Privacy Policy

We place great value on the protection of personal data and process it exclusively in accordance with the General Data Protection Regulation (GDPR) and applicable national data protection provisions. This privacy policy explains, in clear terms, what data we process on our website and in the course of our business activities, for what purposes, and what rights you have.

1. Data Controller

DI David Martin

Email: office@embinova.at

The data controller is responsible for all data processing carried out through this website or in connection with our services.

2. Scope

This privacy policy applies to:

The technical provision of the website (hosting, security, CMS)
Online forms and communication
Tools and embedded services we use (e.g. Cloudflare, Google)
Our social media presences
Data processing carried out by processors on our behalf

It covers all personal data collected through our web offerings or processed in the course of our business processes.

3. General Information on Data Processing

The protection of your personal data is of particular importance to us. We therefore process your data exclusively on the basis of the applicable legal provisions (GDPR, Austrian Telecommunications Act, TKG 2003). In this privacy policy, we inform you about the most important aspects of data processing in connection with our website.

4. Legal Bases for Processing

We only process personal data where a legal basis under Art. 6 GDPR exists:

Consent (Art. 6(1)(a) GDPR): e.g. for analytics tools.
Contract / pre-contractual measures (Art. 6(1)(b) GDPR): e.g. for contact inquiries or business relationships.
Legal obligation (Art. 6(1)(c) GDPR): retention obligations, documentation.
Legitimate interest (Art. 6(1)(f) GDPR): security, technical operation, economic operation, and optimization of our website.

5. Access Data / Server Log Files

When you visit this website, information of a general nature is automatically recorded. This information (server log files) includes, among other things:

IP address
Browser type and version
Operating system used
Referrer URL
Time of the server request

This data cannot be attributed to specific individuals and is used exclusively to ensure the smooth operation of the website.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest)

6. Website Analytics (Umami)

We use Umami, a self-hosted, open-source web analytics tool, to understand how visitors use our website and to improve it. Umami runs on our own infrastructure; no data is shared with third parties. Umami does not use cookies and does not collect any personal data that could identify you individually. It records anonymized, aggregated statistics such as visited pages, referrer, browser and device type, and approximate visit duration.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in understanding and improving website usage)

7. Storage Duration

We store personal data only for as long as necessary for the respective purpose or as required by statutory retention periods. Once the purpose no longer applies or consent is withdrawn, we delete the data without delay, unless legal obligations require otherwise.

8. Contacting Us

If you contact us via the contact form on our website or by email, the data you provide (such as your name, email address, phone number, and message) is stored by us for the purpose of processing your inquiry and in case of follow-up questions. This data is processed on the basis of Art. 6(1)(a) GDPR (consent), Art. 6(1)(b) GDPR (pre-contractual measures), or Art. 6(1)(f) GDPR (legitimate interest in responding to inquiries). This data is not disclosed without your consent and is only stored for as long as necessary to process the inquiry, unless statutory retention obligations require otherwise. Providing this data is voluntary but necessary for us to respond to you.

9. Data Processing Agreements

Our website is hosted by World4You Internet Services GmbH, Austria. We also work with other service providers who process personal data on our behalf (e.g. security services, analytics). These processors are contractually obligated to:

Process data exclusively on our instructions
Implement appropriate technical and organizational measures to protect the data
Engage subcontractors only with our approval

10. Social Media (Including LinkedIn)

Our website contains links to our social media profiles, in particular LinkedIn.

Important:

No data is transmitted to LinkedIn simply by visiting our website.
Data processing by LinkedIn only occurs once you click on an external link. You are then subject to the respective privacy policy of that platform operator.

11. Data Transfers to Third Countries

Personal data is only transferred to countries outside the EU or EEA if:

An adequacy decision exists (e.g. the EU-US Data Privacy Framework),
Standard contractual clauses are used,
Or you have explicitly given your consent.

We take care to only engage service providers who ensure an adequate level of data protection.

12. Your Rights

You generally have the following rights:

Right to access
Right to rectification
Right to erasure
Right to restriction of processing
Right to data portability
Right to object to processing, in particular processing based on legitimate interests
Right to withdraw consent
Right to lodge a complaint with the supervisory authority

If you believe that the processing of your data violates data protection law, you have the right to lodge a complaint with the supervisory authority.

Competent supervisory authority:

Austrian Data Protection Authority

Barichgasse 40-42, 1030 Vienna, Austria

https://www.dsb.gv.at

We do not use automated decision-making, including profiling, that produces legal effects concerning you or similarly significantly affects you.

13. Changes to This Privacy Policy

We reserve the right to amend this privacy policy as needed to reflect legal or technical changes.