{"id":17204,"date":"2025-08-25T12:52:23","date_gmt":"2025-08-25T10:52:23","guid":{"rendered":"https:\/\/sowiholding.at\/privacy-policy\/"},"modified":"2026-08-12T15:23:20","modified_gmt":"2026-08-12T13:23:20","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/sowiholding.at\/en\/privacy-policy\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Privacy Policy<\/h1>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t
<\/span>\n<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

As of: August 12, 2026<\/p>

1. Controller<\/h2>

The party responsible for data processing on this website is:<\/p>


SoWi-Holding GmbH
<\/strong><\/p>

Saline 17, Medienhaus<\/p>

6060 Hall in Tirol, Austria<\/p>

Commercial Register Number: FN 573849x<\/p>

Email: info@sowiholding.at<\/p>

Phone: +43 664 1945989 \/ +43 660 355 255 4<\/p>

Data protection inquiries: datenschutz@sowiholding.at<\/p>

1.1 Scope<\/h3>

This privacy policy applies to the website sowiholding.at, including the exhibitor shop, and to the AI chatbot provided at fragen.sowiholding.at (Section 5.6). A separate privacy policy, linked there, applies to the fair planner at messeplaner.sowiholding.at. For the individual fair websites best-innsbruck.at, best-klagenfurt.at, career-competence.at, and visio-tirol.at, the privacy policies published on those respective sites apply. For the management portal dashboard.sowiholding.at, the separate privacy policy available there applies. This privacy policy additionally applies to our corporate presence on Facebook and Instagram, insofar as we process personal data there as a controller or joint controller. <\/p>

1.2 Our Role: Controller or Processor<\/h3>

We organize the career & competence and visio tirol fairs ourselves. We conduct BeSt Innsbruck and BeSt Klagenfurt as a commissioned fair organization company based on a framework agreement with the Republic of Austria (Federal Ministry of Education). Registration, contract processing, invoicing, and exhibitor support, as well as visitor offers, run through our systems. SoWi-Holding GmbH is the data protection controller for these data processing activities. We generally transmit contractually agreed reports to the client in the most summarized form possible. <\/p>

We organize BeSt Wien on behalf of the Federal Ministry of Education. Insofar as we process personal data according to the instructions of the Federal Ministry, we act as a processor; the controller is the Federal Ministry of Education, Minoritenplatz 5, 1010 Vienna, Email: datenschutz@bmb.gv.at. Data subject requests regarding BeSt Wien data can be directed directly to the Federal Ministry. We forward requests addressed to us to the controller without delay. <\/p>

2. Your Rights<\/h2>

Insofar as we are the controller, you are entitled to the following rights in accordance with legal requirements: access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR), objection (Art. 21 GDPR), and the right to withdraw consent at any time with effect for the future (Art. 7 Para. 3 GDPR). The lawfulness of processing carried out until the withdrawal remains unaffected. Please contact datenschutz@sowiholding.at. <\/p>

You also have the right to lodge a complaint with a data protection supervisory authority. In Austria, this is the Austrian Data Protection Authority, Barichgasse 40\u201342, 1030 Vienna, Email: dsb@dsb.gv.at, www.dsb.gv.at. <\/p>


Right to object (Art. 21 GDPR):
<\/strong>
Insofar as we process data on the basis of legitimate interests, you may object at any time for reasons arising from your particular situation. You may object to processing for the purposes of direct marketing at any time without giving reasons. <\/p>

3. Hosting and Security<\/h2>

3.1 Hetzner<\/h3>

This website is hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. The website is operated in a data center in Frankfurt am Main. When visiting the website, Hetzner processes, in particular, IP addresses and connection data in server log files. The log files are stored for a maximum of 90 days. The legal basis is our legitimate interest in the secure and reliable provision of the website (Art. 6 Para. 1 lit. f GDPR). A data processing agreement according to Art. 28 GDPR exists with Hetzner. <\/p>

Fonts are loaded locally from our server; no connection to external font services such as Google Fonts is established when the page is accessed.<\/p>

The website database is backed up regularly, and website files are backed up at set intervals. Backup copies are stored encrypted in our Dropbox storage and are reduced or deleted according to internal deletion and thinning routines. Access is restricted to authorized persons. <\/p>

3.2 Wordfence Web Application Firewall<\/h3>

To protect the website from attacks, we use Wordfence, a service provided by Defiant Inc., USA. The Web Application Firewall checks incoming access and can block suspicious requests. In doing so, it processes, in particular, the IP address, user agent, accessed URL, request and security data, and recognized attack patterns, and, if necessary, compares them with a cloud database of known threats. The legal basis is our legitimate interest in defending against attacks and in the secure operation of the website (Art. 6 Para. 1 lit. f GDPR). Security logs are deleted after the period configured by us, at the latest after 90 days, unless longer retention is required to clarify a specific security incident.<\/p>

