Privacy policy

Hausverwaltung und Immobilienmakler Purkarthofer GmbH has drawn up this privacy policy (version of 09.09.2026) to explain to you, in accordance with the requirements of the General Data Protection Regulation (EU) 2016/679 and the Austrian Data Protection Act (DSG), what information we collect, how we use data and what choices you have as a visitor to this website. Some of these explanations sound technical; we have tried to describe the most important points as simply and clearly as possible.

In relation to the data we hold about you, you have in principle the rights of access, rectification, erasure, restriction, data portability, withdrawal of consent and objection. If you believe that the processing of your data breaches data protection law, or that your data protection rights have otherwise been infringed, you can complain to us or to the Austrian Data Protection Authority. You can reach us using the following contact details:

Hausverwaltung und Immobilienmakler Purkarthofer GmbH
Sporgasse 29, 8010 Graz
Telephone: (+43) 0 316 / 82 88 83 – 0
E-mail: office@pu-hv.at

When you visit websites, certain information is automatically created and stored, and this website is no exception. When you visit our website, our web server automatically stores data such as

• the address (URL) of the page accessed
• browser and browser version
• the operating system used
• the address (URL) of the previously visited page (referrer URL)
• the host name and the IP address of the device used for access
• date and time

in files (web server log files).

As a rule, web server log files are kept for two weeks and then deleted automatically. We do not pass this data on, but we cannot rule out that it may be inspected in the event of unlawful conduct.

The legal basis is Article 6(1)(f) GDPR, namely our legitimate interest in enabling the fault-free operation of this website by recording web server log files.

Personal data that you send us electronically through this website – such as your name, e-mail address, telephone number, address or other details given in a form – are used by us, together with the time and the IP address, only for the stated purpose. They are kept securely and are not passed on to uninvolved third parties. Which services are involved in the processing is described below.

We therefore use your personal data only to communicate with those visitors who expressly wish to be contacted, and to provide the services offered on this website.

If you send us personal data by e-mail – that is, outside this website – we cannot guarantee secure transmission. We recommend that you never send confidential data unencrypted by e-mail.

The legal basis is Article 6(1)(a) GDPR, namely that you give us your consent to process the data you have entered. You can withdraw this consent at any time – an informal e-mail is enough; our contact details are in the legal notice.

Under the provisions of the GDPR and the Austrian Data Protection Act (DSG) you have, in principle, the following rights:

• right of access (Article 15 GDPR)
• right to rectification (Article 16 GDPR)
• right to erasure (“right to be forgotten”) (Article 17 GDPR)
• right to restriction of processing (Article 18 GDPR)
• right to notification – the obligation to notify in connection with the rectification or erasure of personal data or the restriction of processing (Article 19 GDPR)
• right to data portability (Article 20 GDPR)
• right to object (Article 21 GDPR)
• right not to be subject to a decision based solely on automated processing, including profiling (Article 22 GDPR)

If you believe that the processing of your data breaches data protection law, or that your data protection rights have otherwise been infringed, you can complain to the supervisory authority. In Austria this is the Data Protection Authority, whose website you will find at https://www.dsb.gv.at/.

We use https to transmit data securely over the internet (data protection by design, Article 25(1) GDPR). By using TLS (Transport Layer Security) we can ensure the protection of confidential data. You can recognise this safeguard by the padlock symbol in your browser's address bar and by the fact that our address begins with https.

Our website uses cookies, small packets of data exchanged between your browser and the web server and stored on your device. A distinction is made between cookies that are strictly necessary for the operation of the website and those used for statistics, personalisation and marketing.

We only set non-essential cookies once you have agreed in the cookie notice. You can change or withdraw your choice at any time via the “Settings” link in the cookie notice.

To manage this consent we use Consent Pro (Finsweet). The service stores your decision in your browser so that we can take it into account on further visits. The legal basis is Article 6(1)(a) GDPR (consent), and points (c) and (f) for documenting the consent.

If you would like to find out which cookies have been stored in your browser, change cookie settings or delete cookies, you will find this in your browser settings:

If you do not wish data to be stored in cookies, you can set up your browser so that it informs you when cookies are set and lets you allow them case by case. If you disable cookies altogether, some functions and pages may not work as expected.

This website is delivered through the platform and content delivery network of Webflow. The provider is Webflow Inc., 398 11th Street, 2nd Floor, San Francisco, California 94103, USA. When the page is opened, content is loaded from Webflow servers, and your IP address is transmitted to Webflow. This serves to deliver the page, improve loading speed and protect against attacks.

The transfer to the USA takes place on the basis of the EU standard contractual clauses and supplementary safeguards. The legal basis is our legitimate interest in the secure and reliable operation of this website (Article 6(1)(f) GDPR).

