Privacy notice

Information pursuant to Art. 13 GDPR for visitors of this website. Last updated: 1 October 2026.

1. Who is responsible

The controller for the processing described here is:

HP Capital GmbH
Mayrwiesstraße 11, 5300 Hallwang (Salzburg), Austria
Managing directors: Paul Hagler, Philipp Habring
Email: [email protected]

We have not appointed a data protection officer, as we are not legally required to. For any data protection question, please use the email address above.

2. Visiting this website (server logs)

When you open this website, our hosting provider Cloudflare (Cloudflare Pages) automatically processes technical data: IP address, date and time, the page requested, referrer URL, browser and operating system. We need this data to deliver the website and to keep it secure (e.g. to defend against attacks).

• Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a secure, working website).
• Recipient: Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA, as our processor under a data processing agreement (Art. 28 GDPR). Data may be transferred to the USA. The transfer is based on the EU-U.S. Data Privacy Framework (Cloudflare is certified) and on standard contractual clauses.
• Storage: log data is deleted as soon as it is no longer needed for these purposes, unless it is needed to investigate a security incident.

3. Fonts

The fonts on this website (Plus Jakarta Sans, JetBrains Mono, Fraunces) are hosted on our own web server. No connection to Google or any other font provider is made.

4. Product video

The product video on this page is served from our own website. No third-party video platform is involved.

5. Demo call request (form)

If you request a demo call, we process the data you enter: work email and, optionally, your ATS or CRM and your region and niche. We also store the language of the page, the page address, the referring page, campaign parameters in the link (e.g. utm_source), the time of the request and your cookie choice.

• Purpose: to arrange and prepare the demo call, check whether your region and niche is still available and discuss a possible licence with you.
• Legal basis: Art. 6(1)(b) GDPR (steps prior to entering into a contract, at your request) and Art. 6(1)(f) GDPR (our legitimate interest in responding to business enquiries).
• Recipient: HubSpot Ireland Ltd., One Sir John Rogerson's Quay, Dublin 2, Ireland, which receives the form and stores it in our CRM as our processor (Art. 28 GDPR). HubSpot may process data in the USA. This transfer is based on the EU-U.S. Data Privacy Framework and standard contractual clauses.
• Storage: 12 months after our last contact if no contract is concluded; if a contract is concluded, for as long as statutory retention periods require (e.g. 7 years under § 132 BAO).
• Providing the data is voluntary. Without an email address, we cannot contact you.

6. Booking a call (Cal.com)

If you click “Book a demo call”, a new tab opens with our booking page at Cal.com (Cal.com, Inc., USA). The data you enter there (name, email, chosen time) is processed by Cal.com on our behalf to schedule the call. Legal basis: Art. 6(1)(b) GDPR. Cal.com offers an EU data region. If data is transferred to the USA, the transfer is based on standard contractual clauses (Art. 46 GDPR). Nothing is loaded from Cal.com until you click the button.

7. Your cookie choice

When you make a choice in our cookie banner, we store it in your browser's local storage under the key lynk-consent (your choice and the time). This is strictly necessary to respect your choice (§ 165(3) Telecommunications Act 2021, TKG 2021) and is not sent to us. You can change your choice at any time via “Cookie settings” at the bottom of every page.

8. Analytics (Plausible) – only with your consent

If you allow “Analytics”, we use Plausible Analytics (Plausible Insights OÜ, Västriku tn 2, 50403 Tartu, Estonia) to count visits, page views, referring sites and the “Lead” event when a form is sent. Plausible sets no cookies and creates no user profiles; IP addresses are only used to create a daily changing, non-reversible identifier and are not stored. Data is stored in the EU.

• Legal basis: your consent, Art. 6(1)(a) GDPR and § 165(3) TKG 2021. You can withdraw it at any time with effect for the future.
• Recipient: Plausible Insights OÜ as our processor.

9. Marketing (Meta Pixel) – only with your consent

If you allow “Marketing”, we load the Meta Pixel of Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland. It lets us measure which of our ads on Facebook and Instagram lead to visits and demo requests (“Lead” event) and show our ads to relevant audiences. The pixel sets cookies (e.g. _fbp, up to 90 days) and sends data such as your IP address, browser information, the pages visited and the events to Meta.

• Legal basis: your consent, Art. 6(1)(a) GDPR and § 165(3) TKG 2021. You can withdraw it at any time with effect for the future.
• Joint controllership: for collecting and transmitting the data we are joint controllers with Meta (Art. 26 GDPR, Meta Controller Addendum). Meta is solely responsible for any further processing: facebook.com/privacy/policy.
• Third-country transfer: Meta may transfer data to Meta Platforms, Inc. in the USA, which is certified under the EU-U.S. Data Privacy Framework.

10. Emails

If you write to us, we process your message and contact details to answer it (Art. 6(1)(b) or (f) GDPR) and delete them when they are no longer needed, subject to statutory retention periods.

11. Your rights

You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21 GDPR). You can withdraw consent at any time (Art. 7(3) GDPR) without affecting the lawfulness of processing before the withdrawal. Just email us at the address above.

You also have the right to lodge a complaint with a supervisory authority. In Austria this is the Datenschutzbehörde, Barichgasse 40–42, 1030 Vienna, [email protected], www.dsb.gv.at.

12. No automated decisions

We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR on this website.

13. Security

This website is served over an encrypted connection (TLS). We use technical and organisational measures to protect your data against loss and unauthorised access.

14. Changes

We will update this notice when our website or the law changes. The current version is always available on this page.