Skip to content
Legal

Privacy Policy.

This policy explains which personal data we process when you visit this website or contact us, for what purpose, on which legal basis, for how long, and which rights you have.

Applies to https://bestforent.at and https://www.bestforent.at. Effective 30 September 2026.

1. Controller

Bestforent Holding GmbH
Gentzgasse 10/6/16, 1180 Vienna, Austria
Commercial register: FN 573566 F, Commercial Court of Vienna
VAT ID: ATU78021089
Managing Director: Dr. Seid Maglajlic
Email: office@bestforent.at

Bestforent Holding GmbH (hereinafter “Bestforent Holding”, “we”) is the controller within the meaning of Art. 4(7) GDPR for all processing described in this policy. For any question about data protection, please write to the email address above.

We process personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR), the Austrian Data Protection Act (DSG) and the Austrian Telecommunications Act (TKG 2021).

2. Contact form and email enquiries

When you send us an enquiry through the contact form, we process the details you provide: name, company (optional), email address, subject, your message, the language of the page and the time of submission. If you write to us by email, we process your email address and the content of your message.

Purpose: to handle and answer your enquiry and any follow-up.

Legal basis: Art. 6(1)(b) GDPR where your enquiry relates to a contract or pre-contractual steps; otherwise Art. 6(1)(f) GDPR, our legitimate interest in answering enquiries addressed to us. Where you tick the consent box on the form, your consent under Art. 6(1)(a) GDPR applies in addition.

Processing and recipients: enquiries are stored in our content management system and forwarded to our office mailbox by email. Email delivery is handled by Resend, Inc. (USA) acting as our processor.

Retention: enquiries are deleted no later than 12 months after they have been dealt with, unless a business relationship follows, in which case the data becomes part of the contract file (see section 4). Statutory retention obligations remain unaffected.

Providing your data is voluntary; without it we cannot answer your enquiry.

3. Hosting and server logs

This website is hosted by Vercel Inc. (USA). When you access the site, technically necessary connection data – IP address, date and time of access, requested page, referrer, browser type and version, operating system – is processed in server logs in order to deliver the site and keep it secure.

Images and other media files are stored on and delivered from Amazon Web Services S3 (Amazon Web Services EMEA SARL, Luxembourg) in a data centre region within the European Union.

Legal basis: Art. 6(1)(f) GDPR, our legitimate interest in a secure and functioning website.

Retention: server logs are retained for [14 days] and then deleted, unless a security incident requires longer retention.

4. Clients, suppliers and business partners

If you are, or represent, a client, supplier or business partner of Bestforent Holding, we process the contact and contract data required to prepare, perform and document the contract and to comply with commercial and tax law.

Legal basis: Art. 6(1)(b) GDPR (contract) and Art. 6(1)(c) GDPR (legal obligations, in particular accounting and tax law).

Retention: for the statutory retention period under Austrian commercial and tax law, generally seven years from the end of the financial year concerned.

5. Analytics

We use Google Analytics (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) only if you have given your consent in the cookie banner. Without consent, Google Analytics is not loaded and no analytics cookies are set. IP addresses are anonymised before storage. Google may transfer data to Google LLC in the USA; this transfer is covered by the EU–US Data Privacy Framework and the EU Standard Contractual Clauses.

Legal basis: your consent, Art. 6(1)(a) GDPR and § 165(3) TKG 2021.

You can change or withdraw your consent at any time, with effect for the future, via “Cookie Settings” in the footer of this website. Further information: https://policies.google.com/privacy.

6. Cookies and local storage

Apart from analytics cookies set after consent, this website uses only the following:

  • “locale” cookie – remembers your language preference (English or German) for one year. It is set when you switch the language. Legal basis: § 165(3) TKG 2021 (strictly necessary to provide a service you have requested) and Art. 6(1)(f) GDPR.
  • Consent decision – your choice in the cookie banner is stored in your browser’s local storage, not in a cookie, and is not transmitted to us.

You can delete cookies and local storage at any time in your browser settings.

7. Recipients and transfers to third countries

We disclose personal data only where necessary and only to:

  • our processors named above (Vercel, Amazon Web Services, Resend, Google), who act on our documented instructions under data processing agreements pursuant to Art. 28 GDPR;
  • our bookkeeping and tax advisers, insofar as required for accounting and tax purposes;
  • our legal advisers, where necessary to establish, exercise or defend legal claims;
  • public authorities, where we are legally required to do so.

We do not sell personal data.

Vercel and Resend are established in the USA. Transfers to them are based on the EU–US Data Privacy Framework where the provider is certified, and otherwise on the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR). Copies of the relevant safeguards are available on request.

8. No automated decision-making

We do not use personal data for automated decision-making or profiling within the meaning of Art. 22 GDPR.

9. Your rights

Under the GDPR you have the right to:

  • access the personal data we hold about you (Art. 15);
  • rectification of inaccurate or incomplete data (Art. 16);
  • erasure where there is no longer a legal basis for processing (Art. 17);
  • restriction of processing in certain circumstances (Art. 18);
  • data portability of data you provided to us, in a structured, machine-readable format (Art. 20);
  • object to processing based on legitimate interests, on grounds relating to your particular situation (Art. 21);
  • withdraw consent at any time with effect for the future, without affecting the lawfulness of processing carried out before withdrawal (Art. 7(3)).

To exercise your rights, please write to office@bestforent.at. We may ask you to verify your identity before responding.

10. Supervisory authority

If you believe that the processing of your data infringes data protection law, you have the right to lodge a complaint with a supervisory authority. In Austria this is the Österreichische Datenschutzbehörde, Barichgasse 40–42, 1030 Vienna, https://www.dsb.gv.at/.

11. Changes to this policy

We may update this policy when our website, our processing or the law changes. The current version is always published at this address; the effective date at the top is updated accordingly.