Privacy Policy
Duty to provide information pursuant to Art. 13 and 14 GDPR
Last update: May 02, 2026
The protection of your personal data is of particular concern to us. In this privacy policy, we inform you about the most important aspects of data processing and about our data protection measures. In order to guarantee the confidentiality, integrity and availability of the personal data processed and to ensure that this data is processed properly and not made accessible to unauthorized persons, we have taken appropriate precautions for data security.
1. Person responsible for data processing
The controller responsible for data processing is
Fam. Pfeiffer (hereinafter referred to as "IntraTodo")
Erler Straße 65, 6342 Niederndorf
Austria
2. Type of personal data, processing purposes, legal basis and duration of processing
2.1. When you visit our website, the following access data is automatically recorded in server log files by IT systems for informational purposes without actively providing personal data. Without processing the personal data for the duration of the session, the website may not be displayed or may only be displayed to a limited extent:
-
IP address,
-
the name of the requested file,
-
Date and time of retrieval,
-
Browser used,
-
amount of data transferred,
-
operating system used,
-
requested URL,
-
Referrer URL and
-
the requesting provider;
The legal basis for the processing of the personal data listed in the enumeration is Art. 6 (1) lit. f GDPR. The legitimate interest lies in enabling you to access the website.
2.2. If you contact us by email, the personal data you provide will be stored automatically. In principle, the following personal data is processed in this context:
-
E-mail address,
-
personal data contained in the individual request;
The legal basis for the processing of the aforementioned data depends on the intention of the contact. If the contact is aimed at the conclusion of a contract, the legal basis for the processing is Art. 6 (1) lit. b GDPR. Otherwise, the legal basis is Art. 6 (1) lit. f GDPR. This personal data is processed exclusively for the purpose of dealing with the specific request.
2.3. You have the option of subscribing to our waitlist/newsletter via our website. If you subscribe to our waitlist/newsletter, personal data will be processed:
-
E-mail address,
-
Registration and confirmation time,
-
IP address;
The legal basis for the processing of personal data with regard to sending the waitlist information/newsletter is Art. 6 (1) lit. a GDPR.
You can withdraw your consent to the processing of your personal data regarding the waitlist/newsletter mailing at any time by unsubscribing from the waitlist/newsletter. To unsubscribe, please use the link provided at the end of the respective waitlist-email/newsletter or alternatively send an email to office@intrastash.com. We will delete your data in connection with the waitlist/newsletter mailing immediately after you unsubscribe.
2.4. IntraTodo stores the personal data to the extent necessary for the purposes of processing. If there are no statutory retention obligations, we delete the data as soon as it is no longer required for the original purpose or the consent to store the data is withdrawn.
3. Use of cookies
So-called cookies are used in some areas of the website. These are small text files (piece of data) that are stored on your end device with the help of the browser.
After the end of the browser session, some of the cookies we use are deleted ("session cookies"). Some cookies remain stored on your end device until you delete them. Cookies enable us to recognize your browser the next time you visit our website. You will be asked for your consent to set cookies the first time you visit our website.
The website can also be used without this consent and the storage of cookies. You can configure your browser so that no cookies are stored, but this may limit the functionality of our website.
Technically necessary cookies are used for the purpose of improving the use of our website. Some functions cannot be offered without the use of these cookies. If cookies are not accepted or are deactivated, the functionality of our website may therefore be limited. The legal basis for the processing of technically necessary cookies is Art. 6 (1) lit. f GDPR.
In addition, we use cookies for analysis purposes and online marketing, which serve to improve user-friendliness and optimization as well as the needs-based design of our website. The legal basis is Art. 6 (1) lit. f GDPR, unless the processing is based on anonymous or anonymized data or we do not obtain your prior consent (Art. 6 (1) lit. a GDPR) as part of the use of cookie management.
If processing is carried out on the basis of our legitimate interest, you generally have the option to object. If no explicit opt-out option has been specified by the respective service provider used by us, you have the option of deactivating cookies in the browser settings. However, this may restrict the functions of our website.
The categories of data processed by our service providers include usage data and metadata in all cases. The data is deleted in accordance with the data protection declarations of the technology partners.
