Last updated: 6 October 2026
This privacy policy explains which personal data is processed when you visit controlrooms.com, for what purpose, on what legal basis and for how long. It reflects the actual technical setup of this website.
1. Controller
controlrooms GmbH
Bründlweg 17, 3140 Pottenbrunn, Austria
Phone: +43 2742 43570
Email: office@controlrooms.at
Managing directors: Erich Strasser, Ing. Markus Miksch
For any data protection question or to exercise your rights, please contact office@controlrooms.at.
2. Overview
- Without consent we only process what is needed to run and secure the website and to answer your enquiries: server logs, your cookie choice, contact requests.
- Only with your consent do we load YouTube videos. You can change or withdraw your consent at any time via “Cookie settings”.
- We do not sell data and do not make automated decisions within the meaning of Art. 22 GDPR.
3. Hosting, delivery and security
Hosting: This website is hosted on GoDaddy Managed WordPress (GoDaddy.com, LLC, USA). GoDaddy delivers the site through its own content delivery and security layer operated by Cloudflare, Inc., USA. When you open a page, your IP address, date and time, the requested address, the referring page, browser and operating system details and the status code are processed (server log files). Purpose: delivering the website, troubleshooting, defending against attacks. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure and reliable operation). The Cloudflare cookie “__cf_bm” (1 day) is used to tell people from bots.
Hosting statistics: GoDaddy adds scripts from img1.wsimg.com to the website to measure loading performance and traffic of the hosting service. Your IP address and technical data about the page view are transmitted to GoDaddy in the process. Legal basis: Art. 6(1)(f) GDPR.
Fonts and icons: This website loads fonts from Google Fonts (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) and icons (Font Awesome) from the content delivery network maxcdn.bootstrapcdn.com. Your IP address is transmitted to these providers; a transfer to the USA cannot be ruled out. Legal basis: Art. 6(1)(f) GDPR (consistent, legible presentation).
4. Cookies and consent management
We use Cookiebot by Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark, to manage your consent. Cookiebot stores your choice in the cookie “CookieConsent” (12 months) and logs your consent with a truncated IP address, time stamp and selection as proof. Legal basis: Art. 6(1)(c) GDPR (duty to demonstrate consent, Art. 7(1) GDPR) in conjunction with § 165(3) of the Austrian Telecommunications Act 2021 (TKG 2021).
Strictly necessary cookies are set without consent. All other cookies and similar technologies are only used after you have given your consent (Art. 6(1)(a) GDPR). The complete, automatically updated list of cookies with purpose and duration is available in the cookie settings.
5. Contact
If you contact us via the contact form, by email or by phone, we process the information you provide (e.g. name, company, email address, phone number, your message) to answer your enquiry. The contact form is processed with the WordPress plugin WPForms on our own web server. Form messages and emails are delivered and stored via Google Workspace (Google Ireland Limited, Dublin, Ireland); Google acts as our processor, and a transfer to the USA cannot be ruled out.
Legal basis: Art. 6(1)(b) GDPR if your enquiry concerns a contract or quotation, otherwise Art. 6(1)(f) GDPR (answering enquiries). We delete enquiries once they have been dealt with, unless statutory retention obligations apply; if a business transaction results, the Austrian retention periods apply (generally seven years, § 212 UGB, § 132 BAO).
6. Embedded videos (only with consent)
We embed videos from YouTube (Google Ireland Limited), mostly in privacy-enhanced mode (youtube-nocookie.com). Only when the video is loaded or played are your IP address and device data transmitted to YouTube, and YouTube may set cookies or local storage entries (e.g. “VISITOR_INFO1_LIVE”, “YSC”). Legal basis: your consent (Art. 6(1)(a) GDPR). Without consent the videos are not loaded. Google may transfer data to the USA on the basis of the European Commission’s adequacy decision for the EU-US Data Privacy Framework, under which Google is certified, supplemented by standard contractual clauses. Google privacy policy: policies.google.com/privacy.
7. Our social media profiles
We maintain profiles on LinkedIn, YouTube and Facebook. The links on this website are plain links; data is only transmitted to the network once you click one. The platform operators are responsible for processing on their platforms; for Facebook page insights we are jointly responsible with Meta Platforms Ireland Limited (Art. 26 GDPR).
8. Use of artificial intelligence on this website
- Images and videos: Some featured images and videos were created in whole or in part with AI tools. They show visualisations, not footage of real projects, and are labelled as AI-generated on the image or video itself.
- Texts: We use AI tools to assist with writing and translating texts. All texts are reviewed by us and published under our editorial responsibility.
No personal data of website visitors is processed for this purpose.
9. Transfers to third countries
Some of the providers named above are based in the USA or may transfer data there (GoDaddy, Cloudflare, Google). We only transfer data where an adequacy decision of the European Commission exists (for the USA: the EU-US Data Privacy Framework, insofar as the recipient is certified) or appropriate safeguards are in place, in particular standard contractual clauses under Art. 46(2)(c) GDPR.
10. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). You may withdraw any consent at any time with effect for the future (Art. 7(3)). Please write to office@controlrooms.at.
If you believe that the processing of your data infringes data protection law, you may lodge a complaint with a supervisory authority. In Austria this is the Datenschutzbehörde, Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at; you may also contact the authority in your EU country of residence.
11. Changes
We update this privacy policy whenever the services we use or the legal situation change. The version published here applies.