Legal

Privacy Policy

Please note: this English text is a convenience translation. In case of any discrepancy, the German version at adperformancepartners.at/datenschutz.html prevails.

On our company structure: ad performance partners is a cooperation network of independent experts without separate legal personality and not a company in its own right. The controller for all processing described here is the sole proprietorship Mag. Elisabeth Seebacher, MA, Steinkogelweg 5, 9311 Kraig. Details in the imprint.

This statement describes what happens to your data when you use adperformancepartners.at and when you work with us. The controller’s full privacy policy, which also covers her other activities, is available at elisabethseebacher.com/datenschutz.

1. Controller

Mag. Elisabeth Seebacher, MA
Steinkogelweg 5, 9311 Kraig, Austria
Telephone: +43 650 4852882
Email: office@adperformancepartners.at
VAT ID: ATU74424713

Processing takes place on the basis of the General Data Protection Regulation (GDPR), the Austrian Data Protection Act (DSG) and the Austrian Telecommunications Act 2021 (TKG 2021). Further details about the service provider can be found in the imprint.

2. Getting in touch

If you contact us by email, by telephone, by message (e.g. WhatsApp) or via the contact form, we process the details you provide — such as your name, company, email address, telephone number, website and your message — in order to answer your enquiry.

Legal basis: steps preparatory to a contract, or performance of a contract (Art. 6(1)(b) GDPR), otherwise our legitimate interest in responding to enquiries (Art. 6(1)(f) GDPR).

Retention: until the enquiry has been dealt with. If no contract comes about, we delete the data after 6 months at the latest.

Email: The office@adperformancepartners.at mailbox is operated through the webmail service of our host SiteGround Spain S.L. (Madrid, Spain) as a processor.

WhatsApp: If you contact us via WhatsApp, your telephone number and your messages are processed by WhatsApp Ireland Limited (Meta); a transfer to the United States is possible in the process. You can always reach us by email or telephone instead.

Email links: Clicking an email link (mailto) opens your own email program. The processing carried out by your program and your provider is outside our control.

3. Client projects

For quotations, contract handling, communication and invoicing we process the contact and contract data of our clients and their contact persons (name, role, company, address, email, telephone, billing details).

Legal basis: performance of a contract (Art. 6(1)(b) GDPR) and legal obligations (Art. 6(1)(c) GDPR).

Retention: for the duration of the cooperation; accounting records for seven years (section 132 BAO, section 212 UGB).

Recipients: tax advisers, banks, IT service providers, public authorities within the scope of statutory obligations and, where necessary for the project, the network partners of ad performance partners, who act as subcontractors and processors and are bound to confidentiality.

Your customers’ data: Where we process personal data of your customers or website visitors on your behalf — for instance customer lists for audiences, conversion and analytics data — you are the controller for that data and we act as processor under Art. 28 GDPR. We conclude a separate data processing agreement for this.

4. Use of AI tools

For copy, concepts, analysis and image and video content we use generative AI tools: Gemini (Google), ChatGPT (OpenAI), Claude (Anthropic), Canva (Canva Pty Ltd, Australia), Runway (Runway AI, Inc., USA) and Luma (Luma AI, Inc., USA). The following applies:

We enter only the information required for the task at hand. Personal data is avoided or pseudonymised wherever possible. We do not enter special categories of data such as health data.
We use the tools with settings under which our inputs are not used to train the models.
Some providers process data outside the EU (see point 7).

Legal basis: performance of a contract (Art. 6(1)(b) GDPR) or our legitimate interest in providing our services efficiently (Art. 6(1)(f) GDPR). In client projects, the use of AI is additionally governed by the agreement with the client.

5. This website

Hosting: The website is hosted by SiteGround Spain S.L., Calle Prim 19, 28004 Madrid, Spain, acting as processor, on the basis of a data processing agreement pursuant to Art. 28 GDPR.

Server log files: When the website is accessed, data transmitted by your browser is collected automatically: the page requested, the date and time, the volume of data transferred, the referrer, the browser type and operating system, and the shortened IP address. This data serves the secure and stable operation of the website. The legal basis is our legitimate interest under Art. 6(1)(f) GDPR. The retention period follows our hosting provider’s settings and amounts to a few days.

