Privacy Policy

The protection of your personal data is important to us. Here you can find out which data we process when you use our website and when you contact us, for what purposes this is done and what rights you have.

Controller

Training & Coaching Rox GmbH
11 Wiener Straße
4470 Enns, Austria
Managing Director: Gregor Minichberger

Email: office@rox-sales.com
Telephone: +43 664 642 6485

If you have any questions about data protection or wish to exercise your rights, you can contact us using these contact details. This statement refers to our website and the contact methods described here.

Hosting and technical provision

Our website is hosted by ALL-INKL.COM, Neue Medien Münnich, proprietor René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany. Information about the service provider can be found in the Legal notice of ALL-INKL.

When accessing the website, data is processed that is necessary for the transmission of the requested content and for technical operation. This includes, in particular, your IP address, the requested page or file, the time of access, as well as technical details about the connection and the browser used.

The technical access logs maintained during hosting are used for 30 days stored and subsequently deleted.

We do not use any additional visitor statistics from the hosting provider all-inkl. The separate visitor analysis using Google Analytics is described further down.

The processing serves to provide the website, detect and rectify errors, and prevent abusive access. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in the secure and reliable operation of our online services. It is not possible to access the website without processing the connection data required for transmission.GDPR)

Contact

If you contact us by email or telephone, we will process the data you provide in order to handle your request. This may include your name, email address, telephone number, company, professional title, as well as the contents of your message and any documents submitted.

If your request relates to a contract with you or to pre-contractual measures taken at your initiative, processing is carried out on the basis of Article 6(1)(b) GDPR. In the case of other requests, such as communication with corporate contact persons, the legal basis is Article 6(1)(f) GDPR; our legitimate interest lies in the proper handling of business enquiries.GDPR)

Making contact is voluntary. Without sufficient information regarding your query and a means of contacting you back, we may not be able to answer your request.

Enquiries that do not result in an order are retained for up to after processing is complete 36 months , provided this is necessary for the comprehensible documentation of the communication or for the establishment, exercise or defence of legal claims. If this requirement ceases to apply earlier, we will delete the data accordingly earlier. A longer retention period only occurs if specific legal obligations or the protection of legal claims require this. The principles relevant to this arise from Art. 5 para. 1 lit. e, Art. 6 para. 1 lit. f and Art. 17 GDPR.GDPR)

Enquiries regarding the „Gregor & Gregor“ programme should be directed exclusively to Gregor Minichberger. Your enquiry will not be automatically forwarded to Gregor Strobl.

Email communication with Google Workspace

We use Google Workspace for our business email communication. In particular, sender and recipient details, message content, attachments and technical communication data are processed in the process.

Our contracting partner for Google Workspace is Google Cloud EMEA Limited, Velasco, Clanwilliam Place, Dublin 2, Ireland. The processing of customer data is governed by Google's Data processing terms Sorted.

We do not use any additional email archiving via Google Vault or any other archiving service. The retention of enquiries without an order is described in the „Contact“ section; for contract-related correspondence or correspondence that must be retained by law, the respective relevant purposes and obligations apply.

Google and its subcontractors may also process data outside the European Economic Area. For recorded transfers to Google LLC in the USA, Google cites the EU-U.S. Data Privacy Framework; where applicable, the contractual terms provide for further safeguards such as standard contractual clauses. Details and the relevant terms are available via Google's information on international transfers and the Data processing terms accessible.

The legal basis for processing your email is set out in the „Contact“ section. Contacting us is possible regardless of whether you consent to visitor analysis.

Maintenance, safety inspection and data backup with ManageWP

We use ManageWP for the central management, updating, security checking and backing up of our WordPress website. The provider of the ManageWP services is GoDaddy.com LLC, USA; the terms of use incorporate a Data Processing Addendum including standard contractual clauses where applicable. (ManageWP Terms of Service)

During administration and security, technical information about the website as well as files and database contents may be processed. Insofar as these contain personal data, such data may also be part of backup copies.

The additional security check serves to identify indications of malware, known vulnerabilities, and security issues on our website. During this process, technical information about the website and the results of the checks are processed. ManageWP describes the offered check areas in its Security Check documentation.

For our backups, the storage region in ManageWP is „Europe“ configured. Storage is provided via the Amazon S3 infrastructure used by ManageWP. This information refers to the selected backup storage location, not all processing operations of the service provider.

Backups created via ManageWP are kept for up to 90 days stored and subsequently removed as part of the scheduled deletion cycle. The deletion of data from the active website does not immediately result in the removal of the same data from pre-existing backup copies.

The purpose is the security, maintenance and recoverability of the website. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in fixing security vulnerabilities, preventing malfunctions and being able to restore data after technical problems.GDPR)

International data transfers may take place as part of the service provision. ManageWP provides information on the contractual guarantees in its Terms of Use and the Data Processing Addendum incorporated therein Ready.

