Privacy Policy

This Privacy Policy explains how 4tune-Software GmbH processes personal data when you visit www.4tso.com, contact us, or submit information through our website.

1. Controller

The controller responsible for processing your personal data is:

4tune-Software GmbH
Am Kögel 1/2 OG/6
8430 Leibnitz
Austria

Company register number: FN 325327y
Company register court: Landesgericht für Zivilrechtssachen Graz
VAT identification number: ATU64890602
Email: office.austria@4tso.com
Telephone: +43 720 3030 7171

2. Website access and server logs

When you access our website, our web server and hosting provider may automatically process technical information required to deliver and secure the website. This may include:

  • IP address;
  • date and time of access;
  • requested page or file;
  • referrer URL;
  • browser type, operating system and device information; and
  • access status and transferred data volume.

We process this information to provide the website, maintain its stability and security, diagnose technical problems and prevent misuse. The legal basis is our legitimate interest under Article 6(1)(f) GDPR in operating a secure and functional company website.

Server-log data is retained only for as long as reasonably necessary for these purposes and is then deleted or anonymised, unless longer retention is necessary to investigate a security incident, establish or defend legal claims, or comply with a legal obligation.

The data may be processed by our hosting and technical service providers acting on our behalf.

3. Contact forms, email and other enquiries

If you contact us through a website form, by email or by telephone, we process the information you provide. Depending on the form and your enquiry, this may include:

  • first and last name;
  • email address and telephone number;
  • company and professional role;
  • subject, project description and project budget;
  • uploaded files; and
  • any other information included in your message.

We use this information to respond to your enquiry, communicate with you, prepare an offer, take steps requested by you before entering into a contract, and manage our business relationship.

Where your enquiry concerns a possible or existing contract, the legal basis is Article 6(1)(b) GDPR. For general business enquiries and communication, the legal basis is our legitimate interest under Article 6(1)(f) GDPR in responding to enquiries and conducting our business. Where processing is required by law, Article 6(1)(c) GDPR applies.

Providing information is voluntary. However, without information necessary to understand and answer your enquiry, we may be unable to respond. Please do not upload special-category data or confidential third-party information unless it is strictly necessary and you are authorised to provide it.

Enquiry data is retained until the enquiry has been conclusively handled and for an appropriate follow-up period. If the enquiry results in a contract or the information becomes part of business records, it may be retained for the duration of the business relationship and applicable statutory retention and limitation periods. Data may be retained longer where necessary to establish, exercise or defend legal claims.

4. Google Fonts

Our website currently loads certain fonts from Google servers. The provider in the European Economic Area is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. When the fonts are loaded, your browser connects to Google. Google may receive technical information such as your IP address, browser and device information, the requested website, referrer information, and the date and time of the request.

We use Google Fonts to provide consistent and readable typography. We rely on our legitimate interest under Article 6(1)(f) GDPR in presenting our website in a functional and visually consistent manner. You may object to processing based on legitimate interests as described below.

Google may involve affiliates or service providers outside the European Economic Area, including in the United States. Where personal data is transferred to a third country, the transfer must be based on an applicable adequacy decision under Article 45 GDPR or appropriate safeguards under Article 46 GDPR.

Further information is available in Google’s Privacy Policy (https://policies.google.com/privacy).

5. Google Maps

The contact page currently contains an embedded Google Maps map provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Loading the map establishes a connection to Google servers. Google may process your IP address, browser and device information, referrer information, the date and time of the request and, depending on your settings and Google account, other information associated with your use of Google services.

Google Maps is not necessary for contacting us; our postal address is also provided in text form. To the extent Google Maps stores information on, or accesses information from, your terminal equipment that is not strictly necessary, the service may be activated only on the basis of your consent under Article 6(1)(a) GDPR and section 165(3) of the Austrian Telecommunications Act 2021 (TKG 2021). You may withdraw consent at any time with effect for the future.

Google may involve affiliates or service providers outside the European Economic Area, including in the United States. Where personal data is transferred to a third country, the transfer must be based on an applicable adequacy decision under Article 45 GDPR or appropriate safeguards under Article 46 GDPR.

Further information is available in Google’s Privacy Policy (https://policies.google.com/privacy) and the Google Maps/Google Earth Additional Terms of Service (https://www.google.com/help/terms_maps/).

6. Cookies and similar technologies

At the date of this Policy, we do not intentionally use analytics, advertising or profiling cookies on our website. Third-party components may nevertheless store or access information on your device. Where such storage or access is not strictly necessary to provide a service expressly requested by you, it may take place only after you have given consent. Relevant third-party services are described in this Policy.

Strictly necessary technical storage may be used without consent where it is required to transmit communications or provide a website function expressly requested by you.

7. Recipients of personal data

Where necessary for the purposes described above, personal data may be disclosed to the following categories of recipients:

  • website hosting, email, IT support and website-administration providers;
  • service providers processing enquiries on our behalf;
  • Google in connection with the services described above;
  • professional advisers, including legal and tax advisers; and
  • public authorities, courts or other recipients where disclosure is legally required.

Service providers acting as processors are required to process personal data only on our documented instructions and to protect it appropriately.

We do not sell your personal data.

8. International data transfers

Some service providers or their affiliates may process personal data outside the European Economic Area. Where this occurs, we use a legally recognised transfer mechanism, such as an adequacy decision under Article 45 GDPR or appropriate safeguards, including the European Commission’s standard contractual clauses, under Article 46 GDPR. Information about applicable safeguards may be requested using the contact details above.

9. Your rights

Subject to the conditions of the GDPR, you may have the right to:

  • obtain information about and access to your personal data;
  • have inaccurate or incomplete data corrected;
  • request deletion of your data;
  • request restriction of processing;
  • receive data you provided in a structured, commonly used and machine-readable format and have it transmitted to another controller;
  • object to processing based on legitimate interests; and
  • withdraw consent at any time, without affecting the lawfulness of processing before withdrawal.

You also have the right to lodge a complaint with a supervisory authority. In Austria, the competent authority is:

Österreichische Datenschutzbehörde
Barichgasse 40–42
1030 Vienna
Austria
Email: dsb@dsb.gv.at
Website: www.dsb.gv.at (https://www.dsb.gv.at/)

To exercise your rights, contact us at office.austria@4tso.com. We may request information necessary to verify your identity.

10. Automated decision-making

We do not use personal data collected through this website for automated decision-making, including profiling, that produces legal effects or similarly significantly affects you.

11. Security

We use appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

12. External links

Our website may contain links to websites operated by third parties. We do not control those websites or their data-processing practices. Please review the privacy information provided by the relevant third party.

13. Changes to this Policy

We may update this Privacy Policy where our website, processing activities or legal obligations change. The current version and its effective date will always be published on this page.