5.0 from 120 Google reviews (opens Google Maps)
office@bagger-linz.at +43 699 145 771 32DeutschDE
Request a quote

Privacy policy

This is an English translation for your convenience. The German version (Datenschutzerklärung) is legally binding.

1. General information

We are pleased about your interest in the data protection measures on our website. Protecting your privacy is important to us. Below, we inform you in detail about how we handle your data.

2. Scope

This privacy policy applies to the whole of this website, including all subpages. It applies to all personal data collected through the use of our services. Personal data means any data by which you can be personally identified.

3. Legal bases for data processing

We process your personal data on the basis of the following legal bases:

  • Consent (Art. 6(1)(a) GDPR): Where you have given us your consent to the processing of your data for specific purposes.
  • Performance of a contract (Art. 6(1)(b) GDPR): To perform a contract or to take steps, at your request, prior to entering into a contract.
  • Legal obligation (Art. 6(1)(c) GDPR): Where we are subject to a legal obligation, e.g. to retain invoices.
  • Legitimate interest (Art. 6(1)(f) GDPR): Where processing is necessary for the purposes of our legitimate interests or those of a third party, unless your interests or fundamental rights and freedoms override them.

4. Controller

The controller responsible for data processing on this website is:

  • Hannes Reslhuber
  • Reslhauns GmbH
  • Panhalmweg 1
    A-4491 Niederneukirchen
  • Email: reslhauns@gmx.at
  • Phone: +43 699 145 771 32

5. Storage period and erasure of personal data

We store your personal data only for as long as is necessary to fulfil the purposes concerned or as required by statutory retention periods. Once the purpose of processing no longer applies or the statutory periods have expired, the data will be deleted or blocked, provided that they are no longer needed for other purposes.

6. Your rights

You have the right:

  • Access: To request confirmation as to whether personal data concerning you are being processed. If so, you have the right of access to that data and to further information under Art. 15 GDPR.
  • Rectification: To request the rectification of inaccurate personal data or the completion of incomplete personal data (Art. 16 GDPR).
  • Erasure: To request the erasure of your personal data stored by us, unless the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise or defence of legal claims (Art. 17 GDPR).
  • Restriction of processing: To request the restriction of the processing of your personal data (Art. 18 GDPR).
  • Data portability: To receive your personal data in a structured, commonly used and machine-readable format or to request its transmission to another controller (Art. 20 GDPR).
  • Objection: To object, on grounds relating to your particular situation, at any time to the processing of personal data concerning you (Art. 21 GDPR).
  • Complaint: To lodge a complaint with a supervisory authority (Art. 77 GDPR).

7. Security of data processing and encryption

To protect your personal data, we use comprehensive technical and organisational measures. These measures serve to prevent unauthorised access to, loss or misuse of your data. This includes in particular the encryption and pseudonymisation of data in order to ensure its security.

TLS encryption with HTTPS

We use the TLS (Transport Layer Security) encryption protocol for secure data transmission over the internet. With HTTPS (Hypertext Transfer Protocol Secure), we ensure that all data between your browser and our web server is transmitted in encrypted form. This technology protects your data from access by third parties.

You can recognise a secure connection by the padlock symbol in your browser’s address bar and by the URL beginning with “https”. This encryption meets the requirements of the GDPR and ensures that your data is protected during transmission.

8. Communication and contacting us

If you contact us by telephone, email or online form, your personal data will be processed in order to handle your enquiry. This data generally includes:

  • Name
  • Email address
  • Telephone number
  • Content of the message

This data is used exclusively to handle your enquiry and to better understand your request. The legal basis is Art. 6(1)(b) GDPR where your enquiry is aimed at a contract or pre-contractual measures and, otherwise, our legitimate interest in responding to enquiries (Art. 6(1)(f) GDPR). The data is deleted as soon as it is no longer required for the purpose of the communication and no statutory retention obligations apply.

Contact form

If you use our contact form, we process the details you enter there (email address, telephone number, first name, surname and your message), as well as the page from which you submitted the form and the time of the enquiry. Your details are transmitted in encrypted form (HTTPS) to our hosting provider Cloudflare and delivered from there by email to our mailbox (see section 11). So that no enquiry is lost if email delivery temporarily fails, a copy of your details is stored in a database that Cloudflare operates exclusively in the European Union. This copy is deleted automatically after 30 days.