Insofar as data is transferred to the USA, the transfer is based on the Standard Contractual Clauses of the European Commission agreed with Defiant and supplementary protective measures. Details on Wordfence cookies can be found in Section 4.4. <\/p>

4. Cookies and Consent Management<\/h2>

4.1 Principles and Categories<\/h3>

This website uses cookies and similar technologies. For the storage of information on your terminal device or access to information already stored, Section 165 Para. 3 TKG 2021 applies. Consent is not required if the storage or access serves exclusively to transmit a message or is strictly necessary to provide a service expressly requested by you. We base the subsequent processing of personal data\u2014depending on the purpose\u2014in particular on Art. 6 Para. 1 lit. b, c, or f GDPR. <\/p>

All cookies and similar technologies that are not strictly necessary are only used after your active, informed consent (Section 165 Para. 3 TKG 2021; Art. 6 Para. 1 lit. a GDPR). You can withdraw or change your consent at any time via the “Cookie Settings” link in the footer. Withdrawal is as easy as giving consent. <\/p>

The current configuration is divided into the following categories:<\/p>

  • Essential: Borlabs Cookie, WooCommerce cookies necessary for the expressly requested shop service, and Wordfence security cookies.<\/li>
  • Statistics: Google Analytics 4.<\/li>
  • Marketing: WooCommerce Order Attribution.<\/li>
  • External Media: Google reCAPTCHA, YouTube in regular cookie mode, Google Maps, and Vimeo.<\/li><\/ul>

    The current detailed view with service, provider, purpose, cookie or storage name, host, and storage duration can be accessed via “Cookie Settings” and forms the first level of information on the technologies used.<\/p>

    4.3 Shop Cookies (WooCommerce)<\/h3>

    Our exhibitor shop uses cookies that are necessary for the shopping cart, ordering process, and the shop functions expressly requested by you. These include, in particular, “wp_woocommerce_session_*” (up to two days), “woocommerce_cart_hash” and “woocommerce_items_in_cart” (session each), and\u2014after actively closing a notice\u2014”store_notice[notice id]” (session). Storage or access takes place according to Section 165 Para. 3 TKG 2021 without consent, insofar as the respective function is strictly necessary. We base the associated processing for orders on Art. 6 Para. 1 lit. b GDPR, and otherwise on Art. 6 Para. 1 lit. f GDPR. <\/p>

    The convenience function “Recently Viewed Products” is deactivated. The cookie “woocommerce_recently_viewed” is not used on sowiholding.at. <\/p>

    4.4 Wordfence Security Cookies<\/h3>

    Wordfence can set technically necessary cookies in login, administration, and specific security contexts, including “wf_loginalerted_*”, “wfls-remembered-*”, “wf-scan-issue-expanded-*”, “wfCBLBypass”, and “wfwaf-authcookie-*”. These cookies serve, in particular, for secure login, recognition of authorized sessions, display of security messages, and defense against automated or abusive access. Depending on the cookie, the storage duration ranges from the session to 30 days; individual administrative status cookies can be stored persistently until they are removed or reset. Storage is limited to the respective security function (Section 165 Para. 3 TKG 2021); the legal basis for processing is Art. 6 Para. 1 lit. f GDPR. <\/p>

    5. Data collection on this website<\/h2>

    5.1 Server Log Files<\/h3>

    The hosting provider automatically collects information in server log files, in particular browser type and version, operating system, referrer URL, hostname, time of request, and IP address. The data is not merged with other data sources and is stored for a maximum of 90 days. The legal basis is Art. 6 Para. 1 lit. f GDPR; our legitimate interest lies in the secure, stable, and traceable operation of the website. <\/p>

    5.2 Contact Form and Inquiries by Email or Phone<\/h3>

    If you contact us via form, email, or phone, we process your details to process and answer the inquiry. The legal basis is Art. 6 Para. 1 lit. b GDPR, insofar as it concerns a contract or pre-contractual measures, otherwise Art. 6 Para. 1 lit. f GDPR based on our legitimate interest in orderly communication and inquiry processing. <\/p>

    For our email communication, we use Microsoft 365 from Microsoft Ireland Operations Ltd., Ireland. Microsoft 365 generally falls under the EU Data Boundary for corresponding EU\/EFTA tenants. Technically or operationally necessary, limited processing outside the EU or EEA may still take place, in particular for security, support, global network functions, or certain additional functions. A data processing agreement exists with Microsoft. Third-country transfers are\u2014where applicable\u2014based on an adequacy decision, in particular the EU-US Data Privacy Framework, or on Standard Contractual Clauses.<\/p>

    We generally delete or anonymize inquiries without follow-up business twelve months after completion of processing. If the inquiry leads to a contract, the periods in Section 10 apply. Statutory retention obligations remain unaffected. <\/p>

