Privacy Policy

 

1. Controller

 

The controller responsible for the processing of personal data on this website is:

Manuela Sofic
Otto-Teufelberger-Straße 56
4600 Wels
Austria
Email: contact@evidora.net
Website: evidora.net

For questions concerning the processing of your personal data, you may contact us using the email address above.

 

2. Website hosting and technical data

 

This website is created and hosted using Squarespace.

When you access the website, technical information may be processed automatically. This may include information about your browser, network and device, your IP address, the pages accessed, the date and time of access, referring pages and information relating to the technical use of the website.

This processing is necessary to provide the website, ensure its stability and security, prevent misuse and resolve technical errors.

The legal basis is our legitimate interest in providing a secure and functional website pursuant to Article 6(1)(f) GDPR.

Squarespace may process website and form data on our behalf as a service provider. Squarespace may also process certain technical website-usage information for its own security and service-integrity purposes.

 

3. Cookies and website analytics

 

This website uses cookies and similar technologies.

Essential cookies are required for the technical operation, security and functionality of the website. They cannot be disabled through the cookie settings.

Non-essential cookies, including analytics cookies, are only activated after you have given your consent through the cookie banner.

Squarespace Analytics may process information about the browser, network and device used, the pages visited and interactions with the website. This information helps us understand how the website is used and improve its structure and content.

The legal basis for non-essential analytics processing is your consent pursuant to Article 6(1)(a) GDPR.

You may withdraw or change your consent at any time using the Cookie Preferences function displayed on the website. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

Squarespace confirms that its websites use visitor information for technical operation and may use data for Squarespace Analytics. Its cookie banner can restrict non-essential cookies until consent is provided.

4. Contact form and inquiries

5. Google reCAPTCHA

6. Email communication

7. Service providers and international data transfers

8. Data retention

9. Provision of information

10. Your rights

11. Automated decision-making

12. Changes to this Privacy Policy

When you contact us through the contact form, we process the information you provide. Depending on your inquiry, this may include:

  • name;

  • company;

  • business email address;

  • selected area of interest;

  • project information; and

  • any additional information included in your message.

We process this information to:

  • review and respond to your inquiry;

  • clarify your requirements;

  • communicate with you regarding a potential project; and

  • take steps at your request before entering into a contract.

The legal basis is Article 6(1)(b) GDPR where the inquiry relates to possible contractual cooperation. For general business communication, processing may also be based on our legitimate interest in responding to inquiries pursuant to Article 6(1)(f) GDPR.

The information submitted through the form is transmitted through Squarespace and delivered to our Google Workspace email account.

We do not use contact-form information for newsletters or unrelated marketing without separate consent.

The contact form uses Google reCAPTCHA to protect the website against automated submissions, spam and misuse.

For this purpose, Google may process technical and usage-related information required to determine whether a form submission originates from a person or an automated system.

The legal basis is our legitimate interest in protecting the website and contact form against misuse pursuant to Article 6(1)(f) GDPR. Where consent is legally required for the use of cookies or similar technologies, processing is based on Article 6(1)(a) GDPR.

Google states that information collected for reCAPTCHA is used for the operation and security of the service and not for personalised advertising.

Email communication is processed using Google Workspace.

When you contact us by email or when we reply to a contact-form inquiry, Google may process the email address, message content, communication metadata and any attachments required to provide the email service.

The legal basis is Article 6(1)(b) GDPR where the communication concerns pre-contractual or contractual matters and Article 6(1)(f) GDPR for other legitimate business communication.

We use service providers including Squarespace and Google to operate the website, process contact inquiries and provide email communication.

These providers may use affiliated companies and subcontractors located outside the European Economic Area.

Where personal data is transferred to a country outside the European Economic Area, the transfer is based on an applicable adequacy decision, the EU–US Data Privacy Framework where applicable, standard contractual clauses approved by the European Commission or another legally recognised transfer mechanism.

Squarespace’s Data Processing Addendum provides for standard contractual clauses where an international transfer is not otherwise covered by an adequate level of protection.

Personal data is retained only for as long as necessary for the purpose for which it was collected.

Contact and inquiry information is generally retained until the inquiry has been completed. Information may be retained for a longer period where this is necessary to:

  • fulfil statutory record-keeping obligations;

  • establish, exercise or defend legal claims;

  • document business communication; or

  • comply with another legal obligation.

After the applicable purpose and retention period have ended, the data will be deleted or anonymised.

Providing the information marked as required in the contact form is necessary for us to process and respond to your inquiry.

You are not legally required to submit an inquiry. However, without the required contact information, we may be unable to respond or evaluate the requested project.

Subject to the applicable legal requirements, you have the right to:

  • request access to your personal data;

  • request correction of inaccurate or incomplete data;

  • request deletion of your personal data;

  • request restriction of processing;

  • receive certain data in a portable format;

  • object to processing based on legitimate interests; and

  • withdraw consent at any time where processing is based on consent.

To exercise these rights, contact:
contact@evidora.net

You also have the right to lodge a complaint with a competent data protection authority. In Austria, the competent authority is:
Austrian Data Protection Authority
Barichgasse 40–42
1030 Vienna
Austria
Email: dsb@dsb.gv.at
The Austrian Data Protection Authority confirms these contact details and the right to submit a complaint.

We do not use automated decision-making that produces legal effects or similarly significant effects concerning website visitors or persons submitting inquiries.

We may update this Privacy Policy where the website, the services used or the applicable legal requirements change.

The current version is available on this page.