Privacy Policy

WFT GmbH, as of 14.09.2026

1. Controller

The party responsible for processing personal data within the meaning of the General Data Protection Regulation is:

WFT GmbH, Maitisgasse 6, 3400 Klosterneuburg, Austria

Phone: +43 2243 83468

Email: datenschutz@vinpilot.com

A data protection officer has not been appointed, as the legal requirements for doing so are not met. For all data protection matters, you can reach us at the address given above.

2. Principles

We process personal data only to the extent necessary to provide our website, to respond to your inquiries, to initiate and carry out business relationships, or due to legal obligations. Below we inform you which data we process for which purpose and on which legal basis.

3. Visiting the website and server log files

When you visit our website, the hosting provider automatically processes data transmitted by your browser. This includes in particular the IP address, the date and time of access, the page accessed, the status code transmitted, the amount of data transferred, and information about the browser and operating system.

Purpose: technical provision of the website, ensuring system security and stability, and error analysis.

Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure and trouble-free operation of the website.

Storage period: The data is stored by the hosting provider for a short period and then deleted or anonymized.

4. Website hosting

Our website is operated on Squarespace. The provider processes, on our behalf, the data generated when the website is visited and provides the technical infrastructure. This may involve the transfer of data to the United States. The transfer takes place on the basis of the contractual agreements with the provider and the guarantees provided by the European Commission.

Legal basis: Art. 6(1)(f) GDPR, legitimate interest in the reliable operation of the website.

5. Contact and quote requests

If you contact us via the inquiry form, by email, or by telephone, we process the information you provide in order to process your inquiry. For quote requests, we use the service Typeform. The information entered there is transmitted to us.

Purpose: processing your inquiry and, where applicable, preparing a quote.

Legal basis: Art. 6(1)(b) GDPR, insofar as the inquiry is aimed at the conclusion or performance of a contract; otherwise Art. 6(1)(f) GDPR.

Storage period: We store your inquiry until it has been finally processed. If the inquiry leads to a business relationship, the seven-year retention periods under commercial and tax law apply.

6. Newsletter

If you subscribe to our newsletter, we process your email address in order to send you information about our products and services. We use a service provider for dispatch. Registration takes place using a confirmation procedure: after signing up, you receive an email with which you confirm your registration.

Legal basis: Art. 6(1)(a) GDPR, your consent.

Withdrawal: You may withdraw your consent at any time with future effect. To do so, use the unsubscribe link in every newsletter email or send us a message at the address given above.

Storage period: until consent is withdrawn.

7. Web analytics

We use Google Analytics via Google Tag Manager on our website to evaluate the use of the website and improve our offering. In doing so, cookies may be set and data may be transmitted to Google, potentially also to the United States.

Legal basis: Art. 6(1)(a) GDPR. This processing takes place only if you have previously given your consent via the consent banner. You may withdraw your consent at any time with future effect by changing your selection in the consent banner.

To be reviewed: This section applies only if a consent banner has been set up. As long as no such banner exists, Google Analytics and Google Tag Manager must be deactivated and this section removed.

8. Links to social networks and map services

Our website contains links to our profiles on Instagram and Facebook, as well as a link to the display of our address on Google Maps. These are simple links. Data is only transmitted to these providers once you click on the respective link. The respective provider is then responsible for any further processing.

9. Processing in connection with business relationships

In the context of initiating and carrying out business relationships, we process the contact details of the contact persons of our customers, suppliers, and partners, in particular name, function, business address, telephone number, and email address, as well as the information required for order processing.

Legal basis: Art. 6(1)(b) GDPR for contract performance, Art. 6(1)(c) GDPR for statutory retention obligations, and Art. 6(1)(f) GDPR for ongoing business communication.

Recipients: Within our company, only those persons who need the data to perform their duties are given access. In addition, we pass on data to our tax advisor, banks, transport service providers, and to sales and installation partners, to the extent necessary for processing. For deliveries to third countries, data is transmitted to the partner there, to the extent necessary for contract performance.

Storage period: seven years after the end of the financial year in accordance with statutory retention obligations under commercial and tax law, and beyond that for the duration of any possible warranty claims.

10. Use of the VinPilot software

The control software runs on a server at the customer's premises. The connection to our platform serves exclusively to synchronize external access and is operated on the servers of a service provider in Austria. Technical process data of the systems is processed in this context. Insofar as user accounts are set up for access, the processing of the related data is based on Art. 6(1)(b) GDPR within the scope of the usage relationship.

11. Your rights

You have the right to information about the personal data we process about you, to rectification of inaccurate data, to erasure, to restriction of processing, and to data portability.

You have the right to object at any time, for reasons arising from your particular situation, to processing based on Art. 6(1)(f) GDPR. You may object at any time, without giving reasons, to processing for the purpose of direct marketing.

You may withdraw any consent given at any time with future effect. The lawfulness of processing carried out prior to the withdrawal remains unaffected.

To exercise your rights, a message to the contact details given above is sufficient.

12. Right to lodge a complaint

If you believe that the processing of your data violates data protection law, you may lodge a complaint with a supervisory authority. The authority responsible for us is the Austrian Data Protection Authority, Barichgasse 40-42, 1030 Vienna, dsb@dsb.gv.at.

13. Necessity of providing data

The provision of your data is neither legally nor contractually required. However, without the information required for an inquiry or a contract, we are unable to process your inquiry or to conclude or perform a contract.

14. Automated decision-making

No automated decision-making, including profiling, takes place.

15. Changes to this policy

We update this privacy policy whenever the processing or the legal framework changes. The version published on our website at any given time applies.

Note: This draft was prepared without legal advice and does not constitute legal advice. It should be reviewed for completeness and accuracy before publication. The section on web analytics presupposes a functioning consent banner.