SIE Connect

SIE CONNECT

Privacy Policy

This page explains who is responsible for this website, which data are processed when you visit it or send us an enquiry, which service providers are involved and which rights you have.

1. Controller

SIE Connect GmbH, Hohenemser Straße 21, 6890 Lustenau, Austria. Telephone +43 5577 21900, e-mail info@sie-connect.com. Company register number FN 454565d, Feldkirch Regional Court.

For data protection enquiries please contact info@sie-connect.com.

2. Hosting and delivery

This website is hosted with Lovable (Lovable Labs Incorporated; EU representative: Lovable Labs AB, Regeringsgatan 25, 111 53 Stockholm, Sweden), on the basis of a data processing agreement pursuant to Art. 28 GDPR. Delivery takes place via the content delivery network of Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA, which acts on behalf of the hosting provider.

With every request, technical server log data arise: IP address, date and time of the request, the requested page, the referrer, the browser and operating system used (user agent), the HTTP status code and the volume of data transferred.

These data are required to deliver the website and to detect and defend against faults and attacks. The legal basis is our legitimate interest in secure and stable operation (Art. 6 (1) (f) GDPR).

Our service providers do not state a fixed retention period for these log data; they are kept for as long as is necessary for the operation and security of the website, and beyond that only for as long as a specific security incident is being investigated.

3. Fonts

The fonts used on this website are loaded exclusively locally from our own server. No third-party fonts are loaded, in particular none from Google Fonts. As a result, no data are transmitted to third parties when the page loads.

4. Consent and cookies

Consent for non-essential services is managed with CookieHub (CookieHub ehf., Iceland). Google Consent Mode v2 is initialised with all consent categories denied. Until you actively agree, no analytics cookie is set and no request is sent to Google Analytics or Google Tag Manager.

CookieHub itself sets a cookie in which your decision is stored, so that you are not asked again on every visit.

Cookies actually used: the CookieHub consent cookie (stores your decision), and, only after consent to statistics, the Google Analytics cookies (_ga, _ga_<container id>) used to distinguish visits.

Your language choice (DE/EN) is stored in your browser's local storage under the key sie-lang. This is technically necessary and is not transmitted to us.

You can withdraw or change your consent at any time via the “Cookie settings” link in the footer. Withdrawal is as easy as giving consent.

5. Audience measurement with Google Analytics 4

Where you consent to statistics, we use Google Analytics 4 (measurement ID G-ETBFTZFTNV). Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, and Google LLC, USA. The legal basis is your consent (Art. 6 (1) (a) GDPR).

Without your consent, the Google script is not loaded at all. Google Analytics 4 does not log or store full IP addresses. The retention of user and event data in Google Analytics is limited to 14 months.

The following events are recorded: page_view, service_click, cta_click, nav_click, form_start, form_submit, form_error, outbound_click, language_switch, contact_click. They record interactions with the website (which pages and buttons are used), not personal content. contact_click: click on our e-mail address or phone number. We only record whether it was e-mail or phone and in which area of the page the link was placed, not the address or number itself. Names, e-mail addresses or message texts are never sent to Google Analytics.

You can withdraw your consent at any time via the “Cookie settings” link in the footer; from that point onwards no further data are collected.

6. Contact form

When you send us an enquiry via the contact form, your message is delivered via Microsoft Power Automate into an internal Microsoft Teams channel. In addition, the same workflow sends an e-mail notification from info@sie-connect.com to internal mailboxes of our team in our Microsoft 365 tenant (Exchange Online). Transmitted in the process are your name, company, division, e-mail address, message, your preferred contact method, your phone number if given, the language of the page, the page from which the enquiry was sent and the time of receipt. If you choose “via phone” as your preferred contact method, the phone number is required, because without it no telephone response is possible.

The content of your enquiry is not stored in any database of this website. The enquiry is filed in the Teams channel and in these mailboxes, where it is handled by our team.

To fend off automated abuse we separately store an irreversible hash value of your IP address; only the accompanying timestamp is stored in plain text, solely in order to limit the number of submissions per hour. This entry allows no conclusion about the content of your enquiry. Entries older than 24 hours are deleted the next time the form is submitted. Your IP address is never stored in plain text.

Instead of a captcha we use a hidden form field (honeypot) which is invisible to you and is only filled in by bots.

The legal basis is our legitimate interest and, where the enquiry is aimed at a contract, its preparation (Art. 6 (1) (b) and (f) GDPR). Providing the data is voluntary, but without name, e-mail address and message we cannot answer the enquiry.

