Legal
Privacy information
The legally authoritative version of this privacy information is the German one.
This page explains which personal data is processed when you visit this website and when you use the written customer service. The German version is the authoritative one.
Amtwort is in formation. Ordering and payment are currently disabled. Final retention periods (in particular accounting periods) will be added once the company is registered.
Controller
The controller is the provider named in the Impressum (legal notice), which currently still contains placeholders.
No cookies, no tracking, no analytics
This website sets no cookies. There is no analytics, no advertising network, no social media plugin, no visitor counting and no profiling.
No third-party content is embedded (no videos, maps, font services or chat widgets). Webfonts are served from our own server, so your browser makes no request to a font provider.
Because no non-essential cookies or comparable access to your device are used, no cookie consent banner is required.
Strictly necessary browser storage
Language choice: if you actively switch the interface language, that choice is stored locally in your browser (localStorage entry “amtwort.lang.explicit” holding “de”, “hu” or “en”).
Purpose: to show the website in the language you selected. It is strictly necessary for the service you explicitly requested. It contains no identifier and no personal data, is never transmitted to third parties and never leaves your device.
Lifetime: until you clear your browser data. If you make no explicit choice, an approximate language is derived once from the country information of your connection, without storing anything.
Server logs and abuse protection
Our hosting infrastructure processes technically necessary connection data (such as IP address, time and requested resource) to deliver the site and keep it secure (Art. 6(1)(f) GDPR).
To protect the forms against automated mass submissions we count submissions per time window. No plain values are stored: characteristics such as IP address or e-mail address are turned into a non-reversible SHA-256 digest and only that digest is stored. These counters are short-lived and are removed automatically. No person is re-identified and no profile is built.
Inquiries, orders and documents
Data you enter in the contact or inquiry form (name, e-mail address, topic, your message, optionally an order reference and the selected language) is processed to answer your request (Art. 6(1)(b) or (f) GDPR).
Inquiries that never become an order are deleted once they are handled and no longer needed. Deletion is currently performed through regular manual review, so it is not automatic and not necessarily immediate.
Documents you upload are stored in a private, non-public storage area, scanned for malware, and are only accessible after a clean result. When a document is deleted, the file itself is irreversibly removed; only the record that a file existed and when it was deleted is kept.
Order, history and contract records (including the contract confirmation on a durable medium) are retained as long as necessary for performing the contract, for statutory retention obligations and for legal defence.
Recipients
Your data is never sold and never used for advertising. Processors are used only for technical operation: a hosting provider for the website, a database and storage provider for orders, inquiries and documents, and a privately operated malware-scanning service. Providers, locations and contractual bases will be named here once the company is registered.
Special categories and criminal-offence data
Our service normally does not require special categories of personal data (Art. 9 GDPR) such as health data, religious or political beliefs, trade-union membership, sex life or biometric data. Please send such details only where they are genuinely necessary for your matter, and redact what is not needed before uploading.
Where unavoidable special-category data concerns you yourself, we process it solely on the basis of your explicit consent (Art. 9(2)(a) GDPR). That consent is obtained separately at checkout, is voluntary and not pre-selected, is not part of accepting the terms or acknowledging this privacy information, and can be withdrawn at any time with effect for the future.
Data on criminal convictions and offences (Art. 10 GDPR) is treated separately and is not covered by that consent. We process it only where necessary and legally permitted for the specific order concerning your own matter. Please send such details only where they are indispensable.
Where details concern third parties (for example other people named in a letter), we limit ourselves to what is necessary to handle the letter.
Withdrawing from a contract
If you use our online withdrawal function we process your name, the order/contract reference you enter, your e-mail address for the confirmation, your optional details about the contract concerned, and the receipt time recorded on our server. The basis is compliance with our legal obligations (Art. 6(1)(c) GDPR) and evidence of the withdrawal.
A received withdrawal declaration is legally relevant evidence and is therefore not deleted together with customer-service correspondence; it is retained for the statutory retention and limitation periods.
Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability and objection; please write to the address in the Impressum.
We delete data on request unless a statutory retention obligation or an overriding interest (ongoing contract, accounting, legal defence) applies. In that case processing is restricted and deletion follows when the period ends. You may also lodge a complaint with the Austrian Data Protection Authority.
