With the following privacy policy, we would like to inform you about what types of your personal data (hereinafter referred to as “data”) we process, for what purposes, and to what extent.
This privacy policy applies to all processing of personal data carried out by us, both in the context of providing our services and in particular on our websites, in mobile applications, and within external online presences such as our social media profiles (collectively referred to as the “online offering”).
Person Responsible
Overview of Processing Operations
Relevant Legal Bases
Security Measures
Transfer of Personal Data
International Data Transfers
Data Storage and Erasure
Rights of Data Subjects
Business Services
Business Processes and Procedures
Provision of Online Offering and Web Hosting
Use of Cookies
Contact and Request Management
Promotional Communication
Web Analysis and Optimization
Online Marketing
Social Media Presence
Plug-ins and Embedded Content
Employment Data Processing
Modifications and Updates
Inventory data
Employee data
Contact data
Content data
Contract data
Usage data
Meta, communication, and process data
Log data
Beneficiaries and clients
Employees
Interested parties
Communication partners
Users
Business and contractual partners
Provision and performance of contractual services
Communication
Security measures
Direct marketing and outreach
Measurement, tracking, and analytics
Office and administrative procedures
Conversion and target group measurement
Marketing and public relations
Provision of online services and user experience
Employment relationship management
IT infrastructure and data protection
Business process and sales management
Processing of personal data is based on:
Consent (Art. 6(1)(a) GDPR) – where users have granted consent.
Performance of Contract (Art. 6(1)(b) GDPR) – necessary to fulfill contractual or pre-contractual obligations.
Legal Obligation (Art. 6(1)(c) GDPR) – compliance with legal duties.
Legitimate Interests (Art. 6(1)(f) GDPR) – when processing is required for legitimate business purposes.
Processing Special Categories (Art. 9(2)(h) GDPR) – data related to healthcare, employment, or social security.
National law in Austria: The Austrian Data Protection Act (DSG) also applies, including rights to information, rectification, erasure, and data transfer.
We implement appropriate technical and organizational measures according to legal requirements, considering the nature, scope, context, and purpose of data processing to ensure a level of protection appropriate to the risk.
We secure online connections using TLS/SSL encryption (HTTPS) to protect user data from unauthorized access.
Personal data may be transmitted to:
IT service providers,
Web content providers, or
Other legally authorized recipients.
Transfers are performed only as legally permitted and based on contractual agreements ensuring data protection.
We may share data within our corporate group for administrative purposes, based on legitimate interests or contractual necessity.
Data transfers outside the EU/EEA occur only under the following:
Adequacy decision (Art. 45 GDPR)
Standard contractual clauses (Art. 46 GDPR)
Explicit consent (Art. 49 GDPR)
EU–US Data Privacy Framework (DPF): Certified U.S. companies are recognized as providing adequate protection.
See: https://www.dataprivacyframework.gov
We delete personal data when:
Consent is withdrawn,
The original purpose no longer applies, or
No other legal basis exists.
Exceptions include statutory retention periods (e.g., tax or commercial law). The longest applicable retention period takes precedence.
Right to Object – to processing or direct marketing.
Right to Withdraw Consent – at any time.
Right of Access – to your personal data.
Right to Rectification – of incorrect or incomplete data.
Right to Erasure ("Right to be Forgotten") – under legal conditions.
Right to Restrict Processing – under specific conditions.
Right to Data Portability – to receive your data in a machine-readable format.
Right to Lodge a Complaint – with a supervisory authority.
We process client and partner data to fulfill contractual obligations, including service provision, billing, communication, and compliance.
Data is stored for the duration of the relationship and deleted after legal retention periods expire (generally 4–10 years).
Processing supports business activities such as:
Customer management
Accounting
Sales and project management
Legal compliance
Economic analyses and market research are performed with pseudonymized or anonymized data where possible.
We use IT infrastructure providers such as Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany.
Privacy Policy: https://www.hetzner.com/legal/privacy-policy/
Legal basis: Legitimate interests (Art. 6(1)(f) GDPR).
Cookies are used to improve usability and analyze usage.
Legal basis depends on consent or legitimate interests.
BorlabsCookie is used for managing cookie consents.
Website: https://de.borlabs.io/borlabs-cookie/
When you contact us (e.g. by email, phone, or contact form), your data is processed solely to respond to your inquiry or fulfill related obligations.
We process data for advertising via email, post, phone, or fax, in compliance with legal requirements.
You may withdraw consent or object to communication at any time.
After withdrawal, we retain minimal data to prevent future contact.
We use web analytics to improve our online offerings, including pseudonymous reach measurement and usage tracking.
Provider: Google Ireland Limited
Legal basis: Consent (Art. 6(1)(a) GDPR)
Privacy Policy: https://policies.google.com/privacy
Opt-out: https://tools.google.com/dlpage/gaoptout
Used for managing analytics tags; does not store personal data.
Used to verify human users and prevent spam.
Data may be processed by Google under EU–US DPF.
Used for interest-based advertising and conversion measurement.
We process data to deliver personalized advertising and measure campaign effectiveness.
User profiles are generally pseudonymized; cookies may store preferences.
Data is processed based on consent or legitimate interests.
We may update this privacy policy if processing changes require it.
Users are advised to review this policy regularly.
If cooperation or renewed consent is necessary, users will be notified.
© 2025 SAMINA
Imprint · Privacy · Jobs