Privacy Policy

The protection of your personal data matters to us. We process personal data only in accordance with the General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (DSG). This policy explains what data we process when you visit this website or contact us, on what legal basis, who receives it, how long we keep it, and what rights you have.

Controller

Aventario Solutions GmbH
Tuchlauben 7a, 1010 Vienna, Austria
Email: office@aventario.com
Phone: +43 1 343 3354012

We have not appointed a data protection officer, as we are not required to do so under Art. 37 GDPR. For any question about the processing of your personal data, contact us at the address above.

Hosting and server log files

This website is hosted by Vercel Inc. (340 S Lemon Ave #4133, Walnut, CA 91789, USA) on infrastructure located in the European Union (Frankfurt region, fra1). When you access the site, the hosting provider automatically processes technical access data in server log files: your IP address, the date and time of the request, the page requested, the referring URL, and your browser and operating system. This data is necessary to deliver the website securely and reliably and is processed on the basis of our legitimate interest in a stable and secure website (Art. 6(1)(f) GDPR). Vercel acts as our processor under a data processing agreement. Where Vercel, as a US-based company, may access data, that transfer is safeguarded by the European Commission's Standard Contractual Clauses and the EU–US Data Privacy Framework.

Fonts, styles and icons

All fonts, stylesheets and icons on this website are served directly from our own infrastructure in the European Union. We do not load fonts, stylesheets or icons from third-party content delivery networks such as Google Fonts. No third-party cookie is set before you give consent.

Contact and demo request forms

When you contact us by email or submit our contact or demo-request forms, we process the data you provide, such as your name, work email address, company and message, together with the consent flag, the form source and your browser user agent, in order to handle your request and follow up on related questions. The legal basis is your consent (Art. 6(1)(a) GDPR), which you give via the checkbox on the form, and our legitimate interest in responding to enquiries (Art. 6(1)(f) GDPR). You can withdraw your consent at any time with future effect by emailing us.

These form submissions are stored on our behalf by Supabase (Supabase, Inc.) on servers located in the European Union (eu-west-1, Ireland), under a data processing agreement. We do not share this data with other third parties without your consent.

Cookies, analytics and advertising

We use Google Analytics 4, Google Tag Manager and Google Ads, services provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland), to measure how this website is used and to evaluate the performance of our advertising. These services set cookies and process usage data such as the pages you visit, your approximate location, and device and browser information together with an online identifier.

These tools load only after you give consent through the cookie banner shown on your first visit. Until you accept, no Google analytics or advertising script is loaded and no related cookie is set. We use Google Consent Mode so that your choice is applied before any tag fires. The legal basis is your consent (Art. 6(1)(a) GDPR and §165(3) Austrian Telecommunications Act 2021), which you can withdraw at any time with future effect by declining in the banner, clearing this site's data in your browser, or contacting us.

Google may transfer data to servers operated by Google LLC in the United States. Such transfers are safeguarded by the European Commission's Standard Contractual Clauses and the EU–US Data Privacy Framework. You can opt out of Google Analytics across all websites using Google's browser add-on at tools.google.com/dlpage/gaoptout.

Email and domain services

Our email and domain infrastructure is provided by IONOS SE (Elgendorfer Straße 57, 56410 Montabaur, Germany) and Microsoft Ireland Operations Ltd. (Microsoft 365). When you email us, these providers process the content and metadata of your message on our behalf, under data processing agreements, to the extent necessary to deliver and store the correspondence.

Recipients and processors

We disclose personal data only to processors who act on our documented instructions under Art. 28 GDPR: Vercel (hosting), Supabase (form and database storage), Google (analytics and advertising, consent-gated), IONOS and Microsoft (email and domain). We do not sell personal data and do not disclose it to other third parties without your consent, unless we are legally obliged to do so.

Data transfers outside the EU/EEA

We process personal data within the European Union and the European Economic Area. Where a processor is a company based in a third country such as the United States, the data itself is stored within the EU, and any access from outside the EU/EEA is safeguarded by the European Commission's Standard Contractual Clauses and, where applicable, the EU–US Data Privacy Framework.

Retention

We retain personal data only as long as necessary for the purposes described above or as required by applicable law, for example commercial and tax law retention periods (generally seven years under §132 Federal Fiscal Code). Enquiry and form data is deleted once your request has been dealt with and no retention obligation applies. Consent-based analytics data is retained for the period configured in Google Analytics and deleted thereafter.

Your rights

Under the GDPR you have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20) regarding your personal data, the right to object to processing (Art. 21), and the right to withdraw consent at any time with future effect (Art. 7(3)). To exercise any of these rights, contact us at office@aventario.com.

Right to lodge a complaint

If you believe that the processing of your personal data infringes data protection law, you may lodge a complaint with the supervisory authority. In Austria this is the Data Protection Authority (Datenschutzbehörde), Barichgasse 40–42, 1030 Vienna, dsb.gv.at.