Privacy Policy

1. Controller

2. Data Processing Principles

The protection of your personal data is an important concern for us. We therefore process your data exclusively on the basis of legal regulations (GDPR, Austrian Data Protection Act DSG) and only to the extent necessary for the respective purpose. In this privacy policy, we inform you about the most important aspects of data processing on our website.

3. Processed Data Categories

We process the following categories of personal data:

• Contact data (name, email address, phone number)
• Company data (company name)
• Communication data (inquiries, correspondence)
• Technical data (shortened IP address, browser type, access times)

4. Legal Basis for Processing

The processing of your personal data is based on the following legal grounds:

• Consent (Art. 6 para. 1 lit. a GDPR): Insofar as you have given us consent to process your data.
• Contract fulfillment (Art. 6 para. 1 lit. b GDPR): For the implementation of pre-contractual measures or the fulfillment of a contract.
• Legal obligation (Art. 6 para. 1 lit. c GDPR): To fulfill legal obligations.
• Legitimate interests (Art. 6 para. 1 lit. f GDPR): To protect our legitimate interests, provided your interests do not prevail.

5. Contact Form and Registration

If you contact us via the contact form or by email or register for document access, your provided data will be stored for the purpose of processing your inquiry and for possible follow-up questions.

As part of the registration for the download area, we process:

• Company, first and last name
• Email address and phone number
• Information about your product interest
• Planned application (optional)
• Requested documents and, if you tick the box, your wish to be informed about product news

This data will not be shared without your consent.

We protect the form against automated submissions ourselves, without any third-party services. When the page loads, our server issues a token carrying the time of issue; on submission it checks that the token is genuine and that a few seconds have passed. The token contains no personal data and is not stored.

6. Data Transfer

Your data will only be transferred in the following cases:

• To IT service providers as part of order processing
• To affiliated companies (sinnograte GmbH as parent company)
• When we are legally obligated to do so

If data is transferred, this is generally done as part of order processing in accordance with Art. 28 GDPR.

7. Storage Duration

We only store your personal data for as long as is necessary for the respective purposes or legal retention periods exist. After the expiration of retention obligations (typically 7 to 10 years after the end of the contract for tax documents), the data will be deleted.

8. Web Hosting and Server Logs

When you visit our website, technical information is automatically recorded:

• IP address, shortened (the last part of an IPv4 address, everything after the first 48 bits of an IPv6 address)
• Date and time of access
• Pages accessed
• Browser type and version
• Operating system

This data serves the secure operation of the website and troubleshooting (Art. 6(1)(f) GDPR) and is automatically deleted after 30 days. The website is operated in Austria.

9. This Website

This website sets no cookies and uses no analytics services. Fonts, graphics and scripts are hosted on our own server. The only exception is the map on the contact page: as soon as it comes into view, your browser loads map tiles from OpenStreetMap (OpenStreetMap Foundation, United Kingdom). OpenStreetMap receives your IP address and the usual information sent by your browser. The legal basis is our legitimate interest in showing you the way to us (Art. 6 (1) (f) GDPR); an adequacy decision of the European Commission exists for the United Kingdom. No other page makes a connection to third parties.

Your choice of appearance (light or dark) is stored locally by your browser; this setting never leaves your device. The language follows from the address of the page.

Links to other websites, such as route planning on OpenStreetMap or the websites of our group of companies, only open them when you click on them.

10. Your Rights

You have the right at any time to:

• Access your data stored with us (Art. 15 GDPR)
• Rectification of incorrect data (Art. 16 GDPR)
• Erasure of your data (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Object to processing (Art. 21 GDPR)
• Withdraw consent given (Art. 7 para. 3 GDPR)

To exercise your rights, please contact: datenschutz@sinnotrade.at

11. Right to Complain

If you believe that the processing of your data violates data protection law, you have the right to complain to the competent supervisory authority:

Austrian Data Protection Authority
Barichgasse 40-42
1030 Wien
dsb@dsb.gv.at
www.dsb.gv.at

12. Data Security

We use technical and organizational security measures to protect your data against accidental or intentional manipulation, loss, destruction or access by unauthorized persons. Our security measures are continuously adapted to technological developments.

13. Changes to this Privacy Policy

We reserve the right to adapt this privacy policy as necessary to always comply with current legal requirements or to implement changes to our services. The current version can always be found on this page.

Last updated: October 2026