Privacy Policy of the Wolftank Group Website:
This Privacy Policy applies to the website: www.wolftankgroup.com
Data Controller Information
- Name: Wolftank Group AG
- Address: Leopoldstraße 2, 6020, Innsbruck, Österreich
- Email: info@wolftankgroup.com
1. General Principles of Data Processing
We take the protection of your personal data very seriously. We process your personal data securely, confidentially, and strictly in accordance with statutory data protection regulations, primarily the General Data Protection Regulation (GDPR) and the Austrian Telecommunications Act 2021 (TKG 2021).
To ensure maximum security and data minimization, our website is structurally designed so that highly sensitive submissions (such as contact messages and job applications) bypass the public-facing website database entirely and are routed securely via our servers directly to the authorized internal personnel.
2. Processing Activities & Data Collection
In the context of our website, we process your personal data in the following ways:
Visiting the Website (Server Logfiles)
When you visit our website, our host provider protocols specific “logfile” data for every access to its servers to ensure the technical stability and security of the site.
- Data collected: Name of the retrieved website, previously visited website (“referrer” URL), browser type and version, operating system, retrieving provider, date and time of access, search engines used, country of access, transferred data volume, name of downloaded files, and IP address.
- Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest is ensuring system security, preventing cyberattacks, and clarifying cases of data abuse.
- Retention: IP addresses are deleted within a maximum of 7 days unless required longer for specific security-related events (e.g., clarification or proof of an attack)
Contact Enquiries
When you reach out to us via our online contact forms, we process the personal data necessary to respond to your request.
- Data collected: Name, email address, and the contents of your message.
- Routing & Storage: This data is not stored in our website’s content management database. It is transmitted securely to our internal team to process your request.
- Legal basis: Art. 6(1)(b) GDPR (processing necessary for the performance of a contract or prior to entering into a contract) or Art. 6(1)(f) GDPR (legitimate interest in providing customer service).
- Retention: Data is stored internally only as long as necessary to fully process your request and handle any appropriate follow-up questions.
- Provision of Data: The provision of the data marked as mandatory fields is required so that we can process and respond to your enquiry. Without this data, it is not possible to process your enquiry.
Job Applications & CV Uploads
We provide a secure upload portal for candidates to submit their Curriculum Vitae (CV) and application materials directly to our recruitment team.
- Data collected: Name, contact details, CV documents, cover letters, and any other personal data you voluntarily provide in your application.
- Routing & Storage: To ensure the highest level of data security, your uploaded documents are not stored on our web server or website database. They are encrypted and routed directly to authorized personnel.
- Legal basis: Art. 6(1)(b) GDPR (processing necessary for taking steps prior to entering into an employment contract).
- Retention: If your application is unsuccessful, your data will be securely deleted no later than 6 months after the conclusion of the recruitment process (in accordance with Austrian equal treatment defense requirements), unless you explicitly consent to us keeping your data on file for future opportunities.
- Provision of Data: The provision of personal data required for the application process is necessary in order to process your application. Without this data, we cannot consider your application.
Newsletter Subscriptions
If you choose to subscribe to our newsletter, we require an email address to send you updates.
- Data Sharing: Your email address is securely transmitted to our email marketing service provider, Brevo, which manages the subscription lists and distributes the newsletter on our behalf.
- Legal basis: Art. 6(1)(a) GDPR (Consent).
- Revocation: You may revoke your consent and unsubscribe from the newsletter at any time using the link provided at the bottom of every newsletter email.
3. Web Analytics (Privacy-First)
Simple Analytics
To understand how visitors interact with our website, we use Simple Analytics, a privacy-first tool that is fully compliant with global data protection laws (such as GDPR and CCPA).
Simple Analytics strictly processes aggregated usage data to help us improve our website. It never uses cookies, does not collect any personal data, does not fingerprint your browser, and does not track personally identifiable information or IP addresses. Because no personal data is collected, no tracking consent is required.
4. Use of Cookies
Description and Functionality
Cookies are small text files saved on your device that enable certain website functionalities. Because we use privacy-first analytics, we do not use any analytical, tracking, or marketing cookies on this website.
Strictly Necessary (Technical) Cookies
We only use essential technical cookies required for the website to function properly. Under current ePrivacy laws, prior consent is not required for strictly necessary functional cookies.
| Cookie | Type | Retention | Purpose |
| wp-wpml_current_language | Technical | 24 hours | Used by our language management plugin to remember your selected language code so the website is displayed in your preferred language upon navigation. |
If you configure your browser to reject all cookies globally, please note that essential functions (like language selection) may not work properly.
5. Disclosure of Your Data
We treat your data strictly confidentially. Where not already explicitly stated elsewhere in this Privacy Policy (such as transmitting newsletter signups to our processor, Brevo), we do not sell, trade, or pass on your personal data to unauthorized third parties.
We only share data with external parties if strictly necessary to fulfill a contract, if we are legally obligated to do so, or if we rely on highly vetted processors (such as secure hosting providers) who are legally bound by strict Data Processing Agreements (DPAs) under Article 28 GDPR.
6. Rights of Data Subjects
Under the GDPR, you retain comprehensive rights regarding your personal data. You have the right to:
- Access (Art. 15 GDPR): Obtain information on the processing of your personal data and a copy of the data we hold.
- Rectification (Art. 16 GDPR): Request the correction of incorrect data or the completion of incomplete data.
- Erasure (Art. 17 GDPR): Demand the deletion of your personal data (“Right to be forgotten”), provided no overriding legal retention periods apply.
- Restriction (Art. 18 GDPR): Restrict the processing of your data under specific conditions.
- Data Portability (Art. 20 GDPR): Receive the personal data you have provided to us in a structured, commonly used, and machine-readable format.
- Objection (Art. 21 GDPR): Object to processing based on legitimate interests (Art. 6(1)(f) GDPR) for reasons arising from your particular situation.
- Complaint (Art. 77 GDPR): You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data violates the GDPR.
Exercising Your Rights:
To exercise any of these rights, please contact us at info@wolftankgroup.com.