This English version is a convenience translation. Only the German version is legally binding.
We process personal data in accordance with the General Data Protection Regulation (GDPR, DSGVO), the Austrian Data Protection Act (Datenschutzgesetz, DSG), the Austrian Telecommunications Act 2021 (Telekommunikationsgesetz 2021, TKG 2021) and — insofar as artificial intelligence is used — Regulation (EU) 2024/1689 (AI Act, KI-Verordnung). Below you can read which data these are, what we use them for and what rights you have.
Bildungszentrum Logistik GmbH & Co KG, Rottfeld 7, 5020 Salzburg, Austria
Telephone +43 662 42 46 27 · office@bildungszentrum-logistik.at
Commercial register number (Firmenbuchnummer) FN 412118g, VAT ID number (UID-Nummer) ATU68561656
Managing partners: Emmerich Schlecht, Florian Schlecht
For data protection enquiries, write to office@bildungszentrum-logistik.at with the subject line “Datenschutzanfrage” (data protection enquiry). We will reply within one month (§ 43 DSG, Art. 12(3) GDPR).
We only process your data if there is a legal basis for doing so under Art. 6(1) GDPR. Which basis applies in each case is stated for each processing operation. We do not collect more than we need, and we do not sell any data.
When a page is accessed, the usual access data are processed: IP address, date and time, page accessed, amount of data transferred, browser type and operating system, as well as the previously visited page. This is necessary in order to deliver the page, ward off attacks and find errors. These data are not combined with other data.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure operation). Storage period: 14 days.
Via the form on the contact page, we collect your name, e-mail address, telephone number, company if applicable, your concern and your message. We use this information to answer your enquiry.
Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) and (f) GDPR. Storage period: until dealt with, for a maximum of two years; if the enquiry leads to a contract, the statutory tax retention periods of seven years apply.
For a non-binding enquiry we only need your first name and surname, e-mail address and telephone number, as well as the course concerned.
For a binding booking the data without which the course cannot be delivered and invoiced are added: billing address, for companies the company name, the VAT ID number and, on request, an order number, plus the name and date of birth of each participant. The date of birth is required by law because it appears on the licence card and the training must be documented.
Purpose: delivery of the course, keeping of participant registers, examination, issue of licence cards and certificates, invoicing, fulfilment of official documentation obligations.
Legal basis: Art. 6(1)(b) GDPR (performance of a contract) and (c) GDPR (legal obligation, for example under the Proof of Expertise Ordinance (Fachkenntnisnachweis-Verordnung) and the Employee Protection Act (Arbeitnehmerschutzgesetz)). Storage period: seven years after the end of the contract under the BAO and UGB; we keep training records and certificates for as long as the respective regulations require, and longer where applicable.
When booking, you may voluntarily send a passport photo with it. We crop it to licence card format and use it exclusively for the forklift or crane licence card of the participant concerned. If you do not send one, we will take the photo during the course — this will not put you at any disadvantage.
Legal basis: Art. 6(1)(a) GDPR (consent, which may be withdrawn at any time) in conjunction with (b) GDPR. We delete an unusable or accidentally uploaded image immediately.
Via the in-house page, we collect the desired course, preferred date, number of people and location, as well as company, contact person, e-mail and telephone, in order to make you an offer. Legal basis: Art. 6(1)(b) GDPR.
Notice under Art. 50 of the AI Act: In the chat window you are writing with Lena, an artificial intelligence system, not with a human being. The answers are generated by an AI language model.
We process your entries and Lena's answers, the date and time of the conversation and technical information such as IP address and browser, as well as your name, your e-mail address or telephone number if you voluntarily provide them in the conversation. Purpose: to answer your questions about courses, dates and prices immediately and to pass your request on to our office so that someone can deal with it. For this purpose, we send a transcript of the conversation to our office mailbox.
