Privacy policy

Table of contents

  1. General
  2. Which of your data do we collect, for which purposes and on which legal basis do we process it?
  3. Cookies
  4. Additional embedded services and contents of third parties
  5. Is your data transmitted to third parties?
  6. Retention period
  7. Your Rights under Data Protection Law
  8. Data security
  9. Amendments of our Privacy Policy
  1. General, Scope

    1. It is of utmost importance for us, IXOLIT GmbH, to protect your personal data. We therefore comply with the applicable data protection provisions, in particular the General Data Protection Regulation ("GDPR"), the Austrian Data Protection Act ("DSG") and the Telecommunications Act ("TKG") concerning the protection, lawful processing and confidentiality of personal data as well as data security.
    2. This Privacy Policy explains to you the nature, extent and purposes of the processing of your personal data within the "Website" along with the related services, functions and contents (jointly "Online Services"). In the following, we particularly inform you on which personal data we potentially collect, process and use when you use our Online Services.

      Controller of the processing on the Website is IXOLIT GmbH, Mariahilfer Straße 77-79, 1060 Vienna, FN 213107v, Commercial Court Vienna ("IXOLIT").

  2. Which of your data do we collect, for which purposes and on which legal basis do we process it?

    1. Contacting us

      When you fill out the contact form on our Website and send your enquiry or establish contact with us via e-mail or through other electronic channels (such as social media platforms), we process the data you voluntarily provided us with (name, e-mail address, nature of the enquiry respectively the subject of your message and the content of your message).

      We process the data provided within the course of contacting us solely for processing your enquiry, to get in contact with you if desired and to provide you with the requested information. This data processing is therefore necessary for the fulfilment of our (pre)contractual obligations.

    2. Server log files

      We collect and process the following data when you visit our Website and use our Online Services, that is – technically speaking – when you access the respective server containing the specifically requested service (so called server log files): name of the accessed Website, file (e.g. html, JPG, PNG), date and time of access, transmitted quantity of data, server status codes, processing time, browser and client type alongside the version, your operating system, referrer URL (the previously visited Website or external site), IP-address and the requesting provider, reverse DNS; if you contact us via the Contact Form, we also process connection data regarding source and target (network discovery or address, port numbers, protocol, e-mail address, e-mail subject, connecting server, protocol details, reputation data for spam filters, reverse DNS, obvious labelling, connected servers), authentication details and technical e-mail meta information.

      This data is generated automatically through our servers when you use our Website and is necessary so that we can provide you with our Online Services. We therefore process server log files solely to be able to operate our Website and the connected services, to distribute web server requests in our server pool, for detection and rectification of errors as well as for security reasons (e.g. for clarification of abusive and fraudulent activities), for a maximum duration of 15 days. Thus, this data processing activity is necessary to ensure our legitimate interests in operating an error-free and secure Website.

    3. Usage data

      Based on your consent to the use of Cookies, we collect and process the following data about your use and interaction with our Website (reporting cookie): IP-address of your device, the used internet browser, the browser language, your operating system, the requested files from our Website, your settings regarding Java, screen resolution, colour depth, your click behaviour on the Website (time of access, clicks) as well as the internet site from which you visit us (referrer URL). You can withdraw your consent at any time free of charge through your browser settings (see point 3.4 below) with effect for the future.

      This data is collected through the cookie "Universal Analytics" (see point 3.5 below). We use this usage data for (i) web analysis, (ii) improvements of our Online Services and our Website, (iii) increasing usability. Your consent is not necessary for the use of the Website.

    4. Newsletter

      On the basis of your consent (obtained through double opt-in process; after registration you receive an e-mail for confirmation of your registration) we process the personal data that you provided us with voluntarily in the course of the registration for the newsletter (your e-mail address and potentially your name) (i) for sending you e-mail newsletters about our current projects, marketing and product information as well as (ii) for measuring your reading habits of our newsletter and (iii) to transmit your provided data to companies of the IXOLIT Group which can send you e-mail newsletters for the same purposes as well. The "IXOLIT Group" comprises the following "Group Members": IXOLIT GmbH, FN 213107v, IXOPAY GmbH, FN 451099g, each Mariahilfer Straße 77-79, 1060 Vienna, Austria, IXOPAY LLC, EIN 90-1013241, 215 North Eola Drive, 32801 Orlando, Florida, USA.

      Reading habits: Our newsletters contain a mechanism for measuring your reading habits. With that we can determine whether our newsletter is opened, when it is opened and what links are clicked. These statistical evaluations are serving solely the detection of the reading habits of our newsletter recipients and to adjust our contents to them.

      You can withdraw your consent to receive our newsletters at any time via e-mail to [email protected] or through the unsubscribe link in our newsletters with effect for the future and free of charge. After receipt of your withdrawal we and all other the Group Members will cease the further sending of e-mail newsletters immediately and erase your personal data from the mailing list.

