Privacy policy
We process personal data exclusively on the basis of the GDPR (DSGVO) and the Austrian Data Protection Act (DSG). The controller is FORTAS Construction GmbH, Lindengasse 4–6, 4040 Linz, office@fortas.gmbh.
Hosting
This website is delivered via Cloudflare Pages (Cloudflare, Inc., USA). When you visit it, Cloudflare processes technically necessary data such as your IP address, the time, the requested address and your browser identifier in order to deliver the site and protect it against attacks (Art. 6(1)(f) GDPR). Cloudflare is certified under the EU-US Data Privacy Framework; a data processing agreement is in place with Cloudflare.
No cookies, no tracking
We do not use cookies or any analytics or advertising services. Fonts are loaded from our own server, not from Google or other providers.
Local storage in your browser
We store a few settings only in your browser (localStorage), so you do not have to choose them again on every visit: light or dark design, whether the language hint was dismissed, the selected country for your contact person and whether the projects map may be loaded. This information is not transmitted to us and can be deleted at any time in your browser settings.
Projects map (OpenFreeMap)
The map tiles on the projects page come from OpenFreeMap (openfreemap.org, map data © OpenStreetMap contributors). They are only loaded once you click “Load map” (Art. 6(1)(a) GDPR). Your IP address is then transmitted to the map server. Without your consent, no connection is made.
Contact enquiries
If you contact us via form, email or phone, we process your details in order to handle your enquiry (Art. 6(1)(a) and (b) GDPR).
Forms: spam protection and email delivery
To prevent bots from misusing our forms, we use Cloudflare Turnstile (Cloudflare, Inc., USA). Turnstile is only loaded once you start filling in a form and uses technical characteristics of your browser (including your IP address) to check whether the input comes from a human (Art. 6(1)(f) GDPR). Your details from the contact or application form are sent to us via the email service Brevo (Sendinblue SAS, France) and are not stored on the website; a data processing agreement is in place with Brevo. For Cloudflare, the EU-US Data Privacy Framework or standard contractual clauses apply.
FORTAS Assistant (AI chat)
On our website you can ask questions to an AI-based assistant. Data is only transferred once you send a message. Your messages are then sent, together with the conversation so far, via our server to OpenAI (OpenAI, L.L.C. or OpenAI Ireland Ltd., USA/Ireland) to generate the answer; to prevent misuse, Cloudflare Turnstile checks every message (loaded once you start typing; see above). We do not store chats; OpenAI does not store the requests for further use and does not use them for training, but may keep them for up to 30 days for abuse monitoring. The conversation is kept only in your browser (sessionStorage) until you close the tab or choose “New chat”. The legal basis is Art. 6(1)(b) or (f) GDPR (answering your request); for the transfer to the USA, the EU-US Data Privacy Framework or standard contractual clauses apply. Please do not enter personal or sensitive data in the chat. If you send an enquiry via the chat, the section on forms applies.
Links to social networks
We show our Instagram posts as images from our own server. Only when you follow a link to Instagram do the privacy terms of Meta Platforms apply.
Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability and objection. Complaints may be addressed to the Austrian Data Protection Authority (Datenschutzbehörde) (dsb.gv.at).
