Your data. Our responsibility.

Privacy Policy

INFUKS Digital – www.infuks.com

Last updated: 15 October 2026

1. General Information

Protecting your personal data is important to us. This Privacy Policy explains which personal data we process when you visit our website, contact us or use our online services, the purposes for which we process that data and the rights available to you.

Processing is carried out in accordance with the General Data Protection Regulation (GDPR), the Austrian Data Protection Act (Datenschutzgesetz, DSG) and the applicable provisions of the Austrian Telecommunications Act 2021 (Telekommunikationsgesetz 2021, TKG 2021).

This Privacy Policy applies to www.infuks.com, its language versions and the contact and inquiry forms provided through the website.

2. Data Controller

The controller responsible for processing personal data is:

INFUKS e.U. – INFUKS Digital
Michael-Gaismayr-Straße 29
6900 Bregenz
Austria

For questions about data protection or to exercise your rights, please contact datenschutz@infuks.com.

3. What Personal Data Do We Process?

Depending on how you use our website, we may process the following categories of data in particular:

• Technical access data, such as your IP address, the date and time of a page request, browser type, operating system and requested website content.
• Contact and communication data, such as your name, email address, telephone number and message content.
• Business-related data, such as company name, location, country and information about the project you are inquiring about.
• Information about IT services, areas of expertise and potential cooperation that you submit through our forms.
• Information about professional interests and qualifications if you use our career and development opportunities form.
• Information about your cookie and privacy preferences.

As a rule, we process only data that is necessary for the respective purpose or that you voluntarily provide to us.

4. Website Access and Server Log Data

When you visit our website, your browser transmits technical information required for website operation to the web servers we use.

This information may include:

• IP address
• Date and time of access
• Pages and files requested
• Browser type and version
• Operating system
• Referrer URL, if transmitted
• Technical status and error messages

We need this information to deliver the website, maintain system security, identify technical errors and prevent abusive access.

Legal basis: Article 6(1)(f) GDPR (our legitimate interest in providing a secure, functioning website).

Retention period: Server log data is retained only for as long as necessary for the purposes described above.

5. Hosting and Technical Provision

Our website is operated using services provided by Worldsoft AG.

Worldsoft AG
Churerstrasse 154
8808 Pfäffikon SZ
Switzerland

Worldsoft provides technical services that may include web hosting, website content management and features of the Worldsoft Business Suite.

In this context, personal data may be processed to the extent necessary to operate the website and the online features used.

According to the provider, its services use server locations in Switzerland, Germany and France. The specific processing locations relevant to INFUKS depend on the services subscribed to and their technical delivery.

Legal basis: Article 6(1)(f) GDPR for the secure provision of the website and Article 6(1)(b) GDPR where processing is necessary for pre-contractual or contractual services.

Where Worldsoft processes personal data on our behalf, such processing is governed by a data processing agreement under Article 28 GDPR.

The European Commission has adopted an adequacy decision for Switzerland under Article 45 GDPR.

Further information: https://worldsoft.info/datenschutz-provider

6. Contact and Project Inquiries

If you contact us by email or submit a contact form, we process the information you provide to handle your inquiry.

In particular, an IT or project inquiry may involve the following data:

• First name and last name
• Email address
• Telephone number, if provided
• Company name, if provided
• Selected areas of IT services
• Your message and project description

Our inquiry forms are available in German, English and Turkish.

We use this information solely in connection with your inquiry, for example to ask follow-up questions, prepare a consultation, explain our services or create a quotation.

Legal bases:

• Article 6(1)(b) GDPR where your inquiry concerns entering into a contract or taking steps before entering into a contract.
• Article 6(1)(f) GDPR for other business-related communications.

Our legitimate interest is the appropriate handling of inquiries and business correspondence.

Retention period: Inquiries are retained only as long as necessary to process them, conduct follow-up business communications, fulfil contractual purposes or comply with statutory retention obligations.

We do not use your information to send a general advertising newsletter solely because you have submitted a project inquiry.

7. Worldsoft Business Suite and Form Processing

We use features of the Worldsoft Business Suite (WBS) to provide and technically process our online forms.

When you submit a form, the information entered is transmitted to the relevant Worldsoft systems, where it is made available for further processing.

Processing may include:

• Receiving and storing form submissions
• Assigning submissions to the relevant inquiry
• Sending internal notifications about new submissions
• Processing by authorized staff
• Documenting business communications
• Processing technically necessary session information for form functionality

Where Worldsoft Business Suite processes personal data on behalf of INFUKS, this is governed by an agreement under Article 28 GDPR.

