Privacy Policy – LongLake Consultants GmbH

1. Controller & Contact

The controller responsible for the processing of your personal data on this website is:

LongLake Consultants GmbH
Kirchbergweg 9, 9313 St. Georgen am Längsee, Austria
E-Mail: info@longlake.at
Website: www.longlake.at

Geschäftsführer (Managing Director): Florian Schratt

A formal Data Protection Officer (DPO) is not required for LongLake Consultants GmbH under Art. 37 GDPR, as we are not engaged in large-scale systematic monitoring or processing of special categories of data. Data protection enquiries can be directed to info@longlake.at.

2. Data We Collect & Why

2.1 Contact form

When you submit an enquiry via the contact form on our website, we collect:

First and last name
Email address
Organisation name (optional)
Area of interest (optional)
The content of your message

Purpose: To respond to your enquiry and, where relevant, to initiate a business relationship.

Legal basis: Art. 6(1)(b) GDPR — processing is necessary to take steps at your request prior to entering into a contract; and/or Art. 6(1)(f) GDPR — our legitimate interest in responding to business enquiries.

2.2 Server log files

When you visit our website, your browser automatically transmits information to our hosting provider. This includes your IP address, browser type and version, the page requested, date and time of access, and referring URL. This data is stored in server log files for a short period for security and technical purposes.

Legal basis: Art. 6(1)(f) GDPR — our legitimate interest in the security and technical operation of the website.

2.3 Website analytics

We use Google Analytics 4 to understand how visitors find and use this website (e.g. which pages are visited, how long sessions last, and from which country visitors arrive). This data is collected in aggregated, anonymised form and is used solely to improve the website — we do not use it to build individual profiles or for advertising purposes. IP addresses are anonymised before storage.

Google Analytics only loads if you click "Accept All" on our cookie banner. If you click "Decline", no analytics data is collected. You can change your choice at any time via the Cookie Settings link in the website footer.

Legal basis: Art. 6(1)(a) GDPR — your consent.

3. Third-Party Services

3.1 Formspree (contact form processor)

Our contact form is processed by Formspree, Inc. (USA). When you submit the form, your data is transmitted to and temporarily stored on Formspree's servers before being forwarded to us by email.

Formspree acts as a data processor on our behalf under a Data Processing Agreement. Data transfers to the USA are covered by Standard Contractual Clauses (SCCs) under Art. 46(2)(c) GDPR. Formspree's own privacy policy can be found at formspree.io/legal/privacy-policy.

Legal basis: Art. 6(1)(b) and Art. 6(1)(f) GDPR (same as 2.1 above).

3.2 Google Fonts

This website uses fonts (Alice and Lato) provided by Google LLC (USA) via Google Fonts. When your browser downloads these fonts, your IP address is transmitted to Google's servers, which constitutes a transfer of personal data.

Google Fonts only loads if you click "Accept All" on our cookie banner. If you decline, fallback system fonts are used instead and no data is transferred to Google. Google LLC is certified under the EU–US Data Privacy Framework (DPF), providing an adequacy basis under Art. 45 GDPR. See policies.google.com/privacy for details.

Legal basis: Art. 6(1)(a) GDPR — your consent.

4. Cookies & Local Storage

4.1 Your consent choice (localStorage)

We store your cookie preference (accepted or declined) in your browser's localStorage under the key ll_consent. This is a local browser mechanism — the value is never transmitted to us or any third party. You can change your preference at any time via the Cookie Settings link in the website footer, or by clearing your browser's site data.

4.2 Google Analytics cookies (only if accepted)

If you accept cookies, Google Analytics 4 sets the following cookies:

Cookie	Purpose	Duration
`_ga`	Distinguishes unique visitors	2 years
`_ga_<ID>`	Maintains session state	2 years

These cookies are set by Google LLC (USA), certified under the EU–US Data Privacy Framework. IP addresses are anonymised before storage. No data is collected if you decline cookies.

5. Data Retention

Contact form submissions forwarded to us by email are retained for as long as necessary to handle your enquiry and, if a business relationship follows, for the duration of that relationship plus any applicable statutory retention periods (typically 7 years under Austrian commercial and tax law).

Formspree retains form submission data on its servers in accordance with its own retention policy (typically 30 days). Please see their privacy policy for details.

Server log files are typically deleted or anonymised within 30 days.

6. Your Rights

Under the GDPR and the Austrian Datenschutzgesetz (DSG), you have the following rights regarding your personal data:

Right of access (Art. 15 GDPR) — you may request confirmation of whether we process your data and obtain a copy.
Right to rectification (Art. 16 GDPR) — you may request correction of inaccurate data.
Right to erasure (Art. 17 GDPR) — you may request deletion of your data where no legal obligation requires us to retain it.
Right to restriction of processing (Art. 18 GDPR) — you may request that we limit how we use your data in certain circumstances.
Right to data portability (Art. 20 GDPR) — you may request your data in a structured, machine-readable format.
Right to object (Art. 21 GDPR) — you may object to processing based on legitimate interests at any time.
Right to withdraw consent (Art. 7(3) GDPR) — where processing is based on consent, you may withdraw it at any time without affecting prior processing.

To exercise any of these rights, contact us at info@longlake.at. We will respond within one month as required by Art. 12 GDPR.

7. International Data Transfers

As described above, data may be transferred to the United States via Formspree and Google Fonts. Both transfers are covered by appropriate safeguards:

Formspree: Standard Contractual Clauses (SCCs) under Art. 46(2)(c) GDPR.
Google LLC: EU–US Data Privacy Framework adequacy decision (Art. 45 GDPR).

No other international transfers of personal data take place in connection with this website.

8. Changes to This Policy

We may update this privacy policy from time to time, for example as our services evolve or legal requirements change. The current version is always available at longlake.at/datenschutz.html. Material changes will be noted at the top of this page with a revised date.

9. Right to Lodge a Complaint

If you believe that our processing of your personal data infringes the GDPR, you have the right to lodge a complaint with the competent supervisory authority. In Austria, this is:

Datenschutzbehörde (DSB)
Barichgasse 40–42, 1030 Wien, Austria
Tel: +43 1 52 152-0
E-Mail: dsb@dsb.gv.at
Website: www.dsb.gv.at

We would, however, appreciate the opportunity to address your concern directly before you contact the authority. Please reach out to us first at info@longlake.at.