Privacy Policy
PRIVACY POLICY
As of: July 2026
1. Controller
The controller responsible for processing personal data on this website is:
Swobitruck GmbH
Seitenhafenstraße 15
1020 Vienna
Austria
Phone: +43 1 606 40 60
Fax: +43 1 606 40 60 40
Email: office@swobitruck.at
2. General information
Protecting your personal data is important to us. We process personal data exclusively in accordance with the General Data Protection Regulation (GDPR), the Austrian Data Protection Act (DSG), the Telecommunications Act 2021 (TKG 2021), and other applicable legal provisions.
Personal data is any information relating to an identified or identifiable natural person. This includes, for example, name, contact details, address data, IP address, and information you provide to us as part of an enquiry or a transport order.
We only process the data that is necessary to provide our website, handle your enquiry, initiate or perform a contract, comply with legal obligations, or safeguard legitimate interests.
3. Accessing our website and server log files
When you access our website, technically necessary information is processed by the web server or our hosting provider. This may include, in particular, the following data:
– IP address
– date and time of access
– page or file accessed
– amount of data transferred
– referrer URL
– browser type and browser version
– operating system
– device information
– HTTP status code
Processing is carried out to provide the website technically, ensure its stability and security, detect attacks or misuse, and analyse technical errors.
The legal basis is our legitimate interest in a secure and functional website pursuant to Art. 6(1)(f) GDPR.
Server log files are stored only for as long as necessary for the purposes stated. Longer storage takes place only if this is necessary to investigate a security incident, defend against claims, or due to legal obligations.
4. Cookies and consent management
Our website uses cookies and similar technologies. Cookies are small files that can be stored on or read from your device.
Technically necessary cookies may be used without separate consent insofar as they are necessary for operating the website, security, providing functions you expressly request, or storing your privacy settings.
Non-essential cookies and services, in particular Google Analytics, are only activated after you have expressly consented via our cookie banner. The legal basis is Art. 6(1)(a) GDPR in conjunction with Section 165(3) TKG 2021.
You can withdraw your consent at any time with effect for the future or change your selection. To do so, use the “Cookie settings” button in the footer of our website. The lawfulness of the processing carried out up to the withdrawal remains unaffected.
5. Contact by email, phone or form
If you contact us by email, phone or via a form, we process the data you provide in order to handle your enquiry.
Depending on the type of enquiry, the following data may be processed in particular:
– name and contact details
– company
– email address
– phone number
– address data
– loading and unloading addresses
– information on transport, storage, customs clearance or insurance
– type, quantity, weight and dimensions of the goods
– requested dates
– messages, comments and uploaded files
– selected service
– language and source page of the enquiry
Processing is carried out to respond to your enquiry, prepare an offer, carry out pre-contractual measures, or handle an existing contract.
The legal basis is Art. 6(1)(b) GDPR. If there is no specific contract initiation, processing is carried out on the basis of our legitimate interest in handling business enquiries and efficient customer communication pursuant to Art. 6(1)(f) GDPR.
Where statutory retention obligations apply, processing is additionally carried out pursuant to Art. 6(1)(c) GDPR.
6. Jotform forms
We use the Jotform service to provide our contact, enquiry and order forms.
The provider is:
Jotform Inc.
4 Embarcadero Center, Suite 780
San Francisco, CA 94111
USA
When accessing and using a Jotform form, the form data you enter as well as technical information may be processed. This may include, in particular, IP address, browser and device information, date and time, referrer information, language, the form page accessed, and session information.
Depending on the subpage accessed, we also transmit information about the selected service, the language, and the source page of the enquiry to the form. This allows your enquiry to be assigned to the correct service.
As a rule, Jotform processes the data collected via our forms on our behalf. A data processing agreement pursuant to Art. 28 GDPR is in place with Jotform.
The data you enter is processed to handle your enquiry, carry out pre-contractual measures, or perform the contract pursuant to Art. 6(1)(b) GDPR. The technical provision of the forms is also based on our legitimate interest in secure, structured and user-friendly handling of enquiries pursuant to Art. 6(1)(f) GDPR.