    5.3 Form Protection with Google reCAPTCHA<\/h3>

    To protect selected forms from automated access, spam, and abuse, we use Google reCAPTCHA. According to the Google Cloud contract terms, the contractual partner for customers based in Austria is generally Google Cloud EMEA Limited, Ireland; other Google companies, in particular Google LLC, USA, may be involved as sub-processors. Google has been processing reCAPTCHA customer data as a processor since April 2, 2026, according to the Google Cloud Terms and the Cloud Data Processing Addendum. <\/p>

    reCAPTCHA analyzes technical and interaction-related signals to distinguish between human input and automated access. This may include, in particular, IP address, browser and device information, referrer, time and duration of access, mouse, keyboard, and touch interactions, and security identifiers. According to the current service configuration, the cookies “_GRECAPTCHA” and “CONSENT” in particular can be set or read; the current storage duration is shown in the cookie settings. <\/p>

    reCAPTCHA is not an essential service on this website. It is only loaded after you have actively consented to the specific service in the “External Media” category. Before your consent, no connection to Google for reCAPTCHA is established and no reCAPTCHA cookie is set. The legal basis is your consent according to Art. 6 Para. 1 lit. a GDPR in conjunction with Section 165 Para. 3 TKG 2021. You can withdraw your consent at any time via the cookie settings. Without consent, the affected form may not be able to be sent; you can send us the same inquiry at any time without reCAPTCHA by email or phone. <\/p>

    Insofar as data is transferred to the USA, this is done on the basis of the EU-US Data Privacy Framework, provided the specific recipient is certified for this, or on the basis of the Standard Contractual Clauses of the European Commission and supplementary protective measures.<\/p>

    5.4 Registration, Exhibitor Area, and Webshop<\/h3>

    Exhibitors can register on this website and order fair stands and additional services for our fairs. We process, in particular, name, company, function, contact details, access data, billing data, and order content. If the data subject is a contracting party themselves, processing takes place for contract fulfillment and for pre-contractual measures (Art. 6 Para. 1 lit. b GDPR). For contact persons of a company, we base the processing on our legitimate interest in the initiation, implementation, and documentation of the business relationship (Art. 6 Para. 1 lit. f GDPR). We also process legally required billing and accounting data according to Art. 6 Para. 1 lit. c GDPR. <\/p>

    Management takes place in the CRM system falcana (Section 7.2) and in our other systems hosted in the EU. Payment is made exclusively by invoice; we do not use external payment service providers. <\/p>

    For orders for BeSt Wien, the role distribution described in Section 1.2 applies. We process the data in this respect as a processor for the Federal Ministry of Education. Invoicing for stand space at BeSt Wien is carried out by the client; payments for this are not made to SoWi-Holding GmbH. Data from BeSt Wien exhibitors is not used for SoWi-Holding GmbH’s own advertising purposes. <\/p>


    Exhibitor Profiles and Publication:
    <\/strong>
    Profile data managed by exhibitors\u2014in particular company profile, logo, stand and offer information, and voluntarily entered contact details\u2014are published in the exhibitor directory of the fair website and in the fair planner for the implementation and promotion of the respective fair. Publication is part of the booked fair package. For natural contracting parties, Art. 6 Para. 1 lit. b GDPR applies; for contact details of contact persons of legal entities, Art. 6 Para. 1 lit. f GDPR applies. Exhibitors determine which contact details are published and may only enter data that they are entitled to publish. For BeSt Wien, publication takes place on behalf of the Federal Ministry of Education. <\/p>

    Published profiles remain online for the duration required for promotion, implementation, and post-event reporting and are removed or replaced by the new profile at the latest when the directory is updated for the follow-up event. Details are regulated by the privacy policies of the respective fair website and the fair planner. <\/p>

    Regarding the storage duration of exhibitor accounts and order, contract, and billing data, see Section 10.<\/p>

    5.5 Fair Planner (messeplaner.sowiholding.at)<\/h3>

    A separate privacy policy, linked on messeplaner.sowiholding.at, applies to the fair planner. It provides information about the accounts, registrations, tickets, program planning, application and CV functions there, as well as the cookies and analysis or marketing services used in the fair planner. The footer of the fair planner refers to this separate policy. <\/p>

    5.6 AI-Powered Chatbot (fragen.sowiholding.at)<\/h3>

    Our chatbot is accessible at fragen.sowiholding.at and can be integrated into sowiholding.at. It answers inquiries automatically based on technology from OpenAI Ireland Ltd., Ireland, and affiliated OpenAI companies. Your inputs, the generated answers, and necessary technical metadata are transmitted to OpenAI to provide the answer. Please do not enter any special categories of personal data according to Art. 9 GDPR or any confidential information that is not necessary for your question.<\/p>

    The chat is only loaded when you actively start it after a corresponding notice. The legal basis is your consent according to Art. 6 Para. 1 lit. a GDPR; it is voluntary and can be withdrawn at any time with effect for the future. The chatbot does not make any decisions with legal or similarly significant effect. <\/p>

