Privacy Policy

1. Controller

Email: mlm@cwpeople.at
Telephone: +43 664 2143133

2. General information

We process personal data in accordance with the General Data Protection Regulation (GDPR), the Austrian Data Protection Act and other applicable laws. Personal data means any information relating to an identified or identifiable person.

3. Website access and hosting

This website is delivered through Amazon Web Services. Technically necessary connection data may be processed, including IP address, date and time of access, requested URL, volume of data transferred, referrer URL, and browser and device information. We process this data to deliver the website securely, reliably and efficiently and to detect errors or misuse. The legal basis is our legitimate interest under Article 6(1)(f) GDPR.

The service provider is Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855 Luxembourg. The services used include AWS Amplify, Amazon CloudFront and Amazon S3. Primary backend services operate in the AWS Europe (Frankfurt) region. Where data is processed outside the European Economic Area, AWS relies on applicable adequacy decisions, including the EU-US Data Privacy Framework, and/or the EU Standard Contractual Clauses.

Technical log data is retained only for as long as necessary for operation, security and troubleshooting. It may be retained for longer where a specific security incident or a legal obligation requires this.

4. Contact and contact form

If you contact us by email, telephone or the contact form, we process the information you provide. For the form this includes your name, email address, optional telephone number, subject and message. Technically necessary metadata such as the submission time and security attributes is also processed.

The form is processed through Amazon API Gateway and AWS Lambda and delivered to us using Amazon Simple Email Service (SES). The data is not stored in a publicly accessible database. The legal basis is Article 6(1)(b) GDPR where your enquiry relates to a contract or pre-contractual steps, and otherwise our legitimate interest in responding under Article 6(1)(f) GDPR.

We retain enquiries for as long as necessary to respond and manage a potential business relationship. Business correspondence may be retained for up to seven years where statutory retention duties apply. Other enquiries are deleted once their purpose has ended and no legitimate or legal reason requires further retention.

5. Google Fonts

This website uses the Inter typeface through Google Fonts. When you open a page, your browser connects to fonts.googleapis.com and fonts.gstatic.com to retrieve stylesheets and font files. Google therefore receives your IP address and technical browser and connection information. According to Google, the Google Fonts API does not set cookies.

The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. We use Google Fonts on the basis of our legitimate interest in consistent, efficient and appealing website presentation under Article 6(1)(f) GDPR. Google may also process data through Google LLC in the United States. For US transfers, Google may rely on the EU-US Data Privacy Framework and additionally on EU Standard Contractual Clauses.

Further information is available in the Google Fonts privacy information and Google Privacy Policy.

6. External links and LinkedIn

Our website links to external services, particularly LinkedIn. Data is transferred to the relevant provider only when you follow such a link. The external website operator is responsible for that processing. In the European Economic Area, LinkedIn is operated by LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland.

7. Cookies and analytics

We currently use no analytics, marketing or profiling services and no non-essential cookies on this website. If this changes, we will update this policy and obtain your prior consent where required.

8. Recipients and processors

Data is available only to recipients who require it for the stated purposes. These include our hosting, cloud and email providers and, where necessary in an individual case, professional advisers or public authorities. We enter into the legally required agreements with processors. We do not disclose personal data for third-party advertising.

9. Your rights

Subject to the statutory conditions, you have rights of access, rectification, erasure, restriction of processing, data portability and objection. Where processing is based on consent, you may withdraw that consent at any time with future effect. To exercise your rights, contact mlm@cwpeople.at.

You also have the right to lodge a complaint with a data protection supervisory authority. In Austria, this is the Austrian Data Protection Authority, Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at.

10. Data security and automated decisions

We take appropriate technical and organisational measures to protect personal data. This website does not carry out automated decision-making, including profiling, within the meaning of Article 22 GDPR.

11. Changes and language

We update this policy when the website, the services used or applicable law changes. This English version is provided for convenience. In the event of inconsistencies, the German-language privacy policy prevails.