Privacy Policy

1. Data Controller

The data controller responsible for this website and its data processing activities is Noventra e.U. For any questions regarding your personal data, please contact us at the address above.

2. Data We Collect

Contact and Enquiry Forms

When you submit a contact form or job application on this website, we collect the information you provide — which may include your name, email address, phone number, and the contents of your message or cover letter. We use this data solely to respond to your enquiry or process your application.

Technical Data

When you visit this website, our server may automatically record technical information such as your IP address, browser type, operating system, referring URL, and pages visited. This data is used for security and to ensure the website functions correctly. It is not linked to your personal identity.

Cookies and Local Storage

We use cookies and browser local storage as described in our Cookie Policy. Your cookie consent choice and language preference are stored locally on your device and are not transmitted to our servers.

3. Legal Basis for Processing

We process your personal data on the following legal bases under Article 6 GDPR:

• Consent (Art. 6(1)(a)) — for non-essential cookies and marketing communications, where you have given explicit consent.
• Legitimate interest (Art. 6(1)(f)) — for processing enquiry and application data, where we have a legitimate interest in responding to your communication.
• Legal obligation (Art. 6(1)(c)) — where we are required to retain data by law (e.g. tax and accounting records).

4. How We Use Your Data

We use the personal data we collect exclusively for the following purposes:

• To respond to enquiries and service requests submitted via our contact forms.
• To process job applications and contact applicants during the recruitment process.
• To ensure the security and correct technical functioning of this website.
• To comply with legal and regulatory obligations.

We do not use your data for automated decision-making or profiling.

5. Data Retention

We retain personal data only for as long as is necessary for the purpose for which it was collected, or as required by law:

• Enquiry and contact form data: retained for up to 24 months, then deleted.
• Job application data: retained for 6 months after the conclusion of a recruitment process, unless you are offered and accept a position.
• Cookie consent data: stored locally on your device for 12 months.
• Accounting and legal records: retained for the minimum statutory period (7 years under Austrian law).

6. Third Parties and Data Transfers

We do not sell, rent, or trade your personal data with third parties. We may share data with carefully selected service providers (e.g. hosting providers) who act as data processors under appropriate data processing agreements. All such providers are required to process data only on our instructions and in compliance with the GDPR.

If data is transferred outside the European Economic Area (EEA), we ensure that appropriate safeguards are in place (e.g. EU Standard Contractual Clauses).

7. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

• Right of access (Art. 15) — you can request a copy of the personal data we hold about you.
• Right to rectification (Art. 16) — you can request that inaccurate data be corrected.
• Right to erasure (Art. 17) — you can request deletion of your data where there is no overriding legal basis for retention.
• Right to restriction (Art. 18) — you can request that we restrict processing of your data in certain circumstances.
• Right to data portability (Art. 20) — you can request your data in a structured, machine-readable format.
• Right to object (Art. 21) — you can object to processing based on legitimate interests.
• Right to withdraw consent — where processing is based on consent, you can withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at info@noventra.at. We will respond within 30 days.

8. Right to Lodge a Complaint

You have the right to lodge a complaint with the Austrian Data Protection Authority (Datenschutzbehörde) if you believe that the processing of your personal data violates the GDPR:

9. Website Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. This includes the use of encrypted connections (HTTPS) and access controls on our systems.

10. Updates to This Policy

We may update this Privacy Policy from time to time in response to legal, technical, or business changes. We will indicate the date of the last update at the top of this page. We encourage you to review this policy periodically.