Privacy
Last updated: August 2026
This is a translation for convenience. In case of doubt, the German version applies.
Controller
AABTS GmbH, Bromberger Straße 54a, A-2822 Bad Erlach, Austria Email: info@aabts.group
A message to this address is enough for any question about how your data is handled.
Principles
Handling confidential information is central to what AABTS GmbH does. The same standard applies to personal data.
This is a static website. It sets no cookies, includes no analytics or tracking services, uses no social media plugins, carries out no audience measurement and loads no fonts or content from third-party servers at runtime. There is no profiling and no automated decision-making. No consent banner is therefore required.
Only data needed for the respective purpose is processed, and only for as long as that purpose or a statutory obligation requires.
Visiting the website
When you visit the site, technical data is transmitted to the hosting provider’s server and briefly held in log files:
- IP address of the requesting device
- date and time of access
- name and address of the page requested
- volume of data transferred and status message
- browser type, browser version and operating system
- where applicable, the previously visited page
The purpose is technical delivery of the page and protection against attacks and overload. The legal basis is the legitimate interest in secure and functioning operation under Art. 6(1)(f) GDPR.
This data is not combined with other sources, is not analysed to identify individuals and is deleted automatically after a short period.
Hosting
The website is operated by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. Cloudflare processes the access data above as a processor under a data processing agreement pursuant to Art. 28 GDPR.
Delivery runs over a global server network, which may involve processing outside the European Economic Area. Such transfers rely on standard contractual clauses under Art. 46(2)(c) GDPR.
Contact form
If you use the contact form, the details you provide are processed to deal with your enquiry. Name, email address and your message are collected; giving your company is optional.
The legal basis is Art. 6(1)(b) GDPR where the enquiry relates to entering into or performing a contract, otherwise Art. 6(1)(f) GDPR based on the legitimate interest in responding to enquiries.
Providing this data is neither required by law nor by contract. Without name, email address and message, however, an enquiry cannot be dealt with.
The data is deleted once your enquiry has been dealt with and no statutory retention periods apply. Where an enquiry leads to a business relationship, commercial and tax retention periods apply.
Please do not send confidential documents or third-party personal data through the form. Suitable channels for further exchange are agreed in advance.
Form processing
The contact form is operated technically by UXPLUS LTD (Forminit), 86-90 Paul Street, London EC2A 4NE, United Kingdom, as a processor under Art. 28 GDPR. Submissions are stored encrypted on servers in Ireland; all sub-processors are based in the European Union.
Transfers to the provider in the United Kingdom are covered by an adequacy decision of the European Commission under Art. 45 GDPR.
To block automated submissions the form contains a field that is invisible to you. If it is filled in, which only happens with automated access, the submission is discarded. No analysis of your behaviour takes place. The provider records technical context for each submission, such as country of origin, device type and browser, and includes it in the notification sent to us.
Contact by email
If you write to us by email, your details are processed to deal with your enquiry. Legal basis, necessity and deletion periods are as set out for the contact form.
Unencrypted email is not fully protected against access by third parties. For confidential material we will agree a secure channel on request.
Recipients
Your data is not passed to third parties, other than to processors required for technical operation and in cases where disclosure is required by law.
Information you provide in an enquiry is not passed to other market participants, advisors or interested parties. There is no market approach.
Security
Transmission is encrypted throughout using TLS. Access to incoming enquiries is limited to those involved in handling them.
Your rights
You have the following rights in relation to AABTS GmbH:
- Access to whether and which data about you is processed (Art. 15 GDPR)
- Rectification of inaccurate data and completion of incomplete data (Art. 16 GDPR)
- Erasure of your data, unless a retention obligation applies (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability in a commonly used format (Art. 20 GDPR)
- Objection to processing based on legitimate interests (Art. 21 GDPR)
An informal message to the address above is sufficient. Proof of identity may be required so that information is not disclosed to unauthorised parties.
You also have the right to lodge a complaint with a supervisory authority. The competent authority is the Austrian Data Protection Authority, Barichgasse 40–42, 1030 Vienna, dsb.gv.at.
Changes
This policy will be updated if processing changes, for instance when further services are added. The version published on this page applies.