Privacy information

1. Data Controller and Contact Information

The entity responsible for the processing of personal data on this website within the meaning of Article 4(7) of the GDPR is:

JAWA Management Software GmbH
Liebenauer Hauptstraße 65
8041 Graz, Austria

Phone: +43 316 403274-0
Email: office@jawa.at

Please send any inquiries regarding data protection and the exercise of your rights to this address.

2. Scope of Application

This privacy notice informs you about what personal data we process, for what purposes, and on what legal basis. It applies to:

– Visits to our website jawa.at
– Inquiries submitted via our contact and demo form
– Email campaigns sent to customers and prospects
– Job applications
– Our business relationships with customers, suppliers, and prospects
– Our company page on LinkedIn

Personal data refers to any information relating to an identified or identifiable natural person, such as a name, email address, or IP address.

Websites operated by other providers that we link to are subject to their own privacy policies.

3. Hosting and Server Log Files

Our website is hosted by internex GmbH, Lagerstraße 15, 3950 Gmünd, Austria. The provider processes the data exclusively on our behalf and on the basis of a data processing agreement pursuant to Article 28 of the GDPR. The servers are located in Austria.

When you visit our website, your browser automatically sends the following data to the server:

– IP address
– Date and time of access
– Page accessed and amount of data transferred
– Access status (HTTP status code)
– Previously visited page (referrer)
– Browser type, browser version, and operating system

This data is technically necessary to deliver the website and ensure its stability and security. The legal basis is our legitimate interest pursuant to Article 6(1)(f) of the GDPR. The log files are deleted as soon as they are no longer needed for this purpose.

4. Cookies and Consent

Cookies are small text files that are stored in your browser when you visit our website. We use them in four categories:

– Necessary: for the technical operation of the website and to save your cookie preferences
– Functional: for third-party features, such as those from LinkedIn
– Analytics: to analyze website usage
– Advertising: to measure and optimize our advertising campaigns

We set necessary cookies based on Section 165(3) of the TKG 2021 and our legitimate interest pursuant to Article 6(1)(f) of the GDPR. We set all other cookies only with your consent pursuant to Article 6(1)(a) of the GDPR in conjunction with Section 165(3) of the TKG 2021.

We manage your consent using the CookieYes consent management tool provided by CookieYes Limited, 3 Warren Yard, Warren Park, Stacey Bushes, Milton Keynes, MK12 5NW, United Kingdom. CookieYes stores your selection in the “cookieyes-consent” cookie for one year.

A complete overview of all cookies, including the provider, purpose, and storage duration, can be found in the cookie settings, which you can access at any time via the link in the footer. There, you can change or withdraw your consent. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

5. Google reCAPTCHA

We use Google reCAPTCHA to protect our forms from spam and automated access. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

reCAPTCHA checks whether an input comes from a human or an automated program. To do this, the service analyzes, among other things, the IP address, browser and device information, session duration, and mouse and keyboard inputs. This data is transmitted to Google.

The legal basis is our legitimate interest under Article 6(1)(f) of the GDPR to protect our website and forms from misuse. Information is stored in your browser in accordance with Section 165(3) of the TKG 2021, to the extent that it is strictly necessary for this purpose.

Google also processes data in the United States. For information on data transfers, see Section 13. For more information on Google’s data processing, visit https://policies.google.com/privacy.

6. Google Analytics 4

With your consent, we use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics analyzes how visitors use our website. This includes pages viewed, time spent on the site, referral sources, approximate location, and device and browser information. We use these analytics to improve the content and structure of our website.

Google Analytics 4 does not store full IP addresses. The IP address is used only to determine the approximate location and is then discarded.

Google Analytics sets the “_ga” and “_ga_*” cookies, each with a retention period of 13 months. The usage data collected is automatically deleted after 14 months.

The legal basis is your consent pursuant to Article 6(1)(a) of the GDPR in conjunction with Section 165(3) of the TKG 2021. You may withdraw your consent at any time via the cookie settings.

Google also processes data in the United States. For information on data transfers, see Section 13. For more information, visit https://policies.google.com/privacy.

7. LinkedIn Insight Tag

With your consent, we use the LinkedIn Insight Tag, a service of LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland.

The Insight Tag collects data about your visit to our website, including the URL, referrer URL, IP address, device and browser characteristics, and timestamps. We use this data to evaluate the reach and impact of our advertising on LinkedIn and to serve you relevant ads on LinkedIn. We receive the analytics exclusively in aggregated form and cannot identify individual visitors based on this data.

