Privacy Policy

1. Introduction

Glintworks e.U. is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit our website or use our services, in accordance with the General Data Protection Regulation (GDPR) and applicable Austrian data protection laws.

2. Data Controller

The data controller responsible for your personal data is:

We are not required to appoint a Data Protection Officer pursuant to Art. 37 GDPR as we do not carry out processing operations requiring systematic monitoring or large-scale processing of special categories of data.

3. Personal Data We Collect

We may collect the following categories of personal data:

3.1 Data You Provide Directly

• Contact information: Name, email address, phone number when you contact us via our contact form or email
• Communication data: The content of your messages and inquiries
• Navigation data:The page that linked you to our contact form and your browser's referrer URL, used to understand which services generate enquiries

3.2 Data Collected Automatically

• Technical data: IP address, browser type and version, operating system, device information
• Analytics data: Pages visited, time spent on pages, navigation paths, referral sources — collected via Google Analytics (see Section 6)
• Cookie data: See Section 7 for details on cookies

3.3 Server Log Data

Our web servers automatically log standard technical data including IP address, browser type and version, requested URL, HTTP status code, and timestamp. This data is processed for technical operation and security purposes under Art. 6(1)(f) GDPR (legitimate interest), retained for up to 30 days, and is accessible to our web hosting provider easyname GmbH (Canettistraße 5/10, 1100 Vienna, Austria) as a data processor.

Providing personal data via the contact form is voluntary. However, without a name, email address, and message we are unable to respond to your enquiry. There is no statutory or contractual obligation to provide this data.

4. Purpose and Legal Basis for Processing

We process your personal data for the following purposes:

5. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:

• Contact form inquiries: 1 year after last contact
• Analytics data (Google Analytics): Up to 2 months
• Legal/tax records: 7 years (Austrian legal requirement)

6. Third-Party Services

Google Analytics

We use Google Analytics, a web analytics service provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). Google Analytics uses cookies to collect information about how visitors use our website, including pages visited, time spent, and referral sources. This data is transmitted to and processed by Google on servers which may be located outside the EEA.

Google Analytics is only active with your consent. You can withdraw consent at any time via our cookie consent banner. You may also install the Google Analytics Opt-out Browser Add-on to prevent data collection across all websites.

For more information, see Google's Privacy Policy.

7. Cookies and Tracking Technologies

Our website uses cookies and similar technologies. Cookies are small text files stored on your device that help us provide and improve our services.

7.1 Types of Cookies We Use

• Strictly necessary cookies: Required for the website to function properly. These cannot be disabled.
• Analytics cookies: Used by Google Analytics to collect information about how you use our website. These are only set with your consent.

7.2 Managing Cookies

You can manage your cookie preferences through our cookie consent banner. Strictly necessary cookies cannot be disabled. You can withdraw consent for analytics cookies at any time via the banner.

8. International Data Transfers

Google Analytics processes data on servers which may be located outside the European Economic Area (EEA), including in the USA. Google LLC participates in the EU-US Data Privacy Framework, which provides an adequacy decision by the European Commission for data transfers to participating US companies.

No other personal data is transferred outside the EEA.

9. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

• Right of access (Art. 15): Request a copy of your personal data
• Right to rectification (Art. 16): Request correction of inaccurate data
• Right to erasure (Art. 17):Request deletion of your data ("right to be forgotten")
• Right to restrict processing (Art. 18): Request limitation of data processing
• Right to data portability (Art. 20): Receive your data in a structured, machine-readable format
• Right to object (Art. 21): Object to processing based on legitimate interests
• Right to withdraw consent (Art. 7): Withdraw consent at any time without affecting lawfulness of prior processing

To exercise any of these rights, please contact us at legal@glintworks.com. We will respond within one month of receiving your request.

10. Right to Lodge a Complaint

If you believe that the processing of your personal data infringes data protection laws, you have the right to lodge a complaint with a supervisory authority. The competent authority in Austria is:

11. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• SSL/TLS encryption for data transmission
• Regular security updates and monitoring
• Access controls and authentication measures
• Regular backups and disaster recovery procedures

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of significant changes by posting the new policy on this page with an updated revision date.

13. Automated Decision-Making

No automated decision-making including profiling pursuant to Art. 22 GDPR takes place.