Privacy

This notice is the information KS Management FlexCo must give you under the EU General Data Protection Regulation (GDPR) and, for storage on your device, under § 165 of the Austrian Telecommunications Act (TKG 2021). It covers the pages of this website. The site is in English, and so is this notice. The legal notice is in German.

Who is responsible

KS Management FlexCo Grund 160 A-2041 Grund Austria UID-Nr. ATU82186224 Firmenbuch: FN 654098i, Landesgericht Korneuburg

We are the controller for the processing described here. No data protection officer is appointed. Write to info{at}ks-m.at.

In short

You can use the whole site without analytics. Google Analytics runs only after you press Accept, and you can withdraw that choice as easily as you gave it. A page with a form also loads a Cloudflare bot check. That check is not analytics, and Necessary only does not turn it off. If you send a message, we use it to answer you. We do not sell data, and we do not make automated decisions about you.

Cookie settings

Delivering the page

When your browser requests a page, the host receives your IP address, the address of the page, the time, and the browser’s user agent. We need that to return the page and to protect the service from abuse.

The legal basis is our legitimate interest in running the site you asked for (Art. 6 (1) (f) GDPR). You can object. How to object is set out under Your rights.

The site is hosted by Microsoft on Azure Static Web Apps. We do not keep our own visitor log. Microsoft may process these connection data in the EU and in the United States. Where the processing is in the United States, it relies on Microsoft’s certification under the EU-US Data Privacy Framework (Commission Implementing Decision of 10 July 2023). The list of certified companies is at dataprivacyframework.gov.

Remembering your choice

Until you choose, the site does not load Google and does not set an analytics cookie.

The bar offers Accept and Necessary only. Both do the same amount of work. Necessary only leaves every page, the menu, and the forms available.

Your choice is stored in this browser under the name ksm-consent-v1. It is local storage on your device, not a cookie, and it is not sent to us. It is there so a refusal stays a refusal and so the bar does not ask on every page. That storage is strictly necessary for the choice you made (§ 165 (3) TKG 2021). It stays until you change it or clear this site’s data in your browser.

Google Analytics

If you press Accept, we measure which pages are used, so we can see what the site is doing. The legal basis is your consent (Art. 6 (1) (a) GDPR and § 165 (3) TKG 2021). Refusing has no effect on your use of the site.

The site then loads Google tag G-90SV89XH5G from https://www.googletagmanager.com/gtag/js. A later page view is sent when you move from page to page. A refusal does not send a cookieless ping.

A page view contains the page address, the page title, the referrer, the browser language, the screen size, and a client id. It does not contain your name or your email address. Advertising features and ad personalisation are off.

Google then sets these cookies on your device:

• _ga distinguishes browsers. It lasts up to two years.
• _ga_90SV89XH5G holds the measurement state for this site. It lasts up to two years.

Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, processes this measurement for us as a processor, under Google’s Ads Data Processing Terms. Google states that Analytics 4 does not log or store the IP address. For traffic in the EU, Google states that the IP address is used only to derive a coarse location and is then discarded. Google’s notice is at policies.google.com/privacy. The processor terms are at business.safety.google/adsprocessorterms.

Google may process the measurement in the United States through Google LLC. Google LLC is certified under the EU-US Data Privacy Framework, so that transfer relies on the same Commission decision of 10 July 2023.

Google keeps the user and event data for at most 14 months. That is the longest period a standard Analytics property allows. The cookies above can remain for up to two years. We do not keep a copy of the reports on this website.

You withdraw consent with Cookie settings on this page, or from the bar. Withdrawal is one click, the same as Accept. It stops new collection and clears the Analytics cookies this site can delete. It does not undo processing that was lawful before you withdrew (Art. 7 (3) GDPR), and it does not erase records Google already holds. You can also use Google’s opt-out add-on.

Messages you send

A contact form asks for your name, your email address, and a message. A job application also carries the job title. You may attach one CV, a PDF or Word file of up to 2 MB. Please do not include information about health, beliefs, or any other special category of data. We do not ask for it.

We use the message to answer you, or to consider an application. The legal basis is the step you asked us to take before a contract (Art. 6 (1) (b) GDPR). The checkbox confirms that you have read this notice. It is not a separate consent.

The website does not write the message or the CV into a database or a file store. Both are sent only as email to our mailbox at info{at}ks-m.at. The CV is an attachment on that email. Our email provider processes them so that they reach us. We keep them for as long as we need to handle the conversation, and after that only if a legal claim or a statutory retention duty still requires it. An application, including the CV, is kept for the selection and then deleted, unless a claim requires us to hold it.

If mail delivery is not configured, the site refuses the message. A refused message is not stored.

Pages that contain a form load a bot check from Cloudflare, called Turnstile, from https://challenges.cloudflare.com. It runs so an automated program cannot send the form. The legal basis for our use of the check is our legitimate interest in that protection (Art. 6 (1) (f) GDPR). The check sends browser signals, including the IP address, to Cloudflare. In the configuration on this site the widget issues a one-time pass and does not set a cookie. Cloudflare processes those signals for us to tell a person from an automated submission, and also uses them, as controller, to improve the check. We do not receive the signals. When you send the message, we receive only a pass or fail. Cloudflare may process the check in the United States. Cloudflare, Inc. is certified under the EU-US Data Privacy Framework, so that transfer relies on the Commission decision of 10 July 2023. The Turnstile notice is at cloudflare.com/turnstile-privacy-policy.

What we do not do

We do not sell personal data. We do not use advertising cookies, remarketing, or social plugins. A link, including the link to Facebook, sends nothing unless you follow it. Fonts are files on this site. We do not record voice or video. We do not use what you type to train a model. We do not make a decision about you by automated means, and we do not profile you for that purpose (Art. 22 GDPR).

Your rights

You can ask us for:

• access to the personal data we hold about you (Art. 15)
• correction of inaccurate data (Art. 16)
• deletion (Art. 17)
• a limit on how we use the data while a request is open (Art. 18)
• a portable copy of data you gave us, where the basis is your consent or a contract (Art. 20)

Objection. Where the basis is legitimate interest, you can object at any time, on grounds relating to your situation (Art. 21 GDPR). That covers the connection data used to deliver the page. Write to info{at}ks-m.at. We stop that processing unless we show compelling grounds that override your interests, or we need the data for a legal claim.

Withdrawal. You can withdraw the Analytics consent at any time, without giving a reason, using Cookie settings on this page. The site does not get worse if you do.

Complaint. You can complain to the Austrian data protection authority:

Österreichische Datenschutzbehörde Barichgasse 40-42 1030 Wien +43 1 52 152-0 dsb@dsb.gv.at dsb.gv.at

Send a request to info{at}ks-m.at. We may ask you to confirm that the request is yours. The legal notice is at Impressum.

Do you have to provide data?

The browser sends connection data, or the page cannot be delivered. Analytics is optional. On a form, the name, the email address, and the message are required so that we can answer. If you leave them out, we cannot reply. The CV is optional.

Changes

We publish changes on this page.

Last updated: 3 November 2026