In this context, LinkedIn sets the cookies “li_gc,” “lidc,” and “bcookie.”

The legal basis is your consent pursuant to Article 6(1)(a) of the GDPR in conjunction with Section 165(3) of the TKG 2021. You may withdraw your consent at any time via the cookie settings.

LinkedIn also processes data in the United States. For information on data transfers, see Section 13. For more information, please refer to LinkedIn’s Privacy Policy at https://de.linkedin.com/legal/privacy-policy.

8. LinkedIn Company Page

We maintain a company page on LinkedIn at https://www.linkedin.com/company/jawa-management-software-gmbh/. There, we provide information about our company, our products, and current topics.

When you visit or interact with our page, LinkedIn processes personal data and provides us with statistics on the use of our page, known as Page Insights. We receive these statistics exclusively in aggregated form. We are unable to identify individual persons based on this information.

With regard to processing in connection with Page Insights, we are joint controllers with LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland, pursuant to Article 26 of the GDPR. You can find the key provisions of the agreement at https://legal.linkedin.com/pages-joint-controller-addendum.

LinkedIn bears primary responsibility for processing Page Insights data and for fulfilling the rights of data subjects. You may exercise your rights with either us or LinkedIn.

The legal basis for our website and the analysis of statistics is our legitimate interest in public image and market communication pursuant to Article 6(1)(f) of the GDPR.

For more information, please see LinkedIn’s Privacy Policy at https://de.linkedin.com/legal/privacy-policy.

9. Contact and Demo Form

You can use our forms to send us inquiries or request a demo appointment. Required fields are marked as such. We cannot process your request without this information.

We process the data you provide, which typically includes your name, company, email address, phone number, and your message. We also collect technical data such as your IP address and the time the message was sent.

Your information will be stored in our website’s database and also forwarded via email to the appropriate department within our company.

The legal basis is Article 6(1)(b) of the GDPR, to the extent that your inquiry relates to the conclusion or initiation of a contract; otherwise, it is our legitimate interest in responding to your inquiry pursuant to Article 6(1)(f) of the GDPR.

We will delete the data as soon as your request has been fully processed and there are no legal retention requirements that prevent us from doing so. We process information used in the course of further business negotiations in accordance with Section 12.

To protect the forms from automated access, we use Google reCAPTCHA; see Section 5.

10. Email mailings with Brevo

We send emails with information about our products, events and innovations to customers and interested parties.

For shipping, we use Brevo, a service provided by Brevo GmbH, Köpenicker Str. 126, 10179 Berlin, Germany. Brevo processes your data exclusively on our behalf based on a data processing agreement in accordance with Article 28 of the GDPR. The data is processed on servers located within the European Union.

We process your email address, name, company, and job title, to the extent that you have provided this information to us. Brevo also tracks whether an email has been opened and which links within it have been clicked. We use this data to tailor our content to the recipients’ interests.

The legal basis is your consent pursuant to Article 6(1)(a) of the GDPR; for existing customer relationships, it is our legitimate interest in direct marketing pursuant to Article 6(1)(f) of the GDPR in conjunction with Section 174(3) of the TKG 2021.

You may object to receiving these communications at any time or withdraw your consent by clicking the unsubscribe link in each email or by sending an informal request to office@jawa.at. Withdrawal does not affect the lawfulness of processing prior to withdrawal. After you unsubscribe, we will add your email address to a block list to prevent further mailings.

For more information, please see Brevo’s Privacy Policy at https://www.brevo.com/de/legal/privacypolicy/.

11. Job Applications

When you apply for a position with us, we process the data you provide to us. This typically includes your name, contact information, cover letter, resume, transcripts, and any other documents you provide to us.

We process this data solely for the purpose of conducting the application process. The legal basis is Article 6(1)(b) of the GDPR, as the processing is necessary for the decision regarding the establishment of an employment relationship and, therefore, for pre-contractual measures.

If you are not hired, we will delete your documents six months after the conclusion of the application process. This time limit serves to protect against any potential claims arising from the rejection. The legal basis is our legitimate interest pursuant to Article 6(1)(f) of the GDPR.

With your express consent, we will add your application materials to our applicant database for three years so that we can contact you again when suitable positions become available. The legal basis for this is Article 6(1)(a) of the GDPR. You may withdraw this consent at any time.

