Data Controller
High-Definition Development & Networks GmbH Kappl 14, 6677 Schattwald, Austria Email: office@hd-n.at Phone: +43 5675 43295
What data we process
When you use our contact form, we process the data you voluntarily provide (e.g. name, email address, phone number, company, message) in order to process and respond to your inquiry. We do not share this data with third parties, other than the technical service providers used to operate the website and deliver the form (see below).
Contact form and email delivery
Our contact form is processed on our own web infrastructure and delivered to office@hd-n.at through our grommunio mail environment. We use Cloudflare Turnstile to prevent abuse. Cloudflare may process your IP address, technical browser data and the result of the security check. The legal bases are Article 6(1)(b) GDPR for handling your request and Article 6(1)(f) GDPR for protecting the website from automated attacks.
Online appointment booking
When you book an appointment, we process your name, email address, company, message and selected time. Availability is checked in our grommunio CalDAV calendar. Once booked, a calendar event is created and we send you a calendar invitation and an individual grommunio Meet link by email. Processing is necessary for pre-contractual measures pursuant to Article 6(1)(b) GDPR. We do not use an external booking platform.
Central lead processing
Data from contact and appointment forms and results from the cybersecurity, AI and IT self-checks are transferred server-to-server to a lead-management system operated by us. The technical endpoint is https://update.paulinai.dev/api/v1/leads; your browser does not connect directly to this system and the access key remains on the web server.
Depending on the form, the data may include contact details, company, message, selected answers and topics, the result displayed by the check, language, page, consent status and version, submission time and a randomly generated case identifier. We use these data to receive, assign, handle and document enquiries centrally, prevent duplicate submissions and protect the interface. The legal bases are Article 6(1)(b) GDPR for requested meetings and pre-contractual measures and Article 6(1)(f) GDPR for secure and traceable handling. Where a form requests explicit consent, Article 6(1)(a) GDPR also applies.
The data are processed within infrastructure controlled by HDN. Technical hosting or operations providers receive access only where required and contractually safeguarded. Retention depends on processing status, evidential requirements and statutory retention obligations; the data are then deleted or anonymised.
Cookies, consent & hosting
The website stores your privacy choice in your browser’s local storage for 180 days. This storage is technically necessary so that your choice can be respected on later visits. You can change your decision at any time using the cookie icon at the bottom of the screen.
Server log files (e.g. IP address, browser type, time of access) are processed briefly as part of hosting for security and stability purposes.
Google Analytics
With your explicit consent, we use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics helps us understand how our website is used. Data processed may include pages viewed, technical device and browser information, approximate location data and interactions.
Google Analytics is loaded only after you consent to the “Statistics” category. Advertising and personalisation functions remain disabled. The legal basis is your consent pursuant to Article 6(1)(a) GDPR. You can withdraw this consent at any time with future effect through the cookie settings. When consent is withdrawn, we attempt to remove the cookies set by Google Analytics.
Further information is available in Google’s Privacy Policy.
Google Maps
We provide an interactive Google Maps map on the contact page. The map is loaded only after you consent to the “External media” category. When it loads, data such as your IP address and technical browser information may be transmitted to Google. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The legal basis is your consent pursuant to Article 6(1)(a) GDPR. You can withdraw your consent at any time through the cookie settings.
Live chat and support portal
The chat button connects you to our Zammad support portal at support.hd-n.at only after you expressly click it. The chat script is not loaded before that action. Starting a chat involves processing technically required connection data such as IP address, time and browser information as well as the messages you enter. The purpose is to handle your support or sales enquiry. The legal basis is Article 6(1)(b) GDPR where the communication concerns a contract or pre-contractual steps and otherwise Article 6(1)(f) GDPR based on our interest in direct customer communication.
Search-engine management and website verification
We may use Google Search Console and Bing Webmaster Tools to monitor discoverability, indexing and technical availability. Ownership is verified through static files or meta tags. Verification itself does not set cookies or load an analytics script in the browser. The portals primarily provide aggregated information about search queries, indexing and technical issues. Normal crawler requests are recorded in server logs like other requests. The legal basis is Article 6(1)(f) GDPR.
Self-checks, AI transparency and automated decisions
The cybersecurity, AI and IT self-checks on this website generate a non-binding initial assessment from the selected answers according to predefined rules. They do not make a decision producing legal or similarly significant effects and do not replace a professional assessment. The public website does not itself provide an AI chat. Where PaulinAI is deployed as an interactive AI system for a customer, the required notices, permissions, human approvals and logs form part of the deployment and operating concept. The specific assessment under the GDPR and EU AI Act depends on the purpose, data, model, risk class and configuration of the relevant project.
Photorealistic, AI-generated depictions of real people are visibly labelled as AI-generated directly at the image. This applies in particular to AI-generated depictions of Stefan Keller. Purely schematic illustrations, logos and clearly graphical process visualisations are not presented as real photography.
Your rights
Under the GDPR, you have the right at any time to access, rectify, erase, restrict the processing of, port, or object to the processing of your personal data. Please contact office@hd-n.at to exercise these rights.
You also have the right to lodge a complaint with the Austrian data protection authority (dsb.gv.at) if you believe the processing of your data violates the GDPR.
Retention period
We only store data submitted through the contact form or appointment booking for as long as necessary to process your inquiry, hold the appointment and meet statutory retention obligations.
Changes
We reserve the right to amend this privacy policy to reflect changes in the law or to our website and data processing practices.