    A data processing agreement exists with OpenAI. Content from API usage is not used by OpenAI by default to train the models, unless we expressly release it for this purpose. Abuse and security logs can generally be stored for up to 30 days according to the settings applicable to the API function used; individual functions may have technically different storage mechanisms. We do not store chat histories permanently in a separate user account. Insofar as data is processed outside the EEA, transfers are based on an adequacy decision or Standard Contractual Clauses and supplementary protective measures. <\/p>

    5.7 Webinar Registrations<\/h3>

    When registering for webinars, such as the “Talent(e) neu Denken” series, we process the contact details and event data provided to conduct the webinar (Art. 6 Para. 1 lit. b GDPR). If a webinar is conducted jointly with TM AG, St. Gallen, Switzerland, we transmit the registration data required for this to this partner. An adequacy decision by the European Commission exists for Switzerland. We generally delete registration data twelve months after the event; billing-relevant data is kept for seven years (Section 132 BAO). <\/p>

    5.8 Audio and Video Conferences (Microsoft Teams)<\/h3>

    For appointment coordination and communication with customers, exhibitors, and partners, we use Microsoft Teams from Microsoft Ireland Operations Ltd. Contact details, connection and metadata such as time, duration, number of participants, and device information, as well as the content transmitted by the participants, are processed. The legal basis is Art. 6 Para. 1 lit. b GDPR for contractual or pre-contractual communication, otherwise Art. 6 Para. 1 lit. f GDPR based on our legitimate interest in efficient communication. <\/p>

    A data processing agreement exists with Microsoft. For third-country transfers, the guarantees described in Section 5.2 apply. Recordings only take place after prior information and, where legally required, consent. They are deleted as soon as the documented purpose is fulfilled. Connection and metadata are deleted according to our Microsoft 365 deletion and retention settings and the provider’s contractual routines. <\/p>

    6. Newsletters and Automated Emails<\/h2>

    6.1 Fair Information to Registered Exhibitors<\/h3>

    Registered exhibitors receive all messages required for participation in the booked fair, such as deadlines, stand construction, assembly and disassembly, organization, and program. These organizational messages are part of contract fulfillment (Art. 6 Para. 1 lit. b GDPR) and not direct marketing. In particular, email address, salutation, name, function, and company are processed. Sending takes place partly via the newsletter function of our CRM system falcana using the SMTP service turboSMTP from Edisplay S.r.l., Italy, and partly from our own systems via Brevo (Section 6.4). We send information about BeSt Wien as a processor for the Federal Ministry of Education. <\/p>

    6.2 Information about Future Fairs (Opt-in)<\/h3>

    We only provide information about future fairs and exhibition opportunities if you have previously consented. Consents for advertising by email and for advertising calls are obtained channel-specifically via voluntary, non-pre-checked selection options (Art. 6 Para. 1 lit. a GDPR; Section 174 Para. 1 and 3 TKG 2021). Consent is not required for an order. We generally do not make use of the existing customer exception according to Section 174 Para. 4 TKG 2021 for this cross-fair advertising. <\/p>

    You can withdraw your consent at any time free of charge via the unsubscribe link in every email or at datenschutz@sowiholding.at. For telephone advertising, a corresponding notification is sufficient. Independently of this, you can object to processing for direct marketing according to Art. 21 Para. 2 GDPR at any time. After a withdrawal or objection, we store the necessary contact details in a blocklist to prevent further advertising; the legal basis is Art. 6 Para. 1 lit. f GDPR and compliance with the requirements of Section 174 TKG 2021. <\/p>

    6.3 Visitor Newsletter (Mailchimp)<\/h3>

    For newsletters to visitors of our own fairs BeSt Innsbruck, BeSt Klagenfurt, career & competence, and visio tirol, we use Mailchimp from The Rocket Science Group LLC d\/b\/a Mailchimp, USA, a company of the Intuit Group. Email address and\u2014if provided\u2014name, as well as registration, dispatch, and delivery information, are processed. A data processing agreement exists with Mailchimp. <\/p>

    The legal basis is your consent when registering (Art. 6 Para. 1 lit. a GDPR in conjunction with Section 174 Para. 3 TKG 2021). You can withdraw it at any time via the unsubscribe link. A personal evaluation of opens and clicks only takes place if separate consent has been given for this. Data is processed in the USA. The transfer is based on the EU-US Data Privacy Framework; the Standard Contractual Clauses provided by Mailchimp apply additionally or as a fallback mechanism. <\/p>

    Contact details of exhibitors and visitors of BeSt Wien are not processed via Mailchimp and are not used for SoWi-Holding GmbH’s own newsletters.<\/p>

    6.4 Brevo (Transactional Emails)<\/h3>

    For automated system emails, such as registration confirmations, password resets, and order confirmations, and partly for answering contact and form inquiries, we use Brevo from Sendinblue GmbH, Germany. In particular, email address, name, message content, and delivery metadata are processed. According to the provider, data storage takes place in EU data centers. A data processing agreement exists with Brevo. The legal basis is Art. 6 Para. 1 lit. b GDPR for contract communication and Art. 6 Para. 1 lit. f GDPR for other inquiries. Dispatch and delivery logs are reduced to necessary metadata after twelve months; we generally delete this metadata after three years. <\/p>

