Privacy Policy

1. Data Controller

DI David Martin

Email: office@embinova.at

The data controller is responsible for all data processing carried out through this website or in connection with our services.

2. Scope

This privacy policy applies to:

• The technical provision of the website (hosting, security, CMS)
• Online forms and communication
• Tools and embedded services we use (e.g. Cloudflare, Google)
• Our social media presences
• Data processing carried out by processors on our behalf

It covers all personal data collected through our web offerings or processed in the course of our business processes.

3. General Information on Data Processing

The protection of your personal data is of particular importance to us. We therefore process your data exclusively on the basis of the applicable legal provisions (GDPR, Austrian Telecommunications Act, TKG 2003).

In this privacy policy, we inform you about the most important aspects of data processing in connection with our website.

4. Legal Bases for Processing

We only process personal data where a legal basis under Art. 6 GDPR exists:

• Consent (Art. 6(1)(a) GDPR): e.g. for non-essential cookies or analytics tools.
• Contract / pre-contractual measures (Art. 6(1)(b) GDPR): e.g. for contact inquiries or business relationships.
• Legal obligation (Art. 6(1)(c) GDPR): retention obligations, documentation.
• Legitimate interest (Art. 6(1)(f) GDPR): security, technical operation, economic operation, and optimization of our website.

5. Access Data / Server Log Files

When you visit this website, information of a general nature is automatically recorded. This information (server log files) includes, among other things:

• IP address
• Browser type and version
• Operating system used
• Referrer URL
• Time of the server request

This data cannot be attributed to specific individuals and is used exclusively to ensure the smooth operation of the website.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest)

6. Storage Duration

We store personal data only for as long as necessary for the respective purpose or as required by statutory retention periods. Once the purpose no longer applies or consent is withdrawn, we delete the data without delay, unless legal obligations require otherwise.

7. Contact Form

If you contact us via the contact form on our website, the data you enter (name, email address, message) is stored by us for the purpose of processing your inquiry and in case of follow-up questions.

This data is processed on the basis of Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR (legitimate interest in responding to inquiries).

This data is not disclosed without your consent and is only stored for as long as necessary to process the inquiry.

8. Getting in Touch

If you contact us by email, the data you provide is stored by us for the purpose of processing your inquiry and in case of follow-up questions. Processed data may include, in addition to your name and email address, your phone number and the content of your message.

We do not disclose this data without your consent and delete it once the matter is resolved and no statutory retention obligations apply.

Legal basis: Art. 6(1)(a), (b), (f) GDPR

9. Data Processing Agreements

We work with service providers who process personal data on our behalf (e.g. hosting, security services, analytics). These processors are contractually obligated to:

• Process data exclusively on our instructions
• Implement appropriate technical and organizational measures to protect the data
• Engage subcontractors only with our approval

10. Cookies & Consent Management

Our website uses cookies:

• Technically necessary cookies (for operation, security, core functionality)
• Optional cookies (e.g. analytics), which are only set with your consent

You can change or withdraw your cookie settings at any time via the consent banner.

Legal bases:

• Art. 6(1)(f) GDPR (necessary cookies)
• Art. 6(1)(a) GDPR (optional cookies)

11. Social Media (Including LinkedIn)

Our website contains links to our social media profiles, in particular LinkedIn.

Important:

• No data is transmitted to LinkedIn simply by visiting our website.
• Data processing by LinkedIn only occurs once you click on an external link. You are then subject to the respective privacy policy of that platform operator.

12. Data Transfers to Third Countries

Personal data is only transferred to countries outside the EU or EEA if:

• An adequacy decision exists (e.g. the EU-US Data Privacy Framework),
• Standard contractual clauses are used,
• Or you have explicitly given your consent.

We take care to only engage service providers who ensure an adequate level of data protection.

13. Your Rights

You generally have the following rights:

• Right to access
• Right to rectification
• Right to erasure
• Right to restriction of processing
• Right to data portability
• Right to object to processing, in particular processing based on legitimate interests
• Right to withdraw consent
• Right to lodge a complaint with the supervisory authority

If you believe that the processing of your data violates data protection law, you have the right to lodge a complaint with the supervisory authority.

Competent supervisory authority:

Austrian Data Protection Authority

Barichgasse 40-42, 1030 Vienna, Austria

https://www.dsb.gv.at

14. Changes to This Privacy Policy

We reserve the right to amend this privacy policy as needed to reflect legal or technical changes.