ENI DREI Immobilien GmbH & Co KG, Lehargasse 7, 1060 Vienna, office@derkaerntnerringhof.com (“we”, “us”) places great importance on the adequate protection of your personal data. We therefore comply with the applicable legal provisions, in particular the General Data Protection Regulation (“GDPR”), the Austrian Data Protection Act (“DSG”), and the Telecommunications Act 2021 (“TKG”), to ensure the protection, lawful processing, confidentiality, and security of personal data.
Below you will find information about which data we may collect, process, and use when (i) you visit and use the website www.derkaernterringhof.com:

1. RESPONSIBLE FOR DATA PROCESSING
ENI DREI Immobilien GmbH & Co KG, Lehargasse 7, 1060 Vienna, office@derkaerntnerringhof.com.

2. WHAT IS PERSONAL DATA?

Personal data refers to any information relating to an identifies or identifiable natural persons (“data subjects”). This includes, for example, your name, IP address, or email address.

3. WHICH DATA DO WE COLLECT FROM YOU?

Usage data: When you visit our website, we collect the IP address of your device, the internet browser used, browser language, operating system, requested files on our website, your Java settings, screen resolution, color depth, your click behavior on the website (access times, clicks), as well as the website from which you visit us (referrer URL).

Contacting us: When you fill out and submit the contact form on our website, we process the personal data you voluntarily provide (name, email address, telephone number, and the content of your message).

Social media plugins: Some pages contain buttons from social media networks (such as Facebook and Twitter) that allow you to share our website with others. These plugins are marked with symbols (e.g., “Facebook,” “Twitter,” or “Pinterest” buttons). When you click such a button, the following data may be transmitted to the operator of the respective social network: IP address, browser information and operating system, screen resolution, installed browser plugins, visitor origin, and URL of the current page. The respective social network may thereby associate your browsing behavior with your personal social media account. For more information, see section 5.

We only transmit your personal data in the context of social media plugins based on your consent. You may revoke this consent at any time with future effect.

4. HOW DO WE COLLECT YOUR DATA?

The data generated during your visit to our website is collected automatically via cookies (details in section 8). We only collect data based on your entries on our website.

5. FOR WHAT PURPOSES AND ON WHICH LEGAL BASIS DO WE USE YOUR DATA?

Usage data: We use your personal data to (i) improve our services and our website and enhance user-friendliness, and (ii) personalize our services for website users by temporarily storing search parameters. The access data collected during the use of the website is used exclusively for statistical evaluations and in aggregated form for the purpose of operating, securing, and optimizing the website (overriding legitimate interests pursuant to Art. 6 (1) (f) GDPR).

Contact inquiries: We use the personal data you submit via the contact form exclusively to process your inquiry and thus to fulfill our (pre-)contractual obligations (Art. 6 (1) (b) GDPR).

As outlined later in this privacy notice, we use the services of third-party providers (Google, Facebook, LinkedIn, etc.). The transmission of your personal data to these third parties for the purposes described below takes place exclusively based on your consent where legally required (Art. 6 (1) (a) GDPR).

If these third-party providers are located outside the EEA, we transmit your data to the respective third country only based on your explicit consent in accordance with Art. 49 GDPR.

6. WILL YOUR DATA BE DISCLOSED TO THIRD PARTIES?

We transfer your personal data to the following external service providers (processors) to the extent necessary:

• IT service providers and/or providers of data hosting or data processing or similar services;
• other service providers and providers of tools and software solutions who support us in delivering our services and act on our behalf (including providers of marketing tools, marketing agencies, communication service providers, and call centers).

All our processors process your data solely based on our instructions and only for the provision of the services mentioned above.

We also transfer your personal data to the following recipients to the extent necessary:

• external third parties based on our legitimate interests (e.g., auditors, insurance companies in the event of claims, legal representatives, etc.);
• authorities and other public bodies to the extent required by law (e.g., tax authorities).

If the above-mentioned recipients of your personal data are located outside the EEA and the European Commission has not issued an adequacy decision for the respective country, we ensure that the transfer is based on Standard Contractual Clauses (currently 2021/914/EC) or otherwise in accordance with Articles 46, 47, or 49 GDPR.

7. HOW IS YOUR DATA PROTECTED?

We take appropriate technical and organizational security measures to protect your personal data against accidental or unlawful deletion, alteration, damage, loss, unauthorized disclosure, or unauthorized access. Additionally, we and our employees are bound to maintain data confidentiality.

