Privacy Policy

Protecting your personal data is important to us. This Privacy Policy explains which personal data is processed when you visit glogar.co.at, the purposes for which it is processed, and the rights available to you.

1. Controller

2. General Information on Data Processing

We process personal data only to the extent necessary to operate this website, handle enquiries, take steps prior to entering into a contract, fulfil contractual obligations, or pursue legitimate interests. Where processing is based on your consent, you may withdraw that consent at any time with effect for the future.

The applicable legal bases include, in particular, Article 6(1)(a) GDPR (consent), Article 6(1)(b) GDPR (contract and pre-contractual measures), Article 6(1)(c) GDPR (legal obligation), and Article 6(1)(f) GDPR (legitimate interests).

3. Hosting and Server Log Files

When you access the website, the web server may process the following data in particular:

• the page or file accessed,
• the date and time of access,
• the volume of data transferred and access status,
• the browser, browser version, and operating system,
• the previously visited page, where transmitted by the browser,
• the IP address and hostname of the accessing device.

This processing serves to provide the website securely, reliably, and without errors, and to prevent and investigate improper access. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest lies in the secure operation of our online services. Server log files are generally stored for up to 14 days unless a longer retention period is necessary to investigate a specific security incident.

4. Contact Form and Contacting Us

If you contact us using a form, by telephone, or by email, we process the contact details you provide and the content of your message in order to handle your enquiry and answer follow-up questions. Required fields are identified as such. Without this information, we may be unable to process the relevant enquiry.

If your enquiry relates to a contract or pre-contractual measures, processing is carried out in accordance with Article 6(1)(b) GDPR. In other cases, it is based on our legitimate interest in reliable communication pursuant to Article 6(1)(f) GDPR or on your consent pursuant to Article 6(1)(a) GDPR.

We store the information only for as long as necessary to handle your enquiry. Statutory retention obligations and the establishment, exercise, or defence of legal claims remain unaffected.

5. Job Applications

If you apply for a position with us, we process the application and contact data you submit in order to conduct the application process. This may include, in particular, your name, contact details, curriculum vitae, evidence of qualifications, employment history, and any other information you provide.

The legal basis is Article 6(1)(b) GDPR. Any further storage, such as inclusion in an applicant pool, takes place only with your consent. Application data is deleted once it is no longer required for the application process and there are no statutory obligations or legitimate interests that require its continued storage for a limited period.

6. Cookies and Consent Management

Cookies are small text files stored on your device. Strictly necessary cookies enable the website's basic functions. Analytics and marketing cookies are used only if you have given your prior consent. The legal basis for storing or accessing non-essential information on your device is your consent pursuant to Section 165(3) of the Austrian Telecommunications Act 2021 (TKG 2021); the subsequent processing of personal data is based on Article 6(1)(a) GDPR.

We use Moove's WordPress plugin “GDPR Cookie Compliance” to manage your cookie choices. Your selection is stored in the moove_gdpr_popup cookie. This cookie is strictly necessary and has a storage period of up to 365 days. You may change or withdraw your selection at any time through the website's cookie settings.

Depending on your browser, consent choices, Google configuration, and the subpage accessed, additional cookies or comparable storage technologies may be used. The current information displayed in the website's cookie settings is authoritative.

7. Google Analytics 4

If you have given your consent, we use Google Analytics 4, a web analytics service provided by Google Ireland Limited. Google Analytics helps us understand how visitors use our website. In particular, information about pages accessed, session duration, approximate location, device, browser, operating system, interactions, and a truncated or otherwise protected IP address may be processed.

Google Analytics uses identifiers and cookies to distinguish between visits and sessions. We receive statistical analyses and use them to improve our content and website functions. The legal basis is your consent pursuant to Article 6(1)(a) GDPR. Google Analytics is not activated without your consent.

Processing by Google LLC in the United States cannot be ruled out. Google uses applicable safeguards for international data transfers for this purpose. We store analytics information only for as long as necessary for the stated purposes and as provided for in our analytics configuration.