To protect against automated spam submissions, the form contains a field that is invisible to humans and a timing check; in addition, we limit the number of submissions per IP address. Your IP address is used for this purpose only briefly and is not stored together with your enquiry. No cookies are set and no third-party services are embedded for this purpose. The legal basis is our legitimate interest in a secure operation of the form that is free from abuse (Art. 6(1)(f) GDPR).

9. Processors

We use external service providers (processors) who process data on our behalf. We have concluded contracts with these service providers that ensure that your data is processed in accordance with the applicable data protection provisions. These service providers include, among others:

  • IT service providers (technical support for the website)
  • Hosting provider, email delivery for form enquiries and visitor statistics (Cloudflare, see sections 11 and 13)

10. Use of cookies

Our website does not use cookies and does not otherwise store any information on your device (for example in Local Storage) – the only exception is the entry “wh-aus” if you object to the visitor statistics (see section 13). In particular, no cookies are used for analysis, statistics or advertising purposes.

Only if our hosting provider Cloudflare classes a request as a possible attack and displays a security check can Cloudflare set a technically necessary cookie (e.g. “cf_clearance”) that stores the passing of the check for a short time. The legal basis is Section 165(3) of the Austrian Telecommunications Act 2021 (Telekommunikationsgesetz 2021, TKG 2021) in conjunction with Art. 6(1)(f) GDPR (protecting the website against misuse).

11. Web hosting

Our website is operated by professional hosting service providers in order to ensure reliable and secure storage of the data. When you visit our website, certain information is automatically collected and stored in order to ensure proper operation.

What is web hosting?

Web hosting means that a website is stored on special computers called servers. When you visit a website, your browser connects to one of these servers in order to display the content of the page. These servers are operated by hosting providers, who take care of the technical infrastructure and security.

Hosting with Cloudflare

Our website is delivered via the Cloudflare network: Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. The pages are stored as static files with Cloudflare (Cloudflare Workers) and are transmitted to your browser from a data centre near you. In day-to-day operation, the website uses no database, no user accounts and no server-side scripts; the only exceptions are the contact form (see section 8) and the visitor statistics (see section 13). In addition, Cloudflare protects our website against attacks and overload.

Why do we use Cloudflare?

Cloudflare enables a fast, fail-safe delivery of our website that is protected against attacks. You can find further information in Cloudflare’s privacy policy.

Processing on our behalf and data transfers to the USA

Cloudflare processes the data on our behalf on the basis of a data processing agreement pursuant to Art. 28 GDPR (Cloudflare Data Processing Addendum). As Cloudflare is based in the USA, personal data may also be processed there. Cloudflare is certified under the EU-US Data Privacy Framework, for which the European Commission has adopted an adequacy decision (Art. 45 GDPR); in addition, Cloudflare has agreed the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR). Cloudflare operates the database for the contact form (section 8) exclusively in the European Union.

What data is processed?

When you access our website, technically necessary connection data is processed automatically:
– The full internet address (URL) of the page accessed
– Browser type and version
– Operating system used
– Referrer URL (the page visited previously)
– IP address of the accessing device
– Date and time of the request

Why do we process this data?

The data collected is necessary in order to:

  1. Deliver the website to your browser
  2. Ensure the security and stability of the website and ward off attacks
  3. Be able to take appropriate measures in the event of unlawful conduct

We do not evaluate this data ourselves and do not create usage statistics or user profiles from it; our own cookie-free visitor statistics are described in section 13.

Storage period

Cloudflare stores this data only for a short time for the stated purposes and then deletes it; details can be found in Cloudflare’s privacy policy. This data is not passed on to third parties unless there is a legal obligation or a legitimate interest, for example in the event of criminal prosecution.

Legal basis

This data is processed on the basis of Art. 6(1)(f) GDPR. Our legitimate interest lies in providing our website in a secure, fast and reliable manner.

