Data protection policy of denkstatt GmbH

1. General

This data protection policy describes how denkstatt GmbH, included as company no. 294077 in the Register of Companies of the Commercial Court of Vienna and based at Hietzinger Hauptstraße 28, 1130 Wien (hereinafter referred to as we or us) processes your personal data.
We all love our privacy, and we respect yours too. For this reason, it is of particular concern to us to explain to you in detail how we process your personal data. We view it as our obligation to administrate your data with the greatest care, and to do everything to protect your information from misuse. We strictly adhere to the provisions of data protection legislation when collecting and processing your personal data. This data protection policy is addressed to our website users, the newsletter community and our customers and partners.
Please note that our website can contain links to other service providers to whom this data protection policy does not extend. We cannot assume any liability for the content to which these links lead.

2. Name and contact details of the person responsible for data processing

Should you have any questions or concerns regarding the processing of your personal data, please contact:
denkstatt GmbH
Hietzinger Hauptstraße 28
1130 Wien
Tel: +43 1 786 89 00

3. Personal data of yours which we collect

Personal data refers to all information which is related to your rights and through which you can be personally identified, whether it is on the basis of this piece of information on its own or in combination with other information we have.
During your visit to our website we will gather the following information:
a) date and time when you accessed our website;
b) your IP address;
c) name and version of your browser;
d) the website (URL) which you visited before accessing our website, and
e) certain cookies (see point 15).
As part of the conclusion of a contract or the initiation of such, we will also gather the following information:
a) first and last name, e-mail address and other information which you provide;
There is no obligation for you to actually provide the data which we request from you. However, if you do not, you will not be able to use all of the functions of the website, and we will usually not conclude the contract or carry out the order, or will no longer be able to carry out an existing contract and will have to terminate it.

4. Collection of data

Personal data is collected, processed and used insofar as it is required for the establishment of a legal relationship, for its content, or to change it. This is carried out in order to fulfil a contract or pre-contract measures, and also in the justified interests of the person responsible.

When you provide your e-mail address or postal address, we take the opportunity to send you current information in the form of our newsletter. You have the right to withdraw your registration for our newsletter and withdraw from the receipt of specialist information at any time by sending an e-mail to or a letter to denkstatt GmbH, Hietzinger Hauptstraße 28, 1130 Wien.

5. Purposes of the processing of data

We will process the personal data mentioned in point 3 for the following purposes:
a) to maintain and improve our website including the personalisation of your online experience, and in order to ensure that content is presented to you in a way which is most effective for you;
b) to carry out our business, which includes providing information, products and services which you request, and for other transaction-related or administrative updates;
c) in order to inform you about products and services which we offer and which are similar to those which you have already acquired, or which you have enquired about;
d) in order to send you information about products and services which we believe could be of interest to you;
e) in order to make you aware of changes to our services, to the website or to our conditions of use, and to these data protection guidelines;
f) as part of our efforts to maintain the safety of the website;
g) in order to measure and understand the effectiveness of our advertising, and to make our future marketing efforts and those of third party providers more effective;
h) in order to carry out administrative work on our website and for internal processes including troubleshooting, data analysis, research, tests, and for statistical and market research purposes and
i) in order to handle our contractual relationship with you and to be able to provide our services to you.

6. Legal basis of the processing of data

The legal basis for the processing of your personal data is, on the one hand, the fulfilment of a contract and your consent, and on the other hand our predominant justified interest which consists of achieving the purposes mentioned in point 7.

