Privacy Policy

1. Data Controller

The entity responsible for data processing on this website is:
AGA Group GmbH
Andergasse 46/2
1170 Vienna, Austria
Email: firas.saedaddin@aga-group.com
Phone: +43 676 380 88 45

2. Your Rights as a Data Subject

You have the right to:

• Access (Art. 15 GDPR): Request information about your data processed by us.
• Rectification (Art. 16 GDPR): Request the correction of inaccurate or incomplete data.
• Erasure ("Right to be forgotten") (Art. 17 GDPR): Request the deletion of your data, provided there are no legal grounds for retaining it.
• Restriction of Processing (Art. 18 GDPR): Request the restriction of the processing of your data under certain conditions.
• Data Portability (Art. 20 GDPR): Receive the data you have provided to us in a structured, common, and machine-readable format and request its transfer to another controller.
• Objection (Art. 21 GDPR): Object to the processing of your data based on our legitimate interests (Art. 6(1)(f) GDPR).
• Withdraw Consent (Art. 7(3) GDPR): Withdraw your previously given consent at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
• Lodge a Complaint (Art. 77 GDPR): Lodge a complaint with a supervisory authority. The competent authority in Austria is the:
  Österreichische Datenschutzbehörde
  Barichgasse 40-42
  1030 Wien
  Website: https://www.dsb.gv.at

To exercise your rights, please contact us using the details provided in Section 1.

3. Data Processing on Our Website

3.1. Website Hosting (Firebase)

Our website is hosted by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). For this purpose, we use the Firebase Hosting service. When you visit our website, Firebase automatically collects log data, which may include your IP address, browser type, operating system, referring URL, pages visited, and the time of the request.

Purpose: To ensure the secure, stable, and fast delivery of our website.

Legal Basis: Our legitimate interest in a professional and secure website presentation (Art. 6(1)(f) GDPR).

Data Transfer: Data may be transferred to Google LLC in the USA. Google LLC is certified under the EU-U.S. Data Privacy Framework, which ensures a level of data protection adequate to that of the EU.

Storage Duration: Log data is typically stored for a maximum of 90 days for security and analysis purposes.

3.2. Contact Form

If you contact us via the contact form on our website, the data you provide (name, email address, company, interest, message) will be processed to handle your inquiry.

Purpose: To respond to your inquiry and for any follow-up communication.

Legal Basis: To take steps at your request prior to entering into a contract (Art. 6(1)(b) GDPR) and our legitimate interest in processing inquiries (Art. 6(1)(f) GDPR).

Storage Duration: We store your data for as long as it is necessary to process your inquiry. Subsequently, the data will be deleted within 6 months after the final correspondence, unless a contractual relationship is established or legal retention periods require longer storage.

3.3. Cookies

Our website uses cookies. Cookies are small text files that are stored on your device. We distinguish between technically necessary cookies and optional cookies (e.g., for analysis).

Technically Necessary Cookies: These are essential for the basic functionality of the website. Their use is based on our legitimate interest (Art. 6(1)(f) GDPR).

Optional Cookies (e.g., for Analytics): These cookies are only set after you have given your explicit consent via our cookie consent banner.

You can manage your cookie preferences at any time through the settings in your browser or our consent banner.

3.4. Google Analytics

This website uses Google Analytics, a web analytics service provided by Google. Google Analytics uses cookies to help us analyze how users use the site.

Purpose: To understand user behavior and improve our website's content and user experience.

Legal Basis: Your explicit consent (Art. 6(1)(a) GDPR), which you provide through our cookie consent banner. Google Analytics will not be activated unless you consent.

IP Anonymization: We have activated IP anonymization on this website. This means your IP address will be truncated by Google within member states of the European Union or other parties to the Agreement on the European Economic Area before being transmitted to the USA.

Data Transfer: Data is transferred to Google LLC in the USA. This transfer is safeguarded by Google's certification under the EU-U.S. Data Privacy Framework.

Storage Duration: User and event data is stored for a period of 14 months and then automatically deleted.

3.5. Third-Party Content (Fonts & Images)

To ensure a consistent and appealing design, our website loads fonts from external servers.

Google Fonts & Fontshare: We use fonts from Google Fonts (Google LLC, USA) and Fontshare. When you load our website, your browser establishes a direct connection to their servers. This transmits your IP address to the respective provider.

Purpose: The uniform and efficient presentation of our website.

Legal Basis: Our legitimate interest in an optimized and economically efficient website design (Art. 6(1)(f) GDPR).

Data Transfer: This involves a data transfer to the USA, which is safeguarded by measures such as the EU-U.S. Data Privacy Framework for Google.