Privacy Policy
1. Controller
NIROPLAN GmbH
Stoißmühle 2
A-3830 Waidhofen an der Thaya
Austria
Phone.: +43 (0) 664 38 39 765
E-Mail: info@niroplan.com
Responsible person: Mr. Ing. Christoph Odwody
2. General Information on Data Processing
We process personal data exclusively in accordance with the General Data Protection Regulation (GDPR), the Austrian Data Protection Act (DSG), and the Telecommunications Act 2021 (TKG 2021). Our website can generally be used without providing personal data. Personal data is only processed where legally permitted or with your consent.
3. Categories of Data Processed
We process, in particular, the following data:
Contact data (name, email address, message)
Technical data (IP address, browser type, operating system, access time, visited pages)
Form data collected via the Contao form generator
Server and system log files of the Contao CMS
4. Purposes and Legal Bases
Data processing is carried out for the following purposes:
Processing of inquiries (Art. 6(1)(b) GDPR)
Technical provision of the website (Art. 6(1)(f) GDPR)
Security and stability of the website (Art. 6(1)(f) GDPR)
Future use of Google Analytics based on your consent (Art. 6(1)(a) GDPR, § 165 TKG 2021)
5. Hosting by Hetzner
Our website is hosted by Hetzner Online GmbH in Germany. A data processing agreement in accordance with Art. 28 GDPR has been concluded. Data processing takes place exclusively in Germany. Hetzner stores server log files which may contain IP address, date and time of access, browser type, operating system and referrer URL. This storage is carried out for security purposes and for the analysis of errors.
6. Server Log Files
When visiting our website, technical data is automatically collected. This data is required for the operation of the website. The data is stored for a maximum of 14 days, unless a longer retention period is necessary for security reasons.
7. Cookies and similar technologies
Our website uses technically necessary cookies, in particular:
PHPSESSID (Contao session cookie)
Symfony session cookies
CSRF tokens.
These cookies are essential for the operation of the website and fall under § 165(3) TKG 2021.
Cookies requiring consent are only set after you have given your consent. This applies in particular to Google Analytics.
8. Google Analytics
We use Google Analytics 4 (GA4), a web analytics service provided by Google Ireland Limited ("Google").
GA4 enables the analysis of website usage based on event data and pseudonymized user behavior. Google uses cookies and similar technologies for this purpose.
The information generated by GA4 regarding your use of this website is usually transmitted to a Google server and stored there.
We use GA4 with IP anonymization activated, meaning your IP address is truncated within the EU or EEA. Personal identification is therefore not possible.
Google processes data on our behalf in accordance with Art. 28 GDPR. Data may be transferred to the USA. The USA does not have an adequacy decision by the EU. Google relies on Standard Contractual Clauses (Art. 46 GDPR) to ensure an adequate level of data protection.
Data processed by GA4:
Pseudonymized usage data (e.g. clicks, scroll depth, session duration)
Technical data (browser, device type, operating system)
Approximate location data (country, region)
Event data (e.g. page views, interactions)
Configuration:
We have configured GA4 to ensure that:
No user IDs are used
No precise location data is collected
No data is linked to Google accounts
Data retention is minimized
Processing takes place exclusively based on your consent (Art. 6(1)(a) GDPR and § 165 TKG 2021). You may withdraw your consent at any time with future effect via the cookie settings.
Further information:
https://policies.google.com/privacy
9. Contact
If you contact us via email or forms, your data will be processed to handle your inquiry. Legal basis: Art. 6(1)(b) or Art. 6(1)(f) GDPR
Data will be deleted after 6 months unless statutory retention obligations apply.
10. Google Fonts (locally hosted)
We use Google Fonts locally. No connection to Google servers is established.
11. Social Media Links
Our website contains only links to social media profiles. When clicking these links, you leave our website. No data transfer via plugins takes place.
12. Data Sharing
Data is only shared:
with processors (e.g. hosting providers)
where required by law
based on your consent
No data is transferred to third countries unless in connection with Google services and with your consent.
13. Image Rights
Some images and videos used on this website were generated or edited using AI tools (including Adobe Firefly / Adobe Express).
All AI-generated content is subject to the usage rights of the website operator. Adobe does not claim ownership of content created by NIROPLAN.
No personal or sensitive data was used in the creation of AI-generated content.
14. Data Retention
We only store personal data as long as necessary for the respective purpose. Statutory retention periods (e.g. 7 years under Austrian tax law) remain unaffected.
15. Rights of Data Subjects
You have the following rights:
Access (Art. 15 GDPR)
Rectification (Art. 16 GDPR)
Erasure (Art. 17 GDPR)
Restriction of processing (Art. 18 GDPR)
Data portability (Art. 20 GDPR)
Objection (Art. 21 GDPR)
Withdrawal of consent (Art. 7(3) GDPR)
Supervisory Authority in Austria:
Austrian Data Protection Authority
Barichgasse 40–42
1030 Vienna
Email: dsb@dsb.gv.at
16. Links to External Websites
Our website may contain links to external websites. We are not responsible for their content or data protection practices.
17. Changes to this Privacy Policy
We reserve the right to update this Privacy Policy as necessary. The current version is always available on our website.
Status: Januar 2026