Deutsch Back to home

Privacy policy

This is an English courtesy translation. The legally authoritative version is the German original.

This policy explains, in accordance with Art. 13 GDPR, which personal data is processed when you visit this website, when you contact us, and when you use Phillux. This website is a static information site: it has no user account, no online shop, no contact form and no newsletter. Advertising is measured only if you agree to it — see the section Measuring advertising.

Controller

Name
Helmut Fürpaß
Address
Farch 2a, 8741 Weißkirchen in Steiermark, Austria
Email
office@software-hub.org

A data protection officer is not legally required and has not been appointed; for any data protection matter you can reach us at the email address above.

When you visit this website

When the website is accessed, the web server — or our hosting provider — automatically processes data in so-called server log files that your browser transmits for technical reasons: IP address, date and time of access, the page or file requested, the volume of data transferred, a message on whether the request succeeded, browser type and version, operating system, and the previously visited page (referrer).

The legal basis is our legitimate interest in the secure and stable operation of the website (Art. 6(1)(f) GDPR). These log files are stored for security reasons for a maximum of 7 days and then deleted; data whose further retention is required as evidence (e.g. after a security incident) is exempt from deletion until the matter is finally resolved.

For as long as you have not consented, this website sets no cookies and embeds no third-party content: no external fonts, maps, videos or social-media elements, no reach measurement and no advertising service either. Fonts, images, stylesheets and scripts are served without exception from this server. Only with your consent is the service described under Measuring advertising loaded.

This website is hosted by 24fire (24fire.de), Germany. 24fire processes the server log files on our behalf as a processor under Art. 28 GDPR. The servers are located in the European Union, so no transfer to a third country takes place.

Measuring advertising (Google Ads)

We place advertisements with Google and would like to recognise whether a visit to this website came from such an advertisement and whether it led to an enquiry or a download (conversion measurement). For that we use the Google tag with the identifier AW-18380228793 of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Without your consent this tag is not loaded. No cookie is then set and no connection to a Google server is made; your IP address does not become known to Google in that case either. On your first visit we ask you by way of a notice at the foot of the page; until you decide, every advertising and analytics purpose is set to "denied" in what Google calls consent mode.

If you do consent, the following are processed: a cookie holding a random identifier by which your browser is recognised, your IP address (shortened by Google or used only for a coarse location), details of your browser and device, the pages you called up, and whether you had previously clicked one of our advertisements. We ourselves receive no individual profiles from this, only aggregated figures on how many advertisement clicks led to an action.

The legal basis is solely your consent under Art. 6(1)(a) GDPR in conjunction with § 165(3) of the Austrian Telecommunications Act 2021. Declining costs you nothing: the website remains fully and unchangedly usable.

Transfer to a third country. Google Ireland Limited passes data on to Google LLC in the United States. The USA is not a country with a generally equivalent level of data protection; US authorities may under certain conditions access data without your having the legal remedies you are used to from the EU. The transfer rests on your consent, on the European Commission's adequacy decision for the EU-US Data Privacy Framework to which Google LLC has submitted itself, and additionally on standard contractual clauses.

Retention. The cookie that is set expires after at most 90 days. Processing at Google follows their own retention periods; the details are in Google's privacy policy. Your decision about consent is stored in your browser (localStorage, not a cookie) so that we do not have to ask again on every visit.

Withdrawal. You may withdraw your consent at any time with effect for the future, without affecting the lawfulness of processing carried out until then: through Cookie settings at the foot of every page. The cookies that were set are deleted and the tag is not loaded again.

When you contact us

If you contact us by email (for instance via the address shown on the site), we process the information you provide — in particular your name, email address and the content of your message — in order to handle and answer your enquiry.

The legal basis is the performance of pre-contractual measures or of a contract (Art. 6(1)(b) GDPR) where your enquiry relates to a (possible) contractual relationship, otherwise our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR). We delete this data as soon as it is no longer required for the purpose; the need for retention is reviewed regularly. Statutory retention obligations — such as the seven-year retention of business correspondence under § 132 of the Austrian Federal Fiscal Code (BAO) — remain unaffected.

When you use Phillux

Phillux runs on your own hardware. The machines, containers, backups and credentials you manage with it stay on your server and do not leave it; we have no access to them, and no telemetry about your operation takes place.

The only data transmitted outward is the periodic licence check: a licence identifier and a technical identifier of your installation are sent to our licensing service to verify that the licence is valid. The legal basis is the performance of the licence agreement (Art. 6(1)(b) GDPR) and our legitimate interest in protection against unauthorised use (Art. 6(1)(f) GDPR). If the licence temporarily cannot be checked, Phillux keeps working normally during a grace period.

Where you use Phillux to process personal data of third parties, you are the controller for that processing within the meaning of the GDPR.

Recipients

Your data is passed on to third parties only where this is necessary to achieve the stated purposes or where there is a legal obligation. Recipients are in particular our hosting provider (server log files, as a processor) and, where necessary, tax advisors, authorities and courts within the scope of statutory obligations. If you have consented to the measurement of advertising, Google is added as a recipient. A transfer to countries outside the EU or EEA takes place in that case only, and is described in the section Measuring advertising.

Your rights

Where processing is based on consent, you may withdraw it at any time with effect for the future — for the measurement of advertising through Cookie settings at the foot of every page. You also have the right to lodge a complaint with the supervisory authority:

Austrian Data Protection Authority (Österreichische Datenschutzbehörde), Barichgasse 40–42, 1030 Vienna, dsb.gv.at.

Changes to this policy

We adapt this privacy policy whenever changes to our processing make it necessary. The version published on this page at the time applies.

Last updated: August 2026