This policy explains the processing of personal data when using transaktionshaus.com. Personal data is information that can directly or indirectly identify a natural person.
This website serves professional market participants worldwide and is available in German and English. Mandatory privacy rights under the applicable law remain unaffected. For questions about your rights, contact the controller named above.
1. Controller and contact
Schneider Analysis
Südparkstraße 4a, AT-4614 Marchtrenk, Austria
Phone: +49 89 559 205 46
Email: support@schneideranalysis.com
2. Website visits and hosting
We use Lovable’s hosting infrastructure to provide this website. When it is accessed, technical connection data is processed, in particular the IP address, page accessed, date and time, browser and operating system, volume of data transferred and, where applicable, the referring website. Technical logs may be processed for error analysis, security and abuse prevention.
This processing ensures the secure and functional provision of our services. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure operation of the website. Encrypted connections are provided via HTTPS.
3. Cookies and local storage
The current pages do not require a login or shopping cart. The application does not use cookies to store your details in the teaser generator itself. Technically necessary functions of the hosting infrastructure may process connection data.
Your cookie choice is stored under “transaktionshaus-consent” in your browser’s local storage for up to 180 days. Only consent to external fonts, the time and the version of your choice are stored. This storage is necessary to honour your decision (Section 165(3) TKG 2021; Article 6(1)(f) GDPR). You can change your choice at any time via “Cookie settings” in the footer and withdraw consent with effect for the future. If browser storage is deleted or blocked, you will be asked again.
We do not use our own advertising tracking. The appointment booking link in the confirmation email leads to the external service Calendly (Calendly LLC, USA), where its privacy policy applies. If cookies or services requiring consent are added in the future, they will be used only after appropriate consent and described in this policy.
Your selected language is saved locally in your browser under “transaktionshaus-language” so it can be used on later visits. Only the language choice is stored, not a profile. You can change the language at the top of the page or delete the stored preference in your browser.
4. Contact and early access
If you contact us by email or phone, we process your contact details and the information you provide to handle your enquiry. This also applies to questions about partnerships or early access. An email link opens your own email program; a message is transmitted only when you send it.
The legal basis is Article 6(1)(b) GDPR where the enquiry relates to entering into or performing a contract; otherwise it is Article 6(1)(f) GDPR based on our legitimate interest in responding. A contact enquiry does not automatically subscribe you to a newsletter.
5. AI-assisted teaser creation
The teaser generator processes your selected market perspective and the profile details you enter to create a draft text. During creation, the information is transmitted to our server and via the Lovable AI Gateway to a language model provided by OpenAI . An AI teaser cannot be generated without this processing.
Enter only anonymised information: no company or personal names, contact details, exact locations or confidential documents. A combination of details may also allow identification. The AI instruction to anonymise therefore does not replace your own review and does not guarantee anonymity.
The text is not yet stored during creation. Only when you send the teaser using “Submit teaser” do we store the selected perspective, your profile details, the teaser, company name, contact person, email address and phone number. Names and contact details are not transmitted to the language model. Depending on the perspective, we include the teaser in our opportunity, interest or partner catalogue to search for suitable market participants, contact you and facilitate introductions. We use only the anonymous teaser with third parties; we disclose your identity only with your consent.
After submission, you receive a confirmation email; we receive an internal notification and a copy of that confirmation. The model request is made with response storage disabled (store: false).
The legal basis for storage and contact is Article 6(1)(b) GDPR (pre-contractual measures at your request) and your consent under Article 6(1)(a) GDPR, which you can withdraw at any time by emailing support@schneideranalysis.com.
Where the information remains personal despite the intended anonymisation, processing serves the service you requested under Article 6(1)(b) GDPR. Technical security and operational data is processed under Article 6(1)(f) GDPR. Do not transmit third parties’ personal data without an appropriate legal basis.
This function does not make automated decisions about a business acquisition, financing or contract conclusion within the meaning of Article 22 GDPR. The text is a draft for your own review.
6. External fonts
The DM Sans font is loaded via Google Fonts only after you consent to “External fonts”. Your browser then connects to Google servers; in particular, your IP address and technical request data may be transmitted to Google. The provider in Europe is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Processing outside the EEA, particularly in the USA, is possible. Without consent, a system font is used.
The legal basis is your consent under Article 6(1)(a) GDPR. If you withdraw consent via cookie settings, the external font integration is removed and will not load again on subsequent page visits; this cannot undo transmissions that have already occurred. Further information: Google privacy policy.
7. Recipients and international processing
Hosting, infrastructure and AI providers are used for technical provision. Processing may take place in countries outside the EEA, particularly in the USA. Where service providers process personal data on our behalf, appropriate data processing agreements are required. Transfers to third countries must meet the requirements of Articles 44 et seq. GDPR, such as an applicable adequacy decision or standard contractual clauses and, where necessary, supplementary measures.
Information about the services used is available at Lovable privacy policy and OpenAI privacy policy.
8. Retention periods
Contact enquiries are retained only as long as necessary for processing and protecting legitimate interests. Statutory retention obligations remain unaffected. We store submitted teasers and contact details as long as needed for introductions, but no longer than three years after the last contact, unless you request deletion earlier. Technical logs of service providers are subject to their respective retention and deletion terms, which must be specified contractually.
9. Your rights
- Access under Article 15 GDPR
- Rectification under Article 16 GDPR
- Erasure under Article 17 GDPR
- Restriction of processing under Article 18 GDPR
- Data portability under Article 20 GDPR
- Objection under Article 21 GDPR
- Withdrawal of consent under Article 7(3) GDPR with effect for the future
- Complaint to a data protection supervisory authority under Article 77 GDPR, in particular the Austrian Data Protection Authority (dsb.gv.at)
Where processing is based on legitimate interests, you may object on grounds relating to your particular situation. We will then stop processing the data unless there are compelling legitimate grounds or processing serves to establish, exercise or defend legal claims. You may object to direct marketing at any time.
For privacy enquiries, contact support@schneideranalysis.com. Where the Swiss Data Protection Act applies, its rights and safeguards also remain unaffected.
10. Version and review before publication
Version: October 2026. This version describes the current website. Specific provider contractual details, retention periods and third-country safeguards must be finally reviewed and specified before public operation.