Search engine and performance optimisation

We use Yoast SEO for search engine optimisation and WP-Optimize Premium for the technical optimisation of our WordPress website. These tools are used for preparing our content and managing the technical aspects of the website; they are distinct from the visitor analysis using Google Analytics described below.

Image editing via Yoast is not enabled. External image optimisation via reSmush.it in WP-Optimize is deactivated.

Cookies and similar technologies

Cookies are small files that are stored in the browser. Other storage technologies can also store or read information on your device.

Prior consent is required for storage and access that are not technically necessary, in particular for analytical purposes. These requirements are governed in particular by Section 165(3) of the 2021 Telecommunications Act (TKG 2021) and, in the case of personal data, by the GDPR.Austrian Data Protection Authority: Cookies)

You can view, delete and restrict the storage of cookies saved in your browser. However, a general permission for cookies in your browser settings does not replace consent for specific analytical processing.Austrian Data Protection Authority: Cookies)

Managing your consent with Real Cookie Banner

We use the WordPress plugin „Real Cookie Banner“ from devowl.io GmbH to obtain, save and prove your consent to cookies and comparable technologies. The plugin is operated on our web space; the records of consent are saved in our website's database and are not transmitted to the plugin manufacturer during normal operation.Real Cookie Banner: Data processing)

In particular, your selection and any changes to it, the date and time, a consent identifier, the banner version displayed in each case, the page address accessed, and technical details regarding the browser viewport are processed. For documentation purposes, interactions with the banner—such as the button clicked—and hash values derived from truncated IP addresses to prevent abuse may also be processed. The interaction documentation of the plugin relates to the banner or associated consent elements, not your general behaviour on our website.Real Cookie Banner: Data processing)

The optional storage of your full IP address along with the proof of consent is disabled in Real Cookie Banner. This is to be distinguished from the previously described hash values from truncated IP addresses and the technically necessary processing of connection data when accessing our website.Real Cookie Banner: Data processing)

To recognise your selection, a cookie with the name prefix Real Cookie Banner for up to 180 days Saved. In the event of significant changes, a new query may be required earlier. The plugin can also temporarily store your selection in the local browser storage until the documentation on the server is complete.Real Cookie Banner: Functionality and Browser Storage)

The lifespan of this browser cookie is to be distinguished from the retention of the record of consent in our database. For documented consents, automatic deletion is scheduled after 36 months recruited. These records serve to document your decision and to fulfil our accountability obligations in accordance with Article 5(2) and Article 7(1) of the GDPR. The 36-month period is our defined retention period and not a period explicitly prescribed by the GDPR.GDPR)

The legal basis is Article 6(1)(c) of the GDPR, insofar as the processing serves to fulfil our statutory obligations to provide evidence, and additionally Article 6(1)(f) of the GDPR for the reliable management of your selection and the prevention of misuse. The storage on your device that is strictly necessary for this function takes place in accordance with the exception for technically necessary storage pursuant to Section 165(3) of the Telecommunications Act 2021 (TKG 2021).GDPR, Data protection authority: Cookies)

Providing this information is not contractually required and is not necessary for the conclusion of a contract. However, without the necessary processing, we cannot reliably save and prove your choices. You can also use our website without consenting to statistical analysis.

Change selection or withdraw consent

Via the link „Cookie settings“ at the bottom of each page you can reopen your selection, change it and revoke any consent given with effect for the future. Alternatively, you can Open cookie settings here. The withdrawal does not affect the lawfulness of the processing prior to its receipt.Real Cookie Banner: Settings links, Art. 7 GDPR)

Google Analytics 4 and Google Site Kit

We use Google Analytics 4 to statistically evaluate the usage of our website and to improve our content. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.Google Analytics Terms of Service, Google Legal Notice)

Analytics will only be loaded if you consent to the „Statistics“ category or the „Google Analytics 4“ service in the cookie banner. Without consent, the service will not be loaded. Google Site Kit remains in use to manage the connection and display reports in the WordPress administration area; its direct analytics code output is deactivated. Instead, the integration on the website is handled by Real Cookie Banner following your consent. (Real Cookie Banner: integration after consent, Site Kit: Managing code output)

Google Analytics processes information about accessed pages, timestamps and interactions, as well as technical data regarding the browser, device, language and screen. In addition, there are pseudonymous visitor and session IDs; when a connection to Google is established, the IP address is also technically transmitted.

For automated event measurement, we use page views, scroll events, clicks on external links, and clicks on file downloads. The additional automatic collection of site searches, video interactions, and form interactions is disabled. Google describes how these events work at „Events for optimised analytics“.

