Privacy Policy

Data Controller

Ventrax (sole proprietorship, in formation)

Vorarlberg, Austria
Contact: via the contact form on ventrax.at

The full address will be added after the trade registration is completed. Until then, contact via this website's form is the primary communication channel in the sense of Art. 13 (1) a GDPR.

Principle

We collect and process personal data exclusively within the framework of the applicable data protection provisions of the European Union (GDPR) and Austria (DSG). We only process data that we actually need for the respective purpose described (data minimisation, Art. 5 (1) c GDPR).

Access Data / Server Logs

When you access this website, technical access data is automatically stored in server log files by the hosting provider:

• IP address (typically shortened / anonymised)
• Date and time of access
• Accessed URL and HTTP status code
• Referrer URL, browser type and operating system

Legal basis: Art. 6 (1) f GDPR (legitimate interest in operational security and abuse prevention).
Storage period: maximum 14 days, then automatic deletion unless a longer retention is required due to a specific security incident.

Contact Form

When you send us a message via the contact form on this website, we collect the following data:

• Name
• Email address
• Name of practice / company, if provided (optional)
• Your message and any information it contains

Purpose: responding to your enquiry and preparing a potential first call.
Legal basis: Art. 6 (1) b GDPR (initiation of a contractual relationship) or Art. 6 (1) f GDPR (legitimate interest in efficient communication).
Storage period: until your enquiry has been handled and then for the statutory retention periods where relevant. Enquiries without further business follow-up are deleted no later than 12 months.

Note: please do not submit health data or other special categories of personal data within the meaning of Art. 9 GDPR via the contact form. For processing such data we enter into a separate data processing agreement under Art. 28 GDPR before project start.

Processors used

We use selected service providers that act on our behalf. With each of these providers, a data processing agreement under Art. 28 GDPR or an equivalent contractual level of protection is in place.

No tracking, no profiling

This website uses no advertising cookies, no Google Analytics, no Facebook Pixel, no Hotjar or comparable tracking tools. No automated decision-making or profiling within the meaning of Art. 22 GDPR takes place.

Data transfer to third countries

A data transfer to countries outside the European Economic Area currently only takes place in connection with Formspree (USA). This transfer is based on EU Standard Contractual Clauses. We expressly point out that the USA does not have a level of data protection equivalent to the GDPR. Anyone who does not accept this can contact us via other channels — the use of the form is voluntary.

Your rights under GDPR

You have the following rights vis-à-vis us:

• Access (Art. 15 GDPR) — you can learn at any time which data we process about you.
• Rectification (Art. 16 GDPR) — you can have incorrect data corrected.
• Erasure (Art. 17 GDPR) — "right to be forgotten".
• Restriction of processing (Art. 18 GDPR).
• Data portability (Art. 20 GDPR) — receive your data in a structured format.
• Objection (Art. 21 GDPR) — in particular against processing based on legitimate interest.
• Withdrawal of given consents (Art. 7 (3) GDPR) with effect for the future.

To exercise these rights, an informal message via the contact form on ventrax.at is sufficient.

Right to lodge a complaint

You have the right to lodge a complaint with the Austrian Data Protection Authority about our processing of your personal data:

Österreichische Datenschutzbehörde
Barichgasse 40–42, 1030 Vienna, Austria
www.dsb.gv.at

Currency and changes

We reserve the right to adapt this privacy policy if the legal situation or our service providers change. The currently applicable version is always available on this page.