We collect as little personal data as possible: no tracking, no analytics, no advertising cookies. This page explains what we process, why, and what rights you have.
The controller under the General Data Protection Regulation (GDPR) is:
We have not appointed a data protection officer, as we are not legally required to. For any privacy question, please contact us at the address above.
| What | Which data | Legal basis | How long |
|---|---|---|---|
| Visiting this website | IP address, date and time, page requested, referring page, browser and operating system | Legitimate interest in secure operation (Art. 6(1)(f) GDPR) | 90 days |
| Light / dark mode setting | Your choice, stored only in your browser | Strictly necessary for a function you requested (§ 165(3) TKG 2021) | Until you delete your browser data |
| Contact by email, phone or form | Name, email address, phone number, your message | Pre-contractual steps (Art. 6(1)(b)) or legitimate interest in answering (Art. 6(1)(f)) | Until your enquiry is resolved; business correspondence up to 7 years |
| Spam protection of the contact form | IP address, only as a counter in memory | Legitimate interest in preventing abuse (Art. 6(1)(f) GDPR) | At most 1 hour |
| Free sample check and client documents | Tender documents, bid chapters and any personal data they contain (e.g. CVs) | Pre-contractual steps or contract (Art. 6(1)(b)); for third-party data a data processing agreement (Art. 28) | Within 30 days after the check, unless an engagement follows |
Our website is hosted by AlphacenTech e.U. (Austria) on servers of netcup GmbH (Germany) in a data centre in Vienna. Each time you visit, the server automatically records technical data that your browser transmits: IP address, date and time of the request, page requested, referring website, browser type and version, and operating system.
We need this data to deliver the website and to detect and defend against attacks. The legal basis is our legitimate interest in the secure operation of the website (Art. 6(1)(f) GDPR). Log files are deleted after 90 days, unless a security incident requires longer storage (at most 12 months). The hosting provider processes the data on our behalf under a data processing agreement.
Our website does not set any cookies. We use no tracking, analytics or advertising tools and no third-party services that follow you across websites. Our fonts are hosted on our own server, so no data is sent to Google or other font services.
If you switch between light and dark mode, your browser stores this choice locally on your device (local storage, key “inspira-theme”). It is not transmitted to us. This storage is strictly necessary for the function you requested and does not require consent (§ 165(3) TKG 2021). You can delete it at any time in your browser settings.
Parts of the website run directly in your browser (Blazor WebAssembly). Your browser keeps these program files in its cache so they need not be downloaded again, and the website stores a technical version value in local storage (key “blazor-resource-hash:Homepage.Client”) to check on your next visit whether the cached files are still current. These entries contain no personal data, are the same for every visitor and are not transmitted to us. They are strictly necessary for delivering the website and do not require consent (§ 165(3) TKG 2021). You can delete them at any time in your browser settings.
When you contact us by email, phone or the contact form, we process your name, contact details and message to answer your enquiry. The contact form sends your details over an encrypted connection to our web server. The server does not store them but sends them straight away as an email to our mailbox office@inspira.at, through the Microsoft 365 account of our hosting provider AlphacenTech.
The legal basis is Art. 6(1)(b) GDPR if your enquiry relates to a possible contract, and otherwise our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR). We delete your data once your enquiry has been resolved, unless statutory retention obligations apply: business correspondence is kept for up to seven years (§ 212 UGB, § 132 BAO).
Our emails and files are processed in Microsoft 365 (Microsoft Ireland Operations Limited, Dublin). Microsoft stores and processes this data in the EU/EFTA (EU Data Boundary).
To protect the form against spam, your browser solves a small computing task (ALTCHA) before the form is sent. Our own server sets and checks the task. No cookies are set and no third-party services are involved. The server also counts how often your IP address sends the form and discards this count after one hour at the latest. The legal basis is our legitimate interest in preventing abuse (Art. 6(1)(f) GDPR).
For a free sample check or an engagement, you send us tender documents and bid chapters. We process them only to carry out the check you asked for. The legal basis is Art. 6(1)(b) GDPR (pre-contractual steps or contract).
We only pass on personal data where this is necessary for the purposes above. Our processors are bound by data processing agreements under Art. 28 GDPR:
| Processor | Purpose | Location |
|---|---|---|
| AlphacenTech e.U., sub-processors: netcup GmbH (servers), Microsoft Ireland Operations Limited (email delivery) | Website hosting and forwarding of the contact form | Austria (data centre in Vienna), email delivery in the EU/EFTA |
| Microsoft Ireland Operations Limited | Email and file storage (Microsoft 365) | EU/EFTA |
| Anthropic Ireland, Limited / Anthropic, PBC | AI-assisted analysis of documents you send us (not used for website visitors) | USA (see section 8) |
We also disclose data to authorities and courts where we are legally required to.
Anthropic stores data in the USA. The transfer is based on the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR), which are part of Anthropic's data processing addendum, together with additional safeguards such as encryption and prompt deletion.
Microsoft processes our data in the EU/EFTA. Any exceptional transfers outside the EU are covered by Microsoft's data protection terms, including the EU Standard Contractual Clauses. You can request a copy of these safeguards from us.
Our website contains links to other websites. We do not embed social media plugins, so no data is transmitted to the operators of those websites until you click a link. From then on, their privacy policies apply.
You have the right to:
To exercise your rights, simply write to office@inspira.at. We reply within one month.
If you believe that our processing of your data violates data protection law, you can lodge a complaint with the Austrian Data Protection Authority (Datenschutzbehörde), Barichgasse 40–42, 1030 Vienna, dsb@dsb.gv.at, www.dsb.gv.at.
Our website is delivered over an encrypted connection (TLS). Our accounts are protected by multi-factor authentication, and access to client documents is limited to the people who need it.
We update this privacy policy when our services or the legal situation change. The current version on this page always applies. In case of discrepancies between the language versions, the German version prevails.
As of: October 2026
