Legal Information

Privacy Policy

Last updated: April 2026. This privacy policy explains the key aspects of how personal data is processed on our website.

Introduction and Data Controller

Introduction

The protection of your personal data is very important to us. We process your data exclusively on the basis of the applicable legal provisions, in particular the GDPR, the Austrian Data Protection Act and the Austrian Telecommunications Act 2021.

This privacy policy explains the nature, scope and purpose of the processing of personal data on our website and outlines your rights.

Data Controller

Company
Responsible Annotation Services GmbH
Address
Softwarepark 32a
4232 Hagenberg
Austria
Email
office@respas.at
Phone
+43 681 20596610

Legal Bases

  • Art. 6(1)(a) GDPR for consent
  • Art. 6(1)(b) GDPR for pre-contractual measures and enquiries
  • Art. 6(1)(c) GDPR for legal obligations
  • Art. 6(1)(f) GDPR for legitimate interests such as security and website operation

Your Rights at a Glance

You have, in particular, the right to access, rectification, erasure, restriction of processing, data portability, objection, and withdrawal of consent with effect for the future.

If you believe that the processing of your data violates data protection law, you may file a complaint with the Austrian Data Protection Authority.

Cookies and Consent Management

Consent Management

Our website uses a consent management solution to obtain, store and document your consent for non-essential cookies as well as analytics and marketing services.

The legal basis is Art. 6(1)(a) GDPR in conjunction with Section 165 of the Austrian Telecommunications Act 2021. You may change or withdraw your consent at any time with effect for the future.

Cookies and Similar Technologies

We use technically necessary cookies for the operation of the website. Analytics, statistics and marketing cookies, as well as similar technologies, are only used with your consent.

Which services are actually loaded depends on your selection in the cookie banner and the integrations that are actively configured on this website.

Analytics and Marketing Services

Google Tag Manager

We use Google Tag Manager to centrally manage and technically deploy website tags and external services.

Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland

Purpose: technical management and deployment of tags

Legal basis: Art. 6(1)(a) GDPR insofar as consent-based services are controlled via Tag Manager

Data transfer: possible transfer to the USA

Privacy information: policies.google.com/privacy

Google Analytics 4

With your consent, we use Google Analytics 4 to analyse how our website is used, to measure reach and to optimise our content.

Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland

Purpose: website analytics and reach measurement

Processed data: page views, interactions, device and browser data, approximate location data and online identifiers

Retention period: depends on the configured property settings

Legal basis: Art. 6(1)(a) GDPR

Data transfer: possible transfer to the USA

Privacy information: policies.google.com/privacy

Meta Pixel

With your consent, we use Meta Pixel to measure the effectiveness of our advertising activities on Facebook and Instagram and to build audiences for campaigns.

Provider: Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland

Purpose: conversion measurement, remarketing and campaign optimisation

Legal basis: Art. 6(1)(a) GDPR

Data transfer: possible transfer to the USA

Privacy information: facebook.com/privacy/policy

LinkedIn Insight Tag

With your consent, we use the LinkedIn Insight Tag to measure conversions, build audiences and analyse the performance of LinkedIn campaigns.

Provider: LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland

Purpose: campaign analytics, conversion measurement and remarketing

Legal basis: Art. 6(1)(a) GDPR

Data transfer: possible transfer outside the EEA

Privacy information: linkedin.com/legal/privacy-policy

Contact Form and Newsletter

Contact and Enquiry Form

If you contact us via a web form, we process the data you provide in order to handle your enquiry and any follow-up communication.

Tool: OpnForm / form processing via form.ecreation.at

Data collected: name, email address, phone number, company details, project information and message content, insofar as provided by you

Purpose: handling your enquiry and pre-contractual communication

Retention period: for as long as necessary to handle the enquiry or as required by statutory retention obligations

Legal basis: Art. 6(1)(b) GDPR and, where applicable, Art. 6(1)(f) GDPR

Newsletter via Brevo

If you subscribe to our newsletter, we use Brevo for this purpose. Subscription may be handled via a double opt-in procedure. You may withdraw your consent at any time.

Provider: Brevo SAS, 7 rue de Madrid, 75008 Paris, France

Data collected: email address, name, time of subscription and IP address for consent documentation

Purpose: sending the newsletter and, where activated, evaluating open and click rates

Retention period: until you withdraw your consent

Legal basis: Art. 6(1)(a) GDPR

Privacy information: brevo.com/de/legal/privacypolicy

Hosting and Server Log Files

Hosting

This website is operated through a technical hosting provider. Personal data is processed to provide and protect the website. Where the hosting provider acts on our behalf, this is done on the basis of a data processing agreement pursuant to Art. 28 GDPR.

The exact server location should be confirmed against the infrastructure actually used before go-live.

Server Log Files

When the website is accessed, server log files are processed automatically.

Processed data: browser type, operating system, referrer URL, host name, time of access, IP address and requested file or page

Purpose: ensuring technical operation, IT security and error analysis

Retention period: for a limited period in accordance with server configuration

Legal basis: Art. 6(1)(f) GDPR

Third-Country Transfers and Processors

Third-Country Transfers

Some of the services used, in particular Google, Meta or LinkedIn, may transfer data to countries outside the EEA, especially the USA.

Where such a transfer takes place, we ensure appropriate safeguards such as adequacy decisions, standard contractual clauses or other transfer mechanisms permitted under the GDPR.

Processors

For the operation of this website and related services, we may in particular engage the following categories of processors or recipients:

  • hosting providers for server operations
  • Google Ireland Ltd. for tag management and web analytics
  • Brevo SAS for newsletter distribution
  • form and API service providers for enquiry handling

Updates to This Policy

Notice

This privacy policy will be updated if legal requirements, the services used or technical processes change.

We recommend checking this page regularly.

Privacy Contact

If you have any questions regarding the processing of your personal data, you may contact us at any time:

office@respas.at