process your name, your email address, your phone number, the subject and your message. Name, email address, phone number and message are required, the subject is optional.

This information serves solely to handle your enquiry and to reply to you. The legal basis is Article 6(1)(b) GDPR, because the processing takes place at your request and in preparation for a possible contract.

We keep your enquiry for as long as handling it requires. If it leads to a contract, statutory retention periods apply, in particular the seven-year period under the Austrian Federal Fiscal Code.

To deliver the form message to our mailbox we use the service Resend (Resend, Inc., USA). The data you entered is transmitted and processed in the United States. Resend processes it on our behalf under a data processing agreement pursuant to Article 28 GDPR and is certified under the EU-U.S. Data Privacy Framework, which permits the transfer to the United States. Your details are not used for advertising and are not passed on to third parties.

To protect the form against misuse, our server keeps the IP address a request comes from in memory for ten minutes. If more than three requests arrive from the same address within that time, any further ones are rejected. When your message is sent, we additionally store a check value calculated from your IP address, not the address itself. This way no more than three messages per hour are sent from the same address. This check value is kept with our hosting provider Cloudflare and deleted automatically one hour after your last message. Neither the address nor the check value is passed on. The legal basis is Article 6(1)(f) GDPR, our legitimate interest in a form that cannot be misused for mass requests.

On the contact page you can load a map from Google Maps so that you can see where we are. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

The map is only loaded if you consent: in the cookie window that appears on your first visit to the website, or with “Load map” on the contact page. Your IP address is then transmitted to Google, Google may set cookies, and data may also be transferred to the United States. The legal basis is your consent under Article 6(1)(a) GDPR. Details are in Google’s privacy policy at policies.google.com/privacy.

We store your choice in a cookie named “karte_google” on your device for 12 months, a consent as well as a refusal. That way the website does not ask you again on every visit. You can change your choice and withdraw your consent here at any time. After a withdrawal the map only loads again once you consent again. Cookies set by Google itself can be deleted in your browser settings.

The route planning link is an ordinary link: it only transmits something to Google once you click it.

This website itself sets only a single cookie. It stores your choice from the cookie window and is technically necessary for that. As long as you make no choice, it is not set.

We do not embed analytics or advertising services. There is no audience measurement and no user profile.

The fonts used are delivered by this website itself as well. No connection to Google is made.

This website is operated at Cloudflare (Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA). Cloudflare delivers the pages, receives the contact form and protects the website against attacks.

In doing so, access data is processed automatically, such as IP address, time, page requested and browser used. This is technically necessary to deliver the site and to keep it secure. The legal basis is Article 6(1)(f) GDPR. This data is not combined with other sources.

Cloudflare processes this data on our behalf under a data processing agreement pursuant to Article 28 GDPR. Processing may also take place in data centres outside the EU, in particular in the United States. Cloudflare is certified under the EU-U.S. Data Privacy Framework, which permits the transfer to the United States.

You have the right to information about the data stored about you, to rectification, to erasure, to restriction of processing, to data portability and to object to processing based on a legitimate interest.

Please use the contact details above. If you believe that the processing of your data infringes data protection law, you can lodge a complaint with the Austrian Data Protection Authority: Barichgasse 40 to 42, 1030 Vienna, [email protected].