This English version is a translation provided for your convenience. Only the German version is legally binding.Privacy PolicyProtecting your personal data is important to us. In this privacy policy, we explain which data we process when you visit our website www.unworkify.com, what we use it for, on what legal basis we do so, how long we keep it and what rights you have.We process your data on the basis of the General Data Protection Regulation (GDPR), the Austrian Data Protection Act (Datenschutzgesetz, DSG) and the Austrian Telecommunications Act 2021 (Telekommunikationsgesetz 2021, TKG 2021).1. ControllerThe controller responsible for data processing on this website is:Cedric Brandt e.U. (sole proprietorship, brand "unworkify")
Owner: Ing. Cedric Brandt
Sauerbruchstraße 54
4600 Wels
AustriaEmail: info@unworkify.com
Phone: +43 660 2929 300
VAT ID: ATU80650047Where this policy refers to "we" or "us", this means Cedric Brandt e.U.2. Contact for data protection mattersWe have not appointed a data protection officer, as we are not legally required to do so. For any questions about data protection and to exercise your rights, you can contact us directly at info@unworkify.com or at the postal address given above.3. Overview: which data we processIn principle, you can use our website without actively providing us with any information about yourself. For technical reasons, however, certain data is generated each time you access it (for example your IP address). Beyond that, we only process data if you provide it to us yourself (for example via the contact form) or if you have consented to the processing (for example for web analytics).We rely on the following legal bases under the GDPR:

Art. 6(1)(a) GDPR – your consent

Art. 6(1)(b) GDPR – performance of a contract or pre-contractual measures taken at your request

Art. 6(1)(c) GDPR – compliance with a legal obligation

Art. 6(1)(f) GDPR – our legitimate interests, provided your interests do not override them

In addition, Section 165(3) TKG 2021 applies to storing information on your device and reading that information (for example cookies): this is only permitted with your consent, unless it is strictly necessary to provide a service you have explicitly requested.4. Hosting and server log files4.1 Hosting with HetznerOur website runs on a dedicated server that we rent from the following provider:Hetzner Online GmbH
Industriestraße 25
91710 Gunzenhausen
GermanyThe server is located in a Hetzner data centre in Falkenstein (Germany), i.e. within the European Union. Hetzner provides us with the infrastructure and processes the data exclusively on our behalf as a processor pursuant to Art. 28 GDPR.4.2 Server log filesEach time our website is accessed, our server automatically processes information transmitted by your browser and stores it in log files. This includes:

your IP address

the date and time of access

the requested page or file and the type of request

the status code of the response (for example whether the page was delivered successfully)

the website from which you came to us (referrer)

the identifier of your browser and operating system (user agent)

Purpose: We need this data to deliver the website, to ensure its stable and secure operation, to find technical errors and to detect and fend off attacks or misuse.Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure and error-free operation of our website.Storage period: The log files are deleted as soon as they are no longer needed for these purposes. They are only kept longer if a specific security incident needs to be investigated, and only until that investigation has been completed.We do not combine this data with other data sources and do not use it to identify you personally.5. Protection against misuse (rate limiting)To protect our website, and the contact form in particular, against misuse, spam and overload attacks, our server counts how many requests come from an IP address within a short period of time. If a certain number is exceeded, further requests are temporarily rejected.This counting takes place exclusively in the server's memory. It is not stored permanently and is automatically discarded when the respective time window expires.Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest lies in the security and availability of our website.6. SSL/TLS encryptionFor security reasons, our website uses SSL/TLS encryption. You can recognise this by the fact that your browser's address bar begins with "https://" and a padlock icon is displayed. When encryption is active, the data you transmit to us (for example via the contact form) cannot be read by third parties in transit.7. Cookies and storage on your deviceCookies are small text files that your browser stores on your device. Your browser's so-called local storage works in a similar way. We use such technologies sparingly and distinguish between two groups:Strictly necessary or functional storage – this does not require consent (Section 165(3) TKG 2021):

