Data controller
The controller responsible for data processing within the meaning of the General Data Protection Regulation (GDPR) is:
Agravity GmbH
Domgasse 5, 4020 Linz, Austria
Email: office@agravity.io
Phone: +43 660 42 43 202
For questions about data protection, you can reach us directly using the contact details above.
Data protection officer
For questions about data protection, our external data protection officer is also available to you:
Jürgen Hutsteiner
pribizz consulting
CIPP/E (Certified Information Privacy Professional/Europe)
He can be reached via the Agravity GmbH contact details listed above.
Principles of processing
We process personal data only to the extent necessary to provide this website and its content, or to the extent you voluntarily provide data to us. Depending on the processing activity, the legal bases are Art. 6(1)(a) GDPR (consent), Art. 6(1)(b) GDPR (contract or pre-contractual request), and Art. 6(1)(f) GDPR (legitimate interest in the secure and functional operation of the website).
Hosting & server log files
This website is hosted on Microsoft Azure. When you visit the website, the hosting operation automatically collects certain information that your browser transmits, for technical reasons. This typically includes IP address, date and time of the request, page accessed, and browser and operating system used. These server log files are processed exclusively to ensure secure, uninterrupted operation (Art. 6(1)(f) GDPR) and are not combined with other data sources.
Images, videos & CDN
Product images and videos on this website are delivered via a Content Delivery Network (CDN) belonging to Agravity GlobalDAM, our own Digital Asset Management platform. Loading this content technically requires your IP address to be transmitted to infrastructure operated on Microsoft Azure. This is not a service provided by an external third party, but delivery infrastructure operated by Agravity itself.
Contacting us
This website offers two ways to get in touch:
Appointment booking ("Book a demo"): This button links to our appointment booking tool (Microsoft Outlook Bookings) as part of our Microsoft 365 account. Clicking it opens the booking page in a new tab on Microsoft's servers; our website itself does not transmit any data and does not set any cookies for this purpose. On the booking page, you can select an appointment and provide your name, email address, and optionally further details. This data is collected via Microsoft 365 as our processor and used by us to arrange and prepare for the appointment (Art. 6(1)(b) or (f) GDPR). Microsoft's own privacy policy additionally applies to the operation of the booking page itself.
Email, phone, and contact page: All other contact options open your own email program or phone app with a pre-filled address. The website itself does not transmit any data to us or to third parties in doing so: the message is only sent once you use your own email program. We process any data you provide in such an email or call (e.g. name, contact details, content of your inquiry) to handle your inquiry, on the same legal basis.
Recipients & third countries
Your data is not shared with third parties without separate consent, unless we are legally obliged to do so. Insofar as we use service providers to deliver our services (in particular Microsoft for hosting infrastructure and our appointment booking tool), they are contractually bound to comply with data protection requirements (data processing agreements pursuant to Art. 28 GDPR). Operations take place within a region of the European Union; no transfer to third countries outside the EU/EEA occurs in the regular operation of this website.
If you consent to Google Analytics, your data is processed by Google Ireland Limited (EU); a transfer to Google LLC in the USA cannot be ruled out. This transfer relies on the European Commission's adequacy decision for the EU-US Data Privacy Framework, which Google has joined as a certified company. We continuously monitor the legal situation regarding this framework and will update this policy as needed.
Retention period
Personal data is deleted or anonymized as soon as the purpose of its processing no longer applies, unless statutory retention obligations (e.g. under corporate or tax law) require otherwise. Server log files are automatically deleted after a short period required for the security of operations.
Your rights
Under the GDPR, you have the following rights:
- Access to the personal data we process about you (Art. 15 GDPR)
- Rectification of inaccurate data (Art. 16 GDPR)
- Erasure of your data (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Objection to processing (Art. 21 GDPR)
- Withdrawal of consent already given, with effect for the future (Art. 7(3) GDPR)
An informal message to the contact address listed above is sufficient to exercise these rights.
Right to lodge a complaint
If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with the Austrian data protection authority (www.dsb.gv.at) or another competent supervisory authority.
Changes to this policy
We update this privacy policy whenever the data processed or legal requirements change for example, when using new tools such as analytics or marketing tools. The current version can always be found on this page.