The protection of your personal data is of particular importance to us. We therefore process your data exclusively on the basis of the statutory provisions (GDPR, TKG 2021). In this privacy policy, we inform you about the most important aspects of data processing within the scope of our website.

Controller
Responsible for data processing:
GM-Holding GmbH
Achenweg 22, A-6370 Kitzbühel
office@mach-group.at

Collection and Processing of Personal Data
We process personal data only if this is legally permitted or if you consent to the data processing.

Access Data / Server Log Files
When visiting this website, information of a general nature is automatically collected and stored in so-called server log files. This includes in particular:

• IP address of the accessing device
• Date and time of access
• Accessed pages
• Browser and operating system used
• Referrer URL

This data is not merged with other data sources and serves exclusively to:

• Ensure a smooth connection setup
• System security and stability
• Technical optimization of the website

Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest)

Hosting
This website is hosted by an external hosting provider. Personal data collected on this website is processed on the servers of the hosting provider.
Purpose: Ensuring secure, fast, and efficient operation of the website
Legal basis: Art. 6 para. 1 lit. f GDPR
A data processing agreement pursuant to Art. 28 GDPR has been concluded with the hosting provider.

Cookies
Our website uses cookies to provide certain functions and to make the use more user-friendly. Cookies are small text files that are stored on your device. They do not cause any damage and do not contain viruses.
We use: technically necessary cookies required for the operation of the website
Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest in technically error-free operation)
You can configure your browser to inform you about the setting of cookies and to allow cookies only in individual cases. If cookies are deactivated, the functionality of the website may be limited.

Contact Form
If you send us inquiries via the contact form, your details from the form, including the contact data you provide there, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. This data will not be passed on without your consent.
Processed data may include:

• Name
• Email address
• Phone number (if provided)
• Message content

Legal basis: Art. 6 para. 1 lit. b GDPR (contract or pre-contractual measures)

Storage Duration
Personal data is stored only as long as necessary to fulfill the respective purposes or as long as statutory retention periods apply.

Your Rights
Under the GDPR, you are generally entitled to the following rights:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to withdraw granted consent and right to object to processing (Art. 21 GDPR)

If you believe that the processing of your personal data violates data protection law, you have the right to lodge a complaint with the supervisory authority.

Supervisory Authority
Austrian Data Protection Authority
Barichgasse 40–42
1030 Vienna
www.dsb.gv.at

Data Security
We use appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, loss, destruction, or unauthorized access.

Changes to this Privacy Policy
We reserve the right to amend this privacy policy if necessary, in particular in the event of legal changes or extensions of website functions.