If Jotform uses non-essential cookies or similar technologies, they are only used after your consent pursuant to Art. 6(1)(a) GDPR and Section 165(3) TKG 2021.
To provide its services, Jotform may use additional sub-processors, in particular providers of cloud, security, communication and AI services. This may also involve processing personal data outside the European Economic Area, in particular in the USA.
Jotform states that it participates in the EU-U.S. Data Privacy Framework. Where required, additional appropriate safeguards such as the European Commission’s Standard Contractual Clauses are used.
Further information on data protection at Jotform:
https://www.jotform.com/privacy/
7. Jotform AI Assistant
An AI-powered assistant from Jotform may be used on our website. The assistant is used to answer general questions about our company, our services, and transport and logistics topics, and to support you in submitting an enquiry.
When using the AI Assistant, the following data may be processed in particular:
– questions and messages entered
– conversation history
– contact and company data provided voluntarily
– information on requested services
– technical connection, browser and device information
– language, date and time of use
– conversation metadata
Please only provide the personal data in the AI Assistant that is necessary for your enquiry. In particular, do not transmit sensitive data, access data, payment information, or confidential business secrets unless you are expressly asked to do so and the transmission is actually necessary.
Processing is carried out to answer your questions, support you in selecting our services, and initiate a business relationship pursuant to Art. 6(1)(b) GDPR. In addition, processing is based on our legitimate interest in efficient and user-friendly customer communication pursuant to Art. 6(1)(f) GDPR.
The responses are generated automatically. They are provided solely for general, non-binding information. The AI Assistant does not make decisions that produce legal effects for you or similarly significantly affect you. Binding offers, commitments or contract conclusions are made exclusively by our employees.
For technical provision, Jotform may use external AI and cloud providers, including in particular OpenAI and Google Cloud. The content you enter and technical metadata may be transmitted to these service providers insofar as this is necessary to generate a response.
Jotform states that it does not use personal data from conversations to train Jotform’s general AI models. Processing by the AI service providers used is carried out in accordance with the respective contractual and data protection agreements.
Processing in the USA or other countries outside the European Economic Area cannot be ruled out. Safeguards are provided in particular on the basis of the EU-U.S. Data Privacy Framework and, where required, the European Commission’s Standard Contractual Clauses.
Further information:
https://www.jotform.com/ai-policy/
https://www.jotform.com/privacy/
8. Google Analytics 4
We use Google Analytics 4 on our website, a web analytics service provided by:
Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland
Google Analytics enables us to statistically analyse the use of our website and improve our offering.
Google Analytics is only activated after you have expressly consented via our cookie banner. The legal basis is Art. 6(1)(a) GDPR in conjunction with Section 165(3) TKG 2021.
As part of Google Analytics, the following information may be processed in particular:
– pages accessed
– clicks and other events
– time and duration of the visit
– approximate geographic origin
– browser used
– operating system
– device type
– screen resolution
– referrer URL
– session and usage information
– pseudonymous user and session identifiers
Google Analytics uses, among other things, the cookies “_ga” and “_ga_<Container ID>”. These cookies are used to distinguish users and to store session status and, by default, have a storage period of up to two years. The specific storage period may be shortened by browser settings, our configuration, or withdrawal of your consent.
Google Analytics uses IP addresses at the time of data collection, among other things, to derive an approximate geographic region and for technical routing. According to Google, IP addresses of users from the European Union are discarded before storage and are not logged or stored in Google Analytics.
The retention period for user- and event-related data in our Google Analytics property is 14 months. Aggregated statistical reports may be stored longer, provided that they do not allow direct identification of individual persons.
We do not use Google Analytics to identify you directly. We do not combine Analytics data with contact data you submit via forms.
Data may be transferred by Google Ireland Limited to Google LLC and other companies in the Google group in the USA or other countries. Google LLC is certified under the EU-U.S. Data Privacy Framework. Where required, the European Commission’s Standard Contractual Clauses are also used.
