Privacy Policy

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Weiss & Lameraner Media Group GmbH
Hohenstaufengasse 5
1010 Vienna, Austria
Email: infoline@weisslameraner.com (opens in a new window)

We take the protection of your personal data very seriously and treat your personal data confidentially in accordance with the statutory data protection regulations and this privacy policy.

Personal data is processed on the basis of the following legal grounds pursuant to Art. 6 GDPR:

• Art. 6(1)(a) GDPR – Consent of the data subject (e.g. for analytics and marketing cookies)
• Art. 6(1)(b) GDPR – Performance of a contract or pre-contractual measures
• Art. 6(1)(c) GDPR – Compliance with a legal obligation
• Art. 6(1)(f) GDPR – Legitimate interests of the controller (e.g. technically necessary cookies, website operation, reach measurement without cookies)

This website is hosted on the infrastructure of Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When our website is accessed, Vercel's web server automatically collects server log files, including:

• IP address of the requesting device (possibly anonymised)
• Date and time of access
• URL accessed
• Browser type and operating system
• Referrer URL (previously visited page)
• Data transferred and HTTP status code

This data is processed solely to ensure technical operation, diagnose errors, and defend against attacks. Log data is automatically deleted after a short time.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure website operation).

As Vercel is a US company, data may be transferred to the USA. Vercel uses EU Standard Contractual Clauses (SCCs) pursuant to Art. 46 GDPR and is certified under the EU-U.S. Data Privacy Framework. More information: vercel.com/legal/privacy-policy (opens in a new window).

A Data Processing Agreement (DPA) pursuant to Art. 28 GDPR has been concluded with Vercel.

Image delivery: Amazon CloudFront. Images, videos and documents on this website are delivered via Amazon CloudFront, a service of Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855 Luxembourg (parent company: Amazon Web Services, Inc., USA). To load files quickly, your IP address is technically transmitted to Amazon. Server logs such as date, time and requested file are also recorded.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in fast and secure delivery of the website).

Data may be transferred to the USA. Amazon Web Services is certified under the EU-U.S. Data Privacy Framework and uses EU Standard Contractual Clauses. A data processing agreement pursuant to Art. 28 GDPR is in place with Amazon Web Services. Privacy policy: aws.amazon.com/privacy (opens in a new window).

Our website uses cookies. Cookies are small text files stored by your browser on your device. We distinguish between technically necessary cookies and optional cookies, which are only set with your consent.

4.1 Technically necessary cookies
Technically necessary cookies enable basic website functions (e.g. storing your cookie preference). They are set without consent. Legal basis: Art. 6(1)(f) GDPR.

4.2 Analytics cookies (Google Analytics)
We use Google Analytics (see section 5). Google Analytics sets cookies only after you have given your consent. As long as you have not made a choice, page views are counted without cookies; after "Reject All" your browser no longer sends any measurement data to Google Analytics.

4.3 Marketing cookies
With your consent, marketing cookies may be used to show you content tailored to your interests.

4.4 Withdraw consent
You can withdraw your consent at any time with effect for the future or adjust your cookie settings. Click on "Cookie Settings" in the footer of this page or the cookie icon at the bottom left.

We use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (group company: Google LLC, USA). Google Analytics is integrated directly via the Google tag (gtag.js), without Google Tag Manager. We use Google's Consent Mode v2.

Your browser loads the Google tag from Google servers (www.googletagmanager.com) on every page view; for technical reasons, Google receives your IP address in the process. Before you make a choice in the cookie banner, your browser also sends measurement data to Google Analytics servers (google-analytics.com). Google Analytics does not set any cookies and does not store an identifier on your device. Only cookieless signals are sent: the address and title of the page viewed and the page you came from, interactions on it (e.g. scrolling, clicks on external links, downloads), date and time and technical information about your browser and device (e.g. browser and system version, screen resolution, language). In addition, there are the consent status and a random number used as an identifier, which is generated anew when the website loads and is not stored. Google Analytics can associate page views you make one after another without reloading the website, but it does not recognise you on a later visit. From this we see at most aggregated figures, some of which Google estimates statistically.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in measuring the reach of our website).

Right to object: You can object to this processing at any time (Art. 21 GDPR). To do so, choose "Reject All" in the cookie banner. If the banner is no longer shown, open the "Cookie Settings" (in the footer or via the cookie icon at the bottom left), switch off "Statistics" and click "Save Preferences". What you do on the website afterwards is no longer measured, on later visits either; measurement data from the last few seconds before your decision may still be transmitted. Your browser still retrieves the Google tag itself from Google on every page view; Google receives your IP address in the process, but no measurement data. We store your decision for one year in the technically necessary cookie cookie_consent. If your browser blocks or deletes cookies, the decision cannot be stored and the banner appears again.

