Privacy Policy

Last updated: 21/05/2026

1. Overview

The protection of your personal data is important to us. This privacy policy explains how we collect, use and protect your data when you visit our website www.step7.at or use our services.

2. Data Controller

Step7 Solution GmbH Traunfeldstrasse 58a, 4050 Traun, Austria E-mail: info@step7.at Phone: +43 664 4111854

We are the data controller responsible for processing your personal data in accordance with applicable data protection laws.

3. What Data We Collect

We may collect and process the following personal data:

Technical data (e.g. IP address, browser type, access times) Contact data (e.g. name, e-mail address, phone number) Communication data (e.g. messages via forms or e-mails) Usage data (e.g. pages visited, interactions) Subscription data (e.g. newsletter preferences)

4. Why We Process Your Data

We process your data for the following purposes:

Operation and optimization of our website Answering inquiries and customer service Management of subscriptions and sending newsletters Fulfillment of contractual obligations Compliance with legal requirements Protection of legitimate business interests

5. Legal Basis

The processing of your data is based on:

Consent (Art. 6 para. 1 lit. a GDPR) Contract fulfillment (Art. 6 para. 1 lit. b GDPR) Legal obligation (Art. 6 para. 1 lit. c GDPR) Legitimate interest (Art. 6 para. 1 lit. f GDPR)

6. Cookies and Analysis

We use cookies to improve your user experience and analyze website usage. You can manage your cookie settings at any time via your browser.

Cookie types used:

Essential cookies - required for basic functions Analysis cookies - for evaluating user behavior Marketing cookies - for personalized content and advertising

7. Third-Party Services

We may share data with trusted partners who assist us with the following tasks:

Hosting and IT infrastructure E-mail and newsletter delivery Analytics platforms (e.g. Google Analytics) CRM and marketing tools

All partners are contractually obligated to process your data securely and in compliance with the law.

8. International Data Transfers

If your data is transferred outside the EU (e.g. to the USA, Brazil, Switzerland), we ensure that appropriate protective measures are taken, including:

EU standard contractual clauses Adequacy decisions (e.g. EU-U.S. Data Privacy Framework for certified providers) Your explicit consent

Note: Transfers to EEA states (e.g. Norway, Liechtenstein, Iceland) are not considered third country transfers within the meaning of the GDPR.

9. Your Rights

You have the following rights under GDPR:

Information about your stored data Correction of incorrect data Deletion of your data ("right to be forgotten") Restriction or objection to processing Data portability Revocation of your consent at any time

To exercise your rights, please contact us at: info@step7.at

10. Storage Duration

We only store your data for as long as necessary for the stated purposes or as required by law.

11. Security Measures

We implement technical and organizational measures to protect your data against unauthorized access, loss or misuse.

12. Data Protection for Children

Our services are not directed at children under 14 years of age. We do not knowingly collect data from minors.

13. Changes to This Declaration

We reserve the right to update this privacy policy as needed. The current version is always available on our website.