12. Data from customers, suppliers and prospects

As part of our business activities, we process personal data of contact persons at customers, suppliers, and prospective clients. This includes name, function, company, contact details, and information about the course of our business relationship.

We process this data to initiate and fulfill contracts, to provide customer service, and to provide information about our products and services.

We also collect data from prospective customers as part of our sales activities, such as at trade shows, events, or from publicly available sources like company websites and professional networks. The legal basis for this is our legitimate interest in initiating business relations pursuant to Article 6(1)(f) of the GDPR. If we do not collect data directly from you, we will inform you of its source when we first contact you.

The legal basis is, moreover, Article 6(1)(b) of the GDPR for the initiation and fulfillment of contracts, as well as our legitimate interest in direct marketing and customer service pursuant to Article 6(1)(f) of the GDPR. To the extent that statutory retention obligations apply, we process the data on the basis of Article 6(1)(c) of the GDPR.

You may object to the processing of your data for advertising purposes at any time by sending an informal request to office@jawa.at.

13. Transfer to Third Countries

Some of the services we use also process data outside the European Union, particularly in the United States. This applies to the Google and LinkedIn services mentioned in sections 5, 6, 7, and 8.

On July 10, 2023, the European Commission issued an adequacy decision for the United States—the EU-U.S. Data Privacy Framework. Companies that have obtained certification under this framework ensure a level of data protection equivalent to that of the European Union. Google LLC and LinkedIn Corporation are certified under the Data Privacy Framework. The legal basis for the transfer is therefore Article 45(1) of the GDPR.

In addition, we have agreed on standard contractual clauses with these providers in accordance with Article 46(2)(c) of the GDPR.

Despite these safeguards, it cannot be completely ruled out that U.S. authorities may access the data that is transmitted. Please take this into account when giving your consent.

14. Retention Period

We retain personal data only for as long as necessary for the respective purpose or as required by statutory retention obligations. The retention periods for individual processing activities are specified in the respective sections. In addition:

– Inquiries submitted via our forms: Deletion after final processing, provided no business relationship is initiated
– Data for marketing and customer service purposes: Deletion three years after the last contact
– Contract data: Stored until the expiration of the statutory retention, warranty, statute of limitations, and product liability periods; beyond that, until the resolution of any legal disputes in which the data is required as evidence

At your request, we will also delete your data before these time limits expire, provided there is no legal obligation to the contrary.

15. Data Security

We implement technical and organizational measures to protect your data against loss, destruction, tampering, and unauthorized access. These measures include encrypted transmission via TLS, access restrictions limited to what is necessary, and regular updates to our systems. We continuously adapt our measures to reflect the latest technological advancements.

For further information regarding the nature and scope of these measures, please feel free to contact us in writing.

16. Your Rights

As a data subject, you have the following rights:

– Right of Access (Art. 15 of the GDPR): You may request information regarding whether we process data about you and, if so, what data we process.
– Rectification (Art. 16 of the GDPR): You have the right to request the correction of inaccurate data and the completion of incomplete data.
– Erasure (Art. 17 of the GDPR): You may request the erasure of your data, provided that the legal requirements are met.
– Restriction of processing (Art. 18 GDPR): You may request that we restrict the processing of your data.
– Data portability (Art. 20 of the GDPR): You may request that we provide you with the data you have provided to us in a commonly used format.
– Objection (Art. 21 GDPR): You may object to processing that we base on a legitimate interest for reasons related to your particular situation. You may object to processing for the purpose of direct marketing at any time and without providing a reason.
– Withdrawal of Consent (Art. 7(3) GDPR): You may withdraw your consent at any time. The withdrawal does not affect the lawfulness of the processing carried out prior to the withdrawal.

To exercise your rights, simply send an informal message to office@jawa.at. For your protection, we will verify your identity in an appropriate manner before providing any information. We will respond promptly, no later than one month after receiving your request.

Right to File a Complaint

If you believe that we have violated data protection laws in our processing of your data, you may file a complaint with a supervisory authority. In Austria, this is the

Austrian Data Protection Authority
Barichgasse 40–42
1030 Vienna
dsb@dsb.gv.at

17. Effective Date

We update this Privacy Policy when our data processing practices or the legal framework change. The version published on this page is always the current one.

As of October 2026