1. Controller
INVENTIO GmbH
Dammweg 1, A-3163 Rohrbach an der Gölsen, Austria
Phone: +43 2764 33975
Email:
Managing Director: Dr. Markus Leopold, MBA
2. General information on data processing
We process our users' personal data only to the extent necessary to provide a functioning website and our content and services. Personal data is generally processed only with the user's consent, unless obtaining prior consent is not feasible for practical reasons and processing is permitted by law.
3. Legal bases
Where we obtain consent, Art. 6(1)(a) GDPR applies. For processing necessary to perform a contract, Art. 6(1)(b) GDPR applies. For processing required to comply with legal obligations, Art. 6(1)(c) GDPR applies. Where processing is based on our legitimate interests, Art. 6(1)(f) GDPR applies.
4. Provision of the website & server logs
Each time our website is accessed, our systems automatically collect data from the accessing device: anonymised IP address, date and time of access, name and URL of the retrieved file, referrer URL, browser and operating system, and the name of the internet service provider. This data is stored in log files and automatically deleted after no more than 7 days. Legal basis: Art. 6(1)(f) GDPR.
5. Hosting and content delivery (Vercel)
This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA, and delivered via its global content delivery network. In doing so, Vercel processes technical access data (IP address, time of access, requested resource) to the extent required for the provision, stability and security of the website. A data processing agreement pursuant to Art. 28 GDPR is in place with Vercel; data transfers to the USA are based on the EU Standard Contractual Clauses and the EU-US Data Privacy Framework. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure and performant delivery).
6. Fonts and external content
All fonts used on this website are stored locally on the server. No connection to Google Fonts or other external font services is established when the site is accessed. No social media plugins are used.
7. Audience measurement (Vercel Web Analytics)
We use Vercel Web Analytics for statistical analysis of website usage. Measurement is performed without cookies and without cross-device tracking; visits are counted solely by means of an anonymised identifier that changes daily. Identification of individual persons is not possible. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in audience measurement).
8. Contact by email
If you contact us by email, the data you provide (name, email address, message content) is stored for the purpose of processing your enquiry and possible follow-up questions. Legal basis: Art. 6(1)(f) GDPR. The data is deleted once your enquiry has been dealt with, at the latest after 6 months, unless statutory retention obligations apply.
9. Cookies
This website itself does not set any cookies – not even for audience measurement. Should technically necessary cookies become required in future, they will be used on the basis of Art. 6(1)(f) GDPR; optional cookies would only be activated with your express consent (Art. 6(1)(a) GDPR).
10. Disclosure to third parties
Your personal data is generally not transferred to third parties, except where you have expressly consented (lit. a), the transfer is required for the performance of a contract (lit. b), we are legally obliged to disclose it (lit. c), or the transfer is necessary to protect legitimate interests (lit. f) – in each case pursuant to Art. 6(1) GDPR.
11. Storage period
Personal data is deleted or blocked as soon as the purpose of its storage ceases to apply. Storage beyond this period only takes place where provided for by European or national legislation (e.g. retention periods of 7 years under Austrian tax and commercial law, BAO and UGB).
12. Your rights as a data subject
- Art. 15 Right of access – you may request information on whether and which data we store about you.
- Art. 16 Right to rectification of inaccurate data.
- Art. 17 Right to erasure, unless statutory retention obligations apply.
- Art. 18 Right to restriction of processing.
- Art. 20 Right to data portability.
- Art. 21 Right to object to processing based on legitimate interests at any time.
- Art. 7(3) Right to withdraw consent at any time with effect for the future.
To exercise your rights, please contact:
13. Right to lodge a complaint
You have the right to lodge a complaint with the Austrian Data Protection Authority:
Österreichische Datenschutzbehörde (DSB)
Barichgasse 40–42, 1030 Vienna, Austria
Phone: +43 1 52 152-0
Email: dsb@dsb.gv.at
Web: www.dsb.gv.at
14. Online dispute resolution
The European Commission provides a platform for online dispute resolution: https://ec.europa.eu/consumers/odr
15. Validity of this privacy policy
This privacy policy is currently valid as of June 2026. It may become necessary to amend it as our website evolves or legal requirements change.