BRAUJE
Privacy policy
Last updated: 14 October 2026
This is a translation for your convenience. The German version is legally binding.
This page explains which personal data we process when you visit www.brauje.com or contact us: why, on what legal basis, who receives it and how long we keep it. The legal framework is the General Data Protection Regulation (GDPR), the Austrian Data Protection Act (DSG) and the Austrian Telecommunications Act 2021 (TKG 2021).
Summary
- During a normal visit this website sets no cookies.
- Your browser stores at most three technical entries from this website (section 5). None of them contains an identifier that could be used to recognise you.
- To deliver the site to you, our upstream service Cloudflare and our server at Amazon Web Services in Frankfurt process your IP address and technical data about the request. We delete the server logs after 14 days.
- All fonts are served from our own server.
- We count visits with our own statistics on our own server: no cookies, no storage of your IP address and no third-party services (section 6). We use no advertising pixels.
1. Who is responsible?
BRAUJE is a brand. The website www.brauje.com is operated by:
Werkmit beotol Werkzeuge GmbH
Hauptstraße 23, 3013 Tullnerbach, Austria
Company register: FN 393396 z, Regional Court of St. Pölten
Email: office@brauje.com
Phone: +43 660 66 11 600
We have not appointed a data protection officer because the conditions for this (Art. 37 GDPR) do not apply to us. For any data protection question, contact us at office@brauje.com.
2. Visiting the website: server and server logs
What data: With every request your browser transmits technically necessary data: your IP address, date and time, the address requested, the response code and the amount of data transferred, the page you came from (referrer), and details of your browser and operating system. Our web server writes this data to server logs.
Why: to deliver the page, find errors, and detect and fend off attacks and misuse.
Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest is a secure, stable and reachable website.
Where and with whom: Our server runs at Amazon Web Services in the Frankfurt am Main data centre. According to the AWS Customer Agreement, our contracting party is Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855 Luxembourg. AWS processes the data as our processor (Art. 28 GDPR). The data processing agreement forms part of the AWS terms.
Transfers outside the EU: We deliberately chose a data centre in the EU and do not intend any transfer to other countries. Should AWS nevertheless process data outside the European Economic Area, the European Commission's standard contractual clauses in the AWS data processing agreement apply. AWS is also certified under the EU-U.S. Data Privacy Framework.
How long: Server logs are deleted automatically after 14 days. The server is backed up daily and each backup is overwritten after 7 days, so a deleted entry may remain in a backup for up to 7 more days. If we need an entry to investigate a specific security incident, we keep it until the investigation is complete.
3. Upstream service: Cloudflare
What Cloudflare does: All requests to www.brauje.com pass through Cloudflare's network. Cloudflare answers name lookups (DNS) for brauje.com, encrypts the connection (HTTPS) and protects the website against attacks and overload. Cloudflare also keeps copies of public content such as images so that they load faster.
What data: IP address, date and time, the address requested, technical details from your browser (for example browser identifier, language setting, referrer) and connection data.
Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest is a fast, secure and reachable website and protection against attacks.
Recipient: Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. Cloudflare processes the data as our processor (Art. 28 GDPR, Cloudflare data processing addendum). For its own purposes, such as the security of its network, Cloudflare states that it processes some data as an independent controller. More at cloudflare.com/privacypolicy.
Transfer to the USA: Cloudflare is certified under the EU-U.S. Data Privacy Framework, which is covered by the European Commission's adequacy decision of 10 July 2023, Implementing Decision (EU) 2023/1795 (Art. 45 GDPR). In addition, the European Commission's standard contractual clauses in the data processing addendum apply (Art. 46 GDPR).
Cookies: During a normal visit Cloudflare sets no cookies on this website. Only if Cloudflare shows a security check because of unusual traffic may it set a technically necessary cookie (cf_clearance) once the check has been passed. It records that the check was passed (§ 165(3) TKG 2021).
How long: Cloudflare does not state a fixed period. According to Cloudflare, data is kept only as long as needed for these purposes and for legal obligations, and is then deleted.
4. Contact by email and phone
What data: whatever you tell us, for example name, company, email address, phone number and the content of your message. If you call us, we see your number unless you withhold it.
Why: to answer and handle your enquiry.
Legal basis: Art. 6(1)(b) GDPR if your enquiry aims at a contract with you. In all other cases Art. 6(1)(f) GDPR applies; our legitimate interest is answering enquiries.
Recipient: Our mailbox is hosted by ESTUGO, Schuhhagen 18, 17489 Greifswald, Germany. According to ESTUGO, its servers are located in Germany. ESTUGO processes the emails as our processor (Art. 28 GDPR).
Internal analysis: From 5 November 2026, we also include emails to our BRAUJE addresses in our internal analysis, including with AI language models at Amazon Web Services in the EU. Details and your right to object: werkmit.at/kundenservice/datenschutz, section 15.1 (in German).
How long: If your enquiry does not lead to a business transaction, we delete it no later than 2 years after the last contact. If it relates to a business transaction, we keep it as a business record for 7 years from the end of the calendar year (§ 212 Austrian Commercial Code, § 132 Austrian Federal Fiscal Code).
