Data protection
This page explains which personal data we process when you visit our website, send us an enquiry or place an order with us. We explain why we need the data, on what legal basis we process it, who receives it, how long we keep it and what rights you have. The applicable laws are the General Data Protection Regulation (GDPR), the Austrian Data Protection Act (DSG) and the Austrian Telecommunications Act 2021 (TKG 2021).
1. Who is responsible for your data
The controller within the meaning of the GDPR is:
ATRA Aufbereitungsanlagen & Transportmittelservice GmbH
Wallpachstraße 300
5440 Golling, Austria
Phone: +43 6244 7888
E-mail: office@elevator-bucket.com
You can reach us at these contact details for all questions about data protection and to exercise your rights.
2. When you visit our website
To display the website in your browser, your device transmits technical information to our server, which stores it briefly in a log file:
- your IP address
- date and time of access
- the page accessed and the amount of data transferred
- the page from which you came to us (referrer)
- browser and operating system
We need this information to deliver the website, fix faults and detect attacks. The legal basis is our legitimate interest in a secure and functioning website (Art. 6(1)(f) GDPR). The log files are deleted after 14 days. Only if a specific security incident has to be investigated do we keep the relevant entries until the investigation is completed.
The website is hosted on a server of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, in data centres in Germany. Hetzner processes the data only on our behalf and according to our instructions; a data processing agreement pursuant to Art. 28 GDPR is in place.
The connection to our website is encrypted (HTTPS), as shown by the padlock symbol in your browser’s address bar.
3. Statistical analysis of server logs
When you access our website, our hosting provider automatically stores information transmitted by your browser in so-called server log files: page accessed, date and time, amount of data transferred, the previously visited page (referrer), browser type and operating system as well as your IP address.
We have these logs statistically analysed by our processor FEDERLEICHT e.U., Weißenbach 79/1, 5431 Kuchl, Austria, in order to understand and improve the use of our website, for example the number of page views, the origin of visits, the devices used and the country and region. No cookies are set and no information is stored on or read from your device. The IP address is used only briefly during the analysis to determine country and region and to group visits of one day, and is not stored afterwards. The result contains only aggregated figures that do not allow conclusions about individual persons.
The legal basis is our legitimate interest in analysing and improving our website (Art. 6(1)(f) GDPR). The server log files are deleted after 14 days. You have the right to object to this processing at any time on grounds relating to your particular situation (Art. 21 GDPR).
4. When you write to us via the contact form
In the contact form we ask for your name, your e-mail address and your message; you may also enter your company and telephone number voluntarily. We need your name, e-mail address and message to process your enquiry and to reach you; without them we cannot accept the form. You can of course also contact us by phone or e-mail at any time.
We use your details to answer your enquiry, advise you and, if applicable, prepare a quote. The legal basis is steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR) and our legitimate interest in answering enquiries reliably (Art. 6(1)(f) GDPR).
The form is technically operated by our web service provider FEDERLEICHT e.U., Weißenbach 79/1, 5431 Kuchl, Austria. Your message is received on its server and forwarded to us. (This enables intelligent spam protection without third-party providers: your enquiry is checked directly on receipt, no data is passed to services such as Google reCAPTCHA, and you do not have to solve any picture puzzles.) FEDERLEICHT acts as our processor and may not use the data for its own purposes.
If your enquiry does not lead to an order, we delete it 6 months after the last contact. If it does, section 7 applies.
5. Sending the form e-mails
After you submit the form, we receive a notification by e-mail and you receive an automatic confirmation of receipt at the address you entered. For these e-mails we use the mailing service Brevo of Brevo GmbH, Köpenicker Str. 126, 10179 Berlin, Germany. Brevo receives the content of the message, your e-mail address and the time of sending and acts as our processor.
The legal basis is the processing of your enquiry (Art. 6(1)(b) GDPR) and our legitimate interest in reliable delivery (Art. 6(1)(f) GDPR). A data processing agreement pursuant to Art. 28 GDPR is in place with Brevo GmbH; Brevo may use the data only according to our instructions. Brevo keeps sending logs only as long as necessary to prove delivery or as required by statutory periods.
More information: brevo.com/de/legal/privacypolicy
6. Spam protection
To keep automatically generated mass messages away from us, the server checks every submission on receipt: how long it took to fill in the form, whether the text contains typical characteristics of spam and how many messages arrive from the same IP address within a short time. For this purpose, the IP address is held in memory for a maximum of one hour and is not stored permanently. Messages identified as spam are not forwarded but stored separately so that an enquiry sorted out by mistake is not lost. We do not use services of other providers (such as a “captcha”) for this.
The legal basis is our legitimate interest in protecting our website and our mailbox against misuse (Art. 6(1)(f) GDPR).
7. Enquiries by e-mail or phone, quotes and orders
If you call or write to us, we use your details to deal with your request. If you place an order with us, we process the data required for it: name, address, contact details, company and VAT number, information about your installation (for example bucket elevator, conveyed material and dimensions), delivery and invoice address as well as order, invoice and payment data.