The chat window runs on our own server. For the answers, the content of the conversation is transmitted to the AI service SpaceXAI LLC (USA, language model Grok) (see points 8 and 9). Please do not enter any health or identity document data in the chat.
Legal basis: Art. 6(1)(a) GDPR (consent through voluntary use of the chat) and (f) GDPR (legitimate interest in prompt customer service). Use is voluntary; you can also reach us on +43 662 42 46 27 or at office@bildungszentrum-logistik.at. Lena does not make any binding decisions or give any binding commitments. Storage period: conversation transcripts for a maximum of 90 days, unless an enquiry or a contract results from them. In your browser's storage, the chat window only remembers whether it has already opened once; this entry disappears when you close the browser.
If you write to us or call us, we process your contact details and the content of your message in order to deal with your request. Legal basis: Art. 6(1)(b) and (f) GDPR.
Note on the telephone number +43 662 279190: At this number, your call is answered by an assistant using artificial intelligence. You will be informed of this at the start of the call. The time, telephone number and a summary of your request are recorded from the call so that someone in our office can deal with it. You can ask to speak to a human being at any time. Our main number +43 662 42 46 27 reaches the office directly.
For online safety instructions and online training courses, we operate our own platform at schulung.bzlsalzburg.cloud. Anyone who is given access there will find the details of the processing when they first log in; among other things, name, date of birth, place of birth and country of birth are collected there because they appear on the certificate, as well as learning progress and the examination result. We disclose these data to the employer if the employer pays for the course — they need the certificate for their obligation to provide safety instruction.
Cookies are small text files that are stored on your device. On your first visit, a consent banner (CookieYes) asks you whether we may use statistics and advertising services (Art. 6(1)(a) GDPR, § 165(3) Austrian Telecommunications Act 2021, TKG 2021). By default, everything is declined: As long as you do not consent, we load neither statistics nor advertising measurement, and no such cookies are set. For this purpose we use Google Consent Mode v2.
Technically necessary is only the cookie in which your decision is stored (cookieyes-consent, 12 months). Legal basis: Art. 6(1)(f) GDPR.
Statistics (Google Analytics 4) and Advertising (Google Ads conversion tracking) are only used with your consent; details under point 5.
Withdrawal of consent: You can change or withdraw your consent at any time with effect for the future — via the cookie icon at the edge of the screen, which remains visible after your decision, or informally by e-mail. Processing carried out up to that point remains lawful.
Google Tag Manager (container GTM-T8SB3R8) — an administration tool that integrates and controls the services below. It does not itself set any cookies or analyse any data.
Google Analytics 4 (measurement ID G-HV6G7VE8P9) — statistical analysis of which pages are used and how: page views and events, device and browser information, approximate location at country or regional level, the previously visited page. The IP address is not stored in Google Analytics 4. Purpose: to improve our services. Storage period at Google: 14 months.
Google tag and Google Ads conversion tracking (tag ID GT-TBVNHTB) — measures whether someone makes an enquiry after clicking on one of our advertisements on Google. Purpose: to assess the effectiveness of our advertising.
The provider of all three services is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; the parent company is Google LLC in the USA. Legal basis: Art. 6(1)(a) GDPR (consent). Transfer to the USA on the basis of the EU-US Data Privacy Framework (see point 9). You can also prevent the collection of data with Google's browser add-on: tools.google.com/dlpage/gaoptout. More from Google: policies.google.com/privacy.
Fonts, images and course dates are stored on our own server and loaded from there; we do not embed maps. Only the consent banner (CookieYes) and — only after your consent — the services under point 5 come from third-party servers.
Videos. On some article pages we show films hosted on YouTube. They are not loaded automatically: At first, only a preview image from our own server is shown. Only when you start the film yourself by clicking on it does your browser establish a connection to YouTube. In doing so, your IP address and information about your device are transmitted to Google, and YouTube may store its own data on your device; if you are logged in to Google, the retrieval may be assigned to your account. We use the “privacy-enhanced mode” setting (youtube-nocookie.com). As long as you do not start a film, Google learns nothing about your visit. Details of processing by Google: policies.google.com/privacy.
