1. Data controller

The controller responsible for processing data on this website within the meaning of the General Data Protection Regulation (GDPR) is:
HLMR Beratung und Marketing GmbH
(CEE Bridge Advisory)
Radelmayergasse 1/6/30
1190 Vienna, Austria

Email: ivan.meszaros@ceebridge.eu
Phone: +43 676 5671210

2. Collection and storage of personal data and the nature and purpose of their use

a) When visiting the website (server log files)

When you access our website at www.ceebridge.eu, the browser on your device automatically sends information to our website’s server. This information is temporarily stored in a log file. The following information is recorded without any action on your part and stored until it is automatically deleted:

• the IP address of the requesting computer;
• the date and time of access;
• the name and URL of the requested file;
• the website from which access originated (referrer URL);
• the browser used and, where applicable, your computer’s operating system, as well as the name of your internet access provider.

We process these data for the following purposes:

• ensuring a smooth connection to the website;
• ensuring convenient use of our website;
• assessing system security and stability, and for administrative purposes.

The legal basis for processing is Article 6(1), first sentence, point (f) GDPR. Our legitimate interest arises from the purposes of data collection listed above.

b) When contacting us (contact form or email)

If you have any questions, you can contact us using the form provided on the website or by email. You must provide a valid email address and your name so that we can identify who sent the enquiry and respond to it.
Data processing for the purpose of contacting us is based on Article 6(1), first sentence, point (b) GDPR (taking pre-contractual steps) or Article 6(1), first sentence, point (f) GDPR (legitimate interest in handling enquiries), as applicable.

3. Cookies and web analytics

Our website uses cookies. These are small files that your browser automatically creates and stores on your device when you visit our website.
Technically necessary cookies are used on the basis of our legitimate interest (Article 6(1)(f) GDPR) and in accordance with section 165(3) of the Austrian Telecommunications Act 2021 (TKG 2021) to ensure the website’s technical operation. All other cookies, such as those used for analytics or marketing, are set only after you have given your explicit consent through our cookie banner (Article 6(1)(a) GDPR). You may withdraw your consent at any time with effect for the future through the cookie settings.

4. Disclosure of data to third parties

We do not disclose your personal data to third parties for purposes other than those listed below. We disclose your personal data to third parties only if:

• you have given your explicit consent under Article 6(1), first sentence, point (a) GDPR;
• this is necessary for the performance of contractual relationships with you under Article 6(1), first sentence, point (b) GDPR;
• there is a legal obligation under Article 6(1), first sentence, point (c) GDPR; or
• disclosure is necessary for the establishment, exercise or defence of legal claims under Article 6(1), first sentence, point (f) GDPR.

5. Retention period

We process and store your personal data only for as long as necessary to achieve the purpose of storage or as required by statutory retention periods, for example under the Austrian Federal Fiscal Code (BAO) or the Austrian Commercial Code (UGB), generally 7 years.

6. Rights of the data subject

You have the right:

• under Article 15 GDPR, to request access to your personal data processed by us;
• under Article 16 GDPR, to request without delay the rectification of inaccurate personal data or the completion of personal data stored by us;
• under Article 17 GDPR, to request the erasure of your personal data stored by us (the “right to be forgotten”);
• under Article 18 GDPR, to request restriction of the processing of your personal data;
• under Article 20 GDPR, to receive your personal data in a structured, commonly used and machine-readable format or to request their transmission to another controller;
• under Article 7(3) GDPR, to withdraw at any time the consent you have previously given us;
• under Article 21 GDPR, to object to processing.

7. Right to lodge a complaint with the supervisory authority

If you believe that the processing of your personal data infringes data protection law, you have the right to lodge a complaint with the competent supervisory authority. In Austria, this is:
Austrian Data Protection Authority (Österreichische Datenschutzbehörde, DSB)
Barichgasse 40-42
1030 Vienna, Austria
Phone: +43 1 52 152-0
Email: dsb@dsb.gv.at
Website: www.dsb.gv.at