Privacy policy

1. Introduction

This Privacy Policy explains how we collect, use, store, and protect personal data when you visit our website or interact with us. We process personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and applicable Austrian data protection law.

This notice is provided for your information under Articles 13 and 14 GDPR. It does not require your acceptance; where we rely on consent, we ask for it separately and you may withdraw it at any time.

2. Data controller

The Data Controller responsible for the processing of your personal data is:

Eurokommerz Handelsges.m.b.H.
Jordangasse 7, 1010 Vienna, Austria
Phone: +43 1 585 1405 50
Fax: +43 1 585 1405 20
E-mail: request@eurokommerz.at
Website: www.eurokommerz.at

3. Data we collect

We may process the following personal data when you use our website or contact us:

• Identification data: name, company, country
• Contact data: email address, phone number
• Technical data: IP address, browser type, device information, access logs, cookies
• Communication data: content of enquiries sent through contact forms or email
• Marketing data: newsletter subscription data and engagement statistics such as opens and clicks

We do not intentionally collect special category data. Please avoid providing such information unless strictly necessary.

4. How we use personal data

We process personal data for the following purposes:

• To respond to enquiries and communicate with you
• To provide information about our services
• To manage and improve our website and user experience
• To send newsletters and marketing communications (only with your consent)
• To comply with legal obligations

5. Legal bases for processing (Art. 6 GDPR)

• Performance of pre-contractual steps (Art. 6(1)(b) GDPR) — responding to enquiries
• Legitimate interest (Art. 6(1)(f) GDPR) — business communication, website operation, security
• Consent (Art. 6(1)(a) GDPR) — newsletters, marketing, analytics cookies
• Legal obligation (Art. 6(1)(c) GDPR) — record keeping and compliance requirements

6. Newsletters & marketing (Mailchimp) — not currently active

If you subscribe to our newsletter, we will process your email address for this purpose only. You will only receive newsletters if you have provided your explicit consent.

We use Mailchimp, an email marketing platform provided by Intuit Inc. (USA). Mailchimp processes data such as your email address, subscription date, IP address, and newsletter interaction (e.g., opens, clicks).

You can withdraw your consent at any time by clicking the unsubscribe link in any email or by contacting us. Data transfers to the USA are safeguarded with Standard Contractual Clauses (SCCs).

7. Analytics (Plausible) — cookie-free

We use Plausible Analytics (Plausible Insights OÜ, servers in the European Union) to understand which pages are read and which links are followed. Plausible sets no cookies, stores no IP addresses and uses no cross-site identifiers; all data is aggregated and cannot be traced back to an individual. Legal basis: our legitimate interest in operating and improving the website (Art. 6(1)(f) GDPR).

What is recorded: page visited, referring source and campaign parameters, outbound links clicked, approximate country, device type and browser. What is not recorded: anything that identifies you personally.

Because no data is stored on your device and no personal data is processed, no consent banner is required under §165(3) TKG 2021. Should we ever add a service that does set cookies — for example Google Analytics — we would introduce a consent banner first and load nothing before you agree.

8. Third-party integrations

Our website uses third-party services that may process personal data:

• Google Maps — the address on our contact page links to Google Maps. The map is not embedded, so no data reaches Google until you follow the link yourself.
• LinkedIn — to provide access to our corporate profile or social content

When accessing these services, data may be transferred to the respective provider. These providers are independently responsible for their own data processing practices.

9. International data transfers

Some service providers may process personal data outside the EU/EEA, particularly in the United States (e.g., Google, Mailchimp, LinkedIn). Where this occurs, we rely on safeguards such as Standard Contractual Clauses (SCCs) and additional technical and organisational measures.

10. Data retention

We retain personal data only for as long as necessary for the purposes described above:

• Enquiries and business communication: 3 years after last contact
• Newsletter subscription data: until you unsubscribe
• Analytics data (Plausible): aggregated statistics only, no cookies and no personal data
• Legal and administrative documents: as required by Austrian law (typically 7 years)

After the retention period expires, data will be securely deleted.

11. Data security

We implement appropriate technical and organisational security measures to protect personal data, including encrypted data transmission (HTTPS), secure data storage, and access controls. However, no method of electronic data transmission is completely secure.

12. Your rights under GDPR

• Right of access
• Right to rectification
• Right to erasure (“right to be forgotten”)
• Right to restrict processing
• Right to object to processing based on legitimate interest
• Right to withdraw consent at any time
• Right to data portability

13. Exercising your rights

To exercise your rights, contact us at: request@eurokommerz.at

We may verify your identity before fulfilling your request.

14. Right to lodge a complaint

If you believe your personal data has been processed unlawfully, you may lodge a complaint with your local Data Protection Authority.

In Austria, contact:
Österreichische Datenschutzbehörde
Barichgasse 40–42, 1030 Vienna
https://www.dsb.gv.at

15. Changes to this policy

We may update this Privacy Policy from time to time. The most current version will always be available on our website. Significant changes will be communicated clearly.