Privacy Policy

The controller within the meaning of the General Data Protection Regulation is FDM Software GmbH, Adelheid-Popp-Gasse 8/2/57, 1220 Vienna, Austria.

You can reach us at office@fdm-software.at or, for product-related requests, at kontakt@entgelt-transparenz.at.

When you visit the website, we process technical access data such as IP address, time, requested URL, browser and device information where this is necessary for security, delivery and error analysis.

For registration, demo requests or use of the platform, we process in particular contact and account data, organization data, role and permission data and the HR, job and compensation data imported by the customer.

We process personal data to provide the website, create and manage user accounts, carry out pre-contractual and contractual communication, process billing and technically secure the service.

Depending on the processing, the legal bases are Art. 6(1)(b) GDPR, Art. 6(1)(c) GDPR and Art. 6(1)(f) GDPR. For optional analytics or marketing cookies, we obtain consent under Art. 6(1)(a) GDPR.

We use technical service providers for hosting, database operations, authentication, payment processing, email delivery, logging and error analysis. These providers are contractually bound and used only to the required extent.

Payments may be processed via Stripe. Supabase and hosting services may be used for authentication, storage and server operations. Personal data is not sold.

We store personal data only for as long as required for the stated purposes or as long as statutory retention obligations exist.

Platform data imported by the customer is deleted after the end of the contract in accordance with the contractual agreements or made available for export, unless statutory obligations prevent this.

Data subjects have rights under the GDPR to access, rectification, erasure, restriction of processing, data portability, objection and withdrawal of consent.

There is also a right to lodge a complaint with the competent data protection supervisory authority. In Austria, this is the Datenschutzbehörde.

• Access and a copy of processed personal data
• Rectification of inaccurate or incomplete data
• Erasure or restriction where statutory requirements are met
• Objection to processing based on legitimate interests

Necessary cookies and local storage are used for security, language preference, login and basic website functionality.

Optional analytics and marketing cookies are set only if corresponding consent has been given via the cookie dialog. Consent can be changed or withdrawn at any time via “Cookie settings” in the page footer.

With consent to the “Analytics” category we use Microsoft Clarity (Microsoft Ireland Operations Ltd.) to evaluate how the website is used.

We advertise our offering via Google Ads (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland) and measure whether ads lead to demo requests. For this purpose the Google tag is embedded on the website. When a page is opened, it is loaded from Google servers; for technical reasons Google receives your IP address, browser and device information and the page visited.

We use Google Consent Mode v2. Without your consent to the “Marketing” category the Google tag neither sets nor reads cookies. In that case it sends cookieless signals without an identifier to Google, from which Google statistically models the number of conversions. The legal basis is our legitimate interest in aggregated measurement of our advertising (Art. 6(1)(f) GDPR).

With your consent (Art. 6(1)(a) GDPR, Sec. 165(3) Austrian TKG 2021) Google sets cookies in order to attribute an ad click to a later demo request. When you send a demo request we then additionally transmit your e-mail address in hashed form (SHA-256) to Google (“enhanced conversions”) together with role, company size and country as attributes of the request.

If you reach the website via an ad or campaign link, we keep the click ID (gclid) and campaign parameters (UTM) for the duration of the browser session and transmit them to us together with your details when you send a demo request.

Processing by Google LLC in the USA cannot be ruled out. Google LLC is certified under the EU-U.S. Data Privacy Framework.

We process the details from the “Request a demo” form to handle your request (Art. 6(1)(b) GDPR). They are delivered to us by e-mail; we use the service provider Resend (Resend, Inc.) for sending.