Privacy Policy

This Privacy Policy informs you, in accordance with Art. 13 and 14 GDPR and the Austrian Datenschutzgesetz (DSG, Austrian Data Protection Act), about which personal data we process when you visit this website or contact us with an inquiry, for what purpose, on what legal basis and for how long.

1. Controller

Controller

Ing. Simon Gorski, MA
SG5 Digital Solutions
Währinger Strasse 80-82/1, 1180 Vienna, Austria

Email

[email protected]

Phone

+43 677 62 999 140

No data protection officer has been appointed, as there is no legal obligation to do so. Please direct data protection inquiries to the email address stated above.

2. Principles & Legal Bases

We process personal data only to the extent necessary for operating the website, responding to your inquiries and providing our services. Depending on the case, the legal bases are:

• Art. 6(1)(a) GDPR — your consent, for example when playing a YouTube video.
• Art. 6(1)(b) GDPR — performance of a contract and pre-contractual measures, for example for inquiries and trial access.
• Art. 6(1)(f) GDPR — our legitimate interest in a secure, functioning web presence and in responding to inquiries.
• Art. 6(1)(c) GDPR — statutory retention obligations, for example under the Bundesabgabenordnung (BAO, Austrian Federal Fiscal Code) and the UGB (Austrian Commercial Code).

3. Hosting & Server Log Files

This website is hosted in data centers within the European Union. The hosting provider is bound by a data processing agreement pursuant to Art. 28 GDPR. When you access the website, the web server automatically records the following data in log files:

• IP address of the requesting device
• date and time of access
• page or file accessed, amount of data transferred and HTTP status code
• browser type, operating system and referrer URL

The purpose is to ensure operation, defend against attacks and analyze errors. The legal basis is Art. 6(1)(f) GDPR. The log files are automatically deleted after 30 days unless a security-relevant incident requires longer retention.

4. Contact and Inquiry Forms

This website contains several forms. In each case, we process only the data you enter there:

Contact form

Name, email address, industry (optional), message

InsightHub trial environment

Name, company (optional), email address, shop or website URL, shop platform or type of business, inventory management or booking system (optional)

WP PMS demo request

Name, business (optional), email address, website (optional), number of rooms (optional), message (optional)

The purpose is to process your inquiry, set up trial access and handle any follow-up questions. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures) and Art. 6(1)(f) GDPR (legitimate interest in responding). The data is transmitted TLS-encrypted.

The data is deleted once your inquiry has been fully processed and no contract is concluded — at the latest after twelve months. If a contract is concluded, we retain the data within the statutory retention periods (generally seven years pursuant to § 132 BAO). The data is not passed on to third parties; it is transmitted and stored exclusively via our email provider (a processor established in the EU).

5. Contact by Email, Phone and WhatsApp

If you contact us by email or phone, we process the information you provide in order to handle your inquiry (Art. 6(1)(b) and (f) GDPR). The following additionally applies to contact via WhatsApp: WhatsApp is a service of WhatsApp Ireland Limited (Meta Platforms), 4 Grand Canal Square, Dublin 2, Ireland. When messages are exchanged, WhatsApp receives metadata such as your phone number and the time of communication; message content is end-to-end encrypted. A transfer to the USA is possible; Meta is certified under the EU-US Data Privacy Framework. Use WhatsApp only if you agree to this — alternatively, you can reach us at any time by email or phone. Information: whatsapp.com/legal/privacy-policy-eea.

6. Cookies & Local Storage

This website does not use tracking, analytics or marketing cookies and does not use any web analytics services. Only technically necessary storage operations in the browser are used (for example to play embedded videos after you have agreed), for which no consent is required (§ 165(3) TKG 2021, Austrian Telecommunications Act). Should we use analytics or marketing cookies in the future, this will only happen after your express consent via a consent banner.

7. Fonts

The fonts used on this website (Montserrat, Roboto) are served locally from our own server. When the fonts are loaded, no connection is established to servers of Google or other third parties, and no data is transmitted to third parties.

8. YouTube Videos

Videos from YouTube are embedded on the product pages. We use the privacy-enhanced mode (youtube-nocookie.com) and load videos only when you click “Play video”. Until then, no connection to YouTube is established. By clicking, you consent to a connection being established to servers of Google Ireland Limited (Art. 6(1)(a) GDPR). In the process, your IP address and browser information are transmitted; YouTube may set cookies and, if you are signed in to Google, associate the playback with your account. A transfer to the USA is possible (EU-US Data Privacy Framework). You can withdraw your consent at any time by not playing any further videos. Information: policies.google.com/privacy.

9. External Links

This website links to external offerings, such as those of the Wirtschaftskammer Österreich (Austrian Economic Chamber), the Rechtsinformationssystem des Bundes (Austrian Federal Legal Information System) and the European Commission, as well as to our demo and help pages. When you follow these links, the privacy policies of the respective provider apply. Merely visiting our website does not transmit any data to these providers.

10. Recipients & Processors

We disclose personal data only to the following categories of recipients, in each case bound by data processing agreements pursuant to Art. 28 GDPR or on the basis of legal requirements:

• Hosting provider (data centers in the EU)
• Email provider (established in the EU)
• Google Ireland Limited — only when YouTube videos are played
• WhatsApp Ireland Limited — only if you contact us via WhatsApp
• Tax advisors, authorities and courts, where required by law

Data is neither sold nor disclosed for advertising purposes.

11. Transfers to Third Countries

Personal data is transferred to countries outside the EU or the EEA only in the cases described in sections 5 and 8, to Google and Meta. Both companies are certified under the EU-US Data Privacy Framework; in addition, the European Commission's Standard Contractual Clauses apply.

12. Retention Periods

Server log files

30 days

Inquiries without a contract

until fully processed, at the latest twelve months

Contract and invoice data

seven years pursuant to § 132 BAO and § 212 UGB

Email correspondence

as long as required for the business relationship, thereafter within the statutory retention periods

13. Data Security

This website is delivered TLS-encrypted (https). We take appropriate technical and organizational measures to protect your data against loss, misuse and unauthorized access, and continuously adapt them to the state of the art.

14. Your Rights

You have the following rights in relation to us:

• Access to the data processed (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure (Art. 17 GDPR) and restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing based on legitimate interests (Art. 21 GDPR)
• Withdrawal of consent given, with effect for the future (Art. 7(3) GDPR)

To exercise these rights, contact [email protected]. If you believe that the processing of your data violates data protection law, you may lodge a complaint with the supervisory authority: Österreichische Datenschutzbehörde (Austrian Data Protection Authority), Barichgasse 40-42, 1030 Vienna, [email protected], www.dsb.gv.at.

15. No Automated Decision-Making

We do not use automated individual decision-making or profiling within the meaning of Art. 22 GDPR. The AI products described on this website (InsightHub) process data exclusively on behalf of our customers; they are not used for your visit to this website.

16. Customers of InsightHub and WP PMS

For customers of our products, the respective contractual terms and a data processing agreement pursuant to Art. 28 GDPR apply in addition. The data processing agreement for InsightHub is available at www.sg5.biz/products/insighthub/legal/dpa/. For the use of WP PMS on our customers' websites, the respective operator is the controller responsible under data protection law. For the InsightHub platform, the InsightHub privacy policy, the terms of use and the data processing agreement apply in addition.

17. Changes to This Policy

We will update this Privacy Policy if the legal situation or our offering changes. The current version can always be found on this page.

Last updated: September 2026

← Back to homepage