5. Storage in your browser (cookies and similar technologies)
During a normal visit this website sets no cookies. It only stores the following technical entries in your browser's storage. None of them contains an identifier that could be used to recognise you. The website does not send these entries to us or to third parties.
Swipe the table sideways →
| Entry | Where | Content | Purpose | When it disappears |
|---|---|---|---|---|
brauje_intro | session storage | "1" | The intro animation plays only on the first page view, not again on every page. | when you close the tab or window |
brauje_vt | session storage | name of a product, e.g. "gold" | transition animation when you click a product image | when the next page loads |
brauje_nostats | local storage | "1" | Only if you object to the statistics (section 6): the website then no longer counts your visits. | when you turn the statistics back on or clear the website data in your browser |
Legal basis: § 165(3) TKG 2021. These entries are strictly necessary for the website to work as you request it and for your choice in the consent window and your objection to the statistics to be respected. We therefore do not ask for consent. You can delete them at any time in your browser settings.
Editors' login page: Only someone who opens our editors' login page (/wp-login.php) receives a technical test cookie from WordPress (wordpress_test_cookie). It checks whether the browser accepts cookies and is deleted when the browser is closed. Editors receive login cookies after signing in; visitors do not.
6. Statistics without cookies
What we measure: To know which pages and tapes people are interested in and how visitors find us, we count page views with our own statistics. They run entirely on our server at Amazon Web Services in Frankfurt (section 2). They use no cookies and no third-party service, and they do not recognise you on another day or on other websites.
Which data: the page you visit, date and time, the website you come from (only its name, e.g. google.com), campaign information in the address (utm parameters), whether you come from an ad (only the provider, not the click ID), browser, operating system and device type (derived from the browser identifier), your browser's language setting, the country (derived by Cloudflare from the IP address), how long the page was visible and how far you scrolled, as well as clicks on phone, email, directions, dealers and links to other websites (only their name), the result of the tape finder and which questions you open.
IP address: We do not store your IP address for the statistics. So that we count visitors only once per day, our server creates a shortened checksum from the IP address, the browser identifier and a random key. The key is replaced every day and the old one is deleted. After that, the checksum can no longer be linked to anyone, and visits on different days cannot be connected.
Purpose: to improve the website, to know its reach and to assess the success of our advertising. We only evaluate the data in aggregate and do not create profiles.
Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest is understanding how our website is used. The statistics store nothing in your browser unless you object (section 5).
Objection: You can turn off the statistics for this browser at any time. If your browser sends the “Do Not Track” or “Global Privacy Control” signal, we do not count your visits anyway.
Recipients: none. Amazon Web Services processes the data as our processor (section 2).
Retention: We delete the entries automatically after 12 months.
7. Fonts
All fonts on this website are stored on our own server. No data goes to third parties when fonts load.
8. Links to other websites
We link to Google Maps (directions to the shops), werkmit.at and mixfix.at. These services are not embedded. Only when you click a link does your browser open the provider's page, and their privacy policy applies there. Links containing an email address or phone number only open your own email or phone app.
9. Overview: who receives data and how long it is kept
Swipe the table sideways →
| Recipient | Role | Based in | Basis for transfers outside the EU | Retention |
|---|---|---|---|---|
| Amazon Web Services EMEA SARL (server in Frankfurt) | processor | Luxembourg | none intended; otherwise standard contractual clauses, AWS certified under the Data Privacy Framework | server logs 14 days, backups 7 days, statistics 12 months |
| Cloudflare, Inc. | processor; independent controller for its own purposes | USA | Data Privacy Framework and standard contractual clauses | according to Cloudflare, only as long as needed |
| ESTUGO (mailbox) | processor | Germany | no transfer | 2 years after last contact, or 7 years for business transactions |
10. Your rights
You have the right to
- access your data (Art. 15 GDPR),
- rectification of inaccurate data (Art. 16 GDPR),
- erasure (Art. 17 GDPR),
- restriction of processing (Art. 18 GDPR),
- data portability (Art. 20 GDPR),
- object (Art. 21 GDPR, see the box "Your right to object" above),
- withdraw consent at any time with effect for the future (Art. 7(3) GDPR).
Write to us at office@brauje.com. We reply as quickly as possible and no later than one month. If we are not sure that a request comes from you, we will ask.
Complaints: If you believe we process your data unlawfully, you can lodge a complaint with the supervisory authority:
Austrian Data Protection Authority (Österreichische Datenschutzbehörde), Barichgasse 40–42, 1030 Vienna, Austria
Phone +43 1 52 152-0, email dsb@dsb.gv.at, www.dsb.gv.at
You can also contact the supervisory authority in the EU country where you live or work (Art. 77 GDPR).
11. Do you have to provide data?
You are not required to by law or contract. Without your IP address and technical details, however, we cannot deliver the website to you. Contacting us by email or phone is voluntary, but we cannot handle an enquiry without the required details.
12. Automated decisions
We do not make decisions based solely on automated processing that have legal effects on you or similarly significantly affect you (Art. 22 GDPR).
13. Security
This website transmits all data in encrypted form (HTTPS). We protect our systems with technical and organisational measures under Art. 32 GDPR, for example access restrictions, up-to-date software and daily backups.
14. Changes
If the website, a service or the law changes, we update this privacy policy. The version published here, with the date shown above, applies.