8. DOES THE WEBSITE USE COOKIES?

Yes, we use cookies. These are small text files that are temporarily stored on your device and saved by your browser. Cookies allow the website to store essential data, making your use of the website more convenient.

Like most websites, we use cookies—provided you have given your consent—for a variety of purposes to improve your experience on our website. If you do not give your consent, we only collect anonymous data, for example to determine the total number of visitors to our website.

8.1 Google Analytics

If you have consented, this website uses Google Analytics, a web analytics service provided by Google Inc. (“Google”). This tool uses cookies to record standard logging information and visitor behavior on our website in aggregated form. The information generated by the cookie regarding your use of the website is generally transferred to a Google server in the USA or other non-EU countries and stored there. Google Analytics collects the following information: browser, device type, device model, country, service provider, screen resolution (on mobile devices), time spent on the website, language, operating system and pages visited on the website.Google uses this information to evaluate your use of the website and compile reports on website activity for us.

You may refuse the use of cookies by adjusting your browser settings or by downloading a browser plugin at:http://tools.google.com/dlpage/gaoptout

We use the technologies provided by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). The information automatically collected by Google technologies is generally transmitted to servers of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, and stored there.

There is no adequacy decision for the USA. Our cooperation with Google is based on the Standard Contractual Clauses of the European Commission. If your IP address is collected, it is anonymized before being stored by enabling IP anonymization. Only in exceptional cases is the full IP address transferred to a Google server and anonymized there. Where nothing else is explicitly stated for specific technologies, data processing is carried out on the basis of a joint controllership agreement pursuant to Art. 26 GDPR. Further information about Google’s data processing can be found in Google’s privacy notices.

Note that U.S. authorities (e.g., intelligence agencies) may potentially access personal data processed by Google due to U.S. legislation such as the CLOUD Act.

Additional Enrichment (Leadfeeder)

1provided by Liidio Oy / Leadfeeder, Mikonkatu 17 C, 00100 Helsinki, Finland.

Leadfeeder accesses the list of IP addresses provided by Google Analytics and links them with publicly available company information corresponding to those IP addresses.

Since IP addresses are anonymized through Google Analytics, a direct personal reference is not possible.
A personal link may be assumed indirectly through company-related information.

Further information: www.leadfeeder.com/privacy/
GDPR compliance: help.leadfeeder.com/faqs-and-troubleshooting/is-leadfeeder-ready-for-gdpr

Google Ads

For advertising in Google search results and on third-party websites, a Google remarketing cookie is set when you visit our website. This cookie automatically collects and processes data (IP address, visit time, device and browser information, and information about your website usage) and enables interest-based advertising through a pseudonymous cookie ID.

Further data processing takes place only if you have activated the “personalized advertising” setting in your Google account. If you are logged into Google during your visit, Google may combine your data with Google Analytics data to create cross-device remarketing audiences.

Google recaptcha

To protect our web forms from abuse and automated spam (bots), Google reCAPTCHA collects data (IP address, visit time, browser information, website usage data) and analyzes your behavior using JavaScript and cookies. No personal data from form input fields is read or stored.

Google Fonts

For consistent display of website content, Google Fonts collects data (IP address, visit time, device and browser information), transfers them to Google, and Google processes these data further. We have no control over this subsequent data processing.

YouTube Video Plugin

To embed third-party content, we use the YouTube video plugin in enhanced privacy mode. Data (IP address, visit time, device and browser information) is only transmitted to Google when you play a video.

8.2 Google Tag Manager

We use Google Tag Manager, provided by Google Ireland Ltd. Google Tag Manager is a helper tool that only processes personal data to the extent technically necessary.
It triggers other components that may collect data, but Google Tag Manager does not access this data. Further information can be found in Google’s privacy policy. Please note that due to U.S. laws such as the Cloud Act, U.S. authorities may access data transmitted to Google.

8.3 Google Remarketing

We use Google Remarketing technology from Google Inc. (USA). It enables us to target users who have previously visited our website with product recommendations on Google partner websites. This is based on cookies and pseudonymous analysis of your browsing behavior.No personal profiles are created. You can object at:http://www.google.com/settings

8.4 Facebook Pixel

This website uses Facebook Pixel from Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA, to display interest-based ads to visitors of our website when they browse Facebook.

