Privacy policy

As of: 09 October 2026

This is a translation. The German version (Datenschutzerklärung) is the binding one.

1. Controller

EA Digital Solutions e.U., Liebenauer Hauptstraße 41, 8041 Graz, Austria
Phone: +43 678 1256094, email: office@hoheit.at

2. Principle

We collect as little data as possible. When you visit the public pages, no cookies are set, there are no advertising or remarketing trackers, and no content from third parties (fonts, maps, videos, social media plugins) is loaded. Fonts, images and logos are delivered with the website. The commission calculator works exclusively in your browser; your entries are not transmitted.

Anything beyond the technical delivery happens only with your consent. As long as you have not consented, no statistics script is loaded and no cookie is set. Open privacy settings

3. Hosting, database and server log files

The website is operated by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA; the application runs in the data centre in Frankfurt am Main. Content and enquiries are stored in a database of Neon Inc. (data centre Frankfurt am Main), images and short videos in the storage service Vercel Blob. When a page is requested, Vercel processes technically necessary data on our behalf: IP address, date and time of access, page requested, amount of data transferred, browser type and operating system, and the page visited before. This data serves the delivery of the website, security and the defence against attacks, and is deleted after a short time. The legal basis is Art. 6(1)(f) GDPR.

Data processing agreements (Art. 28 GDPR) exist with both providers. Because both companies are based in the USA, access from the USA cannot be ruled out. The transfer relies on the adequacy decision for the EU-US Data Privacy Framework where the provider is certified, and otherwise on the standard contractual clauses of the European Commission (Art. 45 and Art. 46(2)(c) GDPR).

On the “Arrival radar” page and on the service page for the arrival radar you can check the current warning situation for a place. For this, our server retrieves the open warning data of GeoSphere Austria (Federal Institute for Geology, Geophysics, Climatology and Meteorology, Hohe Warte 38, 1190 Vienna) for the coordinates of the chosen place. The request contains no data about you; your browser makes no connection to GeoSphere, and no cookie is set. The legal basis for operating the tool is Art. 6(1)(f) GDPR.

4. Google Analytics – only with your consent

To see which pages are read and how many enquiries the website generates, we use Google Analytics 4, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The service is loaded only if you have consented beforehand. Without your consent, no Google script is loaded, no cookies are set and nothing is transmitted to Google.

After your consent, Google processes on our behalf: pages viewed and time spent, referrer, approximate location based on the shortened IP address, device type, browser and operating system, and events such as submitting the contact form or clicking the phone number. Cookies are set in the process (among others _ga and _ga_<ID>, lifetime up to two years) and a random identifier is assigned by which returning visits are recognised.

We have chosen the settings so that the IP address is shortened, no Google signals are collected and no data is used for personalised advertising. Through Google’s consent mode, advertising and personalisation purposes remain permanently set to “denied”; only the statistics function is enabled. The retention period in Google Analytics is limited to 14 months.

The legal basis is your consent (Art. 6(1)(a) GDPR, section 165(3) of the Austrian Telecommunications Act 2021). A data processing agreement exists with Google. Processing in the USA by Google LLC cannot be ruled out; it relies on the adequacy decision for the EU-US Data Privacy Framework, in which Google is certified, and additionally on the standard contractual clauses (Art. 45 and Art. 46(2)(c) GDPR). Information from Google: policies.google.com/privacy.

You can withdraw your consent at any time with effect for the future; withdrawing is as easy as giving it: Change or withdraw consent. When you withdraw, we delete the cookies set by Google and no longer load the service. You can also use Google’s browser add-on to deactivate Google Analytics: tools.google.com/dlpage/gaoptout.

We store your decision exclusively locally in your browser (local storage, key hoheit.consent.v1) so that we do not have to ask you again on every visit. This storage is technically necessary to carry out your choice; it contains no identifier and is not transmitted to us. If you delete the website data in your browser, this decision is deleted too.

5. Contact form, appointment booking, email and phone

Enquiries through the contact form are stored in our access-protected system and forwarded to us by email. We process name, contact details, where applicable company, and the content of the enquiry exclusively to reply and to prepare a quote. The legal basis is Art. 6(1)(b) GDPR. If no collaboration results, we delete the enquiry after six months; otherwise the statutory retention periods apply.

