Privacy policy

Last updated: October 2026

We take the protection of your data seriously and process it exclusively on the basis of the statutory provisions (General Data Protection Regulation – GDPR, Austrian Data Protection Act – DSG, Austrian Telecommunications Act 2021 – TKG 2021). In this privacy policy we inform you which data we process when you visit our website, for what purpose and on what legal basis.

Controller

Agentur SO.UL GmbH (oha! digital)
Imbergstrasse 25 / Ostflügel
5020 Salzburg, Österreich
Email: hello@oha.digital
Tel.: +43 660 9461886

Hosting and server log files

This website is hosted by Framer B.V., Rozengracht 207B, 1016 LZ Amsterdam, the Netherlands. When the website is accessed, Framer processes technically necessary data on our behalf in order to deliver the page and ensure its security: IP address, date and time of access, page accessed, referrer URL, browser type and version, operating system and volume of data transferred (server log files). We do not evaluate this data in a way that relates to individuals.

Framer uses service providers that may also process data outside the EU, in particular in the USA. The transfer takes place on the basis of the EU-US Data Privacy Framework or EU standard contractual clauses. A data processing agreement is in place with Framer. The legal basis is our legitimate interest in the secure and stable provision of the website (Art. 6(1)(f) GDPR). Privacy policy: https://www.framer.com/legal/privacy-statement/

Contact form and email

If you write to us via the contact form or by email, we process the data you provide to us (e.g. name, email address, company, telephone number and your message) in order to answer your enquiry. The form is submitted via Framer’s form function. The legal basis is the performance of pre-contractual measures (Art. 6(1)(b) GDPR) or our legitimate interest in answering your enquiry (Art. 6(1)(f) GDPR). We store your data for as long as is necessary for processing and then delete it, unless statutory retention obligations apply.

Cookies and consent

We use technically necessary storage without consent (§ 165(3) TKG 2021). This includes your selection in the cookie banner, which we store in your browser for 12 months (local storage, entry “oha_consent”), and – if you use them – your settings in the “Accessibility” menu (entry “oha_a11y”). Neither entry leaves your browser.

We only load all other services for audience measurement and marketing after you have given your consent in the cookie banner. No connection to these providers is established beforehand. The legal basis is your consent (Art. 6(1)(a) GDPR, § 165(3) TKG 2021). You can withdraw or change your consent at any time with effect for the future – via the “Cookie settings” link in the footer or directly here: Open cookie settings

We distinguish between two categories:

Statistics: Google Analytics 4
Marketing: Google Ads (conversions and remarketing via the link with Google Analytics), Meta Pixel, LinkedIn Insight Tag, SalesViewer®

Google Analytics 4 (statistics, only with consent)

We use Google Analytics 4 from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, to understand how our website is used (e.g. pages accessed, time spent, origin of visits, type of device). Google Analytics sets cookies for this purpose. IP addresses are not stored in GA4. Data may be transferred to Google LLC in the USA in the process; Google is certified under the EU-US Data Privacy Framework. We use Google Consent Mode v2: without your consent, Google Analytics is not loaded. The analytics data is automatically deleted after the retention period set in Google Analytics (no more than 14 months) has expired. Privacy policy: https://policies.google.com/privacy

Google Ads (marketing, only with consent)

We use Google Ads from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Our Google Analytics account is linked to Google Ads: if you consent to the Marketing category, conversions (e.g. a submitted enquiry) are transmitted to Google Ads so that we can measure the effectiveness of our advertisements, and we can show advertisements again later to visitors to our website (remarketing). Without this consent, no data is passed on to Google Ads for advertising purposes (Google Consent Mode v2). Data may be transferred to Google LLC in the USA in the process; Google is certified under the EU-US Data Privacy Framework. The legal basis is your consent (Art. 6(1)(a) GDPR). Privacy policy: https://policies.google.com/privacy, ad settings: https://adssettings.google.com

Meta Pixel (marketing, only with consent)

We use the Meta Pixel from Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland. With it, we measure the effectiveness of our advertisements on Facebook and Instagram and can show suitable advertisements there later to visitors to our website (remarketing). Meta may link the data to your Meta account and may also transfer it to the USA; Meta is certified under the EU-US Data Privacy Framework. We are jointly responsible with Meta for the collection and transmission (Art. 26 GDPR). Privacy policy: https://www.facebook.com/privacy/policy/

LinkedIn Insight Tag (marketing, only with consent)

We use the LinkedIn Insight Tag from LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. It provides us with anonymised analyses of the visitors to our website (e.g. industry, position, company size), measures the effectiveness of our LinkedIn advertisements and enables remarketing on LinkedIn. Data may be transferred to the USA in the process; LinkedIn is certified under the EU-US Data Privacy Framework. Privacy policy: https://www.linkedin.com/legal/privacy-policy

SalesViewer® (marketing, only with consent)

We use the SalesViewer® technology of SalesViewer® GmbH, Germany. It uses the IP address to recognise which companies visit our website and serves marketing and sales purposes. The data is pseudonymised by means of a non-reversible one-way function (hashing) and is not used to identify individual persons. The data is deleted as soon as it is no longer required for this purpose. Privacy policy: https://www.salesviewer.com/de/datenschutzerklarung

Embedded third-party content

Some pages contain content from other providers. When this content is loaded, your IP address is transmitted to the respective provider, because it could not otherwise send the content to your browser. The providers may set their own cookies. The legal basis is our legitimate interest in an appealing presentation of our content (Art. 6(1)(f) GDPR).

Instagram posts (in our references) from Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland. Privacy policy: https://privacycenter.instagram.com/policy
Spotify (podcast episodes on the Press page) from Spotify AB, Regeringsgatan 19, 111 53 Stockholm, Sweden. Privacy policy: https://www.spotify.com/at/legal/privacy-policy/
Calendly (appointment booking on the Contact page) from Calendly LLC, 115 E Main St, Ste A1B, Buford, GA 30518, USA. If you book an appointment, your details (e.g. name, email address, appointment) are transmitted to Calendly and processed there for appointment management. Calendly is certified under the EU-US Data Privacy Framework. The legal basis for the booking is the performance of pre-contractual measures (Art. 6(1)(b) GDPR). Privacy policy: https://calendly.com/privacy
jsDelivr (display of the Impact Report on the Sustainability page): To page through the PDF, we load the open-source library pdf.js via the content delivery network jsDelivr. Your IP address is transmitted in the process. Privacy policy: https://www.jsdelivr.com/terms/privacy-policy-jsdelivr-net

Social media links

In the navigation and in the footer, we link to our profiles on Facebook, Instagram, LinkedIn, TikTok and YouTube. These are simple links: only when you click on them are you forwarded to the respective network, which then processes its own data.

Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection, as well as the right to withdraw any consent given at any time. To do so, simply write to us at hello@oha.digital.

If you believe that the processing of your data violates data protection law, you can lodge a complaint with the supervisory authority. In Austria, this is the Datenschutzbehörde (Austrian Data Protection Authority), Barichgasse 40–42, 1030 Wien, https://www.dsb.gv.at