Last updated: April 6, 2026
1. Scope
This website (the “Website”) provides general information about the expertise and professional background of the Controller. No products or services are offered, and no contracts are concluded via this Website.
No rights are granted to use or exploit the content without a prior written agreement; unauthorized use may result in liability for damages.
All content is provided “as is” without guarantees, and use is at your own risk. To the extent permitted by applicable law, the Controller excludes liability for damages arising from the use of this Website.
The Controller may modify, correct, or remove content at any time without notice and does not guarantee uninterrupted or error-free access.
Please refer to the Imprint for mandatory legal disclosures.
By accessing this Website, you agree to these Terms.
2. Controller (Art. 4(7) GDPR)
act42 gmbh
Sandbauernstrasse 31
4451 Garsten
Austria
office@act42.com
3. Hosting (Google Sites)
This Website is hosted on Google Sites, a service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google may act as a data processor (Art. 28 GDPR) or, in certain cases, as an independent controller for specific processing activities.
Where applicable, a Data Processing Agreement (DPA) has been concluded via Google Workspace / Google Cloud terms.
More information: https://policies.google.com/privacy
4. Nature of the Website
This Website provides static informational content:
No user accounts, login, or registration
No data input forms
Contact only via external email
No automated decision-making or profiling within the meaning of Art. 22 GDPR
5. Data Processing
5.1 Automatic Data Collection (Server Logs)
When accessing the Website, the following data may be processed automatically:
IP address
Date and time of access
Browser type and version
Operating system
Referrer URL
Purpose: Ensuring secure, stable, and efficient operation of the Website. Server logs are retained only as long as necessary for security and operational purposes.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in technical functionality and security)
5.2 Cookies
This Website does not actively use cookies for tracking or analytics purposes. However, Google infrastructure may set technically necessary cookies required for page delivery, security, and system stability.
No analytics or marketing cookies are intentionally used. If additional Google services are added in the future, prior consent (Art. 6(1)(a) GDPR) will be obtained where required.
5.3 Use of External Resources and Fonts
This Website aims to avoid loading external resources from third-party servers.
However, due to the use of Google Sites, certain resources (such as images, fonts, scripts, or APIs) may be loaded from Google servers.
These requests are necessary for the operation of the Website and are outside the direct control of the Controller. Such requests may involve the transmission of personal data (e.g., the visitor's IP address) to Google.
6. Contact via Email
If you contact the Controller via email, the following data may be processed:
Email address
Message content
Any voluntarily provided personal data
Purpose: Responding to your inquiry.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in communication)
Data will not be shared without your consent unless legally required.
Please note that email communication may have security vulnerabilities. If you require confidential communication, alternative methods should be used.
7. Data Transfers to Third Countries
Due to hosting by Google, personal data may be transferred to countries outside the European Economic Area (EEA), including the United States. Such transfers are safeguarded by:
EU Standard Contractual Clauses (Art. 46 GDPR)
Where applicable, data transfers may also rely on the EU-U.S. Data Privacy Framework (DPF), if certified by Google.
Additional technical and organizational measures implemented by Google
Recipients of personal data may include technical service providers, in particular Google LLC as the hosting provider.
8. Data Retention
Personal data is retained only as long as necessary:
Server log data: typically stored for a limited period (e.g., a few days to several weeks), depending on Google's infrastructure
Email communication: as required to process requests or comply with legal obligations
9. Your Rights under GDPR
You have the following rights:
Right of access (Art. 15 GDPR)
Right to rectification (Art. 16 GDPR)
Right to erasure (Art. 17 GDPR)
Right to restriction of processing (Art. 18 GDPR)
Right to data portability (Art. 20 GDPR)
Right to object (Art. 21 GDPR)
Where processing is based on consent, you have the right to withdraw your consent at any time with future effect.
You have the right to lodge a complaint with a supervisory authority, in particular in your Member State of residence, place of work, or place of the alleged infringement.
10. Supervisory Authority
Austrian Data Protection Authority (Datenschutzbehörde)
Barichgasse 40-42
1030 Vienna
Austria
https://www.dsb.gv.at
11. Security Measures
State-of-the-art technical and organizational measures are implemented to protect personal data (Art. 32 GDPR).
12. Liability
The content of this Website is provided for general informational purposes only. No guarantees are made regarding accuracy, completeness, or timeliness.
13. External Links
This Website may contain links to external websites. The Controller is not responsible for their content or data protection practices.
14. Changes
These Terms may be updated to reflect legal or technical changes.
15. Contact
For privacy-related inquiries, contact office@act42.com.