Privacy policy
Last edited: 19 September 2025
The protection of your personal data is a very important matter to COLMOBIL GmbH, Office Park 4, unit A.26, 1300 Wien-Flughafen, Austria ("COLMOBIL", "we", "us"). For that reason, we naturally undertake to comply with data protection provisions, including in particular the General Data Protection Regulation ("GDPR"), Austrian Data Protection Act ("DSG") and Austrian Telecommunications Act 2021 ("TKG 2021").
This privacy policy informs you about the nature, scope and purpose of the collection and processing of your personal data in connection with your visit and use of our website colmobil.at.
Details of the controller:
Name: COLMOBIL GmbH
Address: Office Park 4, unit A.26, 1300 Wien-Flughafen, Austria
Email address: contact@colmobil.at
1. What is personal data?
Personal data is information about an identified or at least identifiable data subject (a natural person; information e.g. name, email address or IP address).
2. What data do we collect from visitors and users of our website?
2.1. Contacting us
Data categories and purpose: If you contact us using the above contact details, we will process your personal data (e.g. form of address, given name, surname, email address, telephone number, postcode, physical address and content of your message) for the purpose of processing and replying to your enquiry.
Legal grounds: This processing is based on your voluntary and express consent pursuant to GDPR Art 6(1)(a) in conjunction with TKG 2021 s 174. You can withdraw your consent at any time with effect for the future (e.g. by emailing office@colmobil.at or clicking on the unsubscribe link you can find in any newsletter).
Duration of storage: We will process the personal data you have given for receiving the newsletter until you withdraw your voluntary consent, although not for longer than three years following the time you most recently contacted us.
2.2. Newsletter
Data categories and purpose: If you have signed up for our newsletter about our services and products, news about us, campaigns, competitions and satisfaction surveys, we will process your name, email address and newsletter open and click rates.
Legal grounds: This processing is based on your voluntary and express consent pursuant to GDPR Art 6(1)(a) in conjunction with TKG 2021 s 174. You can withdraw your consent at any time with effect for the future (e.g. by emailing contact@colmobil.at or clicking on the unsubscribe link you can find in any newsletter).
Duration of storage: We will process the personal data you have given for receiving the newsletter until you withdraw your voluntary consent, although not for longer than three years following the time you most recently contacted us.
2.3. Social media
Data categories and purpose: You can interact with us on our social media pages by commenting on our posts, reacting to them (e.g. using the "Like" button), sharing them or sending them to other users. When you do this, we will process your interactions, your usernames and, where applicable, the personal data of third parties who have been invited. The data in this context may also be processed by the platforms themselves. We and the respective platform will in this instance be joint controllers pursuant to GDPR Art 26. For this reason, we have made arrangements for being joint controllers.
Legal grounds: The purpose for processing the data is to reply to your questions; give you the opportunity to express yourself; provide our position on your opinions or feedback; and promote our offering. The processing is therefore based on both our legitimate interests and yours pursuant to GDPR Art 6(1)(f) and to discharge contractual or pre-contractual obligations pursuant to GDPR Art 6(1)(b).
You can find more information about the platforms’ processing of data, including the duration of data storage, at:
2.4. Provision of website and generation of log files
Data categories and purpose: The following data, which is technologically required within the meaning of TKG 2021 s 165(3), is collected automatically as part of your visit to our website so that the website can be displayed to you and its stability and security ensured:
information about the browser type and version used;
the user’s operating system;
the user’s internet service provider;
the user’s IP address;
the date and time of access;
the content of the request (specific page);
the websites from which the user’s system accessed our website;
websites to which the user’s system has navigated via our website.
Legal grounds: Your web browser transfers all this data when you access our website. We process this data only to provide the website and for the purpose of its operational security, which means that this data is technologically essential within the meaning of TKG 2021 s 165(3). The processing is therefore based on our legitimate interests pursuant to GDPR Art 6(1)(f) and also includes logging of system usage, user permission processes and analysis of server logs for troubleshooting.
Duration of storage: We generally store the usage data from your visit of our website for a period of one year.
This data is not stored with other personal data concerning the user.
2.5. Cookies
You can find a full list of cookies in the cookie banner. The cookie banner appears automatically when you access our website for the first time. You can also open the cookie banner by clicking on the fingerprint icon in the bottom-left corner.
3. Recipients of personal data
We of course handle your personal data confidentially. For this reason, we deliberately keep the number of recipients of your data small.
