LWNA©

Privacy Statement

We, LWNA GmbH (hereinafter referred to as “LWNA”), take data protection and the protection of personal data very seriously. We therefore process your data exclusively on the basis of the applicable legal provisions (GDPR, TKG 2021, DSG). In this privacy statement you will find the most important information on data processing on our website (hereinafter referred to as “the website”).

A. Controller

Responsible for the collection and processing of personal data is:
LWNA GmbH
Mühlgasse 4
6700 Bludenz / Austria
E-Mail: hi@bueroludwina.at
Web: www.bueroludwina.at
Commercial Register: FN 681443 y, Landesgericht Feldkirch | VAT: ATU83375768

If you have any questions about data protection or data security, you can contact us at hi@bueroludwina.at.

B. Categories of data subjects

Data subjects include visitors to the website, prospective clients, clients, suppliers and job applicants.

C. Categories of data processed

When you visit our website, we process the following data:

  • Usage data (e.g. web pages visited, interest in content, retrieval times)

  • Meta/communication data (e.g. device information, IP addresses)

If you would like to commission us as a creative agency for your company or supply us with services/goods/products, we process the following data:

  • Client/supplier data (e.g. first name, last name, company, profession/industry)

  • Contact data (e.g. address, e-mail address, telephone number)

  • Other data necessary for the processing of the contract

When you apply for a job, we process the following data:

  • Name, title, e-mail, telephone number, nationality

  • CV/portfolio, pictures/documents (optional)

  • Supporting information (brief introduction, reasons for applying)

  • Time of application submission

D. Purposes of the processing

The categories of data are processed for the following purposes:

Visit of our website:
When you visit our website, we process your personal data to ensure and further develop its operation as well as to guarantee the security and optimisation of our website. The processing is carried out on the legal basis of our legitimate interests in this regard in accordance with Art. 6 (1) f GDPR.

Contact requests:
If you contact us by telephone, e-mail or social media, the data you provide will be used exclusively to process your request. The legal basis is Art. 6 (1) b GDPR (performance of (pre-)contractual measures) and, where applicable, your consent pursuant to Art. 6 (1) a GDPR. Your data will be deleted once your enquiry has been conclusively answered, unless legal retention obligations prevent deletion.

Initiation and processing of orders with clients and suppliers:
We process your personal data to execute our contracts with you, in particular to initiate and process orders, and for measures and activities within the scope of pre-contractual relationships. The legal basis is the fulfilment of contractual obligations (Art. 6 (1) b GDPR).

Job applications:
We process your data in order to carry out the application process with you, on the legal basis of your consent (Art. 6 (1) a GDPR) as well as the necessity to carry out pre-contractual measures (Art. 6 (1) b GDPR). We collect this data either because you provide it to us (for example by e-mail) or because we collect it ourselves (for example notes taken during an interview).

You are not obliged to provide us with your personal data. However, if you do not do so, it will not be possible for us to carry out the application process with you.

Your data will generally be retained for six months from the completion of an unsuccessful application process, or for up to 18 months if you have consented to this longer retention period. If an employment, apprenticeship or internship relationship is established following the application process, your data will be transferred to the personnel file insofar as this is necessary and permissible. Application data will in any case be stored for as long as legal retention obligations exist or legal claims are not yet time-barred.

Other purposes:
We may also use your personal data on the basis of a balance of interests to protect our legitimate interests or those of third parties in accordance with Art. 6 (1) f GDPR for the following purposes:

  • for obtaining information and exchanging data with credit agencies, if we consider this necessary

  • for the limited storage of your data if deletion is not possible or only possible with disproportionate effort

  • for the further development of services and products as well as existing systems and processes

  • for the establishment, exercise or defence of legal claims

Furthermore, we may process your personal data if this is necessary for the fulfilment of legal obligations (Art. 6 (1) c GDPR).

E. Storage duration

Personal data will be kept for as long as is necessary to fulfil the purposes stated in section D. Thereafter, all personal data will be deleted. Exceptions are data that must be stored due to legal retention periods (e.g. under Austrian tax and commercial law, generally seven years) or due to the enforcement or defence of legal claims. If you have consented to longer storage of your personal data, we will store it in accordance with your declaration of consent.