You can withdraw your consent at any time via the “Cookie settings” button in the footer of our website. After withdrawal, Google Analytics will no longer be activated on future visits.
Further information on data protection at Google:
https://policies.google.com/privacy
9. Recipients of personal data
Within Swobitruck GmbH, only those employees have access to personal data who need it to handle your enquiry, perform the contract, or fulfil legal tasks.
Personal data may also be transferred to the following recipients or categories of recipients:
– hosting and IT service providers
– Jotform and its sub-processors
– Google in connection with Google Analytics
– tax advisory, legal advisory and auditing
– transport, warehousing, customs, insurance and logistics partners
– other contractors insofar as this is necessary to provide services
– authorities, courts or other public bodies where a legal obligation exists
Data is only disclosed if it is necessary to handle your enquiry, initiate a contract, perform the contract, fulfil legal obligations, or safeguard legitimate interests, or if you have previously consented.
10. Transfers to third countries
When using Jotform, the Jotform AI Assistant and Google Analytics, personal data may be transferred to countries outside the European Union or the European Economic Area.
Such a transfer only takes place if the requirements of Art. 44 et seq. GDPR are met. The basis may include, in particular, an adequacy decision by the European Commission, a recipient’s participation in the EU-U.S. Data Privacy Framework, the European Commission’s Standard Contractual Clauses, or other appropriate safeguards.
Upon request, you will receive further information about the safeguards used for a specific data transfer.
11. Storage period
We store personal data only for as long as necessary for the respective processing purpose or as long as statutory retention obligations exist.
Enquiries that do not result in a contract are deleted as soon as the enquiry has been conclusively dealt with and there are no statutory retention obligations, limitation periods, or legitimate interests in further storage.
Data required to initiate or perform a contract is stored for the duration of the business relationship and then until the expiry of statutory warranty, limitation and retention periods.
Accounting records, invoices, business letters and other tax-relevant documents are generally retained for seven years. Longer storage may be required if an administrative or court proceeding is pending or special statutory retention periods apply.
Form submissions and conversations with the AI Assistant are also deleted or anonymised in our Jotform account according to these criteria, provided there are no legal or contractual reasons for further retention.
Data processed on the basis of your consent is generally processed until you withdraw your consent, unless another legal basis or retention obligation exists.
12. Data security
We implement appropriate technical and organisational measures to protect personal data against loss, unauthorised access, alteration, disclosure or destruction.
Data transmission via our website is generally encrypted via HTTPS. However, complete protection of data during transmission over the internet cannot be guaranteed.
13. Your rights
Subject to the statutory requirements, you have the following rights in particular:
– right of access pursuant to Art. 15 GDPR
– right to rectification pursuant to Art. 16 GDPR
– right to erasure pursuant to Art. 17 GDPR
– right to restriction of processing pursuant to Art. 18 GDPR
– right to data portability pursuant to Art. 20 GDPR
– right to object pursuant to Art. 21 GDPR
– right to withdraw consent with effect for the future
– right to lodge a complaint with a data protection supervisory authority
If processing is based on our legitimate interest pursuant to Art. 6(1)(f) GDPR, you may object to this processing on grounds relating to your particular situation.
To exercise your rights, please contact us at:
Swobitruck GmbH
Seitenhafenstraße 15
1020 Vienna
Austria
Email: office@swobitruck.at
We may request appropriate proof of your identity if this is necessary to ensure that personal data is not disclosed to unauthorised persons.
14. Right to lodge a complaint
If you believe that the processing of your personal data violates the GDPR or other data protection provisions, you have the right to lodge a complaint with the competent supervisory authority.
In Austria, this is:
Austrian Data Protection Authority
Barichgasse 40–42
1030 Vienna
Austria
Email: dsb@dsb.gv.at
15. Changes to this Privacy Policy
We may amend this Privacy Policy if our website, the services used, or the legal requirements change. The current version published on our website shall apply.
