Privacy Policy
Last Updated: November 19, 2025
We, the operators of this website, take the protection of your personal data very seriously. This Privacy Policy explains how we collect, process, and use your personal data when you visit our website or use our services.
We process your data exclusively in accordance with applicable data protection laws, in particular the EU General Data Protection Regulation (GDPR), the Austrian Data Protection Act (DSG), the Austrian Telecommunications Act (TKG 2021), as well as the German Federal Data Protection Act (BDSG) and the German Telecommunications-Telemedia Data Protection Act (TTDSG).
1. Joint Controllers (Art. 26 GDPR)
Fulcrum Consulting GmbH
Mariahilfer Straße 101/3/48-49
1060 Vienna, Austria
[email protected]
and
Fulcrum Consulting Deutschland GmbH
Rundfunkplatz 2
80335 Munich, Germany
[email protected]
Fulcrum Consulting GmbH (AT) and Fulcrum Consulting Deutschland GmbH (DE) jointly operate this website as joint controllers under Art. 26 GDPR.
The technical operation and maintenance of the website are carried out by Fulcrum AT. The handling of inquiries, applications, and marketing communications is carried out jointly by Fulcrum DE and Fulcrum AT within their respective jurisdictions. The essential contents of the joint controller agreement can be provided upon request.
You may exercise your data subject rights (e.g., access, deletion, objection) with either company.
2. Your Rights as a Data Subject
Under Articles 15 to 21 GDPR, you have the following rights:
- Access to your stored data
- Rectification of incorrect data
- Erasure of personal data (right to be forgotten)
- Restriction of processing
- Data portability
- Objection to processing based on legitimate interests
- Withdrawal of consent with effect for the future
To exercise these rights, please contact us using the contact details provided above.
Right to lodge a complaint:
You have the right to lodge a complaint with a supervisory authority. The competent authorities are:
Austrian Data Protection Authority
Barichgasse 40-42, 1030 Vienna, Austria
Email: [email protected]
Bavarian State Commissioner for Data Protection
Wagmüllerstraße 18, 80538 Munich, Germany
Email: [email protected]
3. Data Collection When Visiting Our Website
Server Log Files
Our website is operated by [Name of hosting provider, location, country]. When you access the website, the following data are automatically collected and stored in so-called server log files:
- IP address (shortened/anonymized)
- Date and time of access
- Accessed page
- Referrer URL
- Browser type and version
- Operating system
Legal basis: Art. 6 (1)(f) GDPR (legitimate interest in secure and technically stable operation). The data are not combined with other sources and are regularly deleted.
Cookies
Our website uses cookies. Technically necessary cookies are used to ensure the functionality of the website. All other cookies (e.g., for analytics or marketing purposes) are only set with your consent. Details can be found in our separate Cookie Policy.
4. Specific Data Processing Activities
Contact Form
When you contact us via the contact form, we process your details (name, email address, message) to handle your inquiry.
Legal basis: Art. 6 (1)(b) GDPR (pre-contractual measures) or Art. 6 (1)(f) GDPR (legitimate interest in communication).
Storage period: Until the inquiry is completed or consent is withdrawn.
Applications (Career Plugin)
Application data are processed solely for the purpose of the recruitment process. Access is granted only to authorized HR personnel.
Legal basis: Art. 6 (1)(b) GDPR, §26 BDSG (Germany), or §11 DSG (Austria).
Deletion: Six months after completion of the recruitment process, unless legal claims exist or you have consented to longer storage.
Google Analytics 4
We use Google Analytics 4 (Google Ireland Ltd.) to analyze website usage. Event-based data are processed instead of traditional cookies. Your IP address is anonymized.
Legal basis: Art. 6 (1)(a) GDPR (consent via cookie banner).
Data transfer to the USA: Based on the EU-U.S. Data Privacy Framework.
Google Tag Manager (GTM)
Google Tag Manager is used to manage tracking tags. It does not store any personal data.
Legal basis: Art. 6 (1)(f) GDPR (legitimate interest in technical management).
Embedded Content (e.g., Vercel, Google Drive)
Our website may include content from third-party providers embedded via iFrames. When such content is loaded, your IP address is transmitted to the respective provider (e.g., Google LLC or Vercel Inc.).
Such content is only loaded after you have given your consent through our consent tool (Art. 6 (1)(a) GDPR).
Data transfer to the USA: Both Google LLC and Vercel Inc. are certified under the EU-U.S. Data Privacy Framework (DPF), ensuring an adequate level of data protection under Art. 45 GDPR.
5. Data Security
We implement technical and organizational measures (TOMs) to protect your data, including SSL/TLS encryption, access controls, and regular security audits.
6. Changes to this Privacy Policy
We reserve the right to amend this Privacy Policy to reflect changes in legal requirements or technical developments. The current version published on this website shall apply.