    7. Recipients and Commissioned Service Providers<\/h2>

    7.1 Overview and Third-Country Transfers<\/h3>

    We transmit personal data only insofar as this is necessary for the described purposes, a legal obligation exists, or effective consent has been given. Insofar as service providers process data exclusively according to our instructions, data processing agreements according to Art. 28 GDPR exist. For independently responsible parties or joint controllers, the respective role distribution is described in the relevant sections. <\/p>

    In particular, we use the following recipients and service providers:<\/p>

    • Hetzner Online GmbH, Germany \u2013 Hosting of website, webshop, and internal tools.<\/li>
    • Raum4 GmbH, Austria \u2013 Server administration and security updates; technical access possibility, no routine data access.<\/li>
    • falcana Software GmbH, Austria \u2013 CRM system; hosting in Frankfurt am Main.<\/li>
    • Microsoft Ireland Operations Ltd., Ireland \u2013 Microsoft 365, email, and Microsoft Teams.<\/li>
    • Sendinblue GmbH\/Brevo, Germany \u2013 transactional emails and inquiry communication.<\/li>
    • Edisplay S.r.l.\/turboSMTP, Italy \u2013 SMTP dispatch; sub-processor of falcana; processing according to the present configuration in the EU\/EEA area.<\/li>
    • Dropbox International Unlimited Company, Ireland \u2013 Data storage and encrypted website backups; possible third-country transfers according to the provider’s contractual guarantees.<\/li>
    • ALL-INKL.COM \u2013 Neue Medien M\u00fcnnich, Germany \u2013 Storage of backup copies already encrypted before transmission; the key remains with us.<\/li>
    • Defiant Inc., USA \u2013 Wordfence Web Application Firewall; Standard Contractual Clauses and supplementary protective measures.<\/li>
    • The Rocket Science Group LLC d\/b\/a Mailchimp, USA \u2013 Visitor newsletter; EU-US Data Privacy Framework and Standard Contractual Clauses.<\/li>
    • Google Cloud EMEA Limited, Google Ireland Limited, and affiliated Google companies \u2013 reCAPTCHA, Google Analytics, YouTube, and Google Maps; the specific role is described for the respective service.<\/li>
    • OpenAI Ireland Ltd. and affiliated OpenAI companies \u2013 Provision of the chatbot API.<\/li>
    • Vimeo.com, Inc., USA \u2013 embedded videos and, if applicable, webinar functions; Vimeo processes player data as an independent controller.<\/li>
    • Meta Platforms Ireland Limited, Ireland \u2013 Facebook and Instagram corporate presence; for Page Insights of the Facebook page, joint responsibility according to Art. 26 GDPR.<\/li>
    • Dr. Horst Johann Hundegger, Austria \u2013 Consulting and support services exclusively within the framework of BeSt Wien; access only to BeSt Wien-related exhibitor and project data as a disclosed sub-processor of the Federal Ministry of Education.<\/li>
    • KARBON Consulting GmbH, Austria \u2013 Sales support for incoming inquiries regarding our own fairs; no access to BeSt Wien data.<\/li>
    • LINE Agency GmbH, Austria \u2013 performance and social media marketing for our own fairs as well as BeSt Innsbruck and BeSt Klagenfurt; management of our advertising and analytics accounts exclusively in accordance with our instructions. Customer or exhibitor lists are not transmitted to advertising platforms; no access to BeSt Vienna data. <\/li><\/ul>

      For transfers to states outside the EEA, we rely on an adequacy decision according to Art. 45 GDPR, in particular for currently certified US recipients on the EU-US Data Privacy Framework, or on appropriate guarantees according to Art. 46 GDPR, in particular the Standard Contractual Clauses of the European Commission and\u2014insofar as necessary\u2014supplementary technical and organizational measures. You can request a copy of the relevant guarantees at datenschutz@sowiholding.at; business and security information worthy of protection may be redacted. <\/p>

      7.2 CRM System (falcana)<\/h3>

      To manage customer and exhibitor relationships, we use the CRM system from falcana Software GmbH, Austria. The data is stored in a data center in Frankfurt am Main. According to the provider, falcana is certified according to ISO\/IEC 27001 and bears the Cyber Trust Label Austria. According to the present configuration, no transmission of CRM customer data outside the EU takes place. <\/p>

      8. Web Analysis and Order Attribution<\/h2>

      8.1 Google Analytics 4<\/h3>

      This website uses Google Analytics 4 from Google Ireland Limited, Ireland. Google Analytics uses cookies and similar technologies to evaluate the use of the website, such as pages visited, approximate duration of stay, rough geographical region, and device and browser information. According to Google, Google Analytics 4 does not log or store individual IP addresses; the IP address is used briefly during transmission to derive rough location data and is subsequently discarded. <\/p>

