01 / Privacy

Privacy Policy

Controller: IM HOLZ Nova GmbH
Wiedner Hauptstrasse 76/5
1040 Vienna, Austria
Email: austria@imholz-group.com
Telephone: +43 676 365 5362
Scope: This policy describes personal data processing when you visit imholz.at or contact us using the contact details published there. The applicable framework includes the General Data Protection Regulation (GDPR), the Austrian Data Protection Act (DSG) and section 165(3) of the Austrian Telecommunications Act 2021 (TKG).
Last updated: 28 October 2026

02 / Website

Delivery and security

Data and purposes: Accessing this website involves processing technical connection data, including your IP address, request time, requested address, transfer volume, HTTP status and browser-supplied information about your browser, operating system and, where provided, referring page. This enables delivery of the website, troubleshooting and prevention of misuse.
Legal basis: Article 6(1)(f) GDPR. Our legitimate interest is the secure and reliable operation of this website. Connection data required to deliver the website is technically necessary; without it the website cannot be provided.
Recipients and storage: Technical data may be processed by providers engaged for hosting, infrastructure and maintenance. Logs are needed only for as long as required for troubleshooting, operational security or investigation of specific security incidents. Relevant incident data may be retained until the investigation is complete and for the protection of legal claims.

03 / Contact

Data and purposes: When you contact us, we process the contact details, message content, any attachments and technical communication data you provide to deal with your enquiry and communicate with you. The website provides email and telephone links; selecting an email link opens your own email application.
Legal basis: Article 6(1)(b) GDPR applies where your enquiry concerns a contract or steps taken at your request before entering into a contract. Other enquiries are handled under Article 6(1)(f) GDPR; our legitimate interest is responding appropriately to communications addressed to us.
Recipients and duration: Access is limited to relevant personnel within our company and, where necessary for technical delivery, our communication and IT providers. Enquiries are retained until they and any necessary follow-up have been dealt with. Further retention is limited to applicable legal obligations or the establishment, exercise or defence of legal claims. The duration depends on the content, contractual context and applicable statutory retention and limitation periods.
Voluntary information: Contacting us is voluntary. Without suitable contact details or sufficient information about your request, we may be unable to respond. Please do not send sensitive information that is unnecessary for your enquiry.

04 / Browser

Public pages: In its current configuration, the public website does not use analytics or advertising cookies and does not create visitor profiles for advertising. Google Analytics, advertising pixels and similar tracking services are not integrated.
Language selection: The language is determined by the page address. Links switch between German and English without setting a persistent language cookie. You can delete language cookies stored before this change using your browser settings.
Local resources: The Manrope font and website images are delivered by our own web server. The font does not require a connection to Google Fonts. WordPress emoji detection that uses browser storage is disabled on public pages.
Administration: Authorised users signing in to WordPress administration may require technically necessary authentication and security cookies. This is separate from browsing the publicly available pages.

05 / Recipients

Service providers: Recipients may include hosting, email, IT infrastructure and technical support providers to the extent necessary for the purposes described. Authorities, courts or professional advisers receive data only where legally required or where necessary and lawful for the protection of legal claims.
Email infrastructure: The published email domain uses Microsoft infrastructure to receive and protect incoming messages. Processing communications also depends on the mailbox and IT services actually used.
International processing: The use of international email and IT providers may involve processing personal data outside the European Economic Area, particularly in the United States. Such transfers are additionally subject to the requirements of Articles 44 et seq. GDPR. These include, in particular, an applicable adequacy decision or appropriate safeguards, such as EU Standard Contractual Clauses. You can request information about the recipients, processing countries and any applicable safeguards relevant to your communications by contacting austria@imholz-group.com.
External links: Links, including to LinkedIn, lead to independently operated websites. No LinkedIn tracking plugin is embedded in the public website. When you follow an external link, the respective provider's privacy information applies.

06 / Your rights

Your rights: Subject to the applicable conditions, you have rights of access, rectification, erasure, restriction of processing and data portability. Where processing relies on consent, you may withdraw it at any time with future effect; this does not affect the lawfulness of earlier processing.
Right to object: You may object at any time, on grounds relating to your particular situation, to processing based on Article 6(1)(f) GDPR. We will stop processing the data concerned unless we demonstrate compelling legitimate grounds or need it for the establishment, exercise or defence of legal claims.
Contact and response: Please send requests to austria@imholz-group.com. We normally respond within one month and will inform you of any extension permitted by law. We may request proportionate additional information to verify your identity and prevent disclosure to an unauthorised person.
Complaints: You may lodge a complaint with a data protection supervisory authority, particularly in the member state of your habitual residence, workplace or the alleged infringement. In Austria: Österreichische Datenschutzbehörde, Barichgasse 40–42, 1030 Vienna; website: https://www.dsb.gv.at/.
Automated decisions: This website does not involve automated decision-making, including profiling, producing legal or similarly significant effects.