Google Signals and the collection of user-provided data are deactivated in our Analytics configuration; the latter also applies to the corresponding function in the Google tag. Our Analytics property is linked to a Google Ads account. Use for personalised ads is deactivated both for all regions at property level and in this Ads link. Information on these settings can be found at Google at Google Signals, user-provided data and Ad personalisation.

As additional protection, we have activated the automatic removal of detected email addresses from the measurement data prior to their transmission. This pattern-based function does not replace careful design of our data collection and does not necessarily recognise every piece of personally identifiable information.Google: Data removal)

The following cookies are used for this purpose on our website:

Biscuit	Purpose	Cancelled term
_ga	Distinguishing between returning browsers for statistical analysis	Up to 365 days
_ga_DPZ81VNYQ8	Session state storage for Google Analytics 4	Up to 365 days

In our integration, the cookie lifespan is limited to 365 days; automatic renewal on each page view is deactivated. Browser settings or premature deletion can lead to a shorter storage duration. Google documents the settings used for this. cookie_expires and cookie update in his Configuration reference.

The legal basis for the analysis of personal data is consent pursuant to Art. 6(1)(a) GDPR; for the storage of and access to non-essential information on your device, Section 165(3) of the 2021 Telecommunications Act (TKG 2021) also applies. Consent can be withdrawn at any time with effect for the future; the lawfulness of the processing carried out prior to the withdrawal remains unaffected.GDPR, Data protection authority: Cookies)

To cancel, open the Cookie settings, disable the statistics selection and save your decision. Our integration then prevents any further analytics transmissions for this measurement ID and deletes the two aforementioned analytics cookies on our website. The revocation does not trigger the automatic deletion of data already lawfully transmitted to Google; you can contact us to exercise your data protection rights. (Google: disable Analytics, Real Cookie Banner: Change consent)

Google may also process data in the USA and other countries outside the European Economic Area. For recorded transfers to the USA, Google relies on the EU-U.S. Data Privacy Framework; for other relevant transfers, standard contractual clauses may be used. The respective information and contract terms are available via Google's information on international transfers as well as the Data Processing Terms accessible.

The storage of analytics cookies must be distinguished from the retention of user and event data stored with Google. For user and event data, we each have a retention period of 14 months Set. Resetting the user data retention period upon new user activity is disabled. These retention settings do not apply to default aggregated reports.Google Analytics: Data retention)

Links to other websites

Our website contains links to other websites, in particular to LinkedIn. If you follow such a link, you will leave our website; the information provided by the respective provider applies to the processing on the target page.

Retention period

We do not retain personal data for any longer than is necessary for the respective purpose, provided there are no statutory retention obligations or other legal grounds to the contrary. Decisive factors in particular include the processing of an enquiry, existing contractual relationships, statutory documentation obligations, and the establishment, exercise or defence of legal claims.Art. 5 and 17 GDPR)

Technical logs and backup copies are subject to their own deletion and retention cycles. Deletion from the active system therefore does not necessarily mean that the same data has already been removed from all backup copies.

Your rights

Subject to the statutory requirements, you have the following rights:

• Information You can request information about the processing of your personal data and a copy of this data.
• Correction: You can have incorrect data corrected and incomplete data completed.
• Deletion: You can request the erasure of your data, provided there are no statutory exceptions to the contrary.
• Restriction: Subject to statutory conditions, you can request the restriction of processing.
• Data portability: In the case of automated processing based on consent or a contract, you may receive the data you have provided in a structured, commonly used and machine-readable format and, where applicable, request its transmission.
• Cancellation: You can withdraw granted consent at any time for the future.

These rights and their conditions arise in particular from Articles 7 and 15 to 20 of the GDPR. To exercise your rights, please contact office@rox-sales.com; if there are reasonable doubts regarding identity, we may request additional information for secure verification.GDPR)

Right to object

Insofar as we process your data on the basis of legitimate interests pursuant to Art. 6(1)(f) GDPR, you may object for reasons arising from your particular situation. We will then no longer process the data unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.Art. 21 GDPR)

You may object to the processing of your personal data for direct marketing purposes at any time without giving specific reasons. This also applies to profiling associated with it.Art. 21 GDPR)

Right of complaint

If you consider that the processing of your data infringes data protection law, you can lodge a complaint with a data protection supervisory authority. The authority responsible in particular is the one at your habitual residence, your place of work or the place of the alleged infringement.Art. 77 GDPR)

In Austria, you can contact the Data Protection Authority at the following address:

Austrian Data Protection Authority
Barichgasse 40–42
1030 Vienna
Email: dsb@dsb.gv.at
Contact details of the data protection authority

Last updated

As of 23 September 2026.

We adapt this privacy policy when our website or the processing operations described change. The current version is available on this page.