1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Larissa Dorrer
Sachsendorf 24
3474 Sachsendorf
Austria

Email: gut@ulmenbruendl.at

For any data protection–related inquiries, you may contact me at any time using the email address listed above.

There is no legal obligation to appoint a data protection officer; therefore, no data protection officer has been designated.

2. Scope of Application

This privacy policy applies to the visit and use of this website, including contacting us via the communication options provided (contact form, email, WhatsApp).

For the use of specific services, the respective privacy notices apply additionally for:

• Ulmenbründl Compass (digital product)

• Ulmenbründl Connected (online accompaniment program)

3. Hosting and Server Log Files

This website is hosted by Hostinger International Ltd.,
61 Lordou Vironos Street, 6023 Larnaca, Cyprus.

Hostinger processes personal data (in particular server log files) on behalf of the website operator in order to ensure the technical operation, security, and stability of the website.

When visiting the website, the following information is processed automatically:

• IP address

• date and time of access

• accessed pages or files

• browser type and operating system used

These data are technically necessary to provide the website, ensure system stability, and detect security incidents.
These data are not merged with other data sources.

A data processing agreement pursuant to Art. 28 GDPR has been concluded with Hostinger.

Legal basis:
Art. 6(1)(f) GDPR (legitimate interest in the secure, stable, and efficient operation of the website).

4. Contact

4.1 Contact Form

If you use the contact form provided on the website, the personal data you enter (e.g. name, email address, message, and any additional voluntary information) will be processed to handle your inquiry.

Processing is carried out exclusively for the purpose of contacting you and responding to your request.

Legal basis:
Art. 6(1)(b) GDPR (pre-contractual measures)
or Art. 6(1)(f) GDPR (legitimate interest in responding to inquiries).

4.2 Contact via Email or WhatsApp

If you contact us via email or WhatsApp, the personal data you transmit will be processed to handle your inquiry.

When using WhatsApp, personal data may be processed by WhatsApp for technical reasons. WhatsApp is operated by WhatsApp Ireland Limited and acts as an independent controller within the meaning of the GDPR.

The use of WhatsApp is voluntary.
The privacy policy of WhatsApp applies additionally.

5. Cookies

This website does not use cookies for analysis, tracking, or marketing purposes.
Technically necessary cookies may be used insofar as this is required for the operation of the website or the processing of orders.

Cookies are small text files that may be stored on the user’s device.

The use of technically necessary cookies is based on
Art. 6(1)(f) GDPR (legitimate interest in a functional and user-friendly website operation).

If cookies that are not technically necessary (e.g. for analysis or marketing purposes) are used in the future, this will only occur after the user has given prior explicit consent.

6. Tracking and Analysis

No tracking or analysis tools that require user consent are deliberately used on this website.

If such services are introduced in the future, this will only occur after prior user consent and with a corresponding update of this privacy policy.

7. Fonts

If fonts are used on this website, they are integrated exclusively in a local manner.

No connection to external font provider servers and no associated transfer of personal data to third parties takes place.

8. Disclosure of Data

Personal data are not disclosed to third parties unless:

• this is necessary for the technical provision of the website (e.g. hosting), or

• there is a legal obligation to do so.

9. Storage and Deletion

Personal data are stored only for as long as necessary for the respective purposes or as required by statutory retention obligations.

After the purpose of processing no longer applies, the data are deleted or anonymized.

10. Rights of Data Subjects

Under the GDPR, you have the right at any time to:

• obtain information about the personal data processed

• request rectification of inaccurate or incomplete data

• request deletion of stored data (“right to be forgotten”), insofar as no statutory retention obligations apply

• request restriction of processing

• data portability

• object to the processing of personal data

The right to object applies insofar as processing is not strictly necessary for contract performance or required by law.

To exercise these rights, you may contact us at any time using the email address provided above.

In addition, you have the right to lodge a complaint with the competent supervisory authority.
In Austria, this is the Austrian Data Protection Authority.

11. Amendments

This privacy policy may be amended due to legal, technical, or content-related changes.
The version published on this website at the time of access shall apply.