Who we are.
The controller for personal data processed on this website within the meaning of the UK GDPR and the EU GDPR is:
If you have any questions about data protection or wish to exercise your rights, you can contact us informally at any time using the details above.
Legal bases.
We process personal data on the basis of the UK GDPR, the EU GDPR and the Austrian Data Protection Act. Depending on the processing activity, we rely on the following legal bases:
Personal data.
Personal data means any information relating to an identified or identifiable person – for example name, email address, telephone number or IP address. We only collect, use and share personal data where this is permitted by law or where you have given your consent.
Access data and server log files.
Our hosting provider automatically records data in server log files each time this website is accessed. This includes:
Purpose and legal basis: we use this data solely for the technical operation, security and optimisation of our website (legitimate interests). It is not combined with other data sources.
Retention: log files are usually deleted after 30 days unless a security incident requires longer retention.
Contact and callback requests.
If you contact us via the contact form, the callback form, by email or by phone, we process the details you provide – such as name, telephone number, email address, company or product link – in order to deal with your enquiry and any follow-up questions.
Legal basis: performance of a contract or pre-contractual steps (Art. 6(1)(b)), or our legitimate interest in responding to enquiries (Art. 6(1)(f)).
Retention: we keep this data until the purpose no longer applies, and beyond that only where statutory retention obligations exist (usually seven years for tax-relevant records).
Newsletter.
To send our newsletter we need a valid email address. Sign-up uses a double opt-in process: after registering you receive an email containing a confirmation link, and only once you confirm do we add you to the list. We also store your IP address and the time of sign-up as evidence, in case a third party registers an email address without authorisation.
Legal basis: consent (Art. 6(1)(a)). You can withdraw your consent at any time using the unsubscribe link in every newsletter or by emailing office@onfidence.at. Withdrawal does not affect the lawfulness of processing carried out beforehand.
Cookies.
Cookies are small text files stored on your device. Some are needed for the website to function and to remember your preferences; others allow us to analyse how the site is used.
Strictly necessary cookies
These cookies are required for the website to operate, for example to store your cookie preferences. They are set without consent on the basis of our legitimate interests.
Analytics and marketing cookies
These cookies help us understand how the website is used and enable relevant advertising. They are only set with your express consent and can be withdrawn at any time via the cookie settings link in the footer.
Google Analytics.
This website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. IP anonymisation is enabled: your IP address is truncated within the EU/EEA before transmission and is not combined with other Google data.
Legal basis: consent given via the cookie banner.
International transfers: any transfer to the USA takes place on the basis of the EU Standard Contractual Clauses, the UK International Data Transfer Addendum and the EU-US Data Privacy Framework.
Meta Pixel.
This website may use the Meta Pixel provided by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland, to measure the effectiveness of our advertising and show more relevant ads. Legal basis: consent. Without your consent the pixel is not loaded. Further information is available in Meta's privacy policy.
Hotjar.
To improve the user experience we may use Hotjar (Hotjar Ltd., Malta). Hotjar measures user behaviour in anonymised form – mouse movements, clicks and scroll depth – along with technical information such as browser and operating system. Legal basis: consent.
Third-party content and services.
We embed third-party content on this website, for example web fonts from Google Fonts. The relevant provider necessarily processes users' IP addresses, as the content could not otherwise be delivered to the browser. We aim to use only content whose providers use the IP address solely for delivery.
Processors and recipients.
We use carefully selected service providers to operate this website and deliver our services, for example for hosting, email delivery and analytics. Data processing agreements are in place with each of them. We do not pass your data to third parties for any other purpose unless required by law or you have expressly consented.
Your rights.
Under the UK GDPR and EU GDPR you have the following rights:
An informal message to office@onfidence.at is sufficient. Access is free of charge.
Right to complain.
If you believe that the processing of your data infringes data protection law, you can lodge a complaint with the supervisory authority in the UK or with the Austrian authority responsible for us:
Data security.
This website uses SSL/TLS encryption, indicated by the padlock symbol in your browser's address bar and the „https://" prefix. We also take technical and organisational measures to protect your data against loss, manipulation and unauthorised access.
Changes to this policy.
We update this privacy policy whenever our processing activities or the legal framework change. The version published on this page always applies. Last updated: July 2026.