Data protection

Controller

Intralab GmbH, Hernalser Hauptstrasse 49/24, 1170 Vienna, Austria. Commercial register number FN 596730w, Commercial Court of Vienna. Managing Director: Fabian Fratzscher, MSc. MBA. Phone +43 688 642 999 86, email office@intralab.net.

No data protection officer is required by law and none has been appointed. Please direct data protection enquiries to the contact details above.

Your rights

You have the right to:

• access the data we hold about you and information on its processing (Article 15 GDPR)
• rectification of inaccurate personal data (Article 16 GDPR)
• erasure of the data we hold about you (Article 17 GDPR)
• restriction of processing where we are not yet permitted to erase your data due to legal obligations (Article 18 GDPR)
• data portability (Article 20 GDPR)
• object to the processing of your data (Article 21 GDPR)

You may withdraw any consent given at any time with effect for the future.

You also have the right to lodge a complaint with the supervisory authority: Austrian Data Protection Authority, Barichgasse 40–42, 1030 Vienna, dsb@dsb.gv.at, www.dsb.gv.at

Visiting this website (server log files)

When you access our website, technical access data is processed automatically: IP address, date and time of access, page accessed, browser and operating system used, and the volume of data transferred.

Purpose: provision and stability of the website, and detection and prevention of attacks. Legal basis: Article 6(1)(f) GDPR, legitimate interest in a secure and functioning web presence. Retention: deleted after 30 days at the latest.

Our website is hosted by Webflow, Inc., 398 11th Street, San Francisco, CA 94103, USA. Webflow acts as a processor; an agreement pursuant to Article 28 GDPR is in place. This involves a transfer to the USA, based on the European Commission's adequacy decision on the EU-US Data Privacy Framework and, additionally, the standard contractual clauses.

Cookies

This website uses only one technically necessary cookie, which records whether you have closed the cookie notice. No analytics, tracking, advertising or profiling cookies are used.

Legal basis: section 165(3) of the Austrian Telecommunications Act 2021 in conjunction with Article 6(1)(f) GDPR. No consent is required for technically necessary cookies.

No web analytics, no tracking, no advertising networks

We do not use any web analytics services, in particular not Google Analytics. We do not run advertising via this website and do not embed any advertising or remarketing technologies. No profiling takes place.

Fonts

The fonts used are loaded from our own web space. There is no connection to external font providers.

External program libraries

On individual pages, design and function libraries are loaded from external content delivery networks (jsDelivr, operated by Prospect One Sp. z o.o., Poland, and CodeSandbox, operated by CodeSandbox B.V., Netherlands). Your IP address is transmitted to the respective provider because delivery is technically impossible without it.

Purpose: correct display and function of the website. Legal basis: Article 6(1)(f) GDPR, legitimate interest in a functioning website.

Contacting us

There is no contact form. If you contact us by email or telephone, we process your details in order to handle your enquiry.

Legal basis: Article 6(1)(b) GDPR for pre-contractual enquiries, otherwise Article 6(1)(f) GDPR. Retention: deleted at the latest six months after the enquiry has been dealt with, unless statutory retention obligations under the Austrian Commercial Code or Federal Fiscal Code apply.

Job applications

We process application documents you send us exclusively for the purpose of conducting the application procedure.

Legal basis: Article 6(1)(b) GDPR. Retention: deleted at the latest six months after the procedure has concluded, unless you have expressly agreed to longer retention.

Processing in the context of consulting projects

Outside this website, we process personal data in the course of our consulting work, including during interviews, workshops and their analysis. This also involves the use of transcription and AI systems. The details are governed by our General Terms and Conditions and the information for participants contained therein. Participants are informed separately before any recording.

No automated decision-making

No automated decision-making, including profiling, within the meaning of Article 22 GDPR takes place.

Encryption

To protect your data during transmission, we use encryption in line with the current state of the art via HTTPS.

Changes to this privacy policy

We adapt this privacy policy when the legal situation or our services change. The version current at the time of your next visit applies.

Version: September 2026