We use cookies to analyse traffic and improve our website (Google Analytics). Analytics cookies are only set with your consent. See our privacy policy.

Opens in a new tab
Dealer LoginContact
Dealer Login

Privacy Policy

Version date: 16 October 2026

1. Controller

Byte-Solutions GmbH, Kärntner Straße 538, 8054 Seiersberg-Pirka, Austria · FN 605917f · VAT ID ATU79581105 · Managing Director: Matthias Hoinik · E-mail: [email protected]

No data protection officer has been appointed, as there is no legal obligation to do so. Please direct data protection enquiries to [email protected].

2. Overview

This policy applies to the website byte-performance.com (all language versions) and the dealer portal dealer.byte-performance.com. We address businesses exclusively (B2B). We process personal data only to the extent necessary for operating the website, handling enquiries and orders and fulfilling legal obligations, or where you have given your consent. The legal bases are Art. 6(1)(a) (consent), (b) (contract), (c) (legal obligation) and (f) (legitimate interest) GDPR.

3. Hosting and Server Log Files

The website is hosted by IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany, in data centres in Germany; IONOS SE also manages the domain and DNS registration. The dealer portal dealer.byte-performance.com is hosted by Hetzner Online GmbH, Industriestraße 25, 91710 Gunzenhausen, Germany, in data centres in the European Union (Germany and Finland). Data processing agreements pursuant to Art. 28 GDPR are in place with both providers.

To deliver the website quickly and securely worldwide, we use the content delivery network (CDN) and DNS services of Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. Cloudflare routes requests to the website through its global network, caches static content and filters attacks; in doing so it processes IP addresses and connection data (Art. 6(1)(f) GDPR – secure and performant operation). A data processing agreement is in place with Cloudflare; transfers to the USA are based on Cloudflare’s certification under the EU-US Data Privacy Framework and on the EU standard contractual clauses. Further information: https://www.cloudflare.com/privacypolicy/

When the website is accessed, server log files are stored automatically: IP address, date and time, page accessed, volume of data transferred, referrer, browser and operating system. The data serve the secure and stable operation of the website (Art. 6(1)(f) GDPR) and are deleted after 14 days unless they are required to investigate a security incident.

4. Security (Wordfence)

To protect against attacks, we use the security plugin Wordfence from Defiant Inc., 800 5th Ave Ste 4100, Seattle, WA 98104, USA. IP addresses and access data are checked for suspicious patterns; if an attack is suspected, IP addresses may be transmitted to Defiant and temporarily blocked. The legal basis is our legitimate interest in the security of the website (Art. 6(1)(f) GDPR). Transfer to the USA takes place on the basis of the Standard Contractual Clauses of the EU Commission or the EU-US Data Privacy Framework, where the provider is certified.

5. Cookies and Consent (CookieYes)

Technically necessary cookies (e.g. language setting, session, cookie preference) are set on the basis of § 165(3) TKG 2021 (Austrian Telecommunications Act) and Art. 6(1)(f) GDPR. All other cookies and tracking technologies are activated only after you have given your consent via the cookie banner (Art. 6(1)(a) GDPR). You can change or withdraw your consent at any time via the “Cookie settings” link in the footer.

The banner is operated with CookieYes from CookieYes Limited, 3 Warren Yard, Warren Farm Office Village, Milton Keynes MK12 5NW, United Kingdom. The consent decision, a timestamp and an anonymised identifier are stored in order to be able to demonstrate consent (Art. 7(1) GDPR). The United Kingdom is covered by an adequacy decision of the EU Commission.

6. Web Analytics (Google Analytics 4)

Only with your consent do we use Google Analytics 4 from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses cookies and similar technologies to analyse the use of the website (pages accessed, time spent, approximate location based on a truncated IP address, device, source of the visit). IP addresses are truncated by Google within the EU and are not stored. Data may be transferred to Google LLC in the USA; Google is certified under the EU-US Data Privacy Framework. The data are deleted after 14 months. The legal basis is Art. 6(1)(a) GDPR; you can withdraw your consent at any time in the cookie banner. Further information: https://policies.google.com/privacy

7. Contact and Dealer Forms, E-mail

If you write to us via the contact form, the dealer form (“Become a dealer”) or by e-mail, we process the data you provide (name, company, e-mail, website, message, and for dealer enquiries additionally address, business activity and tools used) in order to handle your enquiry and to initiate a business relationship (Art. 6(1)(b) and (f) GDPR). The forms are transmitted by e-mail to our mailbox; our e-mail and office services run on Microsoft 365 from Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland, with processing in data centres in the EU (data processing agreement incl. EU Data Boundary). Enquiries are deleted once they have been dealt with and no retention obligations stand in the way; we retain business correspondence for 7 years (§ 132 BAO (Austrian Federal Fiscal Code), § 212 UGB (Austrian Commercial Code)).

