Privacy Policy

We take the protection of your personal data seriously. This policy explains how we handle your data when you visit this website.

Note: Only the German version of this privacy policy is legally binding. This English translation is provided for convenience only.

Controller

The controller for the data processing on this website is Flexopack Verpackungen GmbH. For questions regarding data protection, you can reach us at office@flexopack.at.

Server log files

When this website is accessed, the hosting provider records technical data in so-called server log files (IP address, date and time, page accessed, browser, operating system). This data is used solely for technical stability, security and error analysis. Processing is based on our legitimate interest pursuant to Art. 6(1)(f) GDPR. Log files are deleted automatically after a maximum of 14 days.

Cookies

This website sets no cookies that could be used to track or recognise your device. Only technically necessary session cookies are set if you use the admin area — these are deleted when the browser is closed.

Audience measurement (anonymous, cookieless)

For the statistical analysis of website usage, we use our own cookieless audience measurement, which runs entirely on our own server. No cookies are set, no data is transferred to third parties and no IP addresses are stored. To approximately distinguish visits, only an anonymous, daily-changing and irreversible check value is generated, which allows no conclusions about you or your device.

As no personal data is collected and no cookies are used, consent is not required. The legal basis for this data-minimising analysis is our legitimate interest pursuant to Art. 6(1)(f) GDPR.

Inquiry form

When you send us a message via the inquiry form, we process the data you enter (name, company, email address, optionally phone number, material details, your message and any attachment) to answer your inquiry and for any follow-up questions. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR (legitimate interest in handling inquiries).

Your inquiry is stored on our web server and forwarded by email to the responsible staff. For sending these emails we use Brevo (Sendinblue SAS, 106 boulevard Haussmann, 75008 Paris, France; data processed in the EU) as a processor. Beyond that, we do not pass your data on.

Storage period: inquiries are automatically deleted 24 months after receipt. If your inquiry leads to an order, we retain the related business correspondence separately in accordance with statutory retention obligations (Section 132 Austrian Federal Fiscal Code, 7 years).

You can request earlier deletion of your data at any time via the email address provided in the imprint, unless statutory retention obligations apply.

Job applications

When you apply via our website, we process the data from the application form (name, email address, optionally phone number, the position, your message) and the documents you upload (e.g. CV, certificates) solely to carry out the application process. The legal basis is Art. 6(1)(b) GDPR (steps prior to entering into an employment relationship). If your documents voluntarily contain special categories of personal data (e.g. health information), we process them on the basis of Art. 9(2)(b) GDPR.

Your application, including your documents, is stored on our web server and sent by email to our HR department. For sending these emails we use Brevo (Sendinblue SAS, 106 boulevard Haussmann, 75008 Paris, France; data processed in the EU) as a processor. Only the people involved in the selection process have access; your data is not passed on to third parties.

Storage period: if no employment relationship results, your application data is automatically deleted 6 months after receipt. We keep it for this period so that we can defend ourselves against any claims under the Austrian Equal Treatment Act (Art. 6(1)(f), Art. 17(3)(e) GDPR). If you are hired, the documents become part of your personnel file.

You can withdraw your application at any time and request the deletion of your data via the email address provided in the imprint.

AI transparency

Some images on this website were created wholly or partly using generative artificial intelligence. These images are labelled directly on the image — with the official EU symbol for AI content and the note "AI-generated image" or "AI-modified image". This fulfils the transparency obligation under Art. 50(4) of Regulation (EU) 2024/1689 (AI Act), applicable since 2 August 2026.

All other images come from professional photo shoots at our site. Purely technical post-processing such as cropping, retouching or colour correction does not count as AI generation and is not labelled separately.

The texts on this website are editorially written and reviewed; we assume responsibility for their content.

No AI system that interacts with you or processes your data is in operation on this website — there is no chatbot, no emotion recognition and no biometric categorisation.

External fonts

We use locally hosted fonts (Plus Jakarta Sans, OFL-licensed). There is no connection to Google Fonts or other external font CDNs — your IP address is not transmitted to third parties.

Your rights

You have the right at any time to access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR) and objection (Art. 21 GDPR). You also have the right to lodge a complaint with the competent supervisory authority (Art. 77 GDPR). To do so, write to us at office@flexopack.at.

Changes to this policy

We reserve the right to amend this privacy policy so that it always complies with current legal requirements or reflects changes to our services. The new privacy policy will then apply to your next visit.

Last updated: October 2026.