7. Transmission of your personal data to third parties

For the purposes mentioned in point 5 we will transmit your personal data to the following recipients:
a) IT service providers whom we deploy;
b) our tax advisor/accountant;
c) group companies: denkstatt Bulgaria, denkstatt Hungary, denkstatt Romania and denkstatt Slovakia;
d) Mailchimp: under certain circumstances, we commission other companies in order to carry out certain business functions such as sending e-mails or marketing. We might disclose personal information which we collect to these companies in order to enable them to carry out these services. For example, information about your user behaviour on our website can be passed on to our external service providers who support us in our marketing efforts. Our newsletter as well as all of our EDM (electronic direct mail) are sent via the program Mailchimp, and
e) Partner companies: we may cooperate with third parties (e.g. Österreichische Post, printing companies) to send you information about products or services which we believe might be of interest to you. We only pass on your personal data to third parties if you have agreed to receive such information. Österreichische Post and printing companies only receive this data in order to send ADM (analogue direct mail).


denxpert EHS&S software Kft. uses third parties to provide certain services. As part of our business activities, we may pass on personal data that we collect to this third party provider if this is necessary to support these processes. The service provider is responsible for the operation, provision and quality assurance of the relevant software. The IT service provider also has an information security management system certified in accordance with ISO/IEC 27001:2013 to ensure the protection of the information provided.

– Mailchimp: To perform certain business functions such as sending e-mails or marketing, we use the “Mailchimp” service provided by The Rocket Science Group LLC, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA. The data you provide (e-mail address, name) is transferred to a Mailchimp server in the USA and stored there. Mailchimp uses this information for sending and statistical analysis on our behalf. Furthermore, Mailchimp may, according to its own information, use this data to optimize or improve its own services, e.g. for the technical optimization of the dispatch and presentation of the newsletter or for economic purposes in order to determine from which countries the recipients come. However, Mailchimp does not use the data to write to them itself or pass it on to third parties.
As Mailchimp is a provider in an insecure third country, we have concluded an order processing contract with the company in which the agreed standard contractual clauses of the European Commission are implemented. Mailchimp’s obligation to comply with the Standard Contractual Clauses (SCC) ensures that your data complies with European data protection standards even if it is transferred to and stored in third countries (such as the USA). Mailchimp undertakes to comply with the European level of data protection.

– Vertec: We use the business software Vertec GmbH, Mariahilfer Straße 101/1/23 1060 Vienna, to manage our customers’ contact data, and Vertec stores customers’ personal data, including name, position and email address. This data is processed for the purpose of customer management and the performance of our contractual obligations in accordance with Art. 6 para. 1 lit. b GDPR.

– Matomo: Our website uses Matomo, an open source software for the statistical analysis of visitor access. Matomo uses cookies, which are stored on your computer and enable your use of the website to be analyzed. Your IP address is immediately anonymized, so that you remain anonymous as a user. The information generated by the cookie about your use of this website is not passed on to third parties.
You can prevent the use of cookies by selecting the appropriate settings in your browser software. However, we would like to point out that in this case you may not be able to use all the functions of our website to their full extent.



8. Protection of your personal data

We take the protection of your personal data very seriously and use appropriate technical and organisational measures to protect you against unauthorised or illegal processing as well as against accidental loss, destruction or damage.

9. Duration of the storage of your personal data

Your personal data is – as far as necessary – stored and processed for the entire duration of our business relationship and beyond it in line with the statutory obligations regarding storage and documentation. With regard to the duration of storage there are additionally statutory limitation periods which in certain cases can extend to up to thirty years.
We will destroy your personal data immediately as soon as its storage by us is no longer required and/or is no longer provided for by the law. If your personal data is printed out on paper, it will be shredded. If the personal data is stored in electronic form, it will be erased by using irreversible technical methods.

10. Your rights with regard to your personal data

Your rights include (among other things):
a) to examine whether and which personal data we have stored about you, and to receive copies of this data (right of access to data, free of charge);
b) to demand the correction, supplementation or deletion of personal data which is wrong or has not been processed in compliance with the law (the right to have data corrected (right of rectification or deletion, as well as the right to be forgotten);
c) to demand from us the restriction of the processing of your personal data (right to the restriction of processing);
d) under certain circumstances, to object to the processing of your personal data (right to object);
e) to demand the right to transfer data to another organisation;
f) to revoke the consent you have previously given to processing;
g) if you are of the opinion that the processing of your data violates the (Austrian) Data Protection Act or the EU General Data Protection Regulation (GDPR), or that your rights according to data protection law have been otherwise violated, you can complain to the Austrian data protection authority ( In this case, however, we would also of course be pleased to help, and we will always endeavour to carry out data processing in compliance with the applicable regulations.

