Legal information

Privacy policy

Protecting your personal data matters to us. We process your data exclusively on the basis of the applicable law (GDPR). Below we explain the key aspects of data processing on this website.

Controller

  • Zensations GmbH, Tuchlauben 7a, A-1010 Wien, Austria
  • Privacy contact: sh@zensations.at
  • Phone: +43 1 89 00 179

Data subjects and categories of data

This concerns visitors and users of our website, and — within a client engagement — the people described under “Agency services”.

  • Master data (names, addresses)
  • Contact data (email, phone number)
  • Content data (text entries)
  • Usage data (pages visited, interest in content, access times)
  • Meta and communication data (device information, IP addresses)

Contacting us

If you contact us through a form on this website or by email, the data you provide is stored for six months to handle your enquiry and any follow-up questions. We do not pass this data on without your consent. Legal basis: Art. 6(1)(b) and (f) GDPR.

Cookies and consent

This website uses cookies, small text files stored on your device by your browser. Strictly necessary cookies keep the site working and are set on the basis of our legitimate interest (Art. 6(1)(f) GDPR).

Statistics and marketing cookies are only set if you explicitly agree in the cookie banner (Art. 6(1)(a) GDPR). Your choice is stored locally in your browser. You can change or withdraw it at any time via the “Cookie settings” link in the site footer, and you can delete or block cookies in your browser — some features may then be limited.

  • Necessary: security, core functionality, storing your cookie choice. Always active.
  • Statistics: anonymised audience measurement to improve our content. Only with your consent.
  • Marketing: measurement and delivery of campaigns. Only with your consent.

Web analytics

If you consent to statistics cookies, we use analytics services to evaluate how our website is used and to improve it. Usage data is processed pseudonymously and is not merged with other sources. Without your consent no analytics take place. Legal basis: Art. 6(1)(a) GDPR; storage period: up to 24 months.

Hosting and server log files

When you access our website, technically necessary access data is processed (IP address, date and time, page requested, browser type, operating system). This serves the secure and stable delivery of the website and is deleted after a short period. Legal basis: Art. 6(1)(f) GDPR.

Fonts

This website uses the Open Sans typeface. Loading the font files may establish a connection to Google Fonts (Google Ireland Limited / Google LLC), transmitting your IP address. More information: https://policies.google.com/privacy

GEO/AEO check and payments

For the GEO/AEO check we process the website address you enter in order to analyse that site's publicly available content and produce your report. For paid reports we additionally process your billing details. Payments are handled by Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Dublin, Ireland. Card details are processed solely by Stripe; we never receive full payment data. Legal basis: Art. 6(1)(b) GDPR and, for invoice retention, Art. 6(1)(c) GDPR.

Newsletter

You can subscribe to our newsletter. We need your email address and your consent. After signing up you receive a confirmation email. You can unsubscribe at any time via the link in every mailing or by email. We then delete your data related to the newsletter. Legal basis: Art. 6(1)(a) GDPR.

Agency services

Within our contractual services we process personal data for strategic consulting, campaign planning, software and design development, maintenance, server administration, data analysis and training. This covers client master data, contact data, content data, contract data as well as usage and meta data.

Legal bases are Art. 6(1)(b) GDPR (contractual services) and Art. 6(1)(f) GDPR (analysis, statistics, optimisation, security). Where data is entrusted to us as part of an engagement, we act on the client's instructions and under the data processing rules of Art. 28 GDPR.

Administration, accounting and retention

For administration, accounting and statutory obligations we process the same data as for our contractual services. Legal bases are Art. 6(1)(c) and (f) GDPR. Recipients may include tax authorities, tax advisors and payment providers. Statutory archiving periods are seven years and one month under § 132(1) of the Austrian Federal Fiscal Code.

Data minimisation

We store personal data only for as long as required or prescribed by law. Once the purpose no longer applies or the retention period ends, we restrict or delete the data.

Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability, withdrawal of consent and objection. Objection is possible in particular against processing for direct marketing purposes.

For requests please contact sh@zensations.at or +43 1 89 00 179. If you believe that the processing of your data infringes data protection law, you may lodge a complaint with the Austrian Data Protection Authority.