Privacy Policy

2. General Information

We take the protection of your personal data seriously. This Privacy Policy informs you about how we collect, process, and use your personal data in accordance with the General Data Protection Regulation (GDPR) (EU) 2016/679.

3. What Data We Collect

a) Data You Provide

We collect personal data when you:

• Fill out contact forms
• Register an account
• Subscribe to newsletters

This may include:

• Name
• Email address
• Phone number
• Address

b) Automatically Collected Data

When you access our website:

• IP address
• Browser type and version
• Operating system
• Access times
• Pages visited

c) Cookies

We use cookies and similar technologies.
Non-essential cookies are only used with your explicit consent.

4. Legal Basis for Processing (Art. 6 GDPR)

We process your personal data based on:

• Consent (Art. 6(1)(a)) – e.g. newsletters, marketing
• Contract (Art. 6(1)(b)) – to provide services/products
• Legal obligation (Art. 6(1)(c)) – tax or legal requirements
• Legitimate interests (Art. 6(1)(f)) – website security, analytics (where permitted)

5. Purposes of Processing

Your data is used to:

• Provide and operate the website
• Handle inquiries and customer support
• Process transactions
• Improve website performance and usability
• Send marketing communications (only with consent)

6. Data Sharing and Processors

We may share data with trusted third parties:

• Hosting providers
• Payment processors
• Analytics services (e.g. Google Analytics – only with consent)
• IT service providers

All processors comply with Art. 28 GDPR and process data under our instructions.

7. International Data Transfers

If we transfer data outside the EU/EEA, we ensure adequate protection through:

• EU Standard Contractual Clauses (SCCs)
• Adequacy decisions by the European Commission

8. Data Retention

We store personal data only as long as necessary:

• Contract data: for the duration of the relationship
• Legal obligations: according to statutory retention periods
• Consent-based data: until consent is withdrawn

9. Your Rights (Data Subject Rights)

Under GDPR, you have the following rights:

• Right of access (Art. 15)
• Right to rectification (Art. 16)
• Right to erasure (“right to be forgotten”, Art. 17)
• Right to restriction of processing (Art. 18)
• Right to data portability (Art. 20)
• Right to object (Art. 21)
• Right to withdraw consent at any time (Art. 7(3))

To exercise your rights, contact us at: office@ait.ac.at

You also have the right to lodge a complaint with a supervisory authority.

10. Cookies and Consent Management

We use a cookie consent banner that:

• Allows you to accept or reject non-essential cookies
• Provides detailed cookie information
• Stores your preferences

You can change your consent at any time via Manage Cookie Preferences.

11. Data Security

We implement technical and organizational measures to protect your data, including:

• Encryption (SSL/TLS)
• Access control
• Secure servers

12. Third-Party Services

We may use third-party services such as:

• Google Analytics
• Social media plugins

These services may collect personal data independently. Their privacy policies apply.

13. Children’s Data

Our services are not directed at children under 16. We do not knowingly collect such data.

14. Changes to This Privacy Policy

We may update this policy. Changes will be published on this page with a revised date.