Privacy policy

This is a non-binding convenience translation. Only the German version is legally authoritative.

Protecting your personal data is important to us. Below we inform you, in accordance with the General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (DSG), about the processing of your data in connection with this website.

Controller

The controller within the meaning of Art 4(7) GDPR is:

Invisible Technologies Cooperation Systems VALMES GmbH

No data protection officer has been appointed; the statutory conditions of Art 37 GDPR are not met.

Processing in connection with your enquiry

Purpose and legal basis

You can send us an enquiry using the form on this website. We process your details exclusively in order to record and handle your enquiry and to contact you about your request where appropriate. No newsletters or promotional emails are sent.

The legal basis is your consent pursuant to Art 6(1)(a) GDPR. Providing the data is voluntary; without the details marked as mandatory and without your consent we cannot process your enquiry.

Data processed

We process only the following data (data minimisation, Art 5(1)(c) GDPR):

  • Name (mandatory)
  • Email address (mandatory)
  • Selected category (mandatory)
  • Description / free text (mandatory)
  • Record of consent: time and version of the consent text (automatic)
  • Hashed IP value, never in plain text (automatic)
  • Technical origin details (e.g. referring address, campaign/UTM parameters), where transmitted (automatic)

Record of consent

To document your consent (Art 7(1) GDPR) we store, together with your record, the time of consent and the version of the consent text you agreed to.

Hashed IP value for abuse prevention

To prevent abuse (in particular automated repeat and spam submissions) we do not store your IP address in plain text but exclusively as a cryptographic hash value. The legal basis is our legitimate interest in the security and functionality of the service (Art 6(1)(f) GDPR).

Protection against spam and abuse

To protect the form against automated submissions (bots, spam) we use exclusively server-side measures (in particular a limit on the number of submissions per IP address). No data is transmitted to third parties in this process. The legal basis is our legitimate interest in a secure, abuse-free form (Art 6(1)(f) GDPR).

Recipients

Your data is not passed on to third parties, apart from service providers acting on our behalf and on our instructions. To operate the website we use a hosting provider within the European Union, acting as a processor pursuant to Art 28 GDPR. Your data is not sold.

Retention period

We store your enquiry data only for as long as is necessary for the purposes stated — but no longer than 24 months from your submission. It is then deleted automatically; for technical backup reasons, final and irreversible deletion takes place within a further 30 days at the latest. If you withdraw your consent or request erasure, we delete your data earlier, provided no statutory retention obligations prevent this. Server log files are deleted separately after 14 days at the latest (see below).

Your rights

You have the following rights in respect of your personal data:

  • access (Art 15 GDPR),
  • rectification (Art 16 GDPR),
  • erasure (Art 17 GDPR),
  • restriction of processing (Art 18 GDPR),
  • data portability (Art 20 GDPR),
  • objection to processing based on a legitimate interest (Art 21 GDPR); for audience measurement, a "Do Not Track" signal from your browser is honoured as an objection,
  • withdrawal of your consent at any time with future effect (Art 7(3) GDPR); the lawfulness of processing carried out up to that point remains unaffected.

An informal message to the contact details above is sufficient to exercise these rights.

Without prejudice to other remedies, you have the right under Art 77 GDPR in conjunction with § 24 DSG to lodge a complaint with the supervisory authority:

Austrian Data Protection Authority (Österreichische Datenschutzbehörde)

No automated decision-making

No automated decision-making, including profiling, within the meaning of Art 22 GDPR takes place.

Server log files

When you access this website, our web server automatically stores access data in what are known as server log files. This includes in particular your IP address, the date and time of access, the address requested, the volume of data transferred, the previously visited page (referrer), and details of your browser and operating system.

The purpose is the secure and stable operation of the website as well as the detection and prevention of abuse and attacks. The legal basis is our legitimate interest (Art 6(1)(f) GDPR). Log files are stored for a maximum of 14 days and then deleted automatically; they are not combined with other data and are not used to identify individuals.

Cookies

This website uses exclusively technically necessary cookies that are required for the operation and security of the form (a session cookie and a cookie protecting against cross-site request forgery). Pursuant to § 165(3) TKG 2021 these do not require consent; the legal basis is our legitimate interest in secure and functional operation (Art 6(1)(f) GDPR). No tracking, analytics or marketing cookies are used.

Audience measurement (Matomo)

For the statistical evaluation of the use of this website we use the self-hosted open source software Matomo. Processing takes place exclusively on our own server; no data is transmitted to third parties.

Matomo is configured in a privacy-friendly manner: no cookies are set and your IP address is truncated (anonymised) before any storage. Attribution to a specific person is therefore not possible. Recorded — in aggregated, anonymised form — are in particular the pages viewed, the time of access, the approximate origin (country), the browser type/device, and the previously visited page (referrer). If your browser sends a "Do Not Track" signal, no data is recorded.

The legal basis is our legitimate interest in designing our offering to meet demand and in a secure manner (Art 6(1)(f) GDPR). Since Matomo runs cookie-free and with IP anonymisation, no consent is required.

Last updated: 26 June 2026