We only pass on data insofar as this is necessary for the service or we are obliged to do so:
Partner companies. If the course booked takes place at one of our cooperation partners, or if we arrange a place for you there, we transmit the information required for participation to that company — name, course and date, and for training courses also the date of birth.
Clients. If your employer books the course, they receive confirmation of participation and the examination result.
Authorities and inspection bodies, insofar as required by law.
Tax advisers and bank in the course of invoicing.
For technical operation, we use service providers who are contractually bound under Art. 28 GDPR:
Neue Medien Münnich / All-Inkl.com — operation of the web server that delivers this website (WordPress) and of our e-mail mailbox, server location Germany.
Hostinger International Limited — operation of our server for dates, registration, forms, chat window and training platform. The server is located in Frankfurt am Main, Germany.
Cloudflare, Inc. — upstream service for delivery and protection against attacks. Requests are routed via data centres in the European Union; for transfers to the USA, the EU-US Data Privacy Framework and, in addition, standard contractual clauses are in place.
CookieYes Limited (United Kingdom) — consent banner and storage of your decision.
Google Ireland Limited — Tag Manager, Analytics and Ads, only with your consent (see point 5).
SpaceXAI LLC (USA) — AI language model for the answers in the chat window (see point 3.6).
Google Ireland Limited / YouTube — delivery of the videos on some article pages, and only once you start a film yourself (see point 6).
Data are only transferred outside the EU and the EEA if there is an adequacy decision of the European Commission (Art. 45 GDPR) or appropriate safeguards such as standard contractual clauses are in place (Art. 46 GDPR):
Google LLC (USA) — Analytics and Ads only after your consent, videos only once you start a film: EU-US Data Privacy Framework.
Cloudflare, Inc. (USA): EU-US Data Privacy Framework, supplemented by standard contractual clauses.
SpaceXAI LLC (USA), only if you use the chat: standard contractual clauses under Art. 46(2)(c) GDPR.
CookieYes Limited (United Kingdom): adequacy decision of the European Commission for the United Kingdom.
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on a legitimate interest (Art. 21). You may withdraw any consent given at any time with effect for the future (Art. 7(3) GDPR); processing carried out up to that point remains lawful.
You can contact us for this informally at office@bildungszentrum-logistik.at or by post. You can also lodge a complaint with the supervisory authority: Austrian Data Protection Authority (Österreichische Datenschutzbehörde), Barichgasse 40-42, 1030 Wien, telephone +43 1 52 152-0, dsb@dsb.gv.at, www.dsb.gv.at.
We take appropriate technical and organisational measures under Art. 32 GDPR: end-to-end encryption of the connection (https), separate accounts for each employee with their own passwords, restriction of access to what the respective task requires, regular updates and secure storage on servers in the EU.
Server access data: 14 days.
Enquiries via form or e-mail: until dealt with, for a maximum of two years.
Bookings, invoices and contract data: seven years (Austrian Federal Fiscal Code, BAO; Austrian Commercial Code, UGB).
Attendance records, examination results and licence card data: for as long as the respective regulations require.
Passport photos: until the licence card has been issued, thereafter in the participant file for as long as the licence card is valid.
Notes on telephone calls: until the matter has been dealt with.
Transcripts of chat conversations: a maximum of 90 days.
Your cookie decision: 12 months.
Data in Google Analytics: 14 months.
No automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place. Registrations, examinations and offers are decided on by people.
Pursuant to Art. 50 of Regulation (EU) 2024/1689, we point out: the assistant on the telephone at +43 662 279190 and Lena in the chat window of this website are AI systems, not human beings. Neither makes binding decisions; this is not a high-risk system.
We adapt this policy when the legal situation, our services or the processing change. The currently valid version is always available here. Version: 24 September 2026.
Give us a call — within two minutes we will know which course it is.
