Privacy Policy

1. Controller

The controller responsible for data processing on this website is:

ENSUMO Consult GmbH
Schilfbachweg 6, 3304 Sankt Georgen am Ybbsfelde

Full company details are listed in our Imprint.

2. Information We Collect

We only collect personal data that you actively provide or that is technically necessary to deliver this website.

2.1. Contact data: when you use our contact form, we collect the information you enter — typically your name, company, email address and the content of your message.

2.2. Technical data: when you visit the website, our server automatically processes technical information such as your IP address, browser type, operating system, date and time of access, and the pages you view. This is required to deliver the website securely.

2.3. Cookies: we use cookies and similar technologies as described in our Cookie Policy. Non-essential cookies are only set with your consent.

3. How We Use Your Information & Legal Basis

We use the collected data for the following purposes, each based on a legal ground under Art. 6 GDPR:

3.1. To respond to enquiries submitted through the contact form — based on our legitimate interest in handling your request and, where it relates to a contract, to take pre-contractual steps (Art. 6(1)(f) and Art. 6(1)(b) GDPR).

3.2. To operate, secure and maintain the website — based on our legitimate interest in a functional, safe website (Art. 6(1)(f) GDPR).

3.3. To analyse website usage and improve our content, where applicable — based on your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.

3.4. To comply with legal obligations to which we are subject (Art. 6(1)(c) GDPR).

3.5. Personal data will not be used for purposes incompatible with the original purpose of collection unless required by law or with the user's consent.

4. Sharing Your Information & Recipients

We do not sell, rent or trade your personal data. We only share data where necessary:

4.1. Service providers (processors) who support us in operating the website, such as Hosting provider; Email provider; Google Analytics; Microsoft 365; HubSpot and Cloudflare, acting on our instructions under a data processing agreement (Art. 28 GDPR).

4.2. Where we use analytics or other third-party services, data may be processed by those providers strictly within the scope of your consent.

4.3. Public authorities, where we are legally required to disclose data.

5. International Data Transfers

Where a service provider processes data outside the European Economic Area (for example, in the United States), we ensure an adequate level of protection through appropriate safeguards, such as the EU Standard Contractual Clauses or an applicable adequacy decision. Such transfers only take place where they are based on your consent or another valid legal ground.

6. Data Retention

We retain personal data only for as long as necessary for the purposes described in this policy or as required by law. Contact-form data is deleted once your request has been fully handled and no statutory retention periods apply. Technical log data is stored only for a short period for security purposes.

7. Cookies

This website uses cookies and similar technologies. Strictly necessary cookies are always active; all other cookies are only set after you consent. For details and to manage your preferences, please see our Cookie Policy.

8. Your Rights

Under the GDPR, you have the right to access, rectification, erasure ("right to be forgotten"), restriction of processing, data portability, objection to processing based on our legitimate interest, and to withdraw consent at any time with effect for the future. You also have the right to lodge a complaint with the Austrian Data Protection Authority (Datenschutzbehörde – DSB).

9. Data Security

We implement appropriate technical and organisational measures to protect your data against loss, misuse and unauthorised access. Please note that no method of transmission over the internet is fully secure.

10. Children's Privacy

This website is not directed at children. In Austria, the digital age of consent is 14 years (§ 4(4) DSG). We do not knowingly collect personal data from children under 14 without the consent of a parent or guardian.

11. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for their privacy practices and encourage you to review their policies separately.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with a new "Last updated" date. We encourage you to review this page periodically.

13. Contact

If you have any questions about this Privacy Policy, please contact us at ensumo.consult@gmail.com or by post at the address listed in our Imprint.