Privacy notice

We process personal data in accordance with the General Data Protection Regulation and the Austrian Data Protection Act. This notice describes which data arises when you visit this website and what we use it for.

Controller

Embedded services and your consent

Fonts, images and scripts of this website are hosted on our own server. We embed further services — each exclusively after your explicit consent under Art. 6(1)(a) GDPR, separately for each purpose.

Google Tag Manager and Google Analytics for visitor statistics. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; processing in the United States is possible, Google LLC is certified under the EU-US Data Privacy Framework. As long as you consent neither to statistics nor to marketing, Google Tag Manager is not requested — no connection to Google is established and your IP address is not transmitted.

PostHog for visitor statistics and for understanding which paths through our website lead to an enquiry — for example which pages were read before a document request or a meeting booking. The provider is PostHog Inc., 2261 Market St., #4008, San Francisco, CA 94114, USA. The data is processed and stored on servers in the EU (Frankfurt am Main); a data processing agreement under Art. 28 GDPR is in place with PostHog. We record pages viewed, clicks, referrer, browser and device type, and the fact that a form was submitted — never what was entered in it. PostHog creates no person profile for anonymous visitors, and no session recordings are made. PostHog is only loaded if you consent to statistics.

Google Ads, LinkedIn Insight Tag and Meta Pixel for measuring our advertising (marketing). They tell us whether our ads on Google, LinkedIn, Facebook and Instagram lead to visits and enquiries, and let us show ads there again to visitors of this website. The providers are Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland, and Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland; processing in the United States is possible, Google LLC, LinkedIn Corporation and Meta Platforms, Inc. are certified under the EU-US Data Privacy Framework. These services are loaded via Google Tag Manager and only become active if you consent to marketing.

HubSpot for the forms on our contact and download pages. The provider is HubSpot Inc., 2 Canal Park, Cambridge, MA 02141, USA. As long as you do not consent, a notice with a direct link to the form at HubSpot is shown in place of the form.

You can change or withdraw your consent at any time via Cookie settings. Withdrawal takes effect for the future; processing carried out until then remains lawful. On withdrawal we delete the cookies of the affected service.

Hosting and server logs

This website is delivered via Cloudflare Pages. The provider is Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. A data processing agreement under Art. 28 GDPR is in place with Cloudflare; processing in the United States is possible, Cloudflare, Inc. is certified under the EU-US Data Privacy Framework.

When a page is opened, Cloudflare processes technically necessary data: IP address, timestamp, page requested, browser and operating system. This serves to deliver the website and to protect it against attacks and abuse. Processing rests on the legitimate interest in secure operation of the website under Art. 6(1)(f) GDPR. We do not keep or analyse access logs ourselves.

Contact and download forms

For an enquiry or a download we process first name, last name, business email address, company and role. The data serves to process your enquiry and to send the requested document. The legal basis is Art. 6(1)(b) GDPR.

Job applications

Through the application form on our careers pages we process first name, last name, email address, phone number, salary expectations, earliest possible start date, your remarks and the documents you upload (CV, cover letter and further documents). On submission, the details and documents are sent by email to our recruiting team (karriere@qapture.at); nothing is stored on the web server. Access is limited to the people involved in the selection process.

The data is used solely to carry out the application process. The legal basis is Art. 6(1)(b) GDPR (steps prior to entering into an employment contract). If you are hired, your documents become part of your personnel file. Otherwise we delete them six months after the process has been completed. This period serves to defend against possible claims under the Austrian Equal Treatment Act (Gleichbehandlungsgesetz); the legal basis for this is our legitimate interest under Art. 6(1)(f) GDPR. Should we wish to keep your application on file for future positions beyond that, we will first ask for your separate consent, which you can withdraw at any time.

Cookies

Without your consent this website sets at most two cookies. qptr_consent stores your decision regarding the services named above so that we do not have to ask you again on every visit. Duration six months. If your browser does not accept cookies, the same entry is stored in your browser's local storage instead. Nothing is transmitted to third parties, and the entry also serves as the record of your consent under Art. 7(1) GDPR.

If you consent, the cookies of the respective service are added: _ga and _ga_* from Google Analytics with a duration of up to two years; ph_* from PostHog with a duration of one year, with the same entry also in your browser's local storage; _gcl_au from Google Ads and li_fat_id, lidc, bcookie and UserMatchHistory from LinkedIn and _fbp and fr from Meta with a duration of up to two years; and hubspotutk, __hstc, __hssc and __hssrc from HubSpot with a duration of up to six months.

If you switch between German and English using the language switcher, we remember this in the cookie qptr_lang so that you land in your language the next time you open qapture.at. It contains only “de” or “en”, lasts one year and is not transmitted to third parties. The legal basis is our legitimate interest in a website that respects your choice under Art. 6(1)(f) GDPR; no consent is required because the cookie only performs the function you explicitly selected.

Project data

Capture data from client projects is processed separately from this website. Hosting takes place in the European Union in data centres certified to ISO 27001. People in imagery are automatically blurred before release.

Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection. Contact the address stated in the imprint. Complaints can be directed to the Austrian Data Protection Authority.