Data protection
Personal data (hereinafter usually referred to simply as „data“) is processed by us only to the extent necessary and for the purpose of providing a functional and user-friendly website, including its content and the services offered there.
According to Article 4, paragraph 1 of Regulation (EU) 2016/679, also known as the General Data Protection Regulation (hereinafter referred to as the „GDPR“), „processing“ means any operation or set of operations performed with or without the aid of automated processes on personal data, such as collection, recording, organization, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or any other form of provision, comparison or linking, restriction, deletion or destruction.
With the following privacy policy, we inform you in particular about the nature, scope, purpose, duration and legal basis of the processing of personal data, insofar as we decide, either alone or jointly with others, on the purposes and means of the processing. Furthermore, we inform you below about the service providers and third-party components we use.
Our privacy policy is structured as follows:
I. Information about us as the responsible party
II. Rights of Users and Data Subjects
III. Information on data processing
I. Information about us as the responsible party
The responsible provider of this website in terms of data protection law is:
BOLD Enterprise Business-, Organizational- & Leadership Development Gesellschaft mbH
Graben 12/1-3, A-1010 Vienna
T. +43 (0)664/13 26 300 and +43 (0)664/33 75 093
E: office@bold-enterprise.org
II. Rights of Users and Data Subjects
With regard to the data processing described in more detail below, users and data subjects have the right:
- to obtain confirmation of whether data concerning them are being processed, to obtain information about the data being processed, to obtain further information about the data processing, and to obtain copies of the data (see also Article 15 GDPR);
- to correct or complete incorrect or incomplete data (see also Art. 16 GDPR);
- to immediately delete the data concerning them (see also Article 17 GDPR), or, alternatively, if further processing is required in accordance with Article 17(3) GDPR, to restrict the processing in accordance with Article 18 GDPR;
- on the retention of the data concerning them and provided by them and on the transmission of this data to other providers/controllers (see also Art. 20 GDPR);
- on complaint to the supervisory authority, if they are of the opinion that the data concerning them are processed by the provider in violation of data protection regulations (see also Article 77 GDPR). In Austria, this is the Austrian Data Protection Authority, Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at.
Furthermore, the provider is obliged to inform all recipients to whom data has been disclosed by the provider about any rectification or deletion of data or the restriction of processing that takes place pursuant to Articles 16, 17(1), and 18 of the GDPR. However, this obligation does not exist insofar as such notification is impossible or involves disproportionate effort. Without prejudice to this, the user has the right to information about these recipients.
In accordance with Article 21 of the GDPR, users and those affected also have the right to object to the future processing of the data concerning them, provided that the data is processed by the provider in accordance with Article 6(1)(f) of the GDPR. In particular, an objection to the data processing for the purpose of direct advertising is permissible.
III. Information on data processing
The data processed by you when using our website will be deleted or blocked as soon as the purpose for its storage no longer applies, the deletion of the data does not conflict with any legal retention obligations, and no other information regarding individual processing procedures is provided subsequently.
Hosting and server data
Our website is operated on servers of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. The servers are located in a data center in Nuremberg (Germany).
For technical reasons, in particular to ensure a secure and stable online presence, data is transmitted by your internet browser to our server. These so-called server log files record, among other things, the type and version of your internet browser, the operating system, the website from which you accessed our online presence (referrer URL), the website(s) of our online presence that you visit, the date and time of the respective access, as well as the IP address of the internet connection from which the use of our online presence takes place.
This collected data is temporarily stored, but not in combination with other data from you.
This storage is based on the legal basis of Article 6(1)(f) of the GDPR. Our legitimate interest lies in improving, stabilizing, functionalizing, and securing our website.
The data will be deleted no later than 14 days after the event has taken place, unless further storage is required for evidentiary purposes. Otherwise, the data will be excluded from deletion entirely or partially until the final resolution of the incident has been reached.
To ensure against data loss, regular backup copies of our website are created and stored on storage systems of Hetzner Online GmbH in Germany. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in the secure operation of our website.
Content Delivery Network (bunny.net)
Zur schnelleren und zuverlässigeren Auslieferung von Bildern, Schriftarten, Stylesheets und Skripten unseres Internetauftritts setzen wir das Content Delivery Network (CDN) bunny.net der BunnyWay d.o.o., Cesta komandanta Staneta 4A, 1215 Medvode, Slowenien, ein. Diese Dateien werden von Servern des CDN ausgeliefert, die näher an Ihrem Standort liegen als unser eigener Server.
Dabei werden insbesondere Ihre IP-Adresse, die angeforderte Datei, Datum und Uhrzeit des Abrufs sowie Typ und Version Ihres Browsers an bunny.net übermittelt und dort zur Auslieferung und zur Sicherheit des Dienstes verarbeitet. BunnyWay d.o.o. hat ihren Sitz in der Europäischen Union.
Rechtsgrundlage ist Art. 6 Abs. 1 lit. f) DSGVO. Unser berechtigtes Interesse liegt in einer schnellen, stabilen und sicheren Bereitstellung unseres Internetauftritts.
Weitere Informationen bietet bunny.net unter https://bunny.net/privacy an.
Cookies
Our website does not set any cookies during your visit and does not use any services for reach measurement, analysis or advertising.
Fonts
Die in unserem Internetauftritt verwendete Schriftart wird von uns selbst bereitgestellt und über unser Content Delivery Network (siehe oben) ausgeliefert. Eine Verbindung zu Schriftarten-Diensten Dritter, etwa zu Google Fonts, wird dafür nicht hergestellt.
Contact requests / Contact possibility
If you contact us via a contact form or email, the data you provide will be used to process your request. Providing the data is necessary to process and answer your request – without it we cannot or at least only with limited response to your request.
The legal basis for this processing is Art. 6(1)(b) GDPR.
The information submitted via the contact form will not be stored on our website; it will instead be forwarded to us via email. To send these emails, we use the Amazon Simple Email Service of Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855 Luxembourg; the processing takes place in a data center in Ireland (EU). The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in the reliable delivery of your request.
Your data will be deleted as soon as your request has been answered conclusively and there are no legal retention obligations preventing deletion, such as, for example, in the event of any subsequent contract processing.
Cloudflare Turnstile
To protect our contact form from abusive, automated access (so-called spam bots), we use the Turnstile service from Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA, hereinafter referred to only as „Cloudflare“.
The turnstile is only loaded when you interact with the contact form. Your IP address and information about your browser, operating system, and device are transmitted to Cloudflare and evaluated there to determine whether the request is from a human being. Turnstile does not set any cookies and the data is not used for advertising purposes.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the security of our website and in the prevention of unwanted, automated access in the form of spam or the like.
The transmission of data to the USA is not excluded. Cloudflare is certified according to the EU-US Data Privacy Framework; for the USA, an adequacy decision has been issued by the European Commission (Art. 45 GDPR).
Cloudflare offers under https://www.cloudflare.com/privacypolicy/ Further information about the collection and use of data, as well as your rights and options to protect your privacy.
Links to LinkedIn
Our website contains simple links to our profile on LinkedIn. When you visit our website, no data is transmitted to LinkedIn; only when you follow such a link do you reach LinkedIn, where the privacy policy of LinkedIn applies.
Status: October 2026