F. Transfer of data

Personal data is only disclosed to other persons and companies (processors or third parties) on the basis of a legal permission, your consent, a legal obligation, or our legitimate interests (e.g. when using hosting or other service providers). If we commission third parties with the processing of data, we conclude a data processing agreement with them in accordance with Art. 28 GDPR.

For the operation and optimisation of the website, we use carefully selected service providers that are contractually obliged to treat the data confidentially, to process it only in the context of providing the service, and to implement suitable technical and organisational measures. They are not permitted to use the personal data for their own or advertising purposes or to pass it on to third parties.

G. Hosting

Our website is operated using the services of IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany, and the website platform Framer B.V., Rozengracht 207B, 1016 LZ Amsterdam, Netherlands. When you access our website, these providers process connection data (including your IP address) in server log files in order to deliver the website and to ensure its stability and security. The legal basis is our legitimate interest in the reliable and secure provision of our website pursuant to Art. 6 (1) f GDPR. We have concluded data processing agreements with these providers in accordance with Art. 28 GDPR.

H. Cookies

Our website itself only uses technically necessary cookies and similar technologies that are required for the operation and security of the website. These are used on the basis of our legitimate interest pursuant to Art. 6 (1) f GDPR and § 165 (3) TKG 2021.

Cookies from third parties are only set when you actively interact with embedded third-party content (see section J). In this case, the legal basis is your consent pursuant to Art. 6 (1) a GDPR, which you can withdraw at any time with effect for the future. You can also block or delete cookies at any time in the settings of your internet browser; if cookies are deactivated, it may no longer be possible to use all functions of the website to their full extent.

I. Web analytics

This website uses Framer Analytics, a privacy-friendly, cookieless analytics feature of the Framer platform (Framer B.V., Rozengracht 207B, 1016 LZ Amsterdam, Netherlands). It processes aggregated usage statistics (e.g. page views, referrers, approximate location based on a truncated IP address) without setting cookies or storing identifiers on your device, and does not track individual visitors across websites. The legal basis is our legitimate interest in analysing and improving our website pursuant to Art. 6 (1) f GDPR. Further information: https://www.framer.com/legal/privacy-statement/

J. Embedded content (Vimeo, YouTube)

We embed videos from the following providers on our website:

  • Vimeo.com, Inc., 330 West 34th Street, 5th Floor, New York, NY 10001, USA

  • YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland)

When embedded content is loaded, the respective provider receives your IP address, as this is technically necessary to deliver the content, and may set its own cookies. Where embedded content is only loaded after you actively click on it, the legal basis is your consent pursuant to Art. 6 (1) a GDPR; otherwise, our legitimate interest in an appealing presentation of our work pursuant to Art. 6 (1) f GDPR. Please note that these providers may transfer data to the USA, where US authorities may be able to access it under US law (e.g. the CLOUD Act). Further information can be found in the privacy policies of the providers:

  • Vimeo: https://vimeo.com/privacy

  • YouTube/Google: https://policies.google.com/privacy

K. Social media links

Our website contains links to our profiles on social networks, in particular Instagram (Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland), Vimeo and YouTube (see section J).

These are plain links, not tracking plugins: no data is transferred to the platform providers simply by visiting our website. Only when you click a link and, where applicable, are logged in to the respective platform does the platform provider process your data under its own responsibility. Further information: Instagram: https://privacycenter.instagram.com/policy

L. Your rights

You have the right to information, rectification, erasure, restriction of processing, data portability, withdrawal of consent and objection with regard to your data. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal. To exercise your rights, contact us at hi@bueroludwina.at.

If you are of the opinion that the processing of your data violates data protection law or that your data protection rights have been violated in any other way, you can complain to us or to the supervisory authority: Austrian Data Protection Authority (Datenschutzbehörde), Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at

M. Adaptation of the privacy policy

This privacy statement will be adapted to the actual circumstances and the legal situation from time to time. The current version is available on this page.

Last updated: July 2026