Privacy policy
Controller
Thurnher Druckerei GmbH
Grundweg 4, 6830 Rankweil, Austria
office@dth.at
What data we process
Contact form Art. 6(1)(b) + (f) GDPR
We process your name, company, email address, phone number (optional), topic and message to handle your enquiry. The legal basis is taking steps prior to a contract (b) and our legitimate interest in answering business enquiries (f).
Quote requests Art. 6(1)(b) GDPR
We send the details of your print project and your contact details to our team by email so that we can prepare a quote. If you attach a PDF, we store the file on our own server in Germany (see Hosting); it is deleted automatically after 90 days.
Demo access to the online shop Art. 6(1)(b) GDPR
We use your first name, last name, company and email address to set up personal demo access to our online shop (shop.dth.at) and to send you the access link. The demo access and the data created in it are deleted automatically after 14 days.
Customer account and orders in the online shop Art. 6(1)(b) + (c) GDPR
For your account in the online shop (shop.dth.at) we process your name, email address, company, language setting and the time of your last sign-in. For orders we store the details needed for printing, such as the data on your business card and your photo, print files, delivery details and the order history. We need this data to carry out your orders and must keep it within the statutory retention obligations.
Signing in with Microsoft Art. 6(1)(b) GDPR
If your company uses sign-in with Microsoft and you choose it, we forward you to the sign-in page of Microsoft Ireland Operations Ltd. We receive your name and email address from Microsoft; we do not see your password. Microsoft's privacy terms apply to the sign-in at Microsoft.
Public contact page via QR code Art. 6(1)(b) GDPR
If you choose the contact page for your business card, we publish the data you provide for it, such as your name, position, contact details and photo, on a page of its own. Anyone with the QR code or the link can open it.
Server log files Art. 6(1)(f) GDPR
When our website is accessed, the web server automatically stores the IP address, requested address, browser type and time. This data serves solely the secure operation of the website and is deleted automatically after 30 days.
Fonts (Adobe Fonts) Art. 6(1)(f) GDPR
To display our house fonts we use Adobe Fonts from Adobe Systems Software Ireland Ltd. When a page is opened, a connection to Adobe's servers is established and your IP address is transmitted; a transfer to the USA is possible (Adobe is certified under the EU-US Data Privacy Framework). Adobe does not set cookies in the process. Our legitimate interest lies in a consistent appearance.
Map on the contact page
The directions map is an image on our own server, created from OpenStreetMap data (© OpenStreetMap contributors, ODbL). Displaying it makes no connection to third parties. Only when you click "Route planen" or our address does Google Maps open in a new window; Google's privacy terms apply there.
Sending email (Postmark) Art. 28 GDPR
We send enquiries from our forms, the confirmations to you and the emails from the online shop through the Postmark service of ActiveCampaign, LLC (USA) as a processor. Postmark is certified under the EU-US Data Privacy Framework.
Hosting Art. 28 GDPR
This website and our online shop run on servers of Hetzner Online GmbH in Germany, with which we have concluded a data processing agreement.
Retention
Enquiries are deleted once they have been fully dealt with, at the latest after three years. We store account and order data from the online shop for as long as your account exists and we need it to process your orders. Statutory retention obligations (for example under the Austrian UGB or BAO) remain unaffected.
Cookies
This website does not set cookies. The online shop (shop.dth.at) uses technically necessary cookies for signing in and stores your chosen language and the menu view. We do not use marketing tools.
Statistics
To understand which pages are used and where we can improve the website and online shop, we use the statistics tool Umami. It runs on our own server at Hetzner in Germany, and the data goes to no other recipients. Umami does not set cookies and stores nothing on your device. If "Do Not Track" is enabled in your browser, nothing is recorded.
We record the page opened without URL parameters, the page you came from, browser, operating system, device type, screen size, language and approximate location (country, region, city), as well as the fact that a form was submitted, but not its content. Your IP address is not stored. Together with the browser identifier and a value that changes monthly, it goes into an irreversible identifier so that we can count visits within a month.
The legal basis is our legitimate interest in improving our services (Art. 6(1)(f) GDPR). The data is deleted automatically after 26 months. You can object to this processing at any time by email to office@dth.at.
Recipients of your data
Your data is received only by the service providers named above, who act on our behalf, and by third parties where we are legally obliged or where it is necessary to perform the contract (for example carriers delivering print orders). We do not sell data.
Your rights
Under the GDPR you have the following rights:
- Access to stored data Art. 15
- Rectification of inaccurate data Art. 16
- Erasure (right to be forgotten) Art. 17
- Restriction of processing Art. 18
- Data portability Art. 20
- Objection to processing Art. 21
To exercise your rights, contact: office@dth.at
Right to lodge a complaint
You have the right to lodge a complaint with the Austrian Data Protection Authority: dsb.gv.at, Barichgasse 40–42, 1030 Vienna.
Changes to this policy
As of November 2026. We may update this privacy policy where necessary to keep it in line with legal requirements or to reflect changes to our services. This translation is provided for convenience; if the versions differ, the German version applies.