1. Controller

21x GmbH
Siegersdorffweg 5
9400 Wolfsberg, Austria
Email: office@21x.at

This Privacy Policy explains which personal data are processed when you visit 21x.at, contact us or subscribe to the newsletter.

2. Website provision and server logs

The website and associated email services are hosted by united-domains GmbH, Gautinger Straße 10, 82319 Starnberg, Germany. When the website is accessed, technically necessary log data may be processed, including IP address, date and time, requested URL, referrer URL, browser and operating-system information, HTTP status code and transferred data volume.

Processing is necessary to provide a secure, stable and error-free website and is based on Article 6(1)(f) GDPR. Our legitimate interest is the secure and efficient operation of the website. Log data are retained only for as long as required for operation, troubleshooting and security; a security incident may require longer retention for evidentiary purposes.

Further information: united-domains privacy information.

3. Contact form and email

When you contact us by form or email, we process the information you provide – typically your name, company, email address, message and technical delivery information – in order to respond and to initiate or perform a business relationship.

The legal basis is Article 6(1)(b) GDPR where the request concerns pre-contractual measures or a contract, and otherwise Article 6(1)(f) GDPR based on our legitimate interest in responding to business enquiries. The form is operated with WPForms within our WordPress installation. Submissions are delivered by email through united-domains’ SMTP service; under the current WPForms Lite configuration, separate form entries are not stored in WordPress.

We retain communications for as long as needed to handle the enquiry, manage a subsequent business relationship or establish, exercise or defend legal claims. Statutory retention obligations remain unaffected.

4. Business contacts and project communications

For proposals, projects and collaborations, we process professional contact details, correspondence, contract and billing data and project-related information. Processing is based on Article 6(1)(b) GDPR for contracts and pre-contractual measures and on Article 6(1)(f) GDPR for the proper organisation and documentation of business relationships. Where statutory accounting and retention duties apply, processing is based on Article 6(1)(c) GDPR.

5. Cookies and consent management

We use technically necessary cookies and a consent-management service provided by CookieYes Limited, 3 Warren Yard, Warren Park, Wolverton Mill, Milton Keynes, MK12 5NW, United Kingdom. CookieYes records and implements your consent decision and may process technical data such as IP address, device and browser information, consent status and timestamps.

This processing is necessary to document consents and technically apply your choice. The legal bases are Article 6(1)(c) GDPR together with applicable cookie rules and Article 6(1)(f) GDPR. The European Commission has adopted an adequacy decision for transfers to the United Kingdom. You can change your choices at any time using the cookie-settings icon provided on the website.

Further information: CookieYes Privacy Policy.

6. Newsletter

If you expressly subscribe to our newsletter, we process your email address and, where provided, your name as well as subscription and delivery information. The legal basis is your consent under Article 6(1)(a) GDPR. You may withdraw your consent at any time with future effect by using the unsubscribe link in each message or emailing office@21x.at.

We use Mailchimp, a service of The Rocket Science Group LLC d/b/a Mailchimp and Intuit Inc., United States. Data may therefore be transferred to the United States. Mailchimp and Intuit state that they participate in the EU‑U.S. Data Privacy Framework; Standard Contractual Clauses may additionally apply. Further information: Intuit/Mailchimp Global Privacy Statement.

7. Analytics and advertising tracking

The redesigned 21x pages currently do not use Google Analytics, Meta Pixel or comparable advertising-tracking services. If additional analytics, media or marketing services are introduced, this policy will be updated before use and consent will be obtained where required.

8. Recipients and international transfers

Personal data are disclosed only to persons and service providers who require them for the purposes stated above, particularly hosting and email providers, IT support, professional advisers and – where newsletter consent has been given – Mailchimp. Processors are contractually bound under Article 28 GDPR where required. Transfers outside the European Economic Area take place only on the basis of an adequacy decision, appropriate safeguards under Article 46 GDPR or another lawful exception.

9. Your rights

Subject to the statutory requirements, you have rights of access, rectification, erasure, restriction, data portability and objection. You may withdraw consent at any time with future effect. To exercise your rights, email office@21x.at.

You also have the right to lodge a complaint with a data-protection authority. The competent authority is in particular the Austrian Data Protection Authority, Barichgasse 40–42, 1030 Vienna, Austria.

10. Data security and updates

We use appropriate technical and organisational measures to protect personal data against loss, manipulation and unauthorised access. The website is transmitted over encrypted HTTPS connections. We update this policy if the legal framework, processing activities or services used change materially.