Privacy Policy

1. Controller

The controller responsible for the processing of personal data on this website is:

ECHTRAUM [full company name / legal form]

[Street and house number]

[Postal code, City]

Austria

Email: [email address]

Phone: [phone number, if published]

Hereinafter referred to as “ECHTRAUM”, “we” or “us”.

2. General information on data processing

The protection of your personal data is important to us. We process personal data exclusively within the framework of applicable data protection law, in particular the General Data Protection Regulation (GDPR), the Austrian Data Protection Act (DSG) and the Telecommunications Act 2021 (TKG 2021).

Personal data is information relating to an identified or identifiable natural person. This includes, in particular, the IP address of an end device.

We only process data that is necessary for the operation and security of this website, for providing the content and functions offered, and for communicating with prospective clients, customers and business partners.

3. Website hosting

This website is provided via the infrastructure of Netlify.

Provider:

Netlify Inc.

USA

For technical reasons, data is transmitted between your end device and the hosting infrastructure when you access our website. In particular, the following data may be processed:

  • IP address
  • date and time of access
  • the page or resource accessed
  • technical information about the browser and end device
  • information on the origin and processing of a web request
  • technical error, security and diagnostic data

This processing takes place, insofar as necessary, to provide the website, to ensure its stability and security, and to detect and defend against misuse and technical attacks.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure, reliable and technically flawless operation of our website.

Netlify may also process data outside the European Economic Area. Insofar as this involves a transfer of personal data to third countries, the applicable data protection requirements and appropriate safeguards for international data transfers are taken into account.

4. Server and access data

Technically necessary access and server data is generated when you visit our website.

This data serves, in particular:

  • the technical operation of the website
  • error analysis
  • ensuring IT security
  • defending against abusive or harmful access

We do not combine this technical data with other data sources for the purpose of personal identification or the creation of user profiles.

The data is stored only for as long as is necessary for the purposes stated or as required by statutory retention obligations.

The legal basis is Art. 6(1)(f) GDPR.

5. Cookies and similar technologies

As of now, we do not use technically unnecessary cookies on this website for analysis, advertising or tracking purposes.

In particular, we currently do not use services such as:

  • Google Analytics
  • Meta Pixel
  • LinkedIn Insight Tag
  • Hotjar or comparable tracking services

Insofar as technically necessary storage mechanisms are used, they serve exclusively the operation of the website or a function explicitly requested by the user.

Should we use services in the future for which consent is required under the TKG 2021 or the GDPR, such services will only be activated after corresponding consent has been given.

6. Fonts

We use the Outfit typeface for the display of our website.

The font is served as part of the website, via the technical infrastructure used by the website. Accordingly, when you visit our website, your browser does not establish a direct connection to Google Fonts for the purpose of retrieving fonts.

7. Images and videos

Our website presents architectural visualizations, images, animations and videos.

These media are provided via our own website and the hosting and delivery infrastructure we use.

When this content is retrieved, the connection data required for technical delivery, in particular the IP address, may be processed.

Insofar as videos play automatically, this does not, based on our current technical setup, involve the use of tracking or advertising cookies.

8. Interactive 3D content and Gaussian Splats

Our website offers interactive three-dimensional content, in particular so-called Gaussian Splat experiences.

This content is deliberately not loaded automatically when a page is opened.

Initially, only a static preview is displayed. The interactive 3D application is only loaded once you actively select the “Load Experience” function.

This specifically prevents extensive 3D data from being transmitted without an active user decision.

For the representation of interactive 3D content, we use technologies from:

PlayCanvas Ltd

50 Cowcross Street

Floor 2

London

United Kingdom

By actively loading the 3D application, a connection to PlayCanvas servers may be established. Technically necessary information, in particular the IP address and connection data of the device used, may be processed.

The data transfer only takes place after the user explicitly starts the interactive application.

The United Kingdom currently has an adequacy decision by the European Commission for data transfers under the GDPR.

The legal basis for processing is Art. 6(1)(f) GDPR insofar as processing is necessary to provide the explicitly requested interactive function.

Our legitimate interest is to present architecture projects to visitors in an interactive and spatially experiential form.

9. Contact

If you contact us by email or by other means, we process the personal data you provide for the purpose of processing your inquiry and further communication.

In particular, the following data may be processed:

  • Name
  • Email address
  • Company
  • Phone number, if provided
  • Content of your message
  • Any files and project information submitted

If contact is made in connection with the initiation or performance of a contract, processing takes place on the basis of Art. 6(1)(b) GDPR.

For general business inquiries, processing takes place on the basis of Art. 6(1)(f) GDPR. Our legitimate interest lies in handling inquiries and business communication.

The data is stored only for as long as necessary for processing and handling the communication, or as required by statutory retention or documentation obligations.

10. Analytics and marketing services

To compile anonymous statistics on the use of our website, we use the cookieless web analytics service Umami (cloud service). The provider is:

Umami Software, Inc.

USA

Umami does not set cookies and does not store any information on your device. No personal data and no IP addresses are stored. Only aggregated, anonymous usage data is collected, such as pages visited, referring websites, browser and device type, and the approximate country of origin.

If the "Do Not Track" setting is enabled in your browser, no data is collected.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the anonymous statistical evaluation of website usage in order to improve our services.

Beyond this, we do not use any profiling, remarketing or personalized advertising services on this website.

11. Recipients of personal data

Personal data is only disclosed to external service providers or other recipients insofar as this is necessary for the operation of the website, the provision of a function you have requested, communication with you, or compliance with legal obligations.

This may include, in particular:

  • Hosting and IT service providers
  • technical infrastructure and content delivery providers
  • providers of interactive 3D technologies, where applicable
  • providers of cookieless web analytics (Umami)
  • email and communication service providers
  • tax advisors, legal advisors or authorities, where legally required

Where necessary, corresponding data processing agreements are concluded with processors.

12. Retention period

As a general rule, we only store personal data for as long as is necessary to fulfill the respective processing purpose.

Longer storage only takes place if:

  • statutory retention obligations exist
  • this is necessary for the assertion, exercise or defense of legal claims
  • or another legal basis justifies further storage

Once the respective purpose no longer applies and relevant retention periods have expired, the data is deleted or anonymized.

13. Data security

We take appropriate technical and organizational measures to protect personal data against loss, manipulation, unauthorized access and other unlawful processing.

This website is transmitted in encrypted form using HTTPS/TLS.

14. Your rights

Subject to the applicable statutory requirements, you have, in particular, the following rights:

  • the right to information about the personal data we process
  • the right to rectification of inaccurate or incomplete data
  • the right to erasure
  • the right to restriction of processing
  • the right to data portability, insofar as the statutory requirements are met
  • the right to object to certain processing
  • the right to withdraw any consent given, with effect for the future

To exercise your rights, you can contact us at the following address:

[Privacy email address or general email address]

You also have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data infringes data protection law.

In Austria, the competent supervisory authority is:

Austrian Data Protection Authority

Barichgasse 40–42

1030 Vienna

Austria

15. No automated decision-making

Exclusively automated decision-making, including profiling within the meaning of Art. 22 GDPR, does not currently take place via this website.

16. Changes to this privacy policy

We reserve the right to amend this privacy policy if our website, the technologies used, the functions offered, or the applicable legal framework change.

The version published on this website at any given time shall apply.

Last updated: August 2026