Privacy Policy

Responsible Entity

SRB Consulting Team GmbH

Lassallestraße 7a, Unit 4, Top 6b

1020 Vienna, Austria

General Information

In this privacy policy, we inform you about which personal data we process when you visit our website and use our services. You can visit our website without entering information into a form. However, technically necessary connection data will be generated.

We process personal data only for the purposes described below and on an appropriate legal basis. We also use service providers to process data on our behalf. We only transmit data to other recipients as far as necessary for the respective purpose or legally permissible. We name the recipients in the individual processing activities.

Server Logfiles

When you access our website, our web server processes technically necessary access data. This includes, in particular, IP address, date and time of access, requested page, transferred data volume, referrer URL, as well as information about browser and operating system. We need this data to provide the website, detect errors, and protect our systems. The legal basis is our legitimate interest in a secure and functional web presence (Art. 6 para. 1 lit. f GDPR).

We delete the logfiles as soon as they are no longer required for these purposes. If a security incident is investigated or a legal claim is asserted, we retain the necessary data until clarification.

Our website is hosted by Hetzner Online GmbH, Industriestraße 25, 91710 Gunzenhausen, Germany. Hetzner processes the data on our behalf based on a contract according to Art. 28 GDPR.

Cookies and Similar Technologies

We use technically essential cookies and similar technologies to ensure that our website and the functions you explicitly request can be provided. No consent is required for this under § 165 para. 3 TKG 2021. As far as personal data is processed, we rely on our legitimate interest in a functional and secure web presence (Art. 6 para. 1 lit. f GDPR).

We only use all other technologies, such as for web analysis, once you have consented via our consent banner (§ 165 para. 3 TKG 2021, Art. 6 para. 1 lit. a GDPR). You can easily refuse or grant consent. You can change your selection or withdraw your consent at any time via the cookie settings.

Google Tag Manager

If you consent to web analysis, we load the Google Tag Manager from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). This allows us to manage the tags on our website, particularly for Google Analytics. When loading the service, a connection to Google is established. Your IP address may be transmitted in this process. The Tag Manager triggers additional services only according to your selection in the cookie settings. The legal basis is your consent (Art. 6 para. 1 lit. a GDPR). We inform about possible transmission to the USA in the section “Google Analytics 4”.

Google Analytics 4

If you consent to web analysis, we use Google Analytics 4, a service from Google. Google Analytics processes information about how you use our website, such as accessed pages, approximate location, device and browser, as well as various events like clicks, downloads, or form submissions. Cookies and similar technologies are used for this. We use this information to understand the use of our website and improve our offerings. The legal basis is your consent (§ 165 para. 3 TKG 2021, Art. 6 para. 1 lit. a GDPR).

According to Google, IP addresses are neither logged nor stored in Google Analytics 4. However, when data is transmitted to Google, the IP address is processed to determine the approximate location. The captured event data is automatically deleted after the retention period set in our Google Analytics property expires.

When using Google services, data may be transmitted to Google LLC in the USA. Google LLC is certified under the EU-U.S. Data Privacy Framework. For certified companies, there is an adequacy decision by the EU Commission (Art. 45 GDPR). Further information can be found at https://policies.google.com/privacy.

Contact Requests

If you contact us via the contact form or by email, we process your contact details and the content of your message to handle your request and communicate with you. We require mandatory fields for processing; additional information is voluntary. Messages from the contact form are delivered to us via Mailgun (see below) by email.

If your request relates to a contract or pre-contractual steps, the legal basis is Art. 6 para. 1 lit. b GDPR. For other inquiries, we rely on our legitimate interest in answering them (Art. 6 para. 1 lit. f GDPR).

Applications

If you apply via our application form, we process your contact details, your application documents, and the information generated during the process to decide on filling a position. Applications from the form are delivered to us via Mailgun by email. The legal basis is Art. 6 para. 1 lit. b GDPR (pre-contractual steps). Only persons involved in the selection process have access.

Please only submit special categories of personal data, such as health data, if they are necessary for your application.

If no employment is established, we will retain your data only as long as we need it to defend against possible claims arising from the application process, particularly under the Equal Treatment Act (Art. 6 para. 1 lit. f GDPR). With your explicit consent, we will keep your application on file for future suitable positions (Art. 6 para. 1 lit. a GDPR). You can revoke this consent at any time.

Registration for Events

When you register for an event, we process the contact and participation data requested in the form to handle your registration, inform you about the event, and organise your participation. The legal basis is Art. 6 para. 1 lit. b GDPR. We require mandatory information for organisation; further details are voluntary. Registrations are delivered to us via Mailgun by email.

When you subscribe to our newsletter, we process your name and email address to send you the newsletter. The legal basis is your consent (Art. 6 para. 1 lit. a GDPR, § 174 para. 3 TKG 2021).

After registration, you will receive an email with a confirmation link (Double Opt-in). Only after your confirmation will we add your address to the distribution list. To prove your consent, we store the time of registration and confirmation.

