Privacy Policy

Controller

„MAX Solutions" GmbH, Rosenbursenstraße 2/21, 1010 Vienna · Email: office@max-solutions.eu · Phone: +43 1 512 50 09

What this website does (not) do

• No cookies, no visitor identifiers on your device. The audience measurement (see below) stores nothing in your browser.
• Fonts are loaded locally from our own server — no data is transmitted to external font services.
• No embedded map or video services.

Server logs

When you access the website, our hosting provider (world4you Internet Services GmbH, Austria) processes technically necessary access data (IP address, time, page accessed) in server log files. The same applies to the server we rent in Frankfurt am Main on which the audience measurement runs (provider: Hostinger International Ltd., 61 Lordou Vironos str., 6023 Larnaca, Cyprus; data centre in Germany). The legal basis is our legitimate interest in the secure operation of the website (Art. 6(1)(f) GDPR).

Audience measurement

To learn which pages and language versions are used and through which channels visitors find us, we use two audience measurement tools. We operate both ourselves on our own server in Frankfurt am Main (Germany); no external analytics service is involved. Neither sets cookies or stores an identifier on your device:

• Plausible Community Edition, operated by us on our own server in Frankfurt am Main (Germany) at stats.max-solutions.eu.
• Litlyx (open-source software), operated by us at litlyx.max-solutions.eu. We serve the measurement script from our own server; no content delivery network is contacted.

The data transmitted are the page visited (path without form contents), the referring page, browser and device type (user agent), the language of the page and campaign tags (utm parameters) if you reach us through such a link; the country of origin is additionally derived from the IP address. In addition, we count, without any personal reference, whether an enquiry was submitted successfully through the form, whether an appointment-booking, download, e-mail or telephone link was clicked, and on which page. Names, e-mail addresses, telephone numbers and form contents are not transmitted. Your IP address is sent for technical reasons but is not stored: both tools process it only transiently into a daily-changing, non-reversible check value used to distinguish visits.

For Litlyx, we transmit only approved public page paths and predefined campaign tags. Referring pages are reduced to known source channels; other sources are grouped together. Full referrer URLs, URL fragments and freely entered parameter values are not transmitted. An enquiry is counted only when first accepted by the server; intercepted spam and identical retries do not count again. A booking click is not a confirmed appointment.

The legal basis is our legitimate interest in a data-minimising evaluation of how our website is used (Art. 6(1)(f) GDPR). The measurement sets no cookies and stores no visitor identifier on your device. A local setting you choose to opt out of measurement is read solely to respect that objection. The measurement data of both tools are stored exclusively on our own server in Germany; the server provider Hostinger acts as a processor under Art. 28 GDPR. You may object to the measurement at any time (Art. 21 GDPR), for example by using a tracking blocker in your browser; the website remains fully usable.

Contacting us

When you submit the enquiry form, the information you enter is transmitted securely through our web server to MAXsolutions. We process contact details (name, email address, telephone number), information about your project (nationality, country of residence, type of project, capital range, time horizon) and your message in order to handle the enquiry, ask follow-up questions by email or telephone and send an automatic acknowledgement. The legal bases are steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR) and our legitimate interest in a secure and functional enquiry process (Art. 6(1)(f) GDPR). The notification to us and the acknowledgement to you are sent through the email service provider Brevo (Sendinblue SAS, 17 rue Salneuve, 75017 Paris, France; processing within the EU) as a processor under Art. 28 GDPR; if that service is unavailable, the mail is sent through the mail server of our web hosting. So that no enquiry is lost through a transmission error, the form server stores every accepted enquiry together with its delivery status in an access-protected area outside the public web directory; this backup copy is deleted automatically after 90 days. In addition, we store your contact details and your project as a contact in our Brevo account so that enquiries can be tracked and handled; you will not receive a newsletter as a result, which would require separate consent. The enquiry and subsequent correspondence are processed in our email systems and deleted when no longer required for these purposes and when no statutory retention obligation applies. Recipients are limited to authorised internal personnel and our processors for hosting and email operations; the website is hosted by World4You. To prevent abusive repeated submissions, the form server processes the network address solely as a cryptographic value that changes daily. Only this value, timestamps and a counter are stored; the form does not store the plain-text IP address. Rejected submission attempts are counted without any personal reference, with time and reason only. The active blocking window is 15 minutes; inactive entries are no longer evaluated and are regularly purged. Please do not submit sensitive documents through the form.

