Privacy Policy

Last update: 17.10.2025

Note: “Kwapso” is a brand of Digidock digital agency GmbH. In this privacy policy, “we”/“us” refers to Digidock Digitalagentur GmbH.

1. Responsible person & contact

Digidock Digitalagentur GmbH (brand: Kwapso)
Liselotte Schmidinger Strasse 2/14, A-4600 Wels, Austria
Authorized to represent: Alexander Stadlmair
Email: office@kwapso.com
Impressum: https://www.kwapso.com/impressum

2. Scope & legal basis

This statement applies to our website and the online forms provided via it. We process personal data exclusively on the basis of GDPR and the TKG 2021. Legal bases at a glance:

• Art. 6 para. 1 lit. b GDPR (contract/initiation) — e.g. for contact inquiries, offer requests.
• Art. 6 para. 1 lit. f DSGVO (legitimate interest) — e.g. operation/security of the website, misuse prevention, web performance.
• Art. 6 para. 1 lit. a GDPR (consent) — e.g. for unnecessary cookies/tracking, newsletters.
• Art. 6 para. 1 lit. c GDPR (legal obligation) — e.g. storage obligations.

3. Categories of data & purposes

Depending on the interaction, we process in particular:

• Device/usage data: IP address, time stamp, user agent, browser/OS, referrer, URLs accessed, cookie IDs.
  Purposes: Operation/security (logs), fraud detection, performance optimization, statistics (if consent free/based).
• Communication/form data: Name, company, function, email, telephone number, message/content, application documents (if provided).
  Purposes: Processing of requests/applications, preparation of offers, scheduling, follow-up.
• Newsletter data (optional): Email, consent status, opt‑in/opt‑out times.
  Purposes: Sending information/news, proof of consent.

4. Hosting, CDN & Web Builder (Webflow)

We use Webflow (Webflow, Inc., USA) as a website platform/hosting and for online forms. Technical usage data (see above) is processed in the process. Third country transfer: USA. Protection mechanisms: Use of EU Standard Contractual Clauses (SCC) from the provider and additional technical/organizational measures (encryption, minimization). See the Webflow privacy statement for details.

5. Server logs (log files)

When you visit the website, accesses are received in Server logs automatically logged (IP address, date/time, requested resources, status codes, browser/OS). legal basis: Art. 6 para. 1 lit. f DSGVO (operation/security). Storage period: usually 90 days, longer only for security incidents.

6. Cookies & consent management

We use technically necessary cookies to provide basic features. Not necessary (e.g. for statistics/marketing) we use only with your consent about our Consent banner (CMP).

• You can give your consent at any time via Cookie settings cancel/change on the website.
• Browser settings allow cookies to be blocked/deleted; the functionality of the website may be limited as a result.

7. Analytics, Statistics & Marketing (optional)

If activated in our CMP and by you consents:

• Web analysis/statistics (e.g. page views, interactions) to optimize content and performance.
• Marketing/Retargeting (e.g. Google Ads, Facebook/Meta, Bing) to display relevant content/ads.
  legal basis: Art. 6 para. 1 lit. a GDPR in conjunction with Section 165 TKG 2021.
  Objection/Withdrawal: via Cookie settings, or provider settings (e.g. Google/Meta).
  Note: No marketing cookies are set without consent.

8. Contact & application forms, email contact

If you contact us via forms or by email, we process your details to process the request and for follow-up questions.

• legal basis: Art. 6 para. 1 lit. b DSGVO (contract/initiation) or lit. f (follow-up, CRM documentation).
• Recipient: internal specialist agencies; Email editing via Google Workspace (Order processing, possibly data locations outside the EEA with SCC).
• Storage period: Inquiries usually 12 months; application documents 6 months (AT Equal Treatment Act), longer storage only with consent.

9. Newsletter (if offered)

To send you the newsletter, we process your email address based on your consent (double opt‑in). You can withdraw your consent at any time (unsubscribe link in every email). We log opt‑in/opt‑out for the obligation to provide evidence. Storage period: until revocation, then blacklist (“suppression list”) to avoid further mailings.

10. Recipients & third-country transfers

Depending on the purpose, we provide data Service provider (contract processor) further, e.g. hosting/Webflow, e‑mail/Google Workspace, if applicable analysis/marketing provider (only with consent). Transfers to third countries (e.g. USA) are made on the basis of SCC and additional measures. A list of the service providers used is available on request.

11. Storage period & deletion

We only store data as long as is necessary for the purposes or as long as there are legal obligations. Typical deadlines:

• Server logs: 90 days
• Contact requests: 12 months
• Applications: 6 months (longer only with consent)
• Contract/billing data: accordingly legal storage periods
• Newsletter: until revocation (then blacklist)

12. Safety

We meet suitable technical and organizational measures (including access control, encryption, role/rights concepts, logging, need‑to‑know, regular review) to protect your data from loss, misuse, and unauthorized access.

13. Your rights (rights of data subjects)

You have the right to information, rectification, erasure, constraint, data portability and contradiction against processing based on Art. 6 para. 1 lit. f. When processing on consent is based, can you do this Revoked anytime (with effect for the future).
Please send inquiries to office@kwapso.com. For security reasons, we may require proof of identity.

14. Right to lodge a complaint

You have the right to lodge a complaint with a supervisory authority. Responsible in Austria is Austrian Data Protection Authority (DSB), Barichgasse 40-42, 1030 Vienna, Austria (www.dsb.gv.at).

15. “Do Not Track” & Global Privacy Control

Our system is currently responding not consistently on “Do Not Track” /GPC signals from different browsers. Decisive are your consents in Consent banner, which you can access at any time via the Cookie settings be able to change.

16. External links, social media, photo credits

External links lead to third-party sites for whose content/data protection we are not responsible. Brand names are for informational purposes only. Unless otherwise stated in the photo credit, media originate from us, were licensed to us or rights were acquired.

17. Changes to this statement

We adapt this statement as necessary (for example, in the event of new services or legal changes). The latest version is available on this page; See date above.

Brief information about cookie settings

You can change your preferences at any time via the appropriate link/switch “Cookie settings” customize on our website. You can also find details about categories/providers there.

Salvatory clause

Should one of the points listed in the imprint/privacy policy be declared invalid, the remaining points remain valid. Invalid points will be cleaned/deleted/replaced with other information in due time.