1. General
As the operator of this website and “controller” within the meaning of the General Data Protection Regulation (GDPR), we take the protection of your personal data very seriously. This policy explains what data we process, for what purpose, on what legal basis, and what rights you have.
2. Controller
DI(FH) Herbert Schrank Lindenweg 4, A-8190 Birkfeld, Austria Email: hschrank@qmisoft.com
3. What data we process
- Contact form: name, email address, company (optional), and message. The forms on this website (contact form and requirement brief) are processed by a script on our own web server at our hosting provider in the EU and delivered to us by email to answer your inquiry. No external form service is used and the submissions are not stored on the web server. For spam protection, a pseudonymised (hashed) value of your IP address is kept on the server for at most one hour.
- Additional form fields: type of request, country, and for the requirement brief the field, requirement, technical details, quantity, timeline, target market and EU-Ready requirements (all optional except the requirement).
- Partner and customer portal: if we grant you access to a protected area, we process your name, company, email address and login name to create and manage your account. Passwords are stored only in encrypted (hashed) form. Access to protected areas is recorded in the hosting provider’s server log files (including the login name) for security purposes. Legal basis: Art. 6(1)(b) GDPR (contract/pre-contractual measures) and Art. 6(1)(f) GDPR (IT security). Accounts are deleted when the business relationship ends or on request.
- Direct email inquiries: the information you provide (e.g. name, email address, content) to handle your request.
- Server log files: technical data automatically recorded by our hosting provider whenever the site is accessed (browser type/version, operating system, referrer URL, truncated/anonymized IP address, time of the server request), used to ensure reliable operation and IT security. This data does not allow conclusions about your identity and is not combined with other data sources.
4. Purposes of processing
We process your data to: provide and improve this website and its features; respond to your inquiries; fulfil our (pre-)contractual obligations; detect and prevent attacks on our website; and pursue legitimate business interests.
5. Legal basis
Depending on the case, processing is based on your consent (Art. 6(1)(a) GDPR), on the performance of pre-contractual or contractual obligations (Art. 6(1)(b) GDPR), or on legitimate interests (Art. 6(1)(f) GDPR), such as the secure and functional operation of the website.
6. Retention period
Inquiries submitted via the contact form or email are deleted once they are no longer needed to handle your request, and at the latest once statutory retention and documentation obligations expire. Server log files are automatically deleted or anonymized after a short period, per our hosting provider’s standard settings.
7. Disclosure to third parties / processors
Your data is only shared with processors who need it to provide the contractually agreed service, specifically:
- our email provider (receiving form submissions and emails),
- our hosting provider (technical operation of the website).
All processors are contractually bound to treat your data confidentially (Art. 28 GDPR). Data is transferred outside the EU/EEA only where an adequate level of data protection is ensured (e.g. via an EU Commission adequacy decision or EU Standard Contractual Clauses).
8. Cookies and your consent
On your first visit, this website displays a cookie consent banner with the categories Necessary, Functional, Analytics, and Marketing. Necessary cookies are technically required for the site to function and cannot be disabled. Analytics and marketing cookies are not pre-selected by default.
We do not use functional or marketing cookies. Whether and how we use web analytics is described in section 8a below. Any further service added later will only be activated behind your consent and named in this policy, including the data processed and any transfers to third countries.
By clicking “Accept” on the cookie banner, you consent to the use of any non-essential cookies named in this policy, and to any related data transfers to third countries, once and to the extent such services are actually deployed. You can change or withdraw your choice at any time via the “Cookie Settings” link in the site footer.
9. Your rights
Under the GDPR, you have the right to: access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and objection to processing (Art. 21). To exercise these rights, please contact hschrank@qmisoft.com.
You also have the right to lodge a complaint with the Austrian data protection authority: Österreichische Datenschutzbehörde, Barichgasse 40–42, 1030 Vienna, Austria, www.dsb.gv.at
10. Objection to unsolicited advertising
We hereby expressly object to the use of contact details published as part of our legally required imprint for sending unsolicited advertising. We expressly reserve the right to take legal action in the event of unsolicited advertising, for example via spam email.
11. Changes to this policy
We may update this privacy policy from time to time, for example if the website, its features, or the applicable legal situation change. The current version is always available on this page; the date of the last update is shown above.
8a. Web analytics (Matomo)
We currently do not use any web analytics on this website.