1. Controller

cobrandingcard24/7 GmbH

Daimlerweg 4

8051 Thal, Austria

Last updated: September 2026

2. General information on data processing

The protection of your personal data is important to us. We process personal data exclusively in accordance with applicable data protection law, in particular the General Data Protection Regulation (GDPR).

Personal data is any information relating to an identified or identifiable natural person. This may include, for example, name, email address, IP address or technical usage data.

3. Visiting our website and server log files

When you access our website, the web server may automatically process technical information. This may include in particular:

IP address
date and time of access
page or file requested
referrer URL
browser type and version
operating system used
device information
HTTP status code

3.1 Purpose, legal basis and retention

Processing takes place to the extent necessary to provide the website technically, to ensure its stability and security, and to detect and prevent misuse and attacks.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in particular in the secure and reliable operation of our website.

The data is stored only for as long as is necessary for these purposes, unless statutory retention obligations require longer storage.

4. Contacting us and “Request Access”

If you contact us via our website or use the “Request Access” function, we process the personal data you submit in order to handle your enquiry.

The following data may in particular be processed:

name
email address
company
content of your enquiry
date and time of the enquiry

4.1 Legal basis and erasure

Depending on the content of the enquiry, processing is based on Art. 6(1)(b) GDPR for pre-contractual measures or the performance of a contract, or on Art. 6(1)(f) GDPR based on our legitimate interest in handling enquiries.

The data is deleted as soon as it is no longer required to handle your enquiry, provided no statutory retention obligations prevent erasure.

5. Cookies and similar technologies

Our website uses cookies and, where applicable, comparable technologies.

Technically necessary cookies are used insofar as they are required for the proper and secure operation of the website.

Cookies and technologies used for analytics, marketing or other non-essential purposes are only used after your prior consent.

Where consent is required, processing is based on Art. 6(1)(a) GDPR. You may withdraw consent at any time with effect for the future.

You can review and change your choices at any time via the cookie settings on our website.

Further information on the specific cookies used, their providers, purpose and storage period can be found in our Cookie Policy.

6. External services and embedded content

Where we integrate content or services from external providers into our website, it may be technically necessary to transmit data such as your IP address to the respective provider.

Where such services are not technically necessary and consent is required, they are only loaded after your explicit consent.

Information on the external services actually used and their data processing is listed in this privacy policy or in our cookie settings.

7. Recipients of personal data

As a rule, we only disclose personal data where this is necessary for the performance of a contract, where a legal obligation exists, where we have a legitimate interest in the disclosure, or where you have consented.

To provide and operate our website we may use service providers, for example in the following areas:

hosting and IT infrastructure
email communication
website operation and technical maintenance
security and anti-spam services
analytics or marketing services, provided you have consented

7.1 Processing on our behalf

Where service providers process personal data on our behalf, they are engaged as processors in accordance with statutory requirements.

8. Transfers to third countries

Where personal data is transferred to recipients outside the European Union (EU) or the European Economic Area (EEA), this only takes place in compliance with statutory requirements.

This may include, in particular, an adequacy decision of the European Commission, appropriate safeguards such as EU standard contractual clauses, or another basis permitted under the GDPR.

9. Retention period

As a rule, we store personal data only for as long as is necessary for the respective processing purpose.

Data may also be stored where we are obliged to do so due to statutory retention obligations, or where the data is required to assert, exercise or defend legal claims.

Once the respective purpose ceases to apply and statutory retention periods have expired, the data is deleted or anonymised.

10. Your rights

Subject to the statutory requirements, you have in particular the following rights:

access to the personal data we process (Art. 15 GDPR)
rectification of inaccurate or incomplete data (Art. 16 GDPR)
erasure of your personal data (Art. 17 GDPR)
restriction of processing (Art. 18 GDPR)
data portability (Art. 20 GDPR)
objection to processing (Art. 21 GDPR)
withdrawal of consent with effect for the future (Art. 7(3) GDPR)

11. Right to object

Where we process personal data on the basis of Art. 6(1)(f) GDPR, you have the right under Art. 21 GDPR to object at any time to such processing on grounds relating to your particular situation.

Where personal data is processed for direct marketing purposes, you have the right to object at any time to processing for such purposes.

To exercise your rights, you may contact us at any time.

12. Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a competent data protection supervisory authority if you believe that the processing of your personal data infringes the GDPR.

13. Security

We take appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, alteration or disclosure.

Data transmitted via our website is generally encrypted using TLS/SSL.

14. Changes to this privacy policy

We reserve the right to amend this privacy policy if our website, the services used or legal requirements change.