Skip to content

Privacy policy

We process personal data solely within the framework of the General Data Protection Regulation (GDPR) and the Austrian Data Protection Act. This policy informs you about the nature, scope and purpose of processing as well as your rights.

Controller

r2com gmbh
Am Herrenberg 3a, 3500 Krems an der Donau, Austria
Email
office@r2com.at
Management
Mag. Gernot Rohrhofer

Accessing our website

When you access the website, technically necessary data is processed (including a shortened IP address, date and time of access, the page requested and the volume of data transferred). Hosting is provided by Vercel Inc. (USA). The legal basis is our legitimate interest in secure, stable operation (Art. 6(1)(f) GDPR).

Contact form and email

When you contact us via the form or by email, we process the data you provide (name, email address, optionally phone number and company, subject and message) in order to handle your enquiry. The legal basis is the initiation or performance of a contract (Art. 6(1)(b) GDPR) or our legitimate interest in responding (Art. 6(1)(f) GDPR). Delivery is handled by Resend, Inc. (USA). Enquiries are deleted once they are no longer required and no statutory retention obligations apply.

Appointment booking

For online appointment booking we embed the Cal service. It is only loaded after your explicit consent; alternatively you can reach us by phone. Data processed during booking is used solely to arrange the appointment.

Crisis checklist (double opt-in)

If you request our crisis checklist, we first send you a confirmation email (double opt-in). You only receive the document after confirming. We store only your email address, the time of confirmation and the source page. Requesting the checklist is not consent to a newsletter.

Consent, cookies and analytics

We set technically necessary cookies on the basis of our legitimate interest. Statistics and marketing services (such as Google Analytics 4) are loaded exclusively after your consent via our consent banner (Art. 6(1)(a) GDPR). You can withdraw your consent at any time via “Cookie settings” in the footer. No Google or Meta services are loaded before consent.

Processors and transfers to third countries

To provide the website we use carefully selected service providers as processors: Vercel Inc. (hosting), Neon Inc. (database), Resend Inc. (email delivery) and Upstash Inc. (technical abuse protection). Where data is transferred to the USA, we rely on the EU-US Data Privacy Framework or on the European Commission’s Standard Contractual Clauses.

Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection. You may withdraw any consent given at any time with effect for the future. To do so, contact office@r2com.at.

Right to lodge a complaint

You have the right to lodge a complaint with the Austrian Data Protection Authority (Barichgasse 40–42, 1030 Vienna, dsb@dsb.gv.at) if you believe that the processing of your data infringes data protection law.