Privacy policy

Controller

MMMMag. DDDr. Karl Isak, management consultancy, Teichstraße 5, 9063 Karnburg, Austria. Email:

Visiting the website

When you visit the website, our hosting provider IPAX GmbH, Donaustraße 106, 3400 Klosterneuburg, Austria, processes technically necessary data in server log files in its data centres in Vienna: IP address, date and time, page requested, amount of data transferred, browser and operating system. This data is required to deliver the website and to keep it secure. The legal basis is our legitimate interest in secure and stable operation (Art. 6(1)(f) GDPR). Log files are deleted after 14 days at the latest, unless they are needed for longer to investigate a specific security incident. IPAX processes this data as a processor under Art. 28 GDPR.

Language setting

When you first open the main address, the server selects the language of the website based on your browser's language setting. This information is used only for that redirect and is not stored.

Cookies, analytics, fonts and images

We use no cookies and no analytics, advertising or social media tools. Fonts, images and all other files are loaded from our own server. No data is therefore transferred to third parties such as font or image providers when you visit the website.

Contact form and email

When you write to us via the contact form or by email, we process the data you provide (name, organisation, position, email address, phone number, preferred reply route and your enquiry) in order to answer your enquiry and, where applicable, to prepare an engagement. The legal basis is the performance of pre-contractual measures at your request (Art. 6(1)(b) GDPR). Information from the form is sent to us by email and is not stored in a database. If no engagement results, we delete your enquiry no later than six months after the last contact. If an engagement results, the statutory retention periods apply, in particular under Austrian commercial and tax law.

To protect against automated spam, when the form is submitted we store an encrypted, irreversible hash of your IP address for no more than 24 hours in order to limit the number of enquiries per sender. The legal basis is our legitimate interest in operation free from abuse (Art. 6(1)(f) GDPR). No cookies are set for this purpose.

Please do not send confidential details of a specific incident or any health data via the form. We discuss such matters in person.

Recipients and transfers

Apart from us, the only recipient of your data is our hosting and email provider IPAX GmbH, acting as processor. Data is not transferred to countries outside the European Union or the European Economic Area. No automated decision-making, including profiling, takes place.

Your rights

You have the right of access, rectification, erasure, restriction of processing and data portability, and the right to object to processing based on legitimate interests. Please contact . If you believe that the processing of your data infringes data protection law, you can lodge a complaint with the Austrian Data Protection Authority (Österreichische Datenschutzbehörde), Barichgasse 40 to 42, 1030 Vienna (www.dsb.gv.at).

Last updated

November 2026