Name / type

Provider

Purpose

Storage period

Consent cookie or local storage entry from consentmanager

consentmanager (see section 8)

stores your choice in the cookie banner so that we can respect it

until the end of the period set by consentmanager, unless you delete it earlier

theme (local storage)

ourselves

remembers whether you have chosen the light or dark display

until you clear your browser storage

The theme entry only contains the chosen display mode (light or dark). It contains no personal data and is not transmitted to us or to third parties.Analytics cookies – we only set these with your consent (Section 165(3) TKG 2021, Art. 6(1)(a) GDPR):

Name

Provider

Purpose

Storage period

_ga

Google (see section 9)

distinguishing visitors by means of a randomly generated identifier

2 years

_ga_DB5Z97WNJH

Google (see section 9)

storing the session state for Google Analytics 4

2 years

You can also delete or block cookies at any time in your browser settings. If you block strictly necessary storage, some features of the website may not work as intended (for example, the cookie banner will be shown again on every visit).8. Consent management with consentmanagerSo that you can decide for yourself which non-essential services are activated on our website, we use the consent management platform "consentmanager" from the following provider:consentmanager AB
Håltegelvägen 1b
72348 Västerås
SwedenWhen you access our website, a script is loaded from consentmanager's servers. In the process, your IP address and technical information about your browser are transmitted to consentmanager. The tool displays the cookie banner, blocks non-essential services until you have given your consent, and stores your choice (consents given or refused, time, version of the banner) in a cookie or in your browser's local storage.Purpose: Obtaining, managing and documenting your consents.Legal basis: Art. 6(1)(c) GDPR in conjunction with Art. 7(1) GDPR (obligation to be able to demonstrate that consent has been given) and Art. 6(1)(f) GDPR (legitimate interest in lawful and user-friendly consent management). Storing your choice on your device is strictly necessary within the meaning of Section 165(3) TKG 2021.consentmanager processes the data as our processor pursuant to Art. 28 GDPR.Storage period: The consent cookie or entry remains stored on your device until the end of the period set by consentmanager, unless you delete it earlier. You will then be asked for your choice again. Records of consents are stored by consentmanager for as long as is necessary to demonstrate the consent.Changing your settings and withdrawing consent: You can change or withdraw your choice at any time with effect for the future. To do so, click on "Cookie settings" in the footer of any page.9. Web analytics with Google Analytics 4If you have given your consent in the cookie banner, we use the web analytics service Google Analytics 4. The provider is:Google Ireland Limited
Gordon House, Barrow Street
Dublin 4
IrelandPurpose: Google Analytics helps us understand how our website is used – for example which pages are visited, how visitors find us and where problems occur. On this basis, we improve our services and our content. We do not use Google Analytics for advertising, remarketing or personalised ads.Data processed: In particular, the following data is processed:

a randomly generated, pseudonymous identifier (client ID) stored in a cookie

pages visited, date and time, and duration of the visit

the website through which you came to us (referrer)

interactions on the website (for example scrolling or clicks on external links)

technical information about your device, browser, operating system and screen resolution

your approximate location (country, region, city), derived from your IP address

According to Google, IP addresses are neither logged nor stored in Google Analytics 4; they are only used briefly to determine the approximate location and are then discarded. We cannot attribute the collected data to you as a person and do not combine it with other data about you.Google Consent Mode: We use Google's Consent Mode. By default, analytics and advertising storage are set to "denied". Analytics cookies are only set and analytics data is only collected once you have given your consent in the cookie banner.Legal basis: Your consent pursuant to Art. 6(1)(a) GDPR and Section 165(3) TKG 2021. You can withdraw your consent at any time with effect for the future (see section 8). The withdrawal does not affect the lawfulness of processing carried out before the withdrawal.Data processing on our behalf: Google processes the data as our processor pursuant to Art. 28 GDPR.Transfer to the USA: It cannot be ruled out that data is transferred to Google LLC in the USA. Google LLC is certified under the EU-US Data Privacy Framework. By its decision of 10 July 2023, the European Commission determined that certified companies provide an adequate level of data protection (Art. 45 GDPR). In addition, Google has incorporated the European Commission's standard contractual clauses (Art. 46(2)(c) GDPR) into its terms.Storage period: The _ga and _ga_DB5Z97WNJH cookies are automatically deleted after 2 years, unless you delete them earlier. The analytics data stored by Google and linked to the client ID is automatically deleted at the end of the retention period set in Google Analytics.Further information can be found in Google's privacy policy at https://policies.google.com/privacy and at https://business.safety.google/privacy/.10. FontsAll fonts used on our website ("Inter" and "Barlow Condensed") are stored locally on our own server. No connection to third-party servers is made when the fonts are loaded; in particular, no data is transmitted to Google.11. Contact form and requests for an initial consultationIf you send us an enquiry via the contact form on our website (www.unworkify.com/en/contact/), we process the information you provide there:

