Privacy

ONTEC AG (“we”, “us”) is pleased about your visit to our website www.ontec.ai and your interest in our company. We take the protection and security of your personal data entrusted to us seriously and want you to feel secure and comfortable when visiting our website.

It is important to us to sufficiently protect your personal data. We therefore comply with the applicable legal provisions for the protection, lawful handling, and confidentiality of personal data, as well as data security, in particular the Austrian Data Protection Act (“DSG”), the EU General Data Protection Regulation (“GDPR”), and the Telecommunications Act (“TKG”).

This Privacy Policy informs you about the nature, scope, and purposes of the collection and use of your personal data by us in connection with your visit to and use of our website www.ontec.ai (“Website”).

Data Controller and Contact

The controller for the processing of personal data under the provisions of data protection law is:

ONTEC AG
Ernst-Melchior-Gasse 24/DG
1020 Vienna
Austria

The contact details of the Data Protection Officer are: dsgvo@ontec.at

Definition of Personal Data

Personal data refers to information about individuals (natural persons) whose identity is or can be determined (e.g., name, email address, or IP address).

For the data related to your visit to our website and online services, we rely on our legitimate interest under Art. 6(1) (f) GDPR, which is to provide and protect our website and online services against attacks, provided that the interests or fundamental rights and freedoms of the data subject do not override this interest.

Purpose of Data Processing

We process your data in connection with the visit to our website for the following purposes:

Visit to Our Website

During your visit to our website, we will automatically process the following personal data using Matomo and Hubspot:

We process this information to deliver the content of our website to your computer (e.g., texts, images, and downloadable files). We also process this data for abuse detection and tracking.

Use of Google Fonts

We use so-called Google Fonts on our website to ensure a consistent and appealing typography. The fonts are hosted locally on our server, so no connection to Google servers is established when you visit our website, and no personal data (e.g., IP address) is transmitted to Google.

For more information about Google Fonts, please visit: https://developers.google.com/fonts/faq.

Other Purposes

Personal data is also processed when you provide it voluntarily, for example in the context of an inquiry. The data we process includes customer data, employee data, and supplier data, provided these are necessary for the stated purposes.

Job Applications

You have the option to apply online through the Join Solutions AG applicant portal, Landsgemeindeplatz 6, 9043 Trogen, Switzerland (https://www.join.com). Your online application will be transmitted via an encrypted connection. Your data will of course only be used for processing your application and will not be shared with third parties.

After the conclusion of the application process, your personal data will be deleted no later than 6 months, unless you have given us your explicit consent to store your data for a longer period. You can withdraw your consent, request data correction, or ask for the deletion of your profile at any time.

Data Retention

We store your personal data only as long as we need it to fulfill the purposes described below and our contractual or legal obligations. If we no longer need your personal data, we will delete it from our systems and records or anonymize it so that you can no longer be identified.

Contact / Inquiries

If you contact us via the contact form on our website, by email, or by phone, we process your provided personal data in our CRM system Hubspot (email, name, phone number, and your inquiry or the associated documents) to process and respond to your inquiry.

For processing and answering your inquiries, we rely on our legitimate interest under Art. 6(1)(f) GDPR, which is to process and respond to your inquiry quickly and to respond to any further questions. If your inquiry leads to an engagement, we process the personal data from your inquiry based on our (pre-)contractual obligations under Art. 6(1)(b) GDPR.

Purpose of Data Processing

We process your data in connection with your inquiries to us for the following purposes:

Data Retention

We store your data related to the handling of your inquiry for a duration of six months to respond to follow-up questions. Longer storage only occurs if it leads to an engagement, due to legal retention obligations, or for defense in case of potential legal disputes.

Transfer to Third Parties

We use service providers based in the European Union who process data on our behalf (e.g., accounting, CRM systems, software development, server hosting). In these cases, the information will be shared with these third parties to facilitate further processing. The external service providers are carefully selected and regularly reviewed to ensure that your privacy is protected.

The service providers are contractually bound and process your data exclusively in accordance with our instructions and the applicable data protection laws. In particular, they are required to keep your data strictly confidential and are prohibited from processing the data for any other purposes.

Transfer to Processors

Data is transferred to processors based on Art. 28(1) GDPR.

We do not sell or otherwise market your data to third parties. Data transfer may occur when necessary for the enforcement of terms of use or other agreements. We are also legally obligated to provide certain public authorities with information upon request, such as law enforcement agencies, authorities investigating violations of law, and tax authorities.

Use of Cookies

We use technically necessary cookies on the website to display the website and ensure proper use. Data processing is necessary for data security and preventing abuse and is based on our legitimate interests under Art. 6(1)(f) GDPR in conjunction with § 165(3) TKG. If you voluntarily give consent according to Art. 6(1)(a) GDPR, cookies from Matomo will also be used.

Rights of the Data Subject

You have the right to request information about the personal data we process about you. Additionally, you have the right to correct incorrect data and delete your data (“right to be forgotten”). You may also have the right to restrict the processing of your data and the right to request the data you provided in a structured, commonly used, and machine-readable format (“data portability”).

You have the right to object to the processing of your data at any time for reasons related to your specific situation.

You also have the option to lodge a complaint with a data protection authority. The responsible data protection authority is the Austrian Data Protection Authority, Barichgasse 40-42, 1030 Vienna, Email: dsb@dsb.gv.at, Tel: +43 1 52 152-0.