    5. Registration and User Account

      When you register on our Website or have a user account for the use of our Online Services, we process the following personal data: Your title, name, company, e-mail address, country, IP address, access data (namely e-mail address & password) as well as (if voluntarily provided) VAT number, postal address and telephone number. Mandatory fields are marked by an asterisk (*)

      We process the data of your user account solely for operating your account, the provision of our Online Services as well as for the billing of our services. This data processing is therefore necessary for the fulfilment of our (pre)contractual obligations.

  3. Cookies

    1. Cookies are files that are transmitted from our web server to your web browser and are stored on your device for later retrieval. Through such cookies, our Website can store important data to provide you with our services and to make the use of our Website more comfortable for you.
    2. Most of the cookies that are used by us are so called "session cookies" that are stored on your device for the time of your current visit of our Website, only. This temporary cookies make a conformable use of our Website possible for you (e.g. through adaptation of user settings for the sorting of references and choice of language according to your needs). Session cookies are just valid for the duration of your specific visit of our Website and are subsequently erased automatically. Moreover, we also use "persistent cookies" that stay on your device and are not erased automatically when you close your browser. You can, of course, erase these cookies yourself at any time. With persistent cookies we especially pursue the purpose to improve your user experience by customising the Website to your personal needs and thus to optimise the loading time accordingly.
    3. a) Google Tag Manager: Our Website uses the "Google Tag Manager". This is strictly necessary to implement and manage the Google Analysis and Marketing services into our Website according to your cookie preferences.

      b) ReferrerID: Our Website uses a "ReferrerID Cookie" for the duration of the session if you visit links on websites of our business partners that refer to our Website, for the purpose of statistical evaluations regarding the website from which you were referred to our Website. By means of this cookie we do not process personal data (§ 96 (3) TKG) and do not use "hidden identifiers" or other similar devices. Third parties cannot access the collected anonymous information.

    4. Cookie Settings

      You can accept or reject individual or all types of cookies that are not strictly necessary easily via our cookie banner, appearing on your first visit on our Website.

      Please also note: Most internet browsers accept cookies by default. You can adjust your internet browser settings so that cookies are only placed with your explicit consent, are generally rejected or stored cookies are removed. In order to do so, please follow the instructions provided by your respective internet browser’s producer:

      In addition, you can deactivate cookies via This process will ask your computer for an ID-Tag of an "opt-out-cookie" preventing data to be linked/associated with your computer. Please note that this process does not remove the opt-out-cookie – it must remain on your computer for the opt out to work successfully, i.e. to recognize the user's opt-out. You will need to follow the same process on every different internet browser you use on the same and/or different computers as well as in case you remove all cookie data from your device. Nonetheless, the use of Your Online Choices does not guarantee that no third parties use cookies through our Website.

    5. Cookies for which consent is required

      Universal Analytics

      Provided that you have given consent to use cookies, we use Universal Analytics, a web analysis service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google") on our Website. The information generated through the Universal Analytics Cookie about the use of the Website are usually transmitted to the servers of Google in the United States of America and stored there. Google relies on standard contractual clauses adopted by the EU Commission when transferring personal data outside the EEA or the UK to countries which are not covered by an adequacy decision and thus guarantees EU-data protection standards.

      Google will use this information on our behalf to evaluate the usage of our Website by the users, to assemble reports about the activities on our Website and to deliver to us further services connected to the use of the Website. In doing so, pseudonymised user profiles of users can be generated from the processed data. Google will also potentially transmit the data to third parties if legally required or third parties process the data on behalf of Google.

      Name of cookie (max retention period) / Purpose:

      • _ga (2 years) / Distinguishes visitors. Collects data about number of visits and user journey.
      • _gid (24 h) / Distinguishes visitors. Collects data about number of visits and user journey.

      If you have not given your consent, we use Universal Analytics only with activated IP anonymization. This means that IP addresses are shortened by Google as soon as data is received by the Google Analytics Collection Network, before any storage or processing takes place. To our knowledge, the IP address transmitted from your browser is not merged with other data of Google.

      You can prevent the use of Universal Analytics by downloading and installing the browser plug-in available through the following link: You can find out more information about the data usage through Google, setting and objection possibilities on the websites of Google:

      Google Ads

      We use the online marketing service "Google Ads" (formerly: "Google Adwords"). Google Ads is considered as profiling. Through the information collected, we can access statistics and particularly find out the total number of users that have clicked on our advertisements or that were forwarded to our Website through a Google search or through the Google Display Network .

      Furthermore, Google Ads uses advertising functions of Universal Analytics by Google to place advertisements to target groups provided by Google, on our behalf.