mandatory information: name and email address

optional information: company name, phone number, company size, services you are interested in, other services, preferred method of contact and your message

the time of submission

We need the mandatory information to process your enquiry and to reply to you. All other information is optional and helps us to better assess your enquiry.Request for an initial consultation: Via the forms at www.unworkify.com/en/consultation/ and www.unworkify.com/en/opticians/consultation/, we process your name and your email address or phone number (one of the two is mandatory), optionally the other one, your concern, the address of your website and a preferred appointment time. A selected appointment slot is shown to other visitors on the website as taken; only the time is visible, not who requested it. If you provide an email address, we will send you an automatic confirmation of receipt. The provisions of this section regarding process, purpose, legal basis, disclosure and storage period apply accordingly.Process: Your information is transmitted in encrypted form to our own server and stored there in a database. The server is located with our hosting provider Hetzner in Germany (see section 4). In addition, we receive a notification containing your enquiry by email. To send this email, we use an email provider that acts as our processor.Purpose: Processing and answering your enquiry and, where applicable, preparing a quote.Legal basis:

Art. 6(1)(b) GDPR if your enquiry is aimed at concluding a contract with us (pre-contractual measures),

Art. 6(1)(f) GDPR in all other cases. Our legitimate interest lies in answering enquiries addressed to us.

No separate consent is required to submit the form.Disclosure: We do not pass on your data from the contact form to third parties. The only exceptions are our processors named above (hosting, email delivery), who process your data exclusively in accordance with our instructions.Storage period: We delete your enquiry as soon as it has been dealt with conclusively and no further communication takes place. If it leads to an engagement, we keep the data for as long as necessary to perform the contract and, beyond that, for as long as statutory retention obligations require (in particular 7 years pursuant to Section 132 of the Austrian Federal Fiscal Code (Bundesabgabenordnung, BAO) for tax-relevant documents).12. Contact by email and phoneIf you contact us by email (for example via a link to info@unworkify.com) or by phone (for example via a call link on our website), we process the data you provide to us in doing so – such as your name, your email address or phone number and the content of your message or request.Purpose and legal basis: as for the contact form (section 11), i.e. Art. 6(1)(b) GDPR for enquiries aimed at a contract, otherwise Art. 6(1)(f) GDPR.Emails are received and stored via our email provider, which acts as our processor.Storage period: as for the contact form (section 11).Please note: unencrypted emails may, under certain circumstances, be read by third parties in transit. Please therefore do not send us particularly confidential information by unencrypted email.13. Contact via WhatsAppOn our website you will find a button that allows you to contact us via WhatsApp. This is a simple link (https://wa.me/436602929300). No WhatsApp program code is embedded on our website; therefore, no data is transmitted to WhatsApp merely by visiting our website.Only when you click the button are you redirected to WhatsApp or is the WhatsApp app opened. From that point on, WhatsApp's privacy terms apply. The provider of WhatsApp in the European Economic Area is WhatsApp Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland, a company of the Meta group. Data may also be transferred to the USA in this context.If you write to us via WhatsApp, we process your phone number, your WhatsApp profile name (and, where applicable, your profile picture) and the content of your messages in order to answer your enquiry. The legal basis is Art. 6(1)(b) GDPR for enquiries aimed at a contract, otherwise Art. 6(1)(f) GDPR. Using WhatsApp is voluntary – you can also reach us at any time by email, by phone or via the contact form.Storage period: We delete WhatsApp chats as soon as the enquiry has been dealt with conclusively and no further communication takes place. If it leads to an engagement, the provisions of section 11 apply.Further information can be found in WhatsApp's privacy policy at https://www.whatsapp.com/legal/privacy-policy-eea.14. Link to LinkedInIn the footer of our website you will find a link to our company profile on LinkedIn. This is a simple link, not an embedded plugin. Therefore, no data is transmitted to LinkedIn when you visit our website.Only when you click the link are you taken to LinkedIn. For users in the EU, the controller responsible for data processing on LinkedIn is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. LinkedIn's privacy policy applies: https://www.linkedin.com/legal/privacy-policy.15. Recipients of your dataWe only pass on your personal data if this is described in this policy, if you have consented or if we are legally obliged to do so. Recipients or categories of recipients are:

