Privacy Policy

The protection of your personal data is important to us. We process your data exclusively on the basis of the statutory provisions, in particular the General Data Protection Regulation, GDPR (DSGVO), the DSG (Datenschutzgesetz, the Austrian Data Protection Act) and the TKG 2021 (Telekommunikationsgesetz 2021, the Austrian Telecommunications Act 2021). In this policy we inform you about which data we collect when you visit our website https://inp-dieseltechnik.at, use our contact forms and use our web shop, what we use it for and which rights you have.

1. Controller

INP Service GmbH
Registered office: Arakawastraße 6/2/7, 1220 Wien, Austria
Workshop and contact address: Sandstraße 5, Halle F, 2100 Stetten, Austria
Telephone: +43 676 9799199
E-mail: inpservicewien@gmail.com

Commercial register (Firmenbuch) number: FN 658237x
Managing director: Mykyta Plis

A data protection officer does not have to be appointed under Art 37 DSGVO and § 5 DSG. For all data protection matters you can reach us at the contact details given above.

2. General

2.1 Definitions

Personal data means all information relating to an identified or identifiable natural person, such as name, address, e-mail address, telephone number, IP address or vehicle data that can be attributed to a person. We use the other terms within the meaning of Art 4 DSGVO.

2.2 Legal bases

We process personal data only if one of the following legal bases applies:

• Art 6 Abs 1 lit a DSGVO (consent): You have given us your consent, for example via the cookie banner. You may withdraw consent once given at any time with effect for the future.
• Art 6 Abs 1 lit b DSGVO (contract and pre-contractual measures): The processing is necessary for the performance of a contract with you or to respond to your enquiry prior to the conclusion of a contract, for example in the case of orders, repair orders and enquiries via the contact form.
• Art 6 Abs 1 lit c DSGVO (legal obligation): We are legally obliged to process the data, for example to retain invoices under the BAO (Bundesabgabenordnung, the Austrian Federal Fiscal Code) and the UGB (Unternehmensgesetzbuch, the Austrian Commercial Code).
• Art 6 Abs 1 lit f DSGVO (legitimate interest): The processing is necessary to safeguard our legitimate interests and your interests do not override them, for example in the technical operation and securing of the website.

Insofar as we store information on your terminal device or read information from it (cookies and similar technologies), § 165 Abs 3 TKG 2021 additionally applies. Storage access that is not strictly necessary takes place only with your consent.

2.3 Disclosure to third parties

We disclose personal data only if this is necessary for the performance of the contract (for example to shipping service providers and banks), if you have consented, if we are legally obliged to do so or if we use service providers as processors under Art 28 DSGVO. Data processing agreements are in place with all processors. The service providers used are named in the respective sections of this policy.

2.4 Data transfers to third countries

Our website is hosted within the European Union. A transfer to third countries outside the European Economic Area takes place only if you have consented to a service that requires such a transfer (currently: Google Maps), if you contact us via WhatsApp or insofar as our e-mail communication is handled via Google (Gmail) (sections 5.3 and 10), and only on the basis of an adequacy decision of the European Commission (in particular the EU-US Data Privacy Framework) or the standard contractual clauses of the European Commission under Art 46 Abs 2 lit c DSGVO. Details can be found under the respective service.

3. Your rights as a data subject

You have the following rights vis-à-vis us:

• Access (Art 15 DSGVO): You may request information as to whether and which personal data we process about you.
• Rectification (Art 16 DSGVO): You may request the rectification of inaccurate data or the completion of incomplete data.
• Erasure (Art 17 DSGVO): You may request the erasure of your data, provided that no statutory retention obligations preclude this.
• Restriction of processing (Art 18 DSGVO): You may request the restriction of processing under the statutory conditions.
• Data portability (Art 20 DSGVO): You may request that we transmit to you the data you have provided to us in a structured, commonly used and machine-readable format.
• Objection (Art 21 DSGVO): You may object at any time, on grounds relating to your particular situation, to processing based on Art 6 Abs 1 lit f DSGVO.
• Withdrawal of consent (Art 7 Abs 3 DSGVO): You may withdraw consent once given at any time. The lawfulness of processing carried out up to the withdrawal remains unaffected. You can withdraw cookie consents via the cookie settings in the footer of the website.

To exercise your rights, an informal notification to inpservicewien@gmail.com or by post to the address given above is sufficient. We will respond to your request without undue delay and at the latest within one month.