      Google Analytics is only activated after your consent in the “Statistics” category (Art. 6 Para. 1 lit. a GDPR in conjunction with Section 165 Para. 3 TKG 2021). The user-related retention period is set to 14 months in our Analytics configuration. The cookies “_ga” and “_ga_*” can be stored for up to two years. You can withdraw your consent at any time via the cookie settings. A data processing agreement exists with Google for Analytics. Data can be transmitted to Google LLC and other recipients in the USA; the transfer is based on the EU-US Data Privacy Framework and additionally on Standard Contractual Clauses. <\/p>

      On sowiholding.at, we do not use advertising pixels of social networks or comparable social media tracking services.<\/p>

      8.2 WooCommerce Order Attribution<\/h3>

      With your consent in the “Marketing” category, we record the path by which you reached an order in our shop, such as via a search engine, a direct call, or a referral link. The purpose is the internal evaluation of our communication and advertising measures. The assignment takes place in our own systems hosted in the EU; no data is transmitted to additional third parties for this attribution. The legal basis is Art. 6 Para. 1 lit. a GDPR in conjunction with Section 165 Para. 3 TKG 2021. <\/p>

      Attribution data is generally stored until withdrawal, but at the longest together with the associated order. After a withdrawal, the attribution features are deleted or anonymized, unless there is another legal basis for their further storage. The specifically used storage identifiers and durations are to be shown in the cookie settings. <\/p>

      9. Plugins and Embedded Content<\/h2>

      9.2 Google Maps<\/h3>

      To display event locations, we use Google Maps. The map is only loaded after your consent in the “External Media” category. In doing so, in particular, IP address, device information, and\u2014depending on your settings and your usage\u2014location and interaction data are processed. The legal basis is Art. 6 Para. 1 lit. a GDPR in conjunction with Section 165 Para. 3 TKG 2021. Data can be transmitted to Google companies in the USA; the EU-US Data Privacy Framework and additionally Standard Contractual Clauses apply for this. <\/p>

      9.3 Vimeo<\/h3>

      We embed videos and, if applicable, webinar functions from Vimeo.com, Inc., USA. The Vimeo player is only loaded when you have consented in the “External Media” category. In doing so, Vimeo processes, in particular, IP address, device, connection, and usage data. Vimeo acts generally as an independent controller for the data processing of the embedded player.<\/p>

      Vimeo can set cookies for player control, bot defense, and reach measurement, including “player”, “flags”, “player_clearance”, “__cf_bm”, “cf_clearance”, “_cfuvid”, and “vuid”. For webinar or registration functions, additional identifiers can be stored. The current purposes and durations\u2014depending on the cookie from the session to two years\u2014are shown in the cookie settings. The legal basis for loading the service is Art. 6 Para. 1 lit. a GDPR in conjunction with Section 165 Para. 3 TKG 2021. <\/p>

      Data is transmitted to the USA. Vimeo participates in the EU-US Data Privacy Framework; where necessary, controller-to-controller Standard Contractual Clauses can be agreed additionally. Further information: vimeo.com\/privacy. <\/p>

      9.4 Social Media Presence (Facebook and Instagram)<\/h3>

      We maintain publicly accessible corporate profiles on Facebook and Instagram. The provider for users in the European Economic Area is Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland (“Meta”). On sowiholding.at, we do not use Meta pixels, social plugins, or embedded content from Facebook or Instagram. Links to our profiles merely open the respective platform. <\/p>

      When you visit our profiles or interact with their content, Meta processes, in its own responsibility, in particular account, usage, device, connection, and interaction data. This can also happen if you are not logged in to Meta or do not have a Meta account. The scope, purposes, legal bases, storage duration, and recipients of this processing are determined by Meta. Meta can transmit data to Meta Platforms, Inc. and other recipients in the USA or other third countries. Insofar as the EU-US Data Privacy Framework is applicable, the transfer is based on the adequacy decision of the European Commission; otherwise, Meta states that it uses, in particular, Standard Contractual Clauses or other permissible transfer mechanisms. Further information can be found in Meta’s privacy policy at facebook.com\/privacy\/policy. <\/p>

      We process personal data that you provide to us via the platforms, such as messages, comments, reactions, or publicly visible profile information, to respond to your inquiry, for communication, and for our public relations. The legal basis is Art. 6 Para. 1 lit. b GDPR for (pre-)contractual inquiries and otherwise Art. 6 Para. 1 lit. f GDPR. Our legitimate interest lies in communicating with interested parties as well as in the presentation and further development of our offers. For messages and other data that we transfer into our own systems, the storage periods mentioned in Point 5.2 and Point 10 apply; for storage on the platforms, the specifications of Meta apply. <\/p>

