Privacy policy

1. Controller

GMS Hutter GmbH & Co KG, Münchner Bundesstraße 110, A-5020 Salzburg, Austria
Phone: +43 662 230 978 · Email: office@gms.info
Companies register: FN 172325 w, Regional Court of Salzburg (Landesgericht Salzburg) · VAT ID: ATU48268208

Data protection contact: Walter Holitzky, Data Protection Officer, tel. +43 662 230 978, dsgvo@gms.info

2. Principles

GMS takes the protection of your personal data seriously. We treat your personal data as confidential and in accordance with statutory data protection rules and this privacy policy. Use of this website is generally possible without providing personal data. Where personal data is collected, this is always done on a voluntary basis. This data is not passed on to third parties without your express consent. Please note that data transmission over the internet can have security gaps; complete protection against third-party access cannot be guaranteed.

3. Server log files

The provider of these pages automatically collects and stores information in server log files that your browser transmits automatically: browser type and version, operating system in use, referrer URL, host name of the accessing computer, time of the server request and IP address. This data cannot be attributed to specific individuals and is not combined with other data sources. The legal basis is our legitimate interest in the secure operation of the website (Art. 6(1)(f) GDPR).

This website is hosted by Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA. Delivery takes place via the global Cloudflare network, with EU data processing under a data processing addendum. A data processing agreement is in place.

4. Contact and demo forms

When you contact us via a form on this website, we process the data you provide in order to handle your enquiry and any follow-up questions. Depending on the form, we collect: name, hotel or group, email address, phone number, role, size of operation, your free-text description of the workflow you are looking for, and technical information about the source of the enquiry (page called up, campaign parameters, timestamp).

The legal basis is your consent (Art. 6(1)(a) GDPR) and the performance of pre-contractual measures (Art. 6(1)(b) GDPR). You can withdraw your consent at any time by informal notice to office@gms.info.

This data is processed in our customer relationship system, Zoho CRM. Provider: Zoho Corporation B.V., Beneluxlaan 4B, 3527 HT Utrecht, Netherlands. Data processing takes place in the EU data centre in Amsterdam. A data processing agreement is in place.

5. Cookies and consent

This website uses technically necessary cookies that are required for secure operation. Cookies for analytics and for embedded media are only set after your express consent. Your choice is stored locally in your browser; you can change or withdraw it at any time via the "Cookie settings" link in the footer.

Category	Purpose	Legal basis	Retention period
Necessary	Security, core functions, storage of your cookie choice	Art. 6(1)(f) GDPR	Session up to 12 months
Analytics	Analytics (Google Analytics), company identification (Leadinfo)	Art. 6(1)(a) GDPR	Up to 24 months
Media	Embedded videos (YouTube)	Art. 6(1)(a) GDPR	Provider-defined, see Google privacy policy

6. Web analytics

On felixunity.ai we use Google Analytics 4 (measurement ID G-85LELGHG29) to evaluate site usage statistically. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. A data processing agreement with Google is in place.

Google Analytics 4 is only loaded after your consent in the cookie category "Analytics". Without consent, no data is sent to Google. The legal basis is Art. 6(1)(a) GDPR.

Processed data: truncated IP address (IP anonymisation is on by default in GA4), device and browser type, operating system, referrer URL, time and duration of the visit, and interactions on the site. No merging with other Google accounts takes place. Data is stored for 14 months and deleted automatically after that.

Google also processes data in the United States. The legal basis for the third-country transfer is the EU-US Data Privacy Framework (EU Commission decision of 10 July 2023); Google Ireland Limited is listed as certified at dataprivacyframework.gov.

Objection and opt-out. You can withdraw your consent at any time via the Cookie settings link in the footer. Google additionally provides a browser add-on at tools.google.com/dlpage/gaoptout that blocks Google Analytics collection in general.

Company visit recognition: Leadinfo

We also use Leadinfo to recognise which companies visit our website. Leadinfo matches the IP address of the visit to a company and provides us with information about that company. The following details are based on a measurement of the script as actually delivered.

Provider: Leadinfo B.V., Rotterdam, the Netherlands.

Data categories: IP address and the company derived from it; page address, page title, referrer URL and time; browser and device details (language, screen resolution); an identifier calculated from device and browser characteristics that changes daily and serves recognition within one day. If you enter an email address in a form on this website, the script transmits it when you leave the field, even without submitting: the domain in full and the part before the @ sign shortened and obscured.

Storage on your device: In our measurement, Leadinfo set no cookies and no entries in local storage.

Use: We use Leadinfo solely to recognise companies, not to identify individual persons. The provider's person-related additional features are not enabled for our account.

Consent and legal basis: Like Google Analytics, Leadinfo is only loaded after your consent in the cookie category "Analytics". The legal basis is Art. 6(1)(a) GDPR and Section 165(3) of the Austrian Telecommunications Act 2021. You can withdraw your consent at any time via the cookie settings in the footer.

Recipients and transfer: Leadinfo B.V. as processor; servers cdn.leadinfo.net, collector.leadinfo.net, collector4.leadinfo.net, api.leadinfo.com. The provider is based in the European Union.

Retention: in accordance with Leadinfo's terms under the data processing agreement concluded with the provider.

7. Embedded videos

This website embeds videos from YouTube. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The videos are only loaded once you consent to the "Media" category or actively start playback. Until then, only a locally delivered preview image is displayed and no connection to Google servers is established. Once playback starts, Google processes usage data including your IP address. Further information: policies.google.com/privacy.

8. Guest data in the felixUnity software

This privacy policy applies to the felixunity.ai website. For the processing of guest data inside the felixUnity software, the respective hotel is the controller; GMS acts as processor. Guest data is stored and processed in the European Union and is not used to train AI models.

Details, data processing agreement, subprocessors used and server locations are available on request.

9. Your rights

You have the right to information, rectification, erasure, restriction of processing, data portability and objection. To exercise these rights, please contact office@gms.info. You also have the right to lodge a complaint with the Austrian Data Protection Authority (Datenschutzbehörde, Barichgasse 40 to 42, 1030 Vienna, dsb.gv.at).

10. Social-media presence

We maintain an online presence on social networks in order to communicate with users, interested parties and customers. When you access these networks, the terms of use and data processing policies of the respective operators apply.

• LinkedIn: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. Privacy
• Facebook: Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland. Privacy
• Instagram: Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland. Privacy
• YouTube: Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland. Privacy