Privacy Policy

The controller responsible for data processing on this website within the meaning of Art. 4 (7) GDPR is:

We have not appointed a data protection officer, as we are not legally required to do so.

We process personal data only where it is needed for this website to work, when you contact us, when you use our website check, and, only with your consent, to measure how the website is used:

• Visiting the website: server log data at our host IONOS (section 3)
• Contact form: the details you enter (section 4)
• Google Analytics: usage data, only after you click “Yes, sure” (section 5)
• Website check: the address you enter (section 6)

We do not sell your data, we do not use it for advertising, and we do not make automated decisions based on it.

This website is hosted by IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany, acting as our processor under Art. 28 GDPR. When you visit a page, IONOS stores server log data (IP address, time of access, requested resource, browser type, referrer) for a short period to ensure secure and stable operation and to defend against attacks. The data is processed on servers within the European Union. The legal basis is our legitimate interest under Art. 6(1)(f) GDPR. Further information is available in the IONOS Privacy Policy.

If you write to us via the contact form, we process your name, email address, company name (optional) and your message, exclusively to answer your inquiry and to discuss a possible project. Submissions are processed on our own web space and delivered to us by email; no external form or email service is involved, and no data is transferred to third countries.

The legal basis is the initiation of a contract (Art. 6(1)(b) GDPR) and our legitimate interest in answering business inquiries (Art. 6(1)(f) GDPR). We keep your message as long as needed for the inquiry and any follow-up; after that it is deleted unless statutory retention obligations apply.

To prevent abuse, your IP address is stored in shortened, non-reversible form (hashed) for at most 24 hours, solely to limit the number of submissions (Art. 6(1)(f) GDPR).

With your consent we use Google Analytics 4, a web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. It shows us which pages are visited, how often and for how long, how visitors find us and which devices they use, so we can improve the website. Google sets cookies for this (_ga and _ga_ followed by the ID of our property, lifetime up to two years) and processes, among other things, shortened IP addresses, browser and device details, the pages visited and the time of the visit. Data may be transferred to Google LLC in the USA on the basis of the EU-US Data Privacy Framework adequacy decision. Event data is deleted after two months. Advertising features and Google signals are switched off.

Google Analytics is only loaded after you click “Yes, sure” in the notice at the bottom of the screen; before that, no data is sent to Google. The legal basis is your consent under Art. 6(1)(a) GDPR and § 165(3) of the Austrian Telecommunications Act 2021 (TKG 2021). You can withdraw it at any time with effect for the future via “Cookie settings” in the footer of every page; Google’s cookies are deleted when you do. More in Google’s Privacy Policy.

On the page /website-check we offer a tool that analyses a website address you enter. We process only the address you submit and, to limit abuse, your IP address in shortened, non-reversible (hashed) form for at most 24 hours. We do not store the entered address or the generated report.

To produce the analysis, the address (and, for the design review, rendered screenshots of the page) is transmitted to the following processors:

• Google Ireland Ltd. / Google LLC (PageSpeed Insights), for speed measurement and page rendering. Transfer to the USA on the basis of the EU Standard Contractual Clauses and the EU-US Data Privacy Framework.
• Anthropic PBC (Claude), USA, for the qualitative design analysis, on the same safeguards.

The legal basis is our legitimate interest and the pre-contractual analysis you requested (Art. 6(1)(f) and (b) GDPR). The tool sets no cookies. The report is informational and does not constitute legal advice.

Without your consent this website sets no cookies. In your browser’s local storage it keeps only what the website needs to work: your language choice (DE or EN), your choice in the Google Analytics notice (for twelve months, then we ask again) and timestamps that limit the contact form and the website check against abuse. This data stays on your device and is not sent to us.

Only after you click “Yes, sure” does Google set the analytics cookies described in section 5. Details are in our Cookie Policy.

For our clients we run a portal at vontures.com/portal where projects are coordinated. It has its own privacy notice, available at vontures.com/portal/datenschutz.

As a data subject, you have the right to:

• Access your personal data (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure of your data (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Object to processing based on legitimate interest (Art. 21 GDPR)
• Withdraw a consent at any time with effect for the future (Art. 7(3) GDPR)
• Lodge a complaint with a supervisory authority (Art. 77 GDPR)

The competent supervisory authority in Austria is the Austrian Data Protection Authority, Barichgasse 40-42, 1030 Vienna, dsb.gv.at.

For any questions regarding this privacy policy or to exercise your rights, contact us at lorenzhackl@vontures.com. We update this privacy policy when our website or the legal situation changes; the current version always applies.