Right to lodge a complaint: If you believe that the processing of your data infringes data protection law, you may lodge a complaint with the supervisory authority. In Austria this is the

Österreichische Datenschutzbehörde (Austrian Data Protection Authority)
Barichgasse 40–42, 1030 Wien
Telephone: +43 1 52 152-0
E-mail: dsb@dsb.gv.at
Website: https://www.dsb.gv.at

4. Hosting and server log files

4.1 Hosting

Our website is hosted by the following provider:

Hostinger International Ltd., 61 Lordou Vironos Street, 6023 Larnaca, Cyprus
Privacy policy: https://www.hostinger.com/legal/privacy-policy

The servers on which our website is operated are located in Germany (Frankfurt am Main). Backup copies (backups) are stored in France. Both locations are within the European Union. Hostinger processes all data arising from the operation of the website exclusively on our behalf. The basis for this is Hostinger's Data Processing Addendum, which forms part of the user agreement concluded with us and meets the requirements of Art 28 DSGVO (https://www.hostinger.com/legal/dpa).

Legal basis: Art 6 Abs 1 lit f DSGVO. Our legitimate interest lies in the secure, stable and efficient provision of our website.

4.2 Server log files

Each time our website is accessed, the web server automatically records information transmitted by your browser. This includes:

• IP address of the requesting device
• date and time of access
• page or file accessed and the amount of data transferred
• HTTP status code
• previously visited page (referrer URL), insofar as transmitted by the browser
• browser type and version, operating system

This data is not merged with other data sources and serves exclusively to ensure trouble-free operation, to analyze errors and to defend against attacks. The log files are deleted at hosting level after no more than 30 days, unless a security-related analysis requires longer retention.

Legal basis: Art 6 Abs 1 lit f DSGVO (legitimate interest in the security and functionality of the website).

4.3 Technically necessary cookies and security functions

For the operation of the website (session management, shopping cart, spam protection of the forms, storage of your cookie settings) we use technically necessary cookies. These are strictly necessary to provide the service you have expressly requested and therefore do not require consent (§ 165 Abs 3 TKG 2021). An overview can be found in section 6.

5. Contact forms and enquiries

5.1 Contact and enquiry forms (Fluent Forms)

On our website you can contact us via forms, for example to request a diagnosis or repair, to obtain a cost estimate (Kostenvoranschlag) or to book our pick-up and delivery service. The forms are operated with the WordPress plugin Fluent Forms. In doing so, we process the data you enter in the form:

• name and contact details (e-mail address, telephone number, if applicable address for pick-up or delivery)
• your request and your message
• vehicle and component data (such as vehicle type, engine code, injector or pump part number, fault description)
• date and time of submission

The form data is stored in the database of our website and additionally transmitted by e-mail to our mailbox so that we can process your enquiry. Fluent Forms does not transmit any data to the plugin manufacturer. Your data is used exclusively to process your enquiry and for subsequent follow-up questions.

Retention period: We store form data until your enquiry has been dealt with, but no longer than six months after receipt. After that, it is deleted. If a job order or purchase order results, we retain the contract-relevant data for the periods stated in section 8.

Legal basis: Art 6 Abs 1 lit b DSGVO (implementation of pre-contractual measures at your request). Insofar as you ask us questions that are not directed at the conclusion of a contract, the processing is based on Art 6 Abs 1 lit f DSGVO (legitimate interest in responding to enquiries).

5.2 Contact by e-mail, telephone or Instagram

If you contact us by e-mail or telephone, we process the data communicated in the process (name, contact details, content of the enquiry) to handle your request. Section 5.1 applies mutatis mutandis to enquiries and the subsequent performance of the contract. On Instagram we can be reached under inp_diesel_technik. Our website does not embed any content from Instagram, but only links to our profile. If you contact us via Instagram, the privacy policy of Meta Platforms Ireland Limited applies (https://privacycenter.instagram.com/policy).

5.3 Contact via WhatsApp

You can reach us via WhatsApp. The provider is WhatsApp Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. If you contact us via WhatsApp, your telephone number, your profile name and the content of the message are processed by WhatsApp; messages are end-to-end encrypted. Metadata (such as the time and participants of the communication) may be transferred to Meta Platforms, Inc. in the USA; Meta is certified under the EU-US Data Privacy Framework (Art 45 DSGVO). We use WhatsApp exclusively to respond to your enquiries and do not transfer any contact data from our address book to WhatsApp. WhatsApp's privacy policy: https://www.whatsapp.com/legal/privacy-policy-eea.

