PRIVACY POLICY
The protection of your personal data is of particular concern to us. We process your data exclusively on the basis of the statutory provisions (General Data Protection Regulation – GDPR/DSGVO, Austrian Data Protection Act – DSG, Telecommunications Act 2021 – TKG 2021). In this privacy policy we inform you about the most important aspects of data processing on our website and in our customer portal.
1. Controller
WPD Wartungs- und Prüfungsdienst von Messanlagen GmbH
Werkstraße 5, 2231 Strasshof an der Nordbahn, Austria
Telephone: +43 2287 20029-0
E-mail: office@wpd-austria.at
Company register number: FN 250723k · UID: ATU58076325
For all questions regarding data protection and the exercise of your rights, you can reach us using the contact details above.
2. Hosting and Server Logs
Our website is provided using the Odoo business software on a server operated by us. Each time the site is accessed, the following data is stored in log files for technical reasons:
- IP address of the requesting device
- Date and time of access
- requested address (URL) and HTTP status code
- amount of data transferred and response time
Processing takes place in order to deliver the website, ensure its stability and security and analyse errors. The legal basis is our legitimate interest in secure and functional operation (Art. 6(1)(f) DSGVO). The log files are automatically deleted after 14 days.
3. Protection Against Attacks (Blocklist)
To protect our systems, we automatically detect requests that are typical of attacks (for example scanning for known security vulnerabilities or repeated failed login attempts). In this case we store the IP address, the time, the requested address, the detected attack pattern and the country of origin derived from the IP address. Suspicious addresses may be temporarily blocked and passed on to our own firewall systems; they are not passed on to third parties.
The legal basis is our legitimate interest in network and information security (Art. 6(1)(f) DSGVO, Recital 49). Individual detected access attempts are deleted after 30 days; blocklist entries are only stored for as long as is necessary to fend off the attack.
4. Cookies
Our website only uses cookies that are technically necessary for its operation. Optional cookies or content from third-party providers are only loaded after you have given your consent via the cookie bar.
| Cookie | Purpose | Retention period |
|---|---|---|
| session_id | Technically necessary: assigns requests to your session (e.g. login, form protection) | 7 days or until logout |
| frontend_lang | Technically necessary: stores the selected language | until the browser is closed |
| website_cookies_bar | Technically necessary: stores your selection in the cookie bar | 999 days |
The legal basis for technically necessary cookies is § 165(3) TKG 2021 in conjunction with Art. 6(1)(f) DSGVO. You can delete or block cookies in your browser at any time; certain functions of the website (e.g. login) may then not be available.
We do not use any analytics, tracking or advertising tools and do not create user profiles.
5. Contact Form and Contact by E-mail or Telephone
If you contact us via the contact form, by e-mail or by telephone, we process the data you provide (name, e-mail address, where applicable telephone number and company, subject and content of your message) in order to handle your enquiry. The details from the contact form are sent to us by e-mail.
The legal basis is the implementation of pre-contractual measures or the performance of a contract (Art. 6(1)(b) DSGVO) and otherwise our legitimate interest in responding to your enquiry (Art. 6(1)(f) DSGVO). We store the data for as long as is necessary to process your request and beyond that only insofar as statutory retention obligations apply.
6. Customer Portal and Business Relationship
We provide our customers with a password-protected customer portal in which they can view quotations, orders and invoices. For this purpose we process master data (name, company, address, e-mail address, telephone number, UID number), access data as well as contract and billing data.
The legal basis is the performance of the contract (Art. 6(1)(b) DSGVO) and compliance with legal obligations (Art. 6(1)(c) DSGVO). We retain accounting-relevant documents for seven years in accordance with § 132 BAO and § 212 UGB, and beyond that only for as long as they are required for pending proceedings.
As required by law, we submit invoices to federal government agencies electronically via the Business Service Portal (e-Rechnung.gv.at) of the Federal Ministry of Finance.
7. Google Maps
On our contact page you can display a map from the Google Maps service. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The map is only loaded once you consent to optional content in the cookie bar. In doing so, your IP address and information about your browser in particular are transmitted to Google; Google may also set cookies. A transfer to Google LLC in the USA is possible; Google LLC is certified under the EU-US Data Privacy Framework (adequacy decision of the European Commission of 10 July 2023).
The legal basis is your consent (Art. 6(1)(a) DSGVO, § 165(3) TKG 2021). You can withdraw your consent at any time with effect for the future via the cookie settings (button at the bottom of this page) or by deleting our website's cookies in your browser. Further information: https://policies.google.com/privacy.
8. Recipients and Processors
Your data will only be passed on to third parties if this is necessary for the performance of the contract (e.g. to banks for payment processing, to our tax advisers or to authorities such as the Federal Office of Metrology and Surveying in the context of verification), if we are legally obliged to do so or if you have given your consent. Contracts pursuant to Art. 28 DSGVO are in place with service providers who process personal data on our behalf (e.g. for IT maintenance and operation).
9. Data Security
We take technical and organisational measures to protect your data against loss, manipulation and unauthorised access. Transmission between your browser and our server is encrypted (TLS), as indicated by “https://” in the address bar.
10. Your Rights
In principle, you have the following rights:
- Access to the data stored about you (Art. 15 DSGVO)
- Rectification of inaccurate data (Art. 16 DSGVO)
- Erasure (Art. 17 DSGVO) and restriction of processing (Art. 18 DSGVO)
- Data portability (Art. 20 DSGVO)
- Objection to processing based on legitimate interests (Art. 21 DSGVO)
- Withdrawal of consent given, with effect for the future (Art. 7(3) DSGVO)
If you believe that the processing of your data infringes data protection law, you can lodge a complaint with the supervisory authority. In Austria, this is the Data Protection Authority (Datenschutzbehörde), Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at.
11. External Links
Our website contains links to websites of other providers. The respective operators are solely responsible for their content and data processing.
As of: November 2026