4. Disclosure of personal data
Within IntraTodo, those persons receive the data who need it to fulfill the obligations of IntraTodo and to fulfill the other purposes listed under point 2. In addition, those recipients receive your data who need the data to fulfill their respective service in connection with the fulfillment of Intratodo's obligations with you or who have another legal basis (e.g. legal obligation to disclose the data to law enforcement authorities, etc.).
5. Storage period and deletion of data
As far as possible, we have informed you about the exact storage period when using our respective services or products in the individual data protection notices referred to above. In principle, your personal data will be stored for the duration of the fulfillment of the aforementioned purposes and then deleted.
In the event of an objection or revocation of your consent, the data will be deleted under the conditions for objection/revocation stated in point 7.6. and point 7.7. In addition, we may be required by law to continue storing your data.
6. Use of social media
In order to optimize our presence, we maintain pages on various social media. There we want to inform our interested parties about our services and also communicate with them via these channels. The links to social media platforms are integrated in such a way that no data is transferred directly to the social media operator. The integration on our website takes place via direct links. Data is only transferred as soon as the link is clicked.
These channels are used for the following purposes:
-
Provision of information about IntraTodo
-
Statistical evaluations for analysis and further development of services and products, as well as for the improvement of processes
-
Communication with interested parties.
The legal basis for this processing of your personal data is our legitimate interest in communicating with our interested parties, analyzing and further developing services and products and improving business processes (Art. 6 (1) lit. f GDPR).
Further information on the social media platforms:
Operator of Facebook: Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland.
Privacy policy: https://www.facebook.com/privacy/policy/
X
Operator of X: X Internet Unlimited Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland.
Privacy policy: https://x.com/de/privacy
Operator of Instagram: Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland.
Privacy policy: https://privacycenter.instagram.com/policy
7. Data protection rights of the data subjects
Data subjects have the right to information, correction, deletion or restriction of the processing of their stored personal data at any time, as well as a right to object to the processing in accordance with the requirements of the General Data Protection Regulation (GDPR). If you wish to exercise these rights, you can contact IntraTodo via email address office@intrastash.com. Complaints can be addressed to the Austrian Data Protection Authority.
7.1. Right to information
In accordance with Art. 15 GDPR, you have the right to receive information about your personal data processed or stored by us free of charge upon request. You have the option of receiving a copy of the personal data that we process about you. This allows you to check whether it is being processed lawfully.
7.2. Right to rectification
If your personal data is incorrect, you have the right to rectification in accordance with Art. 16 GDPR. We are obliged to carry out the rectification without undue delay.
7.3. Right to restriction of processing
In accordance with Art. 18 GDPR, you have the right to demand that we restrict processing of your personal data. You have the option of requesting the suspension of the processing of your personal data.
7.4. Right to erasure
In accordance with Art. 17 GDPR, you have the right to request the immediate erasure of your personal data if it is no longer required for the purposes for which it was collected or if you have withdrawn your consent. In this case, we must stop processing your personal data without undue delay and delete it from our IT systems. There is no right to erasure if
-
the personal data may not be deleted due to a legal obligation or must be processed due to a legal obligation or
-
the data processing is necessary for the establishment, exercise or defense of legal claims.
7.5. Right to data portability
In accordance with Art. 20 GDPR, under certain circumstances you have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and to transmit those data to another controller.
7.6. Right to object
In accordance with Art. 21 GDPR, you have the right to object to the processing of your personal data if the processing is based on our legitimate interests (or those of a third party) (Art. 6 (1) lit. f GDPR) and if there are also reasons arising from your particular situation that speak against this processing.
7.7. Right to withdraw consent under data protection law
You have the right to withdraw your consent to the processing of personal data at any time. The revocation does not affect the legality of the processing carried out on the basis of the consent until the revocation.
7.8. Right to lodge a complaint with a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR.
7.9. Right to notification in the event of a personal data breach
In accordance with Art. 34 GDPR, you have the right to be informed immediately if a breach of the protection of your personal data poses a high risk to your rights and freedoms.
8. Contact
If you have any questions about the processing of your personal data or would like information, corrections or deletions of your data, or if you have general questions about data protection, please contact us at:
Email: office@intrastash.com