Privacy Policy

Privacy Policy / Datenschutzerklärung Creovias GmbH – Stand: Mai 2026

1. General Information This privacy policy explains how Creovias GmbH collects, uses, and protects your personal data when you visit our website (www.creovias.com), in accordance with the EU General Data Protection Regulation (GDPR).

2. Controller Creovias GmbH Sobieskigasse 23, 1090 Vienna, Austria Email: contact@creovias.com

3. Personal Data We Collect We may collect the following personal data:

  • Contact details (name, email address)
  • IP address and technical browser information
  • Data submitted via contact forms
  • Usage data via analytics tools (where applicable and with prior consent)

4. Purposes and Legal Basis of Processing

Purpose Legal Basis
Responding to inquiries Art. 6(1)(b) GDPR – contractual/pre-contractual necessity
Sending newsletters Art. 6(1)(a) GDPR – consent (withdrawable at any time)
Website analytics Art. 6(1)(a) GDPR – consent
Fulfilling legal obligations (e.g. tax records) Art. 6(1)(c) GDPR – legal obligation
Legitimate website operation Art. 6(1)(f) GDPR – legitimate interest

5. Third-Party Services We use the following external service providers, who may process personal data on our behalf:

  • Web hosting: [Provider name], servers located in [location]
  • Email marketing: [Tool name, e.g. Mailchimp] – data may be transferred to the USA on the basis of EU Standard Contractual Clauses
  • Analytics: [Tool name, e.g. Google Analytics] – only with your prior consent via cookie banner

If no third-party tools are currently in use, this section will be updated accordingly.

6. Data Retention We store personal data only as long as necessary for the stated purposes:

  • Contact inquiries: up to 3 years after last contact
  • Tax-relevant data: 7 years (statutory retention obligation under Austrian law)
  • Newsletter data: until withdrawal of consent

7. Your Rights Under the GDPR, you have the right to:

  • Access your personal data (Art. 15)
  • Rectification of inaccurate data (Art. 16)
  • Erasure („right to be forgotten“) (Art. 17)
  • Restriction of processing (Art. 18)
  • Data portability (Art. 20)
  • Object to processing (Art. 21)
  • Withdraw consent at any time, without affecting the lawfulness of prior processing (Art. 7(3))

You also have the right to lodge a complaint with the competent supervisory authority:

Österreichische Datenschutzbehörde (DSB) Barichgasse 40–42, 1030 Vienna dsb.gv.at

8. Contact For any privacy-related concerns: contact@creovias.com