Datenschutzerklärung

Home / Privacy Policy  —  Effective date: October 2026

1.  Controller

The controller responsible for data processing on this website within the meaning of the GDPR is:

TOPTS-SECURITY GmbH
Franz-Josefs-Kai 29, 1010 Vienna, Austria
Phone: +43 676 918 1382
Email: info@topts-security.com
Data protection inquiries: info@topts-security.com

2.  Overview

We take the protection of your personal data seriously and process it exclusively in accordance with the EU General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (DSG). This policy explains what data we collect when you visit this website, why we process it, and what rights you have as a data subject.

3.  Hosting & Server Log Data

Each time this website is accessed, our hosting infrastructure automatically records: IP address, browser type and version, operating system, referring page, date and time of access, and the volume of data transferred.

Purpose: to ensure the stable and secure operation of the website and to detect and prevent misuse.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in IT security and service stability).
Hosting provider: World4You Internet Services GmbH, Wolfgang-Pauli-Straße 2, BT3, 4020 Linz, Austria (FN 232485s, Landesgericht Linz)
Retention: server log files are automatically deleted after 90 days unless required for evidentiary purposes.

4.  Contact Form

When you contact us via the contact form on this website, we process the data you submit: name, company/organisation (optional), email address, phone number (optional), the service of interest you select, and the content of your message.

Purpose: to respond to your inquiry and, where relevant, to take steps prior to entering into a contract.
Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR (legitimate interest in responding to inquiries) where no contract is intended.
Retention: your data is stored only for as long as necessary to process your request and any follow-up correspondence, and is not passed to third parties beyond the processors listed under "Recipients" below.

If you have consented to statistics cookies, we additionally record anonymously that the form was submitted and which service was selected, in order to measure our offers (see Section 5b).

5.  Cookies and Consent Management

This website uses cookies and similar technologies (such as local storage and scripts). Technically necessary cookies are set on the basis of our legitimate interest in a functioning and secure website (Art. 6(1)(f) GDPR and § 165(3) Telecommunications Act 2021 (TKG 2021)). All other cookies, namely for statistics and marketing, are set only if you have given your prior consent (Art. 6(1)(a) GDPR and § 165(3) TKG 2021).

Consent management: When you first visit the website, a banner lets you accept or decline each category (functional, statistics, marketing). For this we use the consent management tool Complianz. Your choice is stored in first-party cookies on your device for 12 months so that we do not have to ask you again on every visit and can prove your consent (Art. 6(1)(c) in conjunction with Art. 7(1) GDPR).

Withdrawal: You can withdraw or change your consent at any time with effect for the future, in the section "Manage your consent settings" of our Cookie Policy or by deleting cookies in your browser. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal. A list of the individual cookies used is available in the Cookie Policy.

5a.  Google Tag Manager

We use Google Tag Manager, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Tag Manager only manages and fires tags (small code snippets) on our website; it does not itself set cookies or analyse your behaviour. When the Tag Manager script is loaded, your IP address is technically transmitted to Google. Tags for statistics and marketing described below are triggered only after you have consented.

Legal basis: our legitimate interest in efficient administration of website tags (Art. 6(1)(f) GDPR); for the tags triggered by it, your consent (Art. 6(1)(a) GDPR and § 165(3) TKG 2021).

5b.  Google Analytics 4

With your consent we use Google Analytics 4, a web analytics service of Google. It helps us understand how the website is used and improve it. Processed data are pseudonymous usage data, e.g. pages viewed, approximate location, device and browser information, and events such as a click on our telephone number or e-mail address and the submission of the contact form including the service of interest you selected (the content of your message is not transmitted). Google Analytics 4 does not store IP addresses.

Cookies: _ga and _ga_[ID] (storage period up to 2 years). Retention of event data in Google Analytics: 2 months. Legal basis: your consent (Art. 6(1)(a) GDPR, § 165(3) TKG 2021). Google acts as our processor under a data processing agreement; data may be transferred to the USA (see Section 7). More information: policies.google.com/privacy.

5c.  Google Ads (Conversion Tracking and Remarketing)

With your consent we use Google Ads of Google to measure the success of our advertising (conversion tracking: e.g. contact form submissions, clicks on telephone number or e-mail address after an ad click) and, if applicable, to show you relevant ads (remarketing). For this, Google sets cookies such as _gcl_au and _gcl_aw (storage period up to 90 days) and may link the data with your Google account if you are signed in.

Legal basis: your consent (Art. 6(1)(a) GDPR, § 165(3) TKG 2021). To the extent Google processes data for its own purposes, Google and we may act as joint controllers (Art. 26 GDPR); the respective Google terms apply. Data may be transferred to the USA (see Section 7).

6.  Recipients of Personal Data

"Personal data submitted through this website is shared only with service providers who process it strictly on our behalf under Art. 28 GDPR data processing agreements: World4You Internet Services GmbH (Wolfgang-Pauli-Straße 2, BT3, 4020 Linz, Austria), engaged for website hosting and email infrastructure. We do not sell personal data to third parties."

With your consent, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) receives usage data via Google Tag Manager, Google Analytics 4 and Google Ads (see Section 5).

7.  International Data Transfers

Where personal data is processed by a service provider located outside the EU/EEA, we ensure an adequate level of protection through EU Standard Contractual Clauses or an applicable adequacy decision. Our hosting provider, World4You Internet Services GmbH, may engage sub-processors outside the EU/EEA in connection with hosting services; where this occurs, appropriate safeguards such as EU Standard Contractual Clauses are applied.

Google Ireland Limited may transfer data to Google LLC in the USA. Google LLC is certified under the EU-US Data Privacy Framework, for which the European Commission adopted an adequacy decision on 10 July 2023 (Art. 45 GDPR); where necessary, EU Standard Contractual Clauses additionally apply.

8.  Data Retention

Personal data is retained only for as long as necessary for the purposes described in this policy, or as required by statutory retention obligations under Austrian commercial and tax law (e.g. § 132 BAO, § 212 UGB), which can require retention of business correspondence for up to seven years.

9.  Your Rights

Under the GDPR, you have the right to:

• Access the personal data we hold about you (Art. 15 GDPR)
• Request rectification of inaccurate data (Art. 16 GDPR)
• Request erasure of your data (Art. 17 GDPR)
• Request restriction of processing (Art. 18 GDPR)
• Receive your data in a portable format (Art. 20 GDPR)
• Object to processing based on legitimate interest (Art. 21 GDPR)
• Withdraw consent at any time, where processing is based on consent

You also have the right to lodge a complaint with the Austrian Data Protection Authority: Österreichische Datenschutzbehörde, Barichgasse 40–42, 1030 Vienna, dsb@dsb.gv.at.

10.  Data Security

We use SSL/TLS encryption to protect data transmitted through this website and apply appropriate technical and organizational measures to protect your data against unauthorized access, loss, or misuse.

11.  Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our data processing practices or legal requirements. The current version is always available on this page.

Questions about how we handle your data?