When you visit our website, a direct connection to Facebook servers is established.
Facebook receives information that you visited our website and assigns this to your Facebook account.

We, as website operators, do not receive details about the transmitted data or its use by Facebook.

Further information:
• https://www.facebook.com/about/privacy
• https://www.facebook.com/policy.php
• https://www.facebook.com/help/186325668085084

We do not transmit customer personal data to Facebook.

USE OF FACEBOOK PIXEL (Detailed Explanation)

We use Facebook Pixel within the scope of the technologies provided by Facebook Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland (“Facebook”).

Using Facebook Pixel, data (IP address, time of visit, device and browser information, and information about your use of our website based on specified events such as visiting a page or signing up for a newsletter) is automatically collected and stored.
From this data, usage profiles can be created under pseudonyms.

When you visit our website, Facebook Pixel automatically places a cookie, which—through a pseudonymous cookie ID—enables recognition of your browser when visiting other websites.

Facebook aggregates this information with other data from your Facebook account and uses it to compile reports about website activities and to offer further services related to website usage, especially personalized and group-based advertising.

The information automatically collected through Facebook’s technologies about your use of our website is typically transferred to a Facebook Inc. server, 1601 Willow Road, Menlo Park, California 94025, USA, and stored there.

The USA has no adequacy decision by the European Commission. If data transfer to the USA falls under our responsibility, our cooperation is based on Standard Contractual Clauses of the European Commission.

For more information about Facebook’s data processing, refer to Facebook’s privacy notices.

Facebook Analytics

Using Facebook Analytics, statistics about visitor activity on our website are generated based on data collected via Facebook Pixel.
Data is processed under a data processing agreement with Facebook.

These analytics help us optimize the presentation and marketing of our website.

Facebook Ads

We place advertisements for this website on Facebook and other platforms through Facebook Ads. We define the parameters of each advertising campaign, while Facebook is responsible for the exact implementation, including deciding which ads are displayed to which users.

Unless explicitly stated otherwise, data processing occurs based on an agreement between joint controllers pursuant to Art. 26 GDPR. Joint responsibility applies only to data collection and transmission to Facebook Ireland.
Any further data processing by Facebook Ireland is not covered by this joint responsibility.

Using the pseudonymous cookie ID set by Facebook Pixel and the collected usage data, we run personalized remarketing via Facebook Pixel.

Facebook Pixel Conversions

We use Facebook Pixel Conversions to measure and analyze user behavior after they are redirected to our website via Facebook Ads. Data processing is governed by a data processing agreement with Facebook.

8.5 LinkedIn Insight Tag

This website uses the LinkedIn Insight Tag, provided by LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland.

Data Processing with LinkedIn Insight Tag

With the LinkedIn Insight Tag, we gain insights into visitors to our website.
If a website visitor is registered on LinkedIn, we can analyze, among other things: career level, company size, country and location, industry and job title. This helps us tailor our website more effectively to our target audience.

We can also measure conversions—i.e., whether visitors complete actions such as purchases or other interactions. Conversion tracking may occur across devices (e.g., PC → tablet).

LinkedIn Insight Tag additionally enables retargeting: users can be shown targeted advertising outside our website — without LinkedIn identifying them personally.

LinkedIn also collects log files, such as:URL and referrer URL, IP address, device and browser characteristics, time of access

IP addresses are shortened or hashed. Direct identifiers of LinkedIn members are deleted after seven days; pseudonymized data is deleted within 180 days.

We as website operators cannot associate the data with specific individuals.

LinkedIn stores personal data on servers in the USA and uses them for its own advertising purposes. Details:https://www.linkedin.com/legal/privacy-policy#choices-oblig

Legal basis

Use of LinkedIn Insight Tag is based on Art. 6(1)(f) GDPR (legitimate interest in effective advertising including social media). Where consent is required (e.g., cookie storage), processing is based on Art. 6(1)(a) GDPR. Data transfers to the USA rely on EU Standard Contractual Clauses:https://www.linkedin.com/legal/l/dpa https://www.linkedin.com/legal/l/eu-sccs

You can object to:  behavioral analysis and targeted advertising at: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out

LinkedIn members can control advertising use of their data in their account settings. To prevent LinkedIn from linking data collected on our site with your LinkedIn account, you must log out of LinkedIn before visiting our site.