To operate our website, we engage service providers who also receive access to personal data so that they can perform the contracted services. Our processors primarily include IT service providers, namely:
providers of software and services and providers of tools and solutions which assist us in providing our website and performing our services;
general IT administration (including support, software, maintenance and data centre).
These processors only process your data on our behalf, pursuant to our instructions and for performing the above services. We have concluded contracts with all our processors in accordance with GDPR Art 28.
Furthermore, we transfer your personal data when there is a reason for this, to the extent necessary and to the following recipients:
external third parties to the extent necessary based on our legitimate interests (e.g. auditors, debt collectors, insurers in the case of a claim, legal counsel if applicable, etc.);
government agencies and other public entities to the extent that is required legally (e.g. tax authorities, data protection authorities, etc.).
Your personal data is not forwarded to any other third parties for their own purposes without your consent.
4. Duration of storage
We generally only store your personal data for as long as we need it to achieve the purposes outlined above. When we no longer need your personal data, we erase it from our systems or make it anonymous so that it irreversibly becomes impossible to identify you.
You can find details about the specific storage durations above next to each outlined purpose.
Where data is processed in the legitimate interest of us or a third party, your personal data will be erased as soon as this interest no longer applies, unless statutory retention periods require us to store it for a longer period of time. This also applies to any processing of data based on consent that has been given. As soon as you withdraw consent with effect for the future, the personal data will be erased immediately unless a statutory retention period applies and requires longer storage.
Moreover, when determining the duration of storage, we consider statutes of limitations which, for example, are usually 3 years under the General Civil Code (Allgemeines Bürgerliches Gesetzbuch or ABGB) and in certain cases up to 30 years (ABGB s 1489).
When the data is connected to the exercise of data subject rights, we store that data to keep evidence of completing your request for a period of 18 months, based on our legitimate interests (GDPR Art 6(1)(f)).
This applies without prejudice to cases where longer retention is necessary for litigation, requests from relevant authorities or compliance with applicable laws.
5. International data transfer
Your personal data may be transferred to countries that are outside of the European Union (EU) and European Economic Area (EEA) and offer an adequate level of data protection as set out in the European Commission adequacy decisions (https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en).
Your personal data will only be transferred to countries which are not part of the EU/EEA and do not ensure an adequate level of data protection when the data controller and recipient of the data have concluded the European Commission’s standard contractual clauses (SCCs) as a reasonable guarantee for the protection of your personal data, have conducted a transfer impact assessment and have implemented supplementary security measures or you have given your express, voluntary consent.
6. Data security
We have taken appropriate technical and organisational measures within the meaning of GDPR Art 32 to ensure the confidentiality and security of your personal data.
7. Data subject rights
You have the right to obtain access to the personal data concerning you that we process as a data controller (GDPR Art 15). You additionally have the right to obtain the rectification of incorrect data and erasure of your data ("right to be forgotten") (GDPR Arts 16 and 17). Moreover, you can exercise a right to restriction of the processing of your data (GDPR Art 18) and a right to receive the data provided by you in a structured, commonly used and machine-readable format ("data portability", GDPR Art 20). Furthermore, you can at any time withdraw your voluntary consent to the processing of personal data with effect for the future, e.g. by emailing office@colmobil.at (GDPR Art 7(3)).
In addition, you have the right to object to direct marketing initiatives and to object at any time to the processing of data on grounds relating to your particular situation (GDPR Art 21). In this case, we will refrain from processing your personal data further unless we demonstrate compelling, legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or the processing is for the establishment, exercise or defence of legal claims.
If you believe that we are processing your personal data unlawfully, you also have the right to lodge a complaint with the relevant supervisory authority or file for a judicial remedy (GDPR Art 77). In Austria, that authority is the:
Austrian Data Protection Authority, Barichgasse 40–42, 1030 Vienna, email: dsb@dsb.gv.at
You can also lodge the complaint with the supervisory authority in the EU country where you are ordinarily resident or work, or with the supervisory authority for the location at which the alleged infraction occurred.
To exercise these rights, you can contact us at any time, for example by emailing contact@colmobil.at.
8. Changes
The ongoing enhancement of our offering may lead to changes. We will of course keep this privacy policy up to date and amend it if necessary. The latest applicable version of this privacy policy is provided for viewing on our website at https://www.colmobil.at/rechtliches/datenschutz, where we inform you about significant changes separately. We also recommend looking up the current version regularly.