AI & Business1. Controller
TACD Solutions GmbH
Aspernstraße 68/31
1220 Vienna, Austria
Email: info@tacd-solutions.com
Telephone: +43 677 62855437
This Privacy Policy applies to tacd-solutions.com and its language versions.
2. Purpose of the website
The website is intended for business customers and professional users. It provides information about TACD Solutions GmbH, its consulting services, digital solutions and products, and allows visitors to contact us about potential projects, cooperation or services. No contract is concluded directly through the website.
3. Technical access and server logs
When you access the website, technical data may be processed automatically, including IP address, date/time, requested page or file, browser, operating system, referrer and technical security/error information.
Purpose: secure and reliable website delivery, error diagnosis, security and misuse prevention.
Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest is the secure, stable and efficient operation of the website.
Server-log data is retained only for as long as necessary for these purposes, unless longer retention is required for security investigations, legal claims or statutory obligations.
4. Hosting and IT providers
The website is hosted by helloly. We use external hosting and IT providers to operate the website. Where they act as processors, processing is governed by Art. 28 GDPR agreements.
If data is transferred outside the EEA, this takes place only in accordance with Chapter V GDPR.
5. Contact and business-enquiry forms
If you use a website form, we process the information you provide to respond to your enquiry, discuss a potential project or cooperation, or provide information about our services and solutions.
Depending on the form, this may include name, business email, telephone number, organisation, professional role, subject/message content, submission time and technical metadata required for secure form delivery.
Form submissions are processed through a Cloudflare Worker. Cloudflare Turnstile is used as a technically necessary security measure to distinguish legitimate submissions from automated misuse. Resend is used to deliver the submitted enquiry to our designated business email account. These services may process technical request and delivery data required to secure and transmit the message.
We do not use form content for unrelated marketing unless a separate lawful basis applies.
Legal basis: generally Art. 6(1)(f) GDPR, based on our legitimate interest in handling B2B enquiries and communicating with prospective customers, partners and other professional contacts. Where directly applicable to pre-contractual steps requested by the data subject, Art. 6(1)(b) GDPR may also apply.
Data is retained for as long as necessary to handle the enquiry and any resulting business relationship. If no business relationship results, data is deleted once it is no longer reasonably needed for follow-up, documentation or legal claims, unless statutory retention duties require longer storage.
Further information: Cloudflare Privacy Policy and Resend Privacy Policy.
6. Google Tag Manager and Google Analytics 4
Subject to your consent, we use Google Tag Manager and Google Analytics 4 (GA4) to understand website usage and improve content, usability and performance.
Provider for EEA customers:
Google Ireland Limited
Gordon House, Barrow Street
Dublin 4, Ireland
The implementation uses Google Tag Manager container GTM-58875S5R and GA4 measurement ID G-ES4RTHSG8E. GA4 may process page views, approximate geographic information, browser/device information, referral source, session/interactions, pseudonymous identifiers and configured website events.
We do not intentionally send names, email addresses, phone numbers, free-text form content or other directly identifying form data to GA4. Advertising storage, advertising user data and advertising personalisation remain disabled; no advertising or remarketing functions are configured.
Google states that for users in the EU, Switzerland and the UK, IP addresses are not logged or stored by Google Analytics; IP information may be used temporarily to derive coarse geographic information before being discarded.
Legal basis: consent under Art. 6(1)(a) GDPR and § 165(3) Austrian Telecommunications Act 2021 (TKG 2021).
Analytics is not loaded before consent. You can withdraw consent at any time through the website's .
Further information: Google Privacy Policy, Google Analytics privacy information and Google data-transfer frameworks.
Google may process data outside the EEA, including in the United States. Google states that recognised transfer mechanisms are used, including the EU-U.S. Data Privacy Framework where applicable and contractual safeguards for restricted transfers.
7. Cookies, local storage and consent
Technically necessary cookies or similar technologies may be used where required for a function expressly requested by the user, including website and form security.
Non-essential technologies, including analytics, are activated only after consent. You can reject non-essential technologies, withdraw consent and change your settings at any time through the website's .
Your consent selection is stored locally in your browser under the key tacd-consent for up to 180 days, unless you change it earlier, clear your browser storage or a new consent version is required.
Legal basis for consent-based processing: Art. 6(1)(a) GDPR together with § 165(3) TKG 2021.
8. Locally hosted fonts and external links
The Manrope typeface is hosted locally on this website. Loading the font does not require a connection to Google Fonts or another external font provider.
The website may contain normal links to third-party websites or services, including professional networks and partner websites. If you follow such a link, the third party is responsible for its own processing. A normal external link does not itself transmit your form content to the linked provider.
9. Recipients
Depending on the processing activity, data may be made available to hosting/infrastructure providers, IT providers, email/communication providers, form-processing providers, analytics providers subject to consent, and professional advisers or authorities where legally required. We do not sell personal data.
10. International transfers
Transfers outside the EEA take place only where a lawful mechanism under Chapter V GDPR exists, for example an adequacy decision, the EU-U.S. Data Privacy Framework for certified recipients, Standard Contractual Clauses, or another permitted safeguard.
11. Retention
Personal data is retained only for as long as necessary for the relevant purpose or statutory/legal-protection requirements. Analytics data is retained according to the GA4 retention settings and only where analytics consent has been granted.
12. Your rights
Subject to the legal requirements, you have rights of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability where applicable (Art. 20), objection (Art. 21) and withdrawal of consent with future effect (Art. 7(3)).
Contact: info@tacd-solutions.com
13. Complaint
You may lodge a complaint with a competent supervisory authority.
Austrian Data Protection Authority
Barichgasse 40–42
1030 Vienna, Austria
Email: dsb@dsb.gv.at
Telephone: +43 1 52 152-0
dsb.gv.at
14. Automated decisions and security
We do not use website data for solely automated decisions producing legal or similarly significant effects within Art. 22 GDPR.
We use appropriate technical and organisational measures to protect personal data. Website communication uses TLS/HTTPS.
15. Changes
We may update this Privacy Policy if our website, processing activities or the legal framework changes.
Last updated: August 2026