Legal basis: Art 6 Abs 1 lit b DSGVO (handling of your enquiry), otherwise Art 6 Abs 1 lit f DSGVO (legitimate interest in being easy to reach). If you do not wish your data to be processed by WhatsApp, please use e-mail or telephone.

6. Cookies and consent management (Complianz)

6.1 What cookies are

Cookies are small text files that are stored on your terminal device when you visit a website. We use cookies and comparable technologies (such as the browser's local storage) to provide the website technically and, insofar as you have consented, to load external content.

6.2 Categories

• Necessary: Cookies without which the website or the web shop does not function. These include the session and shopping cart cookies of WooCommerce (such as woocommerce_cart_hash, woocommerce_items_in_cart, wp_woocommerce_session_*), WordPress cookies when you log in to your customer account (wordpress_logged_in_*, wordpress_sec_*) and the cookie in which Complianz stores your cookie decision (cmplz_*). Legal basis: § 165 Abs 3 TKG 2021 (strictly necessary) in conjunction with Art 6 Abs 1 lit b and lit f DSGVO.
• External content and statistics: Cookies and storage access by third-party providers (currently Google Maps on the contact page). These are only set once you have consented in the cookie banner or directly at the respective content. Legal basis: Art 6 Abs 1 lit a DSGVO in conjunction with § 165 Abs 3 TKG 2021.

6.3 Giving, changing and withdrawing consent

When you first visit our website, the plugin Complianz (Complianz B.V., Kalmarweg 14-5, 9723 JG Groningen, Netherlands) displays a cookie banner. There you can accept, reject or individually select all non-necessary categories. Your decision is stored locally in a cookie on your terminal device and is not transmitted to any third party. Complianz itself does not transmit any personal data to the manufacturer.

You can change your settings or withdraw your consent at any time via the "Cookie settings" link in the footer of the website. In addition, you can delete or block cookies in your browser. In that case, not all functions of the website may be available.

Retention period: The Complianz consent cookie is stored for 365 days. Session cookies are deleted when the browser is closed, shopping cart cookies after no more than 48 hours.

7. Google Maps

On our contact page we embed a map from the Google Maps service to make it easier for you to find your way to our workshop in Stetten. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

The map is not loaded automatically. When you open the contact page, you will initially see only a placeholder. Only once you have agreed to the category for external content in the cookie banner or clicked on the placeholder does your browser establish a connection to Google's servers. The following data is transmitted to Google in the process:

• your IP address
• date and time of access and the page accessed
• browser and device information
• if applicable, cookies and identifiers of your Google account if you are logged in to Google

Google may link this data with other data from your Google account and use it for its own purposes, including advertising and profiling. We have no influence on this processing. Further information can be found in Google's privacy policy (https://policies.google.com/privacy) and in the Google Maps terms of service (https://www.google.com/intl/de_at/help/terms_maps/).

Data transfer to the USA: The data may be transferred to servers of Google LLC in the USA. Google LLC is certified under the EU-US Data Privacy Framework, so that an adequacy decision of the European Commission under Art 45 DSGVO exists for this transfer. In addition, Google relies on the standard contractual clauses of the European Commission (Art 46 Abs 2 lit c DSGVO). These are available at https://business.safety.google/gdpr/.

Legal basis: Art 6 Abs 1 lit a DSGVO (consent) in conjunction with § 165 Abs 3 TKG 2021. You can withdraw your consent at any time via the cookie settings. The map will then no longer be loaded. Instead of the map, you will also find our address as text on the contact page, so that you can find our workshop even without consent.

8. Web shop (WooCommerce)

8.1 Order and contract data

If you place an order in our web shop, we process the data required to perform the purchase contract:

• name, billing and delivery address, e-mail address, telephone number
• for entrepreneurs (Unternehmer), additionally company name and VAT identification number (UID)
• ordered products, prices, selected payment and shipping method
• order number, order date and order status
• your messages regarding the order (such as delivery instructions)
• IP address and time of the order (as evidence of the conclusion of the contract and for fraud prevention)

The web shop is operated with the WordPress plugin WooCommerce. The data is stored in the database of our website. In our configuration, WooCommerce does not transmit any personal data to the plugin manufacturer Automattic.

