Last updated 16 August 2026. This version replaces the version of 17 January 2025.
This Privacy Notice for Dpro GmbH (‚we‘, ‚us‘, or ‚our‘) describes how and why we access, collect, store, use, and share (‚process‘) your personal information when you use our services (‚Services‘), including when you:
We are a software company specialising in AI software solutions, web development and consulting. Our website currently serves as a single landing page.
Questions or concerns? If you do not agree with our policies and practices, please do not use our Services. If you have any questions, contact us at privacy@dpro.at.
We have not appointed a Data Protection Officer, as the conditions of Article 37 GDPR do not apply to us.
What personal information do we process? Only what you give us when you contact us, and the technical data your browser sends when you load the website.
Do we process sensitive personal information? No.
Do we collect information from third parties? No. We do not buy personal data and we do not obtain it from data brokers, public databases or marketing partners.
How do we process your information? To answer your enquiry, to operate and secure the website, and to comply with legal obligations. Each purpose has a stated legal basis in section 3.
With whom do we share it? With our hosting and caching providers, and with professional advisers where required. We do not sell personal information and we do not share it with advertising networks.
What are your rights? Access, rectification, erasure, restriction, portability, objection, and the right to complain to the Austrian Data Protection Authority. See section 11.
How do you exercise your rights? Email privacy@dpro.at. We respond within one month.
In Short: information you give us, and technical data collected automatically when you visit.
We collect the personal information you voluntarily provide when you enquire about us or our Services, or otherwise contact us: your name, email address, telephone number, company or organisation, and the content of your message. All information you provide must be true, complete and accurate.
Sensitive information. We do not process special categories of personal data within the meaning of Article 9 GDPR.
When you load a page, our server records the following in log files: the address requested, date and time, the volume of data transferred, the HTTP status code, the referring address, your browser type and version, your operating system, your language setting, and your IP address.
This data is needed to operate the website, to keep it available and secure, and to investigate faults and attacks. We do not combine it with other sources and we do not use it to identify you.
None. We do not obtain personal information from data brokers, data providers, public databases, affiliate programmes, joint marketing partners or social media platforms, and we do not build profiles for targeted advertising.
In Short: to answer enquiries, to run and secure the website, and to meet legal obligations.
In Short: we process your information only when we have a valid legal basis under the GDPR.
| Processing | Legal basis |
|---|---|
| Answering your enquiry; pre-contractual and contractual communication | Article 6(1)(b) GDPR – performance of a contract or steps prior to it. Where no contractual relationship is intended, Article 6(1)(f) – our legitimate interest in responding |
| Server log files, security, fault diagnosis, caching | Article 6(1)(f) GDPR – legitimate interest in a secure and functioning website |
| Non-essential cookies and web analytics | Article 6(1)(a) GDPR – your consent, which you may withdraw at any time |
| Direct marketing to an address you gave us | Article 6(1)(a) GDPR – your consent. Sending it is additionally governed by section 174 Austrian Telecommunications Act 2021 |
| Retention of records with tax or commercial relevance | Article 6(1)(c) GDPR – legal obligation, in particular section 132 Austrian Federal Fiscal Code (BAO) and section 212 UGB |
| Establishing, exercising or defending legal claims | Article 6(1)(f) GDPR – legitimate interest |
In Short: with the providers who run our website, and where the law requires it. We do not sell your data.
We share personal information only with processors who act on our instructions under a data processing agreement pursuant to Article 28 GDPR, and only to the extent needed for their task:
We do not share personal information with advertising networks, retargeting platforms, affiliate programmes, data brokers or social networks, and we do not sell it.
Business transfers. We may transfer your information in connection with a merger, sale of company assets, financing or acquisition of all or part of our business. Any recipient remains bound by this Notice.
Our website is hosted in Germany, within the European Union. Caching is provided by QUIC.cloud, whose network may process technical connection data outside the EEA. Where personal data is transferred to a third country, the transfer takes place on the basis of the European Commission’s Standard Contractual Clauses pursuant to Article 46(2)(c) GDPR, together with supplementary technical measures. You may request a copy of the relevant safeguards at privacy@dpro.at.
In Short: we are not responsible for data you give to websites we merely link to.
Our Services may link to third-party websites or services that are not affiliated with us. We make no guarantee regarding such third parties and are not liable for loss or damage caused by their use. A link does not imply endorsement. Data collected by third parties is not covered by this Notice; please review their own policies.
In Short: only strictly necessary cookies without your consent. Everything else needs your agreement first.
Strictly necessary cookies enable the basic operation of the website and your session. They are set without consent on the basis of Article 6(1)(f) GDPR together with section 165(3) of the Austrian Telecommunications Act 2021.
All other cookies and similar technologies – including anything used for analytics or marketing – are set only after your prior, explicit consent under Article 6(1)(a) GDPR. You may withdraw consent at any time through the cookie settings on our website, with effect for the future. You can also inspect and delete stored cookies in your browser settings at any time; disabling cookies may affect some functions of the website.
We do not use web beacons or tracking pixels for advertising purposes, and we do not participate in cross-site interest-based advertising.
Where you consent, we use Google Analytics, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, to produce aggregate statistics about how our website is used. The service sets cookies and processes your IP address and usage data.
You may withdraw your consent at any time through our cookie settings. Google’s own privacy information is available at policies.google.com/privacy.
In Short: yes, for our clients – but we do not analyse website visitors with them.
