This translation is provided for convenience only; the German version at /datenschutz/ is the legally binding text. Last updated: September 2026

1. Controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

NFBrands.X GmbH
Lutterottistraße 7 / Top 1
6020 Innsbruck, Austria
Managing director: Matthias Lechner
Phone: +43 699 17181969
Email: office@pp-multitouch.com
Company register: FN 581872 w, Landesgericht Innsbruck

The p&p MultiTouch^® software and brand belong to NFBrands.X GmbH. No data protection officer has been appointed, as the requirements of Art. 37 GDPR are not met.

2. General information

We process personal data only to the extent necessary to operate this website and handle your inquiries. This website uses no advertising or analytics cookies, no profiling and no third-party tracking services. A consent banner is therefore not required.

Your data is transmitted encrypted throughout (TLS/HTTPS). Please note that data transmission over the internet, for example when communicating by email, may have security gaps despite all precautions.

3. Hosting and delivery

This website is delivered via the content delivery network of BunnyWay d.o.o., Cesta komandanta Staneta 4A, 1215 Medvode, Slovenia. When any page is accessed, the server automatically processes the access data transmitted by your browser:

• page and files accessed
• date and time of access
• amount of data transferred and notification of successful access
• browser type and version, operating system used
• referrer URL
• IP address

The purpose is to provide the website technically error-free, to manage load, and to defend against attacks. The legal basis is our legitimate interest in secure and stable operation (Art. 6(1)(f) GDPR). This data is not merged with other data sources and is deleted after 14 days at the latest. A data processing agreement pursuant to Art. 28 GDPR is in place with the provider; processing takes place within the European Union.

4. Cookies

This website does not use cookies for analytics, marketing or recognition purposes. Where technically necessary cookies are used in individual cases, this is based on § 165(3) nos. 1 and 2 of the Austrian Telecommunications Act (TKG 2021) in conjunction with Art. 6(1)(f) GDPR. Such cookies are deleted at the latest when you close your browser.

5. Traffic measurement

To evaluate website usage, we use exclusively the aggregated, server-side statistics of our hosting provider. No cookies are set, no identifiers are stored on your device, and no usage profiles are created. Evaluation takes place solely in aggregated form, for example as page views per day or country of origin, and does not allow conclusions to be drawn about individual persons. The legal basis is Art. 6(1)(f) GDPR.

6. Contact by email or phone

If you contact us by email or phone, we process your details exclusively to handle your request. The legal basis is Art. 6(1)(b) GDPR, insofar as your inquiry serves to initiate or fulfil a contract, otherwise our legitimate interest in responding to inquiries (Art. 6(1)(f) GDPR).

Our email correspondence is handled via Google Workspace (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). We delete inquiries once they have been fully processed, provided no statutory retention obligations, in particular under § 132 of the Austrian Federal Fiscal Code (BAO) and § 212 of the Austrian Commercial Code (UGB), apply.

7. Contact form

On individual information pages we offer a contact form. We collect subject, first name, last name, company, email address and phone number; first name, last name and email address are mandatory fields. Submission is encrypted to our own endpoint api.pp-multitouch.com; from there your request is delivered to us as an email. For sending, we use Mailjet (Sinch Email / Mailjet SAS, 13–13 bis rue de l’Aubrac, 75012 Paris, France) as a processor.

The legal basis is Art. 6(1)(b) GDPR. Your details are not used for advertising purposes and are not passed on to any other third parties. Data is deleted once your request has been resolved, at the latest after any applicable statutory retention periods have expired.

To protect against automated submissions, the form contains an additional field that is invisible to you. If it is filled in, we discard the submission; no additional personal data is collected in the process.

8. Videos from Vimeo

On individual pages we embed videos from Vimeo.com Inc., 330 West 34th Street, 10th Floor, New York, NY 10001, USA. These videos are not loaded automatically: initially you only see a placeholder area with a play button, with no connection to Vimeo established. Only when you actively click this button is the Vimeo player loaded and a connection to Vimeo established. In doing so, Vimeo learns your IP address and which of our pages you have visited; if you are logged in to Vimeo, Vimeo may associate the visit with your account.

The legal basis for this transfer is the consent you give by clicking (Art. 6(1)(a) GDPR), which you may revoke at any time with effect for the future by not starting any further videos. We call the player in privacy-friendly mode (Do Not Track), so that Vimeo does not set tracking cookies. The transfer to the USA is based on the European Commission's adequacy decision on the EU-US Data Privacy Framework, or alternatively on your explicit consent under Art. 49(1)(a) GDPR. Further details at vimeo.com/privacy.

9. Links to social networks

Our pages contain simple hyperlinks to our profiles on social networks. No social media plug-ins or buttons from these providers are embedded. Data transfer only takes place once you actively click such a link and visit the respective provider's site. From that point on, that provider's privacy policy applies.

10. Recipients and processors

• BunnyWay d.o.o. (Slovenia) – hosting and delivery of the website
• Sinch Email / Mailjet SAS (France) – sending of form inquiries
• Google Ireland Limited (Ireland) – email service for our business correspondence
• Vimeo.com Inc. (USA) – only after a video has been actively started

Contracts pursuant to Art. 28 GDPR are in place with all processors. Beyond this, we only disclose your data where we are legally obliged to do so.

11. Your rights

You have the following rights with respect to personal data concerning you:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object to processing based on legitimate interests (Art. 21 GDPR)
• Right to withdraw consent given, with effect for the future (Art. 7(3) GDPR)

To exercise these rights, an informal message to the address above or to office@pp-multitouch.com is sufficient.

Regardless of the above, you have the right to lodge a complaint with a supervisory authority. The authority responsible for us is the Austrian Data Protection Authority (Österreichische Datenschutzbehörde), Barichgasse 40–42, 1030 Vienna, Austria, Phone +43 1 52 152-0, Email dsb@dsb.gv.at.

12. No automated decision-making

No automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place.

13. Provision of your data

This website can be used without providing personal data. To process an inquiry we need the details marked as mandatory fields; without these we cannot respond to your request. There is no statutory or contractual obligation to provide this data.

14. Objection to promotional emails

We hereby object to the use of contact details published under our legal notice obligation for sending unsolicited advertising and promotional material. We expressly reserve the right to take legal action in the event of unsolicited advertising information being sent to us.

15. Changes to this privacy policy

We update this privacy policy as soon as the services used on this website or the legal situation change. The version available here at any given time applies.