​​

 

Last updated: 28 October 2026

 

1. Controller and contact details

 

The controller responsible for the processing described in this notice is:

 

JG Klein GmbH

 

Registered office and billing address:

Föhrengasse 12

9061 Klagenfurt, Austria

 

Business and correspondence address:

St. Ruprechter Str. 90

9020 Klagenfurt, Austria

 

Privacy contact: Gürkan Küçük, Managing Director

Email: info@jgklein.com

Telephone: +43 664 915 3581

 

Please use our business address or email for correspondence. The privacy contact is not an appointed data protection officer.

 

This notice explains how personal data is processed in connection with our website, enquiries and the business administration described below.

 

2. Website hosting and technical operation

 

Our website is built and hosted using Wix.com Ltd. and its service providers.

 

When you visit the website, technical information may be processed, including your IP address, browser and device information, requested pages, access times and technical logs. This information is used to deliver the website, maintain security, prevent misuse and investigate technical problems.

 

Processing necessary for these purposes is based on our legitimate interests in operating a reliable and secure company website under Article 6(1)(f) GDPR. Optional analytics and other services requiring consent are addressed separately below.

 

For website visitor data processed on our behalf, Wix acts under its Data Processing Addendum. Wix may also process information for its own purposes as explained in its privacy policy.

 

Wix privacy information:

https://www.wix.com/about/privacy

 

Wix Data Processing Addendum:

https://www.wix.com/about/privacy-dpa-users

 

3. Cookies and privacy choices

 

We use Usercentrics for Wix, provided by Usercentrics GmbH, Germany, to obtain, apply and document privacy choices concerning cookies and similar technologies.

 

Consent management may involve a consent identifier, selected preferences, the date and time of consent or refusal, and relevant device or technical information.

 

Recording and documenting consent serves our legal obligations, including the obligation to demonstrate consent under Article 7(1) GDPR, in conjunction with Article 6(1)(c) GDPR. Storage necessary to remember and apply your privacy choices is distinguished from optional tracking.

 

According to the Usercentrics for Wix service description displayed in our privacy settings, consent and withdrawal records are stored for one year and then deleted. This period applies to those records, not to all website or business data.

 

You can accept optional services, reject them or select preferences through the consent interface. You can subsequently change or withdraw your consent through the website’s privacy settings control.

 

Where consent is required, the legal basis is Article 6(1)(a) GDPR together with the applicable Austrian requirements for storing or accessing information on your device, particularly Section 165(3) TKG 2021.

 

Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal. Refusing optional services may prevent associated content from loading.

 

Service descriptions and available information about the technologies are provided in the privacy settings. Your browser also allows you to delete or restrict cookies and similar storage.

 

Usercentrics privacy information:

https://usercentrics.com/privacy-policy/

 

4. Wix Analytics

 

We use Wix Analytics to understand the use of our website and improve its content and usability. Information may include page visits, sessions, traffic sources, device and browser information, interactions and approximate geographic location.

 

Optional traffic analytics are subject to analytics consent under Article 6(1)(a) GDPR. Processing necessary for website delivery and security is assessed separately.

 

The presence of Wix Analytics does not mean that we use Google Analytics, Google Ads or advertising pixels.

 

5. Google Maps

 

Our website contains embedded Google Maps to help visitors locate our business.

 

In the current privacy interface, Google Maps is associated with the Analytics category. The embedded maps are blocked until permission for that category is provided.

 

When a map is enabled, Google may receive information such as your IP address, browser and device details, the page containing the map, and your interaction with the map. Processing may take place outside the European Economic Area, including in the United States, as described in Google’s privacy information.

 

The legal basis for enabling this optional integration is consent under Article 6(1)(a) GDPR. You can use the written address without enabling the maps.

 

Google privacy information:

https://policies.google.com/privacy

 

6. Fonts and external links

 

The website uses font files delivered through the Wix infrastructure. Delivering these files involves processing technical connection information. Fonts may originate from font libraries without being downloaded directly from the original font provider during a particular visit.

 

Our website may also contain ordinary links to external websites. Following a link takes you to a service operated by another provider. Its privacy information applies to processing on that service.

 

7. Email and telephone enquiries

 

You can contact us by email or telephone. The former website contact form has been removed.

 

Clicking an email link opens your own email application with our address and, where provided, a suggested subject. Clicking the link does not itself submit an enquiry through a website form.

 

We process the contact information, message content and related correspondence needed to handle your request and follow up.