The legal basis is the preparation and performance of the contract (Art. 6(1)(b) GDPR). We are obliged to keep invoices and accounting records for seven years under Section 132 of the Austrian Federal Fiscal Code (BAO) and Section 212 of the Austrian Commercial Code (UGB) (Art. 6(1)(c) GDPR). In addition, we keep records as long as warranty or damage claims arising from the order can be asserted (Art. 6(1)(f) GDPR).
8. Cookies and your consent
Cookies are small text files that your browser stores on your device. On your first visit we ask you in a notice whether you consent to statistics. Until you have decided, we do not set any cookies that require consent. The notice (software “Complianz”) runs on our own server; no data is transmitted to the manufacturer.
Cookies that are necessary for operation only store your decision so that we do not ask again on every visit. No consent is required for this (Section 165(3) TKG 2021; Art. 6(1)(f) GDPR). We set all other cookies only if you have consented (Section 165(3) TKG 2021; Art. 6(1)(a) GDPR). We currently do not use any marketing services.
| Name | Purpose | Type | Storage period |
|---|---|---|---|
| cmplz_functional, cmplz_preferences, cmplz_statistics, cmplz_marketing, cmplz_banner-status, cmplz_policy_id, cmplz_consented_services | store your choice in the cookie notice | necessary | 365 days |
| _ga, _ga_6N8D86NJ1Y | Google Analytics: distinguishes visitors and evaluates usage in aggregated form | statistics, only with consent | 2 years |
You can change your choice at any time; a withdrawal takes effect immediately for the future:
You can also delete or block cookies in your browser settings. If you delete the cookies of our website, we will ask again on your next visit.
9. Statistics with Google Analytics
Only if you have consented to statistics do we use Google Analytics 4, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. It shows us in aggregated form which pages are viewed how often, how long visitors stay and which devices they use, so that we can improve the website. Google Analytics 4 does not store full IP addresses.
The legal basis is your consent (Art. 6(1)(a) GDPR; Section 165(3) TKG 2021). You can withdraw it at any time in section 8.
Google may transfer data to Google LLC in the USA. Google LLC is certified under the EU-US Data Privacy Framework; an adequacy decision of the EU Commission therefore exists for the USA (Art. 45 GDPR). The Google Analytics cookies are stored for up to 2 years; the analysis data is deleted after 2 months.
More information: policies.google.com/privacy
10. Who receives your data
Within our company, your data is only seen by the persons who need it for their tasks. Outside our company, we only pass on data if this is necessary for the respective purpose or required by law:
- Hetzner Online GmbH (hosting) and FEDERLEICHT e.U. (support of the website and the form), each as a processor
- Brevo GmbH for the form e-mails, as a processor
- Google Ireland Limited, only if you have consented to statistics
- for orders: tax advisors, banks for payments, insurers as well as freight forwarders and parcel services for delivery
- authorities and courts if we are legally obliged to do so
We do not sell data or pass it on for advertising purposes.
11. Transfers to countries outside the EU
We process your data in the European Union. A transfer to the USA is only possible with Google Analytics and only if you have consented (see section 9). If we deliver to a country outside the EU, we pass on the information required for the delivery to the freight forwarders and authorities involved (Art. 49(1)(b) GDPR).
12. How long we keep data
- server log files: 14 days
- enquiries not followed by an order: 6 months after the last contact
- order, invoice and accounting records: 7 years (BAO, UGB), in the case of ongoing warranty claims or legal disputes until they are concluded
- your cookie choice: 365 days; Google Analytics cookies: up to 2 years
After that we delete the data or irreversibly anonymise it.
13. Do you have to provide data?
You do not have to provide any information to visit the website. For an enquiry or an order we need the data without which we cannot reach you or carry out the order. Consent to statistics is voluntary; if you decline, you can use the website without restriction.
We do not make decisions based solely on automated processing and do not create personality profiles (Art. 22 GDPR).
14. Your rights
You have the right
- to obtain information about the data stored (Art. 15 GDPR),
- to have incorrect data rectified (Art. 16 GDPR),
- to request the erasure of your data (Art. 17 GDPR), unless a retention obligation applies,
- to have the processing restricted (Art. 18 GDPR),
- to receive your data in a common format (Art. 20 GDPR),
- to object, on grounds relating to your particular situation, to processing based on our legitimate interest (Art. 21 GDPR),
- to withdraw consent at any time with effect for the future (Art. 7(3) GDPR).
Simply write to us at office@elevator-bucket.com or by post to the address in section 1. To ensure that no other person obtains information about your data, we may ask you to prove your identity.
15. Complaint to the data protection authority
If you believe that we do not process your data lawfully, you can lodge a complaint with the supervisory authority. However, we can help you fastest if you contact us first. The competent authority in Austria is:
Österreichische Datenschutzbehörde (Austrian Data Protection Authority)
Barichgasse 40–42
1030 Vienna, Austria
E-mail: dsb@dsb.gv.at
www.dsb.gv.at
16. Changes
We adapt this privacy policy when our website, our processes or the legal situation change. The version published here applies.
As of: October 2026