Privacy Policy

1Data Controller

Company

TOLINEX GmbH

Contact person

DI Marc-Philipp Liebenberger

Address

Hans-Brandstetter-Gasse 45/10
8010 Graz
Austria

Phone

+43 664 4642037

Email

office@tolinex.at

2Principles of Data Processing

We process personal data only within the scope permitted by law and to the extent necessary to provide our website and our services. We collect only the data necessary for the respective purpose (data minimisation) and do not store it for longer than necessary.

Depending on the purpose, the legal bases for processing are: performance of a contract or pre-contractual measures (Art. 6(1)(b) GDPR), compliance with a legal obligation (Art. 6(1)(c) GDPR), a legitimate interest (Art. 6(1)(f) GDPR), or your consent (Art. 6(1)(a) GDPR).

3Hosting

This website is operated on the servers of an external hosting provider. Each time the website is accessed, the hosting provider automatically collects and stores server log files (see Section 4). This processing is based on our legitimate interest in the secure and stable operation of the website (Art. 6(1)(f) GDPR).

Provider

World4You Internet Services GmbH
Hafenstraße 35, 4020 Linz, Austria
world4you.com

A data processing agreement pursuant to Art. 28 GDPR is in place between us and the hosting provider.

4Server Log Files

When you visit this website, the web server automatically collects the following information transmitted by your browser:

• IP address of the requesting device (in anonymised or full form)
• Date and time of access
• URL accessed and, where applicable, the previously visited page (referrer)
• Browser, operating system and device type used
• Amount of data transferred and HTTP status code

This data is processed exclusively to ensure technical operation, troubleshoot errors and defend against attacks. This data is not combined with other data sources. The legal basis is Art. 6(1)(f) GDPR (legitimate interest). Log files are deleted after 30 days at the latest.

5Contacting Us by Email and Contact Form

If you contact us by email, the data you provide (email address, name, message content and any other information provided voluntarily) is stored and used exclusively to process your enquiry.

The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures or performance of a contract) or, for general enquiries, Art. 6(1)(f) GDPR (legitimate interest). The data is deleted once the enquiry has been fully processed and no statutory retention obligations apply.

Contact form: If you use the contact form on this website, your name, email address and message are transmitted to us and delivered to us via the email service Amazon SES (Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855 Luxembourg). A data processing agreement pursuant to Art. 28 GDPR is in place with the provider. To protect against repeated automated requests, your IP address is stored briefly on the server, solely in the form of a hash value together with the time of the last request.

Spam protection with Google reCAPTCHA: To protect against spam and misuse, the contact form is secured with Google reCAPTCHA v3. The reCAPTCHA script is only loaded once you start using the form (e.g. by clicking into a field). In the process, data such as your IP address, browser and device information, time spent on the page and interactions on the page are transmitted to Google, which uses them to assess whether the request comes from a human. Google may set cookies or access information on your device for this purpose. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; a transfer to Google LLC in the USA, which is certified under the EU-U.S. Data Privacy Framework, is possible. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in protecting the contact form against misuse). Further information is available in Google's Privacy Policy and Google's Terms of Service.

6Web Analytics with Umami

This website uses the privacy-conscious analytics software Umami. Umami does not collect personal data, does not use cookies, and does not create user profiles. The metrics collected (e.g. page views, referrers, device category) are fully anonymised.

As Umami does not process personal data, no consent under Art. 6 GDPR is required for this service. All analytics data is stored exclusively on our own or contractually bound servers within the EU and is not shared with third parties.

7Cookies

This website itself does not currently use any cookies requiring consent. Technically necessary session cookies may be set by the web server; these do not contain personal data and are automatically deleted at the end of the session. When you use the contact form, Google reCAPTCHA may set its own cookies (see section 5).

8Your Rights as a Data Subject

Under the GDPR, you have the following rights, which you can assert at any time by contacting office@tolinex.at:

• Access (Art. 15 GDPR) – You may request information about the data we have stored about you.
• Rectification (Art. 16 GDPR) – You may request the correction of inaccurate or incomplete data.
• Erasure (Art. 17 GDPR) – Under certain conditions, you may request the deletion of your data.
• Restriction of processing (Art. 18 GDPR) – You may request that the processing of your data be restricted.
• Data portability (Art. 20 GDPR) – You may request that we provide your data to you in a structured, commonly used format.
• Objection (Art. 21 GDPR) – You may object to the processing of your data insofar as it is based on a legitimate interest.
• Withdrawal of consent (Art. 7(3) GDPR) – You may withdraw any consent given at any time with effect for the future.

9Right to Lodge a Complaint with the Supervisory Authority

If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with the competent data protection authority:

Authority

Austrian Data Protection Authority

Address

Barichgasse 40–42, 1030 Vienna, Austria

Website

www.dsb.gv.at

10Currency of this Policy

This privacy policy is dated September 2026. We reserve the right to amend it in the event of changes to the legal framework or the introduction of new features on this website. The current version is always available on this page.