Skip to content
Zentrum • Mon-Fri: 10:00-19:00
0732 72 83 25 • By appointment only

Data Processing Agreement (DPA)

The legally binding version of this page is the German version at AV-Vertrag

Updated on 12 October 2026

This agreement defines the cooperation between the Client (Controller) and Basongoelyx GmbH (Processor) to ensure the compliant handling of personal data within the scope of professional editorial and content services.

Key Summary:
  • We process data exclusively based on your explicit instructions.
  • Your content is deleted after project completion according to our business rules.
  • We implement technical and organizational measures to protect your data.
  • Sub-processors are transparently named and bound by the same strict standards.

1. Subject Matter and Duration

The subject of this agreement is the processing of personal data by Basongoelyx GmbH (Landstraße 142, 4020 Linz, Director Theresa Maier, Share Capital 35,000 €) on behalf of the Client for the provision of editorial services. The duration of the processing is determined by the term of the respective project contract and the conditions set out in our Terms and Conditions.

2. Categories of Data and Data Subjects

Only data necessary for the fulfillment of the assignment will be processed. This includes:

  • Data Subjects: Employees of the client, interview partners, and corporate contact persons.
  • Data Categories: Names, contact details, professional positions, biographical information for corporate stories, and provided raw source materials.

3. Obligations of the Processor

Basongoelyx GmbH undertakes to process personal data only within the framework of the instructions issued by the Client. We guarantee that all persons authorized to process the data are bound by confidentiality. Compliance with the General Data Protection Regulation (GDPR/DSGVO) and the Austrian Data Protection Act (DSG) is an integral part of our operational processes.

4. Sub-processors

To provide the services, the following sub-processors are utilized, all of whom are obligated to maintain data protection standards:

  • World4You Internet Services GmbH (Wolfgang-Pauli-Straße 2, BT3, 4020 Linz) for the provision of hosting infrastructure.
  • FormSubmit (USA) for the technical transmission of contact requests (details available on our Privacy Policy page).

5. Data Security and Notification Duties

We employ appropriate technical and organizational measures to protect data against unauthorized access or loss. In the event of a personal data breach, we will inform the Client without undue delay. Notifications are handled in accordance with the requirements of the Austrian Data Protection Authority (DSB), Barichgasse 40-42, 1030 Vienna.

6. Deletion and Return of Data

Upon completion of the service or expiration of statutory retention periods, data will be deleted or returned to the Client. According to our business rules, drafts and working materials are stored for a period of 12 months before final deletion occurs, unless another written agreement exists.

7. Audit Rights and Jurisdiction

The Client is entitled to verify compliance with data protection obligations through reasonable measures. For all disputes arising from this agreement, the competent court in Linz shall have jurisdiction. Supplementary provisions can be found in our Disclaimer.

Contact for data protection inquiries: [email protected] or Tel. 0732 72 83 25.