Privacy

When the website is accessed, the server processes technically necessary data: IP address, date and time, requested URL, HTTP status, transferred data volume, referrer, and browser and operating system information (user agent).

Processing serves delivery, security, error analysis and defence against attacks. The legal basis is Art. 6 (1) (f) GDPR. The legitimate interest is the secure and stable operation of the website.

Log data is stored only for as long as necessary for these purposes. It is then deleted or anonymised. It is not combined with other data.

If you contact us by email or phone, we process the data you provide (name, contact details, content of the enquiry) to handle the enquiry.

For email communication we use Proton Mail. Messages are stored and processed on the provider's servers.

The provider acts as a processor. A data processing agreement pursuant to Art. 28 GDPR has been concluded with the provider.

The legal basis is Art. 6 (1) (b) GDPR if the enquiry relates to a contract or the initiation of a contract, otherwise Art. 6 (1) (f) GDPR.

The data is deleted once the enquiry has been fully processed and no statutory retention obligations apply.

Personal data is disclosed only if necessary for the performance of a contract, if you have consented, or if a legal obligation requires it. For email communication we use Proton AG, Switzerland, as a processor. No external providers are used for analytics, advertising or tracking.

Email communication is handled by Proton Mail, based in Switzerland. The European Commission has adopted an adequacy decision for Switzerland pursuant to Art. 45 GDPR. Disclosure of personal data to other third countries outside the EU or the EEA is not intended.

Unless a specific period is stated in this notice, data is stored only for as long as necessary for the respective purpose or as required by statutory retention obligations.

You have the right to information (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR) and objection (Art. 21 GDPR).

You may withdraw consent at any time. The lawfulness of processing carried out before withdrawal remains unaffected.

Please contact service@att-it.com for these requests.

You may lodge a complaint with a data protection supervisory authority. The competent authority is:

No automated decision-making, including profiling, takes place.

Providing server log data is technically necessary to deliver the website. Without this data, the website cannot be operated securely. Providing contact details is voluntary, but we cannot respond to an enquiry without them.