As part of our Services we build and operate products, features and tools powered by artificial intelligence and machine learning (‚AI Products‘). Some of these are delivered through third-party AI service providers, including OpenAI and Flowxtra AI. Where a client uses such a product, the input and output necessary for that function are processed by those providers on the basis of the agreement with the client and a data processing agreement with the provider.
This does not apply to visitors of this website. Data collected through this website – your enquiry, your IP address, log data – is not sent to any AI service provider, is not used to train models, and is not subject to automated decision-making or profiling within the meaning of Article 22 GDPR.
Where Dpro GmbH participates in a funded project or acts as a processor for a client, the applicable roles, purposes and safeguards are set out in the respective contract or grant agreement rather than in this Notice.
Bias and fairness. Our commitments on examining training and reference data for bias, on evaluating model output across groups rather than only in aggregate, and on publishing known limitations of our systems are set out in our Diversity and Equal Opportunity Strategy. Those commitments concern the fairness of the systems we build; they do not create any additional processing of your personal data.
In Short: only as long as needed for the stated purpose, and as long as the law requires for records with tax relevance.
| Data | Retention |
|---|---|
| Server log files | Deleted after 30 days at the latest, unless a security incident requires longer retention |
| Enquiries with no further business relationship | Deleted once the enquiry is concluded, at the latest after 12 months |
| Correspondence and records with tax or commercial relevance | Seven years, as required by section 132 BAO. Longer where a legal dispute requires it |
| Consent records | For the duration of the consent and three years after its withdrawal, as evidence of lawfulness |
| Analytics data | See section 6 |
When we have no ongoing lawful purpose, we delete or anonymise the data. Where immediate deletion is not possible – for example because the data is held in backup archives – we isolate it from further processing until deletion is possible.
In Short: appropriate technical and organisational measures – but no transmission over the internet can be guaranteed to be fully secure.
We apply appropriate technical and organisational security measures, including transport encryption (TLS) for this website, access control, and regular updates of the software we operate. Despite these efforts, no electronic transmission or storage technology can be guaranteed to be completely secure. You should access the Services only from a secure environment.
In Short: our Services are not directed at children.
We do not knowingly collect data from or market to children, and we do not knowingly sell such information. Under section 4(4) of the Austrian Data Protection Act, consent given by a child under 14 in relation to information society services is not valid without the consent of the holder of parental authority. If we learn that we hold personal information from a child, we delete it promptly. If you become aware of any such data, contact privacy@dpro.at.
In Short: you can see, correct, delete and object – and you can complain to the Austrian authority.
You have the right to request access to your personal information and a copy of it (Article 15), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18), data portability (Article 20), and to object to processing based on our legitimate interests (Article 21). You also have the right not to be subject to a decision based solely on automated processing (Article 22); as stated in section 7, we do not carry out such processing.
Withdrawing your consent. Where we rely on consent, you may withdraw it at any time by emailing privacy@dpro.at or through our cookie settings. Withdrawal does not affect the lawfulness of processing carried out before it, nor processing based on another legal basis.
Opting out of marketing. Use the unsubscribe link in any email we send, or email us. We may still send you service-related messages necessary to answer your request.
To exercise any right, email privacy@dpro.at. We respond within one month, as required by Article 12(3) GDPR. We may ask you to confirm your identity where this is necessary to protect your data.
Right to lodge a complaint. If you believe our processing infringes data protection law, you may lodge a complaint with the competent supervisory authority. Ours is:
If you are resident in another EEA state, you may also complain to your own national authority.
Most browsers include a Do-Not-Track (‚DNT‘) setting. No uniform technical standard for recognising DNT signals has been finalised, and we therefore do not currently respond to them. This has no practical effect on your privacy on this website: non-essential tracking is loaded only after your explicit consent in any case, as described in section 6. If a binding standard is adopted, we will update this Notice.
Our website uses LiteSpeed Cache to reduce loading times. It temporarily stores copies of the pages viewed on this website. Cache files are ephemeral, are not disclosed to third parties except where necessary to provide technical support for the plugin, and are deleted automatically after a set period or manually by the administrator.
We also use QUIC.cloud to temporarily process and cache content. This may involve processing technical connection data including your IP address. The legal basis is Article 6(1)(f) GDPR – our legitimate interest in a fast and secure website. See quic.cloud/privacy-policy.
We use Verpex as our hosting provider to deliver this website securely and reliably. In doing so, data such as IP addresses and server log data is processed on their servers on our behalf, under a data processing agreement pursuant to Article 28 GDPR. The server location and, where applicable, the safeguards for transfers outside the EEA are stated in section 4. See verpex.com/privacy-policy.
In Short: yes, when our processing or the law changes.
We update this Notice as necessary. The current version is identified by the date at the top of this page. Where changes are material, we will draw attention to them on this page. Previous versions are available on request.
Email privacy@dpro.at, or write to:
Dpro GmbH
Wipplingerstraße 20/18
1010 Wien
Austria
You may request access to the personal information we hold about you, details of how we have processed it, correction of inaccuracies, or its deletion, and you may withdraw a consent you have given. These rights may be limited in specific circumstances by applicable law – for example where a statutory retention duty applies, as set out in section 8.
To make a request, email privacy@dpro.at.
Diese Website verwendet Cookies, um u.a. die Nutzerfreundlichkeit zu verbessern. Weitere Informationen zum Datenschutz finden Sie in unserer Datenschutzerklärung.
Einstellungen