8.6 Hotjar

Our website uses Hotjar to collect information about user behavior and their devices (e.g., anonymized IP address, device type, browser type, preferred language). Hotjar stores this information in pseudonymized user profiles.The data is not used to identify individual users. You may revoke your consent to Hotjar tracking at any time. Further details: https://www.hotjar.com/legal/policies/privacy

8.7 Adform Pixel

We use Adform, a digital media advertising platform, provided by Adform A/S, Silkegade 3B, 1113 Copenhagen, Denmark. More information:https://site.adform.com/de/privacy-center/platform/datenschutzrichtlinie-fuer-produkte-und-services/

Opt-out:https://site.adform.com/de/privacy-center/website/datenschutz-opt-out/

8.8 Teads Universal Pixel

We use Teads Universal Pixel (Teads Schweiz GmbH, Ausstellungsstrasse 50, 1020 Vienna) to track user behavior.The Teads pixel sends a signal every time a user visits our website. Teads checks whether the user is already known (i.e., already has a Teads cookie). If known, the user is excluded from our campaign. If not known, nothing happens — the pixel only identifies whether a Teads cookie is already present.

The pixel can access: current URL, Auctid parameter (optional), device, browser and operating system. No personal data is exchanged or collected. The pixel does not collect or share personal data. Further information: https://www.teads.com/privacy-policy/

8.9 Borlabs Cookie

This website uses Borlabs Cookie, which stores your cookie consent in a technically necessary cookie (borlabs-cookie). Borlabs Cookie does not process personal data.

Your consent settings are stored inside the cookie. If you want to withdraw your consent, simply delete the cookie in your browser. When reloading the site, you will be asked again for your cookie consent.

9. STORAGE PERIOD

We store your personal data only for as long as necessary to fulfill our obligations toward you. Due to statutory retention requirements, we typically store personal data provided in connection with orders for seven years after contract fulfillment, unless longer storage is required by law.

10. WHAT RIGHTS DO YOU HAVE?

As a data subject of our data processing, you generally have the following rights vis-à-vis the respective controller:

a) Right of access
You have the right to request information at any time—informally—about which personal data concerning you is being processed by us as the controller.
This includes details such as processing purposes, categories of recipients, data origins and information about automated decision-making and the logic involved.
You also have the right to be informed whether your personal data is transferred to a third country or an international organization, including information about the safeguards under Art. 46 GDPR.

b) Right to rectification and right to restriction of processing
You may request the correction or completion of inaccurate or incomplete data.
You also have the right to request a restriction of processing—meaning your data may only be processed with your consent, or for the establishment, exercise, or defense of legal claims, or for the protection of the rights of another person, or for important public interest reasons—particularly if the accuracy of the data is contested.

c) Right to data portability
You may request that a copy of the data you have provided to us be transmitted to you—or, where technically feasible, to a third party you specify—in a structured, commonly used, and machine-readable format.

d) Right to delete
You may request deletion of your data under certain circumstances, for example if the processing is not in compliance with data protection regulations.

e) Right to object
You have the right to object at any time—on grounds relating to your particular situation—to the processing of your personal data.
In this case, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, or the processing serves the establishment, exercise, or defense of legal claims.

f) Right to withdraw consent
You have the right to withdraw your data protection consent at any time without providing reasons, by email to: office@derkaerntnerringhof.com

Withdrawal does not affect the lawfulness of processing carried out prior to the withdrawal. We will delete your data unless legal retention obligations require otherwise.

g) Right to make a complaint
If you believe that your data protection rights have been violated or that the processing of your data infringes your right to confidentiality, you may lodge a complaint with the competent supervisory authority: Austrian Data Protection Authority, Barichgasse 40–42, 1030 Vienna
This does not affect your right to pursue legal remedies before the civil courts under § 29 (2) DSG or other legal rights.

11. FINAL PROVISIONS

We may update this Privacy Policy to reflect legal, technical, or business developments. If we update the policy, we will take reasonable steps to inform you about the changes.

The website contains links to third-party websites. We have no control over the content or privacy practices of such websites.Please read the respective privacy policies of any external websites you visit.

Some of the personal data mentioned above is required for the proper provision of our website and for fulfilling contractual or legal obligations. If you refuse to provide personal data required for these purposes, we may not be able to perform the processing operations or provide some of the services described.

(Status: December 2025)