Privacy Policy

Last updated: October 2026

Data controller

AVG Webdesign — business name of ILTEC. Idealist Education GmbH

Rasumofskygasse 34/11, 1030 Vienna, Austria

Telephone: +43 677 64855950
Email (general enquiries and support): order@avgwebdesign.at (Oleksandr Malashevskyi)
Website: https://avgwebdesign.at/en/

Company details

Company registration number (FN): 573404t
Commercial register court: Handelsgericht Wien (Commercial Court of Vienna)

VAT identification number: ATU77796217
Data protection officer: none appointed.

1. Overview of processing

We process personal data to operate this website, provide information and contact options, answer enquiries, arrange appointments through Calendly, prepare quotations and fulfil contracts, maintain security and diagnose errors. Optional services include WhatsApp communication, Google Analytics 4 and Google Maps.

The legal bases under Article 6(1) GDPR are contractual or pre-contractual necessity (b), legitimate interests in secure website operation and communication (f), and consent for optional analytics and services (a). Recipients may include hosting, IT, email and communication providers, contractual partners where relevant, and authorities where required by law.

Some services may transfer data outside the EEA, including to the United States. Appropriate safeguards may include an applicable European Commission adequacy decision or standard contractual clauses. Enquiries are generally retained for up to 12 months; contractual and accounting records for at least seven years under Austrian tax rules; server logs for up to 30 days, unless a security incident requires longer retention.

2. Hosting and server logs

The server automatically processes IP address, date and time, requested page or file, referring URL, browser and operating system information, HTTP status and transferred data volume. The purpose is technical operation and security under Article 6(1)(f) GDPR. Logs are generally retained for 30 days, or longer in connection with security incidents. Our hosting provider processes data under an Article 28 GDPR agreement.

3. Cookies and consent

Necessary cookies support website operation. Google Analytics is loaded only after you select “Allow statistics” in the cookie notice. You can refuse optional statistics or withdraw consent through “Cookie settings”. Embedded Google Maps on the contact page requires a separate click before loading.

4. Contact by email, telephone or form

We process the details you provide, such as name, email address, telephone number, enquiry and company details, to answer your request, arrange appointments and prepare or fulfil a contract. The legal basis is Article 6(1)(b) GDPR or our legitimate interest in communication under Article 6(1)(f). Enquiries are generally retained for up to 12 months; contractual records may be retained for seven years under Austrian tax rules.

5. Optional WhatsApp contact

The WhatsApp link opens a chat in the WhatsApp application or web service. Starting a chat may disclose communication and metadata to WhatsApp Ireland Limited and, where applicable, WhatsApp LLC or Meta Platforms in the United States. The legal basis is your consent when you actively start the chat, or pre-contractual or contractual communication. Transfers outside the EEA may occur. Please do not send sensitive information through WhatsApp. You may alternatively contact us by email or telephone.

6. Appointment booking through Calendly

When you book an appointment through Calendly, the provider processes the appointment and contact details you enter, as well as technical metadata and logs. The purpose is appointment scheduling under Article 6(1)(b) GDPR, or consent where applicable. Transfers outside the EEA may occur subject to applicable safeguards, such as standard contractual clauses or an adequacy decision. Please also consult the provider’s privacy information.

7. Google Analytics 4 — only with consent

The provider is Google Ireland Limited and, where applicable, Google LLC in the United States. With consent, GA4 processes pseudonymous usage data, device and browser information and events, including page views, successful form submissions and clicks on telephone or email links. We do not send form contents, names, email addresses or telephone numbers as event parameters.

Google states that GA4 does not log or store IP addresses: they are used to derive approximate location and then discarded. The legal basis is consent under Article 6(1)(a) GDPR. Current GA4 retention settings are two months for event data and 14 months for user data, with reset on new user activity enabled. These settings concern user-level and event-level data, rather than aggregated standard reports. You can withdraw consent through Cookie settings.

8. Embedded Google Maps

The contact page offers an optional Google Maps map. It loads only after you actively click the map button. Loading it transmits information such as IP address, device information and the page request to Google; transfers outside the EEA may occur. You can use the contact information without loading the map.

9. Website fonts

The website’s main font files are hosted locally on our server. Loading these local files does not require a connection to Google Fonts servers. External third-party widgets may load their own resources; their processing is separate from the locally hosted website fonts.

10. Social media pages

When you visit our business pages on social media platforms, the relevant provider’s terms and privacy information apply. Joint controllership under Article 26 GDPR may apply to certain functions, such as page insights. You can address data protection requests to us or to the platform.

11. Data processors

Service providers processing personal data on our behalf, such as hosting, email and communication providers, are subject to data processing agreements under Article 28 GDPR.

12. Security

We use TLS/SSL encryption and organisational and technical measures to protect personal data against loss, misuse and unauthorised access.

13. Your rights

Under Articles 15–21 GDPR, you may request access, rectification, erasure, restriction and portability, and object to processing based on Article 6(1)(f). You can withdraw consent at any time with effect for the future through Cookie settings or by email.

14. Right to complain

You may lodge a complaint with the Austrian Data Protection Authority (Österreichische Datenschutzbehörde), Barichgasse 40–42, 1030 Vienna, Austria: https://www.dsb.gv.at.

15. Providing personal data

There is no general legal obligation to provide personal data simply to use the website. Certain information is needed to answer an enquiry or perform a contract; without it, we may be unable to process your request.

16. Updates

We update this policy when applicable law, services or processes change. Last updated: October 2026.