You will find Webflow's privacy policy at https://webflow.com/legal/eu-privacy-policy.

On several pages we offer forms through which you can send us a message or sign up to receive property offers by e-mail. The data entered there – as a rule your name, e-mail address and your message – are processed via Webflow and forwarded to us. We use them solely to deal with your enquiry and delete them as soon as they are no longer needed for that purpose and no statutory retention obligation applies. The legal basis is your consent (Article 6(1)(a) GDPR).

For online defect reports we use an embedded form from Jotform Inc., 111 Pine Street, Suite 1815, San Francisco, California 94111, USA. When you submit a defect report, the details you enter – such as the property address, a description of the defect, your contact details and any photographs uploaded – are processed by Jotform and transmitted to us.

A data processing agreement is in place with Jotform. The transfer takes place on the basis of the EU standard contractual clauses. The legal basis is the performance of the contract or the taking of steps prior to entering into a contract (Article 6(1)(b) GDPR). You will find Jotform's privacy policy at https://www.jotform.com/privacy/.

On our website we offer an enquiry assistant with which you can make an enquiry about property management in a few steps. The details entered – the type and size of the property, the postcode as well as your name, e-mail address and telephone number – are transmitted to our automation service at automationen.ki-manufaktur.at and stored there in order to process your enquiry. This service is operated on our behalf by KI Manufaktur (Wolfgang Derigo) on servers in the European Union; a data processing agreement is in place.

The details are then filed in our enquiry management system so that we can get back to you. The legal basis is your consent and the taking of steps prior to entering into a contract (Article 6(1)(a) and (b) GDPR).

To manage our property data and incoming enquiries we use Airtable, a service of Formagrid Inc., 799 Market Street, San Francisco, California 94103, USA. We have concluded a data processing agreement with Formagrid Inc. on the basis of the EU standard contractual clauses, in which Airtable undertakes to process the data on our behalf and not to pass it on to third parties. Airtable also processes data on servers outside the EU. Further information can be found at https://airtable.com/privacy.

We use Google Tag Manager from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Tag Manager is a tool for managing measurement and marketing tools. It does not itself store personal data in cookies, but it loads the services described below. Tag Manager is only loaded once you have agreed in the cookie notice, or as soon as you interact with the page. The legal basis is your consent (Article 6(1)(a) GDPR).

If you have consented, we use Google Analytics 4 from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, to evaluate the use of our website statistically. Cookies are set and data about your behaviour on the website is collected, such as the pages viewed, time spent and approximate location. Your IP address is truncated by Google and not combined with other data.

A transfer to the USA cannot be ruled out; it takes place on the basis of the EU standard contractual clauses and the EU-US Data Privacy Framework. The legal basis is your consent (Article 6(1)(a) GDPR), which you can withdraw at any time via the cookie settings. Further information can be found at https://policies.google.com/privacy.

We place advertisements through Google Ads (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). To measure which advertisements lead to an enquiry, we use Google's conversion tracking. A cookie is set after a form is submitted, which allows Google to make an anonymous match with the advertisement served. We only learn the total number of enquiries, not which individual person clicked. The legal basis is your consent (Article 6(1)(a) GDPR).

In addition we use Plausible Analytics, a web analytics service of Plausible Insights OÜ, Västriku tn 2, 50403 Tartu, Estonia. Plausible works without cookies and collects no personal data: only aggregated figures such as page views, referring page, approximate region of origin and device type are recorded. Individual visitors cannot be recognised, and the data is processed on servers in the European Union.

The legal basis is our legitimate interest in data-minimising audience measurement (Article 6(1)(f) GDPR). Further information can be found at https://plausible.io/privacy.

On our property pages we embed maps from Google Maps (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). The map is only loaded once you have consented; until then you will see a placeholder in its place. When the map is loaded, data such as your IP address is transmitted to Google. The legal basis is your consent (Article 6(1)(a) GDPR). What Google records can be read at https://policies.google.com/privacy.

On the home page and on the “Testimonials” page we show our Google reviews using a widget from Elfsight LLC, 1 Sunmate St., Yerevan, Armenia. When the widget is loaded, content is retrieved from the provider's servers, and your IP address is transmitted. The legal basis is our legitimate interest in displaying customer reviews (Article 6(1)(f) GDPR), or your consent where cookies are set in the process. Further information: https://elfsight.com/privacy-policy/.

In the header and footer of our website you will find links to our profiles on Facebook, LinkedIn and Instagram. These are simple links, not embedded content: data is only transmitted to these providers when you click one of these links and open the page concerned. The privacy provisions of the respective provider apply to processing on those pages.

This privacy policy is dated 09.09.2026. As our website develops or legal requirements change, an update may become necessary. You will always find the current version on this page.