The Smart Solution1. Controller
TACD Solutions GmbH
Aspernstraße 68/31
1220 Vienna, Austria
Email: info@tacd-solutions.com
Telephone: +43 677 62855437
This Privacy Policy applies to shiftix.at and its language versions.
2. Purpose of the website
The website is intended for business customers and professional users. It provides information about Shiftix and allows visitors to contact us or request a product demonstration. No contract is concluded directly through the website.
3. Technical access and server logs
When you access the website, technical data may be processed automatically, including IP address, date and time, requested page or file, browser, operating system, referrer, and technical security or error information.
Purpose: secure and reliable website delivery, error diagnosis, security and misuse prevention.
Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest is the secure, stable and efficient operation of the website.
Server-log data is retained only for as long as necessary for these purposes, unless longer retention is required for security investigations, legal claims or statutory obligations.
4. Hosting and infrastructure providers
The static website is hosted by helloly GmbH, Rainerstraße 25, 4020 Linz, Austria. The contact-form backend is operated using Cloudflare Workers, a service of Cloudflare, Inc.
These providers may process technical access, network and log data as necessary to deliver and secure the website and form service. Where a provider acts as a processor, processing is governed by an agreement under Art. 28 GDPR.
If data is transferred outside the European Economic Area (EEA), this takes place only in accordance with Chapter V GDPR, using an adequacy decision or appropriate safeguards where required. Further information is available in Cloudflare's Privacy Policy.
5. Contact and demo-request forms
If you use a contact or demo-request form, we process the information you provide to respond to your enquiry and, where requested, arrange and prepare a Shiftix demonstration.
Depending on your entries, this includes name, company, telephone number, email address, enquiry category, message content, preferred contact method, language, referring page, submission time and technical metadata required for secure form delivery.
The form is processed by Cloudflare Workers and delivered by email through Resend, a service of Plus Five Five, Inc., 2261 Market Street #5039, San Francisco, CA 94114, United States. Resend processes the submitted form information to deliver it to TACD Solutions GmbH. Further information is available in Resend's Privacy Policy and Data Processing Addendum.
We do not use form content for unrelated marketing unless a separate lawful basis applies.
Legal basis: generally Art. 6(1)(f) GDPR, based on our legitimate interest in handling B2B enquiries and communicating with prospective customers and partners. Where directly applicable to pre-contractual steps requested by the data subject, Art. 6(1)(b) GDPR may also apply.
Data is retained for as long as necessary to handle the enquiry and any resulting business relationship. If no business relationship results, data is deleted once it is no longer reasonably needed for follow-up, documentation or legal claims, unless statutory retention duties require longer storage.
6. Cloudflare Turnstile
Our contact forms use Cloudflare Turnstile to distinguish legitimate users from automated or abusive requests. When the contact page is opened, Turnstile may process technical signals such as IP address, browser and device characteristics, page and interaction information, and security-related signals. A verification token is sent with the form and validated by our Cloudflare Worker.
Purpose: protecting the forms, website and infrastructure against spam, bots and misuse.
Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest is the secure and reliable operation of the contact service. Turnstile technologies used solely for security are treated as technically necessary.
See Cloudflare's Turnstile Privacy Addendum for further information.
7. YouTube videos
The Shiftix overview pages contain demonstration videos provided by YouTube, a service of Google. YouTube content, including the preview image, remains blocked until you consent to external media. The video player is then loaded only after you actively select the video poster.
When YouTube content is requested, your browser communicates with Google. Google may receive the page URL, IP address, browser and device information, and may use cookies or similar technologies. If you are signed in to a Google account, the interaction may be associated with that account.
Purpose: providing the requested Shiftix product demonstration. Legal basis: your consent under Art. 6(1)(a) GDPR and § 165(3) Austrian Telecommunications Act 2021. You can withdraw that consent at any time through the website's privacy settings.
Provider for users in the EEA: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Further information is available in Google's Privacy Policy and its explanation of data from sites using Google services.
8. Fonts
This website uses locally hosted Manrope font files. Your browser downloads them from the same Shiftix web server as other website resources; no connection to Google Fonts is made for font delivery.
Font requests are processed as part of the normal website delivery described in Section 2 (Hosting and server logs).
9. Google Tag Manager, Google Analytics 4 and consent
We use Google Tag Manager and Google Analytics 4 (GA4) to understand website usage and improve content, usability and performance. These services are loaded for analytics purposes only after you have given the required consent.
Provider for users in the EEA: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Once activated with your consent, GA4 may process page views, approximate geographic information, browser and device information, referral source, session and interaction data, pseudonymous identifiers, and configured website events. We will not intentionally transmit names, email addresses, telephone numbers, free-text form content or other directly identifying form data to Google Analytics.
Google states that for users in the EU, Switzerland and the United Kingdom, IP addresses are not logged or stored by Google Analytics. IP information may be used temporarily to derive coarse geographic information before being discarded.
Legal basis: your consent under Art. 6(1)(a) GDPR and § 165(3) Austrian Telecommunications Act 2021. Analytics and associated non-essential storage or access will not be activated before consent. You can already reject the analytics category, withdraw consent at any time with future effect, and change your selection through the website's privacy settings.
Technically necessary cookies or similar technologies may be used without analytics consent where required for security or an expressly requested function, particularly Cloudflare Turnstile and storage of your privacy selection. The selection is stored locally in your browser for up to 180 days, unless you change it earlier, clear your browser storage or a new consent version is required. YouTube content is assigned to the optional external-media category. The consent interface identifies the current technology categories and purposes.
Google may process data outside the EEA, including in the United States. Such transfers will take place only using a mechanism permitted under Chapter V GDPR, including the EU-U.S. Data Privacy Framework where applicable or appropriate contractual safeguards.
Further information: Google Privacy Policy, Google Analytics privacy information, and Google's international data-transfer frameworks.
10. Recipients and international transfers
Depending on the processing activity, data may be made available to hosting and infrastructure providers, IT providers, email and communication providers, form and security providers, professional advisers, or authorities where legally required. We do not sell personal data.
Transfers outside the EEA take place only where a lawful mechanism under Chapter V GDPR exists, for example an adequacy decision, the EU-U.S. Data Privacy Framework for certified recipients, Standard Contractual Clauses, or another permitted safeguard.
11. Retention
Personal data is retained only for as long as necessary for the relevant purpose or statutory and legal-protection requirements. Provider-side technical and security data is retained according to the applicable service settings, contracts and legal requirements.
12. Your rights
Subject to the legal requirements, you have rights of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability where applicable (Art. 20), objection (Art. 21), and withdrawal of consent with future effect (Art. 7(3)).
To exercise your rights, contact info@tacd-solutions.com.
13. Complaint, automated decisions and security
You may lodge a complaint with a competent supervisory authority:
Austrian Data Protection Authority
Barichgasse 40–42
1030 Vienna, Austria
Email: dsb@dsb.gv.at
Telephone: +43 1 52 152-0
www.dsb.gv.at
We do not use website data for solely automated decisions producing legal or similarly significant effects within Art. 22 GDPR. We use appropriate technical and organisational measures to protect personal data, including encrypted HTTPS communication.
14. Changes
We may update this Privacy Policy if our website, processing activities or the legal framework changes.
Last updated: August 2026