Privacy Policy

1. Scope of processing

We process personal data only to the extent necessary to operate a functional Website, respond to enquiries, provide authenticated access to our internal team portal, and — where you consent — measure Website usage. Processing generally takes place on the basis of your consent, a contract or pre-contractual steps, a legal obligation, or our legitimate interests, as described below.

2. Categories of data

• Contact data you submit via the contact form (email address, phone number where provided, public profile links, and your message).
• Portal account data for authorised team members (username, email, authentication credentials).
• Technical data generated when you use the Website (for example browser type, IP address, date and time of access, and server logs).
• Optional analytics data about page views and usage patterns when you have opted in.
• If you have consented to marketing: the Google click id and campaign tags (UTM) of the campaign that brought you to the Website, stored with your enquiry.
• A record of your cookie choice (random, anonymous id, the choices made, date and page language) without IP address, so that we can demonstrate your consent.

3. Legal bases

Depending on the processing activity, we rely on Art. 6 (1) lit. a GDPR (consent), Art. 6 (1) lit. b GDPR (contract or pre-contractual measures), Art. 6 (1) lit. c GDPR (legal obligation), and/or Art. 6 (1) lit. f GDPR (legitimate interests, such as operating, securing and improving the Website).

4. Special categories of data

We do not intentionally collect special categories of personal data within the meaning of Art. 9 GDPR through this Website.

1. Description

When you access the Website, our systems automatically process technical information required to deliver the page, including browser type, IP address, and date and time of access. This information may be stored in server logs and is not combined with other personal data from the contact form for marketing profiling.

2. Legal basis and purpose

The legal basis is Art. 6 (1) lit. f GDPR. Temporary storage of the IP address is necessary to deliver the Website to your device and to ensure IT security and system stability.

3. Storage period

Log data is retained only as long as needed for the purposes above, then deleted or anonymised, unless a longer retention period is required by law.

4. Country-based language and market selection

When you open our home page without a link to a specific language, our hosting provider determines the country of your request from your IP address at the moment of the request and passes only the two-letter country code to our application. If the country is Portugal, we forward you to the Portuguese version of the Website. We do not store the IP address or the detected country in our own systems, do not build a profile from it and do not use it for advertising. Crawlers are not redirected. You can switch the language at any time with the language buttons; only that explicit choice is remembered, in the cookie described under IV. The legal basis is Art. 6 (1) lit. f GDPR (legitimate interest in showing the Website in the version relevant to your location).

Legal basis

Necessary cookies: Art. 6 (1) lit. f GDPR (legitimate interest in a secure, functional Website) and, where applicable, storage strictly necessary to provide a service you requested. Optional analytics and optional marketing: Art. 6 (1) lit. a GDPR (consent) together with § 165 (3) of the Austrian Telecommunications Act 2021 (TKG 2021). Consent is voluntary and refusing it does not affect your use of the Website. To prove consent we keep an anonymous record of your choice (Art. 6 (1) lit. c GDPR in conjunction with the duty to demonstrate consent under Art. 7 (1) GDPR), for as long as needed for that purpose and for three years at most.

1. Description

If you accept the “Marketing” category, we load the Google Ads tag. Google may then set cookies in your browser to measure whether one of our ads led to an enquiry and to show you our ads on other websites and apps that take part in Google’s advertising networks (remarketing). In that case Google Ireland Limited and Google LLC process data jointly with us or on our behalf under Google’s data protection terms for advertising. Without your consent the tag is not loaded and no data is sent to Google. You can withdraw consent at any time; Google’s cookies are then deleted and the tag stops collecting data.

2. Campaigns and enquiries

With marketing consent we store the Google click id and the campaign tags of your visit in your browser for up to 90 days and, if you send an enquiry, save them with that enquiry to evaluate which campaigns work. An enquiry is only reported to Google as a conversion with this consent.

3. Legal basis and storage period

Art. 6 (1) lit. a GDPR (consent) and § 165 (3) TKG 2021. Marketing cookies last up to 90 days and remarketing lists keep visitors for 90 days at most.

1. Description

You may contact us via the Website contact form or by email. We process the data you provide (including email, phone number, profile links and message content) solely to handle your enquiry and related follow-up. If you have consented to marketing, we also save the Google click id and campaign tags of your visit with the enquiry.

2. Legal basis and purpose

Where you tick the consent box on the contact form, processing is based on Art. 6 (1) lit. a GDPR. Where the enquiry aims at concluding a contract for our services, Art. 6 (1) lit. b GDPR also applies. Otherwise we may rely on Art. 6 (1) lit. f GDPR (legitimate interest in responding to business enquiries).

3. Storage period

We retain contact submissions only as long as needed to handle the enquiry and any resulting business relationship, and thereafter as required for legal retention duties.

1. Description

Authorised Dream Giants team members may access an internal portal to view sales materials and related business information. Portal accounts include username, email and authentication data.

2. Legal basis and purpose

Processing is based on Art. 6 (1) lit. b GDPR (performance of employment or contractor arrangements) and Art. 6 (1) lit. f GDPR (secure internal operations).

3. Storage period

Portal account data is retained while the account remains active and deleted or anonymised when access is no longer required, subject to legal retention obligations.

Complaints

You also have the right to lodge a complaint with the Austrian Data Protection Authority (Datenschutzbehörde) or another competent supervisory authority in the EU.