Protecting your data matters to us. This policy explains which personal data we process when you visit www.pp-holding.at, what we use it for and what rights you have. Last updated: October 2026.
1. Controller
Peak Properties Holding GmbH, Dorf 27, 5652 Dienten am Hochkönig, Austria
Managing director: Elias Oberlechner MSc.
Email: office@pp-holding.at · Phone: +43 676 3319111
Please contact us at this address with any questions about data protection or to exercise your rights.
2. Hosting and delivery of the website
Our website is operated via Cloudflare Pages (Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA). When you visit it, Cloudflare processes technically necessary data such as your IP address, date and time, the page requested and browser and device information in order to deliver the website securely and quickly and to fend off attacks. The legal basis is our legitimate interest in secure and stable operation (Art. 6(1)(f) GDPR). Cloudflare is certified under the EU-US Data Privacy Framework; standard contractual clauses also apply.
We serve fonts, images and videos from our own web space; no connections are made to Google Fonts or similar services for this.
3. Contact and enquiry forms
If you contact us via a form, email or phone, we process the details you provide (e.g. name, email address, phone number, message, preferred region and the project you are enquiring about) in order to answer your enquiry and, where applicable, prepare an offer. The legal basis is pre-contractual measures (Art. 6(1)(b) GDPR) and our legitimate interest in handling enquiries (Art. 6(1)(f) GDPR).
Form enquiries are sent to us by email and stored in a protected enquiry list. For this we use Google Workspace (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). A transfer to Google LLC in the USA is possible; Google is certified under the EU-US Data Privacy Framework. Together with the enquiry we store the page through which – and, if available, the campaign through which (e.g. UTM parameters of an ad) – you found us, so that we can assess the effectiveness of our advertising.
To protect against spam we use Cloudflare Turnstile. Turnstile uses technical characteristics of your browser to check whether the enquiry comes from a human and does not set advertising cookies (Art. 6(1)(f) GDPR).
We keep enquiries for as long as necessary to process them and for a possible business relationship, at most three years after the last contact, unless statutory retention obligations apply.
4. WhatsApp
If you write to us via the “WhatsApp message” link, WhatsApp (WhatsApp Ireland Limited, Meta group) processes your data according to its own privacy policy. We use the message solely to answer your enquiry. If you do not want this, please contact us by email or phone.
5. Cookies and your consent
As technically necessary, we only store your privacy choice in your browser's local storage (key “pp_consent”, valid for six months). We only load statistics and marketing services once you have agreed in the consent dialog (Art. 6(1)(a) GDPR and Section 165(3) of the Austrian Telecommunications Act 2021). You can withdraw or change your consent at any time with effect for the future via the “Cookie settings” link in the footer of every page.
We use Google's Consent Mode v2: as long as you have not agreed, no Google services are loaded.
6. Statistics (with consent only)
Google Analytics 4
With your consent we use Google Analytics 4 (Google Ireland Limited) to understand how visitors use our website – for example which projects are viewed and which enquiries are sent. Cookies are set and usage data such as a shortened IP address, device and browser data, pages visited and interactions are processed. The data is deleted after 14 months. A transfer to Google LLC in the USA is possible (EU-US Data Privacy Framework).
Microsoft Clarity
With your consent we use Microsoft Clarity (Microsoft Ireland Operations Limited) to improve the usability of our website using heatmaps and anonymised session recordings. Entries in form fields are not recorded. A transfer to Microsoft Corporation in the USA is possible (EU-US Data Privacy Framework).
Cloudflare Web Analytics
For basic, anonymous access statistics (e.g. page views, loading times) we use Cloudflare Web Analytics. This service does not set cookies, does not store anything on your device and does not create user profiles (Art. 6(1)(f) GDPR).
7. Marketing (with consent only)
Google Ads
With your consent we use Google Ads with conversion tracking and remarketing (Google Ireland Limited). This lets us see whether an ad led to an enquiry and show relevant ads to visitors of our website later on. Cookies are set and identifiers such as the Google click ID are processed for this.
Meta Pixel
With your consent we use the Meta Pixel (Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland) to measure the effect of our ads on Facebook and Instagram and to build audiences for advertising. We are jointly responsible with Meta for collecting data via the pixel (Art. 26 GDPR); the agreement is available at facebook.com/legal/controller_addendum. A transfer to Meta Platforms, Inc. in the USA is possible (EU-US Data Privacy Framework).
8. Maps and 3D tours
“View on map” links open Google Maps in a new window; only then does Google's privacy policy apply. Matterport 3D tours (Matterport, Inc., USA) are only loaded when you click “Start 3D tour”; your IP address and device data, among other things, are then transmitted to Matterport.
9. Recipients and processors
We only pass on your data where this is necessary for the purposes described – to the service providers named above acting on our behalf and, where applicable, to tax advisers, notaries or partners involved in a specific project, if you have agreed to this or it is necessary to prepare a contract.
10. Your rights
You have the right of access, rectification, erasure and restriction of processing, the right to data portability and the right to object to processing based on legitimate interests. You can withdraw any consent you have given at any time. Please contact office@pp-holding.at to do so.
If you believe that the processing of your data violates data protection law, you can lodge a complaint with the Austrian Data Protection Authority (Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at).
11. Changes
We update this privacy policy when our website or the services we use change. The version published here applies.