Skip to content
bown.
Book a first call

We reply within one working day.
office@bown.at

Privacy policy

Information on the processing of personal data under Art. 13 and 14 of the General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (DSG).

This is a translation; the German version is legally binding.

1. Controller

Name
Bown IT OG
Address
Heiligenstädter Straße 92/89/8, 1190 Vienna, Austria
Company register
FN 690849 f, Handelsgericht Wien
Represented by
the partners Manuel Gut and David Nawloka (jointly)
E-mail
office@bown.at
Phone
+43 676 544 1550

2. Hosting and server logs

This website runs on servers of netcup GmbH, Emmy-Noether-Straße 10, 76131 Karlsruhe, Germany. A data processing agreement under Art. 28 GDPR is in place with the provider; processing takes place exclusively in the European Union.

When you open the website, the server automatically processes technical access data: IP address, date and time, the address requested, the referring page, browser and operating system, and the status code of the response. This data is used to provide the website, keep it secure and prevent abuse, and is deleted after 14 days at the latest.

Legal basis
Art. 6(1)(f) GDPR (legitimate interest in secure operation)

3. Contact form and e-mail

When you use the contact form, we process the details you enter (first name, last name, e-mail address, optionally phone number, company, preferred appointment and topic, and your message) in order to process and answer your enquiry and to arrange a first call if you ask for one.

To do so, we store your enquiry in our own client management, the administration area of this website: your contact details as a client record (your existing one if you are already known there) and the enquiry with all its details in that record's history; a preferred appointment is entered there as an appointment for your contact person at bown. If we go on to work together, we keep the record for that work. The client management and its database run on the servers of netcup GmbH named in section 2, in the European Union.

We also receive every enquiry by e-mail. To send this e-mail we use the Resend service of Resend Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA. In doing so, your details and your message are transferred to the provider. The transfer to the USA is based on the EU standard contractual clauses (Art. 46(2)(c) GDPR).

To guard against mass submissions, we count enquiries per internet connection. For this we store a hash of your IP address, not the address itself, and delete it after two days at the latest (Art. 6(1)(f) GDPR, legitimate interest in preventing abuse).

Legal basis
Art. 6(1)(b) GDPR (pre-contractual measures and, if we work together, performing that contract)
Retention
as long as needed to deal with your enquiry and any business relationship that follows from it; at your request we delete your data unless a statutory retention obligation prevents it

4. Cookies and analytics

This website does not use any analytics tools and sets no cookies when you visit it.

Only people who have an account with us (our clients in the client portal, we ourselves in the administration area) receive technically necessary cookies that contain nothing but a random identifier. The session cookie is set when you sign in via “Login” and keeps you signed in; it is deleted when you log out and expires after 30 days at the latest (7 days in the administration area). The device cookie is set when you sign in and also when you set a password through an invitation or password link; it recognises your browser at your next sign-in, so that other people's sign-in attempts with your e-mail address do not lock you out as well, and lasts 180 days from your last sign-in or from setting the password. Your browser also sends these cookies when you open the other pages of this website.

If you change something in the accessibility statement under “Adjust display” (such as text size or stopping motion), your browser saves that choice locally (localStorage). It never leaves your device, is only created when you choose, and is deleted with “Reset”.

Fonts are delivered from our own server; there is no connection to Google Fonts or other font providers.

Legal basis
§ 165(3) TKG 2021 (Austrian Telecommunications Act; technically necessary cookies) and Art. 6(1)(f) GDPR (legitimate interest in secure sign-in)

5. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21). An informal message to office@bown.at is enough to exercise them.

6. Right to lodge a complaint

If you believe that the processing of your data violates the GDPR, you can lodge a complaint with the supervisory authority:

Authority
Österreichische Datenschutzbehörde (Austrian Data Protection Authority)
Address
Barichgasse 40-42, 1030 Vienna, Austria

Last updated: 22 October 2026

And your project?

30 minutes, free and without obligation.

Book a first call