If you book a first call through “Book a call”, we store date, time, type of call (online or on site), name, email address and your voluntary details (phone, business, number of units, message). If you came through a link with campaign parameters, we store the parameters of that visit (such as utm_source or a Google Ads click identifier) with the booking, to understand where enquiries come from; they are not passed on to advertising platforms and not stored in your browser. The legal basis is Art. 6(1)(b) GDPR, and for the origin details Art. 6(1)(f) GDPR. We delete the origin details after twelve months, the booking like an enquiry. Before the appointment we send you two reminders by email, on the day before and one hour before, with the link for video calls.

For the “Response-time test” you give us an accommodation business, its website and an email address for the result. We store these details like an enquiry, send the business a test enquiry through its public contact channels and evaluate the reply. The result goes to the address you gave. The legal basis is Art. 6(1)(b) GDPR; we delete the details after six months if no collaboration results.

We enter the appointment in our Google calendar (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) and invite you with your email address. For a video call, Google Calendar creates a Google Meet link. To show free times, the website only asks Google when the calendar is busy, without any data about you. Processing by Google LLC in the USA cannot be ruled out; it relies on the adequacy decision for the EU-US Data Privacy Framework, in which Google is certified.

6. Sending email

We send notifications and confirmations of receipt through the mailbox office@hoheit.at at easyname GmbH, Canettistraße 5/10, 1100 Vienna. If this mailbox is unreachable, we use the sending service Resend (Plus Five Five, Inc., USA) with processing in the data centre in Ireland as a fallback; in both cases replies go to office@hoheit.at. Data processing agreements exist with both providers; for the transfer to the USA the bases named under point 3 apply. The legal basis is Art. 6(1)(b) and (f) GDPR.

First contact with businesses. We write to selected businesses whose business contact details are publicly accessible (the business’s website and legal notice, OpenStreetMap, Google business profiles). For this we store the company name, website, business email address, where applicable the name of the responsible person given in the legal notice, our observations about the website and every message sent with its time. Messages are sent through the service Resend (Plus Five Five, Inc., USA; processing in the data centre in Ireland) from the address adam@mail.hoheit.at. Resend reports delivery, bounces and complaints to us. We also count whether a message was opened (through an invisible image loaded from t.mail.hoheit.at when it is opened) and whether a link in it was clicked (links go through t.mail.hoheit.at for this); time and number are stored, assigned to the individual message. Before every send we check the address against the ECG list of the RTR and our suppression list. The legal basis is our legitimate interest in business first contact (Art. 6(1)(f) GDPR); a data processing agreement exists with Resend. Every message contains an unsubscribe link. A click on it or an informal reply is enough: we then enter the address and domain permanently in our suppression list and do not write again. We keep the suppression list so that your objection is respected permanently; we delete the other details at any time on request.

7. Use of artificial intelligence

To produce draft texts and images for this website, we use language and image models from Anthropic PBC (USA) and Google Ireland Limited through their business customer interfaces. No personal data of visitors to this website is processed in the process; the drafts are based on our own content and publicly accessible sources. Every draft is checked by a person before publication. Which models we use for what is described on the page AI transparency. Enquiries from the contact form are not transmitted to AI providers.

8. Customer projects

Data that we process in customer projects (access credentials, content, booking and guest data, conversation histories of the AI concierge, statistics of the customer’s website) is subject to a data processing agreement under Art. 28 GDPR, which we conclude with every customer. Customers are not named as a reference without their express consent.

9. Login area

The login area is intended exclusively for maintaining content and for customers with dashboard access. On login, a technically necessary session cookie is set (Art. 6(1)(b) GDPR, section 165(3) of the Austrian Telecommunications Act 2021). Visitors to the public pages receive no cookie.

10. Your rights

You have the rights to access, rectification, erasure, restriction of processing, data portability, objection and to withdraw consents given (Art. 7(3), Art. 15 to 21 GDPR). To exercise them, contact office@hoheit.at informally. Complaints can be addressed to the Austrian Data Protection Authority, Barichgasse 40-42, 1030 Vienna, www.dsb.gv.at.

11. Changes

This policy is adapted when the website or the legal situation changes. The version published here at the time applies.