Privacy policy.

This English text is a convenience translation. The legally binding version is the German Datenschutzerklärung; in case of discrepancies, the German version prevails.

This policy describes which personal data is processed when visiting systempilot.net, for what purpose, and what rights you have. The basis is the General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (DSG).

In brief: this website sets no cookies without your consent. Fonts are hosted on our own web space. Web analytics (Google Analytics) only runs if you agree in the cookie banner, and can be revoked at any time.

Controller

ProviDo e.U. (Systempilot)
Owner: Georg Felix Kogler
Wiener Straße 66/2/216
3400 Klosterneuburg, Austria

For all data protection matters you can reach us at privacy@systempilot.net. Further company details are in the legal notice.

Hosting and delivery via Cloudflare

This website is hosted via Cloudflare Pages and delivered via Cloudflare's content delivery network. The provider is Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA, represented in Europe by Cloudflare Germany GmbH, Munich.

When the website is accessed, Cloudflare processes technically necessary connection data, in particular:

• IP address of the accessing device
• Address (URL) of the accessed page and of the previously visited page (referrer)
• Browser type, browser version and operating system
• Date and time of access

This data is required for the delivery of the website, the defence against attacks (e.g. DDoS) and the stability of operation. The legal basis is our legitimate interest in the secure and performant operation of the website (Art. 6(1)(f) GDPR). Server log data is stored only as long as required for these purposes.

A data processing agreement exists with Cloudflare. Cloudflare operates a global network; processing in the USA is possible. Cloudflare is certified under the EU-US Data Privacy Framework, supplemented by the EU Commission's standard contractual clauses. Details: cloudflare.com/privacypolicy.

TLS encryption

All connections to this website are encrypted with TLS (https). Data you transmit to us, e.g. via the contact form, therefore cannot be read by third parties. You recognise the encryption by the lock symbol in your browser's address bar.

Fonts

The fonts used on this website are stored locally on our web space and loaded from there. No connection to servers of Google or other font providers is established when the page loads; no data is transferred to third parties.

Cookies and local storage

Without your consent, this website sets no cookies.

Two things are stored locally by your browser (localStorage), without this data being transferred to us or third parties:

• your decision in the cookie banner (entry "sp-consent-v1"), so we don't ask you again on every visit
• inputs in our calculators and tools (e.g. the working capital calculator), so your values are still there on your next visit

This local storage is required for the desired function (§ 165(3) TKG 2021). Google Analytics cookies are only set after your consent (see next section). You can change your decision at any time via the "Cookie settings" link in the footer.

Web analytics with Google Analytics 4

If you agree in the cookie banner, we use Google Analytics 4, a web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Without your consent, Google Analytics is not loaded; no connection to Google servers is then established.

Google Analytics helps us understand which content helps visitors and how the website is used. After consent, Google Analytics sets cookies (in particular "_ga" and "_ga_…", storage duration up to 14 months) and processes pseudonymised usage data such as pages accessed, time spent, approximate origin (based on the shortened IP address) and device and browser information. Google Analytics 4 does not store full IP addresses. We have limited the retention period of the analytics data at Google to 14 months.

The legal basis is your consent (Art. 6(1)(a) GDPR, § 165(3) TKG 2021). You can revoke it at any time with effect for the future via the "Cookie settings" link in the footer. A data processing agreement exists with Google. Transfer to the USA is possible; Google LLC is certified under the EU-US Data Privacy Framework, supplemented by standard contractual clauses. More: policies.google.com/privacy.

YouTube videos

In individual articles we embed videos from our YouTube channel. We use YouTube's extended data protection mode for this (embedding via youtube-nocookie.com). No connection to YouTube is established when the page loads. Only when you play a video does YouTube (Google Ireland Limited, Dublin) process your IP address and usage data and may set its own cookies.

Playing is your decision; the legal basis is the consent given by playing (Art. 6(1)(a) GDPR). Details in Google's privacy policy: policies.google.com/privacy.

Getting in touch

If you contact us via the contact form, by email or by phone, we process the data you provide (e.g. name, email address, company and the content of your message) exclusively to handle your enquiry and for follow-up questions.

The legal basis is the performance of pre-contractual measures or the fulfilment of a contract (Art. 6(1)(b) GDPR) or our legitimate interest in answering your enquiry (Art. 6(1)(f) GDPR). We store this data as long as required for processing or as long as statutory retention obligations exist. There is no transfer to third parties; for processing we use the service providers named in our sub-processor list (e.g. for email and CRM).

With unencrypted email communication we cannot guarantee the security of the transmission. When in doubt, don't send us confidential content unencrypted by email.

Links to external platforms

References to our profiles on YouTube and LinkedIn are pure links. No data is transferred to these platforms when visiting this website; only when you follow a link do the privacy terms of the respective platform apply.

Your rights

Under the GDPR and DSG you have in particular the following rights:

• Information about the data processed about you (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing based on legitimate interests (Art. 21 GDPR)
• Withdrawal of consent given, with effect for the future (Art. 7(3) GDPR)

For this, contact privacy@systempilot.net. If you believe that the processing of your data violates data protection law, you can complain to the Austrian Data Protection Authority: dsb.gv.at.

Currency of this policy

We adapt this privacy policy when the services used or the legal situation change. The version published here at the time applies.