11. Exclusion of liability for links to other websites and services

Our website can contain links to those of other companies.
We have no influence on how the websites and services of other companies process your personal data: we do not check the websites and services of other companies and are not responsible for such websites and services or their data protection practices. You are advised to obtain information about data protection on these websites and about the services of third parties.

12. Changes to this data protection policy

We are committed to upholding the principles of privacy and data protection. We therefore examine our data protection policy at regular intervals in order to ensure that it is free of errors and is situated in a highly visible place on our website. We also ensure that it contains appropriate information about your rights and our processing work, and that it has been created according to the relevant legislation and therefore complies with it. We may update this data protection policy occasionally in order to keep it up to date, in order to take new developments into account, and to ensure adherence to the applicable legislation. If we were to make considerable changes to this data protection policy, we would inform you of this by giving notice of it on our website and via an updated version of the data protection policy.

13. Right to information

In accordance with the data protection act, you have a right to free information about the data we have stored. If you have any questions about our use of your personal data, on exercising your rights or about this data protection policy, you are welcome to contact us as follows:
by e-mail to:
or by post to: denkstatt GmbH, Hietzinger Hauptstraße 28, 1130 Wien

14. Cookies

We use so-called cookies on our website.
A cookie is a small file which can be stored on your computer when you visit a website. Cookies are principally used in order to provide users with additional functions on a website. They can be used, for example, to make navigation through a website easier for you, or to continue to use a website at the point where you left it and/or to save your preferences and settings for when you use the website again. Cookies cannot access any other data on your computer, or read or change it.
Most of the cookies on our website are so-called session cookies. They are deleted automatically when you leave our website again. Permanent cookies, on the other hand, remain on your computer until you delete them manually in your browser. We use permanent cookies in order to recognise you when you visit our website the next time.
If you want to keep control of cookies on your computer, you can adjust your browser settings so that you get a message when a website wants to store cookies. You can also block or delete cookies if they have already been saved on your computer. If you would like to know more about how to do this, please use the help function in your browser.
Insofar as cookies are required to carry out electronic communication processes or to enable specific functions which you would like to use, they will be stored by us. As the website operator, we have a justified interest in storing cookies to enable us to provide our services in a technically error-free and optimal way. Other cookies (such as those to analyse surfing behaviour) are explained separately in point 16 of this data protection policy.
Please note that blocking or deleting cookies can impair your online experience and represent an obstacle to your using this website fully.

15. Server log files

Website providers normally automatically collect and store information in so-called server log files which your browser sends to us automatically. These are:
a) browser type and browser version;
b) the operating system used;
c) the referrer URL;
d) the host name of the accessing computer, and
e) the time of the server request.

16. Analysis tools

This website uses Google Analytics, a web analysis service provided by Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA (Google). Google Analytics uses so-called cookies, text files which, as mentioned above, are stored on your computer and which enable the analysis of your use of the website.
The information created by the cookie about your use of this website (including your IP address and the URLs of the websites you have accessed) are sent to Google’s servers in the USA and stored there. We do not store any of your data which is collected in connection with Google Analytics.
This website uses the opportunity to anonymise IP addresses offered by Google Analytics. Your IP address is therefore shortened/anonymised as soon as Google receives it. On our behalf, Google uses this information to evaluate your use of the website in order to compile reports on the website activities and in order to provide additional services to us related to the use of the website and internet usage. The IP address sent by your browser in the context of Google Analytics is not combined with other data by Google.
You can prevent the storage of cookies by means of the corresponding settings in your browser program. We would, however, like to point out that in this case it may occur that not all functions of the website can then be used to their full extent. In addition, you can prevent Google from collecting your data in the context of Google Analytics by downloading and installing the browser plug-in which is available via the following link:
You can also prevent Google Analytics from collecting your data on this website by clicking the link below. It installs an opt-out cookie which prevents your data from being collected when you visit this website in future. disable.
Further information on the conditions of use of Goggle as well as Google’s data protection policy can be found at, or at: