Privacy policy (GDPR / DSGVO)

As of: 10 November 2026

The protection of your personal data is important to us. This privacy policy informs you about which data we process when you visit our website, what we use it for, to whom it is passed and what rights you have. You can also find details of which cookies are set in our cookie policy.

1. Controller

Kodlogy Technologies GmbH
Kaiser-Ebersdorfer-Straße 81/2
1110 Vienna, Austria
Phone: +43 660 540 3636
Email: support@kodlogy.at

For questions about data protection and to exercise your rights, you can reach us using the contact details above.

This privacy policy applies to the website www.kodlogy.at. The following other websites of Kodlogy Technologies GmbH also refer to this policy: my.kodlogy.at, seo.kodlogy.at, kodlogy.com, www.transportlogy.at, demo.transportlogy.at, my.transportlogy.at, www.menulogy.at, my.menulogy.at, www.kigasoft.com, www.mietwagen-taxi-software.com, www.tablet-menu.at and camper.kodlogy.at. The services used there may differ; they are shown on the respective website.

2. Legal bases and storage period

We only process personal data if there is a legal basis for doing so:

• Consent (Art. 6(1)(a) of the General Data Protection Regulation – GDPR (DSGVO); for cookies and similar technologies additionally § 165(3) of the Austrian Telecommunications Act – TKG 2021),
• Contract or pre-contractual measures (Art. 6(1)(b) GDPR), for example when you request a quote,
• Legal obligation (Art. 6(1)(c) GDPR), for example retention obligations under tax and company law,
• Legitimate interest (Art. 6(1)(f) GDPR), for example the secure and stable operation of this website.

We only store data for as long as is necessary for the respective purpose. It is then deleted unless there are statutory retention obligations (e.g. seven years for accounting records under § 132 of the Austrian Federal Fiscal Code – BAO).

3. Hosting and server log files

• Provider: Hetzner Online GmbH, Industriestraße 25, 91710 Gunzenhausen, Germany (servers in the EU)
• Purpose: Provision, security and stability of the website
• Data processed: IP address, date and time of access, page accessed, previously visited page (referrer), browser type and version, operating system
• Legal basis: Legitimate interest in a secure and functional website (Art. 6(1)(f) GDPR)
• Storage period: Log files for a maximum of seven days, then deletion or anonymisation

Hetzner processes the data as a processor on our behalf. For faster delivery, our server (LiteSpeed) caches pages; no user profiles are created in the process. The connection to our website is encrypted via TLS/SSL.

4. Cookies and consent management (Complianz)

We use technically necessary cookies so that the website works. We only load all other cookies and services (statistics, marketing, embedded content) after you have given your consent in the cookie banner. Without consent, these services remain blocked.

For consent management, we use the WordPress plugin Complianz (running on our server) and the WP Consent API. Your choice is stored in cookies with the prefix “cmplz_” for 365 days so that we do not have to ask you again on every visit. The legal basis for this is our legal obligation to be able to demonstrate consent (Art. 6(1)(c) in conjunction with Art. 7(1) GDPR).

You can change or withdraw your consent at any time: via the cookie settings (link in the footer of every page). The withdrawal applies to the future; processing carried out until then remains lawful.

5. Contact forms, email and phone

• Provider: Kodlogy Technologies GmbH (form plugin Fluent Forms on our server)
• Purpose: Processing your enquiry and preparing a quote
• Data processed: Name, email address, selected services; optionally phone number, website and your message; time of the enquiry
• Legal basis: Pre-contractual measures (Art. 6(1)(b) GDPR); for general enquiries, our legitimate interest in answering them (Art. 6(1)(f) GDPR)
• Storage period: Until your enquiry has been fully dealt with; if an order is placed, the statutory retention periods apply

Your details are stored in our website’s database and forwarded by email to support@kodlogy.at. You receive a confirmation at the email address you provided. If you contact us by email or phone, we process your details for the same purposes.

6. Spam protection with Google reCAPTCHA

Some of our forms are protected against automated entries (spam, bots) with Google reCAPTCHA.

• Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
• Purpose: Distinguishing between humans and automated programs when forms are submitted
• Data processed: IP address, browser and device information, time spent, mouse and keyboard interactions, cookies (e.g. “_GRECAPTCHA”, up to 6 months)
• Legal basis: Your consent (Art. 6(1)(a) GDPR, § 165(3) TKG 2021); can be withdrawn at any time via the cookie settings
• Privacy policy: policies.google.com/privacy

reCAPTCHA is only loaded once you consent – in the cookie banner (Marketing category) or directly at the form via “I agree”. Without consent, the forms concerned cannot be submitted; you can then reach us at any time by email, phone or via our short enquiry form, which works without reCAPTCHA. A transfer to the USA is possible. The parent company is certified under the EU-US Data Privacy Framework; the transfer is based on the adequacy decision of the EU Commission (Art. 45 GDPR).

7. WhatsApp contact

On our website you will find a WhatsApp button. It is a simple link: data is only transmitted when you click it and open WhatsApp. The privacy policy of WhatsApp Ireland Limited, Merrion Road, Dublin 4, Ireland, then applies. We process your message to deal with your enquiry (Art. 6(1)(b) or (f) GDPR).

8. Web analytics with Google Analytics 4

• Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (integrated via the WordPress plugin Google Site Kit)
• Purpose: Statistical analysis of the use of our website in order to improve content and offering
• Data processed: Page views, time spent, origin of the visit, device and browser information, approximate location; pseudonymous identifiers in cookies (“_ga”, “_ga_*”, up to 2 years)
• Legal basis: Your consent (Art. 6(1)(a) GDPR, § 165(3) TKG 2021); can be withdrawn at any time via the cookie settings (Statistics category)
• Privacy policy: policies.google.com/privacy

Google Analytics is only loaded after your consent. We additionally use Google Consent Mode, which informs Google of your choice. IP addresses are not stored in Google Analytics 4. A transfer to the USA is possible. The parent company is certified under the EU-US Data Privacy Framework; the transfer is based on the adequacy decision of the EU Commission (Art. 45 GDPR).

9. Google Ads: conversion tracking and remarketing

• Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
• Purpose: Measuring whether visits via our Google ads lead to enquiries (conversions), and displaying our advertising during later visits to other websites (remarketing)
• Data processed: Click and visit data, device and browser information, pseudonymous identifiers in cookies (e.g. “_gcl_au”, 3 months)
• Legal basis: Your consent (Art. 6(1)(a) GDPR, § 165(3) TKG 2021); can be withdrawn at any time via the cookie settings (Statistics and Marketing categories)
• Privacy policy: policies.google.com/privacy

Advertising cookies are only set via Google Consent Mode if you have consented to the Marketing category. A transfer to the USA is possible. The parent company is certified under the EU-US Data Privacy Framework; the transfer is based on the adequacy decision of the EU Commission (Art. 45 GDPR).

10. Google Tag Manager

• Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
• Purpose: Management and integration of website tags (e.g. analytics and advertising tags) in one central place
• Data processed: IP address and technical connection data during loading; the Tag Manager itself does not set any cookies
• Legal basis: Your consent (Art. 6(1)(a) GDPR, § 165(3) TKG 2021); can be withdrawn at any time via the cookie settings (Marketing category)

The services integrated via the Tag Manager are described in this policy and likewise only load with your consent. A transfer to the USA is possible. The parent company is certified under the EU-US Data Privacy Framework; the transfer is based on the adequacy decision of the EU Commission (Art. 45 GDPR).

11. Microsoft Clarity

• Provider: Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland
• Purpose: Analysing how visitors use our website (clicks, scrolling behaviour, heatmaps and session recordings) in order to improve usability and content
• Data processed: Interactions on the page, device and browser information, IP address, pseudonymous identifiers in cookies (“_clck” 1 year, “_clsk” 1 day, “CLID” and “MUID” 1 year). Entries in form fields are masked by Clarity by default.
• Legal basis: Your consent (Art. 6(1)(a) GDPR, § 165(3) TKG 2021); can be withdrawn at any time via the cookie settings (Statistics category)
• Privacy policy: privacy.microsoft.com

A transfer to the USA is possible. The parent company is certified under the EU-US Data Privacy Framework; the transfer is based on the adequacy decision of the EU Commission (Art. 45 GDPR).

12. Microsoft Advertising “Brand Agents”

The “Brand Agents” function of Microsoft Advertising (an AI-supported function in connection with Microsoft advertising) is connected via the Clarity plugin. In the process, usage, device and connection data (including IP address) are transmitted to Microsoft.

• Provider: Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland
• Purpose: AI-supported advertising and assistance function of Microsoft Advertising
• Data processed: Usage and device data, IP address
• Legal basis: Your consent (Art. 6(1)(a) GDPR, § 165(3) TKG 2021); can be withdrawn at any time via the cookie settings (Marketing category)
• Privacy policy: privacy.microsoft.com

A transfer to the USA is possible. The parent company is certified under the EU-US Data Privacy Framework; the transfer is based on the adequacy decision of the EU Commission (Art. 45 GDPR).

13. Matomo (web analytics on our own server)

• Provider: Kodlogy Technologies GmbH – Matomo runs as a WordPress plugin on our server; no data is passed on to third parties
• Purpose: Statistical analysis of website use
• Data processed: Page views, time spent, origin of the visit, device and browser information, pseudonymous identifiers in cookies (“_pk_id.*” 13 months, “_pk_ses.*” 30 minutes)
• Legal basis: Your consent (Art. 6(1)(a) GDPR, § 165(3) TKG 2021); can be withdrawn at any time via the cookie settings (Statistics category)

14. WP Statistics (cookieless visitor statistics)

• Provider: Kodlogy Technologies GmbH – WordPress plugin on our server
• Purpose: Simple visitor statistics (number of views, popular pages, origin, browser)
• Data processed: IP addresses are anonymised and stored only in hashed form, so that no personal reference can be established; no cookies are set
• Legal basis: Legitimate interest in data-minimising audience measurement (Art. 6(1)(f) GDPR)

15. Google Maps and YouTube

On individual pages (e.g. Contact) we embed maps from Google Maps, and we may embed videos from YouTube. Both services are only loaded once you consent; until then you see a placeholder.

• Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (for YouTube: Google Ireland Limited as operator of YouTube)
• Purpose: Display of a directions map or videos
• Data processed: IP address, device and browser information, interactions with the map or video, cookies (e.g. “NID”, “YSC”, “VISITOR_INFO1_LIVE”)
• Legal basis: Your consent (Art. 6(1)(a) GDPR, § 165(3) TKG 2021); can be withdrawn at any time via the cookie settings (Marketing category)
• Privacy policy: policies.google.com/privacy

A transfer to the USA is possible. The parent company is certified under the EU-US Data Privacy Framework; the transfer is based on the adequacy decision of the EU Commission (Art. 45 GDPR).

16. Google reviews (Trustindex)

We display genuine reviews from our Google Business Profile using the WordPress plugin from Trustindex. When they are displayed, graphics and a script are loaded from Trustindex servers (cdn.trustindex.io) and profile pictures of the reviewers from Google servers. In the process, your IP address and browser information are transmitted to these servers; no cookies are set for this.

• Provider: Trustindex Kft., Hungary, and Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
• Purpose: Display of our customer reviews
• Data processed: IP address, browser information, time of retrieval
• Legal basis: Legitimate interest in a transparent display of our reviews (Art. 6(1)(f) GDPR)

17. Fonts and icons

Fonts (e.g. Jost) and icons (Font Awesome) are hosted on our own server. When the website is loaded, no connection is made to Google Fonts or other font providers.

18. Links to social networks

We link to our profiles on Facebook, Instagram, LinkedIn and YouTube and to our Google Business Profile. These are simple links without embedded plugins: only when you click a link are you forwarded to the respective platform, and its privacy policy then applies.

19. Armiflow – our own software

Armiflow is software of Kodlogy Technologies GmbH (www.armiflow.com). Insofar as Armiflow functions are integrated on this website – such as price overviews, registration and login, online bookings or forms – the following applies:

• The controller here too is Kodlogy Technologies GmbH. The application runs at app.armiflow.com.
• Embedded content (e.g. prices, booking pages) is loaded from the Armiflow servers; in the process, your IP address is processed technically (Art. 6(1)(f) GDPR).
• Registration, login and payment take place entirely in Armiflow, not in WordPress. The data you enter there (e.g. name, email address, company details, payment details) is processed for the performance of the contract (Art. 6(1)(b) GDPR). If you log in with Google, Apple, Facebook or Microsoft, we receive your name and email address from that provider.
• Origin of the visit: If you come to us via a campaign or another website, Armiflow may store this origin (e.g. utm parameters, referring website) in your browser for up to 30 days and adopt it upon registration. This only happens with your consent (Marketing category).
• Online bookings and forms (e.g. rental enquiries): we process contact details, the desired period and – insofar as necessary for the contract – further details such as driver or driving licence data and uploaded documents (Art. 6(1)(b) and (c) GDPR).
• Online payments and deposits are processed via Stripe: Stripe Payments Europe Limited, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland. Stripe does not pass card details on to us. Privacy: stripe.com/at/privacy.

You can find detailed information on processing within the application in the Armiflow privacy policy.

20. Recipients and transfers to third countries

Your data is only received by the parties named in this policy and only to the extent described. A transfer to countries outside the EU or the EEA (in particular the USA) may take place in the case of Google and Microsoft. These companies are certified under the EU-US Data Privacy Framework; the transfer is based on the adequacy decision of the EU Commission (Art. 45 GDPR). We do not sell your data.

21. Your rights

You have the following rights towards us with regard to your personal data:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object to processing based on our legitimate interest (Art. 21 GDPR)
• Right to withdraw consent with effect for the future (Art. 7(3) GDPR), e.g. via the cookie settings

To do so, simply contact support@kodlogy.at.

If you believe that the processing of your data violates data protection law, you can lodge a complaint with the supervisory authority. In Austria, this is the Austrian Data Protection Authority (Österreichische Datenschutzbehörde), Barichgasse 40–42, 1030 Vienna, dsb@dsb.gv.at, www.dsb.gv.at.

22. Automated decision-making

We do not make any decisions based solely on automated processing, including profiling, that produce legal effects concerning you or similarly significantly affect you (Art. 22 GDPR).

23. Changes to this privacy policy

We adapt this privacy policy when we use new services or the legal situation changes. The version published here applies.