Controller
Mohammad Hatamian, Lindengasse 56/18-19, 1070 Wien, Österreich
Email:
Contact form and email
When you submit an enquiry, the contact details you enter, company details, the selected topic, your message and technically necessary security data are processed in order to review and answer the enquiry. The legal basis is Article 6(1)(b) GDPR (DSGVO) for pre-contractual measures or Article 6(1)(f) GDPR for the secure and traceable handling of other enquiries. Please do not submit passwords, login credentials or particularly sensitive data through the form.
Form messages are sent to the responsible mailbox through the configured SMTP service. Access is granted only to persons and processors who require it for operation, hosting, email delivery or handling the enquiry. Data is retained only for as long as necessary for the enquiry, statutory retention obligations or the defence of legal claims.
Server logs and protection against misuse
When the website is accessed, the IP address, time, requested address, referrer, browser identifier and technical status data may be processed in server logs. This serves website delivery, error analysis and security on the basis of Article 6(1)(f) GDPR. The form uses local safeguards including nonce verification, an invisible honeypot field, a signed timing check, limited submission attempts and a pseudonymised checksum. The resulting pseudonymous keys are retained for no more than 15 or 30 minutes; raw IP addresses, email addresses and messages are not stored in those keys.
When Cloudflare Turnstile is enabled for the form, a security service provided by Cloudflare, Inc. is loaded on the contact page. Technically necessary information about the browser, device, IP address, time and challenge outcome may be transmitted to Cloudflare, and the resulting single-use token is verified by the website server. Cloudflare does not receive the contents of the form fields or message through Turnstile. The purpose is to prevent automated submissions and securely operate the website on the basis of Article 6(1)(f) GDPR.
Cookies and external services
Technically necessary cookies may be set to ensure the secure operation of the website. Non-essential services and cookies are loaded only after valid consent, if they are activated. Selection and withdrawal of consent are managed through the cookie settings. The list of services shown there determines which services are currently active.
Your rights
Subject to the requirements of the GDPR, you have rights of access, rectification, erasure, restriction, data portability and objection, as well as the right to withdraw consent at any time with effect for the future. You may also lodge a complaint with the Austrian Data Protection Authority.
As of August 2026. This statement must be updated as soon as analytics, marketing, map, video, newsletter or other external services are added or changed.