As of: May 2025

1. Controller

handshake Consulting GmbH
Schulgasse 12 / Top 1
A-1180 Vienna

Tel: +43 1 4781412

Email: office@handshake.at

2. When Are We the Controller and When the Processor?

We act as the controller when we process personal data for our own purposes (e.g., website, marketing, customer data).
We act as a processor when we process data on behalf of our clients (e.g., in projects, data analyses).
For this, we have agreements in place according to Art. 28 GDPR.

3. What Data Do We Process?

4. Purposes of Processing

• Marketing, sales, campaigns

• Newsletters, direct advertising

• Lead generation and nurturing

• Website analytics and conversion optimization

• Contract fulfillment

• Operation of the website and online services

5. Legal Bases

• Consent (Art. 6 para. 1 lit. a GDPR)

• Contract performance (Art. 6 para. 1 lit. b GDPR)

• Legitimate interest (Art. 6 para. 1 lit. f GDPR)

Consent can be withdrawn at any time.

6. Cookies & Consent Management

We use cookies and similar technologies to operate our website securely and effectively, personalize content, analyze usage, and deliver targeted advertising.

We use, among others, HubSpot, Google Analytics, Facebook Pixel, and the LinkedIn Insight Tag.
Details on the cookies used can be found in the “Cookie Policy” section at the end of this privacy policy.

We use a Consent Management Tool (e.g., HubSpot Consent Tool), which allows you to:

• Actively consent to the use of non-essential cookies (opt-in)

• Change or withdraw your consent at any time

7. Recipients and Third-Party Providers

• HubSpot Germany GmbH & HubSpot Inc. (USA)

• Google Ireland Ltd. (Google Analytics)

• LinkedIn Ireland Unlimited Company (LinkedIn Insight Tag)

• Other IT, cloud service providers, agencies (upon request)

8. Data Transfers to Third Countries

Transfers to the USA (e.g., HubSpot, Google, LinkedIn) are carried out in compliance with the EU-U.S. Data Privacy Framework.
More info: https://www.dataprivacyframework.gov

9. Data Retention

We retain data only as long as necessary or legally required.
Afterward, we delete or anonymize it.
Upon request, we will delete data earlier unless legal obligations prevent this.

10. Your Rights

• Access, rectification, erasure

• Restriction of processing

• Objection (e.g., to direct marketing)

• Data portability

• Complaint to the Data Protection Authority (www.dsb.gv.at)

Data Security

We implement technical, organizational, and physical security measures.
More information: https://trust.hubspot.com

Third-Party Integrations

We use, among others, Make.com, Zapier, Google services, API connections.
Data transfers are carefully reviewed, contractually regulated, and secured.

Opt-Out of Personalized Advertising

• optout.aboutads.info

• youronlinechoices.eu

• LinkedIn Opt-out

Anti-Spam Policy

We send marketing content only with consent or legitimate interest.
Each message includes an unsubscribe link.

Handling Testimonials & Public Content

Publicly posted content (comments, testimonials) may be visible to others.

Changes to This Privacy Policy

We update this policy regularly.
We actively communicate material changes.
As of: May 2025

Appendix: Cookie Policy

Cookies are small text files stored on your device when you visit a website. They help make the website usable, secure, and efficient.
We also use similar technologies like pixels, tags, and local storage.

Why Do We Use Cookies?

• To ensure the secure operation of our website

• To analyze and improve usage

• To personalize content and advertising

• To store your cookie preferences

What Types of Cookies Do We Use?

Overview of Used Cookies (Excerpt)

Managing Cookies

• Via our consent tool (button at the bottom of the website)

• Via your browser settings

• Via third-party opt-outs:

  • optout.aboutads.info

  • youronlinechoices.eu

  • LinkedIn Opt-out

Changes

We reserve the right to update this cookie policy as needed.
As of: May 2025