Privacy Policy
1. Controller
The controller for the processing of personal data within the meaning of the General Data Protection Regulation (GDPR) is:
NEST Agentur für Leerstandsmanagement GmbH
Mittersteig 2 / Tür 4-6
A-1040 Vienna
Email: office@nest.agency
2. Purposes and legal bases of processing
We process personal data only where permitted by law or where you have given your consent. The legal bases are in particular:
- Art. 6(1)(a) GDPR (consent) – e.g. when you send us an enquiry via the contact form.
- Art. 6(1)(b) GDPR (performance of a contract and pre-contractual measures) – e.g. when processing your enquiry or an order.
- Art. 6(1)(c) GDPR (legal obligation) – e.g. tax and commercial retention obligations.
- Art. 6(1)(f) GDPR (legitimate interests) – e.g. the secure operation and improvement of our website.
3. Contact form and enquiries
If you contact us via the contact form or by email, we process the data you provide (name, email address, optional phone number, role, message, details of the property or area and — if provided — how you found us) in order to handle your enquiry. The data is stored in our database and transmitted to us by email. It is passed on to third parties only if this is necessary to handle the enquiry or you have consented.
4. Server log files and hosting
When you visit our website, information transmitted by your browser is automatically collected (e.g. IP address, date and time of access, page accessed, browser type). This data serves the secure and stable operation of the website and is processed on the basis of our legitimate interest (Art. 6(1)(f) GDPR).
5. Recipients and processors
We use carefully selected service providers, in particular for hosting, email delivery and maintenance. They process data only on our instructions and are contractually obliged to confidentiality and data protection (Art. 28 GDPR). Transfers to third countries take place only where appropriate safeguards exist.
6. Storage period
We store personal data only for as long as is necessary for the purposes stated or as required by statutory retention periods. After that, the data is deleted or anonymised. Enquiries via the contact form are deleted once they are no longer needed and no retention obligations prevent deletion.
7. Cookies
This website uses only technically necessary cookies required for the operation and security of the website (e.g. session cookies, CSRF protection). These cookies are processed on the basis of Art. 6(1)(f) GDPR and § 165(3) TKG 2021. No marketing or tracking cookies are set without your consent. You can restrict or delete cookies in your browser settings; this may affect the functionality of the website.
8. Your rights
You have the right to information (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection to processing (Art. 21 GDPR). You may withdraw any consent given at any time. Please contact office@nest.agency.
9. Right to complain
If you believe that the processing of your data violates data protection law, you may lodge a complaint with the Austrian Data Protection Authority: www.dsb.gv.at.
10. Data security
We take appropriate technical and organisational measures to protect your data against loss, misuse and unauthorised access. Data transmitted via the contact form is encrypted (TLS/HTTPS).