With your consent to the "Statistics" category, Google Analytics also sets the cookies _ga and _ga_GN9BPS8VQB (stored for up to two years; browsers may shorten this). This allows Google Analytics to recognise returning visits and analyse how our website is used.

Legal basis: Art. 6(1)(a) GDPR and Section 165(3) of the Austrian Telecommunications Act 2021 (consent). You can withdraw your consent at any time via the "Cookie Settings" (in the footer or via the cookie icon at the bottom left): switch off "Statistics" and click "Save Preferences". We then delete the Google Analytics cookies in your browser, and your browser no longer sends any measurement data to Google Analytics.

According to Google, Google Analytics 4 does not store IP addresses. For visitors from the EU, Switzerland and the United Kingdom, Google uses the IP address only to derive an approximate location and then discards it. Google Analytics deletes event-level data after 14 months; aggregated reports remain.

Data may be transferred to the USA in the process. Google relies on the EU-U.S. Data Privacy Framework for this, an adequacy decision of the European Commission; Google LLC is certified under it. Should Google no longer rely on it, Google's contract terms provide for EU Standard Contractual Clauses as a fallback. Google's privacy policy: policies.google.com/privacy (opens in a new window).

A data processing agreement pursuant to Art. 28 GDPR is in place with Google (Google Ads Data Processing Terms).

Some pages of our website embed videos from YouTube, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (group company: Google LLC, USA).

YouTube videos are only loaded after your active consent (clicking on the video). No connection to YouTube is established before loading. Once you activate a video, YouTube may collect the following data:

• IP address
• Browser type and version
• Page accessed (referrer)
• Date and time of access
• Possibly your YouTube user account if you are logged in

For transfers to the USA, Google relies on the EU-U.S. Data Privacy Framework; Google LLC is certified under it. As a fallback, Google's contract terms provide for EU Standard Contractual Clauses. Privacy policy: policies.google.com/privacy (opens in a new window).

Legal basis: Art. 6(1)(a) GDPR (consent by actively loading the video).

Some pages of our website embed videos from Vimeo, a service of Vimeo, LLC, 555 West 18th Street, New York, New York 10011, USA.

Vimeo videos are only loaded after your active consent (clicking on the video). No connection to Vimeo is established before loading. Once you activate a video, Vimeo may collect the following data:

• IP address
• Browser type and version
• Page accessed (referrer)
• Date and time of access
• Interaction data (e.g. play, pause, duration)

As Vimeo is a US company, data may be transferred to the USA. Vimeo uses EU Standard Contractual Clauses (SCCs) pursuant to Art. 46 GDPR. Privacy policy: vimeo.com/privacy (opens in a new window).

Legal basis: Art. 6(1)(a) GDPR (consent by actively loading the video).

When you send us a message via the contact form, the data you provide (e.g. name, email address, message) is stored on our servers in order to process your enquiry.

The data entered in the contact form will remain with us until you request deletion, revoke your consent to storage, or the purpose for data storage no longer applies. Mandatory statutory provisions — in particular retention periods — remain unaffected.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in responding to enquiries) or Art. 6(1)(b) GDPR (pre-contractual measures) if your enquiry aims at concluding a contract.

To exercise your rights, please contact: infoline@weisslameraner.com (opens in a new window)

If you believe that the processing of your data violates data protection law, you may lodge a complaint with the supervisory authority. In Austria, this is the Austrian Data Protection Authority (Österreichische Datenschutzbehörde), Barichgasse 40–42, 1030 Vienna, dsb@dsb.gv.at (opens in a new window), www.dsb.gv.at (opens in a new window).

This website uses SSL/TLS encryption for security reasons and to protect the transmission of confidential content. You can recognise an encrypted connection by the padlock symbol in your browser's address bar and the address starting with "https://". When SSL/TLS encryption is activated, the data you transmit to us cannot be read by third parties.

In addition, we implement appropriate technical and organisational measures (TOMs) pursuant to Art. 32 GDPR to protect your data against unauthorised access, loss or destruction.

This privacy policy is currently valid and dated October 2026.

Due to the further development of our website or due to changes in legal or regulatory requirements, it may become necessary to amend this privacy policy. The current version can be accessed on this page at any time.