Skip to content

Privacy policy

How we handle your data

This is a translation for convenience. The German version is legally binding.

As of: October 2026

Controller

The controller responsible for data processing on this website is:

Y-Rail Technology
Matthias Wotke
Oswald-Redlich-Straße 11
1210 Vienna
Austria
E-mail: impressum@y-rail.at

General information

We take the protection of your personal data seriously. We treat your personal data confidentially and in accordance with the General Data Protection Regulation (GDPR), the Austrian Data Protection Act (DSG) and this privacy policy.

You can use our website without providing personal data. Where personal data is collected on our pages, such as your name or e-mail address in the contact form, this is voluntary. This data is not passed on to third parties without your express consent.

Please note that data transmission over the internet, for example when communicating by e-mail, can have security gaps. Complete protection of data against access by third parties is not possible.

We process personal data to answer your enquiries and to take steps prior to entering into a contract, for example checking whether the Y-Rail system suits your application (Art. 6(1)(b) GDPR). We also process data on the basis of our legitimate interest in the secure and stable operation of this website (Art. 6(1)(f) GDPR) and, where we ask for it, on the basis of your consent (Art. 6(1)(a) GDPR).

Contact form

If you write to us using the contact form, the details from the form (name, e-mail address, optionally company, message) are sent to us and stored to handle your enquiry and any follow-up questions. They are transmitted via a form service that forwards the message to us by e-mail; we have a data processing agreement with this service under Art. 28 GDPR. We do not pass this data on without your consent.

The data stays with us until you ask us to delete it, withdraw your consent to its storage, or the purpose of storage no longer applies, that is, once your enquiry has been fully dealt with. Statutory retention periods remain unaffected.

Google Maps

The start page and the contact page include a map from Google Maps. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. When you open these pages, your browser loads the map from Google servers. Google receives your IP address and may process further data, for example through cookies; a transfer to Google LLC in the USA is also possible. Google is certified under the EU-US Data Privacy Framework.

We use Google Maps so that you can find our location easily; this is our legitimate interest under Art. 6(1)(f) GDPR. We have no influence on processing by Google. You can find more in Google’s privacy policy.

Embedded videos

Some pages contain videos. Videos we host ourselves are delivered without involving third parties. Where we embed videos from YouTube, we use the privacy-enhanced mode (youtube-nocookie.com): no data is sent to YouTube when the page loads; only when you play a video does your browser connect to YouTube. The provider is Google Ireland Limited (see above). The legal basis is our legitimate interest in presenting our system clearly (Art. 6(1)(f) GDPR).

Cookies and statistics

This website does not set any cookies itself and does not use any statistics or analytics tool. Fonts and scripts are loaded from our own server, not from Google or other providers. Only the embedded Google services (map, YouTube videos when played) may set their own cookies; see the sections above.

Server log files

The hosting provider of this website automatically collects and stores information in server log files that your browser transmits: browser type and version, operating system, referrer URL, host name of the accessing computer, time of the server request and IP address. This data serves the security and stability of operation (Art. 6(1)(f) GDPR), is not combined with other data sources and is deleted after a short time. We reserve the right to check this data later if we become aware of specific indications of unlawful use.

SSL/TLS encryption

To protect the transmission of confidential content, such as your message via the contact form, this website uses TLS encryption. You can recognise an encrypted connection by “https://” in the address bar and the padlock symbol in your browser. Data you send to us cannot be read by third parties.

Your rights

You have the right at any time to free information about your personal data stored by us, its origin and recipients and the purpose of the processing, as well as the right to rectification, restriction of processing or erasure of this data (Art. 15 to 18 GDPR).

On request, we will hand over data that we process automatically on the basis of your consent or to fulfil a contract in a machine-readable format or, where technically feasible, transfer it directly to another controller (Art. 20 GDPR).

To do so, contact us at the address above or by e-mail at impressum@y-rail.at.

Some data processing is only possible with your express consent. You can withdraw consent you have already given at any time; an informal e-mail is enough. The lawfulness of the processing carried out until the withdrawal remains unaffected.

Right to lodge a complaint with the supervisory authority

If you believe that the processing of your data violates data protection law or that your data protection rights have otherwise been infringed, you can lodge a complaint with the supervisory authority. In Austria, this is the Data Protection Authority (Datenschutzbehörde), Barichgasse 40–42, 1030 Vienna.

Objection to advertising e-mails

We hereby object to the use of the contact details published in the legal notice for sending unsolicited advertising and information material. We reserve the right to take legal action in the event of unsolicited advertising, such as spam e-mails.