1. Controller
The controller for data processing on this website is:
- Company
- SECA Security Gesellschaft m.b.H.
- Address
- Strohgasse 14c, 1030 Vienna, Austria
- Phone
- +43 1 997 19 23
- office@seca3.com
2. General principles
We process personal data exclusively within the framework of the General Data Protection Regulation (GDPR) and the Austrian Data Protection Act. Protecting your data matters particularly to us – not least because confidentiality is central to what we do.
3. Hosting
This website is hosted with Netlify. The provider is Netlify, Inc., 101 2nd Street, San Francisco, CA 94105, USA. Netlify supplies the server and delivery infrastructure and processes the resulting data solely on our behalf as a processor within the meaning of Art. 28 GDPR, on the basis of the Data Processing Addendum that forms part of Netlify's terms of service.
When the website is accessed, technical connection data required to deliver the pages is processed — in particular your IP address and the server log files described in section 5.
- Purpose: delivery, stability and security of the website.
- Legal basis: Art. 6(1)(f) GDPR (legitimate interest in providing this online service securely and reliably).
- Transfers to third countries: Netlify also operates servers outside the European Union, in particular in the USA. Netlify, Inc. is certified under the EU-U.S. Data Privacy Framework; in addition, the European Commission's standard contractual clauses (Implementing Decision 2021/914) are relied upon.
4. Contact and enquiry form
If you contact us via the enquiry form, by email or by telephone, we process the data you submit – name, company, email address, telephone number, the service requested and your message – in order to handle your enquiry. If you select "Job application" as the service and attach a file, we additionally process the application documents it contains. Name, email address, message and your consent are mandatory; all other details are optional.
The enquiry form is handled by "Netlify Forms", a service of the hosting provider named in section 3. Your entries and any attached file are stored there and made available to us; the processing arrangement and the third-country transfer safeguards described in section 3 apply. No CAPTCHA and no external anti-spam service is used — to deter automated submissions the form contains only a check field invisible to you.
- Purpose: Handling and responding to your enquiry.
- Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) and Art. 6(1)(a) GDPR (your consent).
- Retention period: Your details are stored for six months in order to handle the enquiry and any follow-up questions; beyond that only where statutory retention obligations apply. Application documents you submit are deleted once the application process is complete, unless you expressly agree to longer storage.
Your data will not be passed on to third parties without your express consent unless there is a statutory obligation to do so.
5. Server log files
When this website is accessed, the hosting provider automatically records information transmitted by your browser: browser type and version, operating system used, referrer URL, hostname of the accessing computer, time of the server request and IP address.
- Purpose: Technically faultless delivery and security of the website.
- Legal basis: Art. 6(1)(f) GDPR (legitimate interest).
6. Cookies and tracking
This website does not use cookies for analytics, marketing or tracking purposes. No web analytics services, social media plugins or advertising networks are embedded.
7. Fonts and external content
The fonts used on this website are served locally from our own server. No connection to third-party servers is made and your IP address is not transmitted to external providers.
8. Your rights
You are generally entitled to the following rights:
- Right of access (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to erasure (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object (Art. 21 GDPR)
- Right to withdraw consent already given (Art. 7(3) GDPR)
To exercise these rights please contact office@seca3.com.
9. Right to lodge a complaint
If you believe that the processing of your data infringes data protection law, you have the right to lodge a complaint with the Austrian Data Protection Authority, Barichgasse 40–42, 1030 Vienna (www.dsb.gv.at).
10. Changes
We reserve the right to amend this privacy policy so that it always complies with current legal requirements or to reflect changes to our services.