Notice on Data Protection (Privacy Policy)
Protecting your personal data is a matter of particular importance to us. We therefore process your data exclusively on the basis of the applicable legal provisions (GDPR, TKG 2021). In this privacy policy, we inform you about the most important aspects of data processing carried out through our website.
Controller
The controller responsible for processing your personal data within the meaning of the GDPR is:
Eberle Automatische Systeme GmbH & Co KG
Brand: digifai
Dr.-Walter-Zumtobel-Straße 8
6850 Dornbirn, Österreich
Phone: +43 5572 55580
Email: info@digifai.com
Hosting and Server Log Files
This website runs on our own server infrastructure. We do not use an external hosting provider or a content delivery network; fonts and images are likewise served exclusively from our own server.
Each time a page is accessed, our web server automatically records data transmitted by your browser and stores it in log files: the IP address of the requesting device, the date and time of access, the name and address of the page or file requested, the volume of data transferred, notification of whether the request succeeded (HTTP status code), the page previously visited (referrer), as well as browser type, browser version and operating system.
The purpose of this processing is to deliver the website, ensure stable operation, analyse faults and detect and defend against attacks. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in the technically faultless and secure operation of this website.
Log files are deleted automatically after 14 days. We retain them for longer only where there are specific indications of an attack, in which case until the incident has been conclusively resolved.
When you submit one of our forms, we additionally hold your IP address in our server's memory for no more than ten minutes in order to limit the number of submissions per sender (protection against automated misuse, Art. 6(1)(f) GDPR). It is discarded thereafter.
Contacting Us
If you contact us via a form on the website or by email, we process the data you provide in order to handle your enquiry and in case of follow-up questions. The legal basis is Art. 6(1)(b) GDPR where your enquiry is directed at entering into a contract, and otherwise Art. 6(1)(f) GDPR (legitimate interest in responding to enquiries).
We delete your enquiry and the associated correspondence six months after it has been conclusively dealt with — unless the data is transferred into our customer relationship management system (see below) or statutory retention obligations preclude deletion. This applies in particular to the seven-year retention period under § 212 UGB (Austrian Commercial Code) and § 132 BAO (Federal Fiscal Code) for records underlying a business transaction.
Cookies and consent
This website does not need cookies in order to operate. Cookies are set exclusively by the two analytics and marketing services described below — and only if you have expressly agreed to them beforehand via our consent dialogue. As long as you have not consented, or if you decline, these services are not loaded; no request whatsoever is sent to the respective provider.
- Essential — technically required to deliver the page, submit forms and prevent automated abuse. No cookies are used for this and no consent is required (Section 165(3) TKG 2021).
- Statistics — audience measurement with Google Analytics 4, see the section “Web analytics (Google Analytics 4)”.
- Marketing — recognition of visits with Microsoft Dynamics 365, see the section “Website tracking (Microsoft Dynamics 365)”.
The legal basis for storing and reading information on your device is your consent under Section 165(3) TKG 2021; the legal basis for the subsequent processing of the personal data thus obtained is Art. 6(1)(a) GDPR. Consent is voluntary — the website remains fully available to you if you decline, and you suffer no disadvantage as a result.
You may withdraw your consent at any time with effect for the future via the “Cookie settings” link at the bottom of every page; the lawfulness of processing carried out up to that point remains unaffected. Your selection itself is stored without a cookie in your browser’s local storage (localStorage).
Web analytics (Google Analytics 4)
With your consent (“Statistics”) we use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Its purpose is the statistical evaluation of how our website is used — which pages are viewed, which channels visitors arrive through and where they drop off — in order to improve our content and our offering.
The data processed includes in particular: the pages viewed and the time of the visit, the previously visited page (referrer), approximate location data based on the IP address, device type, operating system, browser and screen resolution, the successful submission of one of our forms — appointment booking, contact request, trial version, brochure/whitepaper, training registration — (as an event only — the details you enter in the form are not transmitted to Google), as well as a pseudonymous identifier used to attribute repeat visits to the same browser. This identifier is stored in the cookies “_ga” and “_ga_<property ID>”, which remain on your device for up to two years. Usage data collected in Google Analytics is deleted automatically after 14 months.
Google acts as our processor; we have entered into the Google Ads Data Processing Terms with Google. A transfer to the USA cannot be ruled out. Google relies for this on the European Commission’s Standard Contractual Clauses as well as on the EU-US Data Privacy Framework, under which Google LLC is certified. Nevertheless, a residual risk remains that US authorities may access this data without you having legal protection comparable to that in the EU — your consent also covers this risk (Art. 49(1)(a) GDPR).
The legal basis is your consent under Section 165(3) TKG 2021 and Art. 6(1)(a) GDPR. You may withdraw it at any time via the “Cookie settings” link at the bottom of every page. For more information, please see Google’s privacy policy: https://policies.google.com/privacy.
