🔒 Privacy Policy

1. Data Controller

Responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

2. General Information on Data Processing

2.1 Scope of Processing

We generally only process personal data of our users insofar as this is necessary for the provision of a functional website as well as our content and services.

2.2 Legal Basis

The processing of personal data is based on the following legal grounds:

• Art. 6 Abs. 1 lit. a DSGVO: Consent (e.g., cookie consent)
• Art. 6 Abs. 1 lit. b DSGVO: Pre-contractual measures (e.g., contact)
• Art. 6 Abs. 1 lit. f DSGVO: Legitimate interest (e.g., server logs)

3. Website Provision and Creation of Log Files

3.1 Description and Scope

Each time our website is accessed, our web server automatically collects data and information from the computer system of the accessing device.

3.2 Legal Basis

The legal basis for the temporary storage of data and log files is Art. 6(1)(f) GDPR (legitimate interest).

3.3 Purpose of Data Processing

Processing is carried out for the following purposes:

• Ensuring a smooth connection setup
• Ensuring comfortable use of the website
• Evaluation of system security and stability
• Detection and defense against attacks

3.4 Storage Duration

The data is deleted as soon as it is no longer necessary for the purpose for which it was collected. In the case of data collection for website provision, this is when the respective session has ended.

Log files are automatically deleted after no more than 7 days.

3.5 Right to Object and Removal

The collection of data for website provision and the storage of data in log files is mandatory for the operation of the website. Consequently, there is no possibility of objection on the part of the user.

4. Use of Cookies

4.1 Description

Our website uses cookies. Cookies are small text files stored on your device that save certain settings and data for exchange with our system via your browser.

4.2 Types of Cookies

We use the following categories of cookies:

4.3 Detailed Information

A detailed overview of all cookies used, their purpose and storage duration can be found in our Cookie Policy.

4.4 Manage Cookie Settings

You can change your cookie settings at any time:

• Click the "Cookie Settings" button at the bottom of the screen
• Or delete cookies in your browser settings

5. Contact

5.1 By Email or Phone

When you contact us by email or phone, the data you provide (name, email address, phone number, your inquiry) is stored by us to process your inquiry and answer any follow-up questions.

5.2 Legal Basis

The processing of this data is based on Art. 6(1)(b) GDPR, insofar as your inquiry is related to the fulfillment of a contract or is necessary for pre-contractual measures.

5.3 Storage Duration

Your data will be deleted once your inquiry has been fully processed and no legal retention obligations exist. This is usually the case after 6 months, provided no contractual relationship has been established.

5.4 No Automatic Data Collection

6. Hosting and Data Processing

6.1 Hostinger

Our website is hosted by Hostinger:

Hostinger processes data on our behalf on servers in the European Union. A data processing agreement (DPA) pursuant to Art. 28 GDPR has been concluded with Hostinger.

6.2 Processed Data

Hostinger processes the following data:

• Server log files (IP addresses, access data)
• Website files (HTML, CSS, JavaScript, images)

6.3 Legal Basis

Processing is based on Art. 6(1)(f) GDPR (legitimate interest in secure and reliable provision of the website).

7. Analytics Tools

7.1 Google Analytics (Optional)

This website may use Google Analytics, a web analytics service provided by Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

7.2 Scope of Processing

Google Analytics uses cookies and collects the following data:

• Anonymized IP address (IP anonymization active)
• Pages visited and time spent
• Browser type and operating system
• Visitor origin (referrer)

7.3 Legal Basis

The use of Google Analytics is based on your consent pursuant to Art. 6 Abs. 1 lit. a DSGVO.

7.4 Revocation

You can revoke your consent at any time by disabling analytics cookies in the cookie settings.

8. Your Rights as a Data Subject

If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis the data controller:

8.1 Right of Access (Art. 15 GDPR)

You have the right to request confirmation from us as to whether personal data concerning you is being processed.

8.2 Right to Rectification (Art. 16 GDPR)

You have the right to request the rectification of inaccurate personal data concerning you.

8.3 Right to Erasure (Art. 17 GDPR)

You have the right to request the deletion of your personal data ("right to be forgotten").

8.4 Right to Restriction of Processing (Art. 18 GDPR)

You have the right to request restriction of processing.

8.5 Right to Data Portability (Art. 20 GDPR)

You have the right to receive the personal data concerning you in a structured, commonly used and machine-readable format.

8.6 Right to Object (Art. 21 GDPR)

You have the right to object, on grounds relating to your particular situation, at any time to object to the processing of personal data concerning you.

8.7 Right to Withdraw Consent (Art. 7(3) GDPR)

You have the right to withdraw your consent at any time. This applies in particular to cookie consent, which you can change at any time via the cookie settings.

8.8 Right to Lodge a Complaint (Art. 77 GDPR)

You have the right to lodge a complaint with a supervisory authority:

9. Data Security

We use the widely used SSL (Secure Socket Layer) method during website visits, combined with the highest level of encryption supported by your browser.

All data you transmit is encrypted. You can recognize an encrypted connection by the lock symbol in your browser bar and the address bar changing from "http://" to "https://".

We also employ appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction, or unauthorized access by third parties.

10. Currency and Changes to This Privacy Policy

This privacy policy is currently valid as of March 2026. Due to the further development of our website or due to changed legal or regulatory requirements, it may become necessary to amend this privacy policy. The current privacy policy can be accessed and printed at any time on the website at virall.at/datenschutz.html by you.