Legal bases: Article 6(1)(b) or Article 6(1)(f) GDPR, depending on the purpose of the inquiry.

Information is not automatically used for unrelated business processes or advertising without a corresponding purpose.

8. Partnership and Cooperation Inquiries

If you contact us about cooperating as an IT specialist partner, freelancer, specialized service provider or regional location partner, we process your information to assess a possible collaboration.

This may include:

• Name and contact details
• Company or self-employment details
• Place of residence or business location
• Preferred type of cooperation
• Areas of expertise and specializations
• Personal introduction and additional information

Legal basis: Article 6(1)(b) GDPR where steps are taken toward a possible contractual relationship, or Article 6(1)(f) GDPR for the handling of general cooperation inquiries.

We share information with potential project partners only where there is an appropriate legal basis and the disclosure is necessary for the respective purpose.

9. Career Inquiries and Expressions of Interest

Our website allows interested individuals to tell us about their professional skills and interest in possible future development opportunities at INFUKS Digital.

We may process the following information in particular:

• Name and contact details
• Place of residence and country
• Preferred location
• Preferred type of professional entry or role
• Professional experience, knowledge and interests
• Voluntary information provided in your message

A general expression of interest is not an application for a specifically advertised vacancy.

We use this information to handle your inquiry and, where applicable, to contact you about suitable future opportunities.

Legal basis: Depending on the specific inquiry, Article 6(1)(b) or Article 6(1)(f) GDPR. Longer-term inclusion in a list of interested candidates or talent pool requires a separately determined legal basis, potentially your consent under Article 6(1)(a) GDPR.

Please do not submit sensitive personal data through this form unless it has been expressly requested and is necessary.

10. Cookies and Similar Technologies

Our website uses cookies and similar technologies to provide technical functionality and, where enabled and permitted by you, additional services.

Cookies are small pieces of information that may be stored on or read from your device.

We distinguish between the following categories in particular:

Strictly necessary cookies

These support essential website functions, such as session management, security features, the use of forms and, where applicable, storage of your privacy preferences.

Analytics cookies

These may be used to evaluate page views and the use of our website so that we can improve it.

Marketing cookies

Where corresponding services are integrated, these may be used for personalization or advertising purposes.

Personalization cookies

These may store preferences such as display settings or other user choices.

We use cookies and similar technologies that are not strictly necessary, including the storage of or access to information on your device, only where the required consent has been given.

Legal framework and bases:

• Section 165(3) of the Austrian Telecommunications Act 2021 (TKG 2021) governs the storage of and access to information on a user's device.
• Article 6(1)(a) GDPR applies to subsequent processing of personal data where based on consent.
• Article 6(1)(f) or Article 6(1)(b) GDPR may apply to processing of technically necessary data where legally permissible.

You may withdraw your consent at any time with effect for the future or change your preferences.

You can do so via the “Cookie Settings” link in our website footer.

Further information about individual cookies, their purposes and retention periods is available through our cookie settings dialog.

11. Cookie Consent Management with CookieRobot

We currently use CookieRobot, a service associated with Worldsoft, to manage cookie preferences.

CookieRobot is used to provide choices regarding services requiring consent and to manage your privacy settings technically.

In this context, the following information may be processed in particular:

• Your selected cookie categories
• The status and time of your consent or refusal
• Technical data necessary to store your selection
• Other information technically required by the service

Legal basis: Article 6(1)(c) GDPR where processing is necessary to comply with legal documentation and information obligations, or Article 6(1)(f) GDPR for the technical provision of consent management.

Where storing or accessing information on your device is strictly necessary to manage your privacy preferences, the applicable statutory exemption for technically necessary operations may apply.

12. Google reCAPTCHA and Protection Against Abusive Form Submissions

We use Google reCAPTCHA to help protect our contact forms against automated submissions and misuse.

The provider is Google. Technical information may be processed and transmitted to Google when this service is used. Such information may include your IP address, browser and device information, the time of use and other data required to detect abuse.

Processing by Google, including transfers to countries outside the European Economic Area, cannot be ruled out.

Purpose: Protecting our forms against spam, automated access and misuse.

Legal basis: Article 6(1)(f) GDPR for necessary security processing and Article 6(1)(a) GDPR in conjunction with Section 165(3) TKG 2021 where consent is required. The applicable basis depends on the actual technical implementation and must be verified before publication.

