Privacy Policy

1. Scope of processing

We process personal data only to the extent necessary to operate a functional Website, respond to enquiries, provide authenticated access to our internal team portal, and — where you consent — measure Website usage. Processing generally takes place on the basis of your consent, a contract or pre-contractual steps, a legal obligation, or our legitimate interests, as described below.

2. Categories of data

• Contact data you submit via the contact form (email address, phone number where provided, public profile links, and your message).
• Portal account data for authorised team members (username, email, authentication credentials).
• Technical data generated when you use the Website (for example browser type, IP address, date and time of access, and server logs).
• Optional analytics data about page views and usage patterns when you have opted in.

3. Legal bases

Depending on the processing activity, we rely on Art. 6 (1) lit. a GDPR (consent), Art. 6 (1) lit. b GDPR (contract or pre-contractual measures), Art. 6 (1) lit. c GDPR (legal obligation), and/or Art. 6 (1) lit. f GDPR (legitimate interests, such as operating, securing and improving the Website).

4. Special categories of data

We do not intentionally collect special categories of personal data within the meaning of Art. 9 GDPR through this Website.

1. Description

When you access the Website, our systems automatically process technical information required to deliver the page, including browser type, IP address, and date and time of access. This information may be stored in server logs and is not combined with other personal data from the contact form for marketing profiling.

2. Legal basis and purpose

The legal basis is Art. 6 (1) lit. f GDPR. Temporary storage of the IP address is necessary to deliver the Website to your device and to ensure IT security and system stability.

3. Storage period

Log data is retained only as long as needed for the purposes above, then deleted or anonymised, unless a longer retention period is required by law.

Legal basis

Necessary cookies: Art. 6 (1) lit. f GDPR (legitimate interest in a secure, functional Website) and, where applicable, storage strictly necessary to provide a service you requested. Optional analytics: Art. 6 (1) lit. a GDPR (consent).

1. Description

You may contact us via the Website contact form or by email. We process the data you provide (including email, phone number, profile links and message content) solely to handle your enquiry and related follow-up.

2. Legal basis and purpose

Where you tick the consent box on the contact form, processing is based on Art. 6 (1) lit. a GDPR. Where the enquiry aims at concluding a contract for our services, Art. 6 (1) lit. b GDPR also applies. Otherwise we may rely on Art. 6 (1) lit. f GDPR (legitimate interest in responding to business enquiries).

3. Storage period

We retain contact submissions only as long as needed to handle the enquiry and any resulting business relationship, and thereafter as required for legal retention duties.

1. Description

Authorised Dream Giants team members may access an internal portal to view sales materials and related business information. Portal accounts include username, email and authentication data.

2. Legal basis and purpose

Processing is based on Art. 6 (1) lit. b GDPR (performance of employment or contractor arrangements) and Art. 6 (1) lit. f GDPR (secure internal operations).

3. Storage period

Portal account data is retained while the account remains active and deleted or anonymised when access is no longer required, subject to legal retention obligations.

Complaints

You also have the right to lodge a complaint with the Austrian Data Protection Authority (Datenschutzbehörde) or another competent supervisory authority in the EU.