      Meta provides us with statistical evaluations of visits and interactions (“Page Insights”), particularly for our Facebook page. For the processing of personal data underlying the creation of these Page Insights, Meta and we are joint controllers in accordance with Art. 26 GDPR (cf. ECJ 5.6.2018, C-210\/16). The joint responsibility concerns the collection and processing of the Insights data; for other processing on the platforms, Meta is generally independently responsible. According to the agreement on Page Insights, Meta assumes primary responsibility for informing data subjects and processing their rights regarding the Insights data. You can nevertheless assert your rights against both Meta and us; we will forward inquiries to Meta as necessary. The essentials of the agreement are available at facebook.com\/legal\/terms\/information_about_page_insights_data. <\/p>

      9.5 Applications<\/h3>

      If you apply to us, we process your application documents, contact details, and the information generated during the process to conduct the application procedure and for pre-contractual measures (Art. 6 Para. 1 lit. b GDPR). Insofar as special categories of personal data are included, processing only takes place to the extent permitted by law, in particular according to Art. 9 Para. 2 lit. b GDPR. <\/p>

      If no employment relationship is established, we generally delete the documents seven months after the conclusion of the procedure, unless a specific legal defense requires longer storage. A longer inclusion in an applicant pool only takes place with your consent and for the duration specified therein. <\/p>

      10. Storage period<\/h2>

      Unless a more specific period is specified in this privacy policy, we store personal data only as long as necessary for the respective purpose. Thereafter, the data will be deleted or anonymized, provided that no statutory retention obligations, overriding legal defense interests, or instructions from a controller for whom we act as a processor stand in the way. <\/p>

      The following are considered standard periods in particular:<\/p>

      • Order, invoice, and tax-relevant documents: seven years (\u00a7 132 BAO, \u00a7 212 UGB).<\/li>
      • Exhibitor accounts: User accounts, including the contact and profile data stored therein, will be deleted at the latest seven years after the last order, fair participation, or other account-related activity, provided there is no ongoing business relationship. Earlier deletion is possible upon request, provided the account is not required for the processing of an ongoing contract. Order, contract, invoice, and booking data to be retained by law remain unaffected by the account deletion and are stored separately for the respective applicable statutory retention period. <\/li>
      • Other contact details of contact persons of our exhibitors and business partners: Insofar as these data are not part of an exhibitor account, we store them for the duration of the active business relationship and generally for three years after the last business contact. Thereafter, we remove or decouple the personal reference, provided no statutory retention obligations or other overriding reasons for further storage exist. <\/li>
      • Inquiries without follow-up business: generally twelve months after completion of processing.<\/li>
      • Newsletter and advertising consents: until revocation; thereafter, only the blocking notice required to respect the revocation remains.<\/li>
      • Server and security logs: generally a maximum of 90 days, unless a specific security incident requires longer retention.<\/li>
      • Data that we process for BeSt Wien as a processor: deletion or transfer according to the instructions of the Federal Ministry of Education, at the latest after the end of the assignment, unless another documented instruction applies.<\/li><\/ul>

        11. Data security<\/h2>

        We take technical and organizational measures appropriate to the risk in accordance with Art. 32 GDPR. These include, in particular, transport encryption (TLS), role- and authorization-based access controls, regular updates, security monitoring, data backups, recovery procedures, and internal deletion routines. The measures are regularly reviewed and further developed in accordance with the state of the art, implementation costs, and the nature, scope, circumstances, and purposes of the processing. <\/p>


        This privacy policy will be adapted if our data processing, services used, or the legal situation change significantly.
        <\/em><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"

