Hinweis für deutschsprachige Nutzer: Diese Datenschutzerklärung gilt gemäß österreichischem Recht (DSGVO, ECG) und ist auf Englisch verfasst. Bei Fragen oder zur Ausübung Ihrer Datenschutzrechte wenden Sie sich bitte an of****@****ro.com.
Data Controller: Roland Wenzlofsky, DWHPro
Address: Kantnergasse 53, 1210 Vienna, Austria
Email: of****@****ro.com
Phone: +43 680 113 87 53
Website: https://www.dwhpro.com
Last updated: October 25, 2026
Scope
This Privacy Policy applies to the processing of personal data by Roland Wenzlofsky (operating as DWHPro), an Austrian sole trader (Einzelunternehmen) and through DWHPro LLC, in connection with the operation of https://www.dwhpro.com and all related services. It complies with the EU General Data Protection Regulation (GDPR), the Austrian Data Protection Act (DSG), and the California Consumer Privacy Act (CCPA) where applicable.
Data We Collect
a) Automatically collected data (log data):
- IP address (anonymized after 30 days)
- Browser type and version
- Pages visited and time spent
- Date and time of access
- Referring URL
b) Data you provide:
- Name and email address (when contacting us or subscribing to updates)
- Content of your message (when using the contact form)
c) Cookie data:
- Technically necessary cookies (session management, security)
- Analytics cookies (only with your prior consent)
d) Website analytics data:
- Pages visited, referring URL, browser and device type, and approximate country
- Umami uses a rotating hashed visitor identifier. Google Analytics uses pseudonymous identifiers and interaction information according to your analytics choice.
- Umami uses no analytics cookies. Google Analytics can use analytics cookies when you allow analytics.
- If you reach our site from one of our emails, the link may carry your email address as a parameter in the web address, so that visit — and any file you download — is recorded against your address
e) Newsletter and email campaign data:
- Your email address, name if you gave one, and the date you subscribed
- Whether a message was opened and which links in it were clicked
f) Enquiry and download data:
- Name, email address, company, role and current data platform, and the content of your message, when you use a form on this site
- Your email address and the time of each download, when you download a file from a link we sent you
- Your IP address, used only to limit automated abuse of the forms
Legal Basis for Processing (GDPR Art. 6)
- Art. 6(1)(a) – Consent (e.g. analytics cookies, email subscriptions)
- Art. 6(1)(b) – Performance of a contract or pre-contractual measures
- Art. 6(1)(c) – Compliance with a legal obligation
- Art. 6(1)(f) – Legitimate interests (e.g. IT security, fraud prevention, website operation)
Purposes of Processing
- Providing and operating the website
- Responding to inquiries and communicating with visitors
- Improving and analyzing website usage (only with consent)
- Fulfilling legal and contractual obligations
- Securing our IT infrastructure
Retention Periods
- Log data: 30 days, then anonymized or deleted
- Website analytics data: up to 24 months
- Contact inquiries, enquiry forms and download records: 3 years from last contact
- Newsletter engagement data (opens and clicks): until you unsubscribe
- Invoice and contract data: 7 years (§ 212 Austrian Commercial Code / UGB)
- Newsletter/subscription data: until consent is withdrawn
Third-Party Disclosure
We do not sell your personal data. We may share data with:
- Processors (e.g. hosting provider, email service) — bound by Data Processing Agreements (Art. 28 GDPR)
- Competent authorities when legally required
- Service providers necessary for contract fulfillment
Third-party services in use:
- Hosting and CDN: Cloudflare, plus our own servers
- Website analytics: Umami, self-hosted on our own server in Germany. Umami analytics data is stored on our own infrastructure. Google Analytics is separately retained for the existing Google Ads integration
- Newsletter and email campaigns: SendFox (United States) — see “International Data Transfers” below
- Forms and download records: stored on our own WordPress server
International Data Transfers
Where we use third-party providers located outside the European Economic Area (EEA) — for example, US-based cloud services — we ensure an adequate level of data protection through appropriate safeguards as required by Art. 46 GDPR, such as EU Standard Contractual Clauses (SCCs).
Cookies
Our website uses cookies. Technically necessary cookies are set without prior consent. All other cookies are only set after your explicit consent via our cookie banner.
Technically necessary cookies (no opt-in required):
- Session cookies for core functionality
- Security cookies (CSRF protection)
Analytics / marketing cookies (consent required):
- Google Analytics cookies are enabled according to your analytics choice. This choice does not grant advertising consent.
Use the Analytics settings button to change or withdraw your analytics choice. We remember your choice for 30 days using a first-party preference cookie.
Your Rights Under GDPR
You have the following rights regarding your personal data:
- Right of access (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to erasure / “right to be forgotten” (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object (Art. 21 GDPR)
- Right to withdraw consent at any time (Art. 7(3) GDPR)
To exercise any of these rights, contact us at of****@****ro.com. We will respond within 30 days as required by GDPR.
