DATAPROTECTION

1. Data Controller

GMAPT Prozessfinanzierung & Transporte GmbH, Amperegasse 10/114/6, 1210 Vienna, Austria. E-mail: office@hypercar-transport.at

2. Processing of Inquiries

When you contact us via the inquiry form, by e-mail, or by telephone, we process the data you provide (e.g., name, contact details, vehicle and route information) exclusively to handle your inquiry and to prepare an offer.

Legal Basis

Art. 6 (1) (b) GDPR (pre-contractual measures) and Art. 6 (1) (f) GDPR (legitimate interest in responding to inquiries).

3. Retention Period

We store your data only for as long as necessary for the respective purpose, or as long as legal retention obligations (such as tax and commercial law) exist.

4. Recipients

Your data will only be passed on to third parties if this is necessary for contract processing (e.g., to executing drivers, insurers) or if we are legally obliged to do so.

5. Your Rights

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR)

You also have the right to lodge a complaint with the Austrian Data Protection Authority (dsb.gv.at).

6. Server Log Files & Hosting

When you access this website, the hosting provider may automatically process access data (e.g., IP address, date/time, page accessed) in server log files. The legal basis is Art. 6 (1) (f) GDPR.

7. Cookies & local storage

This website does not use tracking or marketing cookies. We only store technically necessary information in your browser's local storage: your selected language (DE/EN) and the acknowledgement of this notice. This data never leaves your device and is not transmitted to us. Legal basis: Section 165(3) TKG 2021 (technically necessary) and Art. 6(1)(f) GDPR. You can clear local storage at any time in your browser settings.

8. Anonymous audience measurement

To improve our services we count page views completely anonymously and without cookies. We only record the page visited, the language and – if available – the referring website. No IP addresses are stored, no profiles are created and no data is shared with third parties. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in non-personal statistics).

9. Spam protection (Cloudflare Turnstile)

To protect our forms from automated requests, we use Cloudflare Turnstile (Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA). Technical data such as IP address, browser information and interaction signals are transmitted to Cloudflare and evaluated for misuse detection. Turnstile does not use cookies for advertising purposes. Legal basis: Art. 6 para. 1 lit. f GDPR (security of our systems). The transfer to third countries takes place on the basis of the EU standard contractual clauses. Further information: cloudflare.com/privacypolicy.

10. File attachments in the request form

Photos or documents you optionally upload are stored encrypted in private storage and used solely to process your request. Access is internal only, via time-limited links. Files are deleted once the request is completed, at the latest after statutory retention periods expire.

11. Email delivery

To send confirmations of receipt and internal notifications we use an email delivery provider that processes the data on our instructions under a data processing agreement (Art. 28 GDPR).

12. No automated decision-making

There is no automated decision-making, including profiling, within the meaning of Art. 22 GDPR.