Privacy Statement

Effective: 25.09.2026

01 CONTROLLER

We take the protection of your personal data seriously. We process your data exclusively on the basis of the applicable law, in particular the General Data Protection Regulation (GDPR), the Austrian Data Protection Act (DSG) and the Austrian Telecommunications Act 2021 (TKG 2021). This statement explains which data we process when you visit www.marxconsult.com and in the course of our business relationships.

Controller

marx consult e.U., owner Ing. Felix Marx, MAS

Ziegelstraße 82, Top 4, 8045 Graz, Austria

E-mail: felix.marx@marxconsult.com · Phone: +43 664 54 90 570

A data protection officer is not required by law and has therefore not been appointed. Please send any requests to the address above.

02 VISITING THE WEBSITE

Server log data

When you access the website, our hosting provider processes technically necessary data: IP address, date and time, page accessed, referrer URL, browser and operating system. This processing serves the secure and stable operation of the website.

Legal basis: legitimate interest (Art. 6(1)(f) GDPR). Retention: 14 days, after which the data is deleted unless security incidents require longer retention.

Hosting

The website is hosted by [hosting provider, registered office]. A data processing agreement pursuant to Art. 28 GDPR is in place with the provider. The servers are located in the European Union.

Fonts

The Avenir typeface is loaded locally from our own server. No connection to third-party servers is made.

03 COOKIES

This website uses technically necessary cookies only, for example to store your language preference. Pursuant to Section 165(3) TKG 2021, no consent is required for these cookies. We do not use analytics, marketing or tracking cookies and do not embed social-media plug-ins.

You can delete or block cookies in your browser at any time; some functions of the website may then be unavailable.

04 CONTACTING US

If you contact us via the contact form, by e-mail or by phone, we process the details you provide (name, e-mail address, where applicable phone number, company, position and the content of your message) in order to answer your enquiry.

Legal basis: pre-contractual measures (Art. 6(1)(b) GDPR) or our legitimate interest in answering business enquiries (Art. 6(1)(f) GDPR). Retention: until your enquiry has been dealt with, thereafter no longer than three years unless a business relationship results.

05 CLIENTS, PROSPECTS & PARTNERS

In the course of our advisory mandates we process contact and contract data of contact persons at our clients, prospects, business partners and network experts: name, position, company, contact details, correspondence, contract and billing data.

Purposes: initiating, performing and invoicing contracts, maintaining business relationships, complying with legal obligations.

Legal bases: performance of a contract (Art. 6(1)(b) GDPR), legal obligation (Art. 6(1)(c) GDPR, in particular Section 132 Austrian Federal Fiscal Code and Section 212 Austrian Commercial Code) and legitimate interest in maintaining business contacts (Art. 6(1)(f) GDPR).

Retention: for the duration of the business relationship; documents relevant for tax and commercial law for seven years from the end of the calendar year, and beyond that until statutory limitation periods expire where claims may be asserted.

Where we process personal data on behalf of a client, we will conclude an agreement pursuant to Art. 28 GDPR on request.

06 RECIPIENTS & TRANSFERS

We only disclose your data to the extent necessary for the purposes described, namely to: IT, hosting and e-mail service providers, tax advisers and accountants, banks for payment processing, legal counsel and authorities and courts within the scope of legal obligations. Network experts whom we involve in a mandate with the client’s consent are bound by confidentiality agreements.

Data is transferred to countries outside the European Economic Area only where an adequacy decision of the European Commission exists (for example for companies certified under the EU-US Data Privacy Framework) or appropriate safeguards are in place, in particular the EU Standard Contractual Clauses.

No automated decision-making, including profiling, takes place.

07 EXTERNAL LINKS

The website contains links to external services such as LinkedIn or www.qus.tech. When you click on them, you leave our website; the respective operator is responsible for data processing there. No data is transmitted to these providers before you click.

08 DATA SECURITY

We take appropriate technical and organisational measures to protect your data against loss, misuse and unauthorised access. The website is encrypted throughout using TLS. Access to personal data is restricted to those who need it for their tasks.

09 YOUR RIGHTS

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). You may withdraw any consent given at any time with effect for the future.

To exercise your rights, a message to felix.marx@marxconsult.com is sufficient. We will respond within one month.

If you believe that the processing of your data infringes data protection law, you may lodge a complaint with the supervisory authority: Austrian Data Protection Authority (Österreichische Datenschutzbehörde), Barichgasse 40–42, 1030 Vienna, Austria, dsb@dsb.gv.at, www.dsb.gv.at.

10 CHANGES

We will amend this privacy statement if the website, our services or the legal situation change. The version published on this page applies. In the event of discrepancies between the German and English versions, the German version shall prevail.