Your registration data will be transmitted via Mailgun to SAP Sales Cloud V2 and stored there. We send the newsletter via SAP Sales Cloud V2.

You can unsubscribe from the newsletter at any time via the unsubscribe link in each issue or by emailing datenschutz@srb.at. We will then cease sending it. To ensure you do not receive further newsletters, we store your email address on a blocklist (Art. 6 para. 1 lit. f GDPR). We will delete the remaining newsletter data as soon as we no longer need it to prove your consent.

Downloads

If you request content such as a white paper via a form, we process your name, company, and email address to provide you with the content. The legal basis is the fulfilment of your request (Art. 6 para. 1 lit. b GDPR).

Your information will be transmitted via Mailgun to SAP Sales Cloud V2 and stored there. This allows us to document which content you have requested and respond to your inquiries about it. The legal basis is our legitimate interest in orderly customer communication (Art. 6 para. 1 lit. f GDPR). You can object to this processing at any time.

You will only receive promotional emails or calls if you have expressly consented (§ 174 TKG 2021). A download does not automatically lead to a newsletter subscription.

Online Appointment Booking

Through our website, you can book a conversation appointment. We use Microsoft Bookings, a service of Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland (‘Microsoft’). We process your name, email address, phone number, chosen appointment, and your message to arrange the appointment, send you a confirmation, and conduct the conversation. The appointment is stored in our Microsoft 365 calendar. A link to Microsoft Teams is automatically created for online appointments.

The booking page is directly integrated into our website. When loading the page, a connection to Microsoft is established. Your IP address is transmitted in this process.

The legal basis is Art. 6 para. 1 lit. b GDPR, provided the appointment serves to initiate a collaboration; otherwise, our legitimate interest in processing your request (Art. 6 para. 1 lit. f GDPR).

Microsoft processes the data on our behalf based on a contract under Art. 28 GDPR. Data may also be processed outside the EU, particularly in the USA. Microsoft Corporation is certified under the EU-U.S. Data Privacy Framework. Where data is transmitted to the USA, this is based on the adequacy decision of the EU Commission (Art. 45 GDPR). For more information, visit https://privacy.microsoft.com/en-gb/privacystatement.

Email Dispatch via Mailgun

For the delivery of form messages (contact, application, event registration) and for the transfer of newsletter and download registrations to SAP Sales Cloud V2, we use Mailgun from Mailgun Technologies, Inc. (part of the Sinch Group), 112 E. Pecan Street #1135, San Antonio, TX 78205, USA. Mailgun processes the form contents, recipient and sender details, as well as technical dispatch and delivery data on our behalf based on a contract under Art. 28 GDPR. The legal basis for each message arises from the section concerning the relevant form.

Processing takes place in the EU region. Mailgun Technologies, Inc. is certified under the EU-U.S. Data Privacy Framework. Where data is transmitted to the USA, this is based on the adequacy decision of the EU Commission (Art. 45 GDPR). For more information, visit https://www.mailgun.com/legal/privacy-policy/.

CRM System and Newsletter Dispatch with SAP Sales Cloud V2

We use SAP Sales Cloud V2 from SAP Österreich GmbH, Lassallestraße 7B, 1021 Vienna, Austria as our CRM system. We store newsletter registrations and download requests in it, and we send the newsletter through it. SAP processes the data on our behalf based on a contract for data processing under Art. 28 GDPR.

The data is stored in the SAP Data Centre AWS Europe Frankfurt. As part of operations and support, SAP and the subcontractors used may also process or access personal data outside the European Economic Area. For transfers to subcontractors in countries without an adequate level of data protection, the agreed data processing agreement provides for the EU standard contractual clauses of the European Commission. Additionally, technical and organisational protective measures apply; if necessary, further protective measures may be added. Information on the guarantees used can be obtained upon request at datenschutz@srb.at.

The legal basis and storage duration depend on the respective purpose, as described in the sections 'Newsletter' and 'Downloads'.

Security Measures

We implement appropriate technical and organisational measures to protect personal data from unauthorised access, loss, and misuse. Data transmission between your browser and our website occurs via an encrypted connection (TLS).

Your Rights

Under the respective legal conditions, you have the right to information, correction, deletion, restriction of processing, and data portability. You may object to processing based on our legitimate interest for reasons arising from your particular situation. You may object to the processing of your data for direct marketing at any time. Any consent given may be revoked at any time with effect for the future. The lawfulness of processing until the revocation remains unaffected.

Please contact datenschutz@srb.at for this purpose. If you believe that the processing of your data violates data protection law, you may lodge a complaint with a supervisory authority, particularly with the Austrian Data Protection Authority, Barichgasse 40-42, 1030 Vienna, www.dsb.gv.at.

Changes

We update this privacy policy when the processing on our website changes or an adjustment is required for legal reasons. The current version is available on this page.

Status: October 2026