Privacy Policy
1. Controller
ESBC – European Systemic Business Competences GmbH
Contact person: Ewald Wandas
Frankgasse 1/Top 3, 1090 Vienna, Austria Phone +43 1 89 70 160 · Email: office@esbc.eu
2. Supervisory authority
You have the right to lodge a complaint with the Austrian Data Protection Authority (Österreichische Datenschutzbehörde): Barichgasse 40–42, 1030 Vienna, phone +43 1 52 152–0, email dsb@dsb.gv.at, www.dsb.gv.at.
3. Our principles
We process personal data only to the extent necessary to operate this website, answer your enquiries and provide our services. Our website does not load any third-party content: no analytics or advertising services, no embedded videos or maps, no external fonts. The terms “personal data” and “processing” are defined in Art. 4 of the General Data Protection Regulation (GDPR).
4. Legal bases
- Consent: Art. 6(1)(a) GDPR
- Contract and pre-contractual measures: Art. 6(1)(b) GDPR
- Legal obligation: Art. 6(1)© GDPR
- Legitimate interests: Art. 6(1)(f) GDPR
5. Hosting and server log files
Our website and our email server are operated by easyname GmbH in Vienna, Austria. We have concluded a data processing agreement with our hosting provider (Art. 28 GDPR). When you visit our pages, technically necessary data may be stored in server log files: IP address, date and time, page requested, amount of data transferred, browser and operating system, and the previously visited page. This serves the secure and stable operation of the website (Art. 6(1)(f) GDPR). IP addresses are only recorded when access logging is enabled; they are anonymised after 24 hours and fully deleted after 3 months at the latest. Log files are not combined with other data.
6. Encryption
All pages are transmitted in encrypted form via HTTPS (TLS).
7. Contact form and email
If you contact us via the contact form or by email, we process your name, email address, subject and message in order to answer your enquiry (Art. 6(1)(b) and (f) GDPR). Form submissions are sent to us by email and are not stored in a database on the website. To protect against spam, the form uses an invisible check field on our own server; no data is transferred to third parties. We delete your enquiry once it has been dealt with, unless statutory retention periods apply.
Emails may be read or altered without authorisation during transmission. Our mailbox uses a spam filter which, in rare cases, may also reject wanted emails.
8. Online tests
On our website we offer online tests, e.g. the DISC test, the drivers test, the love languages test, the four-ears test and the team check “The Five Dysfunctions of a Team”. The tests do not ask for names or email addresses and do not store IP addresses. They do not set cookies and do not load any external services.
Self-assessment tests: The evaluation takes place exclusively in your browser. Your answers are not transmitted to us.
Team check: So that a team can be evaluated jointly, we store the answers anonymously on our web server: the answer values (1 to 5), the selected language, the time of submission and a randomly generated identifier that allows you to change your answers until the survey closes. This identifier cannot be traced back to you. Only team results and an anonymous overview are displayed, to the facilitator (ESBC) and, once released, to the participants of the same survey. We delete the data after the evaluation is complete, at the latest after 12 months.
Storage in your browser: The tests store your language, your interim answers and, where applicable, the identifier mentioned above in your browser’s local storage. This is strictly necessary for the service you requested (§ 165(3) Austrian Telecommunications Act 2021, TKG 2021). You can delete this data in your browser at any time.
The legal basis is our legitimate interest in offering self-assessments and team analyses as part of our consulting services (Art. 6(1)(f) GDPR) and, for team checks carried out on behalf of a client, additionally the performance of a contract (Art. 6(1)(b) GDPR).
9. Cookies
We only use technically necessary cookies. Our cookie notice stores in a cookie whether you have already seen it. We do not use analytics, advertising or tracking cookies. The legal basis is § 165(3) TKG 2021 in conjunction with Art. 6(1)(f) GDPR. You can delete cookies in your browser settings at any time.
10. Links to other websites
Our website contains links, e.g. to our videos on YouTube, to Google Maps for directions and to LinkedIn, XING and Facebook. Only when you click such a link do you leave our website; from then on, the privacy policy of the respective provider applies. No data is transferred to these providers beforehand.
11. Disclosure of data
We only disclose your data where permitted or required by law, for example to our hosting provider as a processor or on the order of an authority or court (Art. 6(1)© GDPR). Data is not transferred to countries outside the EU or the European Economic Area.
12. Storage period
We store personal data only for as long as necessary for the respective purpose or as required by statutory retention periods. It is then deleted.
13. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21). You may withdraw any consent you have given at any time with effect for the future (Art. 7(3)). Please contact office@esbc.eu. You may also lodge a complaint with the data protection authority (see section 2).
14. Data security
We protect your data with technical and organisational measures in line with the state of the art, such as encrypted transmission, access restrictions and regular backups.
Last updated: October 2026