Privacy Policy

As of September 2026

1. Controller

The controller responsible for data processing within the meaning of the General Data Protection Regulation (GDPR) is:

PBX GmbH
Stockerauer Straße 106, Halle D
2100 Korneuburg, Austria
Email: hello@pbx.at

2. General Information on Data Processing

We process personal data of the users of this website only to the extent necessary to provide a functioning website and our content and services. The processing of personal data generally only takes place with the user’s consent or on the basis of another legally permitted basis pursuant to Art. 6 (1) GDPR.

3. Hosting and Server Log Files

This website is hosted by websupport.sk (Slovakia, EU). When you access our website, our hosting provider automatically collects information in so-called server log files, which your browser automatically transmits to us. These are:

  • Browser type and version
  • Operating system used
  • Referrer URL
  • Host name of the accessing computer
  • Time of the server request
  • IP address

This data is not merged with other data sources. The collection of this data is based on Art. 6 (1) (f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimisation of its website — for this purpose, the server log files must be recorded.

4. Processing of Form Data and Newsletter Distribution

a) General Inquiry Form (Inbound Inquiries)

If you send us a message via our general contact and inquiry form, the data you enter (e.g. name, email address, content of your message) is stored on our systems.

  • Purpose & Processing: The data is processed exclusively manually by our staff in order to handle your request, prepare offers, or contact you. No automated forwarding to third parties for marketing purposes takes place.
  • Legal basis: Processing takes place on the basis of Art. 6 (1) (b) GDPR (performance of pre-contractual measures or fulfilment of a contract) or to safeguard our legitimate interest in the efficient handling of customer inquiries (Art. 6 (1) (f) GDPR).

b) Newsletter Sign-up via HubSpot

We use the service HubSpot for sending our newsletter.

  • Provider: HubSpot European Headquarters, Ground Floor, Two Dockland Central, Guild Street, Dublin 1, Ireland (parent company: HubSpot, Inc., 25 First Street, 2nd Floor, Cambridge, MA 02141, USA).
  • Purpose & Processing: When you sign up for our newsletter, the data entered in the HubSpot form (email address and, where applicable, name) is transmitted directly to HubSpot and stored there. On our behalf, HubSpot handles the technical delivery of emails as well as statistical evaluation (e.g. open and click rates) in order to optimise our newsletter for you.
  • Legal basis: Processing and delivery take place exclusively on the basis of your explicit consent pursuant to Art. 6 (1) (a) GDPR.
  • Third-country transfer (USA): HubSpot Inc. is certified under the EU-U.S. Data Privacy Framework (DPF). This means there is an adequacy decision by the European Commission that guarantees a secure level of data protection should data be processed in the USA. In addition, we have concluded a Data Processing Agreement with HubSpot.
  • Right of withdrawal & storage period: You may withdraw your consent to receive the newsletter at any time with effect for the future. To do so, use the unsubscribe link at the end of every email. After unsubscribing, your data will be deleted from the active newsletter distribution list.

5. Appointment Booking via Google Calendar

For scheduling video meetings, we use Google Calendar as a booking tool. When you book an appointment via the link provided, you enter your name, email address, and the desired appointment time directly with Google.

Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The data collected during appointment booking is processed manually by us and may be matched with our CRM system (HubSpot, see Section 4b).

Legal basis is Art. 6 (1) (b) GDPR (pre-contractual measures or performance of a contract) as well as your consent through active use of the booking link (Art. 6 (1) (a) GDPR). For more information on how user data is handled, please refer to Google’s privacy policy: https://policies.google.com/privacy

6. Google Maps

On our contact page, we offer the option to display a map from the Google Maps service. Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

The map is not loaded by default when the page is accessed. Instead, a static preview image is initially displayed that does not establish any connection to Google servers. Only when you actively click on this preview image is the interactive Google Maps map embedded.

By clicking, your IP address is transmitted to Google and generally stored on Google servers in the USA. The provider of this website has no influence over this data transfer. By clicking the preview image, you consent to this data transfer; the legal basis is Art. 6 (1) (a) GDPR. This consent is voluntary and is not required for the use of the rest of the website.

For more information on how user data is handled, please refer to Google’s privacy policy: https://policies.google.com/privacy

7. Cookies

Our website currently does not use cookies for analytics or marketing purposes. Only technically necessary cookies are used, which are required for the operation of the website (e.g. session management by WordPress). These technically necessary cookies are set on the basis of Art. 6 (1) (f) GDPR; the website operator has a legitimate interest in the technically error-free and optimised provision of its services.

8. Embedded Fonts

This website uses the typeface “Söhne” for consistent font display. The font is hosted locally on our own server (self-hosting) — no connection is made to third-party servers (e.g. Google Fonts), meaning no data is transmitted to external font providers simply by visiting the website.

9. Your Rights as a Data Subject

You generally have the following rights with respect to your personal data:

  • Right of access (Art. 15 GDPR)
  • Right to rectification or erasure (Art. 16, 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to object to processing (Art. 21 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to withdraw consent given, with effect for the future (Art. 7 (3) GDPR)

You also have the right to lodge a complaint with a data protection supervisory authority regarding our processing of your personal data. The authority responsible for us is:

Austrian Data Protection Authority (Österreichische Datenschutzbehörde)
Barichgasse 40–42, 1030 Vienna, Austria
dsb@dsb.gv.at

10. SSL / TLS Encryption

For security reasons and to protect the transmission of confidential content, this website uses SSL/TLS encryption. You can recognise an encrypted connection by the fact that the browser’s address bar changes from “http://” to “https://” and by the lock icon in your browser bar.

11. Currency and Amendment of this Privacy Policy

This privacy policy is currently valid and dated September 2026. Due to the further development of our website and offerings, or due to changed legal or regulatory requirements, it may become necessary to amend this privacy policy.