Sending form enquiries by email

Enquiries from our contact form are delivered to our email mailbox via Cloudflare’s email service (Cloudflare Email Service). The sender is a technical address of our web service provider (website@formular.webhaus.at). The email address you have given is set as the reply-to address so that we can reply to you directly. The data processed in this context comprises your details from the form (see section 8), the email addresses involved, and the date, time and technical identifiers of the message, which are logged for delivery and error handling. The emails are transmitted in encrypted form (TLS) to the extent that the receiving mail server supports this. The legal basis is Art. 6(1)(b) GDPR or our legitimate interest in the reliable delivery of enquiries (Art. 6(1)(f) GDPR). We delete the email in our mailbox as soon as it is no longer required to handle your enquiry and no statutory retention obligations apply.

12. Design of the website

Google Fonts privacy policy

Summary of the Google Fonts privacy policy

For more detailed information, please read the privacy policy below.

Legal basis: Art. 6(1)(f) GDPR (legitimate interests)

What are Google Fonts?

Google Fonts is a collection of fonts provided by Google LLC. For users in Europe, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is responsible. Using Google Fonts requires no registration or password entry, and no cookies are stored in the user’s browser. Normally, the files (CSS and fonts) are requested via the Google domains fonts.googleapis.com and fonts.gstatic.com.

Use of locally stored Google Fonts

To further improve the protection of your data, we have decided to store the Google Fonts locally on our servers. This means that no connection to Google’s servers is established and no data is transmitted to Google when you visit our website. By storing the fonts locally, we ensure that your IP address and other technical information are not passed on to external servers.

Why do we use Google Fonts on our website?

The use of Google Fonts improves the visual design and user-friendliness of our website. These fonts are optimised for the web, which shortens loading times and keeps the display consistent and appealing across different devices and browsers. By storing the fonts locally on our server, we ensure that these benefits can be used without your data being transmitted to Google.

What data is stored and why?

When Google Fonts are stored locally, no data is transmitted to Google. All font files are loaded directly from our server. No personal data such as IP addresses, browser information or other usage data is sent to external servers.

How long and where is the data stored?

The font files are stored permanently on our server in order to ensure continuous availability and fast loading times for our website. There is no time-limited storage as with external requests to Google’s servers.

How can you delete your data or prevent data storage?

As no data is transmitted to Google, you do not need to take any additional measures to prevent your data from being stored. Your personal data remains protected because the fonts are loaded directly from our server.

Legal basis

The use of locally stored Google Fonts is based on our legitimate interest in an appealing and efficient design of our website pursuant to Art. 6(1)(f) GDPR. By storing the fonts locally, we ensure that your data remains protected and that no external requests are sent to Google’s servers.

13. Visitor statistics

To find out how many people visit our website and which content is in demand, we use our own cookie-free visitor statistics (“webhaus-stats”). It is operated for us by our web service provider and runs with our hosting provider Cloudflare (see section 11). No third-party analytics services are embedded and no cookies are set.

What data is processed?

When a page is accessed, a small script on our website reports the following to our server: the page accessed (without parameters), the address of the page you came from (referrer), and, where applicable, a campaign identifier from the link (utm_source). Clicks on telephone numbers and email addresses are also counted. In order to count repeated visits on the same day only once as one visitor, a non-reversible short value (hash) is formed from your IP address and your browser’s identifier (User-Agent) together with a random value that changes daily. The IP address and the browser identifier themselves are not stored; only the device type, browser and operating system are derived from the browser identifier, and only the country from the IP address.

How long is the data stored?

The short value and the daily value are deleted at the latest at the end of the day in question; after that, no entry can be attributed to a person any more. Only aggregated figures per day (such as the number of visitors and page views, origin, device type, country) are stored permanently, which do not allow any conclusions to be drawn about individual persons. The data is held in a Cloudflare database exclusively within the European Union and is not passed on to third parties.

Legal basis and objection

The legal basis is our legitimate interest in data-minimising audience measurement and in improving our website (Art. 6(1)(f) GDPR). If your browser sends the “Do Not Track” or “Global Privacy Control” signal, no counting takes place. You can also object to the counting on this device at any time by visiting this link. In doing so, only the entry “wh-aus” is placed in your browser’s local storage (Local Storage), which serves exclusively this purpose (Section 165(3) TKG 2021). With this link you can withdraw the objection again.

14. Austrian Data Protection Authority (Datenschutzbehörde)

Address: Barichgasse 40-42, 1030 Wien
Phone: +43 1 52 152-0
Email: dsb@dsb.gv.at
Website: www.dsb.gv.at

Last updated: October 2026