Skip to main content

privacy policy

This privacy policy informs you about the nature, scope and purpose of the processing of personal data on this website. The legal bases are in particular the General Data Protection Regulation (GDPR) and the Telecommunications Act 2003 (TKG 2003) in Austria.

Contents

1. Controller

kreativ quadrat Werbeagentur e.U.
Tel.: +43 5242 21180
E-Mail: This email address is being protected from spambots. You need JavaScript enabled to view it.

Data Protection Officer: No data protection officer has been appointed (if applicable).

2. General information on data processing

We process personal data only to the extent necessary to provide a functional website, to process enquiries or to fulfil legal obligations. Data is only passed on to third parties if this is necessary for the provision of services, a legal obligation exists, or you have given your consent.

3. Server log files

When this website is accessed, the hosting provider or web server automatically processes the following data in so-called server log files:

  • Browser type and browser version
  • Operating system used
  • Referrer URL
  • Hostname of the accessing device
  • IP address (possibly shortened/pseudonymised, depending on server configuration)
  • Date and time of the server request

Purpose: Ensuring technical operation, error analysis, defence against attacks.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest).
Storage period: generally up to 14 days, after which deletion/anonymisation, unless security-related retention is required.

4. Contact / Contact form

If you contact us by form or e-mail, the data you provide (e.g. name, e-mail address, message and, if applicable, telephone number) will be processed to handle your enquiry.

Purpose: Processing your enquiry and communication.
Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures / performance of a contract) or Art. 6(1)(f) GDPR (legitimate interest in communication), depending on the content.
Storage period: until the enquiry has been finally processed and beyond only to the extent that statutory retention obligations exist.

5. Cookies & Consent management

Our website uses cookies and similar technologies. Technically necessary cookies are required for the operation of the website and cannot be deactivated. All other cookies (e.g. statistics or marketing cookies) are only set if you have previously given your explicit consent.

Legal bases:
Technically necessary cookies: Art. 6(1)(f) GDPR (legitimate interest) in conjunction with § 165(3) TKG (AT).
Statistics/Marketing: Art. 6(1)(a) GDPR (consent) in conjunction with § 165(3) TKG (AT).

Withdraw/change consent: You can change or withdraw your consent at any time via the cookie settings: Open cookie settings.

6. Web analytics with Matomo

If you have consented, we use Matomo to analyse the use of our website. Matomo may use cookies to record usage.

Configuration (recommended): IP anonymisation active, respects "Do Not Track" (optional), no sharing with third parties, storage on servers in the EU.
Purpose: Reach measurement and improvement of our web offering.
Legal basis: Art. 6(1)(a) GDPR (consent).
Storage period: e.g. 12–24 months (aggregated/statistical data possibly longer).

If Matomo is operated without cookies and with fully anonymised data, Art. 6(1)(f) GDPR may also be considered – however, this is a matter of detail regarding the specific implementation.

7. Marketing / Tracking (e.g. Meta Pixel)

If you have consented, we may use marketing and tracking technologies to measure the effectiveness of advertising measures and to display targeted advertising.

Meta Pixel (Facebook/Instagram)

When activated, the Meta Pixel (Meta Platforms Ireland Ltd.) enables the evaluation of your usage behaviour (e.g. page views, interactions) and may involve transmission to Meta servers (possibly also to third countries).

Purpose: Conversion measurement, audience building, optimisation of advertising campaigns.
Legal basis: Art. 6(1)(a) GDPR (consent).
Third-country transfer: Cannot be excluded. There are risks (e.g. access by authorities) about which we inform you in the consent banner.

8. External content (e.g. YouTube, Google Maps)

Our website may embed content from third-party providers. When such content is loaded, your IP address may be transmitted to the respective provider. We load external content – where possible – only after your consent (e.g. via a "2-click solution" or consent tool).

YouTube

We may embed videos via YouTube (Google Ireland Limited). When playing, data may be transmitted to Google. It is recommended to embed in enhanced privacy mode (youtube-nocookie.com) and to load only after consent.

Legal basis: Art. 6(1)(a) GDPR (consent).
Third-country transfer: possible.

Google Maps

We may embed maps via Google Maps (Google Ireland Limited). When loading, personal data (e.g. IP address) may be transmitted to Google. The map should – if used – only be loaded after consent.

Legal basis: Art. 6(1)(a) GDPR (consent).
Third-country transfer: possible.

9. Google Fonts

We use fonts for uniform display. Recommendation: Embed Google Fonts locally so that no connection to Google servers is established.

Local embedding: With local embedding, no personal data is transmitted to Google.
If external embedding: Only after consent (Art. 6(1)(a) GDPR) and with reference to possible third-country transfer.

10. SSL/TLS encryption

This website uses SSL/TLS encryption for security reasons. You can recognise this by https:// and the padlock symbol in your browser.

11. Your rights

You generally have the rights of access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction (Art. 18 GDPR), data portability (Art. 20 GDPR), withdrawal of given consent (Art. 7(3) GDPR) and objection (Art. 21 GDPR).

Withdrawal: You may withdraw a given consent at any time with effect for the future (e.g. via the cookie settings).

12. Right to lodge a complaint

If you are of the opinion that the processing of your data violates data protection law, you can lodge a complaint with the supervisory authority. In Austria, this is the Data Protection Authority (Datenschutzbehörde).

13. Version / Updates

We adapt this privacy policy as necessary, e.g. in the event of technical changes or new legal situations.
As of: January 2026

Important: In order for this text to remain "legally sound", the tools actually used (consent tool, Matomo setup, Meta Pixel/YouTube/Maps if applicable) must be configured exactly as described here (e.g. opt-in before loading, IP anonymisation, local fonts).