Privacy policy
This policy describes which personal data is processed when you visit this website and when you send an enquiry, for what purpose this happens and what rights you have. It follows Articles 13 and 14 of the General Data Protection Regulation (GDPR).
1. Controller
The controller for the data processing on this website within the meaning of Article 4(7) GDPR is:
- Controller
- Sergiu Iacob Bura, sole trader,
trading as Don Sergio Transport & Umzüge - Address
- Kaiser-Ebersdorfer Straße 90/11/97,
1110 Vienna, Austria - Phone
- +43 676 6907542
- info@don-sergio.com
No data protection officer has been appointed. The conditions of Article 37 GDPR are not met: there is neither regular and systematic monitoring of data subjects on a large scale nor large-scale processing of special categories of data. For anything concerning data protection, please use the contact details above.
Further details about the business are in the legal notice.
2. Visiting the website: server log files
When you open this website, your browser transmits technically necessary information, which the hosting provider stores in log files. These are:
- IP address of the requesting device
- date and time of the request
- name and address of the file retrieved
- volume of data transferred and confirmation that the retrieval succeeded
- browser type and browser version
- operating system used
- referrer URL, that is, the page visited before
Purpose: delivering the page, operational security, and
preventing and investigating attacks.
Legal basis: Article 6(1)(f) GDPR. The legitimate interest lies
in the secure and stable operation of the website.
Storage period: the log files are held by the hosting provider
and, according to its information, are kept for between a few days and at most 90
days, depending on security and operational needs. This data is not combined with
other sources and is not analysed for advertising purposes.
3. Hosting and technical support
The technical operation of this website – providing the web space, maintenance and the dispatch of form enquiries – is carried out by IT&Design Studio Dortschack. It processes the data named under point 2, and the data submitted through the enquiry form, exclusively on our behalf and on our instructions. The basis is a data processing agreement under Article 28 GDPR.
The web space itself is provided by STRATO AG, Berlin, Germany. It is a further processor and is bound to the same obligations by its own agreement under Article 28 GDPR. The provider has its seat in Germany and, according to its own information, processes the data in data centres within the European Union.
4. Enquiry form
You can send us an enquiry through the form on the contact page and in the enquiry window. What is processed is what you enter yourself:
- Mandatory: name, email address, the service you want, your message
- Voluntary: phone number, collection and delivery address (postcode and town), preferred date
When you submit, the website transmits these details to a script on the web space of this website, which turns them into an email to info@don-sergio.com. Your email address is set as the reply address so that we can answer you directly. The details are not stored in a database and are not passed on to third parties.
Should the script ever be unreachable, a fallback applies: the website then opens your own email program with a prepared message, which you send yourself. In that case your data reaches us in the same way as an ordinary email.
Purpose: handling your enquiry, preparing a quote and the
correspondence that goes with it.
Legal basis: Article 6(1)(b) GDPR insofar as the enquiry serves
to initiate or perform a contract; otherwise Article 6(1)(f) GDPR on the basis of
our legitimate interest in answering enquiries.
Storage period: we keep your enquiry for as long as it is needed
to deal with it, and delete it afterwards. If a contract comes about, the
associated documents are subject to the statutory retention periods – in
particular seven years under § 132 of the Austrian Federal Fiscal Code (BAO).
Providing the data is required neither by law nor by contract. Without the mandatory details, however, we cannot deal with your enquiry.
Protection against automated submissions
The form contains three technical measures against spam: a field invisible to people, a measurement of the time between the page loading and the submission, and a limit on how many submissions may arrive from the same connection within a short period. All three are used solely to assess the individual submission. The time measurement and the invisible field are not stored. For the limit, the server keeps a short-lived counter; what is stored is not your IP address but only a one-way hash of it, together with the times of the submissions. The counter is not used to recognise people, and nothing is transmitted to third parties. An external spam protection service such as reCAPTCHA is not used. The legal basis is Article 6(1)(f) GDPR, our legitimate interest in a working means of contact.
5. Contact by email, phone or WhatsApp
If you contact us directly by email or phone, we process your details in order to deal with the matter. Legal basis and storage period are as under point 4.
In the footer you will also find a link to WhatsApp. The link itself transmits no data; only when you click it and write to us via WhatsApp does WhatsApp Ireland Ltd. process your message and your phone number under its own terms. We have no influence over this. If you want to avoid it, please use the form, the email address or the phone.
6. No cookies, no tracking, no external services
This website sets no cookies. It uses no analytics or audience measurement, embeds no advertising networks and creates no usage profiles. A consent banner is therefore not required.
Every component of the site – fonts, images, stylesheets and scripts – is delivered from our own server. No content is loaded from third-party servers. In particular, the Inter typeface is embedded locally; no connection is made to Google Fonts, and your IP address is transmitted to nobody in the process. Map services, video platforms and social media plugins are not embedded.
Local storage for the accessibility settings
For the settings of the accessibility widget (text size, contrast) the website stores an entry in your browser’s local storage. It contains only these settings, does not leave your device, is not transmitted to us and does not serve to recognise you. You can delete it at any time through your browser settings. The legal basis is Article 6(1)(f) GDPR.
The choice of language is not stored: German and English are separate pages, and the link at the bottom right simply leads to the other one.
7. Recipients and transfer to third countries
Your data is not sold and is not passed on for advertising purposes. The recipients are exclusively:
- IT&Design Studio Dortschack and the STRATO AG it engages, each as a processor (point 3),
- where a contract comes about, the bodies needed to carry it out, such as the tax advisory office or – for disposal jobs – the waste disposal company engaged,
- authorities and courts, insofar as we are legally obliged to do so.
The hosting provider in turn engages further processors. The hosting package booked includes a scan of the web space for malware, provided by SiteLock, LLC, seated in the United States. Insofar as personal data reaches a third country in the course of this, the hosting provider is obliged under the data processing agreement concluded with it to pass its data protection obligations on to that further processor and to check compliance regularly.
No transfer of personal data beyond this to countries outside the European Union or the European Economic Area takes place.
8. No automated decision-making
Automated decision-making, including profiling, within the meaning of Article 22 GDPR does not take place.
9. Your rights
You have the following rights towards us:
- Access to whether and which data we process about you (Article 15 GDPR)
- Rectification of inaccurate data (Article 16 GDPR)
- Erasure, insofar as no retention obligation stands in the way (Article 17 GDPR)
- Restriction of processing (Article 18 GDPR)
- Data portability in a commonly used format (Article 20 GDPR)
- Objection to processing based on a legitimate interest (Article 21 GDPR)
- Withdrawal of consent with effect for the future; the lawfulness of processing carried out until then is unaffected (Article 7(3) GDPR)
An informal message to the contact details under point 1 is enough to exercise them. We answer within one month. So as not to give information to unauthorised persons, we have to verify your identity in case of doubt.
Right to lodge a complaint with the supervisory authority
Independently of this, you have the right to lodge a complaint with a data protection supervisory authority. In Austria this is the Datenschutzbehörde, Barichgasse 40–42, 1030 Vienna, dsb@dsb.gv.at, dsb.gv.at. If you are habitually resident in another Member State, you can also turn to the supervisory authority there.
10. Data security
This website is delivered exclusively over a TLS-encrypted connection. You can recognise an encrypted connection by the padlock symbol in your browser’s address bar. This protects the details you submit through the form from being read in transit.
Please note that the transmission of an ordinary email between the mail servers involved need not be encrypted end to end. For particularly confidential information we therefore recommend the phone.
11. Changes to this policy
We adjust this privacy policy as soon as the processing or the legal situation changes. The version published here applies.
Last updated: September 2026