 

The legal basis is:

 

Article 6(1)(b) GDPR where necessary for steps towards, or performance of, a contract with the individual concerned.

 

Article 6(1)(f) GDPR for other enquiries and communication with representatives of customers, suppliers or other organisations. Our legitimate interest is handling business communication and maintaining relevant business relationships.

 

Article 6(1)(c) GDPR where legal recordkeeping obligations apply.

 

You decide what information to provide. Without sufficient contact details or information about your request, we may be unable to respond.

 

We do not request payment card details or operate an online checkout through this website.

 

8. Internal AI-assisted administration

 

JG Klein GmbH is developing and testing a restricted internal AI-assisted system to support organisation, selected information review, summaries and drafts. It is not a public chatbot on this website. Some components are operational for testing; broader functions remain under development.

 

Depending on the particular activity, selected business contact information, correspondence or document excerpts may be processed. The purpose and legal basis must be established for each activity. AI use does not itself create a legal basis for processing.

 

The internal system is hosted through Hetzner in Finland. Selected text and voice-generation functions use the OpenAI API. Supported text workflows replace recognised identifiers before external processing. This reduces exposure but does not guarantee that all personal or confidential information is detected or anonymised.

 

Access is restricted and AI outputs require human review. The assistants are not authorised to execute payments, collect payments or perform banking transactions. The system is not used for solely automated decisions about individuals producing legal or similarly significant effects.

 

Information appropriate to a particular business workflow, including its recipients and any international transfers, must be provided to the individuals concerned where required. This website notice does not replace those information duties.

 

The processing arrangements and relevant privacy information are reviewed before broader operational use or material changes in scope.

 

9. Recipients and international processing

 

Where necessary for the relevant purpose, personal data may be processed by hosting and IT providers, communications providers, accounting and business-record management providers, the AI providers described above, professional advisers, or authorities where disclosure is required or otherwise lawfully justified.

 

Access is limited to the information required for the relevant task. The applicable legal basis depends on the processing; service-provider access is not necessarily based on consent.

 

Some providers and their subprocessors operate outside the European Economic Area.

 

Wix describes processing in Israel and the use of group companies and service providers in other countries, including the United States. For relevant transfers, Wix refers to applicable adequacy decisions or appropriate safeguards, including standard contractual clauses and additional measures.

 

For Google services and other providers, the applicable transfer arrangements depend on the service and recipient. A consent choice does not, by itself, replace the safeguards required for an international transfer.

 

Information about relevant recipients and applicable transfer safeguards can be requested from our privacy contact.

 

10. Retention

 

Personal data is retained according to its purpose and the applicable legal requirements.

 

Enquiries and correspondence are retained while being handled and for necessary follow-up. Further retention may be required for contractual documentation, statutory obligations or the establishment, exercise or defence of legal claims.

 

Relevant Austrian accounting and tax records are generally subject to a seven-year retention period calculated from the end of the relevant calendar year. Special rules or ongoing proceedings may require longer retention. This does not mean that every enquiry must be retained for seven years.

 

Consent records are subject to the one-year period described in Section 3.

 

For technical records and website statistics, retention depends on the relevant service, operational purpose and provider arrangements. Wix describes retention criteria including the purpose of processing, the nature and sensitivity of the information, and applicable legal requirements.

 

Removing a website feature does not automatically delete records previously collected through it. Any remaining historical contact or membership records require a separate retention review.

 

You may contact us for information about the retention applicable to your data.

 

11. Security

 

We use technical and organisational measures appropriate to the processing risks, including access restrictions and HTTPS/TLS protection for website connections.

 

Service providers may process data to the extent required for their authorised tasks. Encryption during transmission is distinct from encryption of stored data or end-to-end encryption.

 

12. Your rights

 

Subject to the applicable conditions, you have rights of access, rectification, erasure, restriction of processing and data portability.

 

Where processing is based on consent, you can withdraw that consent at any time.

 

Where processing is based on legitimate interests, you may object on grounds relating to your particular situation. You may object to direct marketing at any time.

 

Please contact info@jgklein.com to exercise your rights. We may request proportionate information to verify your identity.

 

You may lodge a complaint with a competent supervisory authority, including:

 

Österreichische Datenschutzbehörde

Barichgasse 40–42

1030 Wien, Austria

 

Email: dsb@dsb.gv.at

Website: https://www.dsb.gv.at

 

13. Changes to this notice

 

We update this notice when relevant services, purposes or data flows change.

 

Where a change requires renewed consent or direct information to affected individuals, updating this page alone does not replace those additional steps.