Erasure: enquiries are deleted from the Teams channel and from the mailboxes involved no later than 24 months after receipt, unless they have led to a contract and are therefore subject to statutory retention obligations (in particular seven years pursuant to § 212 of the Austrian Commercial Code and § 132 of the Austrian Federal Fiscal Code).

Contact enquiries are handled by our team in Austria. They are forwarded to our locations in Hong Kong or the USA only on a case-by-case basis, where this is necessary in order to answer your enquiry.

7. Transfers to third countries

Google (audience measurement). The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; a transfer to Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, is possible. Google LLC is certified under the EU-U.S. Data Privacy Framework; the transfer takes place on the basis of the European Commission's adequacy decision of 10 July 2023 (Art. 45 GDPR). In addition, Google relies on standard contractual clauses pursuant to Art. 46 (2) (c) GDPR.

Microsoft (delivery of contact enquiries; Teams, Exchange Online, Power Automate). The provider is Microsoft Ireland Operations Limited, Dublin, Ireland. For services that Microsoft lists as “EU Data Boundary” services, Microsoft undertakes to store and process customer data within the EU and the EFTA. A transfer to Microsoft Corporation, One Microsoft Way, Redmond, WA 98052, USA, is nevertheless not excluded. Microsoft Corporation is certified under the EU-U.S. Data Privacy Framework; any such transfer takes place on the basis of the adequacy decision (Art. 45 GDPR), supplemented by the standard contractual clauses of the Microsoft Data Protection Addendum.

Cloudflare (delivery of the website). Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA, operates a global anycast network: your request is routed to the nearest data centre, so processing outside the European Union, in particular in the USA, is possible. Cloudflare, Inc. is certified under the EU-U.S. Data Privacy Framework; the transfer takes place on the basis of the adequacy decision (Art. 45 GDPR), supplemented by standard contractual clauses pursuant to Art. 46 (2) (c) GDPR.

Lovable (hosting). Lovable Labs Incorporated, EU representative Lovable Labs AB, Regeringsgatan 25, 111 53 Stockholm, Sweden. Lovable is not certified under the EU-U.S. Data Privacy Framework. Where processing takes place outside the European Economic Area, this is done on the basis of the European Commission's standard contractual clauses (Implementing Decision (EU) 2021/914) pursuant to Art. 46 (2) (c) GDPR.

Supabase (technical spam protection). The contracting party is Supabase Pte. Ltd., 65 Chulia Street #38-02/03, OCBC Centre, Singapore 049513; the data are held in the AWS region us-east-2 (Ohio, USA). Stored there is solely an irreversible hash value of your IP address together with a timestamp, used to limit the number of submissions per hour. No content of contact enquiries is stored there. Supabase is not certified under the EU-U.S. Data Privacy Framework; the transfer takes place on the basis of the European Commission's standard contractual clauses (Implementing Decision (EU) 2021/914, modules 2 and 3) pursuant to Art. 46 (2) (c) GDPR.

CookieHub (consent management). CookieHub ehf., Hafnargata 51-55, 230 Reykjanesbær, Iceland. Iceland is part of the European Economic Area; the General Data Protection Regulation applies there directly.

You can request a copy of the safeguards for transfers to third countries at info@sie-connect.com.

8. Your rights

You have the right to withdraw your consent at any time, with effect for the future.

You have the right to confirmation as to whether personal data concerning you are processed by us and, if so, the right to information about those data.

You have the right to a copy of your personal data; the first copy is free of charge.

You have the right to have your personal data corrected or completed.

You have, with some restrictions, the right to have your personal data erased (right to be forgotten).

You have, under certain conditions, the right to restrict the processing of your personal data.

You have, under certain conditions, the right to receive your personal data and to have them transferred to another controller.

You have, under certain conditions, the right to object to the processing of your personal data.

You have, under certain conditions, the right not to be subject to a decision based solely on automated processing.

You have the right to lodge a complaint with a supervisory authority: Österreichische Datenschutzbehörde, Barichgasse 40-42, 1030 Vienna, Austria, dsb@dsb.gv.at.

To exercise these rights, write to info@sie-connect.com.

9. Automated decision-making

No automated decision-making within the meaning of Art. 22 GDPR producing legal effects concerning visitors to this website, or similarly significantly affecting them, takes place on this website. Visitors are not profiled.

10. Version

Version: November 2026.