Privacy policy
This policy describes which personal data are processed when you visit this website and use the digitalisation check. It describes the actual technical set-up of the website.
1. Controller
Alexander Livio Seraphim Schachner, sole trader, trading as Alesch Automatisierungen
Alois-Czedik-Gasse 3/14, 1140 Vienna, Austria
E-mail: office@alesch.eu
Phone: +43 664 7942665
2. In short
- This website sets no cookies and uses no analytics or tracking tools, no advertising pixels and no fingerprinting.
- Fonts, scripts and graphics are loaded from our own server (self-hosted fonts Newsreader and Public Sans). Opening the pages sends no requests to any provider other than our hosting provider.
- The answers in the digitalisation check are evaluated only in your browser. We receive them only when you submit the contact form yourself; your request then goes by e-mail to our mailbox at our hosting provider.
- Google is involved only in booking an appointment, and only once you expressly click “Choose a time”.
3. Hosting, delivery and server logs
The website and the e-mail mailbox are operated for us by Hostinger International Limited, 61 Lordou Vironos str., 6023 Larnaca, Cyprus. The pages are delivered through Hostinger's content delivery network (hCDN). Hostinger has not publicly documented the location of the server and the CDN nodes for this website, so we currently cannot rule out processing outside the European Economic Area. Hostinger's Data Processing Addendum (processing on our behalf under Art. 28 GDPR) applies to Hostinger's services.
When any page is opened, Hostinger processes technically necessary data in server logs: IP address, time, requested address, amount of data transferred, browser identifier (user agent) and referrer. The purpose is to deliver the website securely and reliably. The legal basis is our legitimate interest (Art. 6(1)(f) GDPR); that interest is delivering the website reliably, finding errors and fending off attacks. Retention: as long as necessary for the purposes named (secure delivery, error analysis, fending off attacks). Hostinger stores and deletes the logs; Hostinger has not published a fixed period. We do not analyse the logs ourselves or combine them with other data.
4. Storage in the browser (sessionStorage)
So that your answers in the check are not lost when the page is reloaded, the page stores an entry “alesch-check-v1” in your browser's sessionStorage containing: the chosen sector, a sector hint passed in the link if any (e.g. “immo”), your answers (including skipped questions) and the current step of the check. No contact details are stored there. The data do not leave your device and contain no identifier. The entry is deleted when you close the browser tab, when you choose “Start again” and after the form has been submitted successfully; after that it is not created again if you return to the report. This storage is strictly necessary for the service you expressly requested; no cookies are used for it.
5. Digitalisation check and contact form
The report is calculated in your browser according to fixed rules. It is an automatic orientation and not a decision about you (no automated decision within the meaning of Art. 22 GDPR).
Only if you choose a button at the end of the report and submit the form do we transmit your request to our mailbox office@alesch.eu at Hostinger International Limited (see section 3), where we read it. It is sent from our web server via Hostinger's e-mail infrastructure. It is not forwarded to any other provider. The following is transmitted:
- your details: name, company, e-mail address, phone number (optional), preferred way of contact (optional) and your message (optional);
- your report: the chosen sector, your answers (including skipped questions), the calculated scores and starting points;
- your request type (proposal request, discovery call or contact), the language of the page, a sector hint passed in the link if any (e.g. “immo” if you came to us via a QR code on a letter), a random identifier of the request, and the time (including your device's time zone) and version of your consent.
Not collected: screen size, device identifiers, time spent per question or similar. When the request is received, the server technically processes your IP address (see section 3 and “Spam protection”).
Required information: Providing your data is neither a statutory nor a contractual requirement. Without your name and, depending on the request, your e-mail address (for a contact request: e-mail address or phone number) and, for a proposal request, your company, we cannot answer your request, and the form cannot be submitted. All other details are optional.
Purpose and legal basis: The sole purpose is to answer your request. The legal basis is taking steps at your request prior to entering into a contract (Art. 6(1)(b) GDPR). For contacting you by e-mail or phone and processing your report for this purpose we additionally ask for your consent in the form (Art. 6(1)(a) GDPR). You can withdraw it at any time with effect for the future, for example by e-mail to office@alesch.eu. You will not receive a newsletter or advertising from us.
Retention: Your request is kept as an e-mail in our mailbox. Requests that do not lead to a collaboration are deleted there 12 months after the last contact. If a collaboration results, we keep the request as part of our business correspondence for the statutory retention period (seven years, § 132 Austrian Federal Fiscal Code, BAO). If you withdraw your consent, we delete the request without delay unless a retention obligation applies. The record of your consent is kept as long as the request.
On the web server we do not store your request in a file or database; it is delivered by e-mail only.
Spam protection: The form contains a field that is invisible to people, and the server limits the number of requests per sender. For this it stores the times of your requests under a pseudonymised check value of your IP address (a hash formed with a secret key; the IP address itself is not stored, but the check value is still personal data). To avoid duplicate delivery it also stores a check value of the random identifier of your request, which contains no information about you. The counter is valid for one hour, the duplicate-delivery entry for 24 hours; the server deletes expired entries on the next request that reaches the form. The legal basis is our legitimate interest (Art. 6(1)(f) GDPR) in protecting the form against misuse and mass automated requests. We do not use reCAPTCHA or any other third-party service.
6. Booking an appointment via Google
If you click “Choose a time” after submitting, you leave our website: the appointment booking page of Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) opens in a new window. Nothing is loaded from Google before this click, and we pass no data from the check to Google. On the booking page Google processes data (in particular your IP address, possibly cookies, and the details you enter there) under Google's own terms and privacy policy. Data may be transferred to Google LLC in the USA. Google LLC is certified under the EU-U.S. Data Privacy Framework (participant list at dataprivacyframework.gov); the transfer relies on the European Commission's adequacy decision of 10 July 2023 (Art. 45 GDPR).
When you book an appointment, your name, e-mail address, the chosen time and any note you add end up in our Google Calendar. We process these details to hold the appointment you requested (Art. 6(1)(b) GDPR). We delete appointment data 12 months after the appointment unless a collaboration results; otherwise the statutory retention period applies (seven years, § 132 BAO).
7. Contact by e-mail or phone
If you contact us directly by e-mail or phone, or use the e-mail alternative offered, we process your details to answer your request: where your request is aimed at a contract, under Art. 6(1)(b) GDPR, otherwise under Art. 6(1)(f) GDPR; our legitimate interest is answering business enquiries. E-mails are kept in our mailbox at our hosting provider (section 3). We delete this correspondence 12 months after the last contact unless a collaboration results; otherwise the statutory retention period applies (seven years, § 132 BAO).
8. Your rights
You have the right of access, rectification, erasure, restriction of processing and data portability, and the right to withdraw consent at any time with effect for the future. Write to office@alesch.eu.
Right to object (Art. 21 GDPR): Where we process data on the basis of our legitimate interest (server logs in section 3, spam protection in section 5, contact in section 7), you can object to this processing at any time on grounds relating to your particular situation.
You can lodge a complaint with a data protection supervisory authority, in particular in the member state of your habitual residence, your place of work or the alleged infringement. The authority competent for us is: Österreichische Datenschutzbehörde (Austrian Data Protection Authority), Barichgasse 40-42, 1030 Vienna, Austria (dsb.gv.at).
9. Version
Version of this policy: November 2026