Legal

Privacy Policy

Protecting your personal data matters to us. In accordance with Art. 13 and Art. 14 GDPR, this policy explains which data we process when you visit sumware.at, what we use it for, and which rights you have.

Last updated: 24 July 2026

This English version is a convenience translation. Only the German version is legally binding.

1. Controller

The controller within the meaning of the GDPR and other data protection provisions is:

Company: retail butlers GmbH
Address: Fuchsweg 3/1
5400 Hallein
Austria
Commercial register number: FN 487656 t (Regional Court of Salzburg)
VAT ID: ATU73148159
Managing director: Alexey Weber
Email: office@retail-butlers.at

We are not legally required to appoint a data protection officer. For any data protection matters, please contact the email address given above.

2. Principles of processing

We process personal data exclusively on the basis of the statutory provisions (GDPR, Austrian Data Protection Act, Austrian Telecommunications Act). The following sections inform you about the nature, scope, and purpose of the collection and use of your data on this website.

Your data is not transferred to third countries (outside the EU/EEA). Automated decision-making, including profiling within the meaning of Art. 22 GDPR, does not take place.

3. Server log files

When you visit this website, your browser automatically transmits information to our web server, where it is temporarily stored in so-called log files. The following data is recorded without any action on your part and retained until it is automatically deleted:

IP address of the requesting device
date and time of access
name and URL of the retrieved file
volume of data transferred and HTTP status code
browser type, browser version, and operating system used
referrer URL (the page visited previously)

Purpose: Delivery of the website, ensuring system security and stability, defending against attacks.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the secure operation of the website).
Retention period: A maximum of 14 days, followed by automatic deletion; in the event of security-relevant incidents, until the matter has been fully resolved.

4. Contact form and demo booking

If you contact us via the contact form or the demo booking on this site, we process the data you provide exclusively to handle your request and for any follow-up communication.

Categories: Company, name, email address, optionally your phone number, optionally the number of stores and POS stations, optionally a free-text message, optionally your preferred date and time for the demo, and whether you would like to try SUMWARE free of charge for two weeks.
Purpose: Handling your demo request, scheduling an appointment, preparing a written quote, and the related communication.
Legal basis: Art. 6(1)(b) GDPR (pre-contractual steps taken at your request) and Art. 6(1)(a) GDPR (your explicit consent via the mandatory checkbox in the form).
Retention period: Until your request has been dealt with. If the request leads to a contractual relationship, the data is subject to statutory retention periods (in particular § 132 BAO, Austrian Federal Fiscal Code, and § 212 UGB, Austrian Commercial Code; as a rule seven years). Otherwise, the data is deleted no later than six months after the correspondence has ended.

You can revoke your consent at any time with effect for the future by emailing office@retail-butlers.at. The lawfulness of the processing carried out up to the revocation remains unaffected.

5. Cookies and local storage

This website uses no tracking cookies and no marketing cookies. We only set one entry in your browser's local storage to remember your choice in the cookie notice:

Name: sumware-cookie-consent
Content: Your confirmation of the cookie notice ("acknowledged").
Purpose: Suppressing the cookie notice on subsequent visits.
Legal basis: Art. 6(1)(f) GDPR and § 165 (3) TKG 2021 (Austrian Telecommunications Act): storage that is strictly necessary to provide the service you requested (the functioning of the cookie notice itself).
Retention period: Until you delete it via your browser settings.

You can view and delete your browser's local storage at any time via your browser settings. After deletion, the cookie notice will appear again on your next visit.

6. Fonts and third-party content

All fonts used on this website (Inter) are served locally from our own server. There is no embedding of Google Fonts or comparable CDN services. When you visit the website, no connections to external third-party servers are established. The online demo booking in the contact section also runs entirely on our own servers.

We currently use no web analytics services (e.g. Google Analytics, Matomo, Plausible), no social media plug-ins, and no embedded content (e.g. YouTube videos, map services). Should any of this be introduced in the future, this policy will be updated accordingly and your consent (where required) obtained.

7. Disclosure of data to third parties

We disclose your personal data to third parties only

with your explicit consent,
to fulfill legal obligations toward authorities (e.g. fiscal authorities, law enforcement agencies),
to carefully selected processors (in particular hosting providers within the EU) with whom a contract pursuant to Art. 28 GDPR is in place.

Your data is not sold or rented for advertising purposes.

8. Data security

We implement technical and organizational measures (TOMs) in accordance with Art. 32 GDPR to protect your data against accidental or intentional manipulation, loss, destruction, and access by unauthorized persons. Data transmission between your browser and our server is encrypted via TLS (HTTPS) at all times. Our security measures are continuously reviewed and adapted in line with technological developments.

9. Rights of data subjects

With regard to the personal data concerning you, you have the following rights vis-a-vis us at any time:

Access (Art. 15 GDPR): which data we process about you;
Rectification (Art. 16 GDPR): of inaccurate or incomplete data;
Erasure (Art. 17 GDPR): unless a statutory retention obligation prevents it;
Restriction of processing (Art. 18 GDPR);
Data portability (Art. 20 GDPR): in a structured, machine-readable format;
Objection (Art. 21 GDPR): to processing based on legitimate interest;
Revocation of consent once given (Art. 7(3) GDPR) with effect for the future.

To exercise these rights, an informal message to office@retail-butlers.at is sufficient. We may request suitable proof to verify your identity.

10. Right to lodge a complaint with the supervisory authority

If you believe that the processing of your data violates data protection law or that your data protection rights have otherwise been infringed, you can lodge a complaint with the competent supervisory authority:

Authority: Austrian Data Protection Authority (Österreichische Datenschutzbehörde)
Address: Barichgasse 40-42
1030 Vienna
Austria
Phone: +43 1 52 152-0
Email: dsb@dsb.gv.at
Web: www.dsb.gv.at

11. Links to other websites

This website contains some links to third-party websites (e.g. the EU dispute resolution portal, authority websites). We have no influence over the content of those websites and therefore cannot accept any liability for their content and in particular their data protection practices. Please refer to the privacy policies of the respective operators.

12. Changes to this privacy policy

We reserve the right to amend this privacy policy if the legal situation, our services, or our data processing changes. The version available on this page at the time of your visit applies. Where required, material changes will be communicated separately in advance.

← Back to home