Hosting: Hetzner Online GmbH, Germany (processor)

Sending and receiving emails: our email provider (processor)

Consent management: consentmanager AB, Sweden (processor)

Web analytics (only with consent): Google Ireland Limited, Ireland (processor)

Authorities and courts, where we are legally obliged to disclose data

Tax advisers and accountants, if an enquiry leads to an engagement and the data is needed for accounting purposes

16. Transfers to countries outside the EUAs a rule, we process your data within the European Union. When Google Analytics is used (only with your consent), data may be transferred to Google LLC in the USA. Google LLC is certified under the EU-US Data Privacy Framework, for which the European Commission has determined an adequate level of data protection (Art. 45 GDPR). The same applies if you contact us via WhatsApp or LinkedIn; however, these transfers are not made by us but in the context of your use of these services.17. No automated decision-makingWe do not use automated decision-making, including profiling, within the meaning of Art. 22 GDPR.18. Obligation to provide your dataYou are under no legal or contractual obligation to provide us with personal data. However, without the technically necessary connection data (section 4), we cannot display the website to you. Without your name and email address, we cannot process an enquiry submitted via the contact form.19. Your rightsYou have the following rights with regard to the data we store about you:

Right of access (Art. 15 GDPR): You can request information as to whether and which data we process about you.

Right to rectification (Art. 16 GDPR): You can request the correction of inaccurate data or the completion of incomplete data.

Right to erasure (Art. 17 GDPR): You can request the erasure of your data, provided there is no legal obligation to retain it.

Right to restriction of processing (Art. 18 GDPR): Under certain conditions, you can request that we only process your data to a limited extent.

Right to data portability (Art. 20 GDPR): You can request that we hand over data you have provided to us in a structured, commonly used and machine-readable format, or transmit it to another controller.

Right to object (Art. 21 GDPR): If we process your data on the basis of our legitimate interest (Art. 6(1)(f) GDPR), you can object at any time on grounds relating to your particular situation. We will then no longer process your data unless we can demonstrate compelling legitimate grounds that override your interests, or the processing serves the establishment, exercise or defence of legal claims.

Withdrawal of consent (Art. 7(3) GDPR): You can withdraw any consent you have given at any time with effect for the future. This does not affect the lawfulness of the processing carried out up to that point. The easiest way to withdraw your cookie consent is via the cookie settings (see section 8).

To exercise your rights, an informal message to info@unworkify.com or to our postal address is sufficient. To ensure that we do not disclose data to unauthorised persons, we may ask you for proof of your identity in cases of doubt. We will respond to your request without undue delay and in any event within one month.20. Right to lodge a complaint with the Data Protection AuthorityIf you believe that the processing of your data infringes data protection law or that your data protection rights have otherwise been violated, you can lodge a complaint with the supervisory authority. In Austria, this is:Österreichische Datenschutzbehörde (Austrian Data Protection Authority)
Barichgasse 40–42
1030 Wien (Vienna)
Austria
Phone: +43 1 52 152-0
Email: dsb@dsb.gv.at
Website: https://www.dsb.gv.atWe would appreciate it if you contacted us with your concern first – a question can often be cleared up quickly.21. Changes to this privacy policyWe update this privacy policy when our website, the services we use or the legal requirements change. The current version published on this page applies in each case.Last updated: October 2026