Privacy Policy

We are committed to protecting your privacy and to processing your personal data lawfully, fairly and transparently. We may update this policy from time to time. The current version always applies, and material changes will be reflected by updating the effective date above.

Section 01Who is responsible (Data Controller)

The controller responsible for the processing of your personal data is:

Data Protection Contact: For any questions about this policy or how we handle your data, contact us at dpo@at-visions.com.

Section 02What personal data we collect

Depending on how you interact with us, we may collect:

• First name and last name
• Contact details, including postal address, email address and phone number
• Any other information you provide through our contact form, by email, or by other means
• Technical data such as IP address, browser and device information, and website usage statistics
• Cookie and similar tracking data (see Section 8)

We do not knowingly collect special categories of personal data (e.g. health, religion).

Section 03How we collect your data

We collect data that you give us directly (for example via the contact form, by email or phone, or when entering a contract with us) and data collected automatically when you use the website (for example via server logs and cookies).

Providing your data is generally voluntary. However, if you do not provide the information needed to respond to an enquiry or to perform a contract, we may be unable to provide the requested service.

Section 04Why we use your data and our legal basis

We only process personal data where the GDPR gives us a legal basis to do so. The table below sets out our purposes and the corresponding legal basis under Art. 6 GDPR.

Where we rely on legitimate interests, we have balanced those interests against your rights and freedoms. You can object to such processing at any time (see Section 11).

Section 05Marketing communications

If we have your consent, we may periodically send you promotional emails about new products, special offers or other information we think may interest you, using the email address you provided.

You can withdraw your consent and unsubscribe at any time — by using the unsubscribe link in any marketing email, or by contacting us at dpo@at-visions.com. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.

Section 06Who we share your data with (recipients)

We do not sell, rent or trade your personal data. We may share your data with:

• Service providers (processors) who work on our behalf — for example IT and hosting providers, email and CRM providers, and analytics providers. These providers act only on our instructions under a data processing agreement (Art. 28 GDPR).
• Public authorities or courts, where we are legally required to disclose data.

We share data with third parties for their own marketing purposes only where you have explicitly asked us to do so.

Section 07International data transfers

Some of our service providers may be located outside the European Economic Area (EEA), for example in the United States.

Where we transfer personal data outside the EEA, we ensure an adequate level of protection through one of the safeguards permitted by the GDPR (Chapter V), such as:

• transfer to a country covered by a European Commission adequacy decision;
• transfer to a U.S. provider certified under the EU–US Data Privacy Framework; or
• EU Standard Contractual Clauses (SCCs), supplemented by additional measures where necessary.

Section 08Cookies and tracking technologies

A cookie is a small file stored on your device that helps a website function and lets us analyse how the site is used. We use:

• Strictly necessary cookies, required for the website to function. These do not require consent.
• Analytics / statistics cookies, which help us understand how visitors use the site so we can improve it (e.g. Google Analytics).

Non-essential cookies are only set with your consent, which we obtain through our cookie banner when you first visit. You can change or withdraw your cookie choices at any time. You can also block or delete cookies in your browser settings, although this may affect how the website works. Statistical data is used only in aggregated form for analysis.

Section 09How long we keep your data

We keep personal data only as long as necessary for the purposes described above, and then delete or anonymise it. Typical retention periods:

• Contract and invoicing data: retained for the statutory period (in Austria, business records must generally be kept for 7 years under § 132 of the Federal Fiscal Code, BAO).
• Contact enquiries: kept for as long as needed to handle the enquiry and a reasonable period afterwards.
• Marketing data: kept until you withdraw your consent or object.

Section 10How we protect your data

We take the security of your data seriously and have put in place appropriate technical and organisational measures to protect it against unauthorised access, loss, misuse or disclosure, in line with Art. 32 GDPR.

Section 11Your rights

Under the GDPR, you have the right to:

• Withdraw consent at any time, where processing is based on your consent.
• Object to processing that is based on our legitimate interests, and to object at any time to processing for direct marketing.
• Access your data — to be told whether we process your data and to receive a copy of it.
• Rectification — to have inaccurate or incomplete data corrected or completed.
• Restriction — to ask us to limit how we use your data in certain circumstances.
• Erasure ("right to be forgotten") — to have your data deleted in certain circumstances.
• Data portability — to receive your data in a structured, commonly used, machine-readable format and to have it transferred to another controller where technically feasible.

To exercise any of these rights, contact us at dpo@at-visions.com or write to the address in Section 1. We will respond within the time limits set by the GDPR (generally one month).

Section 12Right to lodge a complaint

If you believe we have processed your data unlawfully, you have the right to lodge a complaint with the competent supervisory authority. In Austria this is:

Section 13Links to other websites

Our website may contain links to other websites. Once you leave our site, we have no control over those websites and are not responsible for the protection or privacy of any information you provide there. We encourage you to read the privacy policy of any website you visit.

Section 14Changes to this policy

We may update this privacy policy from time to time. The version published on this page, with the effective date shown at the top, is the one that applies.

Section 15Contact

For any questions about this privacy policy or how we handle your personal data, please contact us at dpo@at-visions.com, or write to us at the address in Section 1.