Right to Lodge a Complaint
You have the right to lodge a complaint with the competent supervisory authority:
Austrian Data Protection Authority (Datenschutzbehörde)
Barichgasse 40-42, 1030 Vienna, Austria
Tel.: +43 1 52 152-0
Web: https://www.dsb.gv.at
Notice for California Residents (CCPA)
If you are a California resident, the California Consumer Privacy Act (CCPA) grants you the following rights:
- Right to know what personal information is collected, used, shared, or sold
- Right to request deletion of your personal information
- Right to opt out of the sale of personal information
- Right to non-discrimination for exercising your privacy rights
We do not sell personal information. To submit a verifiable consumer request, contact us at of****@****ro.com. We will respond within 45 days.
Data Security
We implement appropriate technical and organizational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. These measures include encrypted data transmission (TLS/SSL), access controls, and regular security reviews. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in law or our services. The current version is always available on this page. For material changes, we will notify registered users by email where feasible.
Contact
Roland Wenzlofsky — DWHPro
Kantnergasse 53, 1210 Vienna, Austria
Email: of****@****ro.com
Phone: +43 680 113 87 53
Website analytics and your choices
Visit counting with Umami
We count visits with Umami, an open-source analytics tool that we run ourselves on a server in Germany. Umami sets no cookies and stores nothing on your device, so it runs without asking for consent. It records the page address (search terms and other query details are removed; campaign tags such as utm_source are kept), the referring website, browser, operating system, device type, screen size, language and approximate location (country, region and city). It also measures how quickly each page loads (for example the time until the main content appears and whether the layout shifts), so that we can keep the site fast. It also records fixed interaction events, such as viewing an offer, starting or submitting a signup or enquiry form, or downloading a guide. Form contents, names and email addresses are never sent to Umami. The data is not shared with anyone.
Your IP address is used briefly to derive the approximate location and an anonymous visitor ID that changes every month. Umami does not store IP addresses. Our server’s technical access logs keep them for up to 14 days for security and then delete them.
The legal basis is our legitimate interest in understanding how DWHPro is used so that we can improve it (Art. 6(1)(f) GDPR).
Your right to object: This stores an opt-out preference in your browser for one year. Browsers that send a Global Privacy Control or Do Not Track signal are not counted. You can also object by emailing of****@****ro.com.
Optional analytics with your consent
Only if you select Allow in the analytics notice do we:
- use Google Analytics, which remains connected for our Google Ads integration and can set cookies such as _ga;
- remember in your browser, for 30 days, which campaign or website first brought you to DWHPro, so that an enquiry can be attributed to it.
The website passes your choice to Google consent mode and keeps advertising storage, advertising user data and personalised advertising denied. Google consent mode can send limited cookieless signals when analytics storage is denied. The cookie dwhpro_analytics_choice and WordPress consent preferences remember your choice for 30 days; change it at any time with the Analytics settings button. Declining does not prevent access to articles, services or the enquiry form. Withdrawing consent removes accessible Google Analytics cookies and the stored campaign details; it does not erase information already collected.
Other reporting
Saved enquiries, confirmed bookings and newsletter signup records are separate operational records. Microsoft Clarity session recording and heatmaps are disabled. Cloudflare technical reporting and Google Search Console remain separate from visitor analytics.
Provider information: Google Privacy Policy. For questions about analytics or data rights, contact of****@****ro.com.
Newsletter signup requests and preferences
When you request the newsletter, we store your email address, consent wording and time, the signup placement and page, and the topic context of that page. We use these details to process the request, resolve connection failures and understand which resources readers find useful. They do not establish a consulting interest or add consent beyond the checkbox you select.
Signup requests are stored privately on our WordPress server and submitted to SendFox. Existing contacts retain their current email preferences. Follow any confirmation steps sent by SendFox; receiving a signup acknowledgement does not by itself confirm inbox delivery or a subscription. Contact us if you need help rejoining after unsubscribing.
Functional browser preferences remember an accepted signup request, a dismissed popup, and visits from our newsletter so we can avoid repeated signup prompts. The signup-request preference lasts up to one year, dismissal up to 14 days, and newsletter-visit suppression lasts for the browser session. These preferences do not contain your email address and do not grant analytics consent.
We check email addresses with Reoon Email Verifier (Reoon Technology) for typos, disposable domains and known spam traps: new newsletter signup addresses before they are passed to SendFox, and the address entered in our enquiry form before the enquiry is saved. We also periodically check the addresses already on our mailing list. Only the email address is transmitted. Reoon sends no emails to it and deletes the data after 15 days. If an address is rejected, we keep it with the time and the reason on our own server for 30 days, so that we can detect misuse and help if a genuine address was declined; after that it is deleted automatically. The legal basis is our legitimate interest in a deliverable mailing list and in keeping spam out of our forms (Art. 6(1)(f) GDPR).