For further information on Google's processing of personal data, visit:

https://policies.google.com/privacy

13. Website Analytics and Google Analytics

This section applies only if Google Analytics remains active on the published website.

Google Analytics 4 may be used to analyze how our website is used. This may involve processing information about page views, interactions, technical devices, browsers and approximate geographic locations.

Cookies or similar technologies may be used to recognize visits.

The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Purpose: Analyzing website use and improving our online offering.

Legal basis: Article 6(1)(a) GDPR and Section 165(3) TKG 2021, insofar as consent is required for the technologies used.

Such processing may take place only after the necessary consent has been given. You can withdraw your consent at any time through the cookie settings.

In connection with this processing, data may also be transferred to other Google entities or processors outside the European Economic Area. The applicable safeguards depend on the specific processing activities and the relevant international transfer mechanisms.

Further information:

https://policies.google.com/privacy

14. Recipients of Personal Data

We disclose personal data only where there is an appropriate legal basis.

Potential recipients include:

• Hosting and IT service providers
• Providers of website and form systems used by us
• Providers of technical security and cookie consent management services
• Other service providers commissioned by us where necessary to handle a specific matter
• Tax, legal or other professional advisers bound by confidentiality, where required
• Authorities and courts where required by law

Where service providers process personal data on our behalf, we conclude the data processing agreements required by law.

We do not sell the personal data of website visitors.

15. Transfers of Data to Third Countries

Use of external service providers may involve processing personal data outside the European Union or European Economic Area.

This may particularly concern providers in Switzerland and, where applicable, international providers.

The European Commission has adopted an adequacy decision for Switzerland.

For transfers to other third countries, we take into account the applicable requirements of Articles 44 et seq. GDPR. Depending on the recipient and the processing activity, relevant safeguards may include adequacy decisions or appropriate safeguards such as Standard Contractual Clauses.

You may request information about the safeguards applicable in each case by emailing datenschutz@infuks.com.

16. Retention Periods and Deletion

As a general rule, we store personal data only for as long as necessary to fulfil the purposes for which it is processed.

In doing so, we take into account in particular:

• The time needed to handle contact and project inquiries
• The duration of ongoing or prospective business relationships
• Statutory retention obligations
• Necessary documentation obligations
• Legitimate interests relating to establishing, exercising or defending legal claims
• Any consent given and subsequently withdrawn

Where statutory retention obligations apply, data will not be deleted until the applicable periods have expired.

When the purpose of processing no longer applies and there is no other legal basis for retention, personal data will be deleted or anonymized.

17. Your Rights as a Data Subject

Subject to the applicable legal requirements, you have the following rights in particular:

• Access to information about the processing of your personal data (Article 15 GDPR).
• Rectification of inaccurate or incomplete data (Article 16 GDPR).
• Erasure of your data (Article 17 GDPR).
• Restriction of processing (Article 18 GDPR).
• Data portability, where the legal requirements are met (Article 20 GDPR).
• Objection to certain processing activities, particularly where based on legitimate interests (Article 21 GDPR).
• Withdrawal of consent with effect for the future (Article 7(3) GDPR).

Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

To exercise your rights, please contact:

datenschutz@infuks.com

18. Right to Lodge a Complaint with a Supervisory Authority

If you believe that the processing of your personal data infringes data protection law, you may lodge a complaint with a competent data protection supervisory authority.

For our registered place of business in Austria, the competent authority is in particular:

Austrian Data Protection Authority (Österreichische Datenschutzbehörde)
Barichgasse 40–42
1030 Vienna
Austria

Email: dsb@dsb.gv.at
Website: https://www.dsb.gv.at

Your right to lodge a complaint with another supervisory authority competent under the GDPR remains unaffected.

19. Data Security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, manipulation and unauthorized disclosure.

Depending on the service concerned, these measures may include encrypted data transmission, access restrictions, authorization management and organizational security measures.

Our website uses HTTPS to encrypt data transmitted between your browser and the web server.

We regularly review our security measures and adapt them to technical and organizational requirements.

20. Automated Decision-Making

Based on our current understanding, the contact, project and expression-of-interest forms available on our anniversary website do not involve decision-making based solely on automated processing that produces legal or similarly significant effects within the meaning of Article 22 GDPR.

21. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy if legal requirements, technologies used or our data processing activities change.

The latest version is available at:

https://www.infuks.com/datenschutz

INFUKS Digital – Your IT. Our Responsibility.