inChain
Data Security
We enter into privacy agreements with our clients in accordance with the recommendations of the Austrian Federal Economic Chamber (WKO) and relevant legal counsel. We also recommend that our clients thoroughly discuss data protection matters with their business partners.
Unsere Datenschutzrichtlinie ist ein wichtiger Bestandteil unserer Website. Sie müssen sicher sein, dass Ihre Daten bei uns geschützt sind. Die Datenschutzerklärung muss alle Komponenten auflisten, die auf unserer Website verwendet werden. Der Link zur Datenschutzerklärung wird von jeder Seite der Website aus erreicht.
Our privacy policy covers:
Data collection, use, and disclosure
We explain what information we collect, how we use it, and to whom we disclose it.
Control over Your Data
You have the ability to view, change, and update your personal information. We are available to assist you with any concerns regarding data usage.
Only your contact inquiries are collected via our company website “www.to-b.eu”. All data related to contact inquiries can be deleted immediately upon request.
The homepage provider also collects statistical tracking data, including local data on the geographic region from which the homepage is accessed.
Your administrator has access to all data within www.inChain.at. Your administrator may request access to the central customer data that we are required to maintain for your customer account for technical reasons at any time.
Data security
We protect your data through appropriate measures, data encryption, and secure servers. Your data is located in Germany. This also applies to all backups and backup copies. Our entire infrastructure is hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. Further details can be found at:
https://www.hetzner.com/de/cloud
Sample Form for Data Security
Privacy Policy
Note: This sample is designed for a standard case. Please check the Online Guide on Information Obligations or the EU General Data Protection Regulation (GDPR): Information Obligations to determine whether you need to adapt the sample!
Attention: This privacy policy is merely a statement regarding what happens to the personal data of the contractual partner(s) / customers, etc., and must be distinguished from consent under data protection law. Should such consent be required, it must be obtained separately. You can find a sample here: EU General Data Protection Regulation (GDPR): Declaration of Consent!
Data Categories:
We process your personal data that falls under the following data categories1:
· Name/Company,
· Occupation/Job Title,
· Date of Birth,
· Commercial Register Number,
· Contact Person,
· Business Address and Other Customer Addresses,
· Contact Information (Phone Number, Fax Number, Email Address, etc.)
· Bank details, credit card information,
· Order data,
· VAT number,
· Customer service inquiries,
· …
Lawfulness (Legality)and purposes of processing:
Data processing based on your declaration of consent:
You have voluntarily provided us with data about yourself, and we process this data
based on your consent for the following purposes:
· for our own advertising purposes, to send offers, promotional brochures, and newsletters (in paper and electronic form), as well as for the purpose of referring to the existing or former business relationship with the customer (reference).
You may revoke this consent at any time. Revocation means that we will no longer process your data for the above-mentioned purposes from that point on. To revoke your consent, please contact: Dieter Dichtl, .
Data processing based on contract fulfillment
The data you provide is also necessary for contract fulfillment or for the implementation of pre-contractual measures. Without this data, we cannot conclude the contract with you.
Data processing based on a legal obligation
We are required to process data we have received from you due to a legal obligation, specifically _____________________ (specify purposes).
Data processing based on legitimate interests
We process data about you based on our legitimate interests or those of a third party. _____________________ (add legitimate interest or purpose of data processing).
Retention period
We store your data _____________________ (specify the retention period or criteria for deletion).
Disclosure of data
We engage processors for data processing.
We disclose your data to the following recipients or categories of recipients _____________________
(specify the recipient and the reason for disclosure).
Your data related to inchain.at is stored exclusively in Germany.
Contact inquiries via the website www.to-b.eu are stored by “wix.com.” Here, Wix uses data centers operated by Google and Amazon, located in the U.S. and Ireland. (As of January 2026). For details, please see: Privacy and Security | Privacy | Legal Compliance | Wix.com
The adequate level of protection is based on an adequacy decision by the European Commission pursuant to Article 45 of the GDPR.
Data Subject Rights
We use automated decision-making / profiling procedures that have legal effects on you or similarly significantly affect you: _____________________
(add meaningful information about the logic involved, as well as the scope and intended effects for the data subject).
You can reach us at the following contact details: dieter.dichtl@to-b.eu
You can reach our Data Protection Officer at: dieter.dichtl@to-b.eu
Information on Legal Remedies
You have the rights to access, rectification, erasure, restriction, data portability, and objection. Please contact us to exercise these rights. If you believe that the processing of your data violates data protection law or that your data protection rights have otherwise been infringed, you may file a complaint with the supervisory authority.
In Austria, the Data Protection Authority is responsible:
Austrian Data Protection Authority
Barichgasse 40-42
1030 Vienna
Phone: +43 1 52 152-0
As of: November 2025