Legal basis: Art 6 Abs 1 lit b DSGVO (performance of the contract). The storage of the IP address is based on Art 6 Abs 1 lit f DSGVO (legitimate interest in verifiability and prevention of misuse).

8.2 Customer account

You can create a customer account when placing an order. In it we store your master data and your order history until you delete the account or request us to delete it. Deletion of the account does not affect the statutory retention obligations for order data (section 8.4). Legal basis: Art 6 Abs 1 lit b DSGVO.

8.3 Disclosure for the performance of the contract

To perform the contract, we disclose data to:

• Shipping service providers: name, delivery address and, insofar as required for delivery, telephone number and e-mail address for delivery notifications. Depending on the destination country and shipment size, these are DHL Paket (Austria) GmbH, United Parcel Service Austria GmbH, Österreichische Post AG or a freight forwarding company. Legal basis: Art 6 Abs 1 lit b DSGVO.
• Payment service providers and banks: see section 9.
• Tax advisory and accounting: invoice data for the fulfillment of our tax and commercial law obligations. Legal basis: Art 6 Abs 1 lit c DSGVO.

8.4 Retention period

We retain order, invoice and contract data for seven years from the end of the calendar year in which the order was placed (§ 132 BAO, § 212 UGB). If warranty (Gewährleistung), guarantee (Garantie) or legal dispute proceedings are pending, we retain the data concerned until their conclusion.

9. Payment service providers

9.1 Prepayment (bank transfer)

We currently offer payment by prepayment. You transfer the invoice amount to our business account. In doing so, our bank receives your account details (name, IBAN, payment reference), and we see this data on our bank statement. We use it exclusively to allocate your payment and for any refunds, for example after a withdrawal (Rücktritt).

Legal basis: Art 6 Abs 1 lit b DSGVO. Retention period: seven years under § 132 BAO as part of the accounting records.

10. E-mail dispatch

We send order and job confirmations, shipping notifications, invoices and responses to your enquiries by e-mail. Our e-mail mailbox is hosted by Google (Gmail). The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. All e-mails that you send to us or that we send to you (enquiries, order confirmations, invoices) are processed on Google's servers; a transfer to Google LLC in the USA is possible. Google LLC is certified under the EU-US Data Privacy Framework (Art 45 DSGVO); in addition, the standard contractual clauses of the European Commission apply. Legal basis: Art 6 Abs 1 lit b DSGVO, otherwise Art 6 Abs 1 lit f DSGVO (legitimate interest in reliable e-mail communication). Google's privacy policy: https://policies.google.com/privacy.

11. Fonts

The fonts used on this website (Archivo, Open Sans, IBM Plex Mono) are stored locally on our web server. When the website is accessed, no connection is established to servers of external font providers. One exception is the embedded Google Maps map on the contact page: it loads its own fonts from Google. The map is only loaded after your consent; further details can be found in section 7.

12. Web analytics

We currently do not use any web analytics or tracking services. We do not create usage profiles and do not embed any advertising networks.

13. Overview of retention periods

14. Categories of recipients

• hosting provider (Hostinger International Ltd.) as processor
• shipping service providers and freight forwarders for the delivery of orders and the handling of the pick-up and delivery service
• credit institutions for payment processing
• tax advisory and accounting
• Google Ireland Limited, only after your consent (Google Maps)
• Google Ireland Limited as the provider of our e-mail mailbox (Gmail)
• WhatsApp Ireland Limited, only if you contact us via WhatsApp
• authorities, courts and legal representatives, insofar as required by law or necessary for the enforcement of legal claims

15. No automated decision-making

We do not use automated decision-making, including profiling, within the meaning of Art 22 DSGVO.

16. Data security

Our website is delivered via an encrypted connection (TLS/HTTPS). You can recognize this by the padlock symbol in the address bar of your browser. Access to the administration of the website and the data stored in it is restricted to the persons responsible for it and protected by access credentials and two-factor authentication. We take appropriate technical and organizational measures under Art 32 DSGVO to protect your data against loss, misuse and unauthorized access.

17. Changes to this Privacy Policy

We will amend this Privacy Policy if our services, the providers used or the legal situation change. The current version is always available on this page. The date of the last change can be found at the end of this document.

This is a translation provided for convenience. The German version of this document is legally binding.

Last updated: September 2026