So that only people and no automated programs can submit the form, your browser solves a small computational puzzle before submission, which our own server sets and verifies (a procedure following the open ALTCHA standard). No cookies are set, no identifiers are stored and no data is transmitted to third parties; our server merely remembers a hash of the solved puzzle for 15 minutes so that the same solution cannot be used more than once. The legal basis is our legitimate interest in a secure enquiry process free from abuse (Art. 6(1)(f) GDPR).

Contact via WhatsApp

If you tick the box “You may also contact me about this enquiry via WhatsApp” in the enquiry form, we may additionally contact you about your enquiry via WhatsApp – for instance to point you to our email reply or to clarify follow-up questions. The legal basis is your consent (Art. 6(1)(a) GDPR). It is voluntary; without it we contact you exclusively by email or telephone. You can withdraw your consent at any time with effect for the future, informally by email to office@max-solutions.eu or directly in WhatsApp.

WhatsApp is a service of Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland. When WhatsApp is used, Meta processes your telephone number, communication metadata (such as time and device) and – end-to-end encrypted – the message contents in accordance with the WhatsApp privacy policy (whatsapp.com/legal/privacy-policy-eea). Data may be transferred to Meta Platforms, Inc. in the USA; Meta bases this transfer on the EU-US Data Privacy Framework, under which Meta Platforms, Inc. is certified, and on standard contractual clauses. We use WhatsApp exclusively for communication about your enquiry and do not transmit any documents through this channel; for documents we provide a secure upload route on our own server. We store your telephone number and your consent – like the other details of your enquiry – in the lead archive (90 days) and as contact attributes in our Brevo account.

Lead forms in Google Ads

We run advertisements through Google Ads (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). If you complete the lead form shown in one of our advertisements, Google collects the details you enter (name, e-mail address, telephone number and your answer to the question what you plan in Austria) and passes them on to us; we receive them by e-mail and can retrieve them from the Google Ads account for 30 days. We process these details solely to handle your enquiry and to contact you. The legal basis is steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR). In addition, Google passes every lead automatically to our web server (World4You); there it is – as described for the enquiry form – stored for 90 days in the access-protected lead archive, created as a contact in our Brevo account and delivered to us through Brevo.

Google is responsible for the collection in the form; Google's privacy policy applies (policies.google.com/privacy). Data may also be transferred to Google LLC in the USA; Google LLC is certified under the EU-US Data Privacy Framework. This website itself loads no Google scripts and uses no Google tag. Subsequent correspondence is processed in our e-mail systems in the same way as for the enquiry form and deleted when no longer required and when no statutory retention obligation applies.

Appointment booking

You can book an appointment for the feasibility assessment through our booking system at booking.max-solutions.eu. For this we use the open-source software Cal.com, which we run ourselves on our server in Frankfurt am Main (Germany); the server provider Hostinger acts as a processor under Art. 28 GDPR. When you book, we process your name, e-mail address, telephone number, the chosen time slot and any optional notes in order to prepare and conduct the conversation. The appointment is entered in our Microsoft 365 calendar; confirmations and reminders are sent to you by e-mail from office@max-solutions.eu. The legal basis is pre-contractual measures taken at your request (Art. 6(1)(b) GDPR).

The booking system automatically passes every booking request to our web server (World4You); there it is – as described for the enquiry form – kept for 90 days in the access-protected lead archive, created as a contact in our Brevo account and assigned to the processing status of your enquiry. Confirmed bookings are additionally counted without personal reference in our audience measurement (see above). A booking becomes binding only once we have confirmed it after receipt of payment.

Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection. Please contact office@max-solutions.eu. You may also lodge a complaint with the Austrian Data Protection Authority (dsb.gv.at).