Last updated: 15 October 2026

Protecting your personal data is important to us. This Privacy Policy explains how Dobringer Thermoforming Consulting (DTC) collects, processes and protects personal information when you visit our website, contact us or use our services.

We process personal data in accordance with the European Union General Data Protection Regulation (GDPR) and applicable Austrian data protection legislation.

1. Data Controller

The controller responsible for processing personal data on this website is:

2. Website Hosting

Our website is hosted by Hostinger. When you access our website, technical information may be processed to ensure secure and reliable website operation.

This information may include:

• IP address
• Date and time of access
• Requested pages and files
• Browser type and version
• Operating system
• Referring website
• Technical connection and error information

Legal basis: Article 6(1)(f) GDPR – our legitimate interest in maintaining a secure and reliable website.

Our hosting infrastructure is located in Frankfurt, Germany. Website backups are stored in France. Hostinger creates automatic backups of website files and databases. These backups may temporarily contain personal data submitted through our website.

Technical data and backups are retained according to applicable operational, security and contractual retention requirements.

3. Contact Form and Business Enquiries

Our website provides a contact form created using Elementor. When you submit an enquiry, we process the information you voluntarily provide.

This may include:

• Name
• Email address
• Company name
• Telephone number
• Message content
• Other information included in your enquiry

We use this information to respond to your enquiry, communicate with you and, where applicable, prepare or provide our consulting services.

Form submissions are stored in our WordPress database using Elementor’s submission functionality. We also receive email notifications about submitted enquiries.

Subsequent business communication is managed through Microsoft 365, including Microsoft Outlook.

Legal basis: Article 6(1)(b) GDPR for contractual or pre-contractual enquiries, or Article 6(1)(f) GDPR for general business enquiries.

Data Retention

General enquiries that do not result in a business relationship are retained for up to 12 months after the last relevant communication and are then deleted, unless further retention is necessary for a legitimate purpose or required by law.

Business correspondence, contracts, invoices and other legally relevant records may be retained for longer periods in accordance with applicable legal obligations.

4. Email Communication – Microsoft 365

We use Microsoft 365, including Microsoft Outlook, to manage our business email communication.

When you contact us by email, we process your email address, message content and any additional personal information you provide.

This information is used to respond to enquiries, maintain business correspondence and manage existing or potential customer relationships.

Legal basis: Article 6(1)(b) or Article 6(1)(f) GDPR, depending on the purpose of the communication.

Microsoft may process personal data using infrastructure and subprocessors outside the European Economic Area. Where required, appropriate safeguards are applied.

Further information: Microsoft Privacy Statement.

5. Cookies and Consent Management

Our website uses cookies and similar technologies to provide essential functions and, where you have given consent, to analyze website usage.

We use Borlabs Cookie to manage visitors’ cookie preferences.

When you first visit our website, you can choose whether to accept optional cookies or allow only essential cookies.

Your selection is stored so that your preferences can be respected during subsequent visits.

The validity period of the Borlabs consent cookie is currently 60 days, including when you select essential cookies only.

Borlabs Cookie also maintains consent records to document visitors’ privacy choices.

Legal basis: Article 6(1)(c) GDPR where processing is necessary to demonstrate compliance with legal obligations, Article 6(1)(f) GDPR for necessary technical functionality, and Article 6(1)(a) GDPR for consent-based processing.

You may change or withdraw your consent at any time using the cookie settings available on our website. Withdrawal does not affect processing carried out before your consent was withdrawn.

6. Google Analytics 4

We use Google Analytics 4, a web analytics service provided by Google, to understand how visitors interact with our website and identify opportunities to improve its content and usability.

Google Analytics may process:

• Pages visited
• Website interactions and events
• Approximate geographic location
• Browser and device information
• Visit duration and engagement
• Online identifiers associated with analytics cookies

We use Google Analytics to evaluate website performance, understand visitor engagement and improve our website.

Google Analytics is configured through Google Tag Manager and integrated with our cookie consent management system. Analytics cookies are used only where the required consent has been provided.

Depending on the consent configuration, Google may receive limited technical signals without analytics cookies before analytics consent is granted.

Legal basis: Article 6(1)(a) GDPR – consent for optional analytics processing.

Data Retention – Google Analytics

Our Google Analytics 4 property currently uses the following retention settings:

• Event data: 2 months
• User data: 14 months

The retention period for certain user-related data may be reset when new user activity is recorded. These settings do not apply to all aggregated reporting data.

Google may process data outside the European Economic Area. Applicable international data transfer safeguards are used where required.

Further information: Google Privacy Policy.

7. Google Tag Manager

Our website uses Google Tag Manager to manage website scripts and analytics integrations.

Google Tag Manager is not used by us to create individual visitor profiles. However, services activated through Google Tag Manager may process personal data as described in this Privacy Policy.

Optional tracking technologies are managed through our consent management system.

8. Spam Protection and Google reCAPTCHA

Our website uses technical measures to protect contact forms against spam and automated submissions.

Elementor supports integration with Google reCAPTCHA. If Google reCAPTCHA is activated, Google may process technical information such as IP addresses, browser information and interaction data to detect automated activity.

We use consent and script-blocking mechanisms where required by applicable law.

Further information: Google Privacy Policy.

9. Data Sharing

We do not sell your personal data.

Personal data may be shared with service providers where necessary to operate our website, manage communications or deliver our consulting services.

These providers may include:

• Hostinger – website hosting and backups
• Microsoft – business email and communication services
• Google – website analytics and technical integrations
• Elementor – website and contact form software

Where required, appropriate data processing agreements are concluded with service providers. Personal data may also be disclosed where necessary to comply with legal obligations.

10. International Data Transfers

As we operate internationally and use certain international technology providers, personal data may be processed outside Austria or the European Economic Area.

Where required, we rely on applicable transfer mechanisms such as adequacy decisions or appropriate contractual safeguards.

11. Data Security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, misuse or alteration.

Our website uses encrypted HTTPS connections to protect information transmitted between your browser and our website.

Access to stored personal data is restricted to authorized persons and service providers where necessary.

12. Your Rights Under the GDPR

Subject to the applicable legal requirements, you have the right to:

• Request access to your personal data (Article 15 GDPR).
• Request correction of inaccurate data (Article 16 GDPR).
• Request deletion of personal data (Article 17 GDPR).
• Request restriction of processing (Article 18 GDPR).
• Request data portability (Article 20 GDPR).
• Object to certain processing activities (Article 21 GDPR).
• Withdraw consent at any time (Article 7(3) GDPR).

You also have the right to lodge a complaint with a competent data protection supervisory authority.

In Austria, the responsible authority is the Austrian Data Protection Authority (Datenschutzbehörde).

Website: www.dsb.gv.at

To exercise your rights, contact: office@thermoforming.consulting.

13. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes to our website, services, technical systems or applicable legal requirements.

The current version will always be available on this page.

14. Contact