Cookies and consent: On your first visit, a banner asks for your consent. Only one cookie is technically necessary: it records the choice you made so that we do not have to ask you again on every visit. The legal basis for it is section 165(3) TKG 2021, which requires no consent for strictly necessary storage. All other cookies are only set after you have given your consent. You can change or withdraw your choice at any time via the Cookie settings link in the footer.

Record of your consent: When you make a choice in the banner, we store on our server the time, the categories selected, the version of the banner and a randomly generated identifier that is also held in your browser. This allows us to meet the accountability obligation under Art. 7(1) GDPR. We do not store your IP address, your user agent or the page you were on. The entries are deleted after 400 days.

Google Analytics 4: Only with your consent (Art. 6(1)(a) GDPR in conjunction with section 165(3) TKG 2021) do we use Google Analytics 4, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, as our processor, to analyse the use of the website statistically. The data collected covers the pages viewed, time on page, approximate location at city level, device type, traffic source and submitted contact forms. The IP address is shortened by Google and not stored; analytics data is deleted after 14 months. Before you give your consent, no Google service is loaded and no connection to Google is established; if you decline or make no choice at all, that remains the case. A transfer to Google LLC in the United States is possible (see point 7). You can withdraw your consent at any time with effect for the future via the Cookie settings link in the footer; the cookies are deleted when you do.

Contact form: The details from the form — name, company, email address, website and your message — are sent to our email account encrypted via HTTPS and are not stored on the web server. Point 2 applies to the further processing.

Tracking check: At adperformancepartners.at/en/tracking-check/ you can have a website checked for the analytics, advertising and consent tools installed on it. To do so, the address you enter is sent to our checking application at tracking-check.adperformancepartners.at, which is also hosted by SiteGround. It fetches the home page of that website and any publicly available Google Tag Manager containers once and analyses them. We store the domain checked, the time, the result and the language of the page, but not your IP address or any details about you. To prevent misuse, your IP address is held in memory for no more than ten minutes in order to limit the number of checks per visitor, and is then discarded. The legal basis is our legitimate interest in providing the tool and protecting it against misuse (Art. 6(1)(f) GDPR). If you have consented to statistics, Google Analytics also records that a check was started, which domain was checked with which result, and whether you submitted an audit request. For an audit request via the form below the result, what is said about the contact form applies; the check result is pre-filled into your message and you can change it before sending.

Fonts: The fonts used are served from our own server. There is no connection to Google Fonts or any other external provider, and no data is transferred to third parties in this process.

6. Social networks

This website embeds no social media plug-ins and links to no social network profiles. No data is transferred to social networks when the website is accessed.

7. Transfers to third countries

Some service providers also process data outside the EU: Google, WhatsApp (Meta), OpenAI, Anthropic, Runway and Luma, in particular in the United States, and Canva in Australia. Transfers to the United States are based on the European Commission’s adequacy decision on the EU-U.S. Data Privacy Framework, where the recipient is certified. In all other cases they are based on the European Commission’s standard contractual clauses (Art. 45 and 46 GDPR).

8. Your rights

Access to the data processed about you (Art. 15 GDPR)
Rectification of inaccurate data (Art. 16 GDPR)
Erasure (Art. 17 GDPR)
Restriction of processing (Art. 18 GDPR)
Data portability (Art. 20 GDPR)
Objection to processing based on legitimate interests (Art. 21 GDPR)

You can withdraw consent you have given at any time with effect for the future. A message to office@adperformancepartners.at is sufficient to exercise these rights.

9. Right to lodge a complaint

If you believe that the processing of your data infringes data protection law, you can lodge a complaint with a supervisory authority. In Austria this is the Austrian Data Protection Authority, Barichgasse 40–42, 1030 Vienna, dsb.gv.at.

10. Contractual relationships

The details of our cooperation are governed by our general terms and conditions, in particular clause 8.1 on confidentiality, clause 8.2 on the client’s data protection obligations and clause 8.3 on the data processing agreement.

11. Changes

We update this privacy policy when our services, the services we use or the legal position change. The version published on the website at the relevant time applies.

Last updated

22 October 2026