        Privacy Policy As of: August 12, 2026 1. Controller The party responsible for data processing on this website is: SoWi-Holding GmbH Saline 17, Medienhaus 6060 Hall in Tirol, Austria Commercial Register Number: FN 573849x Email: info@sowiholding.at Phone: +43 664 1945989 \/ +43 660 355 255 4 Data protection inquiries: datenschutz@sowiholding.at 1.1 Scope This privacy policy […]<\/p>\n","protected":false},"author":2908,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"elementor_header_footer","meta":{"_acf_changed":false,"footnotes":""},"class_list":["post-17204","page","type-page","status-publish","hentry"],"acf":[],"yoast_head":"\nPrivacy Policy - SoWi-Holding<\/title>\n<meta name=\"robots\" content=\"noindex, nofollow\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Privacy Policy - SoWi-Holding\" \/>\n<meta property=\"og:description\" content=\"Privacy Policy As of: August 12, 2026 1. Controller The party responsible for data processing on this website is: SoWi-Holding GmbH Saline 17, Medienhaus 6060 Hall in Tirol, Austria Commercial Register Number: FN 573849x Email: info@sowiholding.at Phone: +43 664 1945989 \/ +43 660 355 255 4 Data protection inquiries: datenschutz@sowiholding.at 1.1 Scope This privacy policy […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/sowiholding.at\/en\/privacy-policy\/\" \/>\n<meta property=\"og:site_name\" content=\"SoWi-Holding\" \/>\n<meta property=\"article:modified_time\" content=\"2026-08-12T13:23:20+00:00\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"29 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/sowiholding.at\\\/en\\\/privacy-policy\\\/\",\"url\":\"https:\\\/\\\/sowiholding.at\\\/en\\\/privacy-policy\\\/\",\"name\":\"Privacy Policy - SoWi-Holding\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/sowiholding.at\\\/en\\\/#website\"},\"datePublished\":\"2025-08-25T10:52:23+00:00\",\"dateModified\":\"2026-08-12T13:23:20+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/sowiholding.at\\\/en\\\/privacy-policy\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/sowiholding.at\\\/en\\\/privacy-policy\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/sowiholding.at\\\/en\\\/privacy-policy\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/sowiholding.at\\\/en\\\/home\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Privacy Policy\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/sowiholding.at\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/sowiholding.at\\\/en\\\/\",\"name\":\"SoWi-Holding\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\\\/\\\/sowiholding.at\\\/en\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/sowiholding.at\\\/en\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/sowiholding.at\\\/en\\\/#organization\",\"name\":\"SoWi-Holding GmbH\",\"alternateName\":\"SoWi-Holding\",\"url\":\"https:\\\/\\\/sowiholding.at\\\/en\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/sowiholding.at\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/sowiholding.at\\\/wp-content\\\/uploads\\\/2025\\\/03\\\/sh-favicon.png\",\"contentUrl\":\"https:\\\/\\\/sowiholding.at\\\/wp-content\\\/uploads\\\/2025\\\/03\\\/sh-favicon.png\",\"width\":512,\"height\":512,\"caption\":\"SoWi-Holding GmbH\"},\"image\":{\"@id\":\"https:\\\/\\\/sowiholding.at\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Privacy Policy - SoWi-Holding","robots":{"index":"noindex","follow":"nofollow"},"og_locale":"en_US","og_type":"article","og_title":"Privacy Policy - SoWi-Holding","og_description":"Privacy Policy As of: August 12, 2026 1. Controller The party responsible for data processing on this website is: SoWi-Holding GmbH Saline 17, Medienhaus 6060 Hall in Tirol, Austria Commercial Register Number: FN 573849x Email: info@sowiholding.at Phone: +43 664 1945989 \/ +43 660 355 255 4 Data protection inquiries: datenschutz@sowiholding.at 1.1 Scope This privacy policy […]","og_url":"https:\/\/sowiholding.at\/en\/privacy-policy\/","og_site_name":"SoWi-Holding","article_modified_time":"2026-08-12T13:23:20+00:00","twitter_misc":{"Est. reading time":"29 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/sowiholding.at\/en\/privacy-policy\/","url":"https:\/\/sowiholding.at\/en\/privacy-policy\/","name":"Privacy Policy - SoWi-Holding","isPartOf":{"@id":"https:\/\/sowiholding.at\/en\/#website"},"datePublished":"2025-08-25T10:52:23+00:00","dateModified":"2026-08-12T13:23:20+00:00","breadcrumb":{"@id":"https:\/\/sowiholding.at\/en\/privacy-policy\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/sowiholding.at\/en\/privacy-policy\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/sowiholding.at\/en\/privacy-policy\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/sowiholding.at\/en\/home\/"},{"@type":"ListItem","position":2,"name":"Privacy Policy"}]},{"@type":"WebSite","@id":"https:\/\/sowiholding.at\/en\/#website","url":"https:\/\/sowiholding.at\/en\/","name":"SoWi-Holding","description":"","publisher":{"@id":"https:\/\/sowiholding.at\/en\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/sowiholding.at\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/sowiholding.at\/en\/#organization","name":"SoWi-Holding GmbH","alternateName":"SoWi-Holding","url":"https:\/\/sowiholding.at\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/sowiholding.at\/en\/#\/schema\/logo\/image\/","url":"https:\/\/sowiholding.at\/wp-content\/uploads\/2025\/03\/sh-favicon.png","contentUrl":"https:\/\/sowiholding.at\/wp-content\/uploads\/2025\/03\/sh-favicon.png","width":512,"height":512,"caption":"SoWi-Holding GmbH"},"image":{"@id":"https:\/\/sowiholding.at\/en\/#\/schema\/logo\/image\/"}}]}},"_links":{"self":[{"href":"https:\/\/sowiholding.at\/en\/wp-json\/wp\/v2\/pages\/17204","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/sowiholding.at\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/sowiholding.at\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/sowiholding.at\/en\/wp-json\/wp\/v2\/users\/2908"}],"replies":[{"embeddable":true,"href":"https:\/\/sowiholding.at\/en\/wp-json\/wp\/v2\/comments?post=17204"}],"version-history":[{"count":12,"href":"https:\/\/sowiholding.at\/en\/wp-json\/wp\/v2\/pages\/17204\/revisions"}],"predecessor-version":[{"id":25151,"href":"https:\/\/sowiholding.at\/en\/wp-json\/wp\/v2\/pages\/17204\/revisions\/25151"}],"wp:attachment":[{"href":"https:\/\/sowiholding.at\/en\/wp-json\/wp\/v2\/media?parent=17204"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}