Privacy policy
As part of our business, we run a website to communicate with our clients and the public.
- Processing activity
- Operating a website
Last updated: November 2026
This privacy policy is a translation of the German version. Where the two differ, the German version applies.
Contact details
You can reach us at:
illumiqon GmbHLeopoldstraße 13/6, 3400 Klosterneuburg near Vienna, Austriaoffice@illumiqon.com+43 660 227 0 177Supervisory authority for compliance with data protection law in Austria:
Österreichische Datenschutzbehörde (Austrian Data Protection Authority)Barichgasse 40–42, 1030 Vienna, Austria+43 1 52 152-0dsb@dsb.gv.atwww.dsb.atFor what purposes and on what legal basis is your personal data processed?
Enquiries
When you contact us by email or phone, we process the details you give us in order to handle your enquiry. We do so to perform a contract or to take steps at your request before entering into one (Art. 6(1)(b) GDPR), and on the basis of our legitimate interests (Art. 6(1)(f) GDPR).
Technical access data when you visit the website
To keep our website available and secure, we process technical access data (IP address, browser data, data about your device, referring source, event), which is stored in log files. This data arises automatically every time our website is visited and is technically essential for delivering it. We process it on the basis of our legitimate interests (Art. 6(1)(f) GDPR in conjunction with § 165(3) TKG 2021), to keep the website running securely, detect errors and prevent unauthorised access.
Reach measurement
To understand how our website is used, we measure its reach with Plausible. We record pageviews, scroll depth, time on page, the referring source, country, clicks on links to other websites, clicks on our contact links (email, phone, booking), completed bookings and visits to pages that don't exist (404). Plausible sets no cookies and stores nothing on your device. Your IP address is used only to determine your country and to count visits, and is not stored. We see aggregate statistics only. We process this data on the basis of our legitimate interests (Art. 6(1)(f) GDPR) in learning how our website is used and improving it.
Booking a first conversation with cal.com
On our contact page you can book a first conversation with us. Booking runs on cal.com, a service of Cal.com, Inc. in the USA, which processes your data on our behalf as our processor. Nothing loads from cal.com until you click to book.
When you book, we process your name, your email address and your answers to the booking questions: your company, “What's stuck?” and the language of the conversation. If you choose a phone call, we also process your phone number. Cal.com also processes your IP address to deliver the booking page and protect it from abuse.
We process this data to arrange and hold the conversation you asked for, as steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR). We keep it for 6 months after the conversation, for follow-up questions.
Only once you click does cal.com store anything on your device: Cloudflare's cookie __cf_bm, which protects the booking page from bots and expires after 30 minutes without activity; a reserverUid entry in your browser's local storage (localStorage), a random ID that cal.com writes as soon as the booking page opens; and, once you pick a time slot, a uid cookie with the same ID, which is deleted when you close your browser. With this ID, cal.com holds the time slot you pick for a few minutes while you finish booking. All three are strictly necessary to provide the booking you asked for (§ 165(3) TKG 2021), so we don't ask for your consent.
We have turned on no analytics or tracking apps inside cal.com.
Who receives your personal data?
Your data is not passed on to third parties.
- IT service provider operating the website:
- Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA
- IT service provider for email:
- Google Cloud EMEA Limited, 70 Sir John Rogerson's Quay, Dublin 2, Ireland
- IT service provider for reach measurement (processor):
- Plausible Insights OÜ, Västriku tn 2, 50403 Tartu, Estonia
- IT service provider for booking appointments (processor):
- Cal.com, Inc., 2261 Market Street #4382, San Francisco, CA 94114, USA
How long is your personal data stored?
Below we tell you how long your personal data is stored. Please note that these are standard periods. In individual cases, longer retention may be necessary for specific reasons (for example, keeping tax-relevant data beyond seven years while tax proceedings are pending).
- Technical access data (website):
- 7 days
- Enquiries:
- 6 months, for follow-up questions
- Reach measurement (Plausible):
- Aggregate statistics, for as long as we use Plausible
- Bookings (cal.com):
- 6 months after the conversation, for follow-up questions
Is your personal data transferred to third countries?
Your data is processed, at least in part, outside the EU and the EEA, namely in the United States, for example by Cal.com, Inc. when you book a first conversation.
The following safeguards apply to processing personal data in third countries: an adequate level of protection follows from an adequacy decision of the European Commission under Art. 45 GDPR (EU-US Data Privacy Framework). Cal.com, Inc. is certified under it. Should that no longer apply, the European Commission's standard contractual clauses (Art. 46(2)(c) GDPR) in our data processing agreement with Cal.com, Inc. (cal.com/dpa) apply instead.
Is there automated decision-making (including profiling)?
We use no automated decision-making (including profiling) that has legal effects on you or similarly significantly affects you.
Your rights and how to complain
In principle, you have the rights of access, rectification, erasure, restriction of processing, data portability and objection. To exercise them, contact us. If you believe that the processing of your personal data breaches data protection law or that your data protection rights have been infringed in any other way, you can lodge a complaint with the competent supervisory authority. In Austria, this is the Datenschutzbehörde.
Because we process your personal data on the basis of our legitimate interests, you generally have the right to object to this processing on grounds relating to your particular situation.