8. Google Ads and Conversion Measurement

If you have given your consent, we use Google Ads, including conversion measurement. This allows us to determine whether a visit or a particular action on our website is connected with an advertisement placed by us. The data processed may include, in particular, ad and click information, cookie or device identifiers, technical browser and device data, IP address, time of access, and actions performed on the website.

This processing is used to measure and optimise our advertising activities. The legal basis is your consent pursuant to Article 6(1)(a) GDPR. Processing by Google LLC in the United States cannot be ruled out. You may withdraw your consent at any time through the cookie settings.

9. LinkedIn Content and Tagembed

Content from our LinkedIn presence may be displayed or linked on our website. Tagembed may be used for the technical integration of this content. When embedded content is loaded, technical access data such as your IP address, browser and device information, referrer, time of access, and information about your interaction with the embedded content may be transmitted to Tagembed and, where applicable, LinkedIn Ireland Unlimited Company.

If you are logged in to LinkedIn, LinkedIn may be able to associate your visit with your user account. LinkedIn may use cookies, pixels, or comparable technologies for functionality, reach measurement, and its own purposes. External LinkedIn content is therefore loaded only with your consent. The legal basis is Article 6(1)(a) GDPR. Processing by affiliated companies outside the European Economic Area cannot be ruled out.

10. Google Fonts

To ensure the consistent display of fonts, the website loads font files from Google's servers. When these files are retrieved, technically necessary connection data—particularly your IP address, browser information, and the page accessed—is transmitted to Google Ireland Limited. Processing by Google LLC in the United States cannot be ruled out.

Where fonts are loaded externally without prior consent, processing is based on Article 6(1)(f) GDPR. Our legitimate interest lies in the consistent and technically reliable presentation of the website. To avoid external connections, the fonts used may in future be hosted entirely locally on the web server.

11. VideoPress

Videos may be embedded on individual subpages using VideoPress, a service provided by Automattic. When the player is loaded, a connection is established to servers operated by Automattic or WordPress.com. In particular, your IP address, browser and device information, referrer, time of access, and information about video playback may be processed. Depending on the configuration, cookies or similar technologies may be used.

Externally embedded videos are loaded only with your consent. The legal basis is Article 6(1)(a) GDPR. Processing in countries outside the European Economic Area, particularly the United States, cannot be ruled out.

12. External Links

Our website may contain links to external websites. You leave our area of responsibility only when you click such a link. The relevant operator is responsible for data processing on the destination website. In principle, a simple external link does not transmit any data to the destination provider unless and until it is accessed.

13. Data Security

We use TLS encryption to protect data transmitted between your browser and our server. You can identify an encrypted connection by the “https://” prefix in your browser's address bar. We also take appropriate technical and organisational measures to protect personal data against loss, manipulation, and unauthorised access.

14. Recipients and Processors

We disclose personal data only where this is necessary to provide the website, handle your enquiry, perform a contract, comply with statutory obligations, or where you have given your consent. Recipients may include, in particular, hosting and IT service providers, form and email service providers, analytics and advertising service providers, and legal and tax advisers. Where service providers act as processors, they are contractually bound in accordance with Article 28 GDPR.

15. Storage Period

We store personal data only for as long as necessary for the relevant purpose. The data is then deleted or anonymised unless statutory retention obligations, ongoing proceedings, or legitimate interests require its continued storage for a limited period. The retention periods stated in the cookie overview or cookie settings apply to individual cookies.

16. Your Rights

Subject to the applicable statutory requirements, you have the following rights in particular:

• the right to information about the processing of your personal data,
• the right to rectification of inaccurate or incomplete data,
• the right to erasure of your data,
• the right to restriction of processing,
• the right to data portability,
• the right to object to processing based on legitimate interests,
• the right to withdraw consent with effect for the future.

To exercise your rights, you may contact us at office@glogar.com. To prevent unauthorised disclosure, we may require suitable proof of your identity.

17. Right to Lodge a Complaint

If you believe that the processing of your personal data violates data protection law, you may lodge a complaint with a data protection supervisory authority. In Austria, this is the Austrian Data Protection Authority, Barichgasse 40–42, 1030 Vienna.

18. Changes to This Privacy Policy

We update this Privacy Policy when our website, the services used, or legal requirements change. The version published on this website at the relevant time applies.