Data protection

Thank you for you for your interest in our homepage and services

For us,

Thonhauser GmbH

data protection is a very important concern. We treat the data, which is entrusted to us, with stringent confidence and handle responsible with it. In compliance with the legal and contractual obligations, in particular based on the regulation of the valid data protection laws, we see that as our special duty as a web and internet service provider.

Therefore, we inform you, in accordance with the relevant data protection regulation, in particular the General Data Protection Regulation (GDPR) and the Data Protection Act 2018, on data processing its purpose and your rights.

Data processing on the homepage

takes place at the time of data collection by the responsible position and by the person responsible:

Thonhauser GmbH

Perlhofgasse 2/1, 2372 Giesshuebl

Collection and processing of personal data:

By visiting our web pages just for accommodation of information without further transmission of personal data, the personal data transmitted by your browser to our server will be collected for technical reasons. By viewing our website, following data will be collected to ensure stability and security (iSd Art 6 (1) lit f) 1st sentence GDPR), traceability and sustainable trouble shooting:

Visited web pages, date and time of access, amount of data sent in bytes, web page of incoming request (source / reference from which you came to the page), browser used including language and version, operating system used, IP address used.

Log files are created for this purpose. The data collected thereby serve for

  • the control to prevent and remedy illegal use of the website content
  • the improvement of the website and
  • statistical evaluations.

For statistical analysis of visits to the website, we use the free web analytics software Advanced Web Statistics. Information can be found at This software evaluates the log files that web servers create based on web page access. No cookies are used. The statistical analysis is done via the log files, which contain the IP addresses, date and time, browser type and version, operating system of the computer and the website of the incoming request. The log files are automatically deleted from the server after 10 days, the data is anonymized and saved on the server during the operation of the website in the form of anonymized web access statistics. In contrast to other statistical programs, the web analysis software Advanced Web Statistics does not use cookies or transmit data to a foreign server. The software is installed on our own and rented servers with location Austria and there is no transfer of data abroad. If the website is deleted from our servers, the anonymized data of the web analysis software will also be automatically deleted.


The operated or rented Web servers store log files, which document the access to the individual web pages with the date, time and IP address of the visitor. The log files are stored for 30 days and will then be deleted.


Cookies are small text files that are stored in the memory of your device with which you access the Internet, assigned to the browser you use. In order to make the use of our web pages more effective and user-friendly, cookies are stored on your device when you visit the web pages, which may also give us information (depending on the cookie). However, cookies can not run programs or transfer malicious software to your device.

Our web page uses:

Transient cookies; such are deleted automatically after closing the browser or by "logging out". These include - in particular - session cookies with which a so-called session ID is stored, by means of which various requests from your browser can be assigned to the common session. Because of this, your device / computer can be recognized when the web page is accessed again.

In order to determine how cookies are used, adjustments can be made in the respective browser settings. For example, you may decline to accept third-party cookies or all cookies. However, this can also be a functional impairment in the use of web pages.

Any additional personal information such as name, address, telephone number or e-mail address will not be recorded unless this information is provided voluntarily and actively at the designated place (e.g. as part of a newsletter registration, an information request via a contact form, by other specific form fields or login- or registration masks on the respective website, etc.). The personal data you provide will be processed solely for the purpose of treating your request or responding to your request. A transmission of these data to (not mentioned herein) third parties will not be done in principle.

Data retention, data access and data security:

Other persons or companies not expressly designated in this Privacy Policy will not be granted access to any information.

Our website is hosted by a specialized service company. Especially since we also rent servers at this service provider, the contractor has the option of accessing the aforementioned data to the technically necessary minimum. These are the following service providers:


FN 207077a; UID: ATU 51305902
Geschäftsführer Christian Schwarz
Hochstraße 32a, 2380 Perchtoldsdorf

T: +43 1 9076127

They are therefore aware of the personal data collected in the above-mentioned extent, but are not entitled to use the data for their own purposes or to pass it on to third parties.

The collected or disclosed personal data is protected against unauthorized access by encrypted transmission, access-protected storage that is not accessible to the outside and physical protection measures for the servers. The security measures are continuously revised in line with technological developments. Such measures include SSL encryption, regular software and hardware updates, permanent server monitoring and backup management by our service provider GmbH.  

Data which are stored on our web pages as a result of your visit - unless there is no specified time quoted in the other sections of this declaration - are stored by us and the service providers listed above for a maximum of 30 days and become automatic deleted.

Contact via email, letter, phone or fax:

When you contact us, the provided data (name, address, telephone number, email address and, if necessary, case-specific data) will be stored in order to answer questions, to process requests quickly and to be able to get in contact again. The data arising in this connection will be deleted, if a contract does not take place. Except legal retention, periods are provided. Then data processing is reduced to the legal minimum measure. In the case of a contract, the privacy policy in the contract for data processing is considerable.

Submitted data

  • as part of a newsletter registration or
  • with an information request via the contact form or
  • by other specific form fields or login- or registration forms on the respective website

will only be stored for as long as it is needed to fulfil the purpose of the survey. The data resulting in this context is deleted as soon as the storage is no longer required. If data processing continues, it is limited to the minimum necessary and storage is reduced to the minimum duration required. In the case of a contract, the privacy policy in the contract for data processing is considerable.

Social media plug-ins:

Our website connect to social networks using social media plug-ins. This plug-ins are initially deactivated when you visit our website and do not transmit any data to such services. Only when you activate a plug-in by clicking on the corresponding control symbol, personal data is transmitted to the selected service ("2-click solution"). The selected service then receives the information, that you have visited our website with your IP address. If you click on the plug-in while logged in to the relevant service, you can share the content of our pages on your profile. This allows the service to associate your visit to our website with your user account. We point out that we, as a page provider, are not aware of the content of the transmitted data or its use by the service.

By activating and using a social media plug-in you consent to the transfer of personal data to the selected service. For further information on the respective use of your personal data, please refer to the privacy policy of the selected service:

Use of Google Analytics:

Our website use Google Analytics, a web analytics service provided by Google Inc. Google Analytics uses cookies to provide this service. Cookies are small text files that are stored on your computer and allow the recognition of the device you are using. This allows an analysis of the use of website, which serves to improve their usability. A conclusion to your specific person is usually not possible.

The generated information (including your IP address) will be transmitted to a Google server. To protect your privacy, Google Analytics has been configured to ensure that your IP address is anonymized immediately after being transferred to Google and stored by Google only anonymously. This applies for member states of the European Union or other contracting states of the European Economic Area. Only in exceptional cases the full IP address will be sent to a Google server in the US and only then be shortened.

Google will use this information on our behalf to evaluate the use of our website and to compile reports on website activity. The IP address provided by Google Analytics as part of Google Analytics will not be merged with other Google data.

By using our website, you agree to the above-mentioned storage of cookies and processing of your personal data. You can prevent the storage of cookies through appropriate settings in your browser software. In this case, not all functions of website may be fully exploited. You can also prevent the use of Google Analytics by downloading and installing the browser plug-in available at For more information about Google Analytics and the associated processing of personal information, see

Logging of email traffic / webmail:

For the purpose of ensuring adequate information and system security as well as the detection and appropriate treatment of malicious software, our e-mail servers (also rented) generate log data about the processed e-mail traffic. When you send an e-mail from or to our servers, the following information is logged: E-mail and IP address and host name of the recipient, number of recipients, e-mail and IP address, and Host name of the sender, subject, date and time of receipt at the server, file name of any attachments, message size, risk classification regarding spam quality and delivery status. The checking of e-mails and the sorting out of spam or malware is carried out in a purely automated manner in the first step; Only in case of suspicion or doubt, individual e-mails - possibly in consultation with the recipient - are subjected to a closer examination by specially responsible persons.

Data security:

We take all necessary and reasonable technical and organizational security measures to protect your personal data from loss and misuse. Your data is stored in a secure, state-of-the-art operating environment. Access to our website is secured via HTTPS if your browser supports SSL. This means that communication between your device and our servers is encrypted. If you wish to contact us or our employees by e-mail, we point out that the confidentiality of the information provided is not guaranteed. The content of emails may be viewed by third parties due to their technical design, unless special technical security measures are taken. We therefore recommend, that confidential information shall be sent exclusively via the contact form or by other secure means.

Your rights:

According to Art. 13 (2) lit. b) GDPR, you are entitled to access, rectification or deletion of your personal data, limitation of processing, opposition to processing and data portability.

In addition, according to Art. 13 (2) lit d) GDPR, you have the right to complain to the Data Protection Authority about the processing of your personal data by us.

Depending on the nature and extent of your request, it may also be necessary for you to prove your identity in an appropriate manner to exercise your rights.

Information due to repeated requests for information is subject to charge under Art. 15 (3) GDPR. Reference is also made to the fact that the right to receive a copy in accordance with Article 15 (1) (b) GDPR is not to affect the rights and freedoms of other persons.

This Privacy Policy refers to the applicable legal situation. We expressly reserve the right to future changes or adaptations. Therefore, we encourage you to read this privacy policy periodically to stay informed about the use of personal information.