Privacy Policy
Information on the processing of personal data on this website under the GDPR and applicable Austrian law.
Last updated: April 14, 2026
Controller
The controller responsible for data processing on this website is:
P2L2 GmbH
Softwarepark 35
4232 Hagenberg im Mühlkreis
Austria
Email: info@p2l2.com
Phone: +43 681 81541388
General Information
Legal Basis
We process personal data in particular on the basis of Art. 6(1)(a) GDPR (consent), Art. 6(1)(b) GDPR (contract or pre-contractual measures), and Art. 6(1)(f) GDPR (legitimate interests). For cookies and similar technologies, we also observe Section 165 of the Austrian Telecommunications Act 2021 (TKG 2021).
Recipients
We only transfer data to third parties where this is necessary for operating the website, required by law, based on your consent, or where we use processors. Such processors may in particular include hosting, mailing, and analytics providers.
Third Countries
With individual services, transfers of personal data to third countries, in particular the United States, cannot be ruled out. Where no adequacy decision applies, transfers take place on the basis of appropriate safeguards, in particular standard contractual clauses. Where providers are certified under the EU-U.S. Data Privacy Framework, transfers may also rely on that mechanism.
Storage Period
We only store personal data for as long as necessary for the relevant purposes, as long as statutory retention obligations apply, or where legitimate interests such as legal enforcement or IT security justify further storage.
Server Logs
When this website is accessed, our web server or hosting provider processes technically necessary connection data. This includes in particular IP address, date and time of access, requested URL, referrer URL, browser type, operating system, and similar technical information.
This processing is based on our legitimate interest in a secure, stable, and functional website operation pursuant to Art. 6(1)(f) GDPR. Log data is generally stored only for as long as necessary for secure operation, error analysis, and the prevention of misuse.
Contact Form & Enquiries
If you contact us via contact form, email, or telephone, we process the data you provide to us. This may include, in particular, your name, company, email address, telephone number, and message.
For the technical delivery of messages sent via the contact form, we use the service Web3Forms (web3forms.com) as a processor. The data you enter in the form is transmitted to Web3Forms' servers and forwarded from there to us by email. A transfer to third countries (in particular the USA) cannot be ruled out; it takes place on the basis of appropriate safeguards, in particular standard contractual clauses. According to Web3Forms, submissions are stored only temporarily (at most 30 days on the plan we use) for the purpose of delivery.
To protect the form against automated abuse (spam), we use hCaptcha, a service provided by Intuition Machines, Inc., USA. This may process technical information such as your IP address, browser and device information, and interaction behaviour in order to verify that the input comes from a human. The legal basis is our legitimate interest in preventing spam and abuse pursuant to Art. 6(1)(f) GDPR. Here too, a transfer to the USA cannot be ruled out.
Processing of your enquiry is carried out for handling it and taking pre-contractual steps pursuant to Art. 6(1)(b) GDPR and, additionally, on the basis of our legitimate interest in efficient communication pursuant to Art. 6(1)(f) GDPR. We store enquiries for as long as necessary for processing, any follow-up questions, and statutory documentation obligations.
Cookies, Consent and Marketing Tools
Consent banner (self-hosted): To obtain and manage your consent for optional services (in particular Google Analytics), we use our own consent banner hosted on our website. No personal data is transferred to third parties in the process: your choice is stored solely locally in your browser (in "localStorage") so that the website can respect your decision on future visits. Consent-based services are only loaded after you have agreed.
Google Analytics: We use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics helps us understand how our website is used. In particular, page views, interactions, technical device information, browser information, approximate location data, and pseudonymous identifiers may be processed. Google Analytics is only loaded after your consent; the legal basis is Art. 6(1)(a) GDPR and Section 165 TKG 2021. According to Google, IP addresses are not logged in Google Analytics 4 and, for EU traffic, IP lookups are performed on EU servers before the data is discarded. A transfer to the USA cannot be ruled out and takes place on the basis of appropriate safeguards. We do not enable any marketing-related function without your consent.
Withdrawal and Cookie Settings: You can withdraw a consent you have given at any time with effect for the future, or change your choice, via the "Cookie settings" link in the footer. You can also delete or block data stored in your browser. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
Your Rights
Within the scope of the applicable legal requirements, you have in particular the right of access, rectification, erasure, restriction of processing, data portability, and objection to the processing of your personal data.
Where processing is based on your consent, you may withdraw that consent at any time with future effect. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
If you believe that the processing of your data violates data protection law, you also have the right to lodge a complaint with the competent supervisory authority. In Austria, this is the Austrian Data Protection Authority (Österreichische Datenschutzbehörde), Barichgasse 40-42, 1030 Vienna, email: dsb@dsb.gv.at, website: dsb.gv.at.
P2L2 GmbH