8. Dealer Portal (dealer.byte-performance.com)

8.1 Account and Contract Processing

Upon registration, we process company data, name and function of the contact person, address, e-mail, telephone number, VAT ID number, proof of business status, login credentials (password encrypted), as well as login times and IP addresses. The purpose is the management of the account, the processing of Requests, Credits and invoices, and the security of the Portal (Art. 6(1)(b) and (f) GDPR). Acceptances of the user agreement and Declarations of Intended Use for Requests are logged with timestamp and IP address (Art. 6(1)(f) GDPR, evidence).

8.2 Control Unit Data (Original Files and Files)

Uploaded original files and created files are technical data of the machine. As a rule, they do not contain personal data; in individual cases they may contain serial numbers, vehicle identification numbers or information entered by the dealer relating to its end customers. To that extent, we process these data on behalf of the dealer on the basis of a data processing agreement pursuant to Art. 28 GDPR. We store original files, files and Request data for the performance of the contract, for complaints and Re-Tunes, and to fulfil statutory retention obligations (7 years). Technical content without serial numbers and other personal references is included in our development database (see File Service Terms and Conditions § 11).

8.3 Payments

We process Credits, invoices and payments for contract processing and accounting (Art. 6(1)(b) and (c) GDPR). For payments via PayPal, your data are transmitted to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, 2449 Luxembourg; for credit card payments to Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin 2, Ireland (transfer to Stripe, Inc., USA, on the basis of the EU-US Data Privacy Framework). We do not store complete card data. We retain invoice data for 7 years (§ 132 BAO).

8.4 Notifications

We send status messages regarding Requests, complaints, Credits and important changes by e-mail to the registered address (Art. 6(1)(b) GDPR). We send promotional information about new solutions to dealer accounts on the basis of § 174 TKG 2021 and Art. 6(1)(f) GDPR; you can object to this at any time via the unsubscribe link or by e-mail.

9. External Content and Links

Our website loads fonts and scripts from our own server; we embed external content (e.g. videos or maps) only after consent. Links to Facebook, Instagram, X and LinkedIn are plain links without any data transfer when the page is accessed. The privacy policies of the linked websites apply to those websites.

10. Recipients and Transfers to Third Countries

Recipients are the processors named in this policy (hosting, domain, e-mail, security, consent management, analytics, payment), our tax adviser, and authorities and courts where we are legally obliged to disclose. Transfers to third countries (USA, United Kingdom) take place only on the basis of an adequacy decision, the EU-US Data Privacy Framework or the Standard Contractual Clauses of the EU Commission.

11. Retention Period

We store personal data only for as long as necessary for the respective purpose: server logs 14 days, enquiries until they have been dealt with, account and contract data for the duration of the business relationship and thereafter for the statutory retention periods (7 years under § 132 BAO and § 212 UGB, longer in individual cases in the event of ongoing proceedings), records of consent 3 years after withdrawal, analytics data 14 months.

12. Your Rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). You may withdraw any consent given at any time with effect for the future. To do so, please contact [email protected]. You also have the right to lodge a complaint with the Austrian Data Protection Authority (Datenschutzbehörde), Barichgasse 40–42, 1030 Vienna, [email protected], or with the supervisory authority of your place of residence.

13. Obligation to Provide Data, Automated Decision-Making

The provision of data is necessary for using the Portal and for responding to enquiries; without it we cannot provide the service. Automated decision-making, including profiling within the meaning of Art. 22 GDPR, does not take place.

14. Security

The website and the Portal are encrypted using TLS. Access to Portal data is restricted to authorised employees; passwords are stored only in encrypted form; backups are stored encrypted.

15. Changes

We will update this policy if our services or the legal situation change. The version published on the website at the relevant time applies.