      You can object to these processing activities by using the Opt-out service provided by Google: Please find more general information about data use for marketing purposes by Google through the data protection notice of Google under

      Conversion Cookie

      Provided that you have given consent to use cookies, we use the Conversion Tracker of the Google Ads service. In this case every Google Ads client (and therefore also us) receives a different so called "Conversion-Cookie", allowing us to obtain information to assess the advertisement efficiency across our Websites and on websites of our marketing- & advertising partners. For further information of Google regarding Conversion-Tracking please see

      Name of cookie (max retention period) / Purpose:

      • _gcl_au (3 months) / Assessing advertisement efficiency across our Websites and on websites of our marketing- & advertising partners.
  4. Additional embedded services and contents of third parties

    Within our Online Services, we use further services and contents of third party providers to incorporate their contents and services on the basis of our legitimate interests in the provision, optimisation and economical operation of our Online Services. This regularly requires that the third parties of these contents receive the IP address of the user as they are not able to send the requested contents to the right browser without the IP address. The IP address is therefore necessary for the display of these contents and the use of the embedded services.

    Specifically, we have utilised the following services and contents of third parties in our Online Services:

  5. Is your data transmitted to third parties?

    1. To the extent strictly necessary, we provide your personal data to the following service providers (acting as “processors”) outside IXOLIT Group that support us in the performance of our Online Services:
      • IT-service providers and/or providers of data hosting solutions or similar services;
      • Other service providers, providers of tools and software solutions that support us with the performance of our services as well and operate on our behalf (including providers of marketing tools, marketing agencies, communication service providers).

      All our processors have been contractually bound to process your data only on our behalf and on the basis of our instructions so that we can provide you with our Online Services.

    2. Processing of your data in a third country outside the European Union (EU), respectively the European Economic Area (EEA) or when using services of third parties is only carried out where it is necessary for the performance of our (pre)contractual obligations, on the basis of your consent, due to a legal obligation or on the basis of legitimate interests. We have implemented suitable and appropriate guarantees to develop a way of transmission of your data to the respective third country compliant with data protection (e.g. through conclusion of 'Standard Contractual Clauses', 'SCCs'). Upon your request we can transmit a copy of those suitable guarantees to you, provided that we process or let your data be processed in third countries.
  6. Retention period

    1. We store your personal data only as long as necessary for the purposes for which they are processed. Beyond that, we are potentially obligated to further store your data in accordance with legal retention obligations.
    2. Specifically, we store your data in connection with the establishment of contact with us in accordance with legal retention periods (inter alia § 212 BAO, §132 UGB) for a time period of usually seven years.
    3. Server log files are stored for a maximum time period of 15 days and are erased subsequently.
    4. We store your usage data for the time period stated point 3.5 above, but at the latest until you withdraw your consent (eg. by disabling cookies).
    5. If you are no client of us and have registered for our newsletter only, we store your data until you withdraw your consent.
    6. We store data in connection with your registration and your user account until the end of your client relationship with us, or respectively beyond that until the expiry of the respective legal retention periods (usually for a time period of seven years, see above).
    7. Apart from that, we store your personal data for a time period beyond the above-mentioned, as long as legal claims out of the relationship between you and us are enforceable, only if such litigation becomes apparent, or respectively until the definitive settlement of an incident or court proceedings. Such processing is based on legitimate interests for the establishment, exercise or defence of legal claims.
  7. Your Rights under applicable Data Protection Law

    1. You have the right to access your personal data that is being processed by us (Art 15 GDPR). Apart from that, you have the right to rectification of inaccurate or incomplete data (Art 16 GDPR). You have a right to erasure if (i) your personal data is no longer necessary for the purposes for which we have collected it, (ii) you withdraw your consent and there is no other legal basis for processing by us (cf. Section 3), (iii) you object to the processing and there are no overriding legitimate grounds for the processing (except in the case of processing for direct marketing purposes), (iv) your personal data has been unlawfully processed or (v) for compliance with our legal obligations (Art 17 GDPR)be. Additionally, you have the right to restriction of processing (Art 18 GDPR) as well as the right to data portability concerning the data you have provided us with (Art 20 GDPR).
    2. We may process your data on the basis of legitimate interests (cf Sections 2.2) in which case you have the right to object. In the case you object to the processing, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing of this data which override your interests, rights and freedoms (weighing of interests) or for the establishment, exercise or defence of legal claims.

      In particular, you may object at any time to the processing of your data for the purposes of direct marketing of IXOLIT Group. In the case of such an objection, we will no longer process your personal data for these purposes (no weighing of interests).

    3. Additionally, you have the right to withdraw your consent at any time with effect for the future.
    4. Finally, you have the right to lodge a complaint with the responsible supervisory authority (Art 77 GDPR).
    5. If you have questions relating to this or to make use of your data subject rights, please feel free to contact us at:

      IXOLIT GmbH
      Mariahilfer Straße 77-79, 1060 Vienna
      [email protected]

  8. Data security

    We comply with appropriate technical and organisational security measures pursuant to Art 32 GDPR to, considering the risks, guarantee an appropriate data protection level, especially to protect your personal data against accidental or unlawful destruction, alteration or against loss and against unauthorised disclosure or unauthorised access.

  9. Amendments of our Privacy Policy

    Within the course of the development of our services and internet, we will amend our Privacy Policy regularly. We will publish amendments on our Website. Therefore, you should visit this Privacy Policy regularly to be informed about the current status.

Version: 01.10.2020