Customer Relationship Management (Microsoft Dynamics 365)
When you submit one of the forms on this website — appointment request, contact enquiry, request for a brochure or white paper, trial version request or registration for a training course — we additionally transmit the data you provide to our customer relationship management system, Microsoft Dynamics 365. The provider is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland.
The data transmitted comprises all data you enter in the respective form. The purpose is to process your enquiry and to maintain the business relationship. The legal basis is Art. 6(1)(b) GDPR (steps taken prior to entering into a contract) as well as our legitimate interest in the orderly administration of enquiries pursuant to Art. 6(1)(f) GDPR.
Microsoft acts as a processor on our behalf. The data is processed in data centres within the European Union. Where processing takes place outside the EU in individual cases, Microsoft relies on the European Commission's Standard Contractual Clauses as well as on the EU-US Data Privacy Framework.
We delete or anonymise enquiries from prospective customers three years after the last contact; this period is based on the general limitation period under civil law. Where a contract is concluded, the statutory retention periods of seven years apply (§ 212 UGB, § 132 BAO).
By ticking the privacy policy checkbox, you also consent to receiving information from us by email about products, news and events (Art. 6(1)(a) GDPR). This consent is voluntary and may be withdrawn at any time with effect for the future — informally to info@digifai.com or via the unsubscribe link at the end of every email. The lawfulness of processing carried out up to the point of withdrawal remains unaffected.
Website tracking (Microsoft Dynamics 365)
With your consent (“Marketing”) we additionally use the website tracking function of Microsoft Dynamics 365 Customer Insights – Journeys. The provider is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. Its purpose is to attribute visits to our website to the same person and — where you are already known to us — to link them to your contact or lead record in our customer relationship management system.
The data processed includes in particular: the pages viewed and the time of the visit, the previously visited page (referrer), your IP address and technical details about your browser and device. A pseudonymous identifier is stored in a cookie on your device in order to recognise you.
We expressly point out that this data may be combined with the data you have submitted to us via a form, or with a record we already hold about you. The visits are then no longer pseudonymous but attributed to you personally. From the resulting usage profile we infer which products and topics you are interested in. We do not take any automated decision within the meaning of Art. 22 GDPR on this basis.
The legal basis is exclusively your consent under Section 165(3) TKG 2021 and Art. 6(1)(a) GDPR; you may withdraw it at any time with effect for the future via the “Cookie settings” link at the bottom of every page.
Microsoft acts as our processor; processing takes place in data centres within the European Union. Where processing takes place outside the EU in an individual case, Microsoft relies on the European Commission’s Standard Contractual Clauses as well as on the EU-US Data Privacy Framework. We delete the interaction data collected no later than three years after the last contact, together with the associated lead record. For further information, please see Microsoft’s privacy statement: https://privacy.microsoft.com/en-us/privacystatement.
Embedded Google content (Maps and YouTube)
On our contact page we embed map material from the “Google Maps” service, and on individual pages videos from the “YouTube” service. The provider in each case is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). The map shows you our location, the videos make content available to you in video form.
Neither is loaded automatically. Content is only retrieved from Google once you actively click the “Load map” or “Play video” button; no connection to Google is established before that. The legal basis is your consent pursuant to Art. 6(1)(a) GDPR. For the map you withdraw it by deleting the stored consent in your browser; for videos it applies only to the respective page view and is not stored.
When the content is loaded, personal data — in particular your IP address — is transmitted to Google and is generally transferred to and stored on a Google server in the USA. Videos are embedded in privacy-enhanced mode via the youtube-nocookie.com domain. For the transfer of data to the USA, Google relies on the European Commission’s Standard Contractual Clauses as well as the EU-US Data Privacy Framework. For more information, please see Google’s privacy policy: https://policies.google.com/privacy.
Right to Object under Art. 21 GDPR
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Art. 6(1)(f) GDPR (legitimate interest). On this website, this concerns in particular the processing of server log files and the storage of your enquiry in our customer relationship management system.
If you object, we will no longer process your data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to establish, exercise or defend legal claims.
Where we process your data for direct marketing purposes, you may object at any time and without giving reasons; we will then no longer use your data for that purpose. An objection can be made informally, for example by email to info@digifai.com.
Your Rights
You generally have the right of access, rectification, erasure, restriction, data portability, withdrawal of consent and objection. If you believe that the processing of your data violates data protection law, or that your data protection rights have otherwise been infringed in any way, you can lodge a complaint with the supervisory authority. In Austria, this is the Austrian Data Protection Authority (Datenschutzbehörde).
Version of this Privacy Policy
Version of 1 September 2026. The version published on this page is the authoritative one.