How we protect your data
We process personal data exclusively in line with the General Data Protection Regulation (GDPR) and applicable national regulations. As a business advisory firm, we use your information to manage contractual relationships, answer enquiries, provide digital services, and deliver executive programmes. Data processing only takes place when there is a legal basis or your explicit consent.
Categories of personal data
- Master data such as name, job title, company, and contact details.
- Communication data such as messages, notes from workshops, and service feedback.
- Contractual information relating to projects, training enrolments, and support requests.
- Technical usage data captured when you access our digital platforms.
Purposes and legal basis
We use personal data to prepare and execute consulting assignments, to maintain customer accounts, to provide secure access to project platforms, and to fulfil statutory obligations such as retention duties. Our legal bases are Article 6(1)(b) GDPR (performance of a contract), Article 6(1)(c) GDPR (legal obligations), and Article 6(1)(f) GDPR (legitimate interests in efficient operations and IT security). If we rely on your consent pursuant to Article 6(1)(a) GDPR, you may withdraw it at any time with future effect.
Sharing data with third parties
We only transfer data to carefully selected processors, for example hosting providers, communication tools, or accounting partners. All processors are bound by written agreements that guarantee GDPR-compliant handling of your data. International transfers only take place on the basis of adequacy decisions or standard contractual clauses.
Retention periods
We store personal data for as long as necessary to provide our services or to comply with statutory retention requirements. Project documentation is typically retained for seven years under commercial law. Marketing data that is based on consent will be erased immediately after you withdraw your consent.
Your rights
You have the right to access, rectify, erase, and restrict the processing of your personal data. You may also object to processing based on legitimate interests or request data portability. Please contact us via privacy@sourceweb.agency. If you believe that our processing infringes data protection law, you can lodge a complaint with the relevant supervisory authority.
Contact
SourceWeb Consulting & IT e.U.
Data Protection Office
Kinkstraße 3/3, 6401 Inzing, Austria
Phone: +43 660 1234567
Email: privacy@sourceweb.agency
