Skip to content

Privacy Policy

Last updated: November 8, 2026

Controller

The controller responsible for the processing of your personal data within the meaning of the General Data Protection Regulation (GDPR) is:

SNB IT Security GmbH
represented by its Managing Director Ing. Egon Barfuß
Haiderstrasse 23
4052 Ansfelden
Austria

E-mail: [email protected]

Statement on the Duty to Inform

In the following privacy policy, we inform you about the most important aspects of data processing in connection with our website. We collect and process personal data only on the basis of the statutory provisions (General Data Protection Regulation, Austrian Data Protection Act, Austrian Telecommunications Act 2021).

As soon as you access or visit our website as a user, your IP address as well as the start and end of the session are recorded. This is technically necessary and therefore constitutes a legitimate interest within the meaning of Art. 6(1)(f) GDPR.

Fonts, icons and graphics are delivered from our own server. No content from third-party providers (e.g. Google Fonts or content delivery networks) is loaded.

Contacting Us

If you contact us, either via the contact form on our website or by e-mail, the data you transmit to us will be stored for six months for the purpose of processing your enquiry or in the event of follow-up questions. Your transmitted data will not be passed on without your consent.

Via the contact form, we process your name, your e-mail address, optionally your company and the selected areas of interest, your message, and the time at which you consented to this privacy policy. The enquiry is stored in our database and forwarded to our team by e-mail. After the six months have elapsed, it is automatically deleted from the database.

Newsletter

To send our newsletter, we use the open-source solution Listmonk, which we operate ourselves on our own infrastructure in Austria/the EU. There is no transfer to third-party providers such as Mailchimp, Brevo or comparable US services.

If you subscribe to our newsletter – via the sign-up form or via the corresponding option in the contact form – we process the following data:

  • E-mail address (mandatory — for delivering the newsletter)
  • Name (optional — for personal salutation)
  • Time of sign-up and confirmation as well as the IP address used in the process (to provide proof of the consent given)

Sign-up takes place using the so-called double opt-in procedure: after you enter your e-mail address, we send you a confirmation e-mail with an activation link. Only after clicking this link are you actually subscribed. This ensures that third-party e-mail addresses cannot be registered improperly.

The legal basis for the processing is your consent pursuant to Art. 6(1)(a) GDPR. You can withdraw this consent at any time with effect for the future by clicking the unsubscribe link in any newsletter e-mail or by writing to us informally at [email protected]. The lawfulness of the processing carried out until withdrawal remains unaffected.

Your data will be stored until you withdraw your consent. After you unsubscribe, your data in Listmonk is set to the status “blocklisted” to prevent an accidental re-subscription. Complete deletion can be carried out at any time upon request.

Performance measurement of the newsletter (e.g. tracking of opens or clicks) is currently not carried out.

Web Analytics

To evaluate the use of our website, we use the open-source solution Umami, which we operate ourselves on our own infrastructure in Austria/the EU. There is no transfer to third-party providers such as Google Analytics, Matomo Cloud or comparable services.

Umami works without cookies and collects no personal data. To recognise returning visitors within a single day, an anonymised hash is generated from the IP address, browser identifier and a daily rotating salt value. This hash cannot be traced back to the original IP address and can no longer be reproduced after 24 hours. If “Do Not Track” is enabled in your browser, no data is collected.

Only aggregated, non-personal data is collected:

  • pages visited (URL without query parameters)
  • referring website (referrer)
  • screen resolution and browser/operating system type
  • approximate geographic region (country, possibly federal state — derived from the IP address; the IP itself is NOT stored)
  • date and time of the visit

The legal basis is our legitimate interest pursuant to Art. 6(1)(f) GDPR in evaluating and improving our website. As no personal data is processed, no consent is required — consequently, there is no cookie/tracking banner.

The aggregated statistical data is retained for 24 months and then deleted.

Cookies

This website sets no cookies for visitors and does not store any information on your device.

Only in the password-protected editorial area, which is reserved for our employees, is a technically necessary session cookie set after login. It serves solely for authentication and becomes invalid upon logout or after seven days at the latest.

Data Transfers to Third Countries

Currently, no personal data is transferred to countries outside the European Economic Area (EEA). All services we use (own mail server, own web infrastructure, hosting with vetted providers in the EU) process your data within the EU/EEA.

Should this change in the future due to the use of new services, a transfer to third countries will only take place if an adequate level of data protection is ensured pursuant to Art. 45 GDPR (e.g. via the EU-US Data Privacy Framework for certified US recipients) or appropriate safeguards pursuant to Art. 46 GDPR are in place — in particular the EU Standard Contractual Clauses (SCCs). We will update this privacy policy accordingly as soon as the scope of processing changes.

Further information from the European Commission on the EU-US Data Privacy Framework: commission.europa.eu/…/eu-us-data-transfers

Server Log Files

This website and the associated provider automatically collect information in so-called “server log files” in the course of website use. This applies in particular to:

  • IP address or hostname
  • the browser used
  • duration of stay on the website as well as date and time
  • pages of the website visited
  • language settings and operating system
  • “leaving page” (the URL at which the user left the website)
  • ISP (Internet Service Provider)

This collected information is not processed in a personally identifiable manner or linked to personal data.

The website operator reserves the right to evaluate or review this data should unlawful activities become known.

Your Rights as a Data Subject

As a data subject, you generally have the following rights with regard to your data stored by us:

  • Access
  • Erasure of data
  • Rectification of data
  • Data portability
  • Withdrawal of consent and objection to data processing
  • Restriction

If you suspect that violations of data protection law have occurred in the course of processing your data, you have the option of lodging a complaint with us ([email protected]) or with the Austrian Data Protection Authority (www.dsb.gv.at).