← Back to homepage

Privacy Policy

Information pursuant to Art. 13, 14 GDPR and § 96 (3) Austrian Telecoms Act 2003.

Data Controller

Ventrax AI Solutions e.U.

Owner: Hussein Youssef
Stiglingen 37, 6850 Dornbirn
Vorarlberg, Austria

Company register number: FN 681552h
Register court: Landesgericht Feldkirch
Email: info@ventrax.at
Phone: +43 650 9485161

Principle

We collect and process personal data exclusively within the framework of the applicable data protection provisions of the European Union (GDPR) and Austria (DSG). We only process data that we actually need for the respective purpose described (data minimisation, Art. 5 (1) c GDPR).

Access Data / Server Logs

When you access this website, technical access data is automatically stored in server log files by the hosting provider:

  • IP address (typically shortened / anonymised)
  • Date and time of access
  • Accessed URL and HTTP status code
  • Referrer URL, browser type and operating system

Legal basis: Art. 6 (1) f GDPR (legitimate interest in operational security and abuse prevention).
Storage period: maximum 14 days, then automatic deletion unless a longer retention is required due to a specific security incident.

Contact Form

When you send us a message via the contact form on this website, we collect the following data:

  • Name
  • Email address
  • Name of practice / company, if provided (optional)
  • Your message and any information it contains

Purpose: responding to your enquiry and preparing a potential first call.
Legal basis: Art. 6 (1) b GDPR (initiation of a contractual relationship) or Art. 6 (1) f GDPR (legitimate interest in efficient communication).
Storage period: until your enquiry has been handled and then for the statutory retention periods where relevant. Enquiries without further business follow-up are deleted no later than 12 months.

Note: please do not submit health data or other special categories of personal data within the meaning of Art. 9 GDPR via the contact form. For processing such data we enter into a separate data processing agreement under Art. 28 GDPR before project start.

Processors used

We use selected service providers that act on our behalf. With each of these providers, a data processing agreement under Art. 28 GDPR or an equivalent contractual level of protection is in place.

Vercel Inc.

Hosting and delivery of this website. Data is delivered via the global edge network; for requests from the EU, primarily via European edge locations. Legal basis: Art. 6 (1) f GDPR. A Data Processing Addendum under Art. 28 GDPR with EU Standard Contractual Clauses is on file.

Vercel Web Analytics

Cookieless audience measurement by the same provider (Vercel Inc.). Recorded are the page visited, referrer URL, browser and device type, and country of origin. No cookies are set and no data is stored on or read from your device, so consent under § 165 TKG 2021 / the ePrivacy Directive is not required. Your IP address is not stored but processed server-side into a daily rotating checksum, which rules out recognition beyond the same day. Legal basis: Art. 6 (1) f GDPR (legitimate interest in statistical audience measurement). You may object to this processing at any time under Art. 21 GDPR.

Resend (Plus Five Five, Inc.)

Delivery of contact form submissions by email. Processing takes place on EU infrastructure (Frankfurt region); a Data Processing Agreement under Art. 28 GDPR is in place. Legal basis: Art. 6 (1) b or f GDPR. Only the details you enter in the form are transmitted.

Fonts (Fontsource)

All fonts are served locally via the npm package @fontsource. There is no connection to external font CDNs such as Google Fonts.

No advertising cookies, no profiling

This website uses no advertising cookies, no Google Analytics, no Facebook Pixel, no Hotjar or comparable tracking tools. The only audience measurement is the cookieless Vercel Web Analytics described above and serves anonymous statistics only. No cross-site tracking and no automated decision-making or profiling within the meaning of Art. 22 GDPR takes place.

Data transfer to third countries

Form submissions are processed on EU infrastructure (Resend, Frankfurt region). No regular data transfer to countries outside the European Economic Area takes place. Where the provider involves a third-country element in individual cases (US parent company), this is safeguarded by EU Standard Contractual Clauses. Using the form is voluntary — you can always reach us directly by email or phone.

Your rights under GDPR

You have the following rights vis-à-vis us:

  • Access (Art. 15 GDPR) — you can learn at any time which data we process about you.
  • Rectification (Art. 16 GDPR) — you can have incorrect data corrected.
  • Erasure (Art. 17 GDPR) — "right to be forgotten".
  • Restriction of processing (Art. 18 GDPR).
  • Data portability (Art. 20 GDPR) — receive your data in a structured format.
  • Objection (Art. 21 GDPR) — in particular against processing based on legitimate interest.
  • Withdrawal of given consents (Art. 7 (3) GDPR) with effect for the future.

To exercise these rights, an informal message via the contact form on ventrax.at is sufficient.

Right to lodge a complaint

You have the right to lodge a complaint with the Austrian Data Protection Authority about our processing of your personal data:

Österreichische Datenschutzbehörde
Barichgasse 40–42, 1030 Vienna, Austria
www.dsb.gv.at

Currency and changes

We reserve the right to adapt this privacy policy if the legal situation or our service providers change. The currently applicable version is always available on this page.

Last updated · August 2026