Privacy Policy
Information on the processing of personal data on this website under the GDPR and applicable Austrian law.
Last updated: April 14, 2026
Controller
The controller responsible for data processing on this website is:
P2L2 GmbH
Softwarepark 35
4232 Hagenberg im Mühlkreis
Austria
Email: info@p2l2.com
Phone: +43 681 81541388
General Information
Legal Basis
We process personal data in particular on the basis of Art. 6(1)(a) GDPR (consent), Art. 6(1)(b) GDPR (contract or pre-contractual measures), and Art. 6(1)(f) GDPR (legitimate interests). For cookies and similar technologies, we also observe Section 165 of the Austrian Telecommunications Act 2021 (TKG 2021).
Recipients
We only transfer data to third parties where this is necessary for operating the website, required by law, based on your consent, or where we use processors. Such processors may in particular include hosting, mailing, and analytics providers.
Third Countries
With individual services, transfers of personal data to third countries, in particular the United States, cannot be ruled out. Where no adequacy decision applies, transfers take place on the basis of appropriate safeguards, in particular standard contractual clauses. Where providers are certified under the EU-U.S. Data Privacy Framework, transfers may also rely on that mechanism.
Storage Period
We only store personal data for as long as necessary for the relevant purposes, as long as statutory retention obligations apply, or where legitimate interests such as legal enforcement or IT security justify further storage.
Server Logs
When this website is accessed, our web server or hosting provider processes technically necessary connection data. This includes in particular IP address, date and time of access, requested URL, referrer URL, browser type, operating system, and similar technical information.
This processing is based on our legitimate interest in a secure, stable, and functional website operation pursuant to Art. 6(1)(f) GDPR. Log data is generally stored only for as long as necessary for secure operation, error analysis, and the prevention of misuse.
Contact Form & Enquiries
If you contact us via contact form, email, or telephone, we process the data you provide to us. This may include, in particular, your name, company, email address, telephone number, and message.
Form data is sent directly to us and is not disclosed to third parties for their own independent purposes. This does not affect technical processing by our hosting provider or IT service providers acting on our behalf as processors.
Processing is carried out for handling your enquiry and taking pre-contractual steps pursuant to Art. 6(1)(b) GDPR and, additionally, on the basis of our legitimate interest in efficient communication pursuant to Art. 6(1)(f) GDPR. We store enquiries for as long as necessary for processing, any follow-up questions, and statutory documentation obligations.
Newsletter with Brevo
If you subscribe to our newsletter, we process the data you enter, in particular your email address and, where applicable, your name. We generally use a double opt-in procedure for registration in order to be able to document your consent.
We use Brevo for sending and managing newsletters. The provider is Brevo SAS, Paris, France. According to Brevo, a data processing agreement has been concluded or integrated into its terms of use.
Processing is based on your consent pursuant to Art. 6(1)(a) GDPR. You can withdraw your consent at any time with future effect, in particular via the unsubscribe link in the newsletter or by contacting us. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
Cookies, Consent and Marketing Tools
Borlabs Cookie: We use Borlabs Cookie to manage and document your consent for cookies and consent-based services. This may involve processing your selection in the cookie banner, a consent ID, timestamps, and technical browser information. This processing is carried out to meet our documentation obligations and to control the lawful integration of optional services. The legal basis is Art. 6(1)(c) GDPR in conjunction with Art. 7 GDPR and Art. 6(1)(f) GDPR.
Google Tag Manager: We use Google Tag Manager, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Tag Manager is used for the technical integration and management of additional tags and scripts. According to our configuration, the service itself does not create user profiles, but it may process technical connection data, including your IP address. Unless its use is exclusively technically necessary, integration takes place only on the basis of your consent pursuant to Art. 6(1)(a) GDPR and Section 165 TKG 2021.
Google Analytics: We use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics helps us understand how our website is used. In particular, page views, interactions, technical device information, browser information, approximate location data, and pseudonymous identifiers may be processed. We only use Google Analytics on the basis of your consent pursuant to Art. 6(1)(a) GDPR and Section 165 TKG 2021. According to Google, IP addresses are not logged in Google Analytics 4 and, for EU traffic, IP lookups are performed on EU servers before the data is discarded. We have selected privacy-friendly settings and do not enable any marketing-related function without your consent.
Meta Pixel: We use the Meta Pixel of Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. The Meta Pixel helps us understand which actions users take after visiting our website and measure the effectiveness of our advertising campaigns and build audiences for advertising. In particular, visited pages, accessed content, referrer, device and browser information, and pseudonymous event data may be transmitted to Meta. Integration only takes place on the basis of your consent pursuant to Art. 6(1)(a) GDPR and Section 165 TKG 2021. Data transfers to Meta companies in the United States cannot be ruled out.
Withdrawal and Cookie Settings: You can withdraw consent that you have already given at any time with effect for the future or adjust your cookie settings. This is possible in particular via the cookie banner or the relevant settings on the website. You can also delete or block cookies in your browser. Please note that this may restrict the functionality of the website.
Your Rights
Within the scope of the applicable legal requirements, you have in particular the right of access, rectification, erasure, restriction of processing, data portability, and objection to the processing of your personal data.
Where processing is based on your consent, you may withdraw that consent at any time with future effect. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
If you believe that the processing of your data violates data protection law, you also have the right to lodge a complaint with the competent supervisory authority. In Austria, this is the Austrian Data Protection Authority (Österreichische Datenschutzbehörde), Barichgasse 40